Hello,
we've been using perdition as a pop3/pop3s/imap/imaps proxy for about
four years now, first with Debian Sarge package and now under Etch.
And throughout this time I've seen pop3s (and from the looks of it
the same happens with imaps) processes stuck in connect, like this:
---
16836 ? S 5:31 0 120 32179 2204 0.0 perdition.pop3s
28070 ? S 0:00 0 120 32311 1564 0.0 \_ perdition.pop3s: connect
7782 ? S 0:00 0 120 32311 1564 0.0 \_ perdition.pop3s: connect
24468 ? S 0:00 0 120 32311 1568 0.0 \_ perdition.pop3s: connect
14180 ? S 0:00 0 120 32311 1568 0.0 \_ perdition.pop3s: connect
13503 ? S 0:00 0 120 32311 1564 0.0 \_ perdition.pop3s: connect
---
They never die off, keep the connection open, there is no traffic and the
other end might be long gone. Last trace in the logs is always like this:
---
Feb 5 22:05:16 pp11 perdition[7782]: Connect: hi.mi.ts.u->203.216.5.113
---
It must be something related to the SSL'ness of these service, since I'm
not seeing this happening ever for imap/pop3. Alas a lot of people do use
TLS with those, so it's not a generic SSL issue. Maybe the master process
could kick a child handling connections in the head after "timeout"
seconds in connect state?
If more information is needed I can try to provide it, but note that with a
rate of roughly 35 pops per second I'm a bit weary to turn on
debugging. ^_-
This may or may not be related to another SSL related issue, which will
be for the sake of making searches in the archive more likely to find good
keywords in a separate mail.
Regards,
Christian
--
Christian Balzer Network/Systems Engineer NOC
chibi(a)gol.com Global OnLine Japan/Fusion Network Services
http://www.gol.com/
Hi,
I have perdition running great for sometime and just implemented
pop3s. POP3s works great too but the timeout value is not taking
affect on a idle connection
Here is the config:
#####
map_library /usr/local/lib/libperditiondb_ldap.so
map_library_opt "ldap://10.0.2.56
10.0.2.58/ou=EmailAccount,o=myinternalcave.com?uid,mailhost,port?one?(uid=%25s)"
username_from_database
pid_file /var/run/perdition.pop3s.pid
#log_facility /dev/null
no_lookup
outgoing_port 110
ssl_mode ssl_listen
ssl_cert_file /etc/postfix/ssl/mailssl.crt
ssl_key_file /etc/postfix/ssl/mailssl.key
ssl_ca_chain_file /etc/postfix/ssl/chain
log_facility mail
timeout 60
#######
iox1# time telnet mail.myinternalcave.com 110
Escape character is '^]'.
+OK POP3 Ready dark 0001341e
Connection closed by foreign host.
0.000u 0.015s 1:00.10 0.0% 208+912k 0+0io 0pf+0w
1minute timeout works fine on pop3 but pop3s just sits there forever it seems.
Does this feature work on pop3s?
Thanks
eric c
Hi,
Few users have their client (Thunderbird, ...) configured with a
certificate, client side certificate. In this case, the connection
perdition SSL abort with Fatal error :
The error log is :
error: unable to get local issuer certificate
Fatal error establishing TLS connection
With ssl_no_cert_verify="on", it's running successfully.
But could you tell me if it's a good setting (the most of the users
don't have certificat client).
Dominique
