- dovecot - dovecot.org

[Dovecot] problems with ssl cert
by cc "maco" young 04 Sep '12

04 Sep '12

in conf.d/10-ssl.conf: ssl = yes ssl_cert = </etc/ssl/certs/ms1xxx.net.crt ssl_key = </etc/ssl/private/ms1.xxx.net.key when try to set up an account in thrunderbird, get /var/log/mail.log: imap-login: Disconnected (no auth attempts): rip=223.205.150.234, lip=xx.xx.xx.xx, TLS: SSL_read() failed: error:14094416:SSL routines:SSL3_READ_BYTES:sslv3 alert certificate unknown: SSL alert number openssl s_client -connect mail.myserver.com:993 - successful using the same cert in gning / chrome is successful, so think the cert is ok

2 1

Re: [Dovecot] thunderbird not connecting
by Spyros Tsiolis 04 Sep '12

04 Sep '12

>________________________________ > From: "cc "maco" young" <bangkokmaco(a)gmail.com> >To: Spyros Tsiolis <stsiol(a)yahoo.co.uk> >Sent: Tuesday, 4 September 2012, 9:42 >Subject: Re: [Dovecot] thunderbird not connecting > > >On Tue, Sep 4, 2012 at 12:59 PM, Spyros Tsiolis <stsiol(a)yahoo.co.uk> wrote: > > >> >>----- Original Message ----- >>> From: cc young <bangkokmaco(a)gmail.com> >>> To: dovecot(a)dovecot.org >>> Cc: >>> Sent: Tuesday, 4 September 2012, 7:21 >>> Subject: [Dovecot] thunderbird not connecting >>> >>> cannot get TB to recognize either pop3/s or imap/s server >>> >>> can connect just fine with: >>> >>> openssl s_client -connect ms1.myserver.net:993 >>> . login ... >>> >>> but trying with TB /var/log/mail.log gets: >>> >>> dovecot: pop3-login: Aborted login (no auth attempts): rip=223.205.150.234, >>> lip=xxx.xx.xx.xx >>> dovecot: imap-login: Aborted login (no auth attempts): rip=223.205.150.234, >>> lip=xxx.xx.xx.xx >>> >>> >>> >>> >>> -- >>> View this message in context: >>> http://dovecot.2317879.n4.nabble.com/thunderbird-not-connecting-tp37389.html >>> Sent from the Dovecot mailing list archive at Nabble.com. >>> >> >> >>Thunderbird is not the best of clients out there. >>It's ok but not the best. >> >>I am using TB on my sites and found out that it has many issues. >>Can you be a bit more specific ? >>Are you trying to connect to Secure IMAP ? (993) on dovecot ? >> >>In that case, as far as I remember you have to "fool" Thunderbird >>during the mail account set up process. >> >>It's a bit crazy, I know but it's true. I have documented everything. >>Let me know where the hickup is and I'll try to get the docs and >>let you know how to work around this. >> >>HTH, >> > > >right - trying to connect to Secure IMAP ? (993) on dovecot > > >not in love with thunderbird, but need to access via linux and ms > > >any help / insight would be wonderful > > Hi again, Taken from my docs . This is the first part for Mozilla Thunderbird setup. I've seen this work both on Win32 systems and linux systems (mainly Linux Mint). There's a part on pop3/smtp. I am sure you can skip that and do your own magic for those two protocols : Pre-Installation, Wizard Configuration -------------------------------------- During initial Thunderbird startup, the admin is greeted by a welcome window named “Mail Account Setup” Click on Cancel Installation ------------ Click on “Edit” -> “Account Settings” New window pops up Click on “Add” New window pops up Fill in “Description” (e.g. “Name Surname mailbox”) On “Server Name” enter the IP address (e.g. 192.168.3.5) On “Port” enter the SMTP port (e.g. 25) On “Security and Authentication” → “Connection Security” enter none On “Authentication Method” choose Password transmitted insecurely On “Username” enter the users' username including the FQDN (e.g. name(a)domain.gr) Click on OK From “Edit”, click on “Account Settings” From “Account Actions” click on “Add Mail Account” New windows pops up Enter in the same name for “Your name” Enter in the same e-mail address for “Email address” On “Password” enter in users' password Click on “Continue” then without waiting click on “Manual Config” Once “Manual Config” is clicked, thunderbird will allow the admin to perform additional configuration tasks For “Incoming” the admin will choose “IMAP”, Server Hostname will be set to the servers' IP address (again, 192.168.3.5) From “Port” choose “993” From “SSL” choose “SSL/TLS” From “Authentication” choose “Autodetect” For “Outgoing” the admin will let the “SMTP” option For “Server Hostname”, choose the same IP address (e.g. 192.168.3.5) For “Port” choose “25” For “SSL” choose “None” For “Authentication” choose “Normal Password” On the Username field, enter the full user name, e.g. “user(a)domain.xn--gr-02t Click on “Re-test” Click on “Create Account” Check on the “I understand the Risks” checkbox Click on “Create Account” Click on “Confirm Security Exception” Click on “OK” Hope this helps and best regards, Spyros ---- "I merely function as a channel that filters music through the chaos of noise" - Vangelis

