March 2013 - dovecot - dovecot.org

[Dovecot] Wrong remote IP (rip) in mail.log using IMAP login
by tyli 02 Aug '13

02 Aug '13

Dear list users While trying to secure our dovecot server with fail2ban I came across the following problem: We use dovecot (1.2.9, ubuntu package) behind a NAT, and failed login attempts are logged with our firewall as the remote ip. Example: Apr 15 08:36:26 mail dovecot: imap-login: Disconnected (auth failed, 6 attempts): user=<xy>, method=PLAIN, rip=192.168.0.1, lip=192.168.0.3 Therefore I would ban 192.168.0.1 which means that I ban EVERY user. Funny thing is that POP3 login attempts are logged correctly: Apr 13 11:05:50 mail dovecot: pop3-login: Disconnected (auth failed, 1 attempts): user=<sgvyniwx>, method=PLAIN, rip=217.81.27.55, lip=192.168.0.3 Any ideas how to change this? Thanks in advance tyli

5 5

[Dovecot] how to setup different quota for multiple namespaces
by Andreas Oster 29 Jul '13

29 Jul '13

Hello all, I am using dovecot for some time now but always had very basic configurations. I recently have configured a new, additional namespace in order to move archived mails (Thunderbird Archives) to another storage system. namespace { type = private separator = . prefix = Archives. location = maildir:/var/vmail/archive/%Ln/Maildir subscriptions = yes list = children inbox = no } This works well but unfortunately I cannot find a solution to either ignore this new namespace from quota computation or add a separate quota value for it. I have integrated user authentication with LDAP and fetch some user attributes from LDAP entries: user_attrs = =home=/var/vmail/%Ln/Maildir,=mail=maildir:/var/vmail/%Ln/Maildir/,otherPager=quota_rule=*:storage=%$ I configured the quota plugin in the following way: plugin { quota = maildir:User quota:ns= quota2 = maildir:Archive quota:ns=Archives. quota_rule = *:storage=1G quota_rule2 = ns=Archives.:ignore } unfortunately this does not give the desired result. Folders under the Archives namespace use the same quota as INBOX. Does anyone have an idea how to fix this ? Thank you for your kind help Andreas

4 19

[Dovecot] Proxying improvements in v2.1.2
by Timo Sirainen 16 Jul '13

16 Jul '13

I just committed a couple of features that will make life easier for some types of proxying setups: 1. IMAP proxying has already for a while supported sending local/remote IP/port to backend server, which can use it for logging and other purposes. I've now implemented this for POP3 as well, although only the remote IP/port is forwarded, not local IP/port. I implemented this also for LMTP in v2.2 tree, but haven't bothered to backport that change. Both POP3 and LMTP uses XCLIENT command that is compatible to Postfix's (XCLIENT ADDR=1.2.3.4 PORT=110). 2. proxy_maybe=yes + host=host.example.com actually works now. As long as host.example.com DNS lookup returns one IP that belongs to the current server the proxying is skipped. 3. auth_proxy_self = 1.2.3.4 setting means that if proxy_maybe=yes and host=1.2.3.4 then Dovecot assumes that this is a local login and won't proxy it, even if 1.2.3.4 isn't the actual local IP. This can be helpful if the host field contains load balancer's IP address instead of the server's. You can add more than one IP (space separated) and of course everything related to this works just as well with hostnames as with IPs (even when hostname expands to multiple IPs).

2 2

[Dovecot] Zero-sized Maildir files and index corruption on over-quota
by Edgar Fuß 28 Jun '13

28 Jun '13

We are using Postfix as an MTA delivering via Dovecot's LDA (with sieve). We also use Dovecot as a POP/IMAP server. Mail storage is Maildir on NFS, indexes are stored locally. Quotas are FS quotas enforced by the NFS server. The Dovecot version is 1.2.11. Recently, for one user being over quota, some attempts to deliver mail bounced as expected while some others resulted in zero-sized Maildir files. I can verify zero-sized files in cur, while I cannot tell whether they were already zero-sized in new. However, since nobody except Dovecot is accessing the mail storage, it's either Dovecot's LDA or Dovecot's IMAP producing the zero-sized files. Logs show successful delivery (deliver: stored mail into mailbox 'INBOX') but ,,Corrupted index cache file /var/db/dovecot/indexes/XXX/.INBOX/dovecot.index.cache: Corrupted virtual size for uid=YYY: 0 != NNNN'' alerts on IMAP access. It looks like all mails which correctly got bounced are >64KB while those resulting in zero-sized files are <64KB (there is one >32KB). My first guess would be that maybe for large files, write() fails, while for small ones, close() fails or there is some buffering involved for large files.

