Mysql & Courier Imap Restarting Every 10 Mins?

Oct 6, 2008

yesterday i setup my first vps system and now its hosting 2 forums of my. Thing is in evry 10 mints Mysql & courier-imap are restarting..? I know this from the lxadmin alert email. So is it normal or is it a problem in my configuration..? Im running cent os 5 now. And i also check the log.. there is entry like below in it..

Oct 6 13:43:07 vps_10013 pure-ftpd: (?@127.0.0.1) [INFO] Logout.
Oct 6 13:43:07 vps_10013 xinetd[8020]: EXIT: ftp status=255 pid=21638 duration=0(sec)
Oct 6 13:43:13 vps_10013 xinetd[8020]: EXIT: smtp status=1 pid=21637 duration=6(sec)
Oct 6 13:43:48 vps_10013 xinetd[8020]: START: smtp pid=21679 from=63.247.94.194
Oct 6 13:43:49 vps_10013 xinetd[8020]: EXIT: smtp status=1 pid=21679 duration=1(sec)
Oct 6 13:44:48 vps_10013 xinetd[8020]: START: smtp pid=21901 from=63.247.94.194
Oct 6 13:44:49 vps_10013 xinetd[8020]: EXIT: smtp status=1 pid=21901 duration=1(sec)
Oct 6 13:45:49 vps_10013 xinetd[8020]: START: smtp pid=22163 from=63.247.94.194
Oct 6 13:45:50 vps_10013 xinetd[8020]: EXIT: smtp status=1 pid=22163 duration=1(sec)
Oct 6 13:46:49 vps_10013 xinetd[8020]: START: smtp pid=22499 from=63.247.94.194
Oct 6 13:46:50 vps_10013 xinetd[8020]: EXIT: smtp status=1 pid=22499 duration=1(sec)
Oct 6 13:47:49 vps_10013 xinetd[8020]: START: smtp pid=23668 from=63.247.94.194
Oct 6 13:47:50 vps_10013 xinetd[8020]: EXIT: smtp status=1 pid=23668 duration=1(sec)
Oct 6 13:48:49 vps_10013 xinetd[8020]: START: smtp pid=23920 from=63.247.94.194
Oct 6 13:48:52 vps_10013 xinetd[8020]: EXIT: smtp status=1 pid=23920 duration=3(sec)
Oct 6 13:49:49 vps_10013 xinetd[8020]: START: smtp pid=24173 from=63.247.94.194
Oct 6 13:49:53 vps_10013 xinetd[8020]: EXIT: smtp status=1 pid=24173 duration=4(sec)
Oct 6 13:50:49 vps_10013 xinetd[8020]: START: smtp pid=26117 from=63.247.94.194
Oct 6 13:50:53 vps_10013 xinetd[8020]: EXIT: smtp status=1 pid=26117 duration=4(sec)

View 7 Replies


ADVERTISEMENT

Postfix+MySQL+Courier-IMAP+Spamassassin+SquirrelMail ...issue

Feb 11, 2007

Hopefully I'm posting this in the correct area. Our server runs CentOS 4.4 on x86_64 arch.

So basically everything was going rather smoothly...

Problems began to arise at the point where I finished installing/configuring SquirrelMail. Upon logging in, I saw this:

[see attachment]

Ok, so I checked maillog and saw:

Feb 11 13:50:46 zeus imapd: LOGIN, user=alex, ip=[::ffff:127.0.0.1], protocol=IMAP
Feb 11 13:50:47 zeus imapd: Failed to connect to socket /tmp/fam--
Feb 11 13:50:47 zeus imapd: Failed to create cache file: maildirwatch (alex)
Feb 11 13:50:47 zeus imapd: Error: Input/output error
Feb 11 13:50:47 zeus imapd: Check for proper operation and configuration
Feb 11 13:50:47 zeus imapd: of the File Access Monitor daemon (famd).
Feb 11 13:50:47 zeus imapd: DISCONNECTED, user=alex, ip=[::ffff:127.0.0.1], headers=0, body=0, rcvd=21, sent=57, time=1

So I did some searching and determined it was a problem with Courier-IMAP being compiled with File Alteration Monitor support and famd not running (I built RPM directly from source tarball without any customization whatsoever per the instructions on the Courier website).

