Messages

31

Kloxo-MR Technical Helps / Re: IMAP IDLE

« on: 2014-11-10, 22:54:49 »

Gamin was installed, changed 0 to 1 in /etc/courier/imap.  Rebooted the server.

Push mail still not working.  I am wondering if courier was compiled with supoort for enhanced idle.

32

Kloxo-MR Technical Helps / Re: IMAP IDLE

« on: 2014-11-10, 19:33:23 »

@Mustafa, that site is very outdated, the push email I am talking about is defined here:
http://www.isode.com/whitepapers/imap-idle.html

This is the best way for mobile devices to get 'instant' notification of new mail.  I am using K9 on android for testing (open source, on play store) and it is impressive.  Gmail, yahoo, and hotmail all support it.  When a new mail arrives i am notified instantly, no polling/fetching.

Courier Imap supports IMAP IDLE with the inclusion of FAM or Gamin, both open source.  I think special compiling is necessary.  Please read here:
http://forum.sp.parallels.com/threads/imap-idle-push-mail.287832/

And here, which mentions real time monitoring IMAP using FAM.
http://www.inter7.com/courierimap/INSTALL.html
And FAM:
http://oss.sgi.com/projects/fam/

This would be a great addition to KloxoMR, the world is going mobile!

Please investigate Mustafa, thank you!

33

Kloxo-MR Technical Helps / IMAP IDLE

« on: 2014-11-10, 15:52:25 »

Customer's are requesting push notifications for email accounts.  I was not familiar with this and started investigating our IMAP server.  From what I have read Dovecot supports the IMAP IDLE, but have not successfukly got it working on my android in tests.

Any help would be greatly appreciated.  Thank you.

34

Kloxo-MR Bugs and Requests / Re: [CRITICAL] Many Kloxo-MR accounts hacked !!!

« on: 2014-11-09, 13:05:51 »

@Spacedust, have you found the method used to inject these files?  Was all accounts effected using wordpress?

Please inform here your investigations.  Thank you.

35

Kloxo-MR Bugs and Requests / Re: Poodlebleed bug

« on: 2014-10-22, 14:50:13 »

I know, see reply

http://forum.mratwork.com/kloxo-mr-bugs-and-requests/poodlebleed-bug/msg37876/#msg37876

However, that is not enough.  Something wrong in configuration of courier.  I am testing.

36

Kloxo-MR Bugs and Requests / Re: Poodlebleed bug

« on: 2014-10-22, 13:55:23 »

These port assignments are specified by the **Internet Assigned Numbers Authority (IANA)**:

 - Port 587: **[SMTP] Message submission** (SMTP-MSA), a service that accepts submission of email from email clients (MUAs). Described in RFC 6409.
 - Port 465: **URL Rendesvous Directory for SSM** [sic] *(entirely unrelated to email)*

Historically, port 465 was initially planned for the **SMTPS** encryption and authentication “wrapper” over SMTP, but it was quickly deprecated (within months, and over 15 years ago) in favor of **STARTTLS** over SMTP (RFC 3207). Despite that fact, there are probably many servers that support the deprecated protocol wrapper, primarily to support older clients that implemented SMTPS. Unless you need to support such older clients, SMTPS and its use on port 465 should remain nothing more than an historical footnote.

The hopelessly confusing and imprecise term, **SSL**, has often been used to indicate the **SMTPS** wrapper and **TLS** to indicate the **STARTTLS** protocol extension.

For completeness:

 - Port 25: **Simple Mail Transfer** (SMTP-MTA), a service that accepts submission of email from other servers (MTAs or MSAs). Described in RFC 5321.

Sources:

 - IANA *[Service Name and Transport Protocol Port Number Registry][1]*
u - “[Revoking the smtps TCP port][2]” - Email from Internet Mail Consortium director Paul Hoffman, 12 Nov 1998.
 - [RFC 6409 - Message Submission for Mail][3]
 - [RFC 5321 - Simple Mail Transfer Protocol][4]
 - [RFC 3207 - SMTP Service Extension for Secure SMTP over Transport Layer Security][5]
 - [RFC 4607 - Source-Specific Multicast for IP][6]


 1 http://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.txt
 2 http://www.imc.org/ietf-apps-tls/mail-archive/msg00204.html
3  http://www.rfc-editor.org/rfc/rfc6409.txt
4  http://www.rfc-editor.org/rfc/rfc5321.txt
5  http://www.rfc-editor.org/rfc/rfc3207.txt
6  http://www.rfc-editor.org/rfc/rfc4607.txt

We should delete /var/qmail/supervise/smtp-ssl directory/files, port 465 has been depreciated for over a decade.

37

Kloxo-MR Bugs and Requests / Re: Poodlebleed bug

« on: 2014-10-22, 13:47:42 »

Changes #1:
/etc/courier/pop3d-ssl
/etc/courier/imapd-ssl

Find

Code: [Select]

TLS_PROTOCOL=SSL23

Change to:

Code: [Select]

TLS_PROTOCOL=TLS1

Now for the run files.......

38

Kloxo-MR Bugs and Requests / Re: Poodlebleed bug

« on: 2014-10-22, 13:28:58 »

I will post the changes needed by end of day, you can investigate

39

Kloxo-MR Bugs and Requests / Re: Poodlebleed bug

« on: 2014-10-22, 12:59:37 »

Mustafa, forcing tls in the run files is the easiest approach, I need to know how you are going to implement this so on qmail update we are all on the same 'idea'.

40

Kloxo-MR Technical Helps / Re: Is this an exploit?

« on: 2014-10-22, 12:57:11 »

No, add it to /etc/csf/csf.pignore, then restart csf/lfd

41

Kloxo-MR Bugs and Requests / Re: Poodlebleed bug

« on: 2014-10-22, 04:02:56 »

I have already set all of my *-ssl /var/qmail/supervise run files to ssl=0 forcetls=1

Plus, pop3-ssl/run was missing all the export options.

42

Non Technical Discussions / MRatWork Forum Error

« on: 2014-10-20, 05:20:03 »

Noticed all users avatars are broken image links.  Tried to upload a new image and got this error:

An Error Has Occurred!
The attachments upload directory is not writable. Your attachment or avatar cannot be saved.

You have a problem Mustafa

43

Kloxo-MR Technical Helps / Re: Proper DNS Management.

« on: 2014-10-20, 05:09:41 »

No.  Anything you do outside of KloxoMR will be changed.  Kloxo, KloxoMR hold all dns information in kloxo database.  When running any of the fix scripts (web, mail, dns) it takes the database query and recreates it on the server.

If you do something manually, any 'update' or 'fix' will undo your changes.

44

Kloxo-MR Bugs and Requests / Re: [CRITICAL] bind master not updated on remove domain

« on: 2014-10-19, 23:50:46 »

This is still an issue.  Removal of domain shared master file is deleted, but named.master.conf is not updated, causing bind to fail, causing all sites on server to fail.  I'd say that is CRITICAL!

You keep telling me nsd and yadifa same as bind.  So I try to switch.  Both start without errors.  IntoDNS both fail.  My server goes unresponsive due to name resolution.

Switch back to bind.  All running well, IntoDns all green, all good.

I am using multiple IP addresses and three different nameservers.  Something isn't right.

45

Kloxo-MR Bugs and Requests / Re: [CRITICAL] bind master not updated on remove domain

« on: 2014-10-18, 20:23:06 »

Bind still loads /opt/configs/bind/defaults/named.master.conf

This file defines the website dns files.

The master files are shared, understood.  But the named.master.conf is not updated when a domain removed!  Bind then fails!