<!doctype html> <html> <head> <meta charset="UTF-8"> </head> <body> <div> Is your server behind proxy maybe? Can you see in logs that you get different IPs? </div> <div> <br> </div> <div> Maybe check with `doveadm who` how many connections you have? </div> <div> <br> </div> <div> Aki </div> <blockquote type="cite"> <div> On 27/02/2020 22:44 Esteban L < <a href="mailto:esteban@little-beak.com">esteban@little-beak.com</a>> wrote: </div> <div> <br> </div> <div> <br> </div> <div> I have tried a lot of different things, still no success. =( </div> <div> <br> </div> <div> here is my dove -n if anyone could help that would be great: </div> <div> <br> </div> <div> <br> </div> <div> # 2.2.27 (c0f36b0): /etc/dovecot/dovecot.conf </div> <div> # Pigeonhole version 0.4.16 (fed8554) </div> <div> # OS: Linux 4.9.0-12-amd64 x86_64 Debian 9.12 </div> <div> auth_debug = yes </div> <div> auth_debug_passwords = yes </div> <div> auth_mechanisms = plain login </div> <div> auth_verbose = yes </div> <div> auth_verbose_passwords = yes </div> <div> mail_home = /var/mail/vmail/%d/%n </div> <div> mail_location = maildir:~/Mail </div> <div> mail_max_userip_connections = 500 </div> <div> mail_plugins = " quota" </div> <div> mail_privileged_group = vmail </div> <div> managesieve_notify_capability = mailto </div> <div> managesieve_sieve_capability = fileinto reject envelope </div> <div> encoded-character vacation subaddress comparator-i;ascii-numeric </div> <div> relational regex imap4flags copy include variables body enotify </div> <div> environment mailbox date index ihave duplicate mime foreverypart extracttext </div> <div> namespace inbox { </div> <div> inbox = yes </div> <div> location </div> <div> mailbox Archive { </div> <div> auto = subscribe </div> <div> special_use = \Archive </div> <div> } </div> <div> mailbox Drafts { </div> <div> auto = subscribe </div> <div> special_use = \Drafts </div> <div> } </div> <div> mailbox Junk { </div> <div> auto = subscribe </div> <div> special_use = \Junk </div> <div> } </div> <div> mailbox Sent { </div> <div> auto = subscribe </div> <div> special_use = \Sent </div> <div> } </div> <div> mailbox "Sent Messages" { </div> <div> special_use = \Sent </div> <div> } </div> <div> mailbox Trash { </div> <div> auto = subscribe </div> <div> special_use = \Trash </div> <div> } </div> <div> prefix </div> <div> } </div> <div> passdb { </div> <div> args = /etc/dovecot/dovecot-sql.conf.ext </div> <div> driver = sql </div> <div> } </div> <div> plugin { </div> <div> quota = maildir:User quota </div> <div> quota_grace = 10%% </div> <div> quota_rule = *:storage=10G </div> <div> quota_rule2 = Trash:storage=+1G </div> <div> quota_status_overquota = 552 5.2.2 Mailbox is full </div> <div> quota_warning = storage=95%% quota-warning 95 %u </div> <div> quota_warning2 = storage=80%% quota-warning 80 %u </div> <div> sieve = ~/.dovecot.sieve </div> <div> sieve_after = /etc/dovecot/sieve/spamfilter.sieve </div> <div> sieve_dir = ~/sieve </div> <div> } </div> <div> protocols = " imap lmtp sieve" </div> <div> service auth { </div> <div> unix_listener /var/spool/postfix/private/auth { </div> <div> group = postfix </div> <div> mode = 0666 </div> <div> user = postfix </div> <div> } </div> <div> } </div> <div> service imap-login { </div> <div> inet_listener imaps { </div> <div> port = 993 </div> <div> ssl = yes </div> <div> } </div> <div> } </div> <div> service lmtp { </div> <div> unix_listener /var/spool/postfix/private/dovecot-lmtp { </div> <div> group = postfix </div> <div> mode = 0600 </div> <div> user = postfix </div> <div> } </div> <div> } </div> <div> ssl = required </div> <div> ssl_cert = </etc/letsencrypt/live/little-beak.com/fullchain.pem </div> <div> ssl_key = # hidden, use -P to show it </div> <div> userdb { </div> <div> args = /etc/dovecot/dovecot-sql.conf.ext </div> <div> driver = sql </div> <div> } </div> <div> protocol lmtp { </div> <div> mail_plugins = " quota sieve" </div> <div> postmaster_address = <a href="mailto:*****@little-beak.com">*****@little-beak.com</a> </div> <div> } </div> <div> protocol lda { </div> <div> mail_plugins = " quota sieve" </div> <div> } </div> <div> protocol imap { </div> <div> mail_max_userip_connections = 500 </div> <div> mail_plugins = " quota imap_quota" </div> <div> } </div> <div> protocol sieve { </div> <div> mail_max_userip_connections = 500 </div> <div> } </div> <div> <br> </div> <div> <br> </div> <div> On 27.02.20 18:54, Esteban L wrote: </div> <blockquote type="cite"> <div> I have been haunted by the following error message or months, that we </div> <div> see using Thunderbird. </div> </blockquote> <blockquote type="cite"> <div> Unable to connect to your IMAP server. </div> </blockquote> <blockquote type="cite"> <div> You may have exceeded the maximum number of connections to this server. </div> <div> If so, use the Advanced IMAP Server Settings dialogue to reduce the </div> <div> number of cached connections. </div> </blockquote> <blockquote type="cite"> <div> If I change my location, via a VPN, the error message goes away and I </div> <div> can connect. </div> </blockquote> <blockquote type="cite"> <div> I have edited my /etc/dovcot/conf.d/20-imap.conf file by adding the </div> <div> following: </div> </blockquote> <div> > </div> <blockquote type="cite"> <div> protocol imap { </div> <div> # Space separated list of plugins to load (default is global </div> <div> mail_plugins). </div> <div> mail_plugins = $mail_plugins imap_quota </div> </blockquote> <blockquote type="cite"> <div> # Maximum number of IMAP connections allowed for a user from each IP </div> <div> address. </div> <div> # NOTE: The username is compared case-sensitively. </div> <div> mail_max_userip_connections = 500 </div> <div> } </div> </blockquote> <div> > </div> <blockquote type="cite"> <div> And, I still get the error message. I know myself, I have about 8-9 </div> <div> accounts, some with as many as 10 folders (I know each one count's as </div> <div> it's own mailbox), as does my partner--who would access the internet </div> <div> from my IP. </div> </blockquote> <blockquote type="cite"> <div> Does that number really have to be like 10,000, or something? If so, why </div> <div> does it start out so small in the first place. If not, what else could I </div> <div> do to avoid this message going forward?? </div> </blockquote> <div> > </div> <div> > </div> <div> > </div> </blockquote> <div> <br> </div> <div class="io-ox-signature"> <pre>--- Aki Tuomi</pre> </div> </body> </html>
It's not behind a proxy (unless the router is acting as a proxy?). Could it be that my router is doing some Hairpin NAT tomfoolery? The router is generic, so I run into that from time to time with my webserver. I tried doveadm who, but didn't see anything too peculiar. There is the expect half dozen or so users on common IPs. On 27.02.20 21:49, Aki Tuomi wrote:> Is your server behind proxy maybe? Can you see in logs that you get > different IPs?? > > Maybe check with `doveadm who` how many connections you have? > > Aki >> On 27/02/2020 22:44 Esteban L < esteban at little-beak.com >> <mailto:esteban at little-beak.com>> wrote: >> >> >> I have tried a lot of different things, still no success. =( >> >> here is my dove -n if anyone could help that would be great: >> >> >> # 2.2.27 (c0f36b0): /etc/dovecot/dovecot.conf >> # Pigeonhole version 0.4.16 (fed8554) >> # OS: Linux 4.9.0-12-amd64 x86_64 Debian 9.12 >> auth_debug = yes >> auth_debug_passwords = yes >> auth_mechanisms = plain login >> auth_verbose = yes >> auth_verbose_passwords = yes >> mail_home = /var/mail/vmail/%d/%n >> mail_location = maildir:~/Mail >> mail_max_userip_connections = 500 >> mail_plugins = " quota" >> mail_privileged_group = vmail >> managesieve_notify_capability = mailto >> managesieve_sieve_capability = fileinto reject envelope >> encoded-character vacation subaddress comparator-i;ascii-numeric >> relational regex imap4flags copy include variables body enotify >> environment mailbox date index ihave duplicate mime foreverypart >> extracttext >> namespace inbox { >> ? inbox = yes >> ? location >> ? mailbox Archive { >> ??? auto = subscribe >> ??? special_use = \Archive >> ? } >> ? mailbox Drafts { >> ??? auto = subscribe >> ??? special_use = \Drafts >> ? } >> ? mailbox Junk { >> ??? auto = subscribe >> ??? special_use = \Junk >> ? } >> ? mailbox Sent { >> ??? auto = subscribe >> ??? special_use = \Sent >> ? } >> ? mailbox "Sent Messages" { >> ??? special_use = \Sent >> ? } >> ? mailbox Trash { >> ??? auto = subscribe >> ??? special_use = \Trash >> ? } >> ? prefix >> } >> passdb { >> ? args = /etc/dovecot/dovecot-sql.conf.ext >> ? driver = sql >> } >> plugin { >> ? quota = maildir:User quota >> ? quota_grace = 10%% >> ? quota_rule = *:storage=10G >> ? quota_rule2 = Trash:storage=+1G >> ? quota_status_overquota = 552 5.2.2 Mailbox is full >> ? quota_warning = storage=95%% quota-warning 95 %u >> ? quota_warning2 = storage=80%% quota-warning 80 %u >> ? sieve = ~/.dovecot.sieve >> ? sieve_after = /etc/dovecot/sieve/spamfilter.sieve >> ? sieve_dir = ~/sieve >> } >> protocols = " imap lmtp sieve" >> service auth { >> ? unix_listener /var/spool/postfix/private/auth { >> ??? group = postfix >> ??? mode = 0666 >> ??? user = postfix >> ? } >> } >> service imap-login { >> ? inet_listener imaps { >> ??? port = 993 >> ??? ssl = yes >> ? } >> } >> service lmtp { >> ? unix_listener /var/spool/postfix/private/dovecot-lmtp { >> ??? group = postfix >> ??? mode = 0600 >> ??? user = postfix >> ? } >> } >> ssl = required >> ssl_cert = </etc/letsencrypt/live/little-beak.com/fullchain.pem >> ssl_key =? # hidden, use -P to show it >> userdb { >> ? args = /etc/dovecot/dovecot-sql.conf.ext >> ? driver = sql >> } >> protocol lmtp { >> ? mail_plugins = " quota sieve" >> ? postmaster_address = *****@little-beak.com >> <mailto:*****@little-beak.com> >> } >> protocol lda { >> ? mail_plugins = " quota sieve" >> } >> protocol imap { >> ? mail_max_userip_connections = 500 >> ? mail_plugins = " quota imap_quota" >> } >> protocol sieve { >> ? mail_max_userip_connections = 500 >> } >> >> >> On 27.02.20 18:54, Esteban L wrote: >>> I have been haunted by the following error message or months, that we >>> see using Thunderbird. >>> Unable to connect to your IMAP server. >>> You may have exceeded the maximum number of connections to this server. >>> If so, use the Advanced IMAP Server Settings dialogue to reduce the >>> number of cached connections. >>> If I change my location, via a VPN, the error message goes away and I >>> can connect. >>> I have edited my /etc/dovcot/conf.d/20-imap.conf file by adding the >>> following: >> > >>> protocol imap { >>> ? # Space separated list of plugins to load (default is global >>> mail_plugins). >>> ? mail_plugins = $mail_plugins imap_quota >>> ? # Maximum number of IMAP connections allowed for a user from each IP >>> address. >>> ? # NOTE: The username is compared case-sensitively. >>> ? mail_max_userip_connections = 500 >>> } >> > >>> And, I still get the error message. I know myself, I have about 8-9 >>> accounts, some with as many as 10 folders (I know each one count's as >>> it's own mailbox), as does my partner--who would access the internet >>> from my IP. >>> Does that number really have to be like 10,000, or something? If so, >>> why >>> does it start out so small in the first place. If not, what else >>> could I >>> do to avoid this message going forward?? >> > >> > >> > > > --- > Aki Tuomi-------------- next part -------------- An HTML attachment was scrubbed... URL: <https://dovecot.org/pipermail/dovecot/attachments/20200227/2119b8e2/attachment.html>
