- dovecot - dovecot.org

Different handling of upper and lower case while indexing/searching with Solr
by Patrik Peng 10 Feb '22

10 Feb '22

Hello there We stumbled upon an user account with Solr FTS, which returned no search results for any given search query. Further investigation revealed an issue between indexing mails and querying the index. The user name contains upper and lower case characters (eg. Some.User(a)domain.net) When new mail is indexed for this user, the user name used for Solr's `user` and `id` fields are transformed into lowercase, as shown in the Solr log: webapp=/solr path=/update params={...}{add=[8543/426f3b0348d03451a3fb00008ba2b673/some.user(a)domain.net (1724281617442144256), ... (162 adds)]} 0 44298 And can be confirmed by manually querying Solr. The Solr schema in use performs no transformation for the affected fields. When a search request is performed via IMAP, Dovecot queries Solr with the original user name: GET /solr/dovecot_fts_popimap/select?wt=json&f...&fq=%2Bbox:1a30ec359dce3451b8e600008ba2b673+%2Buser:Some.User@domain.net HTTP/1.1" Which (correctly) returns zero results. To summarize, I suspect dovecot transforms any user name to lower case while indexing mails, but not when querying for results. Is this a bug, or caused by misconfiguration? Regards Patrik

3 9

Outlook 2019 and push notifications
by Laura Smith 10 Feb '22

10 Feb '22

Is there some secret config sauce I'm unaware of to get IMAP push notifications working with Outlook ? My present situation is that non-Outlook users (e.g. Apple iOS, Apple Mail etc.) work perfectly with the config below. New emails get pushed, deletes get reflected, all is happy in the world. But with Outlook nothing. You send a user an email, nothing happens in their inbox until you manually refresh by checking for new mails or waiting for the auto-check to kick in (sometimes switching between IMAP folders also does the trick). I know Outlook has a long history of being a mess when it comes to standards compliance, but surely it can't be this bad ? doveconf -n : # 2.3.18 (9dd8408c18): /etc/dovecot/dovecot.conf # Pigeonhole version 0.5.18 (0bc28b32) # OS: Linux 5.10.0-11-amd64 x86_64 Debian 11.2 xfs # Hostname: foobar.example.com auth_verbose = yes auth_verbose_passwords = sha1:7 doveadm_password = # hidden, use -P to show it imap_capability = +SPECIAL-USE imapc_features = rfc822.size fetch-headers fetch-bodystructure imapc_port = 993 imapc_ssl = imaps mail_location = maildir:/foo_data/mail/%d/%n/Maildir mail_plugins = notify replication push_notification managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext imapsieve vnd.dovecot.imapsieve namespace inbox { inbox = yes location = mailbox "Deleted Messages" { auto = no special_use = \Trash } mailbox Drafts { special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /etc/dovecot/local_sql_users.conf driver = sql } plugin { imapsieve_mailbox1_before = file:/etc/dovecot/imap_sieve/spam.sieve imapsieve_mailbox1_causes = COPY imapsieve_mailbox1_name = Junk imapsieve_mailbox2_before = file:/etc/dovecot/imap_sieve/ham.sieve imapsieve_mailbox2_causes = COPY imapsieve_mailbox2_from = Junk imapsieve_mailbox2_name = * sieve = file:~/sieve;active=~/.dovecot.sieve sieve_global_extensions = +vnd.dovecot.pipe +vnd.dovecot.environment sieve_pipe_bin_dir = /etc/dovecot/imap_sieve sieve_plugins = sieve_imapsieve sieve_extprograms } protocols = imap lmtp sieve service auth { unix_listener /var/spool/postfix/private/dovecot-auth { group = postfix mode = 0660 user = postfix } vsz_limit = 2 G } service doveadm { inet_listener { port = 11867 ssl = yes } } service imap-login { process_min_avail = 5 service_count = 1 } service lmtp { process_min_avail = 5 unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0660 user = postfix } user = foo_virtmail } service managesieve-login { inet_listener sieve { port = 4190 } inet_listener sieves { address = port = 5190 ssl = yes } } ssl = required ssl_ca = </etc/foobar/ssl/certificates/_.example.com.issuer.crt ssl_cert = </etc/foobar/ssl/certificates/_.example.com.crt ssl_cipher_list = ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384 ssl_dh = # hidden, use -P to show it ssl_key = # hidden, use -P to show it ssl_prefer_server_ciphers = yes userdb { args = /etc/dovecot/local_sql_users.conf default_fields = uid=foo_virtmail gid=foo_virtmail home=/foo_data/mail/%d/%n driver = sql } protocol lmtp { mail_plugins = notify replication push_notification sieve postmaster_address = foo(a)foobar.com } protocol lda { deliver_log_format = msgid=%m: %$ mail_plugins = notify replication push_notification sieve postmaster_address = postmaster quota_full_tempfail = yes rejection_reason = Your message to <%t> was automatically rejected:%n%r } protocol imap { mail_max_userip_connections = 20 mail_plugins = notify replication push_notification imap_sieve }

