search for: fd_ssl

The attached patch makes the local IP address to which the client connected available to the authentication modules; i.e., the local IP address is available for substitution as %i for the mysql and pgsql modules. We needed this feature to support thousands of our legacy accounts which are authenticated by username/local_part (not the full email address) and IP address (one per domain). Timo,

imap-login processes are hanging (using 100% of CPU) when connected from a client that is partially blocked by a firewall. It appears that imap-login is stuck in a loop trying to complete an ssl handshake. imap-login is working fine for other clients not blocked by the firewall (including localhost). This is dovecot 2.1.10 under Mac OS X 10.8.2 (compiled from sources); the firewall is Little

...PST, Ben Morrow <ben at morrow.me.uk> wrote: > At 1AM -0800 on 5/12/12 Erik A Johnson wrote: >> FYI, the tcpdump I sent previously was with one of our >> previously-discussed patches in place: >> >> if (!proxy->client_proxy && net_geterror(proxy->fd_ssl) == EBADF) { >> >> I'm attaching that dump again (as >> tcpdump_output_witholdpatch_headeronly.txt), as well as a dump without >> any of the patches (tcpdump_output_withoutpatches_headeronly.txt) in >> case there is any difference. > > Well, they're cer...

...quot;libwrap: access denied"); + net_disconnect(fd); + return; + } +#endif + if (net_getsockname(fd, &local_ip, &local_port) < 0) { memset(&local_ip, 0, sizeof(local_ip)); local_port = 0; @@ -99,6 +121,10 @@ struct client *client; struct ssl_proxy *proxy; int fd, fd_ssl; +#ifdef LIBWRAP + struct request_info req; + char daemon[17] = "dovecot-"; +#endif fd = net_accept(LOGIN_SSL_LISTEN_FD, &remote_ip, &remote_port); if (fd < 0) { @@ -107,6 +133,18 @@ return; } +#ifdef LIBWRAP + strlcat(daemon, login_protocol, sizeof(daemon)); + str...