February 2019 - dovecot

Removing a mailbox from a dovecot cluster
by Francis 26 Feb '19

26 Feb '19

Hello, How should I remove a mailbox from a dovecot cluster? I have two dovecot in a cluster. I tried to remove one user's mailbox with theses commands I found with a little google search: doveadm flags add -u user(a)domain.tld "\\Deleted" ALL doveadm expunge -u user(a)domain.tld mailbox "*" DELETED doveadm purge -u user(a)domain.tld rm -fr /var/vmail/domains/domain.tld/user If I do theses commands in a script (so one command after one, very quick), the data just keep coming back from the other server in the cluster (I suppose this is what's happening). If I do theses commands manually, so more slowly, the mailbox is created again but empty this time. If I connect from an IMAP client, I see an empty mailbox. Same thing if I connect an IMAP client to the second server from the cluster. But I still see the data in the storage (mdbox) of the second server (the "m.#" files are still there an they waste space on disks). I tried to do a "doveadm purge" on the second server, but it did nothing more, the data is still keep on the disks. I'm running dovecot 2.2.33.2 on ubuntu 18.04 on both servers. Thanks! -- Francis

1 1

Virus scan + removal on a mdbox mail storage
by Christoph Haas 26 Feb '19

26 Feb '19

Hi, I need advice on how virus scan and removal can be done on a _mdbox_ mail storage? On a maildir storage the virus scanner (e.g. clamav etc.) can detect and remove a email that is infected, since every email and attachment are stored in separate files. But in mdbox the emails and attachments are compressed together in one ore more mdbox-files ... I am anxious to convert my mail storage for virus scanning into maildir format, since I don't know if a virus or crypto trojan con be activated with this converting action =:-o Cheers Christoph. -- Christoph Haas

3 6

Linking mailboxes
by Kunal A. 25 Feb '19

25 Feb '19

Hi, I am new to Dovecot and I am trying to link an email account folder to another Maildir(its a backup of the older email). I want the email account to be able to access the older emails. I am assuming this is done by creating a symlink? Currently reading instructions on this page:- https://wiki.dovecot.org/SharedMailboxes/Symlinks At the moment I have the folder:- /var/mail/vhosts/example.com/email1/Maildir/.INBOX.newfolder Inside the folder:- drwx------. 2 vmail vmail 4096 Feb 23 13:39 cur -rw-------. 1 vmail vmail 232 Feb 23 13:43 dovecot.index.log -rw-------. 1 vmail vmail 51 Feb 23 13:43 dovecot-uidlist -rw-------. 1 vmail vmail 0 Feb 23 13:39 maildirfolder drwx------. 2 vmail vmail 4096 Feb 23 13:39 new lrwxrwxrwx. 1 root root 45 Feb 23 13:46 Other -> /run/media/computer/Storage/Email/mail/Other drwx------. 2 vmail vmail 4096 Feb 23 13:39 tmp lrwxrwxrwx. 1 root root 5 Feb 23 13:46 Users -> Users I am not able to access the folders in the Other folder structure(inside other there are other email inboxes ie(email1@example.com,email2@example.com,etc.). I want to get access to all the email subfolders. Could someone here advise how to do this or point me to some tutorials for this. Sincere apologies for this and many thanks in advance for helping... Dovecot -n output :- # 2.3.3 (dcead646b): /etc/dovecot/dovecot.conf # OS: Linux 4.20.10-200.fc29.x86_64 x86_64 Fedora release 29 (Twenty Nine) # Hostname: computer auth_mechanisms = plain login mail_location = maildir:~/Maildir mail_privileged_group = mail mbox_write_locks = fcntl namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } postmaster_address = postmaster at example.com protocols = imap pop3 service auth-worker { user = vmail } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-userdb { mode = 0600 user = vmail } user = dovecot } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } service pop3-login { inet_listener pop3 { port = 0 } inet_listener pop3s { port = 995 ssl = yes } } ssl = required ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_cipher_list = PROFILE=SYSTEM ssl_key = # hidden, use -P to show it userdb { driver = passwd } userdb { args = uid=vmail gid=vmail home=/var/mail/vhosts/%d/%n driver = static }

