Perdition-users September 2008

perdition-users@vergenet.net

6 participants
6 discussions

Zombie pop3s (and imaps?) processes in connect state

by Christian Balzer

Hello, we've been using perdition as a pop3/pop3s/imap/imaps proxy for about four years now, first with Debian Sarge package and now under Etch. And throughout this time I've seen pop3s (and from the looks of it the same happens with imaps) processes stuck in connect, like this: --- 16836 ? S 5:31 0 120 32179 2204 0.0 perdition.pop3s 28070 ? S 0:00 0 120 32311 1564 0.0 \_ perdition.pop3s: connect 7782 ? S 0:00 0 120 32311 1564 0.0 \_ perdition.pop3s: connect 24468 ? S 0:00 0 120 32311 1568 0.0 \_ perdition.pop3s: connect 14180 ? S 0:00 0 120 32311 1568 0.0 \_ perdition.pop3s: connect 13503 ? S 0:00 0 120 32311 1564 0.0 \_ perdition.pop3s: connect --- They never die off, keep the connection open, there is no traffic and the other end might be long gone. Last trace in the logs is always like this: --- Feb 5 22:05:16 pp11 perdition[7782]: Connect: hi.mi.ts.u->203.216.5.113 --- It must be something related to the SSL'ness of these service, since I'm not seeing this happening ever for imap/pop3. Alas a lot of people do use TLS with those, so it's not a generic SSL issue. Maybe the master process could kick a child handling connections in the head after "timeout" seconds in connect state? If more information is needed I can try to provide it, but note that with a rate of roughly 35 pops per second I'm a bit weary to turn on debugging. ^_- This may or may not be related to another SSL related issue, which will be for the sake of making searches in the archive more likely to find good keywords in a separate mail. Regards, Christian -- Christian Balzer Network/Systems Engineer NOC chibi(a)gol.com Global OnLine Japan/Fusion Network Services http://www.gol.com/

11 years, 4 months

rpm .spec modification

by No Body is Perfect

Hi Horms! Modifications on *spec.in ( for vanessa_logger vanessa_adt vanessa_socket perdition) are need for "rpmbuild -ta <name>.tar.gz" on Fedora >7 ? systems (rpm ver 4.4.xx) -> Copyright: GNU Lesser General Public Licence -< License: GNU (or wherever) Thanks for your magnific work ! :-)

14 years, 7 months

New perdition release?

by Thomas Vogt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello Are there any plans for a new perdition release? With the changeable ldap version via configuration file is at least one useful change in the repository. Maybe experimental ipv6 support could also be added. I'm also the FreeBSD maintainer of the perdition port and i would like to bring this in the ports tree without maintaining too many local patches. Regards, Tom - -- * Thomas Vogt UNIX System Engineer - SolNet AS9044 - PGP-3239B720 * -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (FreeBSD) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iEYEARECAAYFAkjbl6AACgkQGCwkYTI5tyC7PgCdGTBF7mM15RDR8ejuVo3EvUsz 5foAoIzS34h9IolJCRpqQ9G4k84iGtp/ =KoGU -----END PGP SIGNATURE-----

14 years, 9 months

updated IPv6 patches for perdition and vanessa socket lib

by Antonio Querubin

The original IPv6 patches I submitted earlier didn't build on Linux systems. Attached are updated IPv6 patches which have been tested successfully in inetd mode on CentOS 5. However, in daemon mode under CentOS, sometimes the spawned process will segfault. I'm still trying to determine whether this is due to a problem with the patch itself or the way I've built the RPM. Both daemon mode and inetd mode under FreeBSD seems to work reliably though so I suspect this problem is something peculiar to Linux which I've overlooked. In any case, I'm putting these updated patches out in the hope of getting additional data back from anyone running perdition in daemon mode on Linux systems. Antonio Querubin whois: AQ7-ARIN

15 years, 5 months

Help configure perdition !

