similar to: dovecot config for 1500 simultaneous connection

> On Feb 14, 2017, at 5:50 PM, Joseph Tam <jtam.home at gmail.com> wrote: > > Another related security situation I've encountered is when a fraudster > has phished a user's password. A user/admin changes the password, > but forgets to invalidate dovecot's cached entry, allowing the fraudster > contunuing access to the mail account until the TTL expires or user

Hi list, I'm using Asterisk2Billing (v2.0.16) and it appears to have an annoying bug. When there are rates for e.g. 44 (UK landline) and 44870 (UK premium) and a fraudster manages to somehow dial 44-870 instead of 44870 the rate for 44 will match, not the one for 44870. So, I would like to block all calls on a dialplan level that contain a dash. -44, 4-4, 44-, 44---, -, ---, just

> On Aug 20, 2017, at 11:52 AM, Stephan von Krawczynski <skraw at ithnet.com> wrote: > > On Sat, 19 Aug 2017 21:39:18 -0400 > KT Walrus <kevin at my.walr.us> wrote: > >>> On Aug 18, 2017, at 4:05 AM, Stephan von Krawczynski <skraw at ithnet.com> >>> wrote: >>> >>> On Fri, 18 Aug 2017 00:24:39 -0700 (PDT) >>> Joseph

> On Aug 18, 2017, at 4:05 AM, Stephan von Krawczynski <skraw at ithnet.com> wrote: > > On Fri, 18 Aug 2017 00:24:39 -0700 (PDT) > Joseph Tam <jtam.home at gmail.com> wrote: > >> Michael Felt <michael at felt.demon.nl> writes: >> >>>> I use acme.sh for all of my LetsEncrypt certs (web & mail), it is >>>> written in pure

Hi Gang To increase security against phished passwords and similar attacks, we consider offering customers to define IP ranges (or GeoIP locations) from which their dynamic registrations are being accepted. I can already look at the source IP in the dial plan, so no issue with validate an INVITE against a source IP. But I would also like to prevent registrations from outside of this

Timo Sirainen wrote: > - auth: Auth cache is now disabled passwd-file. It was unnecessary and > it broke %variables in extra fields. So settings like auth_cache_size = 65536 auth_cache_ttl = 86400 auth_cache_negative_ttl = 600 are ignored/useless, and passwd-file auth lookups always results in file read operation? Joseph Tam <jtam.home at gmail.com>

Hi, Someone reported me that from a PBX on which someone gained fraudulent access, he could observe hundreds of calls to the same destination number. For curiosity's sake, I'm wondering why would this happen (dialing the same number over and over) ? Some special numbers generate here and there revenues for callees (and not for callers). Beside sharing interests with the callee that get

Hello List Quick overview of our set-up: Postfix / Dovecot (2.2.2.1) / MySQL Cluster on (at the moment) three Servers to create a HA environment where you could easily add additional servers as the demand or load grows. Circular dovecot replication is used so each server uses another one as replication partner and allowing one server to fail. Dovecot Proxy Feature being used, so we can use

Hi. The other day I burnt a copy of a CentOS 6.4 64 bit netinstall disc, verified the disc which passed & about a third of the way through the install it informed me that there was no CD in the drive & refused to carry on. So I burnt another & the same thing happened. So using the same disk burner & the same batch of disks, I burnt a copy of a Debian 7.1 netinstall & it

yacinechaouche at yahoo.com writes: > Interesting. Is there any particular benefit in having only one file > for both certificate and private key ? I find that putting private key > in a separate file feels more secure. It's convenient to have key and cert in one place if you don't need the certificate to be publically readable. Keeping it in separate files would add slightly

> 1500 IMAP sessions will eat up about 3GB alone. Are you saying that Dovecot needs 2MB of physical memory per IMAP session? If I want to support a max 100,000 IMAP sessions per server, I should configure the server to have at least 200GBs of SWAP? > On Feb 10, 2017, at 3:58 AM, Christian Balzer <chibi at gol.com> wrote: > > On Fri, 10 Feb 2017 01:13:20 +0530 Rajesh M wrote:

"Rajesh M" <24x7server at 24x7server.net> writes: > during peak times here are the results for connections > > [root at ns1 domains]# doveadm who |grep imap |wc -l > username # proto (pids) (ips) > 631 > [root at ns1 domains]# doveadm who |grep pop3 |wc -l > username # proto (pids)

Can Wine access DVD-RW devices natively on Mac OS X like it can on Linux? I was using Wine in Linux to run ImgBurn and it worked great, but I recently switched to Snow Leopard and I don't know how to configure this. I tried adding the Volume that was mounted by Finder. I tried adding /dev/disk2. Neither worked. I really like ImgBurn and do not want to abandon it if possible. Thanks.

> 1. 256GB of real RAM, swap is for chums. Are you sure that 100,000 IMAP sessions wouldn?t work well with SWAP, especially with fast SSD storage (which is a lot cheaper than RAM)? Seems that these IMAP processes are long lived processes (idling most of the time) that don?t need that much of the contents of real memory available for much of the life of the process. I use a database proxy in

On Dec 16, 2011, at 2:41 PM, John Criswell wrote: > On 12/16/11 4:14 PM, Chris Lattner wrote: >> >> On Dec 16, 2011, at 12:39 PM, Kostya Serebryany wrote: >>> > Do we consider the above transformation legal? >> >> Yes, the transformation is perfectly legal for the normal compiler. > > So how do you guarantee that the behavior is predictable

rje writes: > I'm looking into ways to encrypt the stored email on my server. The idea is > to make it impossible for my hosting provider (who has access to my VPS) to > read the mail from the disk. Just to be clear, if at any point your VPS has access to the plaintext mail (or keys that decrypt mail), then the VPS provider could access your decrypted mail. To make it unfeasible

hi all, I was following Xen beginners Guid. I downloaded , burnt on cd and installed Debian squeeze on 64 bit x86 machine. my problem is that i''m stuck at ''setup the linux bridge '' step. whenever I issue the command " aptitude install bridge-utils", its output told me that there is no package exist which could be matched with bridge-utils. I''ve checked

> I've tried using IMAP with mail_location pointed at the snapshot, but, > though I can get a listing of emails in the mailbox, the fetch fails when > dovecot can't write-lock dovecot.index.log. I've thought about doing this someday (adding snapshots to a user's namespace) but never got around to doing it. Snapshots get rotated (e.g. hourly.1 -> hourly.2 -> etc.)

Thanks for the info. I do have one further question for you. On your servers that are currently handling 50k IMAP sessions, how many users does that correspond to? Since many users will have multiple IMAP sessions on multiple devices, I?d like to hear about some real-world numbers that could be used for budgeting a new project like mine. Also, do you use Dovecot IMAP proxies in front of your

On 12/16/11 4:45 PM, Chris Lattner wrote: > > On Dec 16, 2011, at 2:41 PM, John Criswell wrote: > >> On 12/16/11 4:14 PM, Chris Lattner wrote: >>> On Dec 16, 2011, at 12:39 PM, Kostya Serebryany wrote: >>>> >>>> > Do we consider the above transformation legal? >>>> >>> >>> Yes, the transformation is perfectly