May 2014 - dovecot - dovecot.org

[Dovecot] dovecot: disable ssl compression
by Andreas Schulze 04 Jul '14

04 Jul '14

Hello, Our "it-security" department asked me about Qualys warnings like -> SSL/TLS Compression Algorithm Information Leakage Vulnerability As far as I learned it's compression inside ssl. postfix-2.11 knows 'tls_ssl_options = no_compression' ( see http://www.postfix.org/postconf.5.html#tls_ssl_options ) is the something comparable in dovecot too? Looks like most extensions in ssl exist only to be disabled :-/ Thanks Andreas

7 15

[Dovecot] fts_lucene - hiding lucene-indexes folder?
by Nicholas Riley 03 Jul '14

03 Jul '14

Hi, Is there any way to hide this folder from IMAP clients? I can see it is not runtime configurable and just #defined as LUCENE_INDEX_DIR_NAME in fts-backend-lucene.c. -- Nicholas Riley <njriley(a)illinois.edu>

5 8

[Dovecot] zlib maildir reindex broken
by Richard Platel 03 Jul '14

03 Jul '14

I posted to the list about this a while ago but never got a response, I have a bit more information now. Dovecot 2.2.12 and other 2.2 versions are broken when using zlib and maildir. If messages are re-indexed, the INTERNALDATE of all messages is set to the time the re-index is done. The problem seems to be in src/plugins/zlib/zlib-plugin.c in the function zlib_mail_cache_open. During a reindex maildir_mail_get_received_date() does an i_stream_stat on the the i_stream_seekable stream created in zlib_mail_cache_open, but this istream does not know about the original maildir message file and always returns the current time for the file's stat times. This is also broken on initial index, but if mail is indexed when it's received (ours isn't) it coincidentally gets the right time.

4 3

[Dovecot] TLS/SSL for Win8 & Outlook
by Sebastian Goodrick 02 Jul '14

02 Jul '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello I recently upgraded to dovecot 2.1.7 (as supplied with Debian Weezy). All clients work as expected except for Outlook (2013 &2010) on Win8 with a SSL/TLS connection. (Thunderbird on Win8 and Outlook 2013 on Win 7 works fine. On my previous dovecot version 1.2.13 all clients worked.) As far as I understand, one difference is the support for TLS1.2 and SSL3. And on the client side Win8 is now connecting through the Microsoft Unified Security Protocol Provider. My logs show these issues: Dovecot: May 06 21:05:43 imap-login: Warning: SSL: where=0x2002, ret=-1: SSLv3 read client certificate A [78.42.x.x] May 06 21:05:43 imap-login: Warning: SSL: where=0x2002, ret=-1: SSLv3 read client certificate A [78.42.x.x] May 06 21:05:43 imap-login: Warning: SSL failed: where=0x2002: SSLv3 read client certificate A [78.42.x.x] May 06 21:05:43 imap-login: Info: Disconnected (no auth attempts in 0 secs): user=<>, rip=78.42.x.x, lip=144.76.x.x, TLS handshaking: Disconnect Outlook 2013 (contains German, translation in []): IMAP: 12:30:02 [db] Mit 'mail.xxx.de' wird eine Verbindung an Port 143 hergestellt. [A connection to port 143 is established with 'mail.xxx.de'] [snip] IMAP: 12:30:02 [rx] * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN AUTH=LOGIN AUTH=DIGEST-MD5 AUTH=CRAM-MD5] Welcome at mail.xxx.de [snip] IMAP: 12:30:02 [rx] hmpc OK Pre-login capabilities listed, post-login capabilities have more.IMAP: 12:30:02 [tx] ekum STARTTLS IMAP: 12:30:02 [db] OnNotify: asOld = 5, asNew = 5, ae = 3 IMAP: 12:30:02 [rx] ekum OK Begin TLS negotiation now. IMAP: 12:30:02 [db] Mit 'Microsoft Unified Security Protocol Provider' wird eine sichere Verbindung ausgehandelt. [A secure connection is negotiated with 'Microsoft Unified Security Protocol Provider'] IMAP: 12:30:02 [db] OnNotify: asOld = 5, asNew = 6, ae = 2 IMAP: 12:30:03 [db] Die Verbindung mit 'mail.xxx.de' wurde geschlossen. [Connection to 'mail.xxx.de' has been closed.] IMAP: 12:30:03 [db] OnNotify: asOld = 6, asNew = 0, ae = 5 IMAP: 12:30:03 [db] ERROR: "Es kann keine sichere Verbindung mit dem Server hergestellt werden.", hr=2148322330 [Can't establish a secure connection with the server.] My settings for ssl_protocols and ssl_cipher_list are empty. Since it works with most clients, I assume no broken certificates or my dovecot configuration. The connection fails at the TLS/SSL handshake. Has anyone seen this behaviour, too? Is there a setting (for ssl_protocols and ssl_cipher_list) to support Outlook on Win8? Thanks, Sebastian -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iEYEARECAAYFAlNqhkwACgkQR7+YB0QzbnqEFQCdHBPPpFB/pqgZ9FR81h/vcGy5 hkoAn2iuq+AUwQCN3yEtGIWuPAfpm2bs =WrvL -----END PGP SIGNATURE-----