by Mathieu Kretchner

Hello, I would like to do the migration process explained in the with paper on the vergenet web site. So I found perdition a good tool to do this. But I downloaded all the src.rpm stuff and compiled for my centos 5 ! Once installed, I tried to configure a perdition to be an simple proxy to my localhost imap server. But nothing is working ... Here is my conf file : #grep -ve "^#\|^$" /etc/perdition/perdition.conf C debug log_facility /var/log/perdition imap_capability IMAP4rev1 SASL-IR SORT THREAD=REFERENCES MULTIAPPEND UNSELECT LITERAL+ IDLE CHILDREN NAMESPACE LOGIN-REFERRALS UIDPLUS LIST-EXTENDED I18NLEVEL=1 QUOTA STARTTLS AUTH=PLAIN map_library /usr/lib/libperditiondb_gdbm.so map_library_opt /etc/perdition/popmap.gdbm.db no_lookup outgoing_port 10143 outgoing_server localhost:10143 timeout 40 ssl_mode none and here my sysconfig/perdition file : # grep -ve "^#\|^$" /etc/sysconfig/perdition RUN_PERDITION=yes POP3=no POP3_FLAGS= POP3S=no POP3S_FLAGS= IMAP4=yes IMAP4_FLAGS= IMAP4S=no IMAP4S_FLAGS= When I start perdition here is what I see in the log file : Sep 24 16:07:34 perdition[30618]: version=1.17, add_domain="", authenticate_in=off, bind_address="", capability="IMAP4rev1 SASL-IR SORT THREAD=REFERENCES MULTIAPPEND UNSELECT LITERAL+ IDLE CHILDREN NAMESPACE LOGIN-REFERRALS UIDPLUS LIST-EXTENDED I18NLEVEL=1 QUOTA AUTH=PLAIN", client_server_specification=off, config_file="/etc/perdition/perdition.conf", connection_limit=0, connection_logging=on, connect_relog=300, debug=on, domain_delimiter="@", explicit_domain="", group="nobody", inetd_mode=off, listen_port="143", log_facility="/var/log/perdition", login_disabled=off, lower_case="", map_library="/usr/lib/libperditiondb_gdbm.so", map_library_opt="/etc/perdition/popmap.gdbm.db", no_bind_banner=off, no_daemon=off, no_lookup=on, nodename="devmk.inria.fr", ok_line="You are so in", outgoing_port="10143", outgoing_server="localhost:10143", pid_file="/var/run/perdition.imap4/perdition.imap4.pid", protocol="IMAP4", server_resp_line=off, strip_domain="", timeout=40, username="nobody", username_from_database=off, query_key="", quiet=off, ssl_mode="none", ssl_ca_file="", ssl_ca_path="/etc/perdition/perdition.ca/", ssl_ca_accept_self_signed="off", ssl_cert_file="/etc/perdition/perdition.crt.pem", ssl_cert_accept_expired="off", ssl_cert_not_yet_valid="off", ssl_cert_self_signed="off", ssl_cert_verify_depth=9, ssl_key_file="/etc/perdition/perdition.key.pem", ssl_listen_ciphers="", ssl_outgoing_ciphers="", ssl_no_cert_verify="off", ssl_no_cn_verify="off", (ssl_mask=0x00000000) (mask=0x00000000 00000000) Sep 24 16:07:34 perdition[30618]: vanessa_socket_daemon_setid: uid=99 euid=99 gid=99 egid=99 So my real wish is to be able to redirect people with regex but when I change /usr/lib/libperditiondb_gdbm.so for /usr/lib//usr/lib/libperditiondb_posix_regex.so I've the following error : Starting perdition services (IMAP4): dlopen of "/usr/lib/libperditiondb_posix_regex.so" failed ?? I've tried all day long to configure this tool... if a good soul could help me ? :)

15 years, 7 months

require client-certificates

by Paul Dekkers

Hi, Am I right that it is not possible in perdition to require (and verify) a client-certificate? (There is a verification depth for upstream connections, but it seems not for incoming, and besides depth no "verify client" like option...) Regards, Paul

15 years, 7 months

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

Perdition-users September 2008