- dovecot - dovecot.org

Marking all emails in "Trash" as opened, and also prohibiting email clients from creating new mails
by Sebastian Nielsen 10 May '20

10 May '20

Dovecot version: 2.3.7.2 (3c910f64b) (pkg shipped by: Ubuntu-Desktop 20.04) I want to accomplish 2 things in dovecot: 1: I want to force all mails inside Trash to have an "opened"/"read" flag and "Non-Recent" flag. Basically Status: RO This regardless how the flag appears, either by copying/moving the mail into trash, creating a new mail in trash, flagging email in Trash or whatever. Basically, no email in Trash should ever be able to have a recent or unread flag. I tried with a static mail filter and sieve filter to add \\seen to the email upon COPY (as mentioned here: https://dovecot.org/pipermail/dovecot/2017-November/110122.html ), but regardless how I do it, it doesn't work when Samsung Email client trashes an unread email, AND/OR also, it causes weird issues like duplicate email in the trash folder sometimes. Best would be some event filter that executes for every mail that somehow end up in Trash, that checks if \\seen is present, if not, then it will add it, on all emails in trash? But how I do to prevent the duplicate copy that appears sometimes? 2: I want to prohibit email clients from ever creating a new mail in Sent folder. If its possible to allow MOVE and/or COPY, it should be allowed, only new mail should be prohibited. (also note that external processes must be able to create new mail in Sent) HOWEVER - this prohibition must be silent - ergo the newly created email is simply discarded. No error message or error codes should be returned to IMAP client. (The reason I want this, is because I have configured my outgoing SMTP server to populate Sent, and some email clients doesn't have the option to "Don't store a copy of the email in Sent folder" resulting in duplicates) Best regards, Sebastian Nielsen

3 5

Dovecot v2.3.4.1 Debian 10.3 mbox format - Error: chdir(/var/spool/mail/domain/user) failed: Not a directory
by vik 10 May '20

10 May '20

Hi colleagues, I am trying to setup dovecot and have a strange problem. I configured it to: #dovecot -n|grep ^mail mail_gid = mail mail_location = mbox:/var/spool/mail/%d/mailboxes/%n:INBOX=/var/spool/mail/%d/%n mail_uid = mail And also setup exim4 to use it. I sent a test message and observe a mailbox file /var/spool/mail/domain/user, containing this message. But when I try to access dovecot with a client (thunderbird), client cannot fetch mail, and I observe error in the dovecot's log: May 09 23:35:51 imap(user@domain)<25179><JNFIDz2ldeOsEAE3>: Error: chdir(/var/spool/mail/domain/user) failed: Not a directory What is it, and how to solve it? Thank you. Kind regards, Viktor

1 0

ot: copy physical mail files ?
by Voytek Eymont 09 May '20

09 May '20

dumb question warning: I have two email accounts, me@tld1 and me@tld2 often, get emails intended (by me) for me@tld2 sent to me@tld1 this is purely for my own preferred record keeping preference, as I run the server, is it 'a really bad things' if I simply copy relevant mail files from /var/vmail/vmail1/tld1..../cur to /var/vmail/vmail1/tld2.../cur ? rather than forward emails as I have been doing? thanks

6 7

What's a Reasonable Inbox Size?
by Asai 09 May '20

09 May '20

Greetings, I have several users who have inboxes that are over 20 GB. Lately I have noticed Dovecot logs say it's taking over 30 seconds to sync their mailboxes. As email admins, how do you handle inboxes that are so large? Do you use mailbox types that have better performance like dbox? We're using maildir. What's a reasonable inbox size? Is 20+ GB reasonable and nothing to worry about? Thanks for any insight here. -- Asai7

7 13

Unable to disable TLSv1.3 or fallback to TLSv1.2 when 1 cipher is disabled
by Steve Egbert 09 May '20

09 May '20

I have an operational need to disable TLSv1.3 due to inadequate support to exclude certain ciphers. Much to my dismay, the `ssl_protocols` had been renamed and re-functionalized into `ssl_min_protocol`. Now, there is no way to exclude a specific group of one or more TLS versions. For a new bug report, I think we need two new settings: * `ssl_tls13_ciphersuite` and * `ssl_tls10_cipher` settings introduced into Dovecot for better granularity. ALong with support for fallback to TLSv1.2 as outlined in https://bugzilla.mozilla.org/show_bug.cgi?id=1250568 I'm still being hammered with the following error with Thunderbird 76.0b3, Dovecot 2.3.4.1-5+deb10u1, Debian 11: May 8 11:15:47 ns1 dovecot: imap-login: Debug: SSL: where=0x10, ret=1: before SSL initialization May 8 11:15:47 ns1 dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: before SSL initialization May 8 11:15:47 ns1 dovecot: imap-login: Debug: SSL: where=0x2002, ret=-1: before SSL initialization May 8 11:15:47 ns1 dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: before SSL initialization May 8 11:15:47 ns1 dovecot: imap-login: Debug: SSL alert: where=0x4008, ret=582: fatal protocol version May 8 11:15:47 ns1 dovecot: imap-login: Debug: SSL: where=0x2002, ret=-1: error May 8 11:15:47 ns1 dovecot: imap-login: Debug: SSL error: SSL_accept() failed: error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol May 8 11:15:47 ns1 dovecot: imap-login: Disconnected (disconnected before auth was ready, waited 0 secs): user=<>, rip=XX.XX.XX.XX, lip=XX.XX.XX.XX, TLS handshaking: SSL_accept() failed: error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol, session=<GN/GeCSlYuhEhl2U> May 8 11:15:47 ns1 dovecot: imap-login: Debug: SSL error: SSL_accept() syscall failed: Invalid argument This occurred when specifying one TLSv1.3 cipher to be excluded in ssl_cipher via an exclamation mark. On a side note of IMAP client, Latest Mozilla Thunderbird had its pref setting security.tls.version.fallback-limit to 4 (TLSv1.3), of which I have adjusted it to 3 (TLSv1.2) and it .... works when Dovecot is set to TLSv1.2. (Details of Thunderbird security.tls.version.fallback-limit is given in http://kb.mozillazine.org/Security.tls.version.* ) Steve

2 3

dovecot-lda quota warning email add BCC
by Admin Beckspaced 08 May '20

08 May '20

Dear dovecot users, I have setup doveot with quota warning. Once a quota wearning is reached a shell script is called which then sends an email to the user via dovecot LDA this is the command in the shell script: /usr/lib/dovecot/dovecot-lda -d $USER -o "plugin/quota=dict:User quota::noenforcing:proxy::quota" I already have looked in the docs: https://wiki.dovecot.org/LDA but can't find an option to add a BCC I would like to receive a copy of the quota warning email so I also get notified and know if user mailboxes get filled up. How could I achieve that? thanks & greetings Becki

