Jason
2014-Apr-25  02:29 UTC
[Dovecot] dovecot temporary suspension all of pop3 login about 5 minutes
Dear All?
 
When the user login P0P3 more than 10 times in 1 minute that the dovecot
temporary suspension all of pop3 login about 5 minutes.
How to disable the setting for dovecot.
 
Mail Log:
Apr 24 16:11:14 mww dovecot: pop3-login: Login: user=<scan>, method=PLAIN,
rip=192.168.16.84, lip=192.168.16.159, mpid=8767,
session=<5USPZMX3/QDAqBBU>
Apr 24 16:11:14 mww dovecot: pop3(scan): Disconnected: Logged out top=0/0,
retr=0/0, del=0/0, size=0
Apr 24 16:11:15 mww dovecot: auth-worker: Error: no talloc stackframe at
../source3/param/loadparm.c:4864, leaking memory
Apr 24 16:11:15 mww dovecot: pop3-login: Login: user=<scan>, method=PLAIN,
rip=192.168.16.84, lip=192.168.16.159, mpid=8769,
session=<GzyeZMX3/wDAqBBU>
Apr 24 16:11:15 mww dovecot: pop3(scan): Disconnected: Logged out top=0/0,
retr=0/0, del=0/0, size=0
Apr 24 16:11:16 mww dovecot: auth-worker: Error: no talloc stackframe at
../source3/param/loadparm.c:4864, leaking memory
Apr 24 16:11:16 mww dovecot: pop3-login: Login: user=<scan>, method=PLAIN,
rip=192.168.16.84, lip=192.168.16.159, mpid=8771,
session=<bGSsZMX3AQDAqBBU>
Apr 24 16:11:16 mww dovecot: pop3(scan): Disconnected: Logged out top=0/0,
retr=0/0, del=0/0, size=0
Apr 24 16:11:17 mww dovecot: auth-worker: Error: no talloc stackframe at
../source3/param/loadparm.c:4864, leaking memory
Apr 24 16:11:17 mww dovecot: pop3-login: Login: user=<scan>, method=PLAIN,
rip=192.168.16.84, lip=192.168.16.159, mpid=8773,
session=<ASq6ZMX3AwDAqBBU>
Apr 24 16:11:17 mww dovecot: pop3(scan): Disconnected: Logged out top=0/0,
retr=0/0, del=0/0, size=0
Apr 24 16:11:18 mww dovecot: auth-worker: Error: no talloc stackframe at
../source3/param/loadparm.c:4864, leaking memory
Apr 24 16:11:18 mww dovecot: pop3-login: Login: user=<scan>, method=PLAIN,
rip=192.168.16.84, lip=192.168.16.159, mpid=8775,
session=<Ux3JZMX3BQDAqBBU>
Apr 24 16:11:18 mww dovecot: pop3(scan): Disconnected: Logged out top=0/0,
retr=0/0, del=0/0, size=0
Apr 24 16:11:23 mww dovecot: pop3-login: Disconnected (auth failed, 1 attempts
in 4 secs): user=<scan>, method=PLAIN, rip=192.168.16.84,
lip=192.168.16.159, session=<kP3WZMX3BwDAqBBU>
Apr 24 16:12:04 mww dovecot: pop3-login: Disconnected (auth failed, 1 attempts
in 4 secs): user=<jason>, method=PLAIN, rip=192.168.16.59,
lip=192.168.16.159, session=<WX9NZ8X3pwDAqBA7>
 
Dovecot v2.2.9 
 
# 2.2.9: /etc/dovecot/dovecot.conf
doveconf: Warning: NOTE: You can get a new clean config file with: 
doveconf -n > dovecot-new.conf
doveconf: Warning: Obsolete setting in /etc/dovecot/dovecot.conf:99: 
ssl_disable has been renamed to ssl
# OS: Linux 3.13.0-24-generic x86_64 Ubuntu 14.04 LTS disable_plaintext_auth =
no mail_location = mbox:~/mail:INBOX=/var/mail/%u namespace inbox {
