December 2011 - dovecot

[Dovecot] IMAP and sieve
by moozer 19 Dec '11

19 Dec '11

I am currently setting up an IMAP server for archiving purposes. The goal is to drag an email to the IMAP folder, and then have a server-side sieve script to put it in the right folder. One of the sources used was this wiki entry http://wiki.dovecot.org/LDA/Sieve/Dovecot I added the mail_plugins = sieve to /etc/dovecot/15-lda.conf and after some exim4 fiddling, mails delivered are filtered by my sieve script. Doing the same for imap delivery (in /etc/dovecot/20-imap.conf) give the following error Dec 19 10:22:09 leon dovecot: imap: Error: dlopen(/usr/lib/dovecot/modules/lib90_sieve_plugin.so) failed: /usr/lib/dovecot/libdovecot-sieve.so.0: undefined symbol: mail_deliver_save_open Dec 19 10:22:09 leon dovecot: imap: Error: Can't load plugin sieve_plugin: Plugin is intended to be used only by binaries: lda lmtp (we're imap) Dec 19 10:22:09 leon dovecot: imap: Fatal: Couldn't load required plugins Dec 19 10:22:10 leon dovecot: imap: Error: dlopen(/usr/lib/dovecot/modules/lib90_sieve_plugin.so) failed: /usr/lib/dovecot/libdovecot-sieve.so.0: undefined symbol: mail_deliver_save_open Dec 19 10:22:10 leon dovecot: imap: Error: Can't load plugin sieve_plugin: Plugin is intended to be used only by binaries: lda lmtp (we're imap) Dec 19 10:22:10 leon dovecot: imap: Fatal: Couldn't load required plugins I notice this part: "plugin is intended to be used only by binaries: lda lmtp (we're imap)" So the question is if it is possible to run sieve server-side sieve scripts on emails copied using IMAP. Suggestions are most welcome. Moozer -- I am running debian testing # dovecot --version 2.0.15

2 2

[Dovecot] DKIM Verification failures
by Nikolaos Milas 18 Dec '11

18 Dec '11

Hi, -- This message refers to the maillist itself rather than to dovecot software -- I have noticed that when I post to this list (only), I get DKIM Verification failure reports from: root(a)moncton.sidefx.com (e.g. for my last post: "DKIM failure report for job 4D27B5DC4E on mail.sidefx.com") root(a)mail.rmacd.com (e.g. for my last post: "DKIM failure report for job B69B3187F1 on mail.rmacd.com") root(a)mx0.roessner-net.de (e.g. for my last post: "DKIM failure report for job 6103B52092 on mx0.roessner-net.de") I have not had other DKIM failure reports from anywhere and I know that we should not have issues with it. An example from gmail: Authentication-Results: mx.google.com; spf=pass (google.com: best guess record for domain of nmilas(a)noa.gr designates 195.251.204.235 as permitted sender) smtp.mail=nmilas(a)noa.gr; dkim=pass header.i=(a)noa.gr So, whom should I contact to investigate this problem? Thanks, Nick

3 3

[Dovecot] logging deletion of emails through IMAP?
by John Brock 16 Dec '11

16 Dec '11

Version 1.2.16: Is there some way to enable logging for when emails are deleted via IMAP? All I see are log entries for users logging in/logging out. It would be nice to know when an email is deleted, and from which IP address the user was logged in when s/he deleted the email. -- John Brock Adeptive Software 303-554-0301 x1

2 1

[Dovecot] simultaneous scripts not running via sieve_before
by Scott Lewis 16 Dec '11