6 29

[Dovecot] lazy_expunge and shared folders
by Florian 02 Jul '14

02 Jul '14

Hi, since migration to Dovecot 2.2 I have troubles with lazy_expunge as soon as a user shares a folder. The user the folder is shared to cannot login anymore, dovecot logs Fatal: lazy_expunge: Unknown namespace: '.EXPUNGED/' - When no folder is shared lazy_expunge is working fine, deleted mails are moved to the expunged namespace and can be recovered without any problems. - Sharing folders works as long as I disable lazy_expunge. I have used the config (with minor changes) with dovecot 2.0 for years without any problem. Switching to dovecot 2.2.10 (atrps repository) or 2.2.12 (dovecot enterprise repo) lazy_expunge and acl do not work together anymore. Is it a bug, a known limitation or is something wrong with my config? Any hints are welcome. Thanks in advance, Florian dovecot -n # 2.2.12.12 (03196f188677): /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-042stab085.20 x86_64 CentOS release 6.5 (Final) auth_cache_negative_ttl = 10 mins auth_cache_size = 10 M auth_cache_ttl = 2 hours auth_failure_delay = 10 secs auth_mechanisms = plain login auth_socket_path = /var/run/dovecot/auth-userdb base_dir = /var/run/dovecot/ disable_plaintext_auth = no first_valid_gid = 105 first_valid_uid = 105 hostname = ... imap_client_workarounds = delay-newmail tb-extra-mailbox-sep tb-lsub-flags imap_idle_notify_interval = 10 mins last_valid_uid = 105 listen = ... lmtp_save_to_detail_mailbox = yes login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c mail_gid = vimap mail_home = /var/imap/spool/%1n/%n mail_location = mdbox:~/mdbox mail_plugins = " fts fts_lucene acl" mail_temp_dir = /var/imap/tmp mail_uid = vimap managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave mbox_write_locks = fcntl mdbox_rotate_interval = 1 days namespace { list = children location = mdbox:/var/imap/spool/%%1n/%%n/mdbox:INDEXPVT=/var/imap/spool/%1n/%n/mdbox/shared/%%u prefix = User/%%u/ separator = / subscriptions = no type = shared } namespace expunged { hidden = yes list = no location = mdbox:/var/imap/spool/%1n/%n/mdbox:MAILBOXDIR=expunged prefix = .EXPUNGED/ separator = / subscriptions = no type = private } namespace inbox { inbox = yes location = mdbox:/var/imap/spool/%1n/%n/mdbox mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Learn { auto = subscribe } mailbox Learn/Ham { auto = subscribe } mailbox Learn/Spam { auto = subscribe } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Spam { auto = subscribe special_use = \Junk } mailbox Trash { auto = subscribe special_use = \Trash } mailbox virtual/All { special_use = \All } mailbox virtual/Flagged { special_use = \Flagged } prefix = separator = / type = private } passdb { args = /etc/dovecot/master-users driver = passwd-file master = yes } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } passdb { args = /etc/dovecot/extra-users driver = passwd-file } plugin { acl = vfile:/var/imap/global-acls:cache_secs=300 acl_shared_dict = file:/var/imap/shared-mailboxes/shared-mailboxes fts = lucene fts_autoindex = yes fts_lucene = whitespace_chars=@. lazy_expunge = .EXPUNGED/ lazy_expunge_only_last_instance = yes recipient_delimiter = + sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_max_actions = 32 sieve_max_redirects = 4 sieve_max_script_size = 1M } pop3_client_workarounds = outlook-no-nuls oe-ns-eoh postmaster_address = postmaster@... protocols = imap pop3 lmtp sieve service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = vimap mode = 0600 user = vimap } user = $default_internal_user } service imap-login { process_min_avail = 4 service_count = 0 } service imap { process_limit = 1024 vsz_limit = 256 M } service lmtp { inet_listener lmtp { address = ... port = 24 } } service managesieve-login { inet_listener sieve { port = 4190 } inet_listener sieve_deprecated { port = 2000 } service_count = 1 vsz_limit = 64 M } service pop3-login { inet_listener pop3s { port = 995 ssl = yes } process_min_avail = 4 service_count = 0 } service pop3 { process_limit = 512 } ssl_cert = </etc/dovecot/ssl/... ssl_key = </etc/dovecot/ssl/... userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } userdb { args = uid=vimap gid=vimap home=/var/imap/spool/%1n/%n driver = static } protocol lda { mail_plugins = " fts fts_lucene acl sieve" } protocol imap { mail_max_userip_connections = 20 mail_plugins = " fts fts_lucene acl imap_acl" } protocol lmtp { mail_plugins = " fts fts_lucene acl sieve" } protocol sieve { mail_max_userip_connections = 10 managesieve_implementation_string = Dovecot Pigeonhole managesieve_logout_format = bytes=%i/%o managesieve_max_line_length = 65536 } protocol pop3 { mail_max_userip_connections = 20 }

