we've been using perdition as a pop3/pop3s/imap/imaps proxy for about
four years now, first with Debian Sarge package and now under Etch.
And throughout this time I've seen pop3s (and from the looks of it
the same happens with imaps) processes stuck in connect, like this:
16836 ? S 5:31 0 120 32179 2204 0.0 perdition.pop3s
28070 ? S 0:00 0 120 32311 1564 0.0 \_ perdition.pop3s: connect
7782 ? S 0:00 0 120 32311 1564 0.0 \_ perdition.pop3s: connect
24468 ? S 0:00 0 120 32311 1568 0.0 \_ perdition.pop3s: connect
14180 ? S 0:00 0 120 32311 1568 0.0 \_ perdition.pop3s: connect
13503 ? S 0:00 0 120 32311 1564 0.0 \_ perdition.pop3s: connect
They never die off, keep the connection open, there is no traffic and the
other end might be long gone. Last trace in the logs is always like this:
Feb 5 22:05:16 pp11 perdition: Connect: hi.mi.ts.u->126.96.36.199
It must be something related to the SSL'ness of these service, since I'm
not seeing this happening ever for imap/pop3. Alas a lot of people do use
TLS with those, so it's not a generic SSL issue. Maybe the master process
could kick a child handling connections in the head after "timeout"
seconds in connect state?
If more information is needed I can try to provide it, but note that with a
rate of roughly 35 pops per second I'm a bit weary to turn on
This may or may not be related to another SSL related issue, which will
be for the sake of making searches in the archive more likely to find good
keywords in a separate mail.
Christian Balzer Network/Systems Engineer NOC
chibi(a)gol.com Global OnLine Japan/Fusion Network Services
I just implemented perdition on PT. Samudera Indonesia. Tbk (www.sig.co.id). It's biggest shipping company in Indonesia
now, the users able to POP/IMAP their email from internet.
Version: perdition-1.18 using regexp popmap
Updated: March 2010
I am planning a large pop3 -> pop3 + imap migration across data centers
I just found out about perdition and I need to understand if it will
help solve a few problems.
1 - Usernames with ' . ' (dots) in it.
There are several usernames with dots in it. The destination
server is a Cyrus Imapd with the default
hierarchy setup (no dots).
For what I read in the pertitiondb man page, I could use
Where the account in the new server will obviously have an
underscore to replace the dot.
Is this right?
2 - --outgoing_server* *SERVER_A,SERVER_B*
It was not clear yet, how will --outgoing_server works.*
* On each connection it will connect to one of ther servers
only. Is that it?
If so, whats the advantage?
* Or will it connect to both servers and retrieve messages from
both? (what I need)
I understand that on a imap server this is not so easy, but on
pop3 doent seems to be a big challenge.
If this is not how it works? Is there something that could be
done achieve this behaviour?
3 - virtual domain support: user@domain
This is not clear to me.
For what I understood, this will be split into user as the
login and domain will be the host to connect.
Is that right?
If so, how can I prevent it?
Also How do I map it?
e.g.: user@domain to server:port
is that it?
I am new comer for Perdition.
I will uses Perdition as POP3 gateway for 9 POP3 servers.
Could you assist me how to config it?
1. there 9 POP3 servers, each server uses subdomain. example: serverA.subA.domain.com, serverB.subB.domain.com and so on
2. i will config perdition able to forward any user login to correct server based on login name. example: logon userA(a)subA.domain.com will redirect to serverA.subA.domain.com, and userB(a)subB.domain.com will redirect to serverB.subB.domain.com and so on.
Could you please help some clue how to setup perdition.
Thank you very much for your help
I have a half a dozen users who want to use IMAP to read e-mail off of the local
server. I'm reluctant to expose the mail server to the net for obvious reasons
and I'm looking for a proxy I can use to improve security just a little bit.
All I need is SSL for the input to the proxy. It would be nice if I could use
one password for the proxy and another password for the user's account. It would
also be nice if I could use SSL between the proxy and the IMAP server.
It looks like perdition can fill some of my needs but I just wanted a
confirmation make sure my reading skills were up to snuff
SSL_mode looks like it contains everything a need for inbound and outbound SSL
outgoing_server lets me specify the target server if I don't have a database of
users. I assume this means that the user password coming in is the same used by
the IMAP server itself.
that looks like it should cover what I need if I'm interpreting things correctly.