1 1

courier-dovecot-migrate.pl and courier-5: UTF-8 flag
by Maxim Nikulin 08 May '20

08 May '20

Hi, Courier to dovecot migration script https://dovecot.org/tools/courier-dovecot-migrate.pl referenced at the https://wiki.dovecot.org/Migration/Courier page has a couple of problems. One of them is that the script could not process courierpop3dsizelist generated by courier-5. File format has been changed a bit to mark UTF-8 messages with an additional attribute. Is it safe to ignore such flag or its value should be stored somewhere for dovecot? Internally courier assumes false value during migration from the previous format version (v2 to v3). --- courier-dovecot-migrate.pl.orig 2012-07-28 17:14:20.000000000 +0000 +++ courier-dovecot-migrate.pl 2020-05-08 09:54:53.249214022 +0000 @@ -170,8 +170,9 @@ my $pop3_fname = "$dir/$courier_pop3_uidfile"; open( $f, $pop3_fname ) || die $!; my $pop3_hdr = <$f>; - if ( $pop3_hdr =~ /^\/2 (\d+) (\d+)$/ ) { + if ( $pop3_hdr =~ /^\/[23] (\d+) (\d+)$/ ) { # /2 <next uid> <uidvalidity> + # /3 <next uid> <uidvalidity> $_ = <$f>; } elsif ( $pop3_hdr =~ /^\/1 (\d+)$/ ) { @@ -193,9 +194,13 @@ chomp $_; $line++; - my ( $full_fname, $fsize, $uid, $uidv ); + my ( $full_fname, $fsize, $uid, $uidv, $_is_utf8 ); - if ( /^([^ ]+) (\d+) (\d+):(\d+)$/ ) { + if ( /^([^ ]+) (\d+) (\d+):(\d+):(\d+)$/ ) { + # v3 + ( $full_fname, $fsize, $uid, $uidv, $_is_utf8 ) = ( $1, $2, $3, $4, $5 ); + } + elsif ( /^([^ ]+) (\d+) (\d+):(\d+)$/ ) { # v2 ( $full_fname, $fsize, $uid, $uidv ) = ( $1, $2, $3, $4 ); }

1 0

Seive + Spamprobe terminates with signal 6
by Mark Constable 08 May '20

08 May '20

Ubuntu 20.04, Dovecot 2.3.7.2, SpamProbe v1.4d. For the past weeks my sieve filters that call spamprobe have been crashing out for some users. I have a dozen similar server setups and this is not happening on any of the other servers and it was working just fine for a year up until recently. This particular server is quite busy. There is plenty of disk space and inode usage is about 2.5%. Permissions look the same as on the other servers. I'm hoping someone might have a suggestion as to the cause of this? Apr 22 10:31:24 mail dovecot: lmtp(xxxx(a)example.com)<33016><oCuzElyQn174gAAA4xLzLg>: Error: program exec:/etc/dovecot/sieve/spamprobe (38010): Terminated abnormally with signal 6 Apr 22 10:31:24 mail dovecot: lmtp(xxxx(a)example.com)<33016><oCuzElyQn174gAAA4xLzLg>: Error: sieve: global: line 6: execute action: failed to execute to program `spamprobe': refer to server log for more information. [2020-04-22 10:31:24] ~ cat /etc/dovecot/sieve/global.sieve require ["vnd.dovecot.execute", "fileinto", "envelope", "variables", "editheader"]; if header :contains "from" ["root@", "daemon@", "postmaster@"] { fileinto "Trash"; } elsif header :contains "to" ["root@", "daemon@", "postmaster@"] { fileinto "Trash"; } if envelope :localpart :matches "to" "*" { set "lhs" "${1}"; } if envelope :domain :matches "to" "*" { set "rhs" "${1}"; } execute :pipe :output "SCORE" "spamprobe" ["-c", "-d", "/home/u/${rhs}/home/${lhs}/.spamprobe", "receive"]; addheader :last "X-Spam" "${SCORE}"; if header :matches "X-Spam" "SPAM*" { fileinto "Junk"; } plugin { imapsieve_mailbox1_before = file:/etc/dovecot/sieve/retrain-as-spam.sieve imapsieve_mailbox1_causes = COPY imapsieve_mailbox1_name = Junk imapsieve_mailbox2_before = file:/etc/dovecot/sieve/retrain-as-good.sieve imapsieve_mailbox2_causes = COPY imapsieve_mailbox2_from = Junk imapsieve_mailbox2_name = * listescape_char = mail_log_cached_only = yes mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size sieve_before = file:/etc/dovecot/sieve/global.sieve sieve_dir = ~/sieve sieve_execute_bin_dir = /etc/dovecot/sieve sieve_extensions = +notify +imapflags +vacation-seconds sieve_global_dir = /etc/dovecot/sieve/ sieve_global_extensions = +vnd.dovecot.debug +editheader +vnd.dovecot.pipe +vnd.dovecot.execute sieve_max_redirects = 30 sieve_max_script_size = 1M sieve_pipe_bin_dir = /etc/dovecot/sieve sieve_plugins = sieve_imapsieve sieve_extprograms sieve_quota_max_scripts = 0 sieve_quota_max_storage = 0 sieve_redirect_envelope_from = recipient sieve_vacation_default_period = 60s sieve_vacation_max_period = 0 sieve_vacation_min_period = 5s sieve_vacation_send_from_recipient = yes } -- Mark Constable 0419 530 037 https://spiderweb.com.au

2 2

auto: mdbox is automatically recognized as sdbox
by 刘莹莹 08 May '20

08 May '20

Hi:   I did a simple test with Dovecot-2.3.9:            First step : A test account uses mdbox format to store emails with 'mail_location = mdbox:%h/%Ld/%Ln:ALT=%h/altstorage/%Ld/%Ln',           Second step: I adjust 'mail_location = auto:'  and dovecot restart           Third step: telnet 127.0.0.1 143  then log in and fetch emails.     When I fetch email data , the log shows that the storage format is automatically recognized as sdbox and index is Rebuild, as the result, all emails is lost： May 08 12:22:15 mail imap(q2(a)a.com)<30883><+nFkVxul5oF/AAAB>: Debug: Mailbox INBOX: Mailbox opened because: SELECT May 08 12:22:15 mail imap(q2(a)a.com)<30883><+nFkVxul5oF/AAAB>: Warning: sdbox /srv/vmail/a.com/q2/mailboxes/INBOX/dbox-Mails: Rebuilding index May 08 12:23:12 mail auth-worker(30882): Debug: conn unix:auth-worker (pid=29526,uid=12348): Disconnected: Connection closed (fd=-1) May 08 12:24:19 mail imap(q2(a)a.com)<30883><+nFkVxul5oF/AAAB>: Info: Logged out in=50 out=881 deleted=0 expunged=0 trashed=0 hdr_count=0 hdr_bytes=0 body_count=0 body_bytes=0          I am confused why mdbox and sdbox cannot be recognized automatically or there are same problem with my test ??   Thanks

1 0

SPECIAL-USE and Outlook folders
by Alessio Cecchi 08 May '20

08 May '20

Hi, in the recent version of Outlook seem impossible to remap the Sent (but also Drafts) folders in order to show as the localized name. I have enabled the "special_use" in 10-mailbox.conf but still is not working: namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Spam { auto = subscribe special_use = \Junk } mailbox Trash { auto = subscribe special_use = \Trash } prefix = separator = / } On Internet someone suggest to add the imap_capability "XLIST" but I haven't understand if it the solutions. Does anyone have any suggestions? Thanks -- Alessio Cecchi Postmaster @ http://www.qboxmail.it https://www.linkedin.com/in/alessice

