March 2015 - dovecot - dovecot.org

Dovecot Oy merger with Open-Xchange AG
by Timo Sirainen 03 Apr '15

03 Apr '15

Hi all, Today I can finally announce that Dovecot Oy company has merged with Open-Xchange AG. This helps us to get more Dovecot developers, support people and so on. Most importantly, eventually it should allow me to get back to doing what I like the most: Designing new and interesting stuff for Dovecot and perfecting the old stuff :) OX is a great match to Dovecot going forward. They also really like open source and share our plans for the future. Nothing big will change as a result of this merger: Dovecot will stay Dovecot with its own name and release schedules. We're not going to force OX and Dovecot to be the same product, other than having a somewhat deeper integration between them. Here are the press release links about it: http://www.dovecot.fi/open-xchange-and-dovecot-announce-merger-to-create-wo… http://www.open-xchange.com/dovecot http://www.open-xchange.com/announcements/18

16 32

Install process breaks its self by design
by Merlin at Desktop Masters 02 Apr '15

02 Apr '15

Greetings, I just tried to install Dovecot for the first time. It was on a virgin Ubuntu/Debian server (Version: 1:2.2.9-1ubuntu5) and the install failed. After a bit of struggling I worked out that the install fails BY DESIGN. Spoke about this with a few people and we decided it was best to report this issue and request that you redesign the packing so it does not fail. The reason it fails is as follows... When you install it asks you if you want to use self signed certificates. I have certificates so I said, "No". At the end of the install the script tries to start dovecot. It cannot because the service does not have certificates so it fails. This causes the script to abort and the other packages not to install and breaks the install process. I had to purge dovecot, then install it with the self signed certificates. So we have 2 issues here. 1. Why allow people to not install certificates if it is just going to break the install and confuse them. 2. Why are you starting the service right after install when dovecot clearly requires manual configuration as part of the setup. I recommend you resolve this by NOT starting the service as part of the install unless it is an upgrade and the service was already running. ~ Merlin

2 1

multiple imap servers for high availability
by Robert Fantini 31 Mar '15

31 Mar '15

Hello, We run imap for our domain at our lan. I'd like to set up a backup mirror that has imap storage always duplicated. Then using something like heartbeat to share the imapd IP address . Could someone point me to documents , if any , that give ideas on how to set up the mirror? best regards, Rob

2 2

Migrating from Cyrus to Dovecot
by Miloslav Hůla 31 Mar '15

31 Mar '15

Hi, we are migrating from Cyrus 2.3.7 to Dovecot 2.2.13. We have ~7000 maildirs with ~500GB. Our goal is to do the migration without users have notice and with the shortest service downtime. The users use IMAP (with shared folders and ACL), POP3 and sieve filters. As a first choice, we tried the Dovecot's dsync tool. First tests were great, but we are not able to change the Cyrus auth backend for migration. Moreover, this migration seems too slow for us. As a second try, we tried the cyrus2dovecot migrating Perl scripts (and their derivates) from Wiki2. More or less they works but we found we need more control during the migration. So, as a third try, we wrote own migrating scripts. And thanks to the cyrus2dovecot it wasn't too much complicated. And there are my questions: A) Files and dirs timestamps The mtime of email file is important as an internal date as I found on Wiki2. But what about timestamps of cur/new/tmp directories or Dovecot's internal files line dovecot-uidlist? Do they play some role here? B) The 128 bit mailbox UID The Wiki2 speaks about 128 bit mailbox UID at first line of dovecot-uidlist. Cyrus preserves only 64 bit UID. Is this mailbox UID required by Dovecot? If so, can we use 0000000000000000501100008c4a11c1 (Cyrus UID padded by zeros)? C) Format of dovecot-uidlist records Wiki2 shows two examples: 25006 :1276528487.M364837P9451.kurkku,S=1355,W=1394:2, 25017 W2481 :1276533073.M242911P3632.kurkku:2,F Which format is preferred? Or what the benefits are? D) Converting between CRLF and LF If I understand correctly, Dovecot stores emails with LF only. We have all emails with CRLF now on Cyrus and converting them to LF only is a little more time consuming. Is there any benefit to do that? Or can we live with 'mail_save_crlf' without problems? E) POP3 backend I found many informations about IMAP internals but few on POP3 internals. What do I need to do POP3 migration transparent for user? Many thanks for any answers. Regards, Milo

