- dovecot - dovecot.org

[Dovecot] Restrict Imap access
by Sergiu Zaharia 14 Mar '05

14 Mar '05

Hello. I need to restrict access to IMAP ports to a few users, so that all users can use POP3 and just a few of them will be able to access IMAP. I use secure connections POP3s and IMAPs. Is it possible? Also... When I connect to the Dovecot server using Outlook (IMAPs) I get a Warning message,something like: "The server you are connectiing to uses a non verified protection certificate. A chain of certificates ...so on ( I can't translate :) ) Continue using the server? " How can I fix that warning? Thanks

3 2

RE: [Dovecot] Plain Authentication - Outlook not working
by Timo Sirainen 14 Mar '05

14 Mar '05

On Sun, 2005-03-13 at 15:18 +0000, Simon Windsor wrote: > Hi > > I tried re-subscribing and still, I get not emails with kmail. > > Outlook appeared to pick the change in Subscription file automatically. > > Any other ideas, or should I drop the IMAP connection and re-do it? Do you even see the mailbox list? Maybe kmail got somehow confused and recreating the IMAP account entirely would be easiest way to fix it.

4 7

[Dovecot] pop before smtp with 'exact' and 'exim4'
by Jools Smyth 14 Mar '05

14 Mar '05

Hello, I just thought I would write this in case its useful to anyone. I've used dovecot for a while, as its so easy to set up, its fast and it and just "works". I recently wanted to be able to send via my server after pop3s authentication. I'm also running debian (testing) which utilises exim4 by default. I found no information about how to do it with this combination of software so went about sorting it out myself. First I got exact : (a pop before smtp daemon) http://adju.st/dist/exact/ After compiling and installing i edited its /usr/local/etc/exact-servers.conf It doesn't support dovecot's log format out of the box, so i created a regular expression entry for it. <server dovecot> order username,address match (Login): (.*) \[(.*)\] </server> I then edited its main configuration, (/usr/local/etc/exact.conf) changing only the user its running on (default mail/mail) to Debian-exim/mail. (so that the state file it creates can be read fine by exim4) I also changed the mail log ownership so that group mail can read them, /usr/local/var/state/exact to drwxr-sr-x 2 Debian-exim mail 1024 Mar 13 16:39 exact and /usr/local/var/run/exact to drwxr-sr-x 2 Debian-exim mail 1024 Mar 12 21:54 exact Exact's exim documentation is not for the most recent version, so I had to locate the correct line to modify. I went into the exim4 configuration files. I use the debian split format configuration. In the file /etc/exim4/conf.d/acl/30_exim4-config_check_rcpt there is a line near the bottom which reads accept hosts = +relay_from_hosts I changed this to accept hosts = +relay_from_hosts : net-lsearch;/usr/local/var/state/exact/rela y I then just set exact to and start/stop in /etc/init.d/exim4 thats all! Best Regards Jools -- Oxford Inspire jools(a)oxfordinspire.co.uk Tel: 01865 751879 Mob: 07966 577498

2 1

[Dovecot] Plain Authentication - Outlook not working
by Simon Windsor 13 Mar '05

13 Mar '05

Hi I have just upgraded a mail server from dovecot-0.99 to stable (dovecot-1.0.59). My normal desktop email client, kmail is working fine, but outlook keeps producing PLAIN authentication errors, and refusing to authenticate. From dovecot.log, I can see dovecot: Mar 13 10:57:30 Error: auth(default): sql(<xxxxxxxMy Detailsxxxxxxxxxxx>): Password query must return a field named "password" I have tried setting, unsetting disable_plaintext_auth in dovecot.conf, to no avail. What is happening, and what should I do to get all email cleints to work. Simon -- Simon Windsor Email: simon.windsor(a)cornfield.org.uk Tel: 01454 617689 Mob: 07720 447385

2 5

[Dovecot] "not listening" notification
by Alan Tam 13 Mar '05

13 Mar '05

Hi dovecot, My dovecot log shows this: Feb 27 03:08:38 eta imap-login: Login: sltam [X.X.X.X] Feb 27 03:09:38 eta imap-login: Disconnected: Inactivity [X.X.X.X] Feb 27 03:10:32 eta dovecot: login: received another "not listening" notification (if you can't login at all, see src/lib/fdpass.c) Feb 27 03:10:42 eta dovecot-auth: Login process has too old (124s) requests, killing it. Feb 27 03:10:42 eta dovecot-auth: Login process 8 disconnected Any clues what it means? Recently I have to restart dovecot several times a day, after I have report that all users cannot login. I am running Debian sarge (2.6.8 kernel) with dovecot version 0.99.14-1 with auth_verbose and auth_debug on. -- Regards, Alan

1 1

[Dovecot] Errors when searching large folders
by Mike Jakubik 13 Mar '05

13 Mar '05

I am getting errors from dovecot when trying to search, in large Maildir folders. The folder has 40454 messages and is 371MB in size. The email client is squirrelmail 1.4.3, running on FreeBSD-current. I've had this problem before, and i posted a message here. The author said he would fix this, but it seem the problem is still not resolved. This is the error i get: --- ERROR : Connection dropped by imap-server. Query: SEARCH CHARSET ISO-8859-1 ALL BODY {5} hello BODY {5} there --- At this point the HD led remain on for another 30 seconds or so. Thanks.

