October 2012 - dovecot

[Dovecot] Problem with process_limit
by FABIO FERRARI 18 Oct '12

18 Oct '12

Hello, i have a problem with the process_limit configuration. Occasionally, it happens that the dovecot.log shows this line: master: Warning: service(imap): process_limit reached, client connections are being dropped So I checked, the process number, with the command: ps auxwww | grep imap | grep -v login | wc -l and it shows 1024. Then, i edited the file /etc/dovecot/conf.d/10-master.conf and set the line process_limit = 1500 I checked if the dovecot had accepted the change with the command doveconf -n | grep process_limit and it shows process_limit = 1500 But it is dropping the connections when they reach 1024 anyway, the configuration parameter is totally ignored. Can anyone help? Am I editing the right parameter? thanks in advance Fabio Ferrari P.S. The version of the dovecot is dovecot-2.0.1-1_118.el5 on Red Hat Enterprise Linux Server release 5.8 (Tikanga).

3 3

[Dovecot] real_rip variable addition for dovecot 2.1.10
by Jack Bates 18 Oct '12

18 Oct '12

Timo, Please check the code. I didn't add it, but a real_lip might be useful for some people as well. Also, I notice that pop3-proxy is doing a different xsession than the imap proxy. Is there an xsession standard that is different between the two, or just an oversight in the code? Both send the remote address/port, but only imap proxy sends the local address/port. This patch declares long variable %{real_rip} so that a backend server can declare a different login_log_format_elements login_log_format_elements = user=<%u> method=%m rip=%r lip=%l pip=%{real_rip} mpid=%e %c This is primarily useful for backend servers to log both the rip, lip, and in case of xsession, the real rip. I haven't done extensive testing yet, but as long as nothing does anything weird elsewhere in the code, it should be good. http://www.brightok.net/jbates/dovecot-2.1.10-real-ip.patch dovecot: pop3-login: Login: user=<test>, method=PLAIN, rip=192.168.1.5, lip=::1, pip=::1, mpid=8665, secured Jack Bates

2 3

[Dovecot] Difference between Indexing and Rescan in FTS
by Fred Kilbourn 18 Oct '12

18 Oct '12

I've had squat running on dovecot 2.0 and have been updating all users mailbox indexes nighty via cron with this command: doveadm -v search -A text xyzzyx I've just updated to 2.1 and I'm migrating to lucene indexes, but reading the documentation I'm having a hard time understanding the semantic differences between indexing and rescanning. If I were to continue to run an all user all mailbox index every night, would that be appropriate? Would running this every night avoid the need to ever rescan? Should I run rescan instead of index? Should I run both rescan and index? In which order? Best Regards, FredK

3 5

[Dovecot] Per user quotas
by David Travers 18 Oct '12

18 Oct '12

Hi All, I keep going round in circles with this. I have quotas up and running but would like to add a couple of per user exceptions but can't figure out how to do it! I am using Open Xchange community edition on top of dovecot and tha tis showing the 200MB limit, if I change it in the dovecot.conf the change is reflected in open xchange, but can't figure out how to change for 1 user. I believe I need to add to a passwd file, but I have added to that and nothing has changed. # dovecot -n # 1.2.15: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-686 i686 Debian 6.0.5 log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap imaps pop3 pop3s ssl_cert_file: /etc/ssl/certs/postfix.pem ssl_key_file: /etc/ssl/private/postfix.key login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login mail_privileged_group: mail mail_location: maildir:~/mail:LAYOUT=fs:INBOX=~/mail/ mbox_write_locks: fcntl dotlock mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_plugins(default): quota imap_quota mail_plugins(imap): quota imap_quota mail_plugins(pop3): quota mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 lda: mail_plugins: quota auth default: mechanisms: plain login passdb: driver: pam userdb: driver: passwd socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix plugin: quota: maildir:user quota quota_rule: *:storage=200M quota_rule2: Trash:storage=10%% quota_rule2: SPAM:ignore quota_warning: storage=95%% /usr/local/bin/quota-warning.sh 95 quota_warning2: storage=80%% /usr/local/bin/quota-warning.sh 80 quota_exceeded_message: Quota exceeded, Please delete some emails Any help gratefully received Dave _________________________________________ This email has been scanned for malicious content. _________________________________________

3 4

[Dovecot] Dsync clustering
by list＠airstreamcomm.net 18 Oct '12

18 Oct '12

I have not seen mention of using dsync for clustering Dovecot in some time on the mailing list, but I believe Timo was going to write a wiki page when v2.2 became more mature. Does this documentation exist yet, or are there any resources on what dsync replication is capable of at this point (looking on the wiki and google didn't reveal much)? Thank in advance.