I found some possible solutions to be:

1) Install and run fam and be sure portmapper is running as well (problem being is that fam has since been replaced by gamin on CentOS, which is installed properly on my system).
2) Do a source install of Courier-IMAP and --disable-fam

Ok, so route 1 went like this: I uninstalled gamin, found fam-2.6.8, installed it, started it manually, made sure portmapper was running and tried again. This time, I still got the same errors in SquirrelMail, but the errors in maillog didn't show up. However, shortly after the page loaded, the famd process I had started manually promptly ended without my intervention. Ok, onto trying #2.

Route 2 went like this: reinstalled gamin, then I tried building a custom RPM by manually configuring with --disable-fam and then using rpmbuild -bc --short-circuit and rpmbuild -bi --short-circuit. That didn't change anything at all, I still had the same errors both with SquirrelMail and in maillog. Then I said ok, I'll just do a complete source install. ./configure --disable-fam && make && make install. Manually started that server, tried again, same deal, both errors.

So I've got problems. Either with Courier-IMAP, SquirrelMail, or both. The other daemons seem to run fine, I just mentioned them in case of the possibility of some kind of (unknown to me) conflict.

If you need to see any of my configs, let me know...any information greatly appreciated...I'm desperate.

View 1 Replies View Related

Courier Imap Too Slow

Dec 19, 2007

I have a mail account hosted in a VPS with cpanel and SquirrelMail as webmail client.

It has thousands of mail files. SquirrelMail got very slow, because courier-imap is very slow sorting files and authenticating users.

I've heard that Dovecot is much faster than courier...

Does anyone have replaced courier by dovecot in cPanel installations? is it a good idea?

View 4 Replies View Related

Courier Imap Pop3d Fail To Deliver Message On First Attempt

Oct 5, 2007

Courier-imap pop3d fail to deliver message to a POP client on first attempt. On the second attempt its able to download the messages and no problems. Not sure what could be causing that problem. Are there any tools that are used with courier-imap mailboxes for fixing corrupted mailboxes?

View 2 Replies View Related

Plesk 12.x / Linux :: Courier IMAP And Auto Deleting Trash After 7 Days

Feb 20, 2015

I'm trying to find Courier IMAP config: /etc/courier/imapd

Because i would like to edit the parameters for the trash folder (see qoute and link below)

The file on my server is not there. I did some grep and locate commands and was unable to find it.

##NAME: IMAP_EMPTYTRASH:0
#
# The following setting is optional, and causes messages from the given
# folder to be automatically deleted after the given number of days.
# IMAP_EMPTYTRASH is a comma-separated list of folder:days. The default
# setting, below, purges 7 day old messages from the Trash folder.
# Another useful setting would be:
#
# IMAP_EMPTYTRASH=Trash:7,Sent:30

[Code] ....

View 1 Replies View Related

Restarting Mysql/named If They Drop

Dec 22, 2007

way to restart mysql and named if they drop. I'm on cpanel.

I've searched and found the following:

For mysql:

Code:
NUMBER=`ps --no-heading --user mysql | wc -l`;
[ $NUMBER -eq 0 ] && service mysql restart;
For named:

Code:
NUMBER=`ps --no-heading --user named | wc -l`;
[ $NUMBER -eq 0 ] && service named restart;
I have these set to run every 5 minutes, just to check if mysql/named are running. I found out that it doesn't work: I woke up to a whole bunch of sql errors and realized that mysql dropped while I was asleep... I type in "service mysql restart" manually and it restarts as usual, so I know that the command to restart sql works fine, but the restarts aren't triggering in the first place.

View 2 Replies View Related

How To Permanently Disable Http/ftp/mysql/courier With LXADMIN/KLAXO

Jun 30, 2009

I have a small VPS that is used only to send mail. It uses the HyperVM software, so I installed "Klaxo" (LXadmin) on it and set up the domain, etc..

I then went into the "Server : Linux --> Services" page and disabled everything except qmail. (I also set them so they are not auto-started at bootup.)