4 4

[Dovecot] mdbox-files not approximately 2 MB
by Hardy Flor 27 Jun '14

27 Jun '14

Hello, there are copies with different size in 3 mailboxes of the user sequentially about 3800 emails. why not something 2MB files? After the big file "m.00000034" with 14MB follow very many small ... ------------------------------------- doveconf: # 2.2.12: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.4 ext4 mail_attachment_dir = /var/mail/attachments mail_attachment_hash = %{md5} mail_attachment_min_size = 16 k mail_location = mdbox:/var/mail/user/%n mdbox_rotate_interval = 1 weeks mdbox_rotate_size = 2 M ------------------------------------- directory: root@xxx:/var/mail/user/xxx/storage# ls -al insgesamt 76532 drwx--S--- 2 vmail mail 4096 Mär 16 13:52 . drwx--S--- 6 vmail mail 4096 Mär 16 12:10 .. -rw------- 1 vmail mail 74360 Mär 16 12:39 dovecot.map.index -rw------- 1 vmail mail 25204 Mär 16 13:52 dovecot.map.index.log -rw------- 1 vmail mail 63544 Mär 16 12:39 dovecot.map.index.log.2 -rw------- 1 vmail mail 2092921 Mär 16 12:15 m.00000001 -rw------- 1 vmail mail 2086746 Mär 16 12:15 m.00000002 -rw------- 1 vmail mail 2084182 Mär 16 12:15 m.00000003 -rw------- 1 vmail mail 2096826 Mär 16 12:15 m.00000004 -rw------- 1 vmail mail 1882666 Mär 16 12:15 m.00000005 -rw------- 1 vmail mail 1903965 Mär 16 12:15 m.00000006 -rw------- 1 vmail mail 2091169 Mär 16 12:15 m.00000007 -rw------- 1 vmail mail 2086396 Mär 16 12:15 m.00000008 -rw------- 1 vmail mail 507205 Mär 16 12:16 m.00000009 -rw------- 1 vmail mail 2031456 Mär 16 12:17 m.00000010 -rw------- 1 vmail mail 2095697 Mär 16 12:17 m.00000011 -rw------- 1 vmail mail 1689071 Mär 16 12:17 m.00000012 -rw------- 1 vmail mail 2092124 Mär 16 12:17 m.00000013 -rw------- 1 vmail mail 1950602 Mär 16 12:17 m.00000014 -rw------- 1 vmail mail 2092215 Mär 16 12:17 m.00000015 -rw------- 1 vmail mail 2087463 Mär 16 12:17 m.00000016 -rw------- 1 vmail mail 2079795 Mär 16 12:17 m.00000017 -rw------- 1 vmail mail 2014121 Mär 16 12:17 m.00000018 -rw------- 1 vmail mail 2081893 Mär 16 12:17 m.00000019 -rw------- 1 vmail mail 2092088 Mär 16 12:17 m.00000020 -rw------- 1 vmail mail 2090508 Mär 16 12:17 m.00000021 -rw------- 1 vmail mail 1929296 Mär 16 12:17 m.00000022 -rw------- 1 vmail mail 2067685 Mär 16 12:17 m.00000023 -rw------- 1 vmail mail 1745743 Mär 16 12:20 m.00000024 -rw------- 1 vmail mail 866452 Mär 16 12:20 m.00000025 -rw------- 1 vmail mail 296379 Mär 16 12:20 m.00000026 -rw------- 1 vmail mail 433541 Mär 16 12:39 m.00000027 -rw------- 1 vmail mail 92526 