I have a Dovecot server set up as a proxy and getting a ton of these errors, but I'm not sure where to begin troubleshooting it. I'm hearing frequently that Outlook users who use IMAP with SSL are getting disconnected often as a result. Any suggestions?... Sep 29 11:12:07 director4 dovecot: imap-login: SSL_accept() failed: error:1409C041:SSL routines:SSL3_SETUP_BUFFERS:malloc failure [64.81.197.28] Sep 29 11:12:07 director4 dovecot: imap-login: SSL_accept() syscall failed: EOF [24.236.204.154] Bill
On Fri, September 29, 2006 11:23 am, Bill Boebel <bill at webmail.us> said:> I have a Dovecot server set up as a proxy and getting a ton of these errors, but > I'm not sure where to begin troubleshooting it. I'm hearing frequently that > Outlook users who use IMAP with SSL are getting disconnected often as a result. > Any suggestions?... > > Sep 29 11:12:07 director4 dovecot: imap-login: SSL_accept() failed: > error:1409C041:SSL routines:SSL3_SETUP_BUFFERS:malloc failure [64.81.197.28] > > Sep 29 11:12:07 director4 dovecot: imap-login: SSL_accept() syscall failed: EOF > [24.236.204.154] >Actually, I found in the archives that I should increase login_process_size if I'm not running with login_process_per_connection. I have done this and that seems to have taken care of the malloc failure. However I am still getting a ton of these every few seconds: Sep 29 11:30:06 director4 dovecot: imap-login: SSL_read() syscall failed: EOF [70.171.61.190] Sep 29 11:30:06 director4 dovecot: imap-login: SSL_read() syscall failed: EOF [24.236.204.154] Sep 29 11:30:06 director4 dovecot: imap-login: SSL_read() syscall failed: EOF [70.171.61.190] Sep 29 11:30:08 director4 dovecot: imap-login: SSL_read() syscall failed: EOF [65.242.19.3]
Bill Boebel wrote:> I have a Dovecot server set up as a proxy and getting a ton of these > errors, but I'm not sure where to begin troubleshooting it. I'm > hearing frequently that Outlook users who use IMAP with SSL are > getting disconnected often as a result. Any suggestions?...Need more details... Dovecot version? Platform? -- Best regards, Charles
On Fri, September 29, 2006 11:47 am, Charles Marcus <CMarcus at Media-Brokers.com> said:> Bill Boebel wrote: >> I have a Dovecot server set up as a proxy and getting a ton of these >> errors, but I'm not sure where to begin troubleshooting it. I'm >> hearing frequently that Outlook users who use IMAP with SSL are >> getting disconnected often as a result. Any suggestions?... > > Need more details... Dovecot version? Platform? >Sorry... Red Hat ES4 (2.6.9-42.0.2.EL), latest dovecot CVS 20060926. login_process_per_connection = no login_processes_count = 3 login_max_processes_count = 10 login_max_connections = 4000 login_process_size = 64 Also added this to the dovecot init script to allocate more file descriptors to dovecot: start() { echo -n $"Starting $prog: " + ulimit -n 16384 daemon /usr/sbin/dovecot Also, seeing this error occasionally... Sep 29 11:34:15 director4 dovecot: imap-login: SSL_write() syscall failed: Bad file descriptor [166.137.221.91] Maybe nothing to worry about now that I have increased "login_process_size". Checking with customers to see if the Outlook IMAP SSL disconnects are still frequently occurring. Thanks, Bill
On Fri, September 29, 2006 11:46 am, Dominic Marks <dom at helenmarks.co.uk> said:>> Actually, I found in the archives that I should increase login_process_size if >> I'm not running with login_process_per_connection. I have done this and that >> seems to have taken care of the malloc failure. However I am still getting a ton >> of these every few seconds: >> >> Sep 29 11:30:06 director4 dovecot: imap-login: SSL_read() syscall failed: EOF >> [70.171.61.190] >> Sep 29 11:30:06 director4 dovecot: imap-login: SSL_read() syscall failed: EOF >> [24.236.204.154] >> Sep 29 11:30:06 director4 dovecot: imap-login: SSL_read() syscall failed: EOF >> [70.171.61.190] >> Sep 29 11:30:08 director4 dovecot: imap-login: SSL_read() syscall failed: EOF >> [65.242.19.3] >> > > These are client disconnects, I believe. >Yep, all of my customers who had IMAP SSL problems are reporting that the problem is fixed now that I have increased login_process_size to 64 MB. In just two hours though the imap-login process is up to 33 MB, and continuing to grow. Is that normal? This particular server handles 1200 IMAP connections and 800 IMAPS connections concurrently on average. Bill
On Sun, October 8, 2006 4:40 pm, Timo Sirainen <tss at iki.fi> said:> On Fri, 2006-09-29 at 14:10 -0400, Bill Boebel wrote: >> On Fri, September 29, 2006 11:46 am, Dominic Marks <dom at helenmarks.co.uk> said: >> >> Actually, I found in the archives that I should increase login_process_size if >> I'm not running with login_process_per_connection. I have done this and that >> seems to have taken care of the malloc failure. >> >> All of my customers who had IMAP SSL problems are reporting that the problem >> is fixed now that I have increased login_process_size to 64 MB. In just two >> hours though the imap-login process is up to 33 MB, and continuing to grow. Is >> that normal? This particular server handles 1200 IMAP connections and 800 IMAPS >> connections concurrently on average. >> > > I don't know how much memory each SSL connection takes, but I'd suggest > increasing the memory limit even higher, maybe even 256MB. If it > continues to grow up to it then I guess there's a memory leak somewhere. >After watching it for the past ten days, the imap-login processes on our five Dovecot proxy servers are hovering at between 32MB and 36MB each. So it doesn't look like a memory leak here. The proxies are running great. Thanks, Bill