PDA

View Full Version : Dovecot 1.04 Released



chrda
09-08-2007, 07:55 AM
Someone did a DoS on me today, on port 110 Aka Dovecot, and i had a very high load. 4.x

a quick apf -d ip and service dovecot restart fixed it.

But it made me look for exploit info / newer version, maybe there is something on the 1.03 version?


Maybe start a stickifed thread so we can warn you about new software updates? ;)

nobaloney
09-08-2007, 09:03 PM
Why do you expect Dovecot to be a cause of the DOS? Generally a DOS occurs when some external system(s) attack a port on your server.

Why do you think this may be a Dovecot problem?

Jeff

chrda
09-11-2007, 12:18 AM
It probally generally pop3 , the person connected to all my ips on port 110 and it generated a very heavy load on my server.

I guess its it will happen to all pop3 servers?

But the main point is that you should put newest dovecot into the custombuild :)

nobaloney
09-12-2007, 08:33 AM
You're writing about two separate issues.

DirectAdmin staff makes determination as to how quickly they install new versions.

And if you want to block DOS attacks you might want to install a firewall that adapts to stop them; if you're running Linux, a good one to consider is APF+BFD.

Jeff