The problem is that after about 10 minutes or so... all the services are automatically restarted.

I have no idea what process is doing this, and it's driving me a little nutty.

Does anyone know how to permanently disable a service using the Klaxo/lxadmin control panel?

(Or at least, where I can find whatever monitoring system is checking if they are up, and then restarting them?)

View 2 Replies View Related

Horde Mail IMAP :: Auth_imap: Required IMAP Extension Not Found

Sep 2, 2007

I'm having trouble with horde it is giving me the following error:

Auth_imap: Required IMAP extension not found.

Now I pretty much know why that error is coming up I'm missing the IMAP module. What I don't understand is if it was their before why is it gone now. The last thing I did on the server was upgrade Perl.

I would like to get rid of this error but I'm afraid the only solutions will wipe my current setup. If of course their is a way to fix this error without ruining my current setup that would be a lot more useful

The main thing I want to do is retrieve an address book from the horde server. How would I go about finding where the address book is stored through the command line.

Thanks ahead of time for the help.

View 4 Replies View Related

Dovecot Or Courier

Jul 7, 2009

I need to determine which mail server is better so i can know what to install as default on future servers.

View 9 Replies View Related

Courier Or Dovecot

Apr 25, 2009

i have cpanel with 512 meg ram.

i need fast mail server. so which of them is good?

Courier or Dovecot

View 10 Replies View Related

Restarting Apache

Oct 6, 2007

Im having trouble restarting apache. I have a program which executes command lines and it runs as a system service (on windows). when i tell it to restart it loads apache up (i see another httpd.exe appear in task manager) but it doesnt restart it. the command line i used is "httpd.exe -k restart" i have added an environment variable but i have also tried the full path to the exe and still no luck.

If i run the exact same line from a batch file as local admin then it works fine. I also tried getting my program to run that batch file but again it didnt work.

Is there a reason why this would happen? Can only Admin restart it and not SYSTEM? Is there another command i should be using?

View 0 Replies View Related

Restarting Apache2

Apr 4, 2009

Ive had this problem numerous times (website failed to connect error) before and the web management team tell me that apache2 needs to be restarted, seeing as they are not replying to my emails im gona try and do it myself.

i open up putty, login as root user, then what?

View 2 Replies View Related

Error On Restarting Csf+ldf On WHM

Jul 26, 2009

I have installed CSF on a VPS with WHM and when i try to restart i get this:

Code:
Restarting csf...

Flushing chain `INPUT'Flushing chain `FORWARD'Flushing chain `OUTPUT'Flushing chain `acctboth'Deleting chain `acctboth'Restarting bandmin acctboth chains for cPanelDROP tcp opt -- in * out * 0.0.0.0/0 -> 0.0.0.0/0 tcp dpt:67 DROP udp opt -- in * out * 0.0.0.0/0 -> 0.0.0.0/0 udp dpt:67 DROP tcp opt -- in * out * 0.0.0.0/0 -> 0.0.0.0/0 tcp dpt:68 DROP udp opt -- in * out * 0.0.0.0/0 -> 0.0.0.0/0 udp dpt:68 DROP tcp opt -- in * out * 0.0.0.0/0 -> 0.0.0.0/0 tcp dpt:111 DROP udp opt -- in * out * 0.0.0.0/0 -> 0.0.0.0/0 udp dpt:111 DROP tcp opt -- in * out * 0.0.0.0/0 -> 0.0.0.0/0 tcp dpt:113 DROP udp opt -- in * out * 0.0.0.0/0 -> 0.0.0.0/0 udp dpt:113 DROP tcp opt -- in * out * 0.0.0.0/0 -> 0.0.0.0/0 tcp dpts:135:139 DROP udp opt -- in * out * 0.0.0.0/0 -> 0.0.0.0/0 udp dpts:135:139 DROP tcp opt -- in * out * 0.0.0.0/0 -> 0.0.0.0/0 tcp dpt:445 DROP udp opt -- in * out * 0.0.0.0/0 -> 0.0.0.0/0 udp dpt:445 DROP tcp opt -- in * out * 0.0.0.0/0 -> 0.0.0.0/0 tcp dpt:513 DROP udp opt -- in * out * 0.0.0.0/0 -> 0.0.0.0/0 udp dpt:513 DROP tcp opt -- in * out * 0.0.0.0/0 -> 0.0.0.0/0 tcp dpt:520 DROP udp opt -- in * out * 0.0.0.0/0 -> 0.0.0.0/0 udp dpt:520 iptables: Unknown error 4294967295LOG tcp opt -- in * out * 0.0.0.0/0 -> 0.0.0.0/0 limit: avg 30/min burst 5 LOG flags 0 level 4 prefix `Firewall: *TCP_IN Blocked* ' Error: iptables command [/sbin/iptables -v -A LOGDROPIN -p tcp -m limit --limit 30/m --limit-burst 5 -j LOG --log-prefix 'Firewall: *TCP_IN Blocked* '] failed, at line 280
...Done.
Restarting lfd...