1 0

Unable to set ssl_min_protocol=TLSv1.3
by Thomas Schneider 07 May '20

07 May '20

Good $daytime, as per the recommendations of Mozilla’s SSL config generator[0], I wanted to set ssl_min_protocol=TLSv1.3 in my dovecot config. This produced the error: imap-login: Error: Failed to initialize SSL server context: Unknown ssl_min_protocol setting 'TLSv1.3' After some digging, I found the function that parses this setting in src/lib-ssl-iostream/iostream-openssl-common.c (openssl_min_protocol_to_options()), which maps strings such as SSL_TXT_TLSV1_2 == "TLSv1.2" (from openssl/ssl.h) to the appropriate version and option defines of OpenSSL. Said openssl/ssl.h does not contain a SSL_TXT_TLSV1_3, so it’s no surprise that dovecot does not know this setting. As a quick fix, I could probably extend struct {…} protocol_versions[] (in iostream-openssl-common.c again) with an appropriate "TLSv1.3" entry (and send a patch), though I would also suggest to OpenSSL to add a SSL_TXT_TLSV1_3 define. Unfortunately, I have not found a config setting in dovecot to set SSL_OP_NO_TLSv1_2, or in fact any way to enforce TLS >=1.3, except maybe via the cipher list string. I think that dovecot should support setting this, and I’d also gladly provide a patch. Thanks, Thomas [0]: https://ssl-config.mozilla.org/#server=dovecot&version=2.3.4.1&config=moder…

3 2

Urgent - Help needed
by Kishore Potnuru 07 May '20

07 May '20

Hi All, I am having dovecot installed on my redhat 7. There was an email came to my "Maildir" directory as per the logs. There is an application reading the emails from the Maildir inbox. I have the log stating the email has been delivered to maildir folder below. But the application team says that they didn't receive the email. The emails is also not there in the Maildir folder. Is there any way/log we can see, from Maildir folder, whether the application picked the email? or where that email went (to any server) from the Maildir folder? any such verification is possible? ============= [root@testserver log]# grep EB6A2206818 temp.log May 5 07:35:20 testserver postfix/smtpd[29839]: EB6A2206818: client=test-server May 5 07:35:20 testserver postfix/cleanup[29842]: EB6A2206818: message-id=<AM0PR01MB42257878E93ED4C6> May 5 07:35:21 testserver postfix/qmgr[29801]: EB6A2206818: from=< tester1(a)testing.com>, size=13614, nrcpt=1 (queue active) May 5 07:35:21 testserver postfix/virtual[29843]: EB6A2206818: to=< selfemail(a)testing2.com>, relay=virtual, delay=0.05, delays=0.05/0/0/0, dsn=2.0.0, status=sent (delivered to maildir) May 5 07:35:21 testserver postfix/qmgr[29801]: EB6A2206818: removed ============== Please help me... Thanks & Regards, Kishore Potnuru

7 17

Re: Urgent - Help needed
by Kishore Potnuru 05 May '20

05 May '20

Thank you for the reply. Actually there are 7 emails sent by the user. 2 emails are delivered successfully. 5 are missing. All are having the same log with virtual. At present I might not be able to change those settings.... Is there any way to verify they are delivered to them or not? do we have any logs to verify the same? On Tue, May 5, 2020 at 9:16 AM Zhang Huangbin <zhb(a)iredmail.org> wrote: > > > On May 5, 2020, at 4:06 PM, Kishore Potnuru <kishore.reachme(a)gmail.com> > wrote: > > > > May 5 07:35:21 testserver postfix/virtual[29843]: EB6A2206818: to=< > selfemail(a)testing2.com>, relay=virtual, delay=0.05, delays=0.05/0/0/0, > dsn=2.0.0, status=sent (delivered to maildir) > > According to the log, this user is using Postfix builtin transport > "virtual" as LDA, not Dovecot LDA. Fixing this should get your email > delivered correctly. > > ---- > Zhang Huangbin, founder of iRedMail project: https://www.iredmail.org/ > >

1 0

Dovecot LDAP/AD with exim as mta
by Benoît PELISSIER 05 May '20

05 May '20

Hi, I have done configuration dovecot/exim/samba4ad. I use dovecot-lda not exim to deliver mail. And dovecot to authentify users. I have users with mail address on AD. When i sent mail to user mail address, its working. I have distribution group or group with mail address on AD and users as member of this groups. But when i send mail to group mail address, its not working Dovecot-lda can do it ? Or i need do it with exim (or postfix) ? Thanks Benoît

4 4

Dovecot IMAPS : Thunderbird SSL cert issue / Evolution OK
by hanasaki＠gmail.com 05 May '20

05 May '20

Recently thunderbird and Dovecot IMAPS cannot agree on SSL however Evolution, on the exact same system, is working fine with the same accounts. Tried recreating the Dovecot cert and also the thunderbird accounts from scratch. The OpenSSL raw client works fine as well. Would someone also confirm the openssl commands to create a selfsigned cert for dovecot imaps. They cert created does work with evolution; just not thunderbird. Thoughts? Apr 8 18:10:18 hh dovecot: imap-login: Debug: SSL error: SSL_accept() failed: error:14094412:SSL routines:ssl3_read_bytes:sslv3 alert bad certificate: SSL alert number 42 Apr 8 18:10:18 hh dovecot: imap-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=000, lip=0000 TLS handshaking: SSL_accept() failed: error:14094412:SSL routines:ssl3_read_bytes:sslv3 alert bad certificate: SSL alert number 42, session=<--> Apr 8 18:10:19 hh dovecot: imap-login: Debug: SSL: where=0x10, ret=1: before SSL initialization Apr 8 18:10:19 hh dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: before SSL initialization Apr 8 18:10:19 hh dovecot: imap-login: Debug: SSL: where=0x2002, ret=-1: before SSL initialization Apr 8 18:10:19 hh dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: before SSL initialization Apr 8 18:10:19 hh dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS read client hello Apr 8 18:10:19 hh dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write server hello Apr 8 18:10:19 hh dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write change cipher spec Apr 8 18:10:19 hh dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: TLSv1.3 write encrypted extensions Apr 8 18:10:19 hh dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write certificate Apr 8 18:10:19 hh dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: TLSv1.3 write server certificate verify Apr 8 18:10:19 hh dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write finished Apr 8 18:10:19 hh dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: TLSv1.3 early data Apr 8 18:10:19 hh dovecot: imap-login: Debug: SSL: where=0x2002, ret=-1: TLSv1.3 early data Apr 8 18:10:19 hh dovecot: imap-login: Debug: SSL: where=0x2002, ret=-1: TLSv1.3 early data Apr 8 18:10:19 hh dovecot: imap-login: Debug: SSL: where=0x2002, ret=-1: TLSv1.3 early data Apr 8 18:10:19 hh dovecot: imap-login: Debug: SSL: where=0x2002, ret=-1: TLSv1.3 early data Apr 8 18:10:19 hh dovecot: imap-login: Debug: SSL alert: where=0x4004, ret=554: fatal bad certificate Apr 8 18:10:19 hh dovecot: imap-login: Debug: SSL: where=0x2002, ret=-1: error Apr 8 18:10:19 hh dovecot: imap-login: Debug: SSL error: SSL_accept() failed: error:14094412:SSL routines:ssl3_read_bytes:sslv3 alert bad certificate: SSL alert number 42 Apr 8 18:10:19 firewall dovecot: imap-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=000, lip=00, TLS handshaking: SSL_accept() failed: error:14094412:SSL routines:ssl3_read_bytes:sslv3 alert bad certificate: SSL alert number 42, session=<---> reference http://forums.debian.net/viewtopic.php?f=5&t=145849

