February 2014 - dovecot

[Dovecot] Multiple ssl-certs on different ports with the same protocol
by myleetlist＠gmx.de 07 Feb '14

07 Feb '14

Hi, is it possible to use multiple ssl-certs on different _ports_ with the same protocol? I know I can configure multiple certs with the "local <ip>" setting*. But how is this (or similar) possible in v2.2.10: local :100 { protocol imap { ... } } local :101 { protocol imap { ... } } This would be useful in a loadbalancing setup, you don't waste IPs and the config files on different servers stay the same. * [http://wiki2.dovecot.org/SSL/DovecotConfiguration]

2 1

[Dovecot] POP3: Message ordering changed unexpectedly
by Gedalya 07 Feb '14

07 Feb '14

Hi, I think I'm having a problem with simultaneous pop3 connections on the same mailbox with one connection deleting a message. Jan 29 14:36:30 imap1 dovecot: pop3-login: Login: user=<riki(a)domain.com>, method=PLAIN, rip=82.xx.xx.xx, lip=-----, pip=------, mpid=7703, secured, session=<1A+8DiHxfABSUCCH> Jan 29 14:36:30 imap1 dovecot: pop3-login: Login: user=<riki(a)domain.com>, method=PLAIN, rip=69.xx.xx.xx, lip=-----, pip=------, mpid=7709, secured, session=<7iLADiHx7wBFdoaw> Jan 29 14:36:30 imap1 dovecot: pop3(riki(a)domain.com): Disconnected: Logged out top=0/0, retr=0/0, del=1/1227, size=51548362 Jan 29 14:36:33 imap1 dovecot: pop3(riki(a)domain.com): Error: Message ordering changed unexpectedly (msg #1: storage seq 1 -> 2) Jan 29 14:36:33 imap1 dovecot: pop3(riki(a)domain.com): Disconnected: POP3 UIDLs couldn't be listed top=3/2662, retr=0/0, del=0/1227, size=51548362 and again: Feb 3 12:43:16 imap1 dovecot: pop3-login: Login: user=<riki(a)domain.com>, method=PLAIN, rip=82.xx.xx.xx, lip=-------, pip=-------, mpid=31095, secured, session=<ae74DoTxtABSUCCU> Feb 3 12:43:17 imap1 dovecot: pop3-login: Login: user=<riki(a)domain.com>, method=PLAIN, rip=69.xx.xx.xx, lip=-------, pip=-------, mpid=31119, secured, session=<GvQMD4TxrwBFdoaw> Feb 3 12:43:17 imap1 dovecot: pop3(riki(a)domain.com): Disconnected: Logged out top=0/0, retr=1/80835, del=2/1192, size=48287015 Feb 3 12:43:18 imap1 dovecot: pop3(riki(a)domain.com): Error: Message ordering changed unexpectedly (msg #1: storage seq 1 -> 3) Feb 3 12:43:18 imap1 dovecot: pop3(riki(a)domain.com): Disconnected: POP3 UIDLs couldn't be listed top=3/2898, retr=0/0, del=0/1192, size=48287015 Running Dovecot 2.2.10+hg-6018854c8c91 Mailboxes were migrated recently using dsync with pop3 migration plugin. Is there a better way to handle this without logging an error? Am I doing something wrong? Any help is appreciated. Thanks, Gedalya # dovecot -n # 2.2.10: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.3 auth_mechanisms = plain login cram-md5 auth_verbose = yes auth_verbose_passwords = plain dict { expire = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext quota = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext } disable_plaintext_auth = no imapc_features = rfc822.size fetch-headers login_greeting = Dovecot ready login_log_format_elements = user=<%u> method=%m rip=%r lip=%l pip=%{real_rip} mpid=%e %c session=<%{session}> login_trusted_networks = xx.xx.xx.2 mail_gid = vmail mail_location = /nowhere mail_plugins = quota expire listescape mail_uid = vmail managesieve_sieve_capability = fileinto envelope