Perdition-users March 2010

perdition-users@vergenet.net

7 participants
6 discussions

Zombie pop3s (and imaps?) processes in connect state

by Christian Balzer

Hello, we've been using perdition as a pop3/pop3s/imap/imaps proxy for about four years now, first with Debian Sarge package and now under Etch. And throughout this time I've seen pop3s (and from the looks of it the same happens with imaps) processes stuck in connect, like this: --- 16836 ? S 5:31 0 120 32179 2204 0.0 perdition.pop3s 28070 ? S 0:00 0 120 32311 1564 0.0 \_ perdition.pop3s: connect 7782 ? S 0:00 0 120 32311 1564 0.0 \_ perdition.pop3s: connect 24468 ? S 0:00 0 120 32311 1568 0.0 \_ perdition.pop3s: connect 14180 ? S 0:00 0 120 32311 1568 0.0 \_ perdition.pop3s: connect 13503 ? S 0:00 0 120 32311 1564 0.0 \_ perdition.pop3s: connect --- They never die off, keep the connection open, there is no traffic and the other end might be long gone. Last trace in the logs is always like this: --- Feb 5 22:05:16 pp11 perdition[7782]: Connect: hi.mi.ts.u->203.216.5.113 --- It must be something related to the SSL'ness of these service, since I'm not seeing this happening ever for imap/pop3. Alas a lot of people do use TLS with those, so it's not a generic SSL issue. Maybe the master process could kick a child handling connections in the head after "timeout" seconds in connect state? If more information is needed I can try to provide it, but note that with a rate of roughly 35 pops per second I'm a bit weary to turn on debugging. ^_- This may or may not be related to another SSL related issue, which will be for the sake of making searches in the archive more likely to find good keywords in a separate mail. Regards, Christian -- Christian Balzer Network/Systems Engineer NOC chibi(a)gol.com Global OnLine Japan/Fusion Network Services http://www.gol.com/

11 years

Problems with IMAP4S LOGIN command

by TOPdesk Systeembeheer (beheer＠TOPdesk.com)

Hi everybody, Since an upgrade to our backend IMAPS server (Zarafa 6.20.7), we have some trouble authenticating via our perdition IMAP4S proxy (version 1.17-7etch1). I've enabled debug and connection logging, and I see that the LOGIN command is splitted in 3 lines instead of sending the whole command in one. Is that normal? Can I configure it somewhere? Here is the log I get: Jul 2 14:33:45 floor perdition[9781]: Connect: xx.xx.xx.xx -> [IP proxy] Jul 2 14:33:45 floor perdition[9781]: SSL connection using AES128-SHA Jul 2 14:33:45 floor perdition[9781]: SELF: "* OK IMAP4 Ready floor 0001d839\r\n" Jul 2 14:33:46 floor perdition[9781]: CLIENT: "1.584 CAPABILITY\r\n" Jul 2 14:33:46 floor perdition[9781]: SELF: "* CAPABILITY IMAP4 IMAP4REV1\r\n" Jul 2 14:33:46 floor perdition[9781]: SELF: "1.584 OK CAPABILITY\r\n" Jul 2 14:33:46 floor perdition[9781]: CLIENT: "2.584 LOGIN piekjepuk 6012417\r\n" Jul 2 14:33:46 floor perdition[9781]: username_add_domain: username_add_domain 0 1 0x807bd1c Jul 2 14:33:46 floor perdition[9781]: getserver: do_dbserver_get Jul 2 14:33:46 floor perdition[9781]: SSL connection using AES256-SHA Jul 2 14:33:46 floor perdition[9781]: REAL: "* OK Zarafa IMAP gateway ready\r\n" Jul 2 14:33:46 floor perdition[9781]: SELF: "flim07 CAPABILITY\r\n" Jul 2 14:33:46 floor perdition[9781]: REAL: "* CAPABILITY IMAP4rev1 CHILDREN XAOL-OPTION IDLE\r\n" Jul 2 14:33:46 floor perdition[9781]: REAL: "flim07 OK CAPABILITY Completed\r\n" Jul 2 14:33:46 floor perdition[9781]: SELF: "flim08 LOGIN {6}\r\n" Jul 2 14:33:46 floor perdition[9781]: REAL: "flim08 BAD LOGIN must have 2 arguments\r\n" Jul 2 14:33:46 floor perdition[9781]: imap4_out_response: invalid tag from server 1 Jul 2 14:33:46 floor perdition[9781]: imap4_out_authenticate: imap4_out_response login Jul 2 14:33:46 floor perdition[9781]: SELF: "piekjepuk {7}\r\n" Jul 2 14:33:46 floor perdition[9781]: REAL: "piekjepuk BAD Command not recognized\r\n" Jul 2 14:33:46 floor perdition[9781]: imap4_out_response: invalid tag from server 1 Jul 2 14:33:46 floor perdition[9781]: imap4_out_authenticate: imap4_out_response name Jul 2 14:33:46 floor perdition[9781]: SELF: "6012417\r\n" Jul 2 14:33:46 floor perdition[9781]: REAL: "* BAD Command not recognized\r\n" Jul 2 14:33:46 floor perdition[9781]: SELF: "* BAD Command not recognized\r\n" Jul 2 14:34:46 floor perdition[9781]: REAL: "* BYE Connection closed because of timeout\r\n" Jul 2 14:34:46 floor perdition[9781]: SELF: "* BYE Connection closed because of timeout\r\n" Jul 2 14:34:46 floor perdition[9781]: REAL: "" Jul 2 14:34:46 floor perdition[9781]: token_read: token_fill_buffer Jul 2 14:34:46 floor perdition[9781]: read_line: token_read Jul 2 14:34:46 floor perdition[9781]: imap4_out_response: read_line Jul 2 14:34:46 floor perdition[9781]: imap4_out_authenticate: imap4_out_response passwd Jul 2 14:34:46 floor perdition[9781]: main: protocol->out_authenticate -1 Jul 2 14:34:46 floor perdition[9781]: Fatal error authenticating user. Exiting child. Any ideas? Thank you very much in advance! Best regards, -- Xesc