6 12

Is It possbile to convert to DBox or MDBox on a per user basis?
by Asai 04 May '20

04 May '20

Greetings, Is It possbile to convert to DBox or MDBox on a per user basis? If so, can someone point me to the correct documentation? Thank you, -- Asai

2 1

Issue with doveadm backup
by Asai 02 May '20

02 May '20

Greetings, Lately I've been seeing this error pop up when running a nightly cron to a backup share with doveadm: Error: stat(/vmail/domain.tld/user/.dovecot-box-sync.lock/tmp) failed: Not a directory: 1 Time(s) This is the command: doveadm backup -u user(a)domain.tld maildir:backupshare/daily/domain.tld/user Our main vmail directory is on an NFS share and seems to be working fine. This has only occurred recently. Can anyone offer any insights into what this is and fixing it if need be? -- Asai

1 0

Problems during replication
by Francis Augusto Medeiros-Logeay 02 May '20

02 May '20

Hi, I migrated my dovecot instance to a new server. I moved the mail directories, databases, etc. Replication is on, and I keep having these errors: May 02 16:19:45 dsync-local(francis(a)francisaugusto.com): Error: Couldn't lock /var/mail/vmail/francisaugusto.com/francis//.dovecot-sync.lock: fcntl(/var/mail/vmail/francisaugusto.com/francis//.dovecot-sync.lock, write-lock, F_SETLKW) locking failed: Timed out after 30 seconds (WRITE lock held by pid 178) May 02 16:19:45 doveadm: Error: Couldn't lock /var/mail/vmail/medeiros.co/inis//.dovecot-sync.lock: fcntl(/var/mail/vmail/medeiros.co/inis//.dovecot-sync.lock, write-lock, F_SETLKW) locking failed: Timed out after 30 seconds (WRITE lock held by pid 185) See the errors are both from dsync-local and doveadm. Any tips on how to fix this? Best, Francis

1 0

sender rewriting scheme
by Mathieu Gosset 01 May '20

01 May '20

Hello, I would like to know if dovecot/pigeonhole provide a way to do sieve redirection with sender rewriting scheme (srs)? I apologize in advance if that e-mail address isn't meant for assistance, but I've asked on the official irc channel on freenode and was told to direct my query to dovecot(a)dovecot.org, I hope you won't mind. Thanking you in advance Best Regards Mathieu Gosset

2 2

Shared folder replication - query - can it be replicated?
by Daniel Botting 01 May '20

01 May '20

Hi, Further to my earlier posting to the mailing list this morning regarding replicating of public namespaces is it possible that a shared name space can be replicated: https://wiki.dovecot.org/SharedMailboxes/Shared We use LDAP, the thought being that an LDAP service account is created and the corresponding mailbox is shared to other mail users on the server. Kind regards Daniel

1 0

Public folder replication ( not replicating) - roadmap query
by Daniel Botting 01 May '20

01 May '20

Hi, We have a server pair running Dovecot 2.3.10 (latest stable) version directly from repo.dovecot.org and have mailbox and sieve replication working as required in production. I have setup a test pair with the exact same configuration and on each server setup public name space for a mailbox address such as jobs@ where multiple users would need to subscribe to this to view recruitment emails. This is not replicating as per the advice on the below url: - https://wiki.dovecot.org/Replication Is there an easily maintainable workaround at this time and is this on the roadmap for the developers, if so what time scale is being envisaged? Kind regards Daniel

1 0

trying to authenticate postfix against Dovecot 2.3.4.1 passwd-file, using lmtp
by kelly 29 Apr '20