2 1

Certificate and showing a sign-cert not there
by Wayne Spivak 10 Feb '22

10 Feb '22

Hi - I am running Postfix 3.6.4 with Dovecot 2.3.17.1 (476cd46418). I have a multi-signed cert from Entrust. The cert works fine on port 25. However, on Port 587 I get an error: c [root@mcq wbs]# openssl s_client -connect mcq.sbanetweb.com:993 -servername mcq.sbanetweb.com CONNECTED(00000003) depth=0 C = US, ST = New York, L = Bellmore, O = SBA Consulting LTD, CN = mcq.sbanetweb.com verify error:num=20:unable to get local issuer certificate verify return:1 depth=0 C = US, ST = New York, L = Bellmore, O = SBA Consulting LTD, CN = mcq.sbanetweb.com verify error:num=21:unable to verify the first certificate verify return:1 depth=0 C = US, ST = New York, L = Bellmore, O = SBA Consulting LTD, CN = mcq.sbanetweb.com verify return:1 --- Certificate chain 0 s:C = US, ST = New York, L = Bellmore, O = SBA Consulting LTD, CN = mcq.sbanetweb.com i:C = US, O = "Entrust, Inc.", OU = See www.entrust.net/legal-terms <http://www.entrust.net/legal-terms> , OU = "(c) 2012 Entrust, Inc. - for authorized use only", CN = Entrust Certification Authority - L1K [root@mcq wbs]# dovecot -n # 2.3.17.1 (476cd46418): /etc/dovecot/dovecot.conf # OS: Linux 5.16.5-200.fc35.x86_64 x86_64 Fedora release 35 (Thirty Five) # Hostname: mcq.sbanetweb.com auth_mechanisms = plain login disable_plaintext_auth = no mbox_write_locks = fcntl namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } protocols = imap service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-userdb { group = postfix mode = 0666 user = postfix } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } } service submission-login { inet_listener submission { port = 587 } } ssl = required ssl_cert = </etc/postfix/tls/ServerCertificate.pem ssl_cipher_list = ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-G CM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AE S128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA25 6:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE- ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES1 28-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE -DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES12 8-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNUL L:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-D ES-CBC3-SHA:!KRB5-DES-CBC3-SHA ssl_client_ca_dir = /etc/postfix/tls/ ssl_client_ca_file = ChainBundle.pem ssl_dh = # hidden, use -P to show it ssl_key = # hidden, use -P to show it ssl_prefer_server_ciphers = yes userdb { driver = passwd } protocol imap { mail_max_userip_connections = 15 } Any ideas? Wayne Spivak SBANETWEB.com

5 9

Config for filtering (ignoring) specific mbox mail folders?
by John Hardin 08 Feb '22

08 Feb '22

Folks: I'm migrating to Dovecot to provide IMAP services for my personal network. I have more than a couple of decades of mail in multiple (1000+) mbox mail files, but I don't care to expose all of those to IMAP. Is there any way to filter out what mail folders Dovecot will LIST and provide access to using globs or regular expressions? I'd prefer to avoid rearranging the mbox files (e.g. to subdirectories) if possible. I looked through the Dovecot documentation and didn't see anything promising, and I couldn't find any discussion of the topic online. The feature that looked like it might be closest was Namespaces, but I couldn't see how to use that to ignore specific mbox files. Is there any facility within Dovecot (or a plugin) to filter out / ignore mail folders by name, RE or file glob? Thanks in advance! -- John Hardin KA7OHZ http://www.impsec.org/~jhardin/ jhardin(a)impsec.org pgpk -a jhardin(a)impsec.org key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79

1 0

Re: On mailbox full, retry for 4 days or similar instead of reject
by Jorge Bastos 08 Feb '22