3 12

Corrupted transaction log and redownloading
by azurit＠pobox.sk 25 Feb '19

25 Feb '19

Hi, today we had to hard-reboot one of our dovecot proxy backends and after boot up, lot's of accounts were showing this error and appeard empty: Error: Corrupted transaction log file ... After deleting the indexes (not uid file, problem wasn't in deleting indexes, i'm doing this often), e-mails showed up ok but e-mail clinets started to download them again. Why this happened and how to prevent it (other than 'not hard-rebooting')? I know that reboot could cause corruption of uid files in some cases but this time it looks like this was caused by corrupted indexes - how index corruption can cause redownloading and why? Thanks for any info. azur

2 1

Probleme with replication and shared mailbox
by Laurent BRAULT (OSILOG) 25 Feb '19

25 Feb '19

Dear Dovecot Users/Admins/Mailing-List First of all I would give a big thanks for your great work ! I may need your help to find out what’s going on with my replication and shared mailbox problem. I setup a full active/active servers with : * Postfix * Dovecot * MariaDB (automaticaly balanced/failover between the 2 host within DRBD and Heartbeat) * SpamAssassin * Clamav * Sieve * Webmail * IMAP Over SSL and SMTP Over TLS * Fail2ban ################################################################################################## <dovecot –version> ################################################################################################## 2.2.27 (c0f36b0) ==> DEBIAN 9 Stretch (no back ports) ################################################################################################## Everythink works fine until I activate a share on a mailbox. I run the following command to share the full mailbox « websentinel » to « lbrault » (because of « acl_defaults_from_inbox = yes » set in conf) : ==> doveadm acl set -u websentinel(a)example.fr INBOX user=lbrault(a)example.fr admin create delete expunge insert lookup post read write write-deleted write-seen Just after activation of share and connect through webmail client (Horde in this case but tried Roundcube also) I get this kind of error messages on logs : ################################################################################################## Feb 25 15:59:50 mx01 dovecot: imap(lbrault(a)example.fr): Error: /mnt/mail/vmail/example.fr/lbrault/shared/websentinel(a)example.fr/.INBOX/dovecot.index.pvt reset, view is now inconsistent Feb 25 15:59:50 mx01 dovecot: imap(lbrault(a)example.fr): Error: /mnt/mail/vmail/example.fr/lbrault/shared/websentinel(a)example.fr/.INBOX/dovecot.index.pvt view is inconsistent Feb 25 15:59:50 mx01 dovecot: imap(lbrault(a)example.fr): Error: /mnt/mail/vmail/example.fr/lbrault/shared/websentinel(a)example.fr/.INBOX/dovecot.index.pvt view is inconsistent Feb 25 15:59:50 mx01 dovecot: imap(lbrault(a)example.fr): BUG: Unknown internal error in=293 out=119712 ################################################################################################## In parallele to this error some new folders are created on the mailboxes root with name containing « nonexistent mailbox… » : ################################################################################################## 16:00:37 root@mx01 /mnt/mail/vmail # lla total 48 drwxr-xr-x 12 vmail vmail 4096 févr. 25 16:00 . drwxr-xr-x 3 root root 4096 févr. 11 12:13 .. drwx------ 2 vmail vmail 4096 févr. 25 16:00 (nonexistent mailbox with GUID=47376e22c8876e5cff5b000036d82855) drwx------ 2 vmail vmail 4096 févr. 25 16:00 (nonexistent mailbox with GUID=48376e22c8876e5cff5b000036d82855) drwx------ 2 vmail vmail 4096 févr. 25 16:00 (nonexistent mailbox with GUID=49376e22c8876e5cff5b000036d82855) drwx------ 2 vmail vmail 4096 févr. 25 16:00 (nonexistent mailbox with GUID=5c72c71b3f896e5c615c000036d82855) drwx------ 2 vmail vmail 4096 févr. 25 16:00 (nonexistent mailbox with GUID=809fff0046896e5c665c000036d82855) drwx------ 2 vmail vmail 4096 févr. 25 16:00 (nonexistent mailbox with GUID=a1895d0c36866e5c865b000036d82855) drwx------ 2 vmail vmail 4096 févr. 25 16:00 (nonexistent mailbox with GUID=c14aaa38d1846e5c285b000036d82855) drwx------ 2 vmail vmail 4096 févr. 25 16:00 (nonexistent mailbox with GUID=ed909808b1846e5c523b01006b8a5dcb) drwx------ 2 vmail vmail 4096 févr. 25 16:00 (nonexistent mailbox with GUID=fa9d41114b896e5c6b5c000036d82855) drwx------ 4 vmail vmail 4096 févr. 21 11:57 example.fr ################################################################################################## When I look at the GUID it seems this GUID are linked to the folder