2 2

quota setup assistance (postfix+dovecot+mysql)
by rooster 30 Mar '15

30 Mar '15

Hello list, I have been struggling with establishing a working installation of dovecot with mySQL quota support. I have not been able to find a guide or tutorial that works for the current revisions of software I have at my disposal. Most notably, the error I see in the mail log is as follows : Mar 23 00:55:31 host dovecot: lmtp(328): Debug: Module loaded: /usr/lib/dovecot/modules/lib10_quota_plugin.so Mar 23 00:55:31 host dovecot: lmtp(328): Error: dlopen(/usr/lib/dovecot/modules/lib11_imap_quota_plugin.so) failed: /usr/lib/dovecot/modules/lib11_imap_quota_plugin.so: undefined symbol: command_unregister Mar 23 00:55:31 host dovecot: lmtp(328): Fatal: Couldn't load required plugins I have attached my dovecot -n output. The installed revision of dovecot is 2.2.9 on ubuntu 14.04.02 LTS. Thank you in advance. --

4 21

sieve rule for "header don't exist"
by Reindl Harald 30 Mar '15

30 Mar '15

is there a way to expresse when the header "X-Spam-Status" *do not* exist move the message to a different folder? :contains, :matches and :is are not helpful here background: the spamass-milter option -B is lacking the spamassassin headers in case of milter-rejects and via sendmail generated BCC while flagged messages contain the headers - so it would be nice to move the rejected ones to a subfolder "REJECTED" instead into the inbox

2 2

Problem connecting to an imap account with Dovecot
by Laurent Rathle 28 Mar '15

28 Mar '15

Hello, I have several accounts on my server. I can’t connect to one of them using Apple mail on Mac or IOS to create my account or read my mail in these applications. I can send mails to this address and read them with my Horde webmail. I have these messages in the log : Mar 28 12:21:49 sd-41648 dovecot: imap-login: Login: user=<laurent(a)xxxxxx.fr>, method=PLAIN, rip=::1, lip=::1, mpid=13705, TLS, session=<vKWGdFcSXAAAAAAAAAAAAAAAAAAAAAAB> Mar 28 12:21:50 sd-41648 dovecot: service=imap, user=laurent(a)xxxxxx.fr, ip=[::1]. Disconnected: Logged out rcvd=26, sent=435 Mar 28 12:21:50 sd-41648 dovecot: imap-login: Login: user=<laurent(a)xxxxxx.fr>, method=PLAIN, rip=::1, lip=::1, mpid=13707, TLS, session=<Sw2LdFcSXgAAAAAAAAAAAAAAAAAAAAAB> Mar 