Stopping lfd:[ OK ][ OK ]Starting lfd:Error: You have an unresolved error when starting csf. You need to restart csf successfully before starting lfd[ OK ]
...Done.

dont know where is the error on the iptables, i didn't change any config on iptables.How can I config iptables for CSF?

View 14 Replies View Related

HTTPd Keeps Restarting

Oct 31, 2009

How can I prevent the httpd from timeout so much? the server recovers which is prefectly fine but there seems to be a problem some where.

httpd failed @ Sat Oct 31 17:47:53 2009. A restart was attempted automagically.
Service Check Method: [tcp connect]

Failure Reason: Timeout while trying to get data from service

View 14 Replies View Related

Restarting Service On VPS

Aug 29, 2008

i have one site on vps host with 256 ram burst untill 768 ram...

every day i watch my site it alwasy consume CPU usage avareage 60%++ consume ..for daily usage its average 60% - 80% ..sometime its get 99% ...

if this situation happend to high..i used to restart service for the bind, apache, mysql and more serivice..i use cpanel and whm,,,..

my question is :

is there bad effect if i run the restart serivice everyday?

View 5 Replies View Related

Apache :: 2.2 Not Starting After Restarting PC

Jul 20, 2013

I can't start the server with my php enabled 5.2.I've the following error reports.

The Apache2.2 service terminated with service-specific error 1 (0x1).

[Reviewed at the event viewer]

[Sat Jul 20 20:25:52 2013] [warn] pid file C:/Program Files/Apache Software Foundation/Apache2.2/logs/httpd.pid overwritten -- Unclean shutdown of previous Apache run?

[Reviewed the error log file of Apache 2.2]

I resolved this problem earlier by re-installing both php and apache and configuring them all over again.But when i restart my pc ,i get the same error....

View 3 Replies View Related

Right Values For Courier Configuration On CPanel Server ?

Jan 22, 2008

Any live expirience for good values of this courier settings for cPanel server:

Maximum Imap Connections (Total)
Maximum Imap Connections Per Ip
Maximum TLS/SSL Imap Connections Per Ip

Maximum Pop3 Connections (Total)
Maximum Pop3 Connections Per Ip
Maximum TLS/SSL Pop3 Connections Per Ip

Number of Authentication Daemons

?

The current values are the original ones which cPanel set:

Maximum Imap Connections (Total) 50
Maximum Imap Connections Per Ip 30
Maximum TLS/SSL Imap Connections Per Ip 30

Maximum Pop3 Connections (Total) 50
Maximum Pop3 Connections Per Ip 4
Maximum TLS/SSL Pop3 Connections Per Ip 30

Number of Authentication Daemons 5

Thanks,

View 1 Replies View Related

Create Additional Subfolder Postfix/courier

Sep 24, 2008

I have a mail server which is courier, postfix, amavisd, using Mysql db and virtual mailboxes which I administer through postfixadmin.

I want to be able to add a set of default folders to all mailboxes created such as Possible Spam and some others.

I have investigated shared folders but this is not what i want, is there a way I can get courier/postfix to create a set of additional sub-folders when it creates a mailbox.