encoded-character subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables mailbox date ihave namespace { hidden = yes list = no location = pop3c: prefix = POP3-MIGRATION-NS/ } namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = separator = / type = private } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { antispam_backend = pipe antispam_pipe_program = /usr/bin/ssh antispam_pipe_program_args = -l;spamd;-i;/etc/dovecot/sareport.key;mx.domain.com antispam_pipe_program_notspam_arg = revoke antispam_pipe_program_spam_arg = report antispam_pipe_tmpdir = /tmp antispam_spam = Junk antispam_trash_pattern_ignorecase = trash;Deleted * expire = Trash expire2 = Trash/* expire3 = Junk expire_dict = proxy::expire pop3_migration_mailbox = POP3-MIGRATION-NS/INBOX quota = dict:user::proxy::quota quota_rule = *:storage=2G quota_rule2 = Trash:storage=+250M quota_rule3 = Junk:ignore quota_warning = storage=99%% quota-warning 99 %u quota_warning2 = storage=95%% quota-warning 95 %u sieve = ~/.dovecot.sieve sieve_before = /etc/dovecot/sieve-global/fileinto-spam.sieve sieve_dir = ~/sieve sieve_extensions = -vacation -body -reject -enotify -environment -virustest -spamtest sieve_max_actions = 32 sieve_max_redirects = 4 sieve_max_script_size = 10K sieve_quota_max_scripts = 100 sieve_quota_max_storage = 4M } pop3_no_flag_updates = yes postmaster_address = postmaster(a)domain.com protocols = imap pop3 lmtp sieve service auth-worker { user = $default_internal_user } service auth { client_limit = 2448 unix_listener auth-userdb { group = root mode = 0600 user = vmail } } service dict { unix_listener dict { group = root mode = 0600 user = vmail } } service imap-login { process_min_avail = 4 service_count = 0 vsz_limit = 192 M } service imap-postlogin { executable = script-login /usr/local/bin/postlogin unix_listener imap-postlogin { group = root mode = 0600 user = vmail } user = root } service imap { executable = imap imap-postlogin process_limit = 1024 vsz_limit = 128 M } service lmtp { inet_listener lmtp { address = 10.44.23.1 port = 7025 } } service managesieve-login { inet_listener sieve { port = 4190 } service_count = 0 vsz_limit = 64 M } service managesieve { process_limit = 20 } service pop3-login { process_min_avail = 4 service_count = 0 vsz_limit = 192 M } service pop3 { executable = pop3 imap-postlogin process_limit = 1024 } service quota-warning { executable = script /usr/local/bin/quota-warning unix_listener quota-warning { user = vmail } user = dovecot } ssl_cert = </etc/dovecot/dovecot.pem ssl_key = </etc/dovecot/private/dovecot.pem userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } verbose_proctitle = yes protocol lmtp { mail_plugins = quota expire listescape sieve plugin { quota = dict:user::noenforcing:proxy::quota } } protocol lda { mail_plugins = quota expire listescape sieve } protocol imap { mail_max_userip_connections = 12 mail_plugins = quota expire listescape imap_quota antispam ssl_cert = </etc/dovecot/imap.domain.com.crt ssl_key = </etc/dovecot/private/imap.domain.com.key } protocol sieve { mail_max_userip_connections = 5 } protocol pop3 { mail_max_userip_connections = 10 ssl_cert = </etc/dovecot/pop.domain.com.crt ssl_key = </etc/dovecot/private/pop.domain.com.key } protocol doveadm { mail_plugins = quota expire listescape pop3_migration }