3 9

[Dovecot] Logging options
by Joebstl Thomas 13 Mar '05

13 Mar '05

Hi, is it possible to configure dovecot's logging so it logs stuff like "User x logged in from IP/Host y and had z new messages" like I'm used from qpopper? That immensely helps when debugging PEBKAC issues. Enabling auth_verbose isnt really helpfull since a failed login generates 4 lines, some even without a pid - so it's a bit hard guessing which log entry belongs to which login attempt or even writing a script which checks for those. Regards, Thomas

4 6

[Dovecot] dovecot test62 vs test64
by akolasny＠jhu.edu 13 Mar '05

13 Mar '05

Greetings: I've been using Dovecot 1.0-test62. It has been working well. I tried to upgrade to 1.0-test64 but users could not authenticate. Both versions I compiled with: ./configure --with-ssl=openssl; make; make install They compiled and installed fine. The /usr/local/etc/dovecot.conf needed to be modified due to the new syntax. 1.0-test64 with the new dovecot.conf didn't work. I'm using imaps. The error related to not being able to authenticate. I reinstalled test62 with the original dovecot.conf and everything worked fine again. My config files look like: dovecot.conf-test62 looks like: base_dir = /var/run/dovecot/ protocols = imap imaps pop3 pop3s ssl_disable = no ssl_cert_file = /usr/share/ssl/certs/dovecot.pem ssl_key_file = /usr/share/ssl/private/dovecot.pem disable_plaintext_auth = yes login_dir = /var/run/dovecot-login login = imap login = pop3 mail_extra_groups = mail default_mail_env = mbox:~/mail/:INBOX=/var/spool/mail/%u auth = default auth_mechanisms = plain auth_userdb = passwd auth_passdb = pam auth_user = root dovecot.conf-test64 looks like: base_dir = /var/run/dovecot/ protocols = imap imaps ssl_disable = no ssl_cert_file = /usr/share/ssl/certs/dovecot.pem ssl_key_file = /usr/share/ssl/private/dovecot.pem disable_plaintext_auth = yes login_dir = /var/run/dovecot/login default_mail_env = mbox:~/mail/:INBOX=/var/spool/mail/%u protocol imap { } protocol pop3 { } auth default { mechanisms = plain passdb pam { } userdb passwd { } user = root } What am I doing wrong? Am I missing something in the 1.0-test64 config file? Your comments or suggestions are greatly appreciated. Thanks, Anthony

2 1

[Dovecot] more info on apple mail vs dovecot 0.99
by sean finney 12 Mar '05

12 Mar '05

hey folks, i have a little more info on this problem... about my setup: i have a mail server running dovecot imap on port 143 and uw imap on 8143. all mail is delivered directly to ~/mbox. what happens: when mail talks to dovecot, every time you check new mail, it re-downloads the entire mailbox. new mail does not show up in the inbox, even after it can be confirmed delivered (via mutt on the server). the really wierd part: even though the message doesn't show up in the list of messages in the inbox, the number of new messages floating above the dock icon (and next to the combined "In" box) *does* go up! wtf?? if you switch between mailboxes, or select "rebuild mailbox", the new message shows up of course both involve resynching the entire mailbox again... my first thought was that this was some kind of wierd application bug, but i'm not so sure. with uw-imap, when you select check new mail it does not re-download the entire mailbox, but the new message does not reliably show up until you switch from one message to another in your inbox. so it seems like there's *some* kind of difference between the two servers... and here come the questions: what would cause apple mail to always download all messages from dovecot but not from uw-imap? i found the following link, is it still relevant? http://lists.freebsd.org/pipermail/freebsd-questions/2004-April/044513.html is this something that might be resolved with 1.0-stable? is there something specific i should look for in protocol dumps? would compacting mailboxes have any effect on this? anyway, thanks to everyone who's helped so far... sean

1 0

Re: [Dovecot] Bit of a Newbie Question
by Wouter Van Hemel 11 Mar '05

11 Mar '05

On Thu, 10 Mar 2005, Jud wrote: >> You have not yet told us if you actually can receive email from outside; >> both with respect to your MTA configuration and an open (i.e. not >> firewalled) internet ip. > > I will have to investigate my MTA configuration. It's not clear to me > what is meant by an "open (not firewalled) internet ip." What > can/should I do on my system to create this condition? > Well, you should have an ip that is publicly accessible for mail servers on the internet, especially for the ones you expect will forward email. If your provider has a firewall for its customers that disallows access to certain ports (such as 25 and 80), you simply can not receive email (by SMTP). Perhaps FastMail will allow you to specify a specific port, but I doubt it. IMO, it's not a good idea to run a mailserver on a residential line with a dynamic ip; likely the contract with your isp even forbids this. Ofcourse, it's up to you to decide and try anyway. >> There is no difference for dovecot. For now, I'd say rather that the >> problem is either that your MTA doesn't accept email, or that your isp >> firewalls port 25 (which is rather likely on a dynamic ip home >> connection). > > It is probably true that my isp blocks port 25; it will be easy to > determine for sure. If so, are there any solutions you can suggest? > Do you have any accounts on remote servers? Just do a 'telnet your_internet_ip 25' ... or something along those lines. If not, try an online open relay testing service such as the one ordb provides: http://www.ordb.org/submit/ Be sure to enable test feedback. It will probably tell you enough for you to find out if it can reach your server or not. >> Read the MTA logs. See if there is any connection at all. If there is, >> check what happens with the messages (refused?). If there is not, you >> either are not accepting connections on your outside interface, or your >> provider has blocked access to port 25. >> >> Did you receive any bounces? > > Yes, though I deleted them, not even thinking to read them for > information. However, it is quite simple for me to create more bounces! > ;-) > Do so, and read the actual error message. This has very little to do with dovecot...

1 0