Aki Tuomi aki.tuomi@dovecot.fi wrote:

On 06.06.2017 14:11, Olaf Hopp wrote:

...

On 06/05/2017 11:05 AM, Angel L. Mateo wrote:

...

 I have updated my dovecot proxy servers from 2.2.28 to 2.2.30.

Since the upgrade I'm having the error:

Jun 5 10:54:51 musio12 dovecot: auth: Fatal: master: service(auth): child 63632 killed with signal 11 (core not dumped)

+1.

We have identified a bug in auth process, and are working with a fix.

This is the 1 line context around the same thing I am seeing, if it helps. It seems to happen with brute force scanning

Jun  6 06:13:30 server dovecot: imap-login: Warning: Auth connection closed with 1 pending requests (max 7 secs, pid=20675
, EOF)
Jun  6 06:13:30 server dovecot: auth: Fatal: master: service(auth): child 20676 killed with signal 11 (core not dumped - set service auth { drop_priv_before_exec=yes })
Jun  6 06:13:30 server dovecot: imap-login: Disconnected (auth failed, 1 attempts in 7 secs): user=<{dead@account}>, method=PLAIN, rip=5.188.11.11, lip={my-ip}, TLS, session=<EpJbYkpRInsFvAsL>

Bots aren't known to exit cleanly, so it's probably related to prematurely dropped connections. Apart from that, I'm not seeing this with real users.

Joseph Tam jtam.home@gmail.com