   inbox = yes
   location 
   mailbox Drafts {
     special_use = \Drafts
   }
   mailbox Junk {
     special_use = \Junk
   }
   mailbox Sent {
     special_use = \Sent
   }
   mailbox "Sent Messages" {
     special_use = \Sent
   }
   mailbox Trash {
     special_use = \Trash
   }
   prefix 
}
passdb {
   driver = pam
}
plugin {
   sieve = ~/.dovecot.sieve
   sieve_dir = ~/sieve
}
protocols = " imap pop3"
ssl = no
ssl_cert = </etc/dovecot/dovecot.pem
ssl_key = </etc/dovecot/private/dovecot.pem userdb {
   driver = passwd
}
protocol imap {
   mail_max_userip_connections = 100
}
protocol pop3 {
   mail_max_userip_connections = 100
}
 
 
Best regards,
 
Jason
Steffen Kaiser
2014-Apr-25  07:14 UTC
[Dovecot] dovecot temporary suspension all of pop3 login about 5 minutes
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Fri, 25 Apr 2014, Jason wrote:> When the user login P0P3 more than 10 times in 1 minute that the dovecot temporary suspension all of pop3 login about 5 minutes. > > How to disable the setting for dovecot.> Apr 24 16:11:14 mww dovecot: pop3-login: Login: user=<scan>, method=PLAIN, rip=192.168.16.84, lip=192.168.16.159, mpid=8767, session=<5USPZMX3/QDAqBBU> > Apr 24 16:11:14 mww dovecot: pop3(scan): Disconnected: Logged out top=0/0, retr=0/0, del=0/0, size=0 > Apr 24 16:11:15 mww dovecot: auth-worker: Error: no talloc stackframe at ../source3/param/loadparm.c:4864, leaking memory> # 2.2.9: /etc/dovecot/dovecot.conf> doveconf: Warning: Obsolete setting in /etc/dovecot/dovecot.conf:99: > ssl_disable has been renamed to ssl...> ssl = noCheck out last log line, it's a bug. First try update your config, then upgrade to v2.2.13, then let us know if your bug is fixed. BTW: I do not find no loadparm.c in v2.2.12. http://ubuntuforums.org/showthread.php?t=2214042 http://osdir.com/ml/ubuntu-bugs/2014-04/msg16458.html http://ubuntuforums.org/showthread.php?t=2218612 Looks like an Ubuntu bug with authentifications. - -- Steffen Kaiser -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iQEVAwUBU1oLSnz1H7kL/d9rAQKprwf/euB02Q0afRd4KrRshgNhdwjoDPQKNFW7 2tuWTBEoSvYujqLKVKQOONkkZOQZpy+M49AS7tJh5+0ZhsmKZKZsLLWW7pJE+fBH 6M6sZ0h2qH1HP0g9ONx0jr1aDPzNRhPtEIzZyvIgRjvg5Own2wtNLSJvncasoVLM Wh4G5K67cH6CUkufnnoG6fm7unDKZm+JxXks0GuLZ62nqW9ID/KZelfqZHH8LWLN iM0uTbW58wcF024aAs8Asa+fVGIr4NXC/OhFM0gl9B7K0opkzr58N30kE+KDAM3a GU1H+ndTn+pokTAhB7t6a3FJoXfHB2cc9hK22e6OwirtL4HmobzuPg==GNDN -----END PGP SIGNATURE-----
Steffen Kaiser
2014-Apr-25  07:14 UTC
Re: dovecot temporary suspension all of pop3 login about 5 minutes