28 12:21:51 sd-41648 dovecot: service=imap, user=laurent(a)xxxxxx.fr, ip=[::1]. Disconnected: Logged out rcvd=89, sent=1447 Mar 28 12:21:21 sd-41648 postfix/master[31571]: message repeated 4 times: [ warning: master_wakeup_timer_event: service pickup(public/pickup): Connection refused] Mar 28 12:21:52 sd-41648 postfix/master[31571]: warning: master_wakeup_timer_event: service qmgr(public/qmgr): Connection refused Mar 28 12:21:53 sd-41648 dovecot: imap-login: Login: user=<laurent(a)xxxxxx.fr>, method=PLAIN, rip=::1, lip=::1, mpid=13709, TLS, session=<cDPCdFcScwAAAAAAAAAAAAAAAAAAAAAB> Mar 28 12:21:54 sd-41648 dovecot: service=imap, user=laurent(a)xxxxxx.fr, ip=[::1]. Disconnected: Logged out rcvd=44, sent=457 Mar 28 12:21:54 sd-41648 dovecot: imap-login: Login: user=<laurent(a)xxxxxx.fr>, method=PLAIN, rip=::1, lip=::1, mpid=13711, TLS, session=<9vDSdFcSnQAAAAAAAAAAAAAAAAAAAAAB> Mar 28 12:21:56 sd-41648 dovecot: service=imap, user=laurent(a)xxxxxx.fr, ip=[::1]. Disconnected: Logged out rcvd=860, sent=132669 Mar 28 12:21:57 sd-41648 dovecot: imap-login: Login: user=<laurent(a)xxxxxx.fr>, method=PLAIN, rip=::1, lip=::1, mpid=13713, TLS, session=<1pvxdFcSpwAAAAAAAAAAAAAAAAAAAAAB> Mar 28 12:21:58 sd-41648 dovecot: service=imap, user=laurent(a)xxxxxx.fr, ip=[::1]. Disconnected: Logged out rcvd=1266, sent=108893 Mar 28 12:22:12 sd-41648 dovecot: imap-login: Login: user=<laurent(a)xxxxxx.fr>, method=PLAIN, rip=::1, lip=::1, mpid=13720, TLS, session=<XCXadVcStwAAAAAAAAAAAAAAAAAAAAAB> Mar 28 12:22:20 sd-41648 dovecot: service=imap, user=laurent(a)xxxxxx.fr, ip=[::1]. Disconnected: Logged out rcvd=309, sent=11066 Mar 28 12:22:21 sd-41648 postfix/master[31571]: warning: master_wakeup_timer_event: service pickup(public/pickup): Connection refused Mar 28 12:22:23 sd-41648 dovecot: imap-login: Login: user=<laurent(a)xxxxxx.fr>, method=PLAIN, rip=::1, lip=::1, mpid=13724, TLS, session=<QAiBdlcSwgAAAAAAAAAAAAAAAAAAAAAB> Mar 28 12:22:23 sd-41648 dovecot: service=imap, user=laurent(a)xxxxxx.fr, ip=[::1]. Disconnected: Logged out rcvd=214, sent=3159 I have : Plesk 12 Ubuntu 14.04.2 Dovecot 2.2.12 You can see my configuration file here : http://pastie.org/10059309 What should I do ? Thank you