Naturally, everything works fine if I use a VPN/translocation. On 27.02.20 21:49, Aki Tuomi wrote:> Is your server behind proxy maybe? Can you see in logs that you get > different IPs?? > > Maybe check with `doveadm who` how many connections you have? > > Aki >> On 27/02/2020 22:44 Esteban L < esteban at little-beak.com >> <mailto:esteban at little-beak.com>> wrote: >> >> >> I have tried a lot of different things, still no success. =( >> >> here is my dove -n if anyone could help that would be great: >> >> >> # 2.2.27 (c0f36b0): /etc/dovecot/dovecot.conf >> # Pigeonhole version 0.4.16 (fed8554) >> # OS: Linux 4.9.0-12-amd64 x86_64 Debian 9.12 >> auth_debug = yes >> auth_debug_passwords = yes >> auth_mechanisms = plain login >> auth_verbose = yes >> auth_verbose_passwords = yes >> mail_home = /var/mail/vmail/%d/%n >> mail_location = maildir:~/Mail >> mail_max_userip_connections = 500 >> mail_plugins = " quota" >> mail_privileged_group = vmail >> managesieve_notify_capability = mailto >> managesieve_sieve_capability = fileinto reject envelope >> encoded-character vacation subaddress comparator-i;ascii-numeric >> relational regex imap4flags copy include variables body enotify >> environment mailbox date index ihave duplicate mime foreverypart >> extracttext >> namespace inbox { >> ? inbox = yes >> ? location >> ? mailbox Archive { >> ??? auto = subscribe >> ??? special_use = \Archive >> ? } >> ? mailbox Drafts { >> ??? auto = subscribe >> ??? special_use = \Drafts >> ? } >> ? mailbox Junk { >> ??? auto = subscribe >> ??? special_use = \Junk >> ? } >> ? mailbox Sent { >> ??? auto = subscribe >> ??? special_use = \Sent >> ? } >> ? mailbox "Sent Messages" { >> ??? special_use = \Sent >> ? } >> ? mailbox Trash { >> ??? auto = subscribe >> ??? special_use = \Trash >> ? } >> ? prefix >> } >> passdb { >> ? args = /etc/dovecot/dovecot-sql.conf.ext >> ? driver = sql >> } >> plugin { >> ? quota = maildir:User quota >> ? quota_grace = 10%% >> ? quota_rule = *:storage=10G >> ? quota_rule2 = Trash:storage=+1G >> ? quota_status_overquota = 552 5.2.2 Mailbox is full >> ? quota_warning = storage=95%% quota-warning 95 %u >> ? quota_warning2 = storage=80%% quota-warning 80 %u >> ? sieve = ~/.dovecot.sieve >> ? sieve_after = /etc/dovecot/sieve/spamfilter.sieve >> ? sieve_dir = ~/sieve >> } >> protocols = " imap lmtp sieve" >> service auth { >> ? unix_listener /var/spool/postfix/private/auth { >> ??? group = postfix >> ??? mode = 0666 >> ??? user = postfix >> ? } >> } >> service imap-login { >> ? inet_listener imaps { >> ??? port = 993 >> ??? ssl = yes >> ? } >> } >> service lmtp { >> ? unix_listener /var/spool/postfix/private/dovecot-lmtp { >> ??? group = postfix >> ??? mode = 0600 >> ??? user = postfix >> ? } >> } >> ssl = required >> ssl_cert = </etc/letsencrypt/live/little-beak.com/fullchain.pem >> ssl_key =? # hidden, use -P to show it >> userdb { >> ? args = /etc/dovecot/dovecot-sql.conf.ext >> ? driver = sql >> } >> protocol lmtp { >> ? mail_plugins = " quota sieve" >> ? postmaster_address = *****@little-beak.com >> <mailto:*****@little-beak.com> >> } >> protocol lda { >> ? mail_plugins = " quota sieve" >> } >> protocol imap { >> ? mail_max_userip_connections = 500 >> ? mail_plugins = " quota imap_quota" >> } >> protocol sieve { >> ? mail_max_userip_connections = 500 >> } >> >> >> On 27.02.20 18:54, Esteban L wrote: >>> I have been haunted by the following error message or months, that we >>> see using Thunderbird. >>> Unable to connect to your IMAP server. >>> You may have exceeded the maximum number of connections to this server. >>> If so, use the Advanced IMAP Server Settings dialogue to