1 0

[Dovecot] dovecot-antispam and Thunderbird, Outlook, etc.
by Eddy Ilg|univation 04 Sep '12

04 Sep '12

Hi, In the documentation of dovecot-antispam it is mentioned that moving mails out of the spam folders trains them as non-spam. I.e. thunderbird automatically deletes old spam messages (after a time limit, i.e. 14 days). Will this also train the old spam messages as non-spam? Cheers, Eddy

2 1

[Dovecot] Disable security for testing?
by Voytek Eymont 03 Sep '12

03 Sep '12

I want to offer 'plain' unsecure pop/imap access, just for temp. testing purpose, do I simply comment out ssl = required ? Voytek -- Swyped on Motrix with K-9 Mail. Please excuse my brevity.

5 11

[Dovecot] dovecot sasl + postfix issue
by tseveendorj 03 Sep '12

03 Sep '12

Hello, I'm trying to configure postfix + Dovecot SASL for user authenticated mail relay. I set following configuration on postfix queue_directory = /var/spool/postfix smtpd_sasl_auth_enable = yes smtpd_sasl_type = dovecot smtpd_sasl_path = private/auth smtpd_sasl_authenticated_header = yes smtpd_sasl_security_options = noanonymous smtpd_sasl_local_domain = $myhostname broken_sasl_auth_clients = yes smtpd_recipient_restrictions = reject_unknown_sender_domain, reject_unknown_recipient_domain, reject_unauth_pipelining, permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination Following are dovecot -n # 2.0.19: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-29-generic x86_64 Ubuntu 12.04.1 LTS auth_mechanisms = plain login digest-md5 base_dir = /var/run/dovecot/ mail_location = maildir:~/Maildir managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave passdb { driver = pam } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = imap pop3 sieve service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener /var/spool/postfix/private/dovecot-auth { group = postfix mode = 0660 user = postfix } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_cipher_list = ALL:!LOW:!SSLv2:ALL:!aNULL:!ADH:!eNULL:!EXP:RC4+RSA:+HIGH:+MEDIUM ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = passwd } protocol imap { imap_client_workarounds = delay-newmail mail_max_userip_connections = 10 } protocol pop3 { mail_max_userip_connections = 10 pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } protocol lda { deliver_log_format = msgid=%m: %$ mail_plugins = sieve postmaster_address = postmaster quota_full_tempfail = yes rejection_reason = Your message to <%t> was automatically rejected:%n%r when I see telnet localhost 25 eberx@beastie:/etc/dovecot/conf.d$ telnet localhost 25 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. 220 beastie ESMTP Postfix (Ubuntu) ehlo beastie 250-beastie 250-PIPELINING 250-SIZE 10240000 250-VRFY 250-ETRN 250-STARTTLS 250-ENHANCEDSTATUSCODES 250-8BITMIME 250 DSN quit 221 2.0.0 Bye Connection closed by foreign host. there is no 250-AUTH How do I fix this ?

