- Dovecot-news - dovecot.org

Released Pigeonhole Sieve v0.1.17 for Dovecot v1.2.12
by Stephan Bosch 19 Jun '10

19 Jun '10

Hello Dovecot users, The new Dovecot v1.2 release is a good occasion to release a new Pigeonhole Sieve package with some relatively minor bug fixes. Changelog Sieve v0.1.17: - Made sure source code positions for compiler messages are recorded at start of tokens. - Fixed a few potential memory leaks in the Sieve compiler and the spam/virustest extensions. - Made command line tools return proper exit status upon failure. The release is available as follows: http://www.rename-it.nl/dovecot/1.2/dovecot-1.2-sieve-0.1.17.tar.gz http://www.rename-it.nl/dovecot/1.2/dovecot-1.2-sieve-0.1.17.tar.gz.sig Refer to http://pigeonhole.dovecot.org for more information. Have fun testing the new releases and don't hesitate to notify me when there are problems. Regards, -- Stephan Bosch stephan(a)rename-it.nl

1 0

v1.2.12 released
by Timo Sirainen 19 Jun '10

19 Jun '10

http://dovecot.org/releases/1.2/dovecot-1.2.12.tar.gz http://dovecot.org/releases/1.2/dovecot-1.2.12.tar.gz.sig Some of the most important fixes since v1.2.11: - deliver: Don't crash when a message with Auto-submitted: header gets rejected. - lib-storage: Fixed header searches to work correctly when there are multiple headers with same name. - dict client: Disconnect from dict server after 1 second of idling. - dict: If process crashed, it wasn't automatically restarted - dict file: If dict file's group permissions equal world permissions, don't try to change its gid. - maildir: Fixed a memory leak when copying with hardlinks. - maildir: Expunging last messages may have assert-crashed if their filenames had just changed.

1 0

v2.0.beta6 released
by Timo Sirainen 12 Jun '10

12 Jun '10

http://dovecot.org/releases/2.0/beta/dovecot-2.0.beta6.tar.gz http://dovecot.org/releases/2.0/beta/dovecot-2.0.beta6.tar.gz.sig Unfortunately this still isn't rc1 yet, but the next one will be, I promise :) Basically all of the important changes are done now. The TODO list for rc1 is: - Test and fix dsync bugs - Finish director - Add man pages started by Pascal Volk. BTW. He asked for some feedback about them, but got only one reply: http://dovecot.org/list/dovecot/2010-June/049438.html I've also read through and answered nearly all of my email backlog. If you haven't gotten a reply, resend the mail. Some changes since beta5: - Added director: http://blog.dovecot.org/2010/05/new-director-service-in-v20-for-nfs.html - IMAP: Added STATUS (X-VSIZE) command for easily getting mailbox's virtual size. - Lots and lots of doveadm improvements and new commands - Postlogin scripts now need to be executed using "script-login", not "script" binary. - Quota warnings are executed now asynchronously using the new script binary. See http://hg.dovecot.org/dovecot-2.0/rev/a179fcbbf960 - Added passdb static for proxying and similar configurations - TLS SNI configuration must now be done using local_name {} blocks, not local {} - lib-storage plugin API changes, external plugins must be updated to work correctly - Lots of fixes

1 0

v2.0.beta5 released
by Timo Sirainen 09 May '10

09 May '10

http://dovecot.org/releases/2.0/beta/dovecot-2.0.beta5.tar.gz http://dovecot.org/releases/2.0/beta/dovecot-2.0.beta5.tar.gz.sig Sorry for being so quiet recently. Unfortunately I think it's still going to last a while longer. I'll be in Italy for next two weeks and immediately after that I'll move to Portugal. I'll probably write something about that later to blog. I had hoped that this beta5 would be almost the same as RC1, but I didn't have time to put everything there yet, and thought beta4 is way too old already. The few things that should still be done: - Change expire-tool to be a plugin for doveadm expunge command - doveadm mailbox * commands should use UTF-8 for mailbox names, not mUTF-7 (and add -7, -8 parameters to switch between them) - THREAD command seems to be crashing - some other bugfixes Some of the changes since beta4: - default_login_user is now "dovenull". You should create this user. - imap, pop3 -u <user> now does userdb lookup + changes privileges if necessary, so it's much easier to start imap/pop3 session for a specific user from command line - doveadm has all kinds of new commands and changes - PostgreSQL supports now multiple connections to backend. Also supports load-balancing / HA by specifying multiple host parameters. MySQL and PostgreSQL now share the same code for that. - probably lots of other things I can't think of right now. h

1 0

Released Pigeonhole Sieve v0.1.16 for Dovecot v1.2.11
by Stephan Bosch 30 Apr '10