3 10

[Dovecot] traffic statistics
by Martin Waschbüsch 28 Jun '13

28 Jun '13

Hi all, Does anyone know a good tool to gather traffic statistics for imap? And what level of logging would I need to set for dovecot to make it happen. Ideally this would be able to filter per domain, too. ;-) Thanks a lot, Martin -- Martin Waschbüsch IT-Dienstleistungen Lautensackstr. 16 80687 München Telefon: +49 89 57005708 Fax: +49 89 57868023 Mobil: +49 170 2189794 martin(a)waschbuesch.de http://martin.waschbuesch.de

4 5

[Dovecot] lda: duplicate prefix?
by Larry Rosenman 22 May '13

22 May '13

I've just started using Dovecot, and can't seem to get the LDA to work. I get the following error: Mar 4 00:47:19 thebighonker dovecot: lda(ler): Error: user ler: Initialization failed: namespace configuration error: Duplicate namespace prefix: "" Mar 4 00:47:19 thebighonker dovecot: lda(ler): Fatal: Invalid user settings. Refer to server log for more information. Mar 4 00:47:19 thebighonker exim[76281]: 1UCPB8-000JqI-L7 == /home/ler/clamav-rules <ler(a)lerctr.org> R=userforward T=address_file_dovecot defer (0): Child process of address_file_dovecot transport returned 75 (could mean temporary error) from command: /usr/local/libexec/dovecot/dovecot-lda dovecot -n attached. the invocation from my exim config for other than inbox: address_file_dovecot: driver = pipe # Use /usr/lib/dovecot/dovecot-lda if using Debian's package. # You may or may not want to add -d $local_part@$domain depending on if you ne ed a userdb lookup done. command = /usr/local/libexec/dovecot/dovecot-lda -f $sender_address -m ~/mail/ ${sg{$address_file}{$home}{}} message_prefix = message_suffix = log_output delivery_date_add envelope_to_add return_path_add #group = mail #mode = 0660 temp_errors = 64 : 69 : 70: 71 : 72 : 73 : 74 : 75 : 78 What am I doing wrong? -- Larry Rosenman http://www.lerctr.org/~ler Phone: +1 214-642-9640 (c) E-Mail: larryrtx(a)gmail.com US Mail: 430 Valona Loop, Round Rock, TX 78681-3893

2 9

[Dovecot] Antispam r49 breaks Dovecot v2.1
by Steffen Kaiser 30 Apr '13

30 Apr '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Dear Eugene, patch 49 breaks compilation with Dovecot v2.1. Attached patch encloses the change in a #if. To feed the #if the actual Dovecot version, I've introduced an extra variable in extra.mk, but I cannot help with making the GNU configure stuff doing it right away. There will be numerous other ways to get the Dovecot version into the source ... . Maybe, Timo would add a binary version of the Dovecot version in its config.h ? In order to be able to built version-aware plugins. Regards, - -- Steffen Kaiser -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iQEVAwUBUNLvT2oxLS8a3A9mAQIzfwgAvf7zcN9RwKD/kTmFkfx5djKd5H0dRXt8 423csD3bCU6qcOtR2MHR0ApNp07aXK84MPgIazbne41Iekqk0daoOhnPoc0mHy8u kj9EYFGVlQTKa2vcSUEu8Phddc/YHvzQba9m2Dg9P4STuJ6EcRqkhvufspERGphF Y+IY20BQc9/Flu8TIxtt6pSiIioq0WWntCGnyPP9BX90JYYO+5zAm5FnG4GH4Q0Z 44dZSKM7iP0/nMhmsraX/5alxy0mvx3ZfhO/Ktx/wd92WmLROAlicBClIZC9XCH2 6HD/ryr73DrEeEZdmwHcnmZrtWc++EJcAetfv45Fov8XagUtFJ0D4A== =G+d/ -----END PGP SIGNATURE-----