2 1

Re: [Dovecot] Disconnected for inactivity time.
by Joseph Tam 18 Oct '12

18 Oct '12

Robert JR writes: > After 10 mins of unactivity of pop3 , dovecot disconnect the user (-ERR > Disconnected for inactivity.) > > What is the option in the config file which control the unactivity > logout time ? becuase i want to decrease the inactivity time > > To 5 mins instead of 10 mins Looks like it's set in the source code pop3-client.c:#define CLIENT_IDLE_TIMEOUT_MSECS (10*60*1000) but the output of # doveconf -a ... service pop3 { ... idle_kill = 0 ... } maybe points to the config that overrides this. Easy enough to test. It's non-RFC compliant as one poster points out, so unless you got a good reason to do this like lots of zombie pop3 processes, leave it alone. Joseph Tam <jtam.home(a)gmail.com>

1 0

[Dovecot] Dovecot sieve and duplicate email subjects
by Benjamin Thomas 17 Oct '12

17 Oct '12

Hi, I'm running a small email server with the help of iRedMail. I can manage sieve scripts from the Rouncube web interface or manually inside the user's personal sieve folder. I have an email account setup to receive automated tasks. Some of these "alerts" occur too often and they have the same subject line, but different senders. This is the rule I am currently using: ##CODE START## # rule:[AutoAlerts] if anyof ( header :matches "Subject" "AutoAlert Type1*", header :matches "Subject" "AutoAlert Type2*", header :matches "Subject" "AutoAlert Type3*" ) { fileinto "INBOX.AutoAlerts"; stop; } ##CODE END## I was wondering if it's possible to gracefully handle duplicate subjects lines (within a given time frame) with sieve filters ? Ideally, I would like the first email of the day with subject ""AutoAlert Type1..." to get moved to the subfolder given above. Subsequent "duplicate" emails would then go into a "duplicate" subfolder. Is this possible with sieve filters ? I could not find anything striking me as obvious while reading the page http://wiki.dovecot.org/LDA/Sieve. Thanks very much for your input.

2 3

[Dovecot] Disconnected for inactivity time.
by Robert JR 17 Oct '12

17 Oct '12

Hello, After 10 mins of unactivity of pop3 , dovecot disconnect the user (-ERR Disconnected for inactivity.) What is the option in the config file which control the unactivity logout time ? becuase i want to decrease the inactivity time To 5 mins instead of 10 mins Please advise Robert JR