Mär 16 12:39 m.00000028 -rw------- 1 vmail mail 19094 Mär 16 12:39 m.00000029 -rw------- 1 vmail mail 106837 Mär 16 12:39 m.00000030 -rw------- 1 vmail mail 162012 Mär 16 12:39 m.00000031 -rw------- 1 vmail mail 412080 Mär 16 13:51 m.00000032 -rw------- 1 vmail mail 1715868 Mär 16 13:51 m.00000033 -rw------- 1 vmail mail 14433784 Mär 16 13:51 m.00000034 -rw------- 1 vmail mail 3280 Mär 16 13:51 m.00000035 -rw------- 1 vmail mail 6308 Mär 16 13:51 m.00000036 -rw------- 1 vmail mail 534274 Mär 16 13:51 m.00000037 -rw------- 1 vmail mail 378719 Mär 16 13:51 m.00000038 -rw------- 1 vmail mail 458528 Mär 16 13:51 m.00000039 -rw------- 1 vmail mail 192504 Mär 16 13:51 m.00000040 -rw------- 1 vmail mail 1277766 Mär 16 13:51 m.00000041 -rw------- 1 vmail mail 33417 Mär 16 13:51 m.00000042 -rw------- 1 vmail mail 142866 Mär 16 13:51 m.00000043 -rw------- 1 vmail mail 113529 Mär 16 13:51 m.00000044 -rw------- 1 vmail mail 55888 Mär 16 13:51 m.00000045 -rw------- 1 vmail mail 673504 Mär 16 13:51 m.00000046 -rw------- 1 vmail mail 430738 Mär 16 13:51 m.00000047 -rw------- 1 vmail mail 218494 Mär 16 13:51 m.00000048 -rw------- 1 vmail mail 96165 Mär 16 13:51 m.00000049 -rw------- 1 vmail mail 8370 Mär 16 13:51 m.00000050 -rw------- 1 vmail mail 29251 Mär 16 13:51 m.00000051 -rw------- 1 vmail mail 394680 Mär 16 13:51 m.00000052 -rw------- 1 vmail mail 674892 Mär 16 13:51 m.00000053 -rw------- 1 vmail mail 1076919 Mär 16 13:51 m.00000054 -rw------- 1 vmail mail 258806 Mär 16 13:51 m.00000055 -rw------- 1 vmail mail 60069 Mär 16 13:51 m.00000056 -rw------- 1 vmail mail 297891 Mär 16 13:51 m.00000057 -rw------- 1 vmail mail 92772 Mär 16 13:51 m.00000058 -rw------- 1 vmail mail 129272 Mär 16 13:51 m.00000059 -rw------- 1 vmail mail 56073 Mär 16 13:51 m.00000060 -rw------- 1 vmail mail 528260 Mär 16 13:51 m.00000061 -rw------- 1 vmail mail 29468 Mär 16 13:51 m.00000062 -rw------- 1 vmail mail 3250 Mär 16 13:51 m.00000063 -rw------- 1 vmail mail 96445 Mär 16 13:51 m.00000064 -rw------- 1 vmail mail 337663 Mär 16 13:51 m.00000065 -rw------- 1 vmail mail 187505 Mär 16 13:51 m.00000066 -rw------- 1 vmail mail 98839 Mär 16 13:51 m.00000067 -rw------- 1 vmail mail 5294 Mär 16 13:51 m.00000068 -rw------- 1 vmail mail 28276 Mär 16 13:51 m.00000069 -rw------- 1 vmail mail 67950 Mär 16 13:52 m.00000070 -rw------- 1 vmail mail 704457 Mär 16 13:52 m.00000071 -rw------- 1 vmail mail 1410205 Mär 16 13:52 m.00000072 -rw------- 1 vmail mail 736330 Mär 16 13:52 m.00000073 -rw------- 1 vmail mail 616992 Mär 16 13:52 m.00000074