16 Dec '11

Hi again everyone, So I've finally got sieve integration happening on my REHL Postfix/Dovecot server, with private user scripts happily running when users create them. (we user SquirrelMail, so the avelsieve plugin runs the sieve integration). Now I'd like to utilise additional per-user scripts (probably via sieve_before), but I've not been able to get my additional scripts to execute. I am doing the following: a) getting avelsieve to write my redirect script (ie. logging on as user, completing private script wizard, and activating it) b) compiling .dovecot.sieve with sievec c) copying the resultant .dovecot.svbin to sieve/ directory (and renaming it eg redirect.svbin still, it appears that each /home/%u/.dovecot.sieve file is the only one taking effect. Any thoughts on how to make the other ones active? (The idea behind this is to automatically forward all of joeuser@mydomain's incoming mail to somewhere like joeusersbackup(a)gmail.com, for backup reasons. One day, I'll work out how to configure postfix to do this for all outgoing email too, but that's for another day :) Below are what my .conf files look like. Thanks in advance, Scott /etc/dovecot.conf: [code] protocols = imap imaps managesieve listen = * protocol imap { #mail_plugins = sieve quota } ## ## ManageSieve specific settings ## protocol managesieve { # debugging mail_debug = yes #login_executable = /usr/libexec/dovecot/managesieve-login #mail_executable = /usr/libexec/dovecot/managesieve #managesieve_max_line_length = 65536 #managesieve_logout_format = bytes ( in=%i : out=%o ) #managesieve_implementation_string = Cyrus timsieved v2.2.13 } protocol lda { mail_plugins = sieve quota sieve=~/.dovecot.sieve sieve_extentions = +include sieve_dir=~/sieve sieve_before = /home/%u/sieve/redirect.svbin sieve_global_path = /etc/globalsieverc.svbin [/code]

3 3

[Dovecot] Autosubscribe new folders
by For＠ll 15 Dec '11

15 Dec '11

Hi, I have a sieve filter: require ["fileinto","reject","body"]; if header :contains "subject" "NOTE" { if body :content "application/pdf" :contains "" { redirect "notes(a)domena.com"; } else { reject text: Lack attachment PDF! . ; stop; } } When I get a new message, in user folder is automaticly created folder like subject but is not subscribed. What I must settings in dovecot to automaticly subscribe folders to subscriptions files.?

3 4

[Dovecot] dovecot-antispam: pipe backend with spamc failing to parse args
by Micah Anderson 15 Dec '11

15 Dec '11

I'm trying to get the pipe backend to work with the new dovecot-antispam (I was very pleased to see the new version, thanks Johannes!) Before I would run the following over the maildir: spamc -d 10.0.1.109 -L ham < $file 2>&1 > /dev/null now, i'm using dovecot-antispam and mdbox and have the following configured: antispam_backend = pipe antispam_signature = X-Spam-Flag antispam_signature_missing = error antispam_trash_pattern = trash;Trash;Deleted * antispam_spam_pattern_ignorecase = SPAM antispam_pipe_tmpdir = /var/tmp antispam_pipe_program_spam_arg = -L spam antispam_pipe_program_notspam_arg = -L ham antispam_pipe_program = /usr/bin/spamc antispam_pipe_program_args = -d 10.0.1.109 Now, when I move a message to Spam, dovecot-antispam detects it and attempts to run, but it fails: Dec 14 16:22:45 grosbeak [username 10.0.1.74 uid]: antispam: run program failed with exit code 64 Exit code 64 is spamc's exit code for "command line usage error" - but I can't see exactly the command that is being constructed by dovecot-antispam to know where the error is. Any ideas? micah --