2 1

[Dovecot] dovecot died
by Hendrik 17 Oct '12

17 Oct '12

Hi All I have been trying to get this website running for months now. I get this emails from cpanel and don't know how to fix it. If anyone can help me please contact me at pipefab(a)mweb.co.za. Kind regards Hendrik imap failed @ Fri Oct 12 05:51:18 2012. A restart was attempted automagically. Service Check Method: [check command] Number of Restart Attempts: 1 Cmd Service Check Raw Output: dovecot is not running Startup Log: /etc/init.d/dovecot: line 15: 6043 Alarm clock /usr/sbin/dovecot > /dev/null 2>&1 Syslog Messages: Oct 12 04:01:01 scene dovecot: imap-login: Login: user=<__cpanel__service__auth__imap__lvgws_iymiqndfmflick2pa3yjzc56ukpa2t6x3 yj43fuh...>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Oct 12 04:01:02 scene dovecot: IMAP(__cpanel__service__auth__imap__lvgws_iymiqndfmflick2pa3yjzc56ukpa2t6x3y j43fuhjgeiqomc3dhlkyjwdq): Disconnected: Logged out bytes=11/340 Oct 12 04:06:06 scene dovecot: imap-login: Login: user=<__cpanel__service__auth__imap__jxy1xcsu0koedgkhexhexpu3_idp4ynukxpaou0 jaovpdr...>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Oct 12 04:06:06 scene dovecot: IMAP(__cpanel__service__auth__imap__jxy1xcsu0koedgkhexhexpu3_idp4ynukxpaou0j aovpdrgqjnf0_rxyi0wncetn): Disconnected: Logged out bytes=11/313 Oct 12 04:11:01 scene dovecot: imap-login: Login: user=<__cpanel__service__auth__imap__6oxwycgffp_5xkysaitw4eifev2nffi_dqlhj4z k8h05nx...>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Oct 12 04:11:01 scene dovecot: IMAP(__cpanel__service__auth__imap__6oxwycgffp_5xkysaitw4eifev2nffi_dqlhj4zk 8h05nx2p9n4yfxhrp3a2gjhl): Disconnected: Logged out bytes=11/313 Oct 12 04:16:08 scene dovecot: imap-login: Login: user=<__cpanel__service__auth__imap__7zurxql5qf5whp4rupxen3viduh5kucjqtrzigs c75cnov...>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Oct 12 04:16:09 scene dovecot: IMAP(__cpanel__service__auth__imap__7zurxql5qf5whp4rupxen3viduh5kucjqtrzigsc 75cnovslbll4702ue2veu2n3): Disconnected: Logged out bytes=11/318 Oct 12 04:21:10 scene dovecot: imap-login: Login: user=<__cpanel__service__auth__imap__cq4wbk6o7svgbljnmw1hx2iiaunvzp3w1cywwsf ou8d5ky...>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Oct 12 04:21:11 scene dovecot: IMAP(__cpanel__service__auth__imap__cq4wbk6o7svgbljnmw1hx2iiaunvzp3w1cywwsfo u8d5kysrfeaqvlmjgx6afvnb): Disconnected: Logged out bytes=11/340 Oct 12 04:26:35 scene dovecot: imap-login: Login: user=<__cpanel__service__auth__imap__uhyykmmdnf31il4pn_kfci9y2gw2o9skyz7zuoe oga08za...>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Oct 12 04:26:36 scene dovecot: IMAP(__cpanel__service__auth__imap__uhyykmmdnf31il4pn_kfci9y2gw2o9skyz7zuoeo ga08zaq_nh6yzqsmveqpvnxi): Disconnected: Logged out bytes=11/313 Oct 12 04:31:05 scene dovecot: imap-login: Login: user=<__cpanel__service__auth__imap__hka0onlsdbqugjyirdyygk_d9wtw_xtkl7jgaus tpvzl1q...>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Oct 12 04:31:05 scene dovecot: IMAP(__cpanel__service__auth__imap__hka0onlsdbqugjyirdyygk_d9wtw_xtkl7jgaust pvzl1qjjei5uuoi1c4g8tpea): Disconnected: Logged out bytes=11/313 Oct 12 04:36:02 scene dovecot: imap-login: Login: user=<__cpanel__service__auth__imap__ouonjmdpliwgyj8ij6gucv6y7fxq6ojdk9hsxjj fzonng9...>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Oct 12 04:36:03 scene dovecot: IMAP(__cpanel__service__auth__imap__ouonjmdpliwgyj8ij6gucv6y7fxq6ojdk9hsxjjf zonng9eqrsw5l5hg7xoejer2): Disconnected: Logged out bytes=11/340 Oct 12 04:41:03 scene dovecot: imap-login: Login: user=<__cpanel__service__auth__imap__wpwfzoyvnb2rsz2desu10swelok4cdwrqqw70gw eibvov1...>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Oct 12 04:41:04 scene dovecot: IMAP(__cpanel__service__auth__imap__wpwfzoyvnb2rsz2desu10swelok4cdwrqqw70gwe ibvov1_minfh7j4_4ejaz7v2): Disconnected: Logged out bytes=11/340 Oct 12 04:46:04 scene dovecot: imap-login: Login: user=<__cpanel__service__auth__imap__razxoe9ffiqhzj6rahuftwwqprhj2blovjvsbhd rhafjur...>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Oct 12 04:46:05 scene dovecot: IMAP(__cpanel__service__auth__imap__razxoe9ffiqhzj6rahuftwwqprhj2blovjvsbhdr hafjureydiuxbtbk2jkpkvlo): Disconnected: Logged out bytes=11/340 Oct 12 04:51:06 scene dovecot: imap-login: Login: user=<__cpanel__service__auth__imap__as64dk7mx4gfxupigti8wwrbqpqhetm9zyhzlrq h1iztqo...