2 4

[Dovecot] Director centralized authentication
by Cássio Klein 07 Feb '14

07 Feb '14

Hello everybody, Is it possible to authenticate both passdb and userdb in the director cluster and send passdb information (like home, mail_location,...) to the backend servers? I am using the lastest dovecot version. Thanks in advance!

1 0

[Dovecot] qmail dovecot lda
by Florin, Portase 07 Feb '14

07 Feb '14

(no report template found)

1 0

Re: [Dovecot] dovecot.org moved
by Timo Sirainen 07 Feb '14

07 Feb '14

On 7.2.2014, at 10.02, Timo Sirainen <tss(a)iki.fi> wrote: > On 7.2.2014, at 9.58, Timo Sirainen <tss(a)iki.fi> wrote: > >> Looks like the old server doesn't stay up much at all anymore. And since it's kind of difficult currently to get access to the server I just restored everything from the previous night's backups. Latest mailing list subscribes/unsubscribes may need to be done again. Also I think there are some old configurations (and other things) still somewhere.. I'll change these as found and maybe I'll get access to the old server some day soon and can check again what differences there are. > > Archives weren't updating due to permission error .. Lets try again.. nope.

1 0

[Dovecot] dovecot -n FATAL
by Phil 06 Feb '14

06 Feb '14

Hi List, Im new to postfix-dovecot and im mystified by the following results in ubuntu 10.04lts :~$ dovecot -n # 1.2.9: /etc/dovecot/dovecot.conf Error: ssl_key_file: Can't use /etc/ssl/private/ssl-mail.key: Permission denied Fatal: Invalid configuration in /etc/dovecot/dovecot.conf ~$ sudo ls -dl /etc/ssl/private/ssl-mail.key lrwxrwxrwx 1 root root 38 2013-11-27 08:35 /etc/ssl/private/ssl-mail.key -> /etc/ssl/private/ssl-cert-snakeoil.key Why is dovecot happily delivering mail to local accounts ( thats all i use atm) without being able to access the ssl key, and how can i fix this problem so i can run dovecot -n successfully. i have tried 'chown dovecot' etc but there was no change in dovecot -n output. Any and all help is appreciated. Phil

4 8

[Dovecot] Plugin architecture
by Philipp Brüll 06 Feb '14

06 Feb '14

Hi, I'm currently developing a scrambler plugin which should be used to store the mails encrypted on the disk. It uses a special ostream for encryption and an istream for decryption. The idea is, that if a mail arrives via LMTP it goes through the ostream and is written encrypted to disk. If an mail is accessed via IMAP, the istream is used to decrypt the data from disk. That all works fine, but if I add the zlib plugin it all gets mixed up. For some reason, the lmtp process tries to read something from disk using the chain of istreams. That behaviour is a little bit bizzare to me, because my understanding is, that the zlib plugin at this point should only write (compressed) data to disk. Why is the istream used here? And what is read? If I remove zlib from the configuration again, it all works as expected. The dovecot version is 2.1.17. Best regards, Philipp

1 0

[Dovecot] Trying to get Dovecot Director Proxying working
by Murray Trainer 06 Feb '14

06 Feb '14

Hi All, Firstly, thanks for all the really helpful responses to my previous questions "Architecture for large Dovecot cluster" and "Sizing MTA servers". I am now trying to get a Dovecot director proxy working with a single backend mail server. When I try to connect to the dovecot proxy on the pop3 and imap ports I get connection refused. I want the authentication to be on the backend mail server initially. I am not sure if I am missing something? More info below... Thanks Murray # doveadm director status mail server ip vhosts users 27.54.95.41 100 0 # doveadm director map doveadm(root): Error: userdb list: Disconnected unexpectedly doveadm(root): Error: user listing failed user mail server ip expire time # doveadm fetch -A user ALL doveadm(root): Error: userdb list: Disconnected unexpectedly doveadm: Error: Failed to iterate through some users # doveconf -n # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.1 auth_cache_size = 32 M auth_cache_ttl = 2 hours auth_debug = yes auth_verbose = yes base_dir = /var/run/dovecot/ director_mail_servers = 27.54.95.41 director_servers = 27.54.95.37 disable_plaintext_auth = no mail_debug = yes passdb { args = nopassword=y proxy=y driver = static } service auth { unix_listener auth-userdb { mode = 0666 user = dovecot } } service director { fifo_listener login/proxy-notify { mode = 0666 } inet_listener { port = 9090 } unix_listener director-userdb { mode = 0600 } unix_listener login/director { mode = 0666 } } service imap-login { executable = imap-login director } service ipc { unix_listener ipc { user = dovecot } } service pop3-login { executable = pop3-login director } ssl_cert = </etc/dovecot/dovecot.pem ssl_key = </etc/dovecot/private/dovecot.pem userdb { args = uid=dovenull gid=dovenull home=/var/run/dovecot/empty driver = static }

