- dovecot - dovecot.org

Static build failure
by Bernd Kuhls 21 Nov '14

21 Nov '14

Hi, this patch fixes a symbol conflict in static build with MySQL enabled Compile error log: http://autobuild.buildroot.net/results/9b5/9b536926b3b2bf82c683b48e9697a220 f1b4bf33/build-end.log Signed-off-by: Bernd Kuhls <bernd.kuhls(a)t-online.de> diff -uNr dovecot-2.2.15.org/src/doveadm/doveadm-log.c dovecot- 2.2.15/src/doveadm/doveadm-log.c --- dovecot-2.2.15.org/src/doveadm/doveadm-log.c 2014-06-13 01:02:23.000000000 +0200 +++ dovecot-2.2.15/src/doveadm/doveadm-log.c 2014-11-20 19:46:49.000000000 +0100 @@ -293,7 +293,7 @@ } } - if (str_to_time(args[1], &t) < 0) { + if (dove_str_to_time(args[1], &t) < 0) { i_error("Invalid timestamp: %s", args[1]); t = 0; } @@ -313,7 +313,7 @@ while ((c = getopt(argc, argv, "s:")) > 0) { switch (c) { case 's': - if (str_to_time(optarg, &min_timestamp) < 0) + if (dove_str_to_time(optarg, &min_timestamp) < 0) i_fatal("Invalid timestamp: %s", optarg); break; default: diff -uNr dovecot-2.2.15.org/src/doveadm/doveadm-replicator.c dovecot- 2.2.15/src/doveadm/doveadm-replicator.c --- dovecot-2.2.15.org/src/doveadm/doveadm-replicator.c 2014-06-13 01:02:50.000000000 +0200 +++ dovecot-2.2.15/src/doveadm/doveadm-replicator.c 2014-11-20 19:46:40.000000000 +0100 @@ -166,8 +166,8 @@ T_BEGIN { args = t_strsplit_tab(line); if (str_array_length(args) >= 5 && - str_to_time(args[2], &last_fast) == 0 && - str_to_time(args[3], &last_full) == 0) { + dove_str_to_time(args[2], &last_fast) == 0 && + dove_str_to_time(args[3], &last_full) == 0) { doveadm_print(args[0]); doveadm_print(args[1]); doveadm_print(time_ago(last_fast)); diff -uNr dovecot-2.2.15.org/src/doveadm/dsync/dsync-ibc-stream.c dovecot- 2.2.15/src/doveadm/dsync/dsync-ibc-stream.c --- dovecot-2.2.15.org/src/doveadm/dsync/dsync-ibc-stream.c 2014-09-29 13:07:07.000000000 +0200 +++ dovecot-2.2.15/src/doveadm/dsync/dsync-ibc-stream.c 2014-11-20 19:47:16.000000000 +0100 @@ -979,12 +979,12 @@ return DSYNC_IBC_RECV_RET_TRYAGAIN; } if (dsync_deserializer_decode_try(decoder, "last_renamed_or_created", &value) && - str_to_time(value, &node->last_renamed_or_created) < 0) { + dove_str_to_time(value, &node->last_renamed_or_created) < 0) { dsync_ibc_input_error(ibc, decoder, "Invalid last_renamed_or_created"); return DSYNC_IBC_RECV_RET_TRYAGAIN; } if (dsync_deserializer_decode_try(decoder, "last_subscription_change", &value) && - str_to_time(value, &node->last_subscription_change) < 0) { + dove_str_to_time(value, &node->last_subscription_change) < 0) { dsync_ibc_input_error(ibc, decoder, "Invalid last_subscription_change"); return DSYNC_IBC_RECV_RET_TRYAGAIN; } @@ -1064,7 +1064,7 @@ if (guid_128_from_string(tmp[i], del->guid) < 0) return -1; if (tmp[i+1] == NULL || - str_to_time(tmp[i+1], &del->timestamp) < 0) + dove_str_to_time(tmp[i+1], &del->timestamp) < 0) return -1; } return 0; @@ -1251,7 +1251,7 @@ field.decision |= MAIL_CACHE_DECISION_FORCED; if (dsync_deserializer_decode_try(decoder, "last_used", &value) && - str_to_time(value, &field.last_used) < 0) { + dove_str_to_time(value, &field.last_used) < 0) { dsync_ibc_input_error(ibc, decoder, "Invalid last_used"); ret = -1; } @@ -1454,7 +1454,7 @@ if (dsync_deserializer_decode_try(decoder, "deleted", &value)) attr->deleted = TRUE; if (dsync_deserializer_decode_try(decoder, "last_change", &value) && - str_to_time(value, &attr->last_change) < 0) { + dove_str_to_time(value, &attr->last_change) < 0) { dsync_ibc_input_error(ibc, decoder, "Invalid last_change"); return DSYNC_IBC_RECV_RET_TRYAGAIN; } @@ -1763,12 +1763,12 @@ return DSYNC_IBC_RECV_RET_TRYAGAIN; } if (dsync_deserializer_decode_try(decoder, "received_date", &value) && - str_to_time(value, &mail->received_date) < 0) { + dove_str_to_time(value, &mail->received_date) < 0) { dsync_ibc_input_error(ibc, decoder, "Invalid received_date"); return DSYNC_IBC_RECV_RET_TRYAGAIN; } if (dsync_deserializer_decode_try(decoder, "saved_date", &value) && - str_to_time(value, &mail->saved_date) < 0) { + dove_str_to_time(value, &mail->saved_date) < 0) { dsync_ibc_input_error(ibc, decoder, "Invalid saved_date"); return DSYNC_IBC_RECV_RET_TRYAGAIN; } diff -uNr dovecot-2.2.15.org/src/lib/strnum.c dovecot- 2.2.15/src/lib/strnum.c --- dovecot-2.2.15.org/src/lib/strnum.c 2014-09-24 21:34:27.000000000 + 0200 +++ dovecot-2.2.15/src/lib/strnum.c 2014-11-20 19:46:54.000000000 +0100 @@ -256,7 +256,7 @@ return 0; } -int str_to_time(const char *str, time_t *num_r) +int dove_str_to_time(const char *str, time_t *num_r) { intmax_t l; diff -uNr dovecot-2.2.15.org/src/lib-http/http-response-parser.c dovecot- 2.2.15/src/lib-http/http-response-parser.c --- dovecot-2.2.15.org/src/lib-http/http-response-parser.c 2014-07-01 23:10:16.000000000 +0200 +++ dovecot-2.2.15/src/lib-http/http-response-parser.c 2014-11-20 19:47:01.000000000 +0100 @@ -252,7 +252,7 @@ delta-seconds = 1*DIGIT */ - if (str_to_time(hdrval, &delta) >= 0) { + if (dove_str_to_time(hdrval, &delta) >= 0) { if (resp_time == (time_t)-1) { return -1; } diff -uNr dovecot-2.2.15.org/src/lib-master/master-instance.c dovecot- 2.2.15/src/lib-master/master-instance.c --- dovecot-2.2.15.org/src/lib-master/master-instance.c 2014-09-25 11:49:24.000000000 +0200 +++ dovecot-2.2.15/src/lib-master/master-instance.c 2014-11-20 19:46:57.000000000 +0100 @@ -82,7 +82,7 @@ args = t_strsplit_tabescaped(line); if (str_array_length(args) < 3) return -1; - if (str_to_time(args[0], &last_used) < 0) + if (dove_str_to_time(args[0], &last_used) < 0) return -1; inst = array_append_space(&list->instances); diff -uNr dovecot-2.2.15.org/src/replication/replicator/replicator-queue.c dovecot-2.2.15/src/replication/replicator/replicator-queue.c --- dovecot-2.2.15.org/src/replication/replicator/replicator-queue.c 2014-06-13 01:08:08.000000000 +0200 +++ dovecot-2.2.15/src/replication/replicator/replicator-queue.c 2014-11- 20 19:47:23.000000000 +0100 @@ -315,9 +315,9 @@ state = t_strdup_noconst(args[6]); if (username[0] == '\0' || str_to_uint(args[1], &priority) < 0 || - str_to_time(args[2], &tmp_user.last_update) < 0 || - str_to_time(args[3], &tmp_user.last_fast_sync) < 0 || - str_to_time(args[4], &tmp_user.last_full_sync) < 0) + dove_str_to_time(args[2], &tmp_user.last_update) < 0 || + dove_str_to_time(args[3], &tmp_user.last_fast_sync) < 0 || + dove_str_to_time(args[4], &tmp_user.last_full_sync) < 0) return -1; tmp_user.priority = priority; tmp_user.last_sync_failed = args[5][0] != '0';