>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Oct 12 04:51:06 scene dovecot: IMAP(__cpanel__service__auth__imap__as64dk7mx4gfxupigti8wwrbqpqhetm9zyhzlrqh 1iztqosnzfwt28kkzv4riyd9): Disconnected: Logged out bytes=11/340 Oct 12 04:56:07 scene dovecot: imap-login: Login: user=<__cpanel__service__auth__imap__x0do00ujo_2w89kbu0kfk6s8evtdz9u3davldan 2pdmdvg...>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Oct 12 04:56:07 scene dovecot: IMAP(__cpanel__service__auth__imap__x0do00ujo_2w89kbu0kfk6s8evtdz9u3davldan2 pdmdvg6jofzylncdb3ytjaaz): Disconnected: Logged out bytes=11/340 Oct 12 05:01:08 scene dovecot: imap-login: Login: user=<__cpanel__service__auth__imap__lkup_seowtz4xhnmf5fkihlw6hpacvnfyeyzvir quwcv1z...>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Oct 12 05:01:08 scene dovecot: IMAP(__cpanel__service__auth__imap__lkup_seowtz4xhnmf5fkihlw6hpacvnfyeyzvirq uwcv1zhloqt12rqni_o2pqcj): Disconnected: Logged out bytes=11/340 Oct 12 05:06:09 scene dovecot: imap-login: Login: user=<__cpanel__service__auth__imap__yl1ivh4akxdj7vph6nz2w8jdmeuzukqkvezokgr cpi3usb...>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Oct 12 05:06:09 scene dovecot: IMAP(__cpanel__service__auth__imap__yl1ivh4akxdj7vph6nz2w8jdmeuzukqkvezokgrc pi3usbdjkiy2n8zy2bbvhhny): Disconnected: Logged out bytes=11/340 Oct 12 05:11:10 scene dovecot: imap-login: Login: user=<__cpanel__service__auth__imap__z0jltexjylqusc5j7qrtw5t7m_tqzcjyheljxrg 4vew3df...>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Oct 12 05:11:10 scene dovecot: IMAP(__cpanel__service__auth__imap__z0jltexjylqusc5j7qrtw5t7m_tqzcjyheljxrg4 vew3dfbyrglsasuldldaspck): Disconnected: Logged out bytes=11/340 Oct 12 05:16:11 scene dovecot: imap-login: Login: user=<__cpanel__service__auth__imap__0ycn3mqrthjv1aqo7w45zy1ndeodd2xxh92y3v0 e2bwtas...>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Oct 12 05:16:11 scene dovecot: IMAP(__cpanel__service__auth__imap__0ycn3mqrthjv1aqo7w45zy1ndeodd2xxh92y3v0e 2bwtastu0kton3azlhmmuhwi): Disconnected: Logged out bytes=11/340 Oct 12 05:21:12 scene dovecot: imap-login: Login: user=<__cpanel__service__auth__imap__ofmf6ptqgyhrzgrlsx3p33fz52q7j1afid0uszq mf4h8z1...>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Oct 12 05:21:12 scene dovecot: IMAP(__cpanel__service__auth__imap__ofmf6ptqgyhrzgrlsx3p33fz52q7j1afid0uszqm f4h8z1shjl34q9zpid3g4gsp): Disconnected: Logged out bytes=11/340 Oct 12 05:26:13 scene dovecot: imap-login: Login: user=<__cpanel__service__auth__imap__awz7xewlgj6pjfdz1dogl28vm9ld5fqfwviyaog ha3yc0w...>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Oct 12 05:26:13 scene dovecot: IMAP(__cpanel__service__auth__imap__awz7xewlgj6pjfdz1dogl28vm9ld5fqfwviyaogh a3yc0w6t7vvgyf1snz8vechf): Disconnected: Logged out bytes=11/340 Oct 12 05:31:14 scene dovecot: imap-login: Login: user=<__cpanel__service__auth__imap__uyfeustvewbyjgjyyrqgrflkxhuxfloywsash62 mucudsm...>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Oct 12 05:31:15 scene dovecot: IMAP(__cpanel__service__auth__imap__uyfeustvewbyjgjyyrqgrflkxhuxfloywsash62m ucudsmjfmyolzcpm9shakkiw): Disconnected: Logged out bytes=11/340 Oct 12 05:36:15 scene dovecot: imap-login: Login: user=<__cpanel__service__auth__imap__g6g0w1ikkl7h2dx3uw8hdpin8uhjml0lgk08zxc kmn7fkd...>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Oct 12 05:36:16 scene dovecot: IMAP(__cpanel__service__auth__imap__g6g0w1ikkl7h2dx3uw8hdpin8uhjml0lgk08zxck mn7fkdpsvbrjptqanfuljfv2): Disconnected: Logged out bytes=11/340 Oct 12 05:41:15 scene dovecot: imap-login: Login: user=<__cpanel__service__auth__imap__hucgkkpt7ggbzuudcxecprlhdf_c1qenb56hqun f1neeqb...>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Oct 12 05:41:16 scene dovecot: IMAP(__cpanel__service__auth__imap__hucgkkpt7ggbzuudcxecprlhdf_c1qenb56hqunf 1neeqbmzas00uqbzmmjsxiab): Disconnected: Logged out bytes=11/340 Oct 12 05:46:17 scene dovecot: imap-login: Login: user=<__cpanel__service__auth__imap__09irfuxyirdwosv6_f9prfvxpxhozr8qfauvfre yewqvxx...>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Oct 12 05:46:17 scene dovecot: IMAP(__cpanel__service__auth__imap__09irfuxyirdwosv6_f9prfvxpxhozr8qfauvfrey ewqvxxeoo7yhyiki7ghukxss): Disconnected: Logged out bytes=11/340 Oct 12 05:47:27 scene dovecot: dovecot: Fatal: Time just moved backwards by 35 seconds. This might cause a lot of problems, so I'll just kill myself now. http://wiki.dovecot.org/TimeMovedBackwards