08 Feb '22

Hi Lucas, Oh, it's so damn simple! Thank you!! Thank you all others aswell, i've read all info sent, thanks!! Jorge On 2022-02-07 22:57, Lucas Rolff wrote: > An option is to use > https://doc.dovecot.org/settings/core/#core_setting-quota_full_tempfail > - you can configure it e.g. > > protocol lda { > quota_full_tempfail = yes > } > >> On 7 Feb 2022, at 23:41, Jorge Bastos <mysql.jorge(a)decimal.pt> wrote: >> >> Howdy, >> >> I don't know if this is dovecot specific and i guess it may not be at >> 100% so I ask for help. >> >> I want postfix not to discard the message imediatly when a mailbox is >> full, i mean when postfix tries to deliver it to dovecot lmtp. >> Is it possible to change the behavior to something like what postfix >> does when he tries to deliver a message to an external server and the >> server is unaccessible for 4 days (the default i guess), and if in >> that period discard it. >> >> Does this exists? At least i know gmail does something similar to >> this. >> >> I've tried to google a bit but didn't found info that could lead me to >> this configuration. >> >> Thanks in advanced, >> Jorge

1 1

sieve: destination folder lookup in database?
by Hadmut Danisch 08 Feb '22

08 Feb '22

Hi, is there a way to lookup the action for an incoming mail, especially which folder to move the mail in, in a database? Given Problem: I want to replace the mda mailfilter/maildrop with dovecot/sieve. The mailfilter script is rather short, but looksup the destination folder by querying a berkeley database file with the sender's address to find the target folder, using the sender's address as an index. This way, it can store the target folder for hunders or thousands of senders, without needing to compare every single one of them by if == elsif == else... Is there a similar method for dovecot / sieve? I found that dovecot's sieve has some database connections, e.g. LDAP or https://doc.dovecot.org/configuration_manual/sieve/dict/ but rather to receive the whole sieve script for a given recipient as the owner of the mailbox. Is there a way to determine the target folder where to drop a mail into quickly by the sender's address, even for thousands, without the need to compare every single one of them? regards Hadmut

2 2

sieve script to alter subject of incoming message after lookup
by Marc 08 Feb '22

08 Feb '22

Is it possible with sieve to : 1. get sender of an email 2. lookup if this sender is present in an mailbox 3. if the sender is known, change the subject of the email. if the sender is not known, do nothing. 4. put/leave message in inbox. or maybe use dictionary (not really familiar with this) 1. get sender of an email 2. lookup if this sender is present in an dictionary 3. if the sender is known, change the subject of the email. if the sender is not known, do nothing. 4. put/leave message in inbox. But then I need something like 1. if message is dragged into a specific mailbox/folder 2. add sender to dictionary 1. if message is removed from a specific mailbox/folder 2. remove sender from dictionary

1 0

Different auth logging with cache lookup. (OPEN)
by Eikås Arvid 07 Feb '22

07 Feb '22

dovecot-2.3.5 and centos 7 User and IP are logged in both scenarios. auth-worker(26145): sql(user,1.1.1.1,<XXXXXXXX>): Password mismatch auth-worker(13380): cache(user(a)online.no,1.1.1.1): Password mismatch dovecot-2.3.17 and rhel 8 Feb 03 14:42:53 auth-worker(1676266): Info: conn unix:auth-worker (pid=1675846,uid=97): auth-worker<1>: sql(user,127.0.0.1,<XXXXXXXX>): Password mismatch (given password: xxxx) Feb 03 14:43:48 auth-worker(1676266): Info: conn unix:auth-worker (pid=1675846,uid=97): auth-worker<2>: Password mismatch (given password: xxxx) User and IP is not logged in cache lookup. Is this a design change or a unplanned change? Any ide when it was changed?

1 0

Lucene support for FTS - EOL date.
by Jacek Grabowski 07 Feb '22

07 Feb '22

Hello Actually on the https://doc.dovecot.org/configuration_manual/fts/lucene/ site we can read about lucene fts plugin: "This plugin is no longer maintained in Dovecot (as of 2.3+) and will be removed in the future." Does anyone know about approximate EOL date for lucene plugin support in Dovecot? -- Pozdrawiam. Jacek Grabowski.

6 8

Dovecot v2.3.17.1 Released
by Aki Tuomi 07 Feb '22

07 Feb '22

We are happy to announce 2.3.17.1 patch release of Dovecot. This contains some fixes for issues found after 2.3.17 release. https://dovecot.org/releases/2.3/dovecot-2.3.17.1.tar.gz https://dovecot.org/releases/2.3/dovecot-2.3.17.1.tar.gz.sig Binary packages in https://repo.dovecot.org/ Docker images in https://hub.docker.com/r/dovecot/dovecot Aki Tuomi Open-Xchange oy -- - dsync: Add back accidentically removed parameters. - lib-ssl-iostream: Fix assert-crash when OpenSSL returned syscall error without errno. - master: Dovecot failed to start if ssl_ca was too large.

7 8