search for: ugfzc3dvcmq6

...support them and fuzzy logic based on the last successful IMAP/POP3 login from a IP and failed send attempts from the same IP shortly after receive mail leaves a bad taste of only a guess May 18 11:19:09 mail postfix/smtpd[5173]: warning: unknown[177.139.182.86]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 May 18 11:19:15 mail postfix/smtpd[5173]: warning: unknown[177.139.182.86]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 246 bytes Desc: OpenPGP digital signat...

...the attacks are through SMTP/SASL attempts, using 'auth login'. Postfix is configured to use Dovecot for the authentication backend. NOTE: parens contain the base64 decoded values, this is not part of the data stream. C: auth login S: 334 VXNlcm5hbWU6 (334 Username:) C: YWVi (aeb) S: 334 UGFzc3dvcmQ6 (334 Password:) C: My4xNDE1OTI2 (3.1415926) S: 535 5.7.8 Error: authentication failed: UGFzc3dvcmQ6 (535 5.7.8 Error: authentication failed: Password:) Aug 22 11:00:31 host3 dovecot: auth-worker(19844): sql(aeb,120.198.9.221): unknown user How difficult would it be to add logging the given pas...

...e character is '^]'. 220 beach.rhyno.tech mail server ehlo x 250-beach.rhyno.tech 250-PIPELINING 250-SIZE 10240000 250-ETRN 250-STARTTLS 250-AUTH PLAIN LOGIN 250-AUTH=PLAIN LOGIN 250-ENHANCEDSTATUSCODES 250-8BITMIME 250-DSN 250 SMTPUTF8 auth login 334 VXNlcm5hbWU6 ***obviously_masked*** 334 UGFzc3dvcmQ6 ***obviously_masked*** 235 2.7.0 Authentication successful mail from:<pdx at pdx.hu> 250 2.1.0 Ok rcpt to:<aik at rhyno.tech> 250 2.1.5 Ok data 354 End data with <CR><LF>.<CR><LF> test . 250 2.0.0 Ok: queued as 5EEF35C05C5 quit 221 2.0.0 Bye Connection closed by...

...ecot_login guard against blank passwords or system users just as a normal login does? I'm running dovecot 2.2.36 (1f10bfa63) Exim version 4.96 I don't know which software supplies the dovecot_login connenector. The SMTP session would include AUTH LOGIN 334 VXNlcm5hbWU6 cG9zdGZpeA== 334 UGFzc3dvcmQ6 ???????????? <--? nothing, just a return here 235 Authentication succeeded DONE

...resp=bXlfdXNlcm5hbWU= //(resp=my_username) Info: auth(default_with_listener): client out: CONT 5 VXNlcm5hbWU6 //(Username:) Info: auth(default_with_listener): client in: CONT 5 bXlfcGFzc3dvcmQ= //(my_password) Info: auth(default_with_listener): client out: CONT 5 UGFzc3dvcmQ6 //(Password:) Info: auth(default_with_listener): client in: CONT 5 bXlfcGFzc3dvcmQ= //(my_password) Info: auth(default_with_listener): sql(my_user): query: SELECT user, password FROM users WHERE user = 'my_password' Info: auth(default_with_listener): sql(my_user):...

...nseList ld 0x11847020 msgid -1 all 1 Nov 18 13:02:59 mx dovecot: auth(default): ldap_chkResponseList returns ld 0x11847020 NULL Nov 18 13:02:59 mx dovecot: auth(default): ldap_int_select Nov 18 13:03:01 mx postfix/smtpd[12985]: warning: unknown[190.10.190.3]: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Nov 18 13:03:01 mx postfix/smtpd[12985]: lost connection after AUTH from unknown[190.10.190.3]

...50-beach.rhyno.tech > 250-PIPELINING > 250-SIZE 10240000 > 250-ETRN > 250-STARTTLS > 250-AUTH PLAIN LOGIN > 250-AUTH=PLAIN LOGIN > 250-ENHANCEDSTATUSCODES > 250-8BITMIME > 250-DSN > 250 SMTPUTF8 > auth login > 334 VXNlcm5hbWU6 > ***obviously_masked*** > 334 UGFzc3dvcmQ6 > ***obviously_masked*** > 235 2.7.0 Authentication successful > mail from:<pdx at pdx.hu> > 250 2.1.0 Ok > rcpt to:<aik at rhyno.tech> > 250 2.1.5 Ok > data > 354 End data with <CR><LF>.<CR><LF> > test > . > 250 2.0.0 Ok: queued...

...und and maillog: Apr 20 18:34:57 bert postfix/smtpd[2525]: smtpd_sasl_authenticate: decoded response: michael Apr 20 18:34:57 bert postfix/smtpd[2525]: smtpd_sasl_authenticate: uncoded challenge: Password: Apr 20 18:34:57 bert postfix/smtpd[2525]: > ernie.bio2.RWTH-Aachen.DE[134.130.63.5]: 334 UGFzc3dvcmQ6 Apr 20 18:34:57 bert postfix/smtpd[2525]: < ernie.bio2.RWTH-Aachen.DE[134.130.63.5]: UjZvYTBmSENUSlBvaA== Apr 20 18:34:57 bert postfix/smtpd[2525]: smtpd_sasl_authenticate: decoded response: $passwort Apr 20 18:34:57 bert postfix/smtpd[2525]: warning: ernie.bio2.RWTH-Aachen.DE[134.130.63.5]: SAS...