3 2

[Dovecot] Dovecot failed logins delay all logins
by Dominic Malolepszy 17 Oct '12

17 Oct '12

Hi all, I have observed with my Dovecot setup that unique failed logins cause legitimate correct logins to be slowed. I am running two servers, each with two Dovecot instances, a Proxy with Director, and a backend Dovecot. I suspect that the backend instance is throttling connections from the same IP, and because I am running a Proxy, the backend will only see either of the two server IPs. I confirmed this by directly connecting to the backend, to bypass the proxy and rule it. I initiated dozens of unique failed logins from one IP and separately attempted to login from the same IP, and experienced an extended delay during login. At the same time a login from a different IP suceeded imediately. I see nothing in the logs suggesting some sort of process limits were exceeded, however I do see the following proc title for the backend auth process: "dovecot/auth [7 wait, 0 passdb, 0 userdb]" I have increased the mail_max_userip_connections to a very large value however I believe that setting is a per username/ip limit. Is there any sort of setting in Dovecot that I can configure that stops this authentication throttling per IP? Below is the configuration of the backend Dovecot instance. # 2.1.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-279.5.2.el6.x86_64 x86_64 Red Hat Enterprise Linux Server release 6.3 (Santiago) auth_cache_negative_ttl = 3 secs auth_cache_size = 100 M auth_cache_ttl = 10 mins auth_default_realm = example.com auth_failure_delay = 5 secs auth_mechanisms = plain login auth_verbose_passwords = sha1 auth_worker_max_count = 25 base_dir = /var/run/dovecot/ disable_plaintext_auth = no first_valid_gid = 12 first_valid_uid = 8 last_valid_gid = 12 last_valid_uid = 8 login_greeting = Hello there. login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c mail_fsync = always mail_gid = mail mail_location = maildir:%h/Maildir mail_nfs_index = yes mail_nfs_storage = yes mail_plugins = " stats" mail_uid = mail mmap_disable = yes namespace { inbox = yes location = maildir:%h/Maildir prefix = INBOX. separator = . } passdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } protocols = pop3 imap service auth { unix_listener auth-userdb { group = mail mode = 0660 user = mail } } service imap-login { inet_listener imap { address = 0.0.0.0 port = 9143 } process_min_avail = 5 service_count = 0 vsz_limit = 256 M } service imap { process_limit = 1000 vsz_limit = 256 M } service pop3-login { inet_listener pop3 { address = 0.0.0.0 port = 9110 } process_min_avail = 5 service_count = 0 vsz_limit = 256 M } service pop3 { process_limit = 1000 vsz_limit = 256 M } service stats { fifo_listener stats-mail { mode = 0600 user = mail } inet_listener { address = 127.0.0.1 port = 24242 } } ssl = no stats_memory_limit = 64 M userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } verbose_proctitle = yes protocol imap { imap_logout_format = bytes_read=%i bytes_send=%o mail_max_userip_connections = 1000 mail_plugins = " stats " } protocol pop3 { mail_max_userip_connections = 1000 } Dominic

2 2