29 Apr '20

Sorry for all the notes; I'm trying to have postfix 3.4.8, trying to authenticate postfix against Dovecot 2.3.4.1 passwd-file, using lmtp. Not sure if I'm failing because of a smtp failure or I'm not getting authenticated by dovecot. main.cf virtual_transport=lmtp:unix:private/dovecot-lmtp _*postfix log*_ connect from unknown[192.168.212.227] Apr 28 13:42:14 mail3 postfix/smtpd[21859]: lost connection after EHLO from unknown[192.168.212.227] Apr 28 13:42:14 mail3 postfix/smtpd[21859]: disconnect from unknown[192.168.212.227] ehlo=2 starttls=1 commands=3 I keep getting smtp timed out, it takes a while, but does time out. _*Using openssl s_client -connect 192.168.0.242:25 -starttls smtp*_ subject=/C=US/ST=CA/L=Fullerton/O=xxxx Law Group/CN=mail.xxxxlawgroup.com/emailAddress=postmaster@xxxxlawgroup.com issuer=/C=US/ST=CA/L=Fullerton/O=xxxx Law Group/CN=mail.xxxxlawgroup.com/emailAddress=postmaster@xxxxlawgroup.com --- No client certificate CA names sent Peer signing digest: SHA512 Server Temp Key: ECDH, P-256, 256 bits --- SSL handshake has read 2717 bytes and written 468 bytes --- New, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES256-GCM-SHA384 Server public key is 4096 bit Secure Renegotiation IS supported Compression: NONE Expansion: NONE No ALPN negotiated SSL-Session: Protocol : TLSv1.2 Cipher : ECDHE-RSA-AES256-GCM-SHA384 Session-ID: 2F32869DCC5511285AA7D99ABAAD34C1E42EB04A7AA704C5EBC801C2625ECB7A Session-ID-ctx: Master-Key: F8D92A918AC14D31B252D981228A0AA3C0BCA379B9D12DD6E795092C8390382DA09D640B2F24AD8F279C13E71DF86434 Key-Arg : None PSK identity: None PSK identity hint: None SRP username: None TLS session ticket lifetime hint: 7200 (seconds) TLS session ticket: 0000 - 89 e1 b7 19 14 7b d6 85-88 cc 8d f0 e0 45 6f 23 .....{.......Eo# 0010 - 34 b7 30 ec 99 39 d9 98-3f 5d 70 b3 f3 fe 0a 13 4.0..9..?]p..... 0020 - 77 3c 2c 20 22 b4 62 71-ec 02 b4 ee 4e 35 78 ef w<, ".bq....N5x. 0030 - f2 2c 7d 01 e3 51 7c 2e-c4 78 65 37 d6 ef 60 32 .,}..Q|..xe7..`2 0040 - f6 62 bc e5 ba fc 82 1b-37 0a de c9 b1 82 99 f5 .b......7....... 0050 - de 6c d5 c1 56 25 5a 2a-27 8d a3 6a 8a bd 37 d8 .l..V%Z*'..j..7. 0060 - 11 65 0d fd 89 c3 e2 86-43 89 9e b9 c2 b7 a4 44 .e......C......D 0070 - dc f3 8b 94 8e 41 37 d3-32 ca 2c 4e 65 6b 1c f9 .....A7.2.,Nek.. 0080 - 04 d0 45 32 8a 2d 67 8d-36 05 23 4a 58 c2 d8 b7 ..E2.-g.6.#JX... 0090 - 65 ba e0 8d 8b 85 9c c2-45 31 78 33 86 d1 bf 1f e.......E1x3.... Start Time: 1588106358 Timeout : 300 (sec) Verify return code: 18 (self signed certificate) --- 250 CHUNKING helo 401 Syntax: HELO hostname helo mail3.xxxxlawgroup.com 250 mail3.xxxxlawgroup.com _*Dovecot Log during client login attempt*_ Apr 28 13:33:17 auth: Debug: Loading modules from directory: /usr/lib/dovecot/modules/auth Apr 28 13:33:17 auth: Debug: Module loaded: /usr/lib/dovecot/modules/auth/lib20_auth_var_expand_crypt.so Apr 28 13:33:17 auth: Debug: Module loaded: /usr/lib/dovecot/modules/auth/libdriver_mysql.so Apr 28 13:33:17 auth: Debug: Module loaded: /usr/lib/dovecot/modules/auth/libdriver_pgsql.so Apr 28 13:33:17 auth: Debug: Read auth token secret from /var/run/dovecot/auth-token-secret.dat Apr 28 13:33:17 auth: Debug: passwd-file /etc/dovecot/users: Read 3 users in 0 secs Apr 28 13:33:17 auth: Debug: auth client connected (pid=21786) Apr 28 13:33:19 auth: Debug: client in: AUTH 1 PLAIN service=imap secured=tls session=w8T7vV+keNHAqNTj lip=192.168.0.242 rip=192.168.212.227 lport=993 rport=53624 ssl_cipher=ECDHE-RSA-AES256-GCM-SHA384 ssl_cipher_bits=256 ssl_pfs=KxECDHE ssl_protocol=TLSv1.2 resp=<hidden> Apr 28 13:33:19 auth-worker(21788): Debug: Loading modules from directory: /usr/lib/dovecot/modules/auth Apr 28 13:33:19 auth-worker(21788): Debug: Module loaded: /usr/lib/dovecot/modules/auth/lib20_auth_var_expand_crypt.so Apr 28 13:33:19 auth-worker(21788): Debug: Module loaded: /usr/lib/dovecot/modules/auth/libdriver_mysql.so Apr 28 13:33:19 auth-worker(21788): Debug: Module loaded: /usr/lib/dovecot/modules/auth/libdriver_pgsql.so Apr 28 13:33:19 auth-worker(21788): Debug: passwd-file /etc/dovecot/users: Read 3 users in 0 secs Apr 28 13:33:19 auth-worker(21788): Debug: pam(user1(a)xxxxlawgroup.com,192.168.212.227,<w8T7vV+keNHAqNTj>): lookup service=dovecot Apr 28 13:33:19 auth-worker(21788): Debug: pam(user1(a)xxxxlawgroup.com,192.168.212.227,<w8T7vV+keNHAqNTj>): #1/1 style=1 msg=Password: Apr 28 13:33:21 auth-worker(21788): Info: pam(user1(a)xxxxlawgroup.com,192.168.212.227,<w8T7vV+keNHAqNTj>): pam_authenticate() failed: Authentication failure (Password mismatch?) Apr 28 13:33:21 auth: Debug: passwd-file(user1(a)xxxxlawgroup.com,192.168.212.227,<w8T7vV+keNHAqNTj>): lookup: user=user1(a)xxxxlawgroup.com file=/etc/dovecot/users Apr 28 13:33:21 auth: Debug: client passdb out: OK 1 user=user1(a)xxxxlawgroup.com Apr 28 13:33:21 auth: Debug: master in: REQUEST 570163201 21786 1 83383e6a14e2c97c394478e56e4e7fd9 session_pid=21789 request_auth_token Apr 28 13:33:21 auth-worker(21788): Debug: passwd(user1(a)xxxxlawgroup.com,192.168.212.227,<w8T7vV+keNHAqNTj>): lookup Apr 28 13:33:21 auth-worker(21788): Info: passwd(user1(a)xxxxlawgroup.com,192.168.212.227,<w8T7vV+keNHAqNTj>): unknown user Apr 28 13:33:21 auth: Debug: passwd-file(user1(a)xxxxlawgroup.com,192.168.212.227,<w8T7vV+keNHAqNTj>): lookup: user=user1(a)xxxxlawgroup.com file=/etc/dovecot/users Apr 28 13:33:21 auth: Debug: master userdb out: USER 570163201 user1(a)xxxxlawgroup.com auth_token=918dceaf840599ad8132ae793a11ab5b9d17bb8c Apr 28 13:33:21 imap-login: Info: Login: user=<user1(a)xxxxlawgroup.com>, method=PLAIN, rip=192.168.212.227, lip=192.168.0.242, mpid=21789, TLS, session=<w8T7vV+keNHAqNTj> Apr 28 13:33:21 imap(user1(a)xxxxlawgroup.com)<21789><w8T7vV+keNHAqNTj>: Debug: Added userdb setting: plugin/=yes Apr 28 13:33:21 imap(user1(a)xxxxlawgroup.com)<21789><w8T7vV+keNHAqNTj>: Debug: Effective uid=1001, gid=1001, home=/srv/vmail/user1(a)xxxxlawgroup.com Apr 28 13:33:21 imap(user1(a)xxxxlawgroup.com)<21789><w8T7vV+keNHAqNTj>: Debug: Home dir not found: /srv/vmail/user1(a)xxxxlawgroup.com Apr 28 13:33:21 imap(user1(a)xxxxlawgroup.com)<21789><w8T7vV+keNHAqNTj>: Debug: Namespace inbox: type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=mbox:~/mail Apr 28 13:33:21 imap(user1(a)xxxxlawgroup.com)<21789><w8T7vV+keNHAqNTj>: Debug: mbox: INBOX defaulted to /srv/vmail/user1(a)xxxxlawgroup.com/mail/inbox Apr 28 13:33:21 imap(user1(a)xxxxlawgroup.com)<21789><w8T7vV+keNHAqNTj>: Debug: fs: root=/srv/vmail/user1(a)xxxxlawgroup.com/mail, index=, indexpvt=, control=, inbox=/srv/vmail/user1(a)xxxxlawgroup.com/mail/inbox, alt= Apr 28 13:33:21 imap(user1(a)xxxxlawgroup.com)<21789><w8T7vV+keNHAqNTj>: Info: Connection closed (IDLE running for 0.001 + waiting input for 0.001 secs, 2 B in + 10+10 B out, state=wait-input) in=11 out=387 deleted=0 expunged=0 trashed=0 hdr_count=0 hdr_bytes=0 body_count=0 body_bytes=0 _*The imap client logon looks to be fine;*_ Apr 27 16:57:02 auth-worker(17516): Debug: pam(user1(a)xxxxlawgroup.com,192.168.212.227,<5oeueE6k4uvAqNTj>): lookup service=dovecot Apr 27 16:57:02 auth-worker(17516): Debug: pam(user1(a)xxxxlawgroup.com,192.168.212.227,<5oeueE6k4uvAqNTj>): #1/1 style=1 msg=Password: Apr 27 16:57:04 auth-worker(17516): Info: pam(user1(a)xxxxlawgroup.com,192.168.212.227,<5oeueE6k4uvAqNTj>): pam_authenticate() failed: Authentication failure (Password mismatch?) Apr 27 16:57:04 auth: Debug: passwd-file(user1(a)xxxxlawgroup.com,192.168.212.227,<5oeueE6k4uvAqNTj>): lookup: user=user1(a)xxxxlawgroup.com file=/etc/dovecot/users Apr 27 16:57:04 auth: Debug: client passdb out: OK 1 user=user1(a)xxxxlawgroup.com Apr 27 16:57:04 auth: Debug: master in: REQUEST 3141009409 17512 1 ee216d7c96d9d2faeb794c94747d479a session_pid=17517 request_auth_token Apr 27 16:57:04 auth-worker(17516): Debug: passwd(user1(a)xxxxlawgroup.com,192.168.212.227,<5oeueE6k4uvAqNTj>): lookup Apr 27 16:57:04 auth-worker(17516): Info: passwd(user1(a)xxxxlawgroup.com,192.168.212.227,<5oeueE6k4uvAqNTj>): unknown user Apr 27 16:57:04 auth: Debug: passwd-file(user1(a)xxxxlawgroup.com,192.168.212.227,<5oeueE6k4uvAqNTj>): lookup: user=user1(a)xxxxlawgroup.com file=/etc/dovecot/users Apr 27 16:57:04 auth: Debug: master userdb out: USER 3141009409 user1(a)xxxxlawgroup.com auth_token=3866c7fac33f25e817f9d95c494a13343942f60d Apr 27 16:57:04 imap-login: Info: Login: user=<user1(a)xxxxlawgroup.com>, method=PLAIN, rip=192.168.212.227, lip=192.168.0.242, mpid=17517, TLS, session=<5oeueE6k4uvAqNTj> Apr 27 16:57:04 imap(user1(a)xxxxlawgroup.com)<17517><5oeueE6k4uvAqNTj>: Debug: Added userdb setting: plugin/=yes Apr 27 16:57:04 imap(user1(a)xxxxlawgroup.com)<17517><5oeueE6k4uvAqNTj>: Debug: Effective uid=1001, gid=1001, home=/srv/vmail/user1(a)xxxxlawgroup.com Apr 27 16:57:04 imap(user1(a)xxxxlawgroup.com)<17517><5oeueE6k4uvAqNTj>: Debug: Home dir not found: /srv/vmail/user1(a)xxxxlawgroup.com Apr 27 16:57:04 imap(user1(a)xxxxlawgroup.com)<17517><5oeueE6k4uvAqNTj>: Debug: Namespace inbox: type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=mbox:~/mail Apr 27 16:57:04 imap(user1(a)xxxxlawgroup.com)<17517><5oeueE6k4uvAqNTj>: Debug: mbox: INBOX defaulted to /srv/vmail/user1(a)xxxxlawgroup.com/mail/inbox Apr 27 16:57:04 imap(user1(a)xxxxlawgroup.com)<17517><5oeueE6k4uvAqNTj>: Debug: fs: root=/srv/vmail/user1(a)xxxxlawgroup.com/mail, index=, indexpvt=, control=, inbox=/srv/vmail/user1(a)xxxxlawgroup.com/mail/inbox, alt= _*User test on dovecot*_ _*root@mail3:/etc/dovecot# doveadm user user1(a)xxxxlawgroup.com*_ field value uid vmail gid vmail home /srv/vmail/user1(a)xxxxlawgroup.com mail mbox:~/mail _*root@mail3:/etc/dovecot# doveadm user user2(a)xxxxlawgroup.com*_ field value uid vmail gid vmail home /srv/vmail/user2(a)xxxxlawgroup.com mail mbox:~/mail _*log of test*_ r 28 12:37:53 auth-worker(21333): Debug: passwd(user1(a)xxxxlawgroup.com): lookup Apr 28 12:37:53 auth-worker(21333): Info: passwd(user1(a)xxxxlawgroup.com): unknown user Apr 28 12:37:53 auth: Debug: passwd-file(user1(a)xxxxlawgroup.com): lookup: user=user1(a)xxxxlawgroup.com file=/etc/dovecot/users Apr 28 12:37:53 auth: Debug: userdb out: USER 1 user1(a)xxxxlawgroup.com Apr 28 12:38:04 auth: Debug: master in: USER 1 user2(a)xxxxlawgroup.com service=doveadm debug Apr 28 12:38:04 auth-worker(21333): Debug: passwd(user2(a)xxxxlawgroup.com): lookup Apr 28 12:38:04 auth-worker(21333): Info: passwd(user2(a)xxxxlawgroup.com): unknown user Apr 28 12:38:04 auth: Debug: passwd-file(user2(a)xxxxlawgroup.com): lookup: