similar to: dictionary attack defense

Displaying 20 results from an estimated 1000 matches similar to: "dictionary attack defense"

2009 Nov 15
2
FW: Panic: Message unexpectedly expunged from index
Nevermind. I figured it out. I left off the INDEX command. Sorry to spam the mail list :( Here is my mail_location for future reference / searches: mail_location = mbox:/var/spool/mail:INBOX=/var/spool/mail/%u:INDEX=/var/indexes/%u -----Original Message----- From: dovecot-bounces+chayes=afo.net at dovecot.org [mailto:dovecot-bounces+chayes=afo.net at dovecot.org]On Behalf Of Cliff Hayes
2005 Dec 14
1
Best way to upgrade from 1.0a4 to 1.0a5
Hello all, I have 1.0 Alpha 4. Is it better to shut down sendmail, uninstall dovecot 1.0a4 then install 1.0a5, or just install 1.0a5 over the top of 1.0a4? Thanks, Cliff
2020 Mar 09
4
how to create Drafts, Junk, Sent, Trash folders after user already created
Hello Dovecot, Do to a misconfiguration, I have a bunch of users who do not have the standard folders. I can create a routine to cycle through the users and look for the folders and run a command if there is one. Is there a way to create the proper namespace for a user after the user has already been created? Thanks in advance. -------------- next part -------------- An HTML attachment was
2005 Nov 16
2
Mailbox isn't a valid mbox file
Hello all, I have a new installation of Fedora 4 and Dovecot 1.4.Alpha4 A small percentage of my users are getting unable to pop mail from a client (ie: Outlook), they get continually prompted for username/password. The error they get is: Mailbox isn't a valid mbox file. When I look in the file, I don't see anything unusual. There's not much info on the Internet about this
2005 Nov 28
1
Graceful shutdown
Hello all, I am running Dovecot v1alpha4 on Fedora 4 from the command line (as opposed to deamon). Is there a recommended way to shut it down gracefully? Or do I just use killall -9 dovecot? I'm not using the included version, so I can't do SERVICE DOVECOT STOP. Thanks, Cliff
2014 Oct 15
1
Permissions problem on new installation
I am setting up a new mail server using imap only on Scientific Linux 6.5 and dovecot 2.0.9. How do I fix this problem? I keep getting these errors regardless of permissions ... even up to 777. Oct 15 13:56:01 avalon dovecot: imap(chayes at domain.tld): Error: opendir(/var/email/chayes at domain.tld/Maildir) failed: Permission denied (euid=497(chayes) egid=12(mail) missing +r perm:
2014 Oct 16
1
Unable to get virtual users set up with database auth
I can't seem to get imap virtual users to work with database authentication on new Scientific Linux 6.5 server with Sendmail 8.14.4 & Dovecot 2.0.9 Apparently I have to also create system users because sendmail/procmail/dovecot want to check directory ownership. So I created a database, made entry for the user, created the user chayes on the system. But %u always contains just chayes
2020 May 20
1
how to automatically delete folders from Trash after x days
This works great for keeping the Trash from overflowing ... doveadm expunge -A mailbox Trash before 30d ... but it doesn't delete folders that the user put in the trash. What is the recommended method for erasing folders from the trash? -------------- next part -------------- An HTML attachment was scrubbed... URL:
2014 Nov 07
1
mail location change generates various errors
I have a sendmail/dovecot imap/pop3 system that has been running with the following mail_location: mail_location = mbox:/var/empty:INBOX=/var/spool/mail/%u:INDEX=/var/indexes/%u In order to reduce errors and simplify operation I removed imap and am now only responding to pop3. I'd like to also simplify the mail_location to get rid of index errors since I don't need indexes:
2014 Jul 14
3
Transition from one server to another.
A frind of mine and I are running a dedicated server, that among other things host mail for ourselves and friends and families. All in all about 15 different domains with 35-40 users. The machine in question is old, so we are doing a slow transition from the old server to the new one. So far, we've managed to move web hosts seamlessly. Due to the technical capabilities at some of the user
2008 Jan 01
2
Easiest defense against SQL injection in object creation?