All mailboxes are accessed as IMAP mailboxes.

View 0 Replies View Related

Plesk 12.x / Linux :: Timeout On Courier-pop3d

Jul 14, 2015

I have a problem with an account. The client connects and starts getting his mails, like this:

Jul 14 07:39:04 host courier-pop3d: LOGIN, user=*****@*****.com, ip=[::ffff:*.*.*.152], port=[*]Click to expand...

View 2 Replies View Related

Lighttpd / Apache - Restarting The Server

May 30, 2009

We've been thinking about writing our own hosting control panel for our own
"tight" hosting setup, so that can alter the panel just to our needs without relying on updates from anybody else.

To read new configurations in Lighttpd or Apache, as far as I know, requires the software to be restarted (for example service apache restart). Are there any negative effects of this, I'm assuming that whilst being restarted there is a small amount of time during which the software is "down" and websites can't be accessed during that period (probably <1 second). Am I correct?

What is the best way to reload configurations into these http servers without service interruption? I notice that DirectAdmin seems to just restart Apache on any function that alters the configuration file - for example adding a new user.

View 4 Replies View Related

Multiple Problems With Restarting Services

Nov 8, 2009

I thought everything was fine after setting up my new VPS with WHM/cPanel - however it turns out I was very, very wrong. I was trying to work out why email wasn't able to send or receive - so I tried to restart the mail service from WHM. This is where the problems started.

I tried to restart different services (all of them) some worked fine - some failed (the ones which are in red below are the ones which failed). The results are below. If anyone has any information or wouldn't mind helping me to resolve this I would appreciate it.

DNS Server (BIND/NSD):
Waiting for named to restart..............finished.

named (/usr/sbin/named -u named) running as named with PID 25824

named started ok

--------------------------------------------------------------
FTP Server (ProFTPd/PureFTPd):
Waiting for ftpserver to restart..............finished.

pure-authd (/usr/sbin/pure-authd -s /var/run/ftpd.sock -r /usr/sbin/pureauth) running as root with PID 30596

ftpserver started ok

--------------------------------------------------------------
HTTP Server (Apache):
Waiting for httpd to restart..............finished.

httpd (/usr/local/cpanel/whostmgr/bin/whostmgr ./reshttpd) running as root with PID 3145
httpd (/usr/local/apache/bin/httpd -k start -DSSL) running as root with PID 3171
httpd (/usr/local/apache/bin/httpd -k start -DSSL) running as root with PID 3177

httpd started ok
--------------------------------------------------------------
IMAP Server (Courier/Dovecot):
Waiting for imap to restart..............finished.

authdaemond (/usr/sbin/courierlogger -pid=/var/spool/authdaemon/pid -facility=mail -start /usr/libexec/courier-authlib/authdaemond) running as root with PID 7668
authdaemond (/usr/libexec/courier-authlib/authdaemond) running as root with PID 7669
authdaemond (/usr/libexec/courier-authlib/authdaemond) running as root with PID 7670
authdaemond (/usr/libexec/courier-authlib/authdaemond) running as root with PID 7671

imap has failed, please contact the sysadmin (result was "couriertcpd is not running").
--------------------------------------------------------------
Mail Server (Exim):
Waiting for exim to restart..............finished.


exim: [ != 220]
exim has failed, please contact the sysadmin.
--------------------------------------------------------------
POP3 Server (cPPOP):
Waiting for cppop to restart..............finished.

authdaemond (/usr/sbin/courierlogger -pid=/var/spool/authdaemon/pid -facility=mail -start /usr/libexec/courier-authlib/authdaemond) running as root with PID 11869
authdaemond (/usr/libexec/courier-authlib/authdaemond) running as root with PID 11870
authdaemond (/usr/libexec/courier-authlib/authdaemond) running as root with PID 11871
authdaemond (/usr/libexec/courier-authlib/authdaemond) running as root with PID 11872

cppop started ok
--------------------------------------------------------------
SQL Server (MySQL):
Waiting for mysql to restart..............finished.