1 1

[Dovecot] Can't get authentication for masterusers on Mac OS X Server 10.6.8
by Gilles Celli 11 Jun '14

11 Jun '14

Hi dovecot masters, This is my first post here, since I desperately need some advices from the dovecot community. I've tried to get an answer on the Apple Forums but til now no luck....here we go: I've tried to sync our users emails (Mac OS X Server 10.6.8 Snow Leopard with dovecot 1.1.20-apple0.5) via imapsync to our new server by using the masterusers authentication method on the old 10.6.8 server... The main problem on OS X Server 10.6.8 is that dovecot 1.1.20 uses the OD (OpenDirectory) driver (well I think), so that when following the directions of Master users/password from this page I can't login with the http://wiki1.dovecot.org/Authentication/MasterUsers I couldn't find anything on the OD driver directive....the dovecot 1.1.20-apple build doesn't even have the shadow driver built in (see below the dovecot --build-options), so that passdb shadow {} won't work anyway I always get NO Authentication failed, when trying the following: >telnet localhost 143 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. * OK Dovecot ready. 1 login user1*mailadmin PASSWORD 1 NO Authentication failed. I've tried also to add a Post-login scripting like described here, but no luck either: http://www.stefanux.de/wiki/doku.php/server/dovecot Does someone know how to fix my migration issue ? Any help is greatly appreciated. Gilles Here's my dovecot : >dovecotd --build-options Build options: ioloop=kqueue notify=kqueue ipv6 openssl Mail storages: maildir mbox dbox cydir raw SQL drivers: Passdb: checkpassword od pam passwd passwd-file Userdb: od passwd passwd-file prefetch static Here's my dovecot -n output: >dovecotd -n # 1.1.20apple0.5: /private/etc/dovecot/dovecot.conf Warning: fd limit 256 is lower than what Dovecot can use under full load (more than 306). Either grow the limit or change login_max_processes_count and max_mail_processes settings # OS: Darwin 10.8.0 i386 hfs base_dir: /var/run/dovecot syslog_facility: local6 protocols: pop3 imap pop3s imaps ssl_ca_file: /etc/certificates/Default.DB14D82BF89A0DDCE123137BC94AEA0C94DDD838.chain.pem ssl_cert_file: /etc/certificates/Default.DB14D82BF89A0DDCE123137BC94AEA0C94DDD838.cert.pem ssl_key_file: /etc/certificates/Default.DB14D82BF89A0DDCE123137BC94AEA0C94DDD838.key.pem ssl_cipher_list: ALL:!LOW:!SSLv2:!aNULL:!ADH:!eNULL disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login login_user: _dovecot login_process_per_connection: no max_mail_processes: 50 mail_max_userip_connections(default): 20 mail_max_userip_connections(imap): 20 mail_max_userip_connections(pop3): 10 verbose_proctitle: yes first_valid_uid: 6 first_valid_gid: 6 mail_access_groups: mail mail_location: maildir:/var/spool/imap/dovecot/mail/%u mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_process_sharing: full mail_max_connections(default): 10 mail_max_connections(imap): 10 mail_max_connections(pop3): 5 mail_plugins(default): quota imap_quota mail_plugins(imap): quota imap_quota mail_plugins(pop3): quota mail_plugin_dir(default): /usr/lib/dovecot/imap mail_plugin_dir(imap): /usr/lib/dovecot/imap mail_plugin_dir(pop3): /usr/lib/dovecot/pop3 lda: postmaster_address: postmaster(a)example.com hostname: mymailserver.example.com mail_plugins: quota quota_full_tempfail: yes sendmail_path: /usr/sbin/sendmail auth_socket_path: /var/run/dovecot/auth-master log_path: /var/log/mailaccess.log info_log_path: /var/log/mailaccess.log auth default: mechanisms: plain login gssapi apop cram-md5 master_user_separator: * verbose: yes passdb: driver: passwd-file args: /etc/dovecot/passwd.masterusers pass: yes master: yes passdb: driver: od userdb: driver: od args: partition=/etc/dovecot/partition_map.conf enforce_quotas=no socket: type: listen master: path: /var/run/dovecot/auth-master mode: 384 user: _dovecot group: mail plugin: quota_warning: storage=100%% /usr/libexec/dovecot/quota-exceeded.sh quota_warning2: storage=90%% /usr/libexec/dovecot/quota-warning.sh quota: maildir:User quota sieve: /var/spool/imap/dovecot/sieve-scripts/%u/dovecot.sieve