into the shared mailbox (websentinel) I tried to change dsync params with the following command into 10-master.conf to exclude the shared folder from replication but it seems having no effect with the TCP replication : ==> replication_dsync_parameters = -d -N -l 30 -U -x shared Here is my dovecot -n report : ################################################################################################## <dovecot -n> : ################################################################################################## # 2.2.27 (c0f36b0): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.16 (fed8554) # OS: Linux 4.9.0-8-amd64 x86_64 Debian 9.7 ext4 auth_debug = yes auth_debug_passwords = yes auth_mechanisms = plain login auth_verbose = yes auth_verbose_passwords = yes doveadm_password = # hidden, use -P to show it doveadm_port = 12345 mail_attribute_dict = file:/mnt/mail/vmail/%d/%n/dovecot-attributes mail_debug = yes mail_location = maildir:/mnt/mail/vmail/%d/%n mail_plugins = " quota notify replication acl" mail_privileged_group = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext editheader vnd.dovecot.pipe vnd.dovecot.filter vnd.dovecot.execute namespace { list = children location = maildir:/mnt/mail/vmail/%%d/%%n:INDEXPVT=/mnt/mail/vmail/%d/%n/shared/%%u prefix = shared/%%u/ separator = / subscriptions = no type = shared } namespace inbox { inbox = yes location = mailbox Archive { auto = subscribe special_use = \Archive } mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = separator = / type = private } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { acl = vfile acl_defaults_from_inbox = yes acl_shared_dict = file:/var/lib/dovecot/db/shared-mailboxes.db mail_replica = tcp:mx02.example.fr quota = maildir:User quota quota_grace = 10%% quota_rule = *:storage=1G quota_rule2 = Trash:storage=+100M quota_rule3 = Junk:ignore quota_status_overquota = 552 5.2.2 Mailbox is full sieve = /mnt/mail/vmail/%d/%n/.dovecot.sieve sieve_after = /etc/dovecot/sieve/spamfilter.sieve sieve_dir = /mnt/mail/vmail/%d/%n/sieve sieve_execute_bin_dir = /usr/lib/dovecot/sieve-execute sieve_extensions = +editheader +vnd.dovecot.pipe +vnd.dovecot.filter +vnd.dovecot.execute sieve_filter_bin_dir = /usr/lib/dovecot/sieve-filter sieve_pipe_bin_dir = /usr/lib/dovecot/sieve-pipe sieve_plugins = sieve_extprograms } protocols = " imap lmtp sieve" replication_dsync_parameters = -d -N -l 30 -U -x shared replication_max_conns = 50 service aggregator { fifo_listener replication-notify-fifo { mode = 0666 user = vmail } unix_listener replication-notify { mode = 0666 user = vmail } } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-userdb { group = vmail mode = 0666 user = vmail } } service doveadm { inet_listener { port = 12345 } user = vmail } service imap-login { inet_listener imaps { port = 993 ssl = yes } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } service replicator { process_min_avail = 1 unix_listener replicator-doveadm { mode = 0666 } } ssl = required ssl_cert = </etc/letsencrypt/live/mx01.example.fr/fullchain.pem ssl_key = # hidden, use -P to show it userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } verbose_ssl = yes protocol lmtp { mail_plugins = " quota notify replication acl sieve" postmaster_address = lbrault(a)example.fr } protocol lda { mail_plugins = " quota notify replication acl sieve" } protocol imap { imap_metadata = yes mail_plugins = " quota notify replication acl imap_quota imap_acl" } ################################################################################################## ################################################################################################## <dovecot-sql.conf.ext> : ################################################################################################## driver = mysql connect = host=192.168.1.512 dbname=postfix user=mailman password=MySuperPassword default_pass_scheme = SHA512-CRYPT password_query = \ SELECT email as username, pwd AS password, \ concat('*:bytes=', quota_limit_bytes) AS userdb_quota_rule \ FROM addresses WHERE email = '%u' AND active = 1 user_query = \ SELECT 5000 AS uid, 5000 as gid, email, \ '/mnt/mail/vmail/%d/%n' AS home, \ concat('*:bytes=', quota_limit_bytes) AS quota_rule \ FROM addresses WHERE email = '%u' AND active = 1 iterate_query = SELECT email AS user FROM addresses WHERE active = 1 ################################################################################################## I would share a special thanks for Community help 😊 If more conf files needed (ie postfix main.cf) please ask me for them. Best regards Laurent

