Hot answers tagged

8

What are the errors in the log from 10:06:40.691 to 10:06:40.723? Line 10:06:40.691 5 SMTPI-011473([69.197.220.11]) inp: \022\003\001 was part of SSL handshake. Byte 0 = 022 means SSL record type = 22 (SSL3_RT_HANDSHAKE) Byte 1-2 = 0301 was means SSL version = TLS1_VERSION See this page for reference. But unfortunately the server on port 587 doesn't talk ...


8

The original answer from 2011 is outdated. Dovecot lifecycle announcement: For any version before 2.2, we are not going to be providing any patches or fixes. This has been the case before, but we are now officially declaring them EOL. I will still list all versions for reference. Sometimes admins have to run software they'd rather not run. dovecot 1.x ...


8

I would like to pitch in on this. While I can not testify against i-CONICA's answer, as it is probably correct, I noticed that on both an iPad and iPhone (both running iOS 7.1) that if you open a website through the Google Search App, that the user agent will be changed to the "GSA" string, as opposed to the standard Safari user agent string. It seems the ...


7

It means the Safari on the iPhone that's running iOS 7.1 is using Google Search (Appliance) as it's default search engine.


6

From Exchange Management Shell Get-ActiveSyncDevice Look At DeviceOS it will give the version


6

Ok, since you're only after a single phone, you would need to monitor something (DHCP or ARP table) and look for the MAC address of your phone. It won't change, as it's (meant to be) globally unique per network interface. However, there are some problems: DHCP leases last for a while. Just because there is a lease, that doesn't mean that the device is ...


6

I got a similar problem, the Samsung Android app was creating its own TRASH folder, instead of using the existing Trash one. After fixing it, as described below, I had to remove then add again the account so it update its configuration. The solution is the Dovecot namespace configuration: See Dovecot Mailbox Settings I personally use this (from here): ...


5

Did you make the registry changes to the Windows machines to make it behind NAT? Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\PolicyAgent] "AssumeUDPEncapsulationContextOnSendRule"=dword:00000002 If you prefer to use "REG ADD": REG ADD HKLM\SYSTEM\CurrentControlSet\Services\PolicyAgent /v ...


4

Take a look at https://technet.microsoft.com/en-gb/library/hh529949(v=exchg.150).aspx There is an interesting line at the bottom of that page that implies the effective maximum limit is about 33% less then the limit you have configured. Given the default for active sync is 10mb and you are seeing problems around 7, that would make sense. Try increasing to ...


3

They use Office 365 and have always required phones to be enrolled (giving their IT department full access) in order for email etc. to be accessible. However, I used to be able to circumvent this by accessing my Office 365 emails through IMAP. You clearly don't respect your clients or value their business or the business relationship you have with ...


3

I've been playing with Pushover for sending Nagios alert push notifications to myself and other on-call staff. The Pushover service itself is free, until you start sending thousands of push notifications a month (hopefully for your sanity, that's not the case). Pushover can be configured with its own set of alerts, which you can make as annoying as you'd ...


3

Essentially you need to copy the GAL contacts from the address book to the user "Contacts" folder. You should be able to use Powershell to access the Outlook API and the copy contact functions to copy from the GAL to the current user's folder in the default MAPI profile upon login / using a loginscript, or perhaps launch the script after successfully ...


3

I finally found the answer! After a lot of digging into various wireshark captures I noticed that when the problem was happening that there was a lot of IPV6 broadcast and discovery traffic. After additional investigation I found that various computers on our network had Intel nic cards that had a wake on lan function. The computers would sleep and would ...


2

What I have done is set up a pop access to the mail box, where you can leave mail on server, then add an exchange account as well, in the exchange account turn off the mail process, but leave notes, calendar, task etc. Works great. A little lame but works


2

I wish I could pinch you to wake you up, but sadly, this is not a dream. The iOS Mail app cannot speak any later TLS than TLSv1. Not even 1.1 (which is ok by PCI.) Apple has really dropped the ball on this one. The Mail app supports TLS1.1 and 1.2 for SMTP, but not POP3 or IMAP. It looks as if people have been complaining to Apple about this for at least a ...