reduce the >>> number of cached connections. >>> If I change my location, via a VPN, the error message goes away and I >>> can connect. >>> I have edited my /etc/dovcot/conf.d/20-imap.conf file by adding the >>> following: >> > >>> protocol imap { >>> ? # Space separated list of plugins to load (default is global >>> mail_plugins). >>> ? mail_plugins = $mail_plugins imap_quota >>> ? # Maximum number of IMAP connections allowed for a user from each IP >>> address. >>> ? # NOTE: The username is compared case-sensitively. >>> ? mail_max_userip_connections = 500 >>> } >> > >>> And, I still get the error message. I know myself, I have about 8-9 >>> accounts, some with as many as 10 folders (I know each one count's as >>> it's own mailbox), as does my partner--who would access the internet >>> from my IP. >>> Does that number really have to be like 10,000, or something? If so, >>> why >>> does it start out so small in the first place. If not, what else >>> could I >>> do to avoid this message going forward?? >> > >> > >> > > > --- > Aki Tuomi-------------- next part -------------- An HTML attachment was scrubbed... URL: <https://dovecot.org/pipermail/dovecot/attachments/20200227/2ba911ca/attachment-0001.html>
You can usually see from doveadm who or logs if your router/whatever is doing NAT. Which would be the reason why 500 connections wouldn't be enough. Aki> On 27/02/2020 23:21 Esteban L <esteban at little-beak.com> wrote: > > > > It's not behind a proxy (unless the router is acting as a proxy?). Could it be that my router is doing some Hairpin NAT tomfoolery? The router is generic, so I run into that from time to time with my webserver. > > > I tried doveadm who, but didn't see anything too peculiar. There is the expect half dozen or so users on common IPs. > > > On 27.02.20 21:49, Aki Tuomi wrote: > > > > Is your server behind proxy maybe? Can you see in logs that you get different IPs? > > > > > > > > > > Maybe check with `doveadm who` how many connections you have? > > > > > > > > > > Aki > > > > > On 27/02/2020 22:44 Esteban L < esteban at little-beak.com> wrote: > > > > > > > > > > > > > > > > > > > > > > > > I have tried a lot of different things, still no success. =( > > > > > > > > > > > > > > > here is my dove -n if anyone could help that would be great: > > > > > > > > > > > > > > > > > > > > > > > > # 2.2.27 (c0f36b0): /etc/dovecot/dovecot.conf > > > > > > # Pigeonhole version 0.4.16 (fed8554) > > > > > > # OS: Linux 4.9.0-12-amd64 x86_64 Debian 9.12 > > > > > > auth_debug = yes > > > > > > auth_debug_passwords = yes > > > > > > auth_mechanisms = plain login > > > > > > auth_verbose = yes > > > > > > auth_verbose_passwords = yes > > > > > > mail_home = /var/mail/vmail/%d/%n > > > > > > mail_location = maildir:~/Mail > > > > > > mail_max_userip_connections = 500 > > > > > > mail_plugins = " quota" > > > > > > mail_privileged_group = vmail > > > > > > managesieve_notify_capability = mailto > > > > > > managesieve_sieve_capability = fileinto reject envelope > > > > > > encoded-character vacation subaddress comparator-i;ascii-numeric > > > > > > relational regex imap4flags copy include variables body enotify > > > > > > environment mailbox date index ihave duplicate mime foreverypart extracttext > > > > > > namespace inbox { > > > > > > inbox = yes > > > > > > location > > > > > > mailbox Archive { > > > > > > auto = subscribe > > > > > > special_use = \Archive > > > > > > } > > > > > > mailbox Drafts { > > > > > > auto = subscribe > > > > > > special_use = \Drafts > > > > > > } > > > > > > mailbox Junk { > > > > > > auto = subscribe > > > > > > special_use = \Junk > > > > > > } > > > > > > mailbox Sent { > > > > > > auto = subscribe > > > > > > special_use = \Sent > > > > > > } > > > > > > mailbox "Sent Messages" { > > > > > > special_use = \Sent > > > > > > } > > > > > > mailbox Trash { > > > > > > auto = subscribe > > > > > > special_use = \Trash > > > > > > } > > > > > > prefix > > > > > > } > > > > > > passdb { > > > > > > args = /etc/dovecot/dovecot-sql.conf.ext > > > > > > driver = sql > > > > > > } > > > > > > plugin { > > > > > > quota = maildir:User quota > > > > > > quota_grace = 10%% > > > > > > quota_rule = *:storage=10G > > > > > > quota_rule2 = Trash:storage=+1G > > > > > > quota_status_overquota = 552 5.2.2 Mailbox is full > > > > > > quota_warning = storage=95%% quota-warning 95 %u > > > > > > quota_warning2 = storage=80%% quota-warning 80 %u > > > > > > sieve = ~/.dovecot.sieve > > > > > > sieve_after = /etc/dovecot/sieve/spamfilter.sieve > > > > > > sieve_dir = ~/sieve > > > > > > } > > > > > > protocols = " imap lmtp sieve" > > > > > > service auth { > > > > > > unix_listener /var/spool/postfix/private/auth { > > > > > > group = postfix > > > > > > mode = 0666 > > > > > > user = postfix > > > > > > } > > > > > > } > > > > > > service imap-login { > > > > > > inet_listener imaps { > > > > > > port = 993 > > > > > > ssl = yes > > > > > > } > > > > > > } > > > > > > service lmtp { > > > > > > unix_listener /var/spool/postfix/private/dovecot-lmtp { > > > > > > group = postfix > > > > > > mode = 0600 > > > > > > user = postfix > > > > > > } > > > > > > } > > > > > > ssl = required > > > > > > ssl_cert = </etc/letsencrypt/live/little-beak.com/fullchain.pem > > > > > > ssl_key = # hidden, use -P to show it > > > > > > userdb { > > > > > > args = /etc/dovecot/dovecot-sql.conf.ext > > > > > > driver = sql > > > > > > } > > > > > > protocol lmtp { > > > > > > mail_plugins = " quota sieve" > > > > > > postmaster_address = *****@little-beak.com > > > > > > } > > > > > > protocol lda { > > > > > > mail_plugins = " quota sieve" > > > > > > } > > > > > > protocol imap { > > > > > > mail_max_userip_connections = 500 > > > > > > mail_plugins = " quota imap_quota" > > > > > > } > > > > > > protocol sieve { > > > > > > mail_max_userip_connections = 500 > > > > > > } > > > > > > > > > > > > > > > > > > > > > > > > On 27.02.20 18:54, Esteban L wrote: > > > > > > > I have been haunted by the following error message or months, that we > > > > > > > > see using Thunderbird. > > > > > > > Unable to connect to your IMAP server. > > > > > > > You may have exceeded the maximum number of connections to this server. > > > > > > > > If so, use the Advanced IMAP Server Settings dialogue to reduce the > > > > > > > > number of cached connections. > > > > > > > If I change my location, via a VPN, the error message goes away and I > > > > > > > > can connect. > > > > > > > I have edited my /etc/dovcot/conf.d/20-imap.conf file by adding the > > > > > > > > following: > > > > > > > > > > > > > > protocol imap { > > > > > > > > # Space separated list of plugins to load (default is global > > > > > > > > mail_plugins). > > > > > > > > mail_plugins = $mail_plugins imap_quota > > > > > > > # Maximum number of IMAP connections allowed for a user from each IP > > > > > > > > address. > > > > > > > > # NOTE: The username is compared case-sensitively. > > > > > > > > mail_max_userip_connections = 500 > > > > > > > > } > > > > > > > > > > > > > > And, I still get the error message. I know myself, I have about 8-9 > > > > > > > > accounts, some with as many as 10 folders (I know each one count's as > > > > > > > > it's own mailbox), as does my partner--who would access the internet > > > > > > > > from my IP. > > > > > > > Does that number really have to be like 10,000, or something? If so, why > > > > > > > > does it start out so small in the first place. If not, what else could I > > > > > > > > do to avoid this message going forward?? > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > --- > > Aki Tuomi > >