[Dovecot] mail_max_userip_connections
Hi
Sometimes, I hit mail_max_userip_connections limit. As far as I know I'm the only person that does, but I would like to find out why before someone else hits the limit.
Is there a command available that can list the connections per IP? I'd like to find out which client is causing this. Or do you have a better suggestion? Should I just raise the limit (it's still at the default 10, which I never changed). What are the implications of this.
Thanks.
Simon
Le 12 mars 2013 à 14:43, Simon Brereton a écrit :
Hi
[...]
Is there a command available that can list the connections per IP?
Hello Simon,
You could have a look at 'doveadm who' (http://wiki2.dovecot.org/Tools/Doveadm/Who).
HTH, Axel
On 12 Mar 2013 15:31, "Axel Luttgens" AxelLuttgens@swing.be wrote:
Le 12 mars 2013 à 14:43, Simon Brereton a écrit :
Hi
[...]
Is there a command available that can list the connections per IP?
Hello Simon,
You could have a look at 'doveadm who' (
http://wiki2.dovecot.org/Tools/Doveadm/Who).
I really should get around to upgrading..
Simon
Le 12 mars 2013 à 16:21, Simon Brereton a écrit :
On 12 Mar 2013 15:31, "Axel Luttgens" wrote:
[...] You could have a look at 'doveadm who' (http://wiki2.dovecot.org/Tools/Doveadm/Who).
I really should get around to upgrading..
:-)
Now, there are still the more generic ways, yet probably requiring a bit more guesswork; for example, assuming binary lsof is available on your system:
sudo lsof -n -i :imap,pop3
On the other hand, I don't remember exactly what happens when that mail_max_userip_connections limit is hit; doesn't Dovecot log some hint that would allow you to track the "culprit"?
Axel
On 12 March 2013 16:59, Axel Luttgens AxelLuttgens@swing.be wrote:
Le 12 mars 2013 à 16:21, Simon Brereton a écrit :
On 12 Mar 2013 15:31, "Axel Luttgens" wrote:
[...] You could have a look at 'doveadm who' (http://wiki2.dovecot.org/Tools/Doveadm/Who).
I really should get around to upgrading..
:-)
Now, there are still the more generic ways, yet probably requiring a bit more guesswork; for example, assuming binary lsof is available on your system:
sudo lsof -n -i :imap,pop3
Handy. Thanks. Of course it only works in the instant I get the message (which isn't always apparent from the client).
On the other hand, I don't remember exactly what happens when that mail_max_userip_connections limit is hit; doesn't Dovecot log some hint that would allow you to track the "culprit"?
Well, not that I could see - that's why I asked on the list :) That's not to say it isn't there, but all I see in the log is: Mar 12 13:47:12 mail dovecot: imap-login: Maximum number of connections from user+IP exceeded (mail_max_userip_connections): user=simon@example.net, method=PLAIN, rip=127.0.0.1, secured
I suppose this implies it's the webmail client., but even having that open on two different machines shouldn't open 10 connections. Should it?
Simon
Le 12 mars 2013 à 17:18, Simon Brereton simon.buongiorno@gmail.com a écrit :
[...]
I suppose this implies it's the webmail client.,
So, to be sure: the webmail server is running on the same box as the one running Dovecot?
but even having that open on two different machines shouldn't open 10 connections. Should it?
I tended to believe that usually, a webmail application tends to open/close connections sequentially, or to consecutively select relevant mailboxes within a single connection. But who knows... Which webmail app have you installed?
When connecting to/making use of the webmail, you should at least see connect/disconnect entries written in Dovecot's log. Do they tend to overlap?
Axel
On 12 March 2013 18:03, Axel Luttgens AxelLuttgens@swing.be wrote:
Le 12 mars 2013 à 17:18, Simon Brereton simon.buongiorno@gmail.com a écrit :
[...]
I suppose this implies it's the webmail client.,
So, to be sure: the webmail server is running on the same box as the one running Dovecot?
Si. Yes.
but even having that open on two different machines shouldn't open 10 connections. Should it?
I tended to believe that usually, a webmail application tends to open/close connections sequentially, or to consecutively select relevant mailboxes within a single connection. But who knows... Which webmail app have you installed?
I believe that as well, especially as I don't have tons of folders (some of my users do). I'm using Horde.
When connecting to/making use of the webmail, you should at least see connect/disconnect entries written in Dovecot's log. Do they tend to overlap?
With two machine and two phones, it's difficult to keep track of that
- but I will try. To avoid that I was hoping there was a way to print out in table form which connections for which user were from where. And so now I have another reason to upgrade. I need to fix the mess I made with postfix first though.
Simon
On 03/13/13 05:37 AM, Simon Brereton wrote:
On 12 March 2013 18:03, Axel Luttgens AxelLuttgens@swing.be wrote:
Le 12 mars 2013 à 17:18, Simon Brereton simon.buongiorno@gmail.com a écrit :
[...]
I suppose this implies it's the webmail client., So, to be sure: the webmail server is running on the same box as the one running Dovecot? Si. Yes.
but even having that open on two different machines shouldn't open 10 connections. Should it? I tended to believe that usually, a webmail application tends to open/close connections sequentially, or to consecutively select relevant mailboxes within a single connection. But who knows... Which webmail app have you installed? I believe that as well, especially as I don't have tons of folders (some of my users do). I'm using Horde.
Try imapproxy for Horde. It would keep a single connection to Dovecot open during a webmail session. http://www.horde.org/apps/imp/docs/PERFORMANCE
Since Horde and Dovecot are on the same server, you can configure imapproxy on a different port, e.g. 1143. Horde -> imapproxyd (port 1143) -> Dovecot (port 143)
participants (3)
-
Axel Luttgens
-
Oscar del Rio
-
Simon Brereton