2 2

Error after setting up fts /solr for Open-Xchange
by zucca＠systemschmiede.com 28 Mar '15

28 Mar '15

Hi List, i have tried to get fts / solr running with virtual all folder with Open-Xchange. I followed a pretty well written howto from Open-Xchanges Intranet, and i first thought everything was running smooth, as the first one or two searches were successful. However now whenever i try to search again for something in the virtual "all folders" Open-Xchange tells me: *Error* *Folder "virtual.all" has been closed on mail server xxx.xxx.xxx.xxx Probably your request took too long.** * /var/log/mail.err says: Mar 22 18:54:24 mailserver dovecot: imap(zucca(a)foo.bar): Panic: file fts-search-serialize.c: line 63 (fts_search_deserialize_add_idx): assertion failed: (*idx < buf->used) Mar 22 18:54:24 mailserver dovecot: imap(zucca(a)foo.bar): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x6c15f) [0x7f5110f5e15f] -> /usr/lib/dovecot/libdovecot.so.0(+0x6c1be) [0x7f5110f5e1be] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7f5110f1740e] -> /usr/lib/dovecot/modules/lib20_fts_plugin.so(+0xc847) [0x7f510fb07847] -> /usr/lib/dovecot/modules/lib20_fts_plugin.so(fts_search_deserialize_add_nonmatches+0x1c) [0x7f510fb0799c] -> /usr/lib/dovecot/modules/lib20_fts_plugin.so(+0xd263) [0x7f510fb08263] -> /usr/lib/dovecot/modules/lib20_fts_plugin.so(+0xd3e6) [0x7f510fb083e6] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0xa812e) [0x7f511127112e] -> /usr/lib/dovecot/libdovecot-storage.so.0(index_storage_search_next_nonblock+0x4b) [0x7f51112717bb] -> /usr/lib/dovecot/modules/lib20_virtual_plugin.so(virtual_search_next_nonblock+0x13e) [0x7f510f8f2a7e] -> /usr/lib/dovecot/modules/lib20_virtual_plugin.so(virtual_search_next_nonblock+0x7e) [0x7f510f8f29be] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_search_next_nonblock+0x27) [0x7f511124b277] -> dovecot/imap(+0x1f27f) [0x7f511172527f] -> dovecot/imap(imap_search_start+0xfd) [0x7f51117256fd] -> dovecot/imap(cmd_sort+0x205) [0x7f511171b6c5] -> dovecot/imap(command_exec+0x3c) [0x7f511171fc4c] -> dovecot/imap(+0x18c30) [0x7f511171ec30] -> dovecot/imap(+0x18cea) [0x7f511171ecea] -> dovecot/imap(client_handle_input+0x115) [0x7f511171efb5] -> dovecot/imap(client_input+0x75) [0x7f511171f385] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x4e) [0x7f5110f6efbe] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0xd7) [0x7f5110f6ffb7] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0x9) [0x7f5110f6f049] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x38) [0x7f5110f6f0c8] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f5110f1c7b3] -> dovecot/imap(main+0x2ae) [0x7f511171352e] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xfd) [0x7f5110b85ead] -> dovecot/imap(+0xd69d) [0x7f511171369d] Mar 22 18:54:24 mailserver dovecot: imap(zucca(a)foo.bar): Fatal: master: service(imap): child 6594 killed with signal 6 (core dumps disabled) Mar 22 18:54:24 mailserver dovecot: imap(zucca(a)foo.bar): Panic: file fts-search-serialize.c: line 63 (fts_search_deserialize_add_idx): assertion failed: (*idx < buf->used) Mar 22 18:54:24 mailserver dovecot: imap(zucca(a)foo.bar): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x6c15f) [0x7fae1c14c15f] -> /usr/lib/dovecot/libdovecot.so.0(+0x6c1be) [0x7fae1c14c1be] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7fae1c10540e] -> /usr/lib/dovecot/modules/lib20_fts_plugin.so(+0xc847) [0x7fae1acf5847] -> /usr/lib/dovecot/modules/lib20_fts_plugin.so(fts_search_deserialize_add_nonmatches+0x1c) [0x7fae1acf599c] -> /usr/lib/dovecot/modules/lib20_fts_plugin.so(+0xd263) [0x7fae1acf6263] -> /usr/lib/dovecot/modules/lib20_fts_plugin.so(+0xd3e6) [0x7fae1acf63e6] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0xa812e) [0x7fae1c45f12e] -> /usr/lib/dovecot/libdovecot-storage.so.0(index_storage_search_next_nonblock+0x4b) [0x7fae1c45f7bb] -> /usr/lib/dovecot/modules/lib20_virtual_plugin.so(virtual_search_next_nonblock+0x13e) [0x7fae1aae0a7e] -> /usr/lib/dovecot/modules/lib20_virtual_plugin.so(virtual_search_next_nonblock+0x7e) [0x7fae1aae09be] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_search_next_nonblock+0x27) [0x7fae1c439277] -> dovecot/imap(+0x1f27f) [0x7fae1c91327f] -> dovecot/imap(imap_search_start+0xfd) [0x7fae1c9136fd] -> dovecot/imap(cmd_sort+0x205) [0x7fae1c9096c5] -> dovecot/imap(command_exec+0x3c) [0x7fae1c90dc4c] -> dovecot/imap(+0x18c30) [0x7fae1c90cc30] -> dovecot/imap(+0x18cea) [0x7fae1c90ccea] -> dovecot/imap(client_handle_input+0x115) [0x7fae1c90cfb5] -> dovecot/imap(client_input+0x75) [0x7fae1c90d385] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x4e) [0x7fae1c15cfbe] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0xd7) [0x7fae1c15dfb7] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0x9) [0x7fae1c15d049] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x38) [0x7fae1c15d0c8] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7fae1c10a7b3] -> dovecot/imap(main+0x2ae) [0x7fae1c90152e] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xfd) [0x7fae1bd73ead] -> dovecot/imap(+0xd69d) [0x7fae1c90169d] Mar 22 18:54:24 mailserver dovecot: imap(zucca(a)foo.bar): Fatal: master: service(imap): child 6598 killed with signal 6 (core dumps disabled) I don't even have any fts-search-serialize.c on the system... Maybe someone is able to help me? I know we're nearly there, but i can't find anything on this anywhere. If there's anything else you need to know in order to help, please let me know. Thank you very very much! Sascha _this is set under /opt/open-xchange/etc/findbasic.properties for Open-Xchange__:_ com.openexchange.find.basic.mail.allMessagesFolder = virtual.all _grep -v '^ *$#.*$\?$' /etc/dovecot/dovecot-sql.conf:_ driver = mysql connect = host=localhost dbname=dbispconfig user=ispconfig password=e04a9349a47706e4f18bee2782349355 default_pass_scheme = CRYPT password_query = SELECT password FROM mail_user WHERE (login = '%u' OR email = '%u') AND disable%Ls = 'n' user_query = SELECT email as user, maildir as home, CONCAT('maildir:', maildir, '/Maildir') as mail, uid, gid, CONCAT('*:storage=', quota, 'B') AS quota_rule, CONCAT(maildir, '/.sieve') as sieve FROM mail_user WHERE (login = '%u' OR email = '%u') AND `disable%Ls` = 'n' _||dovecot --version: _2.2.13 _dovecot -n: _# 2.2.13: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-37-pve x86_64 Debian 7.8 simfs auth_mechanisms = plain login disable_plaintext_auth = no listen = *,[::] log_timestamp = "%Y-%m-%d %H:%M:%S " mail_location = maildir:/var/vmail/%d/%n/Maildir mail_max_userip_connections = 150 mail_plugins = " acl fts fts_solr virtual" mail_privileged_group = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace { inbox = yes location = prefix = separator = . type = private } namespace { list = children location = maildir:/var/vmail/%%d/%%n/Maildir:INDEX=/var/vmail/%d/%n/Maildir/shared/%%u prefix = Shared/.%%n/. separator = . subscriptions = no type = shared } namespace virtual { location = virtual:/etc/dovecot/virtual:INDEX=~/virtual mailbox all { special_use = \All } prefix = virtual. separator = . } passdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } plugin { acl = vfile acl_shared_dict = file:/var/vmail/shared-mailboxes.db fts = solr fts_autoindex = yes fts_solr = url=http://localhost:8090/solr/ quota = dict:user::file:/var/vmail/%d/%n/.quotausage sieve = /var/vmail/%d/%n/.sieve } protocols = imap pop3 sieve service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = vmail mode = 0600 user = vmail } user = root } service imap-login { client_limit = 1000 process_limit = 500 } ssl_ca = </usr/local/ispconfig/interface/ssl/mail_mailserver_de.ca-bundle ssl_cert = </etc/postfix/smtpd.cert ssl_key = </etc/postfix/smtpd.key ssl_protocols = !SSLv2 !SSLv3 userdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } protocol imap { mail_plugins = " acl fts fts_solr virtual imap_acl quota imap_quota" } protocol pop3 { mail_plugins = quota virtual pop3_uidl_format = %08Xu%08Xv } protocol lda { mail_plugins = sieve quota virtual }