2 1

[Dovecot] Imap Ghost folder
by Sascha Zucca 03 Sep '12

03 Sep '12

Hi list, i have a strange "ghost" folder in my subscription list and just can't find out how to get rid of it. It seems to be someones Inbox, but it doesn't tell me whose. Here's a screenshot of Open-Xchanges Web-GUI: /http://s9.postimage.org/6aohh97ov/iehadjhb.jpg / As you can see there is an unamed folder just under Freigaben (Shares). In Thunderbird: /http://s12.postimage.org/z0n82k2u5/bjddgefg.jpg/ Now the Folder is "INBOX"...But it is noones Inbox, as the corresponding user (amazon e.g.) should be a prefix-folder right before the share. some output over Telnet: 1 lsub "" "*" * LSUB () "/" "INBOX" * LSUB () "/" "INBOX/Amazon" * LSUB () "/" "INBOX/Bestellung" * LSUB () "/" "Drafts" * LSUB () "/" "Sent Items" * LSUB () "/" "Spam" * LSUB () "/" "Trash" * LSUB () "/" "Freigaben/amazon/INBOX" 1 OK Lsub completed. 1 list "" "*" * LIST (\HasNoChildren) "/" "Trash" * LIST (\HasNoChildren) "/" "Sent Items" * LIST (\HasChildren) "/" "INBOX" * LIST (\HasNoChildren) "/" "INBOX/Amazon" * LIST (\HasNoChildren) "/" "INBOX/Bestellung" * LIST (\HasNoChildren) "/" "Spam" * LIST (\HasNoChildren) "/" "Drafts" * LIST (\Noselect \HasChildren) "/" "Freigaben/amazon" * LIST (\Noselect \HasNoChildren) "/" "Freigaben/" * LIST (\HasNoChildren) "/" "Freigaben/amazon/INBOX" 1 OK List completed. This looks a bit strange to me: * LIST (\Noselect \HasNoChildren) "/" "Freigaben/" But i don't know really if that is the ghostfolder. finally here's the interesting part in my dovecot.conf: / namespace private { separator = / prefix = #location defaults to mail_location. inbox = yes } namespace shared { separator = / prefix = Freigaben/%%n/ location = maildir:/var/mail/vhosts/%%d/%%n/:INDEX=/var/mail/vhosts/%%d/%%n/ subscriptions = no list = children inbox = no } / Any idea how to banish the ghost in the machine? Thank you very much Sascha -- Systemschmiede IT-Lösungen Zucca & Teves GbR August-Thyssen-Straße 2-4 52511 Geilenkirchen www.systemschmiede.com Tel.: 02451 - 9088390 Fax: 02451 - 9124070 Mobil: 0178 - 4073254 Ust.ID: DE248030393

4 17

[Dovecot] exclude a folder for lazy expunge (move to trash)
by Angel L. Mateo 03 Sep '12

03 Sep '12

Hello, I'm configuring lazy expunge plugin to act as a kind of backup of my user's emails. I'm getting a little problem because a lot of my users use "move to trash" behaviour in their email client (most of them are using thunderbird which has no option to hide deleted messages and is a hassle working with mark as deleted with it). The problem combining move to trash with lazy expunge is that messages are stored in the expunge namespace twice, first when it was deleted from the original folder and the second when is deleted from the trash. So... is there any way to exclude trash folder from lazy expunge plugin, so mails are stored in the expunge namespace only when they are deleted from their original folder and not from the trash? Another idea... We are purging trash folders with a cron running "doveadm purge" commands. Is there any way to run this command disabling lazy expunge plugin? Any other idea not to duplicate these emails? -- Angel L. Mateo Martínez Sección de Telemática Área de Tecnologías de la Información _o) y las Comunicaciones Aplicadas (ATICA) / \\ http://www.um.es/atica _(___V Tfo: 868887590 Fax: 868888337