3 5

[Dovecot] Issues with VANISHED CHANGEDSINCE
by Michael J Rubinsky 09 Jun '14

09 Jun '14

I've been seeing the following wonky behavior with Dovecot. Currently this is with Dovecot 2.0.19, but I was also seeing it in earlier versions as well, including versions from the 1.x series. Some background, this is from Horde's ActiveSync library, when it is trying to determine what UIDs have recently been expunged. I can guarantee that when this command was sent, there was only one or two emails that were removed since the provided MODSEQ value. C: 8 UID FETCH 1:* UID (VANISHED CHANGEDSINCE 587742) S: * VANISHED (EARLIER) 1:119944,119947:123482,123484:128043,128045:130388,130390:130456,130458:132127,132129:135832,135834:136201,136203:136301,136303:136316,136318:138502,138504:140099,140101:141908,141910:142607,142609:142744,142746:142865,142867:143160,143164:143173,143176:143179,143181:143187,143189:143190,143192:143195,143197:143270,143272:143273,143275:143280,143282:143302,143305:143307,143309:143318,143320:143333,143335:143337,143339:143341,143343:143375,143377:143400,143402:143551,143553:143637,143640:143706,143708:144069,144071:144178,144180:144307,144309:144316,144318:144329,144331:144931,144933:144983,144985:145000,145002:145069,145071:145072,145074:145132,145136:145178,145180:145191,145193 Also, to verify it wasn't something screwy with my server, Michael Slusarz provided me with this from his server: <quote> There's definitely something wonky going on in the code. There's a certain tipping point of modseqs where the values become incorrect. For a mailbox with HIGHESTMODSEQ of 54004, I see this: a uid fetch 1:* UID (VANISHED CHANGEDSINCE 53881) * VANISHED (EARLIER) 1:37308,37310:40788,40791:41032,41034:41083 a OK Fetch completed. b uid fetch 1:* UID (VANISHED CHANGEDSINCE 53882) * VANISHED (EARLIER) 41029:41030,41047:41083 b OK Fetch completed. </quote> Thanks for any guidance. -- mike The Horde Project (www.horde.org) mrubinsk(a)horde.org