mysqld_safe (/bin/sh /usr/bin/mysqld_safe --datadir=/var/lib/mysql --pid-file=/var/lib/mysql/server.rawpromo.com.pid) running as root with PID 15401
mysqld (/usr/sbin/mysqld --basedir=/ --datadir=/var/lib/mysql --user=mysql --pid-file=/var/lib/mysql/server.rawpromo.com.pid --skip-external-locking) running as mysql with PID 15435

mysql has failed, please contact the sysadmin (result was "mysql has failed").
--------------------------------------------------------------
SSH Server (OpenSSH):
Waiting for sshd to restart..............finished.

sshd (/usr/local/cpanel/whostmgr/bin/whostmgr ./ressshd) running as root with PID 19921
sshd (/usr/sbin/sshd) running as root with PID 19949

sshd started ok
--------------------------------------------------------------

View 4 Replies View Related

Errror When Restarting Httpd Mod_evasive

May 5, 2008

Installing mod_evasive after serveral attacks on our server.

but when restarting httpd I get this error,

httpd: Syntax error on line 36 of /usr/local/apache/conf/httpd.conf: API module structure 'evasive20_module' in file /usr/lib/httpd/modules/mod_evasive20.so is garbled - expected signature 41503232 but saw 41503230 - perhaps this is not an Apache module DSO, or was compiled for a different Apache version?


Running apache 2.2.8

View 1 Replies View Related

Apache :: Server Restarting Automatically

Jan 16, 2015

Apache Version: 2.2.29
OS Version: Windows 2012 R2 64 bit OS

Restart of apache is happening continuously .... below is snippet of the same.....

Fri Jan 16 11:22:53 2015] [notice] Parent: child process exited with status 3221225477 -- Restarting.
[Fri Jan 16 11:22:53 2015] [notice] Apache/2.2.29 (Win32) configured -- resuming normal operations
[Fri Jan 16 11:22:53 2015] [notice] Server built: Sep 10 2014 11:38:25
[Fri Jan 16 11:22:53 2015] [notice] Parent: Created child process 11440
[Fri Jan 16 11:22:53 2015] [notice] Child 11440: Child process is running
[Fri Jan 16 11:22:53 2015] [notice] Oracle WebLogic plugin build date/time: Feb 9 2011 11:49:26. Change Number: 1386101
[Fri Jan 16 11:22:53 2015] [notice] Child 11440: Acquired the start mutex.
[Fri Jan 16 11:22:53 2015] [notice] Child 11440: Starting 64 worker threads.
[Fri Jan 16 11:22:53 2015] [notice] Child 11440: Starting thread to listen on port 80.
[Fri Jan 16 11:22:53 2015] [notice] Child 11440: Starting thread to listen on port 80.
[Fri Jan 16 11:22:54 2015] [notice] Parent: child process exited with status 3221225477 -- Restarting.
[Fri Jan 16 11:22:54 2015] [notice] Apache/2.2.29 (Win32) configured -- resuming normal operations

View 2 Replies View Related

Plesk 12.x / Linux :: Courier Mail Service Do Not Respond

Feb 2, 2015

I'm using plesk with CentOS 6.6

After setting up some e-mail accounts over the plesk gui I tried to connect via a mail software (like thunderbird).

This failed with every combination of settings I tried. So I checked if the POP3/IMAP services are running correctly using telnet.

I connected using the following command:

Code:
telnet <host-ip> 110

The response was:

Code:
Trying <host-IP>...
Connected to <host-IP>.
Escape character is '^]'.
-ERR Cannot connect to POP server <host-IP> (<host-IP>:110), NB connect error 1460
Connection closed by foreign host.

Did I miss to enable a setting?

The Plesk gui schows me, that the corresponding services are running...

View 2 Replies View Related

Plesk 12.x / Linux :: Courier SSL Shared Cipher Error

Aug 8, 2014

Yesterday we upgraded two of our servers to the latest Plesk 12.

The 1st server is an CentOS/CLoudlinux 6.x server and the 2nd an CentOS 5.x server.

Both of them were running Plesk 11.5 before the upgrade.