30 Apr '10

Hello Dovecot users, Pigeonhole development has slowed down significantly in the last few months due to the fact that I got swamped in work. The plan is now to move active development of Pigeonhole to Dovecot v2.0, meaning that this will be the last release for v1.2 that contains significant development changes and new features. However, if a certain new feature is simple enough and there is a demand for it, I may backport it from v2.0 and release it along with any bugfixes that may still arise. The main thing that this new release adds is full support for the spamtest, spamtestplus and virustest extensions. These extensions implement a uniform means of testing the content spam/virus status headers in mail messages: http://ietfreport.isoc.org/idref/rfc5235/ Not many people have tested these new features yet and therefore these are currently considered experimental. Test these thoroughly before you start using them! Documentation is available in doc/spamtest-virustest.txt Changelog Sieve v0.1.16: * Finished implementation of spamtest, spamtestplus and virustest extensions. These are not enabled by default and need to be activated with the sieve_extensions setting. Documentation available in doc/spamtest-virustest.txt + Vacation extension: the from address of the generated reply is now by default equal to whatever known recipient alias matched the headers of the message. If it is one of the aliases specified with :addresses, it is used in stead of the envelope recipient address that was used before. + Restructured and optimized the lexical scanner. + Added --with-docs configure option to allow disabling installation of documentation. - Accidentally omitted 'extern' in two declarations of global variables in header files, causing compile failures on certain systems. - Deprecated imapflags extension: fixed implicit assignment of flags. Turns out this never really worked, but the effect of this bug was obscured by the removeflag bug fixed in the previous release. - Fixed various memset argument mixups in enotify extension. This caused warnings on certain systems, but luckily no adverse effects at runtime. The releases are available as follows: Sieve: http://www.rename-it.nl/dovecot/1.2/dovecot-1.2-sieve-0.1.16.tar.gz http://www.rename-it.nl/dovecot/1.2/dovecot-1.2-sieve-0.1.16.tar.gz.sig Refer to http://pigeonhole.dovecot.org for more information. Have fun testing the new releases and don't hesitate to notify me when there are problems. Regards, -- Stephan Bosch stephan(a)rename-it.nl

1 0

v2.0.beta4 released
by Timo Sirainen 22 Mar '10

22 Mar '10

http://dovecot.org/releases/2.0/beta/dovecot-2.0.beta4.tar.gz http://dovecot.org/releases/2.0/beta/dovecot-2.0.beta4.tar.gz.sig I think this release is finally feature complete. There are still some bugs left to be fixed, but it's mainly in the dsync/mdbox area. v2.0.rc1 should hopefully be out in a couple of weeks. After that v2.0.0 will be released after no serious bugs have been found for a couple of weeks. Major changes since beta3: - auth process now runs as $dovecot_internal_user ("dovecot") by default. Auth worker processes still run as root by default, so this won't break PAM etc, but it could break passwd-file configurations. - It can now read v1.2's dovecot.conf file. If you find that it won't read your config, let me know and I'll see about adding code to fix it. It'll log warnings about each obsolete setting it sees. The easiest way to get rid of the warnings is to just translate your old config to v2.0: doveconf -n -c old.conf > new.conf - auth passdb/userdb configuration in example-config is now a bit different .. hopefully less confusing to new people than the old one. - added support for auth settings (including passdb/userdb) inside protocol sections, so it'll affect only those protocols - mail_plugins can now be set more easily. you can have a single global mail_plugins and then add more plugins to it like protocol imap { mail_plugins = $mail_plugins imap_quota } - doveconf finally shows all settings, including all protocol, local and remote sections - doveadm quota get|recalc command added. This is a plugin (yeah, doveadm now supports plugins!), so you must have a global mail_plugins=quota setting for the command to show up. - doveadm kick user/network to kick out logged in users (by sending TERM signal to processes). This was written by Pascal Volk. - and of course tons and tons of fixes all around

1 0

v1.2.11 released
by Timo Sirainen 08 Mar '10

08 Mar '10

http://dovecot.org/releases/1.2/dovecot-1.2.11.tar.gz http://dovecot.org/releases/1.2/dovecot-1.2.11.tar.gz.sig mbox users really should upgrade, because by sending a message with a huge header you could basically cause a DoS (this problem exists only with v1.2.x, not with v1.0 or v1.1). - mbox: Message header reading was unnecessarily slow. Fetching a huge header could have resulted in Dovecot eating a lot of CPU. Also searching messages was much slower than necessary. - mbox, dbox, cydir: Mail root directory was created with 0770 permissions, instead of 0700. - maildir: Reading uidlist could have ended up in an infinite loop. - IMAP IDLE: v1.2.7+ caused extra load by checking changes every 0.5 seconds after a change had occurred in mailbox