user=user2(a)xxxxlawgroup.com file=/etc/dovecot/users Apr 28 12:38:04 auth: Debug: userdb out: USER 1 user2(a)xxxxlawgroup.com _*Debian 10.2 Buster*_ _*Dovecot 2.3.4.1 (installed using apt)*_ # 2.3.4.1 (f79e8e7e4): /etc/dovecot/dovecot.conf # Pigeonhole version 0.5.4 () # OS: Linux 4.19.0-6-amd64 x86_64 Debian 10.3 # Hostname: mail3.xxxxlawgroup.com auth_debug = yes auth_mechanisms = plain login auth_verbose = yes debug_log_path = /var/log/dovecot.log disable_plaintext_auth = no info_log_path = /var/log/dovecot.log log_path = /var/log/dovecot.log login_greeting = xxxx xxxxx Dovecot ready. mail_debug = yes mail_gid = vmail mail_home = /srv/vmail/%u mail_location = mbox:~/mail mail_privileged_group = vmail mail_uid = vmail namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = / } passdb { driver = pam } passdb { args = username_format=%u /etc/dovecot/users driver = passwd-file } plugin { sieve = file:~/sieve;active=~/.dovecot.sieve } protocols = " imap lmtp pop3" service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } } service lmtp { unix_listener lmtp { group = postfix mode = 0666 user = postfix } } ssl_cert = </etc/ssl/certs/mail.xxxxlawgroup.com.pem ssl_dh = # hidden, use -P to show it ssl_key = # hidden, use -P to show it userdb { driver = passwd } userdb { args = username_format=%u /etc/dovecot/users driver = passwd-file } verbose_proctitle = yes protocol lmtp { postmaster_address = postmaster(a)xxxxlawgroup.com } _*On the postfix side:*_ *main.cf* *ver 3.4.8* smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU) biff = no append_dot_mydomain = no readme_directory = no compatibility_level = 2 smtpd_tls_cert_file=/etc/ssl/certs/mail.xxxxlawgroup.com.pem smtpd_tls_key_file=/etc/ssl/private/mail.xxxxlawgroup.com.key smtpd_use_tls=yes smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache smtpd_relay_restrictions = permit_mynetworks permit_sasl_authenticated defer_unauth_destination myhostname = mail3.xxxxlawgroup.com myorigin = /etc/mailname mailbox_size_limit = 0 recipient_delimiter = + inet_protocols = all inet_interfaces = 127.0.0.1, 192.168.0.242 mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128 23.120.233.17 192.168.0.0/24 192.168.39.0/24 192.168.14.0/24 192.168.212.0/24 mydestination = localhost smtpd_recipient_restrictions = permit_sasl_autheticated permit_mynetworks reject_unauth_destination relayhost = [192.168.0.253]:587 soft_bounce=yes *virtual_transport=lmtp:unix:private/dovecot-lmtp* *virtual_mailbox_domains = xxxxlawgroup.com* *virtual_mailbox_maps=hash:/etc/postfix/vmail_maps* *virtual_alias_maps=hash:/etc/postfix/virtual* *relay_domains=hash:/etc/postfix/relay_domains* *smtp_sasl_auth_enable=yes* *smtpd_sasl_type=dovecot* *smtpd_sasl_path=private/auth* *queue_directory=/var/spool/postfix* *broken_sasl_auth_clients=yes* *smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd* debug_peer_level=4 debug_peer_list=192.168.0.242 _*/etc/postfix/sasl_passwd*_ xxxxlawgroup.com username:password _*/etc/postfix/vmail_maps*_ user1(a)xxxxlawgroup.com user1(a)xxxxlawgroup.com user2(a)xxxxlawgroup.com user2(a)xxxxlawgroup.com user3(a)xxxxlawgroup.com user3(a)xxxxlawgroup.com <mailto:user3@xxxxlawgroup.com> _*master.cf*_ smtp inet n - y - - smtpd submission inet n - y - - smtpd -o syslog_name=postfix/submission -o smtpd_tls_security_level=encrypt -o smtpd_sasl_auth_enable=yes -o smtpd_recipient_restrictions=permit_sasl_authenticated,reject -o smtpd_relay_restrictions=permit_sasl_authenticated,reject -o smtpd_sasl_type=dovecot -o smtpd_sasl_path=private/auth -o smtpd_sasl_security_options=noanonymous -o smtpd_sasl_local_domain=$myhostname -o smtpd_client_restrictions=permit_sasl_authenticated,reject -o smtpd_sender_login_maps=/etc/postfix/virtual pickup unix n - y 60 1 pickup cleanup unix n - y - 0 cleanup qmgr unix n - n 300 1 qmgr tlsmgr unix - - y 1000? 1 tlsmgr rewrite unix - - y - - trivial-rewrite bounce unix - - y - 0 bounce defer unix - - y - 0 bounce trace unix - - y - 0 bounce verify unix - - y - 1 verify flush unix n - y 1000? 0 flush proxymap unix - - n - - proxymap proxywrite unix - - n - 1 proxymap smtp unix - - y - - smtp relay unix - - y - - smtp -o syslog_name=postfix/$service_name showq unix n - y - - showq error unix - - y - - error retry unix - - y - - error discard unix - - y - - discard local unix - n n - - local virtual unix - n n - - virtual lmtp unix - - y - - lmtp anvil unix - - y - 1 anvil scache unix - - y - 1 scache postlog unix-dgram n - n - 1 postlogd maildrop unix - n n - - pipe flags=DRhu user=vmail argv=/usr/bin/maildrop -d ${recipient} uucp unix - n n - - pipe flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient) ifmail unix - n n - - pipe flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient) bsmtp unix - n n - - pipe flags=Fq. user=bsmtp argv=/usr/lib/bsmtp/bsmtp -t$nexthop -f$sender $recipient scalemail-backend unix - n n - 2 pipe flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store ${nexthop} ${user} ${extension} mailman unix - n n - - pipe flags=FR user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py ${nexthop} ${user} -- Jon Kelly CNE kelly(a)kel-tek.com p 714.894.0130 For service calls, please email service(a)kel-tek.com