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Fri, 25 Apr 2014, Jason wrote:> When the user login P0P3 more than 10 times in 1 minute that the dovecot temporary suspension all of pop3 login about 5 minutes. > > How to disable the setting for dovecot.> Apr 24 16:11:14 mww dovecot: pop3-login: Login: user=<scan>, method=PLAIN, rip=192.168.16.84, lip=192.168.16.159, mpid=8767, session=<5USPZMX3/QDAqBBU> > Apr 24 16:11:14 mww dovecot: pop3(scan): Disconnected: Logged out top=0/0, retr=0/0, del=0/0, size=0 > Apr 24 16:11:15 mww dovecot: auth-worker: Error: no talloc stackframe at ../source3/param/loadparm.c:4864, leaking memory> # 2.2.9: /etc/dovecot/dovecot.conf> doveconf: Warning: Obsolete setting in /etc/dovecot/dovecot.conf:99: > ssl_disable has been renamed to ssl...> ssl = noCheck out last log line, it's a bug. First try update your config, then upgrade to v2.2.13, then let us know if your bug is fixed. BTW: I do not find no loadparm.c in v2.2.12. http://ubuntuforums.org/showthread.php?t=2214042 http://osdir.com/ml/ubuntu-bugs/2014-04/msg16458.html http://ubuntuforums.org/showthread.php?t=2218612 Looks like an Ubuntu bug with authentifications. - -- Steffen Kaiser -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iQEVAwUBU1oLSnz1H7kL/d9rAQKprwf/euB02Q0afRd4KrRshgNhdwjoDPQKNFW7 2tuWTBEoSvYujqLKVKQOONkkZOQZpy+M49AS7tJh5+0ZhsmKZKZsLLWW7pJE+fBH 6M6sZ0h2qH1HP0g9ONx0jr1aDPzNRhPtEIzZyvIgRjvg5Own2wtNLSJvncasoVLM Wh4G5K67cH6CUkufnnoG6fm7unDKZm+JxXks0GuLZ62nqW9ID/KZelfqZHH8LWLN iM0uTbW58wcF024aAs8Asa+fVGIr4NXC/OhFM0gl9B7K0opkzr58N30kE+KDAM3a GU1H+ndTn+pokTAhB7t6a3FJoXfHB2cc9hK22e6OwirtL4HmobzuPg==GNDN -----END PGP SIGNATURE-----
Jason
2014-Apr-25  07:23 UTC
[Dovecot] dovecot temporary suspension all of pop3 login about 5 minutes
Dear Steffen Kaiser, Thank you very much! Best regards, Jason -----Original Message----- From: Steffen Kaiser [mailto:skdovecot at smail.inf.fh-brs.de] Sent: Friday, April 25, 2014 3:14 PM To: Jason Cc: dovecot at dovecot.org Subject: Re: [Dovecot] dovecot temporary suspension all of pop3 login about 5 minutes -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Fri, 25 Apr 2014, Jason wrote:> When the user login P0P3 more than 10 times in 1 minute that the dovecottemporary suspension all of pop3 login about 5 minutes.> > How to disable the setting for dovecot.> Apr 24 16:11:14 mww dovecot: pop3-login: Login: user=<scan>, > method=PLAIN, rip=192.168.16.84, lip=192.168.16.159, mpid=8767, > session=<5USPZMX3/QDAqBBU> Apr 24 16:11:14 mww dovecot: pop3(scan): > Disconnected: Logged out top=0/0, retr=0/0, del=0/0, size=0 Apr 24 > 16:11:15 mww dovecot: auth-worker: Error: no talloc stackframe at > ../source3/param/loadparm.c:4864, leaking memory> # 2.2.9: /etc/dovecot/dovecot.conf> doveconf: Warning: Obsolete setting in /etc/dovecot/dovecot.conf:99: > ssl_disable has been renamed to ssl...