2

This doesn't seem to be a problem with SSL (or Let's encrypt). The fact, that the request shows up in your log file proves that the request came through fine (the SSL handshake is done before the actual request reaches the server). A little googling for nginx http 499 shows that nginx uses this (unofficial) return code to indicate that the client closed the ...


1

NiKiZe, your answer is absolutely correct. I spent Sunday reading and was going to come back on with a 'never mind!' - I'm working on implementing SASL right now. http://www.postfix.org/SASL_README.html#testing_saslauthd Thanks very much for the pointer, and yeah, some spammer would have figured out the open relay thing eventually. :)


1

Use SSL Labs to check your SSL: https://www.ssllabs.com/ssltest/ At the end of the report it will tell you which browsers it works on and which it does not. According to this question the problem may be in the Cipher used. The SSL Labs report shows which Ciphers you use, showing which ones are out of date. A good tool for generating an SSL configuration ...


1

Yes. There is an Organizationally Unique Identifier in your MAC Address that can identify your device (i.e. android, motorola, samsung). Levels of granularity depend on whatever device is actually watching the network traffic (e.g. you might have a firewall that automatically resolves the OUI to a particular vendor). A lot of it depends on where in the ...


1

Now facing the same/similar issue on iOS 12 with nginx 1.16.0 proxying to apache enabled with http2. Workaround is to disable http2 on nginx, the right solution is described here https://trac.nginx.org/nginx/ticket/915 or https://trac.nginx.org/nginx/ticket/1150 - adding proxy_hide_header Upgrade; will solve that. With Upgrade header (probably only) the iOS ...


1

Man in the middle is prevented if the client checks that it gets exactly the expected certificate. This is called certificate or public key pinning. This is not a feature of any TLS version including TLS 1.2 but must be implemented explicitly in the client. For more information and example code see OWASP: Certificate and Public Key Pinning.


1

The Internet Message Access Protocol (IMAP) is an Internet standard protocol used by e-mail clients to retrieve e-mail messages from a mail server over a TCP/IP connection as defined by RFC 3501. If you wish to sync contacts & calendar entries you need to use WebDAV (CalDAV, CardDAV). So as you have only IMAP configured on the device it allows you only ...


1

I have seen email accounts stop syncing on both Android and the iPhone 5. Deleting the account on the phone and adding it again does often correct the issue for us. However, since you have already tried this, verify that the mail days to sync is set to something reasonable like 1 week. I have seen strange issues when our users attempt to get all of their ...


1

In general you will be fine. I'm not 100% sure if all possible UPNs work or just the configured suffix and the suffix matching the actual domain name of the domain, but both of those definitely will work for normal user logons (just tested on my domain). And that is the only possible pitfall. See: Why can a user log in via more than one UPN Edit: Only the ...


1

Here is some 3rd party software that will do what you need. http://www.connectedsw.com/Overview/57261


1

What authentication method are you using for the L2TP VPN? It's possible that your devices require a certificate issued from your CA to connect, but if your Macs and Windows PCs are connected to the domain then they'll have this by default. Alternately you can try just using a PPTP VPN and seeing if that works.


1

I've had this same problem, and it turned out that the local Windows firewall was blocking the connection. This guide helped me add the correct ports. Basically you need to open UDP Ports '50, 500, 4500' https://www.magnumvpn.com/setup-windows-10-firewall-l2tp.html


1

There is a delay when you change the password for an active Sync user as explain in KB 2612821. You might recycle the MSExchangeSyncAppPool pool on the Exchange server as mentioned here if only one user is affected. You might also considering to change the "Default Interval for User Tokens in IIS" as explained in KB 152526 to a lower value if you need a ...


1

@tcv We have the exact same situation. The good part of this way of room booking is that the appointment is always also in the bookers own calendar. He/she will update this when something changes(meeting canceled). Only this way the room will also be available again. The way you do it now through ical(icalx.com for example) makes the calendars really public ...


Only top voted, non community-wiki answers of a minimum length are eligible