2 1

problem with a public folder
by David Mehler 28 Apr '20

28 Apr '20

Hello, I'm trying to set up a public folder called TestFolder. I'm getting this error: #doveadm acl get -A "Public/TestFolder" doveadm(username(a)example.com): Error: Can't open mailbox Public/TestFolder: Mailbox doesn't exist: Public/TestFolder Username ID Global Rights # ls -ld /var/vmail/public drwx------ 4 vmail vmail 512 Apr 15 23:17 public/ # ls -ld public/.TestFolder drwx------ 5 vmail vmail 512 Apr 15 23:20 .TestFolder/ My goal is a public namespace under which I have several folders for internal communications that users can access, TestFolder being an example. Suggestions welcome. Thanks. Dave. #doveconf -n # 2.3.10 (0da0eff44): /usr/local/etc/dovecot/dovecot.conf # Pigeonhole version 0.5.10 (bf8ef1c2) # OS: FreeBSD 12.1-RELEASE-p3 amd64 # Hostname: mail.example.com auth_cache_size = 10 M auth_default_realm = example.com auth_mechanisms = plain login auth_realms = example.com dict { lastlogin = mysql:/usr/local/etc/dovecot/dovecot-last-login.conf } first_valid_gid = 2100 first_valid_uid = 2100 hostname = mail.example.com imap_client_workarounds = delay-newmail tb-extra-mailbox-sep tb-lsub-flags imap_idle_notify_interval = 1 mins last_valid_gid = 2100 last_valid_uid = 2100 lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes lda_original_recipient_header = X-Original-To listen = xxx.xxx.xxx.xxx lmtp_rcpt_check_quota = yes log_timestamp = "%Y-%m-%d %H:%M:%S " mail_access_groups = vmail mail_fsync = never mail_gid = vmail mail_home = /var/vmail/mailboxes/%d/%n mail_location = dbox:~/mail mail_plugins = acl fts fts_lucene mail_log notify quota trash virtual welcome zlib mail_crypt mail_privileged_group = vmail mail_server_admin = mailto:postmaster@example.com mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext spamtest spamtestplus virustest editheader imapflags notify imapsieve vnd.dovecot.imapsieve namespace { location = sdbox:/var/vmail/public/:CONTROL=~/mail/public:INDEX=~/mail/public:INDEXPVT=~/mail/public prefix = Public/ separator = / subscriptions = yes type = public } namespace { hidden = no list = yes location = maildir:/var/vmail/shared/office/.Maildir:CONTROL=~/.Maildir/control/office:INDEX=~/.Maildir/index/office prefix = shared/%%u/ separator = / subscriptions = yes type = shared } namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Spam { auto = subscribe autoexpunge = 30 days special_use = \Junk } mailbox Trash { auto = subscribe autoexpunge = 30 days special_use = \Trash } prefix = separator = / type = private } passdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { acl = vfile:/usr/local/etc/dovecot/global-acls:cache_secs=300 acl_anyone = allow fts = lucene fts_autoindex = yes fts_autoindex_exclude = \Junk fts_autoindex_exclude2 = \Trash fts_autoindex_exclude3 = \Spam fts_autoindex_max_recent_msgs = 80 fts_index_timeout = 90 fts_lucene = whitespace_chars=@. normalize no_snowball imapsieve_mailbox1_before = file:/usr/local/lib/dovecot/sieve/report-spam.sieve imapsieve_mailbox1_causes = COPY imapsieve_mailbox1_name = Spam imapsieve_mailbox2_before = file:/usr/local/lib/dovecot/sieve/report-ham.sieve imapsieve_mailbox2_causes = COPY imapsieve_mailbox2_from = Spam imapsieve_mailbox2_name = * last_login_dict = proxy::lastlogin last_login_key = # hidden, use -P to show it mail_crypt_curve = prime256v1 mail_crypt_global_private_key = # hidden, use -P to show it mail_crypt_global_public_key = # hidden, use -P to show it mail_crypt_save_version = 2 mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size quota = count:User quota quota_exceeded_message = Storage quota for this account has been exceeded, please try again later. quota_grace = 10%% quota_rule2 = Trash:ignore quota_status_nouser = DUNNO quota_status_overquota = 552 5.2.2 Mailbox is full quota_status_success = DUNNO quota_vsizes = true quota_warning = storage=100%% quota-exceeded 100 %u quota_warning2 = storage=95%% quota-warning 95 %u quota_warning3 = storage=90%% quota-warning 90 %u quota_warning4 = storage=85%% quota-warning 85 %u quota_warning5 = storage=75%% quota-warning 75 %u sieve = file:/var/vmail/sieve/%d/%n/scripts;active=/var/vmail/sieve/%d/%n/active-script.sieve sieve_before = /var/vmail/sieve/global/spam-global.sieve sieve_extensions = +notify +imapflags +spamtest +spamtestplus +virustest +editheader sieve_global_extensions = +vnd.dovecot.pipe +vnd.dovecot.execute +vnd.dovecot.environment sieve_max_redirects = 30 sieve_max_script_size = 1M sieve_pipe_bin_dir = /usr/local/lib/dovecot/sieve sieve_plugins = sieve_imapsieve sieve_extprograms sieve_spamtest_max_header = X-Spamd-Result: default: [[:alnum:]]+ \[-?[[:digit:]]+\.[[:digit:]]+ / (-?[[:digit:]]+\.[[:digit:]]+)\] sieve_spamtest_status_header = X-Spamd-Result: default: [[:alnum:]]+ \[(-?[[:digit:]]+\.[[:digit:]]+) / -?[[:digit:]]+\.[[:digit:]]+\] sieve_spamtest_status_type = score sieve_user_log = /var/vmail/sieve/sieve_error.log sieve_virustest_status_header = X-Virus-Scan: Found to be (.+)\. sieve_virustest_status_type = text sieve_virustest_text_value1 = clean sieve_virustest_text_value5 = infected trash = /usr/local/etc/dovecot/trash.conf welcome_script = welcome %n postmaster@%d welcome_wait = yes } postmaster_address = postmaster(a)example.com protocols = imap lmtp sieve sendmail_path = /usr/local/sbin/sendmail service auth-worker { user = vmail } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = vmail mode = 0666 user = vmail } } service dict { unix_listener dict { mode = 0600 user = vmail } user = root } service imap-login { inet_listener imap { port = 143 } process_min_avail = 1 } service imap { executable = imap } service lmtp { executable = lmtp unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0660 user = postfix } } service managesieve-login { inet_listener sieve { address = 172.16.21.3 port = 4190 } } service quota-status { client_limit = 1 executable = quota-status -p postfix unix_listener /var/spool/postfix/private/dovecot-quota { group = postfix mode = 0660 user = postfix } } service quota-warning { executable = script /usr/local/etc/dovecot/quota-warning.sh unix_listener quota-warning { group = vmail mode = 0660 user = vmail } user = vmail } service stats { unix_listener stats-reader { group = vmail mode = 0660 user = vmail } unix_listener stats-writer { group = vmail mode = 0660 user = vmail } } service welcome { executable = script /usr/local/etc/dovecot/welcome.sh unix_listener welcome { user = vmail } user = vmail } ssl = required ssl_cert = </usr/local/etc/ssl/acme.sh/example.com/fullchain.crt ssl_cipher_list = EECDH+AESGCM:EDH+AESGCM ssl_curve_list = P-256 ssl_dh = # hidden, use -P to show it ssl_key = # hidden, use -P to show it ssl_min_protocol = TLSv1.2 ssl_options = no_ticket ssl_prefer_server_ciphers = yes userdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lmtp { mail_fsync = optimized mail_plugins = acl fts fts_lucene mail_log notify quota trash virtual welcome zlib mail_crypt sieve } protocol lda { mail_fsync = optimized mail_plugins = acl fts fts_lucene mail_log notify quota trash virtual welcome zlib mail_crypt sieve } protocol imap { mail_max_userip_connections = 20 mail_plugins = acl fts fts_lucene mail_log notify quota trash virtual welcome zlib mail_crypt imap_acl imap_quota imap_sieve imap_zlib last_login quota welcome } protocol sieve { info_log_path = /var/log/dovecot/dovecot-sieve.log log_path = /var/log/dovecot/dovecot-sieve-errors.log } mail_home = /var/vmail/mailboxes/%d/%n mail_location = dbox:~/mail

5 9

Header search on Dovecot with SOLR
by Ricardo Machini Barbosa 28 Apr '20

28 Apr '20

Hello, I am using dovecot 2.3.0 with FTS Solr 7.7.2. I started having problems where the solr stopped working, I came to the conclusion that when a specific user is accessing his email, the queries made on SOLR are dropping this service. Apr 28 11:03:59 Error: imap(tullio(a)dominio.com.br)<125772><fdHRQlqkupe6zZkj>: fts_solr: Lookup failed: Request timed out (Request queued 180.186 secs ago, 2 times retried, 3 send attempts in 180.185 secs, 60.062 in last attempt, 60.063 in http ioloop, 0.000 in other ioloops, connected 60.062 secs ago) Analyzing the solr logs, we got an example query: http://127.0.0.1:8983/solr/dovecot/select?wt=xml&fl=uid,score&rows=15824&sor t=uid+asc&q=%7b!lucene+q.op%3dAND%7dhdr:%3ceyJlX21faWQiOjE1ODUxMiwidF9pZCI6O DUxMCwiZV9jX2lkIjoxLCJjX3BfdF9pZCI6MywiY19pZCI6MzQ4MzIzMDUsImVfaWQiOjg3NjYwL CJlX3RfaWQiOjYsInRzIjoiMjAyMC0wNC0yNCAxOTozMjoxMS4wIn0%3d(a)edrone.me%3e&fq=%2 Bbox:8ba9c7227a37835cbaf20100b047fe86+%2Buser:tullio@dominio.com.br What I could see is that this query in question was a search in the headers and not in the body. Should this query type go through FTS Solr? Reading the documentation I understand that the standard behavior is that header searches are made by dovecot and only bodies searches are made by Solr. I saw about a recent option called fts_enforced, where it is possible to forward header searches to FTS, but I am not using this option. I would like to know if my understanding is incorrect or if there is some kind of problem with dovecot? Regards, Ricardo

1 0

Dovecot LDAP/AD with exim as mta
by Benoît PELISSIER 28 Apr '20

28 Apr '20

Hi, I have done configuration dovecot/exim/samba4ad. I use dovecot-lda not exim to deliver mail. And dovecot to authentify users. I have users with mail address on AD. When i sent mail to user mail address, its working. I have distribution group or group with mail address on AD and users as member of this groups. But when i send mail to group mail address, its not working Dovecot-lda can do it ? Or i need do it with exim (or postfix) ? Thanks Benoît

1 0