13 years, 8 months

implementing perdition on Samudera Indonesia

by Tjilik

Dear Colleagues, I just implemented perdition on PT. Samudera Indonesia. Tbk (www.sig.co.id). It's biggest shipping company in Indonesia now, the users able to POP/IMAP their email from internet. Version: perdition-1.18 using regexp popmap Source: Tjilik Updated: March 2010

13 years, 8 months

Perdition and mass migration

by Raul Dias

Hi, I am planning a large pop3 -> pop3 + imap migration across data centers and countries. I just found out about perdition and I need to understand if it will help solve a few problems. 1 - Usernames with ' . ' (dots) in it. There are several usernames with dots in it. The destination server is a Cyrus Imapd with the default hierarchy setup (no dots). For what I read in the pertitiondb man page, I could use something like: (.*)\.(.*):$1_$2@newserver:port Where the account in the new server will obviously have an underscore to replace the dot. Is this right? 2 - --outgoing_server* *SERVER_A,SERVER_B* * It was not clear yet, how will --outgoing_server works.* * On each connection it will connect to one of ther servers only. Is that it? If so, whats the advantage? * * Or will it connect to both servers and retrieve messages from both? (what I need) I understand that on a imap server this is not so easy, but on pop3 doent seems to be a big challenge. If this is not how it works? Is there something that could be done achieve this behaviour? 3 - virtual domain support: user@domain This is not clear to me. For what I understood, this will be split into user as the login and domain will be the host to connect. Is that right? If so, how can I prevent it? Also How do I map it? e.g.: user@domain to server:port user@domain:user@domain@server:port is that it? Thanks, Raul * *

13 years, 8 months

how install & config perdition

by Tjilik

Dear colleagues, I am new comer for Perdition. I will uses Perdition as POP3 gateway for 9 POP3 servers. Could you assist me how to config it? 1. there 9 POP3 servers, each server uses subdomain. example: serverA.subA.domain.com, serverB.subB.domain.com and so on 2. i will config perdition able to forward any user login to correct server based on login name. example: logon userA(a)subA.domain.com will redirect to serverA.subA.domain.com, and userB(a)subB.domain.com will redirect to serverB.subB.domain.com and so on. Could you please help some clue how to setup perdition. Thank you very much for your help

13 years, 8 months

Blackberry IMAP proxy

by Eric S. Johansson

I have a half a dozen users who want to use IMAP to read e-mail off of the local server. I'm reluctant to expose the mail server to the net for obvious reasons and I'm looking for a proxy I can use to improve security just a little bit. All I need is SSL for the input to the proxy. It would be nice if I could use one password for the proxy and another password for the user's account. It would also be nice if I could use SSL between the proxy and the IMAP server. It looks like perdition can fill some of my needs but I just wanted a confirmation make sure my reading skills were up to snuff SSL_mode looks like it contains everything a need for inbound and outbound SSL outgoing_server lets me specify the target server if I don't have a database of users. I assume this means that the user password coming in is the same used by the IMAP server itself. that looks like it should cover what I need if I'm interpreting things correctly. --- eric

13 years, 9 months

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

Perdition-users March 2010