> ssl = noCheck out last log line, it's a bug. First try update your config, then upgrade to v2.2.13, then let us know if your bug is fixed. BTW: I do not find no loadparm.c in v2.2.12. http://ubuntuforums.org/showthread.php?t=2214042 http://osdir.com/ml/ubuntu-bugs/2014-04/msg16458.html http://ubuntuforums.org/showthread.php?t=2218612 Looks like an Ubuntu bug with authentifications. - -- Steffen Kaiser -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iQEVAwUBU1oLSnz1H7kL/d9rAQKprwf/euB02Q0afRd4KrRshgNhdwjoDPQKNFW7 2tuWTBEoSvYujqLKVKQOONkkZOQZpy+M49AS7tJh5+0ZhsmKZKZsLLWW7pJE+fBH 6M6sZ0h2qH1HP0g9ONx0jr1aDPzNRhPtEIzZyvIgRjvg5Own2wtNLSJvncasoVLM Wh4G5K67cH6CUkufnnoG6fm7unDKZm+JxXks0GuLZ62nqW9ID/KZelfqZHH8LWLN iM0uTbW58wcF024aAs8Asa+fVGIr4NXC/OhFM0gl9B7K0opkzr58N30kE+KDAM3a GU1H+ndTn+pokTAhB7t6a3FJoXfHB2cc9hK22e6OwirtL4HmobzuPg==GNDN -----END PGP SIGNATURE-----
Jason
2014-Apr-28  09:07 UTC
[Dovecot] dovecot temporary suspension all of pop3 login about 5 minutes
Dear Steffen Kaiser, I had fixed the problem after upgrade to v2.2.12 . Best regards, Jason -----Original Message----- From: dovecot [mailto:dovecot-bounces at dovecot.org] On Behalf Of Steffen Kaiser Sent: Friday, April 25, 2014 3:14 PM To: Jason Cc: dovecot at dovecot.org Subject: Re: [Dovecot] dovecot temporary suspension all of pop3 login about 5 minutes -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Fri, 25 Apr 2014, Jason wrote:> When the user login P0P3 more than 10 times in 1 minute that the dovecottemporary suspension all of pop3 login about 5 minutes.> > How to disable the setting for dovecot.> Apr 24 16:11:14 mww dovecot: pop3-login: Login: user=<scan>, > method=PLAIN, rip=192.168.16.84, lip=192.168.16.159, mpid=8767, > session=<5USPZMX3/QDAqBBU> Apr 24 16:11:14 mww dovecot: pop3(scan): > Disconnected: Logged out top=0/0, retr=0/0, del=0/0, size=0 Apr 24 > 16:11:15 mww dovecot: auth-worker: Error: no talloc stackframe at > ../source3/param/loadparm.c:4864, leaking memory> # 2.2.9: /etc/dovecot/dovecot.conf> doveconf: Warning: Obsolete setting in /etc/dovecot/dovecot.conf:99: > ssl_disable has been renamed to ssl...> ssl = noCheck out last log line, it's a bug. First try update your config, then upgrade to v2.2.13, then let us know if your bug is fixed. BTW: I do not find no loadparm.c in v2.2.12. http://ubuntuforums.org/showthread.php?t=2214042 http://osdir.com/ml/ubuntu-bugs/2014-04/msg16458.html http://ubuntuforums.org/showthread.php?t=2218612 Looks like an Ubuntu bug with authentifications. - -- Steffen Kaiser -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iQEVAwUBU1oLSnz1H7kL/d9rAQKprwf/euB02Q0afRd4KrRshgNhdwjoDPQKNFW7 2tuWTBEoSvYujqLKVKQOONkkZOQZpy+M49AS7tJh5+0ZhsmKZKZsLLWW7pJE+fBH 6M6sZ0h2qH1HP0g9ONx0jr1aDPzNRhPtEIzZyvIgRjvg5Own2wtNLSJvncasoVLM Wh4G5K67cH6CUkufnnoG6fm7unDKZm+JxXks0GuLZ62nqW9ID/KZelfqZHH8LWLN iM0uTbW58wcF024aAs8Asa+fVGIr4NXC/OhFM0gl9B7K0opkzr58N30kE+KDAM3a GU1H+ndTn+pokTAhB7t6a3FJoXfHB2cc9hK22e6OwirtL4HmobzuPg==GNDN -----END PGP SIGNATURE-----