2 2

[Dovecot] [Postfix] SASL Auth. using Dovecot with password forwarding proxy configuration
by Adi Pircalabu 03 Sep '12

03 Sep '12

Hi, I'm relatively new to Dovecot and I did a bit of search but couldn't find a possible solution for the particular setup I'm working on. Basically I have an SMTP/POP/IMAP proxy setup running Postfix & Dovecot. IMAP/POP authentication is done using the password proxy feature, where the login credentials are passed to the backend server after a db lookup, which does the actual authentication. The POP/IMAP part is working fine. What I'm trying to do is to use Dovecot SASL implementation in Postfix to do SMTP authentication in a similar manner. The problem I have with my current configuration is that SMTP authentication succeeds if only the username matches, because password forwarding works if the authentication succeeds with any given password, as documented at http://wiki.dovecot.org/PasswordDatabase/ExtraFields/Proxy My question is, given the above: is there a way to get SMTP authentication properly in this scenario? The way I see it now, Dovecot SASL accepting the login if only the user matches isn't quite "complete", the auth process should go further and authenticate against the backend server, same as for POP/IMAP connections. Does this requirement make any sense? Maybe I'm missing something in Dovecot configuration to get the SMTP authentication work in password forwarding mode, few pointers will be highly appreciated. PopBSMTP is not an sensible alternative in my case. Here's my configuration, plus some dovecot auth_debug log entries. As you can see, SMTP authentication succeeds with any given password. ---Dovecot--- dovecot -n # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-279.2.1.el6.centos.plus.x86_64 x86_64 CentOS release 6.3 (Final) auth_cache_size = 4 k auth_debug = yes auth_debug_passwords = yes auth_verbose = yes auth_verbose_passwords = plain mbox_write_locks = fcntl passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } } ssl_ca = </etc/pki/tls/certs/ca-cert.pem ssl_cert = </etc/pki/tls/certs/_cert.pem ssl_key = </etc/pki/tls/certs/_key.pem userdb { driver = prefetch } grep -v "^$\|^#" /etc/dovecot/dovecot-sql.conf.ext driver = mysql connect = host=/var/lib/mysql/mysql.sock dbname=postfix user=postfix password=postfixpassword password_query = SELECT NULL AS password, 'Y' as nopassword, host, email, 'Y' AS proxy FROM mailbox WHERE email = '%u' ---Dovecot--- ---Postfix--- smtpd_sasl_auth_enable = yes smtpd_sasl_local_domain = $myhostname broken_sasl_auth_clients = yes smtpd_sasl_type = dovecot smtpd_sasl_path = /var/spool/postfix/private/auth smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination ---Postfix--- ---/var/log/maillog--- (IMAP connection) Aug 31 11:20:20 centos6 dovecot: auth: Debug: client in: AUTH#0111#011PLAIN#011service=imap#011secured#011lip=192.168.1.222#011rip=192.168.1.56#011lport=993#011rport=44024#011resp=AGFAMGFkaXRlc3QubmV0ADEyM3F3ZVpYQw== Aug 31 11:20:20 centos6 dovecot: auth: Debug: cache(a(a)0aditest.net,192.168.1.56): miss Aug 31 11:20:20 centos6 dovecot: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth Aug 31 11:20:20 centos6 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libauthdb_ldap.so Aug 31 11:20:21 centos6 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_mysql.so Aug 31 11:20:21 centos6 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so Aug 31 11:20:21 centos6 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libmech_gssapi.so Aug 31 11:20:21 centos6 dovecot: auth: mysql: Connected to /var/lib/mysql/mysql.sock (postfix) Aug 31 11:20:21 centos6 dovecot: auth: Debug: sql(a(a)0aditest.net,192.168.1.56): query: SELECT NULL AS password, 'Y' as nopassword, host, email, 