4 8

v2.2.16 released
by Timo Sirainen 28 Mar '15

28 Mar '15

http://dovecot.org/releases/2.2/dovecot-2.2.16.tar.gz http://dovecot.org/releases/2.2/dovecot-2.2.16.tar.gz.sig A few fixes and some imapc improvements since the release candidate. * dbox: Resyncing (e.g. doveadm force-resync) no longer deletes dovecot.index.cache file. The cache file was rarely the problem so this just caused unnecessary slowness. * Mailbox name limits changed during mailbox creation: Each part of a hierarchical name (e.g. "x" or "y" in "x/y") can now be up to 255 chars long (instead of 200). This also reduces the max number of hierarchical levels to 16 (instead of 20) to keep the maximum name length 4096 (a common PATH_MAX limit). The 255 char limit is hopefully large enough for migrations from all existing systems. It's also the limit on many filesystems. + director: Added director_consistent_hashing setting to enable consistent hashing (instead of the mostly-random MD5 hashing). This causes fewer user moves between backends when backend counts are changed, which may improve performance (mainly due to caching). + director: Added support for "tags", which allows one director ring to serve multiple backend clusters with different sets of users. + LMTP server: Added lmtp_user_concurrency_limit setting to limit how many LMTP deliveries can be done concurrently for a single user. + LMTP server: Added support for STARTTLS command. + If logging data is generated faster than it can be written, log a warning about it and show information about it in log process's process title in ps output. Also don't allow a single service to flood too long at the cost of delaying other services' logging. + stats: Added support for getting global statistics. + stats: Use the same session IDs as the rest of Dovecot. + stats: Plugins can now create their own statistics fields + doveadm server: Non-mail related commands can now also be used via doveadm server (TCP socket). + doveadm proxying: passdb lookup can now override doveadm_port and change the username. + doveadm: Search query supports now "oldestonly" parameter to stop immediately on the first non-match. This can be used to optimize: doveadm expunge mailbox Trash savedbefore 30d oldestonly + doveadm: Added "save" command to directly save mails to specified mailbox (bypassing Sieve). + doveadm fetch: Added body.snippet field, which returns the first 100 chars of a message without whitespace or HTML tags. The result is stored into dovecot.index.cache, so it can be fetched efficiently. + dsync: Added -t <timestamp> parameter to sync only mails newer than the given received-timestamp. + dsync: Added -F [-]<flag> parameter to sync only mails with[out] the given flag/keyword. + dsync: Added -a <mailbox> parameter to specify the virtual mailbox containing user's all mails. If this mailbox is already found to contain the wanted mail (by its GUID), the message is copied from there instead of being re-saved. (This isn't efficient enough yet for incremental replication.) + dsync: -m parameter can now specify \Special-use names for mailboxes. + imapc: Added imapc_features=gmail-migration to help migrations from GMail. See http://wiki2.dovecot.org/Migration/Gmail + imapc: Added imapc_features=search to support IMAP SEARCH command. (Currently requires ESEARCH support from remote server.) + expire plugin: Added expire_cache=yes setting to cache most of the database lookups in dovecot index files. + quota: If overquota-flag in userdb doesn't match the current quota usage, execute a configured script. + redis dict: Added support for expiring keys (:expire_secs=n) and specifying the database number (:db=n) - auth: Don't crash if master user login is attempted without any configured master=yes passdbs - Parsing UTF-8 text for mails could have caused broken results sometimes if buffering was split in the middle of a UTF-8 character. This affected at least searching messages. - String sanitization for some logged output wasn't done properly: UTF-8 text could have been truncated wrongly or the truncation may not have happened at all. - fts-lucene: Lookups from virtual mailbox consisting of over 32 physical mailboxes could have caused crashes.

4 7

postfix sasl -> haproxy -> dovecot auth
by Edgaras Lukoševičius 28 Mar '15

28 Mar '15

Hello, is it possible to configure configure haproxy to work with postfix sasl and dovecot auth like this: clients -> 25:postfix -> 20025:haproxy -> 20025:auth-backend-1, 20025:auth-backend-2 The configuration I have now gives me this error randomly: 535 5.7.8 Error: authentication failed: Connection lost to authentication server This is probably because haproxy change servers while session is still active (postfix sasl don’t establish new connection to auth service every time new auth request arrives) Note that haproxy is between postfix and dovecot and is not facing clients directly, so there is no way to keep persistent connections by client ip. # POSTFIX smtpd_sasl_auth_enable = yes smtpd_sasl_authenticated_header = yes smtpd_sasl_exceptions_networks = smtpd_sasl_local_domain = smtpd_sasl_path = inet:127.0.0.1:20025 smtpd_sasl_security_options = noanonymous smtpd_sasl_tls_security_options = $smtpd_sasl_security_options smtpd_sasl_type = dovecot # HAPROX frontend postfix-sasl bind 127.0.0.1:20025 default_backend dovecot-auth backend dovecot-auth mode tcp option tcplog option srvtcpka hash-type consistent balance roundrobin server mail-backend-1 31.220.19.52:20025 check server mail-backend-2 31.220.19.53:20025 check

6 18