4 21

[Dovecot] attachment sis + EMLINK (too many links) = segfault bug (2.2.12)
by Pavel Stano 05 Jun '14

05 Jun '14

Hi, we use attachment dedup with lots of emails (still migrating to it from maildir). We use netapp storage with wafl filesystem over nfs. Problem is that netapp has hard limit of 100k hardlinks to one file. And we encountered it. Problem is that dovecot start do segfault (lmtp,dsync,pop3 etc) when it happend when tried to deliver new emails with that attachment. Here is strace of dsync: 6740 link("/nfsmnt/mailatch1/f9/10/hashes/f9108ddaa156ac15738e41ed3bedec1eda50175d", "/nfsmnt/mailatch1/f9/10/f9108ddaa156ac15738e41ed3bedec1eda50175d-7bb7a20ddb598853541a000028db4a9f") = -1 EMLINK (Too many links) 6740 --- SIGSEGV (Segmentation fault) @ 0 (0) --- ls -lh: -rw------- 100000 vmail vmail 4.7K Apr 28 16:54 /nfsmnt/mailatch1/f9/10/hashes/f9108ddaa156ac15738e41ed3bedec1eda50175d We were using mail_attachment_min_size=4kb, we solve it by increasing it to 8kb. It would be nice to somehow fix this problem. Like not crash when EMLINK happend and maybe do not deduplicate attachments but deliver email without dedup. Or create second file in hashes/ and start hardlinking it instead of original. AFAIK ext4 has also hard-link limit 64k (http://en.wikipedia.org/wiki/Hard_link#Limitations_of_hard_links) So this can happen to anyone with lots of emails. Thanks -- [ Ohodnotte kvalitu mailu: http://nicereply.com/websupport/Stano/ ] Pavel Stano | Troubleshooter http://WebSupport.sk *** BERTE A VYCHUTNAVAJTE ***

1 1

[Dovecot] Plugin mail-filter tangles
by Stanislas SABATIER 05 Jun '14

05 Jun '14

System installed : Dovecot 2.2.12 as IMAP server and Postfix as MTA. Dovecot and Postfix connected via LMTP + Dovecot mail plugin 'mail-filter' to encrypt/decrypt emails on the fly with public/private users' RSA keys. Case study : You have 3 (virtuals) users belonging to 3 different domains, all managed by your Dovecot server. One of these users is connected to Dovecot with MUA Thunderbird, and he's writing an email to someone outside of yours domains, but he puts the two others users' email addresses in CC : mail from user1(a)domain1.dovecot --> to: someone@outside, CC: user2(a)domain2.dovecot, user3(a)domaine3.dovecot What happens (as far as I can understand) : The email is submitted to Postfix : one copy is delivered outside, the other is passed to Dovecot via LMTP for user2 & user3 @dovecot Dovecot is handling the final delivery, through mail-filter plugin as follow : 1. both users contexts are created from user_db queries 2. mail-filter plugin is init for user2 3. /mail_user_created/ for user2 4. mai-filter plugin arguments are parsed for user2 5. â¦/mail_allocated/ then /mail_save_begin/ for user2 (at this stage, the email is encrypted with users2 params) 6. Dovecot tells to LMTP that mail for user2 is delivered 7. then, â we are still in user2 context â, an other /mail_allocated/ is run, followed by a /istream_opened/ 8. mail user context is swithed to user3 --> /mail_user_created/ --> plugin's args parsed --> â¦ /mail_allocated/ 9. andâ¦ Dovecot tells to LMTP that mail for user3 is delivered So, it appears that Dovecot is re-using user2's email to pass it to user3 by opening an istream in user2's context. In my configuration, Dovecot can't do that because it has not the user2's private rsa key to reopen the email it has just encrypted, so it passes the email to user3 with user2 encryption params. Final result : user3 is receiving the email encrypted with user2's rsa key ! Problem : how to force Dovecot to deinit then reinit mail-filter plugin for each user to be sure that each email is encrypted with the right key before it is saved to users' mailboxes ? Thank you in advance for your help. Stan.

5 16