1 0

password protected ssl key seems unsupported after update to 2.3.4.1
by admin＠f-hamelin.fr 25 Feb '19

25 Feb '19

Hi, On a debian server after an update to dovecot to 2.3.4.1 imaps mail client stop working. I’ve applied necessary migration for ssl_dh (cf https://wiki.dovecot.org/Upgrading/2.3 <https://wiki.dovecot.org/Upgrading/2.3> ) but that was not enough. The workaround I’ve setup was to remove password protection from the ssl_key file. All tests with ssl_key_password parameter failled (direct password, <path-file-with-password) searching I’ve found a message reporting a problem with that parameter and Stephan said it was tracked internally as DOP-851 Hope this will help. Regards, Franck debian updade from dovecot-core:amd64 (1:2.2.34-2~bpo9+1, 1:2.3.4.1-1~bpo9+1) # dovecot -n # 2.3.4.1 (f79e8e7e4): /etc/dovecot/dovecot.conf # Pigeonhole version 0.5.4 () # OS: Linux 4.19.0-0.bpo.2-amd64 x86_64 Debian 9.8 xfs …/… The error message in the log prior to the workaround was : "dovecot: imap-login: Error: Failed to initialize SSL server context: Couldn't parse private SSL key: error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt, error:23077074:PKCS12 routines:PKCS12_pbe_crypt:pkcs12 cipherfinal error, error:2306A075:PKCS12 routines:PKCS12_item_decrypt_d2i:pkcs12 pbe crypt error, error:0907B00D:PEM routines:PEM_read_bio_PrivateKey:ASN1 lib: user=<>, rip=192.168.0.254, lip=192.168.0.51, session=<thtmP6iCc9jAqAD+> »

2 2

permission denied errors with INDEX=MEMORY and trees plugin
by John McKay 24 Feb '19