2 1

[Dovecot] dovecot index errors since 2.1.12
by Morten Stevens 18 Apr '13

18 Apr '13

Hi, After upgrading to dovecot 2.1.12, I see a lot of these errors: # 2.1.12: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-279.14.1.el6.x86_64 x86_64 CentOS release 6.3 (Final) # Filesystem: ext4 with mdbox storage Dec 10 15:21:04 mail dovecot: imap(user(a)example.org): Error: Cached message size smaller than expected (5010 < 8192) Dec 10 15:21:04 mail dovecot: imap(user(a)example.org): Error: Corrupted index cache file /var/vmail/example.org/user//mdbox/mailboxes/INBOX/Ubuntu/dbox-Mails/dovecot.index.cache: Broken physical size for mail UID 27517 Dec 10 15:21:04 mail dovecot: imap(user(a)example.org): Error: read(/var/vmail/example.org/user//mdbox/storage/m.7123) failed: Input/output error (FETCH for mailbox INBOX/Ubuntu UID 27517) Dec 10 15:21:04 mail dovecot: imap(user(a)example.org): Disconnected: Internal error occurred. Refer to server log for more information. [2012-12-10 15:21:04] in=3391 out=1383967 Dec 17 21:38:34 mail dovecot: imap(user2(a)example.org): Error: Cached message size larger than expected (12222 > 12085) Dec 17 21:38:34 mail dovecot: imap(user2(a)example.org): Error: Corrupted index cache file /var/vmail/example.org/user2//mdbox/mailboxes/LKML/dbox-Mails/dovecot.index.cache: Broken physical size for mail UID 216231 Dec 17 21:38:34 mail dovecot: imap(user2(a)example.org): Error: read(/var/vmail/example.org/user2//mdbox/storage/m.15569) failed: Input/output error (FETCH for mailbox LKML UID 216231) Dec 17 21:38:34 mail dovecot: imap(user2(a)example.org): Disconnected: Internal error occurred. Refer to server log for more information. [2012-12-17 21:38:34] in=4079 out=61996358 Dec 17 21:40:34 mail dovecot: imap(user2(a)example.org): Error: Cached message size larger than expected (6726 > 5302) Dec 17 21:40:34 mail dovecot: imap(user2(a)example.org): Error: Corrupted index cache file /var/vmail/example.org/user2//mdbox/mailboxes/Google/dbox-Mails/dovecot.index.cache: Broken physical size for mail UID 930834 Dec 17 21:40:34 mail dovecot: imap(user2(a)example.org): Error: read(/var/vmail/example.org/user2//mdbox/storage/m.15544) failed: Input/output error (FETCH for mailbox Google UID 930834) Dec 17 21:40:34 mail dovecot: imap(user2(a)example.org): Disconnected: Internal error occurred. Refer to server log for more information. [2012-12-17 21:40:34] in=27666 out=29738162 Since the release of dovecot 2.1.x, I have never seen this error message. After downgrading to 2.1.10 the error is gone. Andy ideas? Best regards, Morten

3 18

[Dovecot] Dovecot 2.2 & LEMONADE extensions
by Jan Phillip Greimann 18 Apr '13

18 Apr '13

Hi there, I read an article about dovecot 2.2, which includes the LEMONADE extensions, and was fascinated about the feature "Forward without download". We have a small internet-uplink in our office and our CEO loves to receive mails with large attachments, he also reply/forward it, so every time the full attachments get downloaded and uploaded again. Now the question is: Is LEMONADE supported by desktop-mailclients like thunderbird or just mobile Clients? (Google said nothing to this, maybe searched the wrong words) I hope someone can help me with this. Greetings, Jan

6 8

[Dovecot] %{session} does not work with deliver_log_format
by Daniel Parthey 17 Apr '13

17 Apr '13

Hi, # 2.1.10: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-45-server x86_64 Ubuntu 10.04.4 LTS deliver_log_format = mailbox: deliver: session=<%{session}> msgid=%m from=%f: %$ produces log messages always containing "session=<session}>", like this one: Feb 24 09:22:09 10.129.3.233 dovecot: lmtp(3484, user(a)example.org) mbnWK6/NKVGcDQAAiWCYmA: sieve: mailbox: deliver: session=<session}> msgid=<20130224082208.8A807C0CF(a)mx01.example.org> from=postmaster(a)example.org: stored mail into mailbox 'INBOX/postmaster' http://wiki2.dovecot.org/Variables leads me to the assumption that %{session} works "everywhere" and for deliver_log_format too. Is deliver_log_format variable expansion handled differently from login_log_format_elements and mail_log_prefix? Regards Daniel -- https://plus.google.com/103021802792276734820

2 4