'Y' AS proxy FROM mailbox WHERE email = 'a(a)0aditest.net' Aug 31 11:20:21 centos6 dovecot: auth: Debug: client out: OK#0111#011user=a@0aditest.net#011host=BACKEND_SERVER_IP#011email=a@0aditest.net#011proxy#011pass=1234567890 Aug 31 11:20:21 centos6 dovecot: imap-login: Debug: Ignoring unknown passdb extra field: email Aug 31 11:20:21 centos6 dovecot: imap-login: proxy(a(a)0aditest.net): started proxying to BACKEND_SERVER_IP:143: user=<a(a)0aditest.net>, method=PLAIN, rip=192.168.1.56, lip=192.168.1.222, TLS [...] (SMTP connection) Aug 31 11:36:14 centos6 postfix/smtpd[11213]: connect from unknown[192.168.1.200] Aug 31 11:36:14 centos6 dovecot: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth Aug 31 11:36:14 centos6 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libauthdb_ldap.so Aug 31 11:36:14 centos6 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_mysql.so Aug 31 11:36:14 centos6 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so Aug 31 11:36:14 centos6 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libmech_gssapi.so Aug 31 11:36:14 centos6 dovecot: auth: Debug: auth client connected (pid=11213) Aug 31 11:36:14 centos6 dovecot: auth: Debug: client in: AUTH#0111#011PLAIN#011service=smtp#011nologin#011lip=192.168.1.222#011rip=192.168.1.200#011resp=AGFAMGFkaXRlc3QubmV0AGFzZA== Aug 31 11:36:14 centos6 dovecot: auth: Debug: cache(a(a)0aditest.net,192.168.1.200): miss Aug 31 11:36:14 centos6 dovecot: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth Aug 31 11:36:14 centos6 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libauthdb_ldap.so Aug 31 11:36:14 centos6 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_mysql.so Aug 31 11:36:14 centos6 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so Aug 31 11:36:14 centos6 dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libmech_gssapi.so Aug 31 11:36:14 centos6 dovecot: auth: mysql: Connected to /var/lib/mysql/mysql.sock (postfix) Aug 31 11:36:14 centos6 dovecot: auth: Debug: sql(a(a)0aditest.net,192.168.1.200): query: SELECT NULL AS password, 'Y' as nopassword, host, email, 'Y' AS proxy FROM mailbox WHERE email = 'a(a)0aditest.net' Aug 31 11:36:14 centos6 dovecot: auth: Debug: client out: OK#0111#011user=a@0aditest.net#011host=203.63.79.87#011email=a@0aditest.net#011proxy#011pass=anygivenpassword Aug 31 11:36:14 centos6 postfix/smtpd[11213]: C9620600A9: client=unknown[192.168.1.200], sasl_method=PLAIN, sasl_username=a(a)0aditest.net Aug 31 11:36:14 centos6 postfix/cleanup[11219]: C9620600A9: message-id=<20120831113614.72ed32df(a)adi.ddns.local> [...] ---/var/log/maillog--- -- Adi Pircalabu

3 5

[Dovecot] possible work plugin deleted_to_trash for otrher foler
by ml 03 Sep '12

03 Sep '12

Hi Timo in the present work would be possible to walk to another folder for deleted_to_trash please answer me -- http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC2626742 gpg --keyserver pgp.mit.edu --recv-key C2626742 http://about.me/fakessh http://urlshort.eu fakessh @ http://gplus.to/sshfake http://gplus.to/sshswilting http://gplus.to/john.swilting https://lists.fakessh.eu/mailman/ This list is moderated by me, but all applications will be accepted provided they receive a note of presentation

2 3

[Dovecot] Special Folder Mocking
by Eddy Ilg|univation 02 Sep '12

02 Sep '12

Dear Dovecot List, probably everyone knows the problem that different clients use different names for "Sent", "Trash" and so on. A simple question: Isn't it possible to advertise one imap folder with different names, depending on the client? E.g. if the client is Outlook, show the "Sent" folder as "Sent Elements" (translated from german) and if the client is Thunderbird, show the "Sent" folder as "Sent"? Best regards, Eddy Ilg

3 4