2 1

[Dovecot] Quota warnings not being sent
by Nikolaos Milas 14 Dec '11

14 Dec '11

Hello, I am running dovecot-2.0.13-1_128.el5 x86_64 RPM on CentOS 5.7 with the config shown below. All accounts are virtual, hosted on LDAP Server. My problem is that the quota warning mail is not sent as expected. For example, in the logs I get: Dec 12 08:42:40 vmail dovecot: lda(imaptester): Error: quota: net_connect_unix(/var/run/dovecot/quota-warning) failed: Permission denied (euid=500(vmail) egid=500(vmail) missing +r perm: /var/run/dovecot/quota-warning, euid is not dir owner) Here is /var/run/dovecot/: # ls -la /var/run/dovecot/ total 32 drwxr-xr-x 4 root dovecot 4096 Dec 9 21:27 . drwxr-xr-x 23 root root 4096 Dec 14 12:27 .. srw------- 1 root root 0 Dec 9 21:27 anvil srw------- 1 root root 0 Dec 9 21:27 anvil-auth-penalty srw------- 1 root root 0 Dec 9 21:27 auth-client srw------- 1 dovecot root 0 Dec 9 21:27 auth-login srw-rw---- 1 vmail vmail 0 Dec 9 21:27 auth-master srw------- 1 root root 0 Dec 9 21:27 auth-userdb srw------- 1 dovecot root 0 Dec 9 21:27 auth-worker srw------- 1 root root 0 Dec 9 21:27 config srw------- 1 root root 0 Dec 9 21:27 dict srw------- 1 root root 0 Dec 9 21:27 director-admin srw-rw-rw- 1 root root 0 Dec 9 21:27 dns-client srw------- 1 root root 0 Dec 9 21:27 doveadm-server lrwxrwxrwx 1 root root 25 Dec 9 21:27 dovecot.conf -> /etc/dovecot/dovecot.conf drwxr-xr-x 2 root root 4096 May 17 2011 empty drwxr-x--- 2 root dovenull 4096 Dec 9 21:27 login -rw------- 1 root root 5 Dec 9 21:27 master.pid srw------- 1 root root 0 Dec 9 21:27 quota-warning Follows my config (at the end of this message). How should I change permissions to resolve the issue? Would it be enough to change ownership of the whole directory /var/run/dovecot/ and its contents to vmail:vmail? What configuration directives determine the ownership and the access permissions for these sockets? Please advise. Thanks in advance, Nick ------------------------------------------ # 2.0.13: dovecot.conf protocols = imap pop3 mail_location = maildir:~/Maildir/ mail_gid = 500 mail_uid = 500 auth_mechanisms = plain login auth_username_format = %Lu auth_verbose = yes disable_plaintext_auth = no mail_plugins = quota protocol imap { imap_client_workarounds = "delay-newmail " mail_plugins = quota imap_quota } protocol pop3 { mail_max_userip_connections = 3 mail_plugins = quota pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = %08Xu%08Xv } protocol lda { auth_socket_path = /var/run/dovecot/auth-master info_log_path = log_path = mail_plugins = quota postmaster_address = sysadmin(a)example.com sendmail_path = /usr/lib/sendmail } userdb { args = /etc/dovecot/dovecot-usrdb-ldap.conf driver = ldap } passdb { args = /etc/dovecot/dovecot-passdb-ldap.conf driver = ldap } plugin { quota = maildir:User quota quota_rule = *:storage=4G quota_rule2 = Trash:storage=+3%% quota_warning = storage=75%% quota-warning 75 %u quota_warning2 = storage=90%% quota-warning 90 %u } service quota-warning { executable = script /opt/mail1.sh user = root unix_listener quota-warning { } } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-master { group = vmail mode = 0660 user = vmail } user = root } service imap-login { service_count = 1 vsz_limit = 64 M } service pop3-login { service_count = 1 vsz_limit = 64 M } ssl_ca = </etc/pki/CA/certs/chain.pem ssl_cert = </etc/pki/CA/certs/cert.pem ssl_key = </etc/pki/CA/private/key.pem syslog_facility = local1 ---------------------------------------------

4 7

Re: [Dovecot] Backing Up To Windows File Server
by Luigi Rosa 14 Dec '11

14 Dec '11

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Asai said the following on 14/12/11 17:52: > Thanks, Luigi, I may fall back to that. Should you need it, here's the script I use to do it. In my configurations /var/spool/mail contains one dir for each domain and each of that dir contains a maildir for each domain. So the email of foobar(a)acme.com is in /var/spool/mail/acme.com/foobar/ The 4th line checks lost&found because /bar/spool/mail is a different file system. I create the .tgz file on local /tmp for performance reasons. TARGET=/backup for DOMAINPATH in /var/spool/mail/* do if [ "${DOMAINPATH}" != "/var/spool/mail/lost+found" ] then DOMAIN=`echo $DOMAINPATH | cut -d '/' -f 5` for USERPATH in ${DOMAINPATH}/* do USER=`echo $USERPATH | cut -d '/' -f 6` tar cvzf /tmp/$DOMAIN-$USER.tgz $USERPATH > /dev/null cp -f /tmp/$DOMAIN-$USER.tgz $TARGET/mail rm -f /tmp/$DOMAIN-$USER.tgz done fi done Ciao, luigi - -- / +--[Luigi Rosa]-- \ I don't think we have the right or the wisdom to interfere, however a planet is evolving. --James Kirk, "The Omega Glory" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk7o3jYACgkQ3kWu7Tfl6ZSfpQCgvzhOJH6mnJMu8ZzvKu5y8um+ 46wAoKd0eXxBNPad9EZao7VKjZBkACer =dhk0 -----END PGP SIGNATURE-----