After the upgrade, we have the same issue in both servers which is that the START/TLS, SSL protocols at Courier imaps or pop3s do not work, and mail clients (outlook, thunderbird) return that the password is wrong when they connect over a secure connection.

In both of them, at the /var/log/maillog, we are getting the same messages, as the following one:

--------------------------------------------------------------------------
courier-imaps: couriertls: connect: error:1408A0C1:SSL routines:SSL3_GET_CLIENT_HELLO:no shared cipher
--------------------------------------------------------------------------

As the issue is in both server, we believe thath it there is a bug in the new version or the update script.

We have already checked all configurations which seem ok, tried to... reboot the machines, mailchk repair, but nothing seems to work. 

View 1 Replies View Related

Plesk 12.x / Linux :: Unable To Disable SSL V2 And V3 In Postfix And Courier

Dec 13, 2014

I am trying to secure my VPS and one thing noted in a recent scan was SSL v2 and v3 being supported for SMTP, POP3 and IMAP. So a check of ‘Disabling SSLv3 Support on Servers’ and the Postfix configuration settings suggest:

smtpd_tls_mandatory_exclude_ciphers = aNULL, MD5
# Preferred syntax with Postfix = 2.5:
smtpd_tls_mandatory_protocols = !SSLv2, !SSLv3​

This actually goes further than disabling SSLv2 and v3 and also excludes the use of NULL and MD5 ciphers.

The Postfix conf file, main.cf exists in two places on my VPS:

# find / -name main.cf
/usr/libexec/postfix/main.cf
/etc/postfix/main.cf​

Examining both only the copy in /etc/postfix/ is configured and at the end of this file I can find all the Plesk settings, including some RBLs I’ve defined via the UI. Hence I know this is the working config as of the two, it’s the only one actually configured. Hence I add the required commands to the config:

...
smtpd_tls_key_file = $smtpd_tls_cert_file
smtpd_tls_security_level = may
smtpd_use_tls = yes
smtp_tls_security_level = may

[Code] ....

I then go to the Plesk Tools & Settings > Services Management and restart:

SMTP Server (Postfix)
And for good measure:

Plesk milter (Postfix)

I then test whether SSLv2 is enabled:

# openssl s_client -connect x.x.x.x:25 -starttls smtp -ssl2​

Now what I should get back is an error as the attempt to connect with SSLv2 should fail as it's an excluded protocol, but instead what I get back is the Plesk cert and a connection:

# openssl s_client -connect x.x.x.x:25 -starttls smtp -ssl2
CONNECTED(00000003)
depth=0 C = US, ST = Virginia, L = Herndon, O = Parallels, OU = Parallels Panel, CN = Parallels Panel, emailAddress = info@parallels.com
verify error:num=18:self signed certificate
...​

Why? What do I need to do to have Postfix use the updated config and refuse an SSL2 connection?

I seem to have the same issue with Courier having made similar changes to the /etc/courier-imap/pop3d-ssl file:

# Iain 2014-12-12
# TLS_CIPHER_LIST="SSLv3:TLSv1:HIGH:!LOW:!MEDIUM:!EXP:!NULL:!aNULL@STRENGTH"
TLS_CIPHER_LIST="TLSv1:HIGH:MEDIUM:!LOW:!EXP:!NULL:!aNULL@STRENGTH"​

And /etc/courier-imap/imapd-ssl file:

# Iain 2014-12-12
# TLS_PROTOCOL=SSL23
TLS_PROTOCOL=TLS1​

actually, this should probably read:

# Iain 2014-12-12
# TLS_PROTOCOL=SSL23
TLS_PROTOCOL=TLS1, TLS1.1, TLD1.2​

Why am I unable to disable SSL v2 and v3 for SMTP/POP3/IMAP with Postfix and Courier?

View 15 Replies View Related

Q: Prevent DDoS Attacks With Restarting Httpd?

Jan 12, 2008

Can you restart the httpd to get the server online again while you are under an DDoS attack?

The reason for asking is that I was told that when restarting the httpd it should start to work again instantly, and so it seems.

But why? doesnt the attack "continue" after the restart?

View 14 Replies View Related







Copyrights 2005-15 www.BigResource.com, All rights reserved