Hi,
I am running a dovecot server and have set up an external monitoring,
where every five minutes a login with SSL on port 993 is done. I usually
get once a day an error "connection reset by peer - SSL connect",
which
goes away until the next monitor is executed.
Initially I thought that raising the mail_max_userip_connections in
protocol imap in 20-imap.conf to 256 should do the trick - but the error
stays.
What could be the reason for this error and which configuration values
could be changed in order to avoid this error?
I read a lot of different suggestions - but did not find a plausible
explanation and recommendation.
Thanks in advance!
--
Cheers, \\|//
Vince (o o)
----------------------------ooO-(_)-Ooo-------------------------
''' (o)_(o) [ ][0][ ]
??? (=?o?=) World Domination by Copy and Paste [ ][ ][0]
- (")_(") [0][0][0]
() ascii ribbon campaign - against html e-mail
/\ www.asciiribbon.org - against proprietary attachments
Ooo.
---------------------------.ooO----( )-------------------------
( ) (_/
\_)
Hi, [Vince42] - [2016-07-22 00:19]> I am running a dovecot server and have set up an external monitoring, > where every five minutes a login with SSL on port 993 is done. I usually > get once a day an error "connection reset by peer - SSL connect", which > goes away until the next monitor is executed. > > Initially I thought that raising the mail_max_userip_connections in > protocol imap in 20-imap.conf to 256 should do the trick - but the error > stays. > > What could be the reason for this error and which configuration values > could be changed in order to avoid this error? > > I read a lot of different suggestions - but did not find a plausible > explanation and recommendation.Anybody? Sorry for bumping this thread ... but I am really desperately looking for some configuration issues to scrutinize ... -- Cheers, \\|// Vince (o o) ----------------------------ooO-(_)-Ooo------------------------- ''' (o)_(o) [ ][0][ ] ??? (=?o?=) World Domination by Copy and Paste [ ][ ][0] - (")_(") [0][0][0] () ascii ribbon campaign - against html e-mail /\ www.asciiribbon.org - against proprietary attachments Ooo. ---------------------------.ooO----( )------------------------- ( ) (_/ \_)
Am 23. Juli 2016 14:24:01 MESZ, schrieb Vince42 <dovecot at mx24.net>:>Hi, > >[Vince42] - [2016-07-22 00:19] >> I am running a dovecot server and have set up an external monitoring, >> where every five minutes a login with SSL on port 993 is done. I >usually >> get once a day an error "connection reset by peer - SSL connect", >which >> goes away until the next monitor is executed. >> >> Initially I thought that raising the mail_max_userip_connections in >> protocol imap in 20-imap.conf to 256 should do the trick - but the >error >> stays. >> >> What could be the reason for this error and which configuration >values >> could be changed in order to avoid this error? >> >> I read a lot of different suggestions - but did not find a plausible >> explanation and recommendation. > >Anybody? Sorry for bumping this thread ... but I am really desperately >looking for some configuration issues to scrutinize ...I don't really have a suggestion for configuration but i think maybe some logs and the output of doveconf -n would help. Is the error definitly from your monitoring ip? -- Christian
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Fri, 22 Jul 2016, Vince42 wrote:> I am running a dovecot server and have set up an external monitoring, > where every five minutes a login with SSL on port 993 is done. I usually > get once a day an error "connection reset by peer - SSL connect", which > goes away until the next monitor is executed.that looks like a basic networking issue to me. Do you have logs how many users try to connect at this time? Is it always the same time range? Is the server load very high? - -- Steffen Kaiser -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQEVAwUBV5WwZnz1H7kL/d9rAQIfcggAyOBqarR7dZw22AUSyqh3WqJh3tNKhtYn jVvROFO29mPjxLzM7UlGp/R6Ys2frJgr5Gsdo+Ep/Eaa05SJwHDo0M6rlGabwLLw SDUqfdZA7eqSMIUn62S1knZYnScjkcXUQnYqLkgViIKt0XvSYiRDOcXpgtA4ZXP6 JkN0l2KTOC46IACSnh1R4p+hbo+A3bHBix78Mx+4vrkYhK1/17l9m1kztG2WkA8U cNgAPsUIxeJZJLlZqmYbadWpQZS2D2p3qWhK42Zt0yWZ5N1XwMp7qS4I5YQWYaxO gnoNJP7ms26tNh13oO6zHmdsB4z4gp1/1q/5IxbqCnoqGT5wJTDcZQ==7PLg -----END PGP SIGNATURE-----
Hi, [Steffen Kaiser] - [2016-07-25 08:23]>> I am running a dovecot server and have set up an external monitoring, >> where every five minutes a login with SSL on port 993 is done. I usually >> get once a day an error "connection reset by peer - SSL connect", which >> goes away until the next monitor is executed.> that looks like a basic networking issue to me. > Do you have logs how many users try to connect at this time? Is it > always the same time range? Is the server load very high?My server has nice specs (in fact a 30 times lower scaled server never had this kind of problems), I also don't host many domains and users, therefore I doubt that some kind of limit might be touched. I also suspected some internal system load, but unfortunately the error occurs arbitrarily, which makes me think that no scheduled process is responsible for this. I also ran 'top' during such an event without any obvious load tasks. The system statistics also show no weird peaks. I read about the "running out of random" phenomenon, but during such an event there were still enough resources random-wise. Could it be that I need to offer more login processes or that I should raise some of my configuration values? The mail_max_userip_connections does not seem to solve the problem. -- Cheers, \\|// Vince (o o) ----------------------------ooO-(_)-Ooo------------------------- ''' (o)_(o) [ ][0][ ] ??? (=?o?=) World Domination by Copy and Paste [ ][ ][0] - (")_(") [0][0][0] () ascii ribbon campaign - against html e-mail /\ www.asciiribbon.org - against proprietary attachments Ooo. ---------------------------.ooO----( )------------------------- ( ) (_/ \_)