1 0

[Dovecot] LMTP troubles
by Phillip Odam 06 Feb '14

06 Feb '14

Background: Dovecot: v 2.0.9 OS: AWS Linux (derived from CentOS) At this stage I've avoided upgrading to a newer version of Dovecot as version 2.0.9 is what AWS Linux provides and I'd like to be able to run a regular AWS Linux installation if I can. As opposed to pulling newer versions of dovecot from other repositories or building from source, since the odds are this issue is not a bug in dovecot. I've just tried setting up the LMTP service and eventually uncovered that that the greeting the server responds with straight after connecting isn't being returned. This must be a configuration mistake on my behalf but I just haven't been able to figure it out yet. I haven't had LMTP configured for awhile but I'm sure I've had it all in place and don't recall any issue like this. I've followed the detail here http://wiki2.dovecot.org/LMTP, in particular # add lmtp to protocols, otherwise its listeners are ignored protocols = imap pop3 lmtp service lmtp { inet_listener lmtp { address = 192.168.0.24 127.0.0.1 ::1 port = 24 } unix_listener lmtp { #mode = 0666 } } What's also interesting, using telnet my first attempt to connect results in the server closing the connection immediately and then a second attempt to connect results in an established connection but no response from the server so that then the LMTP client knows it's all good to begin issuing commands. I have no idea about the architecture of dovecot and the LMTP service but it's as if dovecot has successfully bound to the port allocated for LMTP* but the the LMTP service has either not started or dovecot doesn't know which service to pass the connection on to. * - dovecot has definitely bound to the port (localhost:24) as netstat clearly shows this. I've tried enabling debug logging per the details here http://wiki2.dovecot.org/Logging and checked that I'm looking at all the logs I need to be using doveadm log find but not seeing any information that helps. At the moment I know I'm light on necessary detail for anyone to help but I thought I'd try in case anyone has seen this before and is able to tell me I've missed X and Y. I'm planning on setting up a clean environment to sort this issue out and if needed will follow up here with more detail and the final solution/s. Thanks Phillip

1 0

[Dovecot] qmail dovecot lda
by Florin Portase 06 Feb '14

06 Feb '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SETUP: qmail + dovecot 2.2.10 + pigeonhole 0.4.2 I have a user who's quota is at 98% so theoretically when this user is receiving any mails qmail shout send a rejection message like user is overquota /vpopmail/domains/medianetork.ro/.qmail-default #| /home/vpopmail/bin/vdelivermail '' bounce-no-mailbox | DTLINE=${DTLINE/$USER-} /var/qmail/bin/preline -f /usr/libexec/dovecot/dovecot-lda -d $EXT@$USER -a $EXT@$USER If I let enabled only this line | /home/vpopmail/bin/vdelivermail '' bounce-no-mailbox everything is working OK 1st test: from yahoo mail - - send an _attachment of 2mb ( way over quota ) and the response: @4000000052f370fd3381b504 info msg 3793: bytes 4268 from <<>@medianetork.ro> qp 19703 uid 420 @4000000052f370fd3381b8ec starting delivery 6: msg 3793 to remote pflorin1(a)yahoo.com @4000000052f370fd3381b8ec status: local 0/10 remote 1/120 @4000000052f371011135ec04 delivery 6: success: 66.196.118.33_accepted_message./Remote_host_said:_250_ok_dirdel/ @4000000052f371011135f3d4 status: local 0/10 remote 0/120 2nd test: from lotus domino - - send an _attachment of 2mb ( way over quota ) @4000000052f34f832bc8fa0c info msg 3774: bytes 3444 from <<>@medianetork.ro> qp 13708 uid 420 @4000000052f34f832bc8fa0c starting delivery 2: msg 3774 to remote pflorin1(a)fr.ibm.com @4000000052f34f832bc8fdf4 status: local 0/10 remote 1/120 @4000000052f34f84346185e4 delivery 2: failure: Connected_to_195.75.94.105_but_sender_was_rejected./Remote_host_said:_501_Syntax_error_in_parameters_or_arguments:_(-132)/ Also gmail complains about Syntax error -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQEcBAEBAgAGBQJS839EAAoJECEzxtLP+204PG8H/3+melSRQ9zWlqaY77rnxIIV 7fV3c6DFvwWeBr7MJx7MAtWRljzyS8dMLkNrfqvZlhWBRljinV3P8iX8m+ZT6wKG 42H5BLCRPhXccppFvYwTL22CNFO0+ZKdhogFFrr3bBxdoir3xW+rG9dUDw+uvQZw y2R6zUp4o33nBKq44mfvIOV8/kwDiVdxN+p/pbs/QFsvtFJh+NI39F9mxWFMkTAk leQjjSrKSw/yKBXjWRT4Gu35XrqylbUHo8n9EzS6jP47OE2DAHMhfKI8/0qCHcNK R3NiWu7xvW8GX66zhF3LUZN5ojAxniZ+AvJ+q016BQi7EWMeNcR7a/o8bavSaMg= =kcDs -----END PGP SIGNATURE-----

2 1