<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><div class="">Dear Cyrus friends and Heiler Bensimon Bemerguy,</div><div class=""><br class=""></div><div class="">Don’t forget to report your solution.</div><div class=""><br class=""></div><div class="">It might certainly help other Cyrus users as well, though it is not directly related to Cyrus.</div><div class=""><br class=""></div><div class=""><br class=""></div><div class=""><br class=""></div><div class="">
<div dir="auto" style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;">Wiel Offermans</div><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;"><a href="mailto:Willem@Offermans.Rompen.nl" class="">Willem@Offermans.Rompen.nl</a></div><div style="caret-color: rgb(0, 0, 0); color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><br class=""></div><br class="Apple-interchange-newline"></div><br class="Apple-interchange-newline">
</div>
<div><br class=""><blockquote type="cite" class=""><div class="">On 7 Mar 2019, at 15:39, Heiler Bemerguy via Info-cyrus <<a href="mailto:info-cyrus@lists.andrew.cmu.edu" class="">info-cyrus@lists.andrew.cmu.edu</a>> wrote:</div><br class="Apple-interchange-newline"><div class="">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" class="">
<div text="#000000" bgcolor="#FFFFFF" class=""><p class="">Yes I've read imapd.conf and cyrus.conf and found no options to
limit connections per source IP or "idleness".. <br class="">
</p><p class="">It means anyone can open a lot of connections to any port (143,
25, 110 etc) and render the server unusable??</p><p class="">I'm using Debian, so I'll try to figure out how to do that with
iptables.. Thanks!<br class="">
</p><p class=""><br class="">
</p>
<pre class="moz-signature" cols="72">Best Regards,
Heiler Bensimon Bemerguy - CINBESA
Analista de Redes, Wi-Fi,
Virtualização e Serviços Internet
(55) 91 98151-4894</pre>
<div class="moz-cite-prefix">Em 07/03/2019 11:25, Willem Offermans
escreveu:<br class="">
</div>
<blockquote type="cite" cite="mid:009A6994-69AF-4EAA-8A63-8C214E3F1780@Offermans.Rompen.nl" class="">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" class="">
<span class="">Dear Cyrus friends and Heiler Bensimon Bemerguy,<br class="">
</span>
<div class=""><br class="">
</div>
<div class="">You could use your firewall to achieve this.</div>
<div class=""><br class="">
</div>
<div class="">For ipfw:</div>
<div class=""><br class="">
</div>
<div class="">${fwcmd} add pass tcp from any to ${ip_me} imap
setup limit src-addr 10</div>
<div class=""><br class="">
</div>
<div class="">You have to lookup the right syntax for your
firewall.</div>
<div class=""><br class="">
</div>
<div class="">Dit you check man imapd or man cyrus, maybe there is
also an option for the daemon itself, but I would prefer the
firewall. </div>
<div class=""><br class="">
</div>
<br class="">
<div class="">
<div dir="auto" style="word-wrap: break-word; -webkit-nbsp-mode:
space; line-break: after-white-space;" class="">
<div style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class="">Wiel
Offermans</div>
<div style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><a href="mailto:Willem@Offermans.Rompen.nl" class="" moz-do-not-send="true">Willem@Offermans.Rompen.nl</a></div>
<div style="caret-color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; text-decoration: none;" class=""><br class="">
</div>
<br class="Apple-interchange-newline">
</div>
<br class="Apple-interchange-newline">
</div>
<div class=""><br class="">
<blockquote type="cite" class="">
<div class="">On 7 Mar 2019, at 14:53, Heiler Bemerguy via
Info-cyrus <<a href="mailto:info-cyrus@lists.andrew.cmu.edu" class="" moz-do-not-send="true">info-cyrus@lists.andrew.cmu.edu</a>>
wrote:</div>
<br class="Apple-interchange-newline">
<div class="">
<div class="">Hail,<br class="">
<br class="">
I've noticed an user with ~200 open connections to cyrus
imap port (143) and, because of him, no one else could
login to the server.<br class="">
<br class="">
I've noticed even with a single "telnet ip 143", the
connection is accepted and never ever dropped, even while
still unauthenticated.<br class="">
<br class="">
How to stop that from happening?<br class="">
<br class="">
cyrus.conf:<br class="">
imap cmd="imapd -U 30" listen="imap" prefork=6
maxchild=200<br class="">
<br class="">
<br class="">
-- <br class="">
Atenciosamente,<br class="">
<br class="">
Heiler Bensimon Bemerguy - CINBESA<br class="">
Analista de Redes, Wi-Fi,<br class="">
Virtualização e Serviços Internet<br class="">
(55) 91 98151-4894<br class="">
<br class="">
----<br class="">
Cyrus Home Page: <a href="http://www.cyrusimap.org/" class="" moz-do-not-send="true">http://www.cyrusimap.org/</a><br class="">
List Archives/Info: <a href="http://lists.andrew.cmu.edu/pipermail/info-cyrus/" class="" moz-do-not-send="true">http://lists.andrew.cmu.edu/pipermail/info-cyrus/</a><br class="">
To Unsubscribe:<br class="">
<a href="https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus" class="" moz-do-not-send="true">https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus</a></div>
</div>
</blockquote>
</div>
<br class="">
</blockquote>
</div>
----<br class="">Cyrus Home Page: <a href="http://www.cyrusimap.org/" class="">http://www.cyrusimap.org/</a><br class="">List Archives/Info: <a href="http://lists.andrew.cmu.edu/pipermail/info-cyrus/" class="">http://lists.andrew.cmu.edu/pipermail/info-cyrus/</a><br class="">To Unsubscribe:<br class=""><a href="https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus" class="">https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus</a></div></blockquote></div><br class=""></body></html>