...und and maillog: Apr 20 18:34:57 bert postfix/smtpd[2525]: smtpd_sasl_authenticate: decoded response: michael Apr 20 18:34:57 bert postfix/smtpd[2525]: smtpd_sasl_authenticate: uncoded challenge: Password: Apr 20 18:34:57 bert postfix/smtpd[2525]: > ernie.bio2.RWTH-Aachen.DE[134.130.63.5]: 334 UGFzc3dvcmQ6 Apr 20 18:34:57 bert postfix/smtpd[2525]: < ernie.bio2.RWTH-Aachen.DE[134.130.63.5]: UjZvYTBmSENUSlBvaA== Apr 20 18:34:57 bert postfix/smtpd[2525]: smtpd_sasl_authenticate: decoded response: $passwort Apr 20 18:34:57 bert postfix/smtpd[2525]: warning: ernie.bio2.RWTH-Aachen.DE[134.130.63.5]: SAS...

Hello all, I've got 3 occurences of this message in my log file: auth: Warning: Timeout leak: 0x805e480 (auth-request-handler.c:550) Can I ignore it, or is it a syhmptom of something wrong? I'm running dovecot 2.2.28 (bed8434). I'll post my doveconf -n if it is worth investigating further... Cheers, Luciano. -- /"\ /Via A. Salaino, 7 - 20144 Milano

...ername = '%u' Logeintrag: Sep 25 23:23:55 hetzner postfix/smtpd[86111]: connect from unknown Sep 25 23:23:57 hetzner postfix/smtpd[86111]: warning: unknown: SASL PLAIN authentication failed: Sep 25 23:23:59 hetzner postfix/smtpd[86111]: warning: unknown: SASL LOGIN authentication failed: UGFzc3dvcmQ6 Sep 25 23:24:01 hetzner postfix/smtpd[86111]: disconnect from unknown

hi: sometimes i can't use imap command to get mails, when this problem appear i find out the file dovecot-uidlist.lock appear at the same time . I don't know Why is this happening ? can you help me ? thanks !

...0.228 rip=192.168.3.29 Dec 23 16:46:08 auth: Debug: client passdb out: CONT 1 VXNlcm5hbWU6 Dec 23 16:46:22 auth: Debug: client in: CONT 1 OTY1ZWI3MmM5MmE1NDlkZA== (previous base64 data may contain sensitive data) Dec 23 16:46:22 auth: Debug: client passdb out: CONT 1 UGFzc3dvcmQ6 Dec 23 16:46:39 auth: Debug: client in: CONT 1 OTY1ZWI3MmM5MmE1NDlkZA== (previous base64 data may contain sensitive data) Dec 23 16:46:39 auth-worker(27884): Debug: Loading modules from directory: /usr/local/lib/dovecot/auth Dec 23 16:46:39 auth-worker(27884): Debug: dict(965eb72c92a549dd,...

...29 23:46:12 one2action sendmail[2865]: p6TMkB95002865: <-- AUTH LOGIN Jul 29 23:46:12 one2action sendmail[2865]: p6TMkB95002865: --- 334 VXNlcm5hbWU6 Jul 29 23:46:12 one2action sendmail[2865]: STARTTLS=read, info: fds=8/4, err=2 Jul 29 23:46:12 one2action sendmail[2865]: p6TMkB95002865: --- 334 UGFzc3dvcmQ6 Jul 29 23:46:12 one2action sendmail[2865]: STARTTLS=read, info: fds=8/4, err=2 Jul 29 23:46:12 one2action sendmail[2865]: p6TMkB95002865: --- 535 5.7.0 authentication failed Jul 29 23:46:12 one2action sendmail[2865]: p6TMkB95002865: AUTH failure (LOGIN): generic failure (-1) SASL(-1): generic failu...

...the other accounts using the same server. I don?t know how to login to IMAP via the openssl command line interface, but this is what happens when I login to the submission port. ? % openssl s_client -connect mail.covisp.net:587 -starttls smtp ? auth login 334 VXNlcm5hbWU6 base64(username)= 334 UGFzc3dvcmQ6 base64(pasword)= DONE (Same results without the terminating ?=?) I?m sure I am missing something really obvious? -- Lithium will no longer be available on credit

...-SIZE 10240000 >> 250-ETRN >> 250-STARTTLS >> 250-AUTH PLAIN LOGIN >> 250-AUTH=PLAIN LOGIN >> 250-ENHANCEDSTATUSCODES >> 250-8BITMIME >> 250-DSN >> 250 SMTPUTF8 >> auth login >> 334 VXNlcm5hbWU6 >> ***obviously_masked*** >> 334 UGFzc3dvcmQ6 >> ***obviously_masked*** >> 235 2.7.0 Authentication successful >> mail from:<pdx at pdx.hu> >> 250 2.1.0 Ok >> rcpt to:<aik at rhyno.tech> >> 250 2.1.5 Ok >> data >> 354 End data with <CR><LF>.<CR><LF> >> te...

Hello again. I am trying to use a master user. The login works. However, a LIST command gives me only the INBOX. Is this to be expected? When logging in normally, I do get the full list of folders. (using Dovecot 1.1 rc3.) Anders.

I'm preparing my new Sendmail mail server with pop3s + smtps where user authentication occurs through Microsoft Active Directory by Winbind daemon. OS is Centos 6.4 and Sendmail is 8.14 Mailboxes will be in this server but how to create them !??! It's necessary to add user by 'useradd' command into /etc/passwd or It's only necessary add new entry in '/etc/aliases'

On 17/11/2014 07:23, Ron Leach wrote: > On 16/11/2014 07:24, Robert Schetterer wrote (re-ordered): >> Am 16.11.2014 um 02:24 schrieb Reindl Harald: >> >>> * if you find a security issue in postfix running >>> on 587 over TLS cry out loud > > I'm thinking beyond that; I want to get to the position that when > there is an issue in the MTA, our