24 Feb '19

I am using the trees[1] plugin to encrypt the mail on my disk. Because I don't want it to store any metadata in plaintext, I've also set INDEX=MEMORY in my mail_location configuration. However, whenever I get new mail I get errors like the following showing up in the journal: lmtp(john(a)octet.space)<21780><QDkrBqTXclwUVQAAQHGRUQ>: Error: Mailbox INBOX: Saving mail: read(/var/vmail/octet.space/john/Maildir/tmp/1551030180.M508113P21780.toaster.octet.space) failed: Permission denied (read reason=header Subject (Cache file is unusable)) It's like it's trying to read the message after it's been delivered, but is not able to because it's been encrypted. I seem to be able to get email just fine despite the error message. This happens both if I deliver mail using dovecot-lda or lmtp. Is there any way to fix this or at the very least suppress the error message? I have included my dovecot configuration below. [1] https://0xacab.org/riseuplabs/trees [root@toaster ~]# dovecot --version 2.3.4.1 (f79e8e7e4) [root@toaster ~]# dovecot -n # 2.3.4.1 (f79e8e7e4): /etc/dovecot/dovecot.conf # Pigeonhole version 0.5.4 (60b0f48d) # OS: Linux 4.20.8-arch1-1-ARCH x86_64 ext4 # Hostname: toaster.octet.space base_dir = /run/dovecot/ hostname = toaster.octet.space mail_gid = vmail mail_home = /var/vmail/%d/%n mail_location = maildir:/var/vmail/%d/%n/Maildir:UTF-8:INDEX=MEMORY mail_plugins = " quota trash zlib trees notify replication" mail_privileged_group = vmail mail_uid = vmail mailbox_list_index_very_dirty_syncs = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext spamtest spamtestplus imapflags notify imapsieve vnd.dovecot.imapsieve namespace inbox { inbox = yes location = maildir:/var/vmail/%d/%n/Maildir:UTF-8:INDEX=MEMORY mailbox Drafts { auto = create special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Spam { auto = create autoexpunge = 30 days special_use = \Junk } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { imapsieve_mailbox1_before = file:/var/lib/dovecot/imapsieve/before/report-spam.sieve imapsieve_mailbox1_causes = COPY FLAG imapsieve_mailbox1_name = Spam imapsieve_mailbox2_before = file:/var/lib/dovecot/imapsieve/before/report-ham.sieve imapsieve_mailbox2_causes = COPY imapsieve_mailbox2_from = Spam imapsieve_mailbox2_name = * quota = maildir:User quota quota_max_mail_size = 100M quota_rule = *:storage=15G quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u quota_warning3 = -storage=100%% quota-warning below %u recipient_delimiter = + sieve = file:~/sieve;active=~/.dovecot.sieve sieve_before = /var/lib/dovecot/sieve/before/ sieve_extensions = +spamtest +spamtestplus +notify +imapflags sieve_filter_socket_dir = sieve-pipe sieve_global_extensions = +vnd.dovecot.pipe +vnd.dovecot.environment +vnd.dovecot.filter sieve_pipe_socket_dir = sieve-pipe sieve_plugins = sieve_imapsieve sieve_extprograms sieve_quota_max_storage = 4M sieve_spamtest_max_header = X-Spam-Score: -?[[:digit:]]+\.[[:digit:]]+ / (-?[[:digit:]]+\.[[:digit:]]) sieve_spamtest_status_header = X-Spam-Score: (-?[[:digit:]]+\.[[:digit:]]+) / -?[[:digit:]]+\.[[:digit:]] sieve_spamtest_status_type = score trash = /etc/dovecot/dovecot-trash.conf.ext zlib_save = xz zlib_save_level = 6 } protocols = imap lmtp service auth-worker { group = smtpd user = $default_internal_user } service auth { unix_listener auth-userdb { group = vmail mode = 0660 user = vmail } } service dovecot-lda { executable = script /usr/lib/dovecot/dovecot-lda.sh unix_listener sieve-pipe/dovecot-lda { mode = 0600 user = vmail } user = vmail } service filter_rspamc { executable = script /usr/lib/dovecot/filter_rspamc.sh group = vmail unix_listener sieve-pipe/filter_rspamc { mode = 0600 user = vmail } user = vmail } service imap-login { inet_listener imap { port = 0 } inet_listener imaps { port = 993 ssl = yes } } service learn_ham { executable = script /usr/lib/dovecot/learn_ham.sh group = vmail unix_listener sieve-pipe/learn_ham { mode = 0600 user = vmail } user = vmail } service learn_spam { executable = script /usr/lib/dovecot/learn_spam.sh group = vmail unix_listener sieve-pipe/learn_spam { mode = 0600 user = vmail } user = vmail } service lmtp { unix_listener lmtp { group = vmail mode = 0660 user = vmail } } service pop3-login { inet_listener pop3 { port = 0 } inet_listener pop3s { port = 0 } } service quota-warning { executable = script /usr/lib/dovecot/quota-warning.sh unix_listener quota-warning { group = vmail mode = 0660 user = vmail } user = vmail } ssl = required ssl_cert = </etc/acme/fullchain.cer ssl_cipher_list = TLS_CHACHA20_POLY1305_SHA256:TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256 ssl_key = # hidden, use -P to show it ssl_min_protocol = TLSv1.2 ssl_prefer_server_ciphers = yes userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lda { mail_plugins = " quota trash zlib trees notify replication sieve zlib" } protocol imap { mail_plugins = " quota trash zlib trees notify replication imap_quota imap_sieve imap_zlib zlib" } protocol lmtp { mail_plugins = " quota trash zlib trees notify replication sieve zlib" }