I''ve been scouring the web for suggested Rails defenses against SQL injection, but I haven''t found much on the object creation part. Certainly using attr_protected, etc., is a good way to prevent unwanted fields from being modified on the new object (if you''re passing a hash as creation parameters), but what about escaping the POSTed info before saving? Couldn''t
2005 Nov 01
2
New Fedora/Sendmail Install Assistance
Hello everyone, I've narrowed down my problem, so this should be an easy one for some smart person out there. I am moving from an old sendmail/Fedora 2 box to a new sendmail/Fedora 4 box and want to try Dovecot for pop3. The problem is, I can't get it to work. I have 9000 email accounts I will be moving to the new box. I've already tried and failed once. The problem is, Dovecot
2009 Nov 17
2
setting up home directories
Hello, I have not been using the home directory but I read in MailLocation.txt that I probably should. Does dovecot create each directory? What does it put in there? My server uses mbox format. My users all look like this: [root at sendmail log]# finger chayes Login: chayes Name: 50387.00 Directory: /home/chayes Shell: /sbin/nologin Never logged in.
2014 May 22
1
Interesting new hack attack
In the past little while, we've seen a wave of attacks on asterisk, via the provisioning. It goes something like this: A. scan for IP phones on the internet, either via spotting something on port 5060, or via the port 80 web interface for the phone. Or, use web sites that scan the internet, and classify the machines, to make your work shorter. B. Once you get into the web GUI,
2005 Nov 03
0
FW: How to log POP3 events
Ok, I think I have that figured out. I made the following mods: disable_plaintext_auth = no pop3_uidl_format = %08Xu%08Xv and it seems to work. Now...about those enhanced logging capabilities. As promised, I see the enhanced logging. What does TOP and RETR mean? (I checked the manual first) Cliff -----Original Message----- From: Cliff Hayes [mailto:chayes at afo.net] Sent: Thursday,
2015 Mar 12
0
How to detect out-of-sync condition
Cliff Hayes <chayes at afo.net> writes: > I recently had a user whose mailbox had gone out of sync. > Webmail and client inbox totals had become vastly different and response > times had become unacceptable. > A doveadm force-resync fixed the problem nicely. > > This will no doubt happen again as we grow the service and I would like > to have some type of indication
2015 Mar 13
0
How to detect out-of-sync condition
Thanks. I use dovecot's lda and dovecot's sieve filter. So it looks like I need to compare the index/mailbox mtimes as you suggest. What am I looking for? I see that the indexes are updated when I run the resync. I checked my mailbox (that was not resynced) and noticed that dovecot.index last update was 16 days ago. So am I resyncing if the gap is over x days? If so, is there a way to
2015 Sep 01
2
llvm cfi
2015-09-01 11:38 GMT+08:00 John Criswell <jtcriswel at gmail.com>: > On 8/31/15 10:43 PM, 慕冬亮 via llvm-dev wrote: > > I want to create an experiment to show the effectiveness of cfi : > For example , > I first need a program with vulnerability so that we can hijack its > control flow; > > then I enforce cfi of llvm and we can't hijack its control flow. > >
2013 Sep 03
1
stopping dictionary attacks (pop3)
Hi Guys, I was really hoping a couple of years later this would be addressed... I'm running Dovecot 2.2.5 on FreeBSD. Is there anyway to limit the number of auth attempts allowed in a single session? The reason for this is because I have "fail2ban" setup to firewall out any IP addresses that repeatedly auth fails. The issue occurs when the connection is already in an
2006 Oct 07
0
[Bug 1049] Variable delay in password logins to fight dictionary attacks
http://bugzilla.mindrot.org/show_bug.cgi?id=1049 dtucker at zip.com.au changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |CLOSED ------- Comment #3 from dtucker at zip.com.au 2006-10-07 11:40 ------- Change all RESOLVED bug to CLOSED with the exception