1 0

[Dovecot] Two recent issues
by Brad Schuetz 14 Dec '11

14 Dec '11

I've been using dovecot for years, been working great. However recently I've come across two issues. The first issue unfortunately I have little information on, mail_debug hasn't provided anything useful either (in fact it looks like the login request that fails doesn't even get logged at all). During the morning rush of email, this server has around 11k mailboxes on it, it *appears* that one of the auth processes dies resulting in "dovecot: imap-login: Error: read(imap) failed: Connection reset by peer" errors followed by "dovecot: imap-login: Internal login failure ..." in the logs. I've yet to get any useful debugging information on this error so I'm not expecting much/any help on this one, but if anyone has any ideas on how I can get more debug besides running strace 24/7 in the hopes it catches something before the hard drive is full of strace output I'd love to hear it. The best I've gotten was a lucky strace once (at the time I didn't realize it was so lucky or I would have saved the output) that indicated the imap-login daemon was failing to connect to the auth process. The second issue is lmtp/lda (tried both) delivery to a mailbox that has filesystem quotas enabled and the group quota is maxed is resulting in the below panic and crash. This issue happens with 2.0.13, 2.0.15 and 2.0.16. Here's the logs showing that it knows the disk quota is exceeded and then a subsequent zlib panic. Like it's trying to deliver it anyway. --------------------- 11:21:07 [err] dovecot: lmtp(29691, admin(a)[redacted].com) Error: o_stream_send_istream(/email/d/r/[redacted]/[redacted]/admin/Maildir/tmp/1323458467.M245978P29691.fenrir.omnis.com) failed: Disk quota exceeded 11:21:07 [crit] dovecot: lmtp(29691, admin(a)[redacted].com) Panic: file ostream-zlib.c: line 144 (o_stream_zlib_send_flush): assertion failed: (zs->avail_in == 0) 11:21:07 [err] dovecot: lmtp(29691, admin(a)[redacted].com) Error: Raw backtrace: /usr/lib64/dovecot/libdovecot.so.0 [0x345443ca90] -> /usr/lib64/dovecot/libdovecot.so.0 [0x345443cae6] -> /usr/lib64/dovecot/libdovecot.so.0 [0x345443c4a3] -> /usr/lib64/dovecot/lib20_zlib_plugin.so [0x2ba2d31547f6] -> /usr/lib64/dovecot/lib20_zlib_plugin.so [0x2ba2d315481b] -> /usr/lib64/dovecot/libdovecot.so.0(o_stream_flush+0x2a) [0x345444f0ea] -> /usr/lib64/dovecot/libdovecot-storage.so.0(maildir_save_finish+0x6b) [0x3451c63b6b] -> /usr/lib64/dovecot/lib10_quota_plugin.so [0x2ba2d2f4ce7a] -> /usr/lib64/dovecot/libdovecot-storage.so.0(mailbox_save_finish+0x30) [0x3451c2fbb0] -> /usr/lib64/dovecot/libdovecot-storage.so.0(mail_storage_copy+0xb3) [0x3451c2aae3] -> /usr/lib64/dovecot/libdovecot-storage.so.0(maildir_copy+0x56) [0x3451c6fd36] -> /usr/lib64/dovecot/lib10_quota_plugin.so [0x2ba2d2f4d0ba] -> /usr/lib64/dovecot/libdovecot-storage.so.0(mailbox_copy+0x5a) [0x3451c301ba] -> /usr/lib64/dovecot/li 11:21:07 [err] dovecot: master: Error: service(lmtp): child 29691 killed with signal 6 (core dumps disabled) --------------------- Attached is the current "doveadm config" output. -- Brad Schuetz

2 2

Re: [Dovecot] Questions about single intance storage
by Maria Arrea 13 Dec '11

13 Dec '11

Hello Timo. If we can not safely restore from backup a user's mailbox with SiS enabled, we can not enable SiS. Any plan to include this backup recovery tool in dovecot 2.0.X or 2.1? Regards Maria > 5º We use bacula to save indexes & mdboxes, and we recover mailboxes using doveadm import when a user "makes a fatal mistake" wiping all her Inbox. If we enable SiS I am not really sure how can we safely restore a user's INBOX if that user has SiS attachments. Hm. Yes, that is problematic.. Even if you knew what SIS files were used, there's no simple way to restore those with proper refcounts. I think what really should be done is writing a tool that can create/restore backups, possibly de-SISing the attachments..

9 17