1 0

Problem with shared Mailbox
by Asterisk 24 Feb '19

24 Feb '19

Hi I am using dovecot 2.3.4.1, is working in thunderbird, but it does not work in outlook 2016 or mail. a list "" "*" * LIST (\HasNoChildren \UnMarked \Drafts) "/" Drafts * LIST (\HasNoChildren \UnMarked \Sent) "/" Sent * LIST (\HasNoChildren \Junk) "/" Junk * LIST (\HasNoChildren \Trash) "/" Trash * LIST (\Noselect \HasChildren) "/" partage * LIST (\HasNoChildren) "/" partage/sysadmin * LIST (\HasNoChildren) "/" INBOX here the configuration auth_mechanisms = plain login auth_verbose = yes auth_verbose_passwords = sha1:6 hostname = imap_idle_notify_interval = 29 mins lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes mail_gid = docker mail_location = maildir:/var/mail/%n mail_plugins = acl quota mail_privileged_group = docker mail_uid = docker managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext imapflags notify vnd.dovecot.pipe vnd.dovecot.filter namespace { disabled = no hidden = no list = children location = maildir:/var/mail/%%n:INDEX=/var/mail/%%n:INDEXPVT=/var/mail/%%n prefix = partage/%%n/ separator = / subscriptions = yes type = shared } namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = separator = / subscriptions = yes type = private } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { acl = vfile acl_shared_dict = file:/var/mail/%d/shared-mailboxes.db quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_extensions = +notify +imapflags +vnd.dovecot.pipe +vnd.dovecot.filter sieve_filter_bin_dir = /usr/lib/dovecot/sieve-filter sieve_pipe_bin_dir = /usr/lib/dovecot/sieve-pipe sieve_plugins = sieve_extprograms } postmaster_address = postmaster@ protocols = " imap lmtp sieve" service auth { unix_listener /var/spool/postfix/private/auth { group = docker mode = 0666 user = docker } unix_listener auth-master { group = docker mode = 0600 user = docker } unix_listener auth-userdb { group = docker mode = 0666 user = docker } } service imap-login { inet_listener imaps { port = 993 ssl = yes } } service lmtp { unix_listener lmtp { group = postfix mode = 0660 } } service pop3-login { inet_listener pop3s { port = 995 ssl = yes } } ssl = required ssl_cert = </etc/letsencrypt/live//fullchain.pem ssl_cipher_list = ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256 ssl_dh = # hidden, use -P to show it ssl_key = # hidden, use -P to show it ssl_min_protocol = TLSv1.2 ssl_prefer_server_ciphers = yes userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocol lmtp { mail_plugins = acl quota sieve } protocol lda { mail_plugins = acl quota sieve } protocol imap { mail_plugins = acl quota imap_acl imap_quota }

2 1

Dmarc
by Latin Bishop 23 Feb '19

23 Feb '19

Trying to implement dmarc and looking at configuration file Wondering if one should change reject failures to true and how can I get this before I start rejecting emails AuthservID mail.example.com PidFile /var/run/opendmarc.pid #Debian default RejectFailures false Syslog true TrustedAuthservIDs mail.example.com,mail2.example.com UMask 0002 UserID opendmarc:opendmarc IgnoreHosts /etc/opendmarc/ignore.hosts HistoryFile /var/run/opendmarc/opendmarc.dat #for testing: SoftwareHeader true Sent from my iPad

1 0

LMTP and public mailboxes?
by Eric Abrahamsen 22 Feb '19

22 Feb '19

Hi, I've been using postfix and dovecot for a few years, and have been doing public mailboxes with dovecot-lda, using a postfix transport that looks like (line wrapped for the mailer): my-public-transport unix - n n - - pipe flags=DRhu user=vmail:vmail argv=/usr/bin/spamc -u <me> -e \ /usr/lib/dovecot/dovecot-lda -f ${sender} -d <me> -m public/${user} So messages first passed to spamassassin, using my own personal config for bayes rules, then to dovecot-lda, using my user for auth, and finally delivering to a public/* mailbox, with acl rules for access. I'm moving spamassassin to a mimedefang milter, so that's out of the equation; and LDA to LMTP, so the postfix config simply becomes: virtual_transport = lmtp:unix:private/dovecot-lmtp That's much nicer, but I'm not sure how to handle the public mailbox using LMTP. How are people doing this? While Googling I saw a recommendation to create a virtual user for the public mailboxes, and then presumably Postfix would map "info(a)mydomain.com" to "publicuser+info(a)mydomain.com" and I would go from there. But that seems a little weird: I don't want anyone to be able to log in as publicuser, nor to send mail as that user (Postfix uses Dovecot for auth). Yet I don't seem to be able to pass other arguments to lmtp, that might indicate which user to use for auth. Does anyone have a clean solution for this? Thanks in advance, Eric

1 1