1 0

v2.0.beta3 released
by Timo Sirainen 20 Feb '10

20 Feb '10

http://dovecot.org/releases/2.0/beta/dovecot-2.0.beta3.tar.gz http://dovecot.org/releases/2.0/beta/dovecot-2.0.beta3.tar.gz.sig I had to break a few APIs in this release to get some other stuff implemented and fixed. And since I had to break some of them, I decided it could be a good time to do some other less necessary API cleanups. This made things again much simpler. I'm hoping to get v2.0.rc1 out in not too distant future. Pretty much the only big missing feature that I wanted to do is being able to add per-protocol auth settings (e.g. protocol smtp { userdb { .. } }), but that doesn't seem to be all that easy to implement. There are of course some bugs still left to be fixed, mainly related to mdbox and dsync. User visible changes: - imap_zlib plugin implements COMPRESS=DEFLATE IMAP extension - zlib plugin: Added support for compressing mails while saving - zlib plugin: fixed reading bzip2 compressed mail files - zlib plugin: Added support for dbox and mdbox formats - mdbox: doveadm purge moves old mails to alt storage (if using alt storage) - added support for tcpwrappers - added support for SHA512 password scheme (by Mark Washenberger) - mailbox deletion is now free of race conditions (e.g. quota calculations). if another session tries to access mailbox before it's fully deleted, it'll get "Mailbox is being deleted" error. - "key = $set" in config file now sets key's value to "set" setting's value. this is probably rather limited outside the only place where I created it for: service { user = $default_internal_user } - default_internal_user and default_login_user settings now specify what users should be used for them. currently the default is still dovecot and dovecot, but I'm hoping to change default_login_user to something else.. - Removed maildir_copy_preserve_filename setting. It's now always tried to be preserved (or rather: message's GUID is preserved) - auth failure penalty tries to avoid increasing penalty for IP if auth is failing always with the same user+password combination. - doveadm penalty command can be used to see the current penalties - login processes: config lookups are now cached, so it no longer asks for configuration from config process every time (except if there are remote {} blocks in config. also the local {} caching could be smarter.) - Tons of mdbox fixes - Tons of dsync fixes, especially with mbox So some of the changes visible to developers are: - dovecot-config file changed. if your external plugin uses this file, you need to change it to use the new format. - added dovecot.m4 file that can be used by external plugins' configure script to get Dovecot settings. This was mainly done by Dennis Schridde. - mailbox_alloc() no longer has stream parameter, instead there's mailbox_open_stream() - mailbox_close() renamed to mailbox_free(). added a different mailbox_close(), which only closes opened mailbox, but doesn't free it. - mailbox_delete(), mailbox_rename() APIs changed - notify plugin's delete/rename API changed as well - mailbox GUID is now looked up using mailbox_get_guid(), not mailbox_status() - dict_iterate*() API changed

1 0

Dovecot blog
by Timo Sirainen 19 Feb '10

19 Feb '10

http://blog.dovecot.org/ I was thinking that I could blog about: - ideas for new Dovecot feature designs - when I actually manage to implement some new great feature - maybe some stuff about IMAP/email in general - and maybe whenever I happen to be moving to a different country I wasn't really planning on announcing new releases there. Dovecot feature designs are also sent to Dovecot mailing list, as before. But there have been other things I've thought about mentioning somewhere, but Dovecot ML didn't really seem like the right place. I doubt I'll update the blog very often. But that probably makes it even more useful, since casual readers find the useful stuff quickly. :)

1 0

v2.0.beta2 released
by Timo Sirainen 31 Jan '10

31 Jan '10

http://dovecot.org/releases/2.0/beta/dovecot-2.0.beta2.tar.gz http://dovecot.org/releases/2.0/beta/dovecot-2.0.beta2.tar.gz.sig I tried to keep the configuration and APIs compatible with v2.0.beta1, but unfortunately there were a few things that really had to be changed: 1. passdbs and userdbs have now a separate "driver" setting inside them. So for example if you had: userdb passwd { } You'll now need to use instead: userdb { driver = passwd } 2. Services now have default inet_listeners. You need to either remove your existing ones, or override the defaults by giving the listeners's name like shown in the new example master.conf. For example if you had: service imap-login { inet_listener { port = 1234 .. change it to: service imap-login { inet_listener imap { port = 1234 If you want to disable a default listener, you can set its port to 0. Some new features: - Added auth_verbose_passwords = no|plain|sha1. If authentication fails, this setting logs the used password. If you don't really need to know what the password itself was, but are more interested in knowing if the user is simply trying to use the wrong password every single time or if it's a brute force attack, you can set this to "sha1" and only the SHA1 of the password is logged. That's enough to know if the password is same or different between login attempts. - lazy-expunge: Support a single-namespace configuration. In this setup if mailbox has some expunged messages and then the whole mailbox gets deleted, they get merged into the same deleted mailbox. - protocol !imap { .. } adds configuration to all protocols except imap. - imap/pop3 proxying supports now async DNS lookups for hosts. There's a separate dns-client service doing the lookups using OS's own blocking resolver. - dovecot-config file changed in a way that it'll be easier to create external software linking against dovecot libraries. This made Pigeonhole's configure script a lot simpler. And of course there have been lots of fixes.

1 0