2 2

logwatch reporting
by Robert Moskowitz 21 Nov '14

21 Nov '14

I just launched a new mailserver that is using dovecot. My previous mailserver used courier-mail. I am expecting better things with this new server, but I was use to some login information in logwatch that I am not seeing now. For example I would get: [IMAPd] Logout stats: ==================== User | Logouts | Downloaded | Mbox Size --------------------------------------- | ------- | ---------- | ---------- user1(a)htt-consult.com | 55 | 219571 | 0 user2(a)htt-consult.com | 285 | 221681 | 0 user3(a)labs.htt-consult.com | 32 | 15183 | 0 --------------------------------------------------------------------------- 372 | 456435 | 0 **Unmatched Entries** Disconnected, ip=[::ffff:107.150.52.84], time=1, starttls=1: 2 Time(s) ---------------------- IMAP End ------------------------- --------------------- POP-3 Begin ------------------------ [POP3] Logout stats (in MB): ============================ User | Logouts | Downloaded | Mbox Size --------------------------------------- | ------- | ---------- | ---------- user1(a)htt-consult.com | 78 | 5.96 | 0 user2(a)communaljob.com | 215 | 9.24 | 0 user3(a)htt-consult.com | 1 | 7.47 | 0 user4(a)htt-consult.com | 1 | 2.34 | 0 user5(a)htt-consult.com | 301 | 31.08 | 0 user6(a)labs.htt-consult.com | 201 | 4.98 | 0 --------------------------------------------------------------------------- 797 | 61.06 | 0.00 **Unmatched Entries** Disconnected, ip=[::ffff:107.150.52.84]: 2 Time(s) Disconnected, ip=[::ffff:12.159.43.147]: 50 Time(s) Disconnected, ip=[::ffff:172.245.45.20]: 61 Time(s) LOGIN FAILED, user=Alfredo, ip=[::ffff:172.245.45.20]: 1 Time(s) LOGIN FAILED, user=Antonio, ip=[::ffff:172.245.45.20]: 2 Time(s) LOGIN FAILED, user=postmaster, ip=[::ffff:172.245.45.20]: 7 Time(s) .... LOGIN FAILED, user=webmaster, ip=[::ffff:172.245.45.20]: 7 Time(s) LOGIN FAILED, user=www, ip=[::ffff:172.245.45.20]: 4 Time(s) Maximum connection limit reached for ::ffff:172.245.45.20: 509 Time(s) ---------------------- POP-3 End ------------------------- Whereas dovecot is only reporting: --------------------- Dovecot Begin ------------------------ Dovecot disconnects: Inactivity: 1 Time(s) Logged out: 379 Time(s) no auth attempts: 5 Time(s) no reason: 1 Time(s) tried to use disabled plaintext auth: 1 Time(s) **Unmatched Entries** dovecot: dict: mysql: Connected to localhost (postfix): 351 Time(s) ---------------------- Dovecot End ------------------------- How can I get more detailed user activity reporting to logwatch? And why is connection to mysql under Unmatched Entries?

4 7

Re: spam folder and POP users
by Joseph Tam 21 Nov '14

21 Nov '14

Robert Moskowitz writes: > My server is moving all tagged spam into the IMAP spam folder. Very > nice for the IMAP users, but not for the POP users. Of course the > server don't know, and the mysql database for users does not have any > flags for this. Don't want my server to fill up with spam from POP > users that don't know to check via IMAP. You can contort the virtual plugin to fuse your user's INBOX and spam box together into a virtual INBOX: http://wiki2.dovecot.org/Plugins/Virtual (See section "Virtual POP3 INBOX") This turns the problem from a delivery problem into a reading (or presentation) problem. Seems sort of klunky though. In my opinion, your energy is better invested in converting your POP3 holdouts to IMAP. Joseph Tam <jtam.home(a)gmail.com>

3 3

spam folder and POP users
by Robert Moskowitz 21 Nov '14

21 Nov '14

I am new to actually running dovecot. I actually still use POP as I have for YEARS and thunderbird does not make it easy to convert to IMAP... My server is moving all tagged spam into the IMAP spam folder. Very nice for the IMAP users, but not for the POP users. Of course the server don't know, and the mysql database for users does not have any flags for this. Don't want my server to fill up with spam from POP users that don't know to check via IMAP. I am using roundcubemail for the webmail IMAP client. Is there any way for POP users to indicate that they do not want spam so nicely auto moved to the IMAP spam folder?

6 12

Re: "subscription" file/folder for IMAP
by Steffen Kaiser 21 Nov '14

21 Nov '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Wed, 19 Nov 2014, Jorge Bastos wrote: > For IMAP users, there's the subscription file in the user's home, and if I > try to subscribe more imap folders that are invisible, there's that one, but > as it is an file, nothing is supposed to happen. Did I understood you correctly: your users see "subscriptions" as mailbox? > Is there an way to, allow users to create the "subscriptions" folder without > any collision, or just deny or don't show this file as an possible folder > (which Is not) to subscribe. > > What does people normally do? Do your users have a separated home and mail location? - -- Steffen Kaiser -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iQEVAwUBVG72T3z1H7kL/d9rAQKx1wgAlHmMXhWvaivB9lbSGzzz5esrrT/ZX5f1 MJqnXwS1K9pPUpZozHSneBcU4ABjp+cB2JE3wMMru0avpDU2/tDGl0pXp5feSata tRJg7aku8xu99yFKOmyEwVkKe+XzAj4cucD+DA04wym/x8YVBc3+3X6ln1b+8/0o e26r+RFz8Fa1krnv5HCo4F7VAwu+Dve1UmQYH0yhk5iX4ISaH/DuPcOis6Siel/u /25UkNA36RD+BgLSFuZc08czC5/AsyFB+WJgsblwUtbYlp0wEcZWh4K58zQPkFsc OYg60VgolN8/RaA6Jg+tKI56v5W5ae/Pv+a4Ch3sW6MtxIMjZ755XQ== =b3XE -----END PGP SIGNATURE-----

1 0

UNIX perms appear ok (ACL/MAC wrong?)
by [FnG] Lambik 21 Nov '14

21 Nov '14

Hi, I am struggling with Postfix/SASL/Dovecot-IMAP setup with ~/Maildir/ setup. Receiving the mail works fine, but viewing the mail(+listing) is failing. The setup I use is simple unix users from etc/passwd, (pam thru SASL) as I only host for a few people. The ~/Maildir folder has the ownership of the user, not mail or vmail, as I would have expected from the master.cf from Postfix, the permissions are drwx.- - - .- - - user group Maildir the {USER} and {GROUP} are the user/group of the person logging in on IMAP Can someone help me explain what is going wrong, or how I can increase debugging ? (I did the auth debugging, that was all fine) If you require more information please let me know. Thank you in advance, Lambik Versions : Dovecot 2.2.15 Postfix 2.11.0 saslauthd 2.1.26 linux : opensuse 13.1 factory -[error.log]------------------------------------------------------------------------------------------------------- dovecot: imap-login: Login: user=<{USER}>, method=PLAIN, rip=123.123.123.123, lip=12.34.56.78, mpid=18385, TLS, session=<0OEra/8HNADUuyG9> dovecot: imap({USER}): Debug: Effective uid=1014, gid=1003, home=/home/{user} dovecot: imap({USER}): Debug: Namespace inbox: type=private, prefix=~/Maildir/, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:~/Maildir dovecot: imap({USER}): Debug: maildir++: root=/home/{user}/Maildir, index=, indexpvt=, control=, inbox=/home/{user}/Maildir, alt= dovecot: imap({USER}): Debug: Namespace : type=private, prefix=, sep=, inbox=no, hidden=yes, list=no, subscriptions=no location=fail::LAYOUT=none dovecot: imap({USER}): Debug: none: root=, index=, indexpvt=, control=, inbox=, alt= dovecot: imap({USER}): Error: open(/home/{user}/Maildir/dovecot.index.log) failed: Permission denied (euid=1014({USER}) egid=1003({GROUP}) UNIX perms appear ok (ACL/MAC wrong?)) dovecot: imap({USER}): Error: file_dotlock_create(/home/{user}/Maildir/dovecot-uidlist) failed: Permission denied (euid=1014({USER}) egid=1003({GROUP}) UNIX perms appear ok (ACL/MAC wrong?)) dovecot: imap({USER}): Error: open(/home/{user}/Maildir/dovecot-uidlist) failed: Permission denied dovecot: imap({USER}): Error: file_dotlock_open(/home/{user}/Maildir/.Sent/dovecot.index.log) failed: Permission denied (euid=1014({USER}) egid=1003({GROUP}), access(/home/{user}/Maildir/.Sent/dovecot.index.log, 4) failed: No such file or directory) dovecot: imap({USER}): Error: file_dotlock_create(/home/{user}/Maildir/.Sent/dovecot-uidlist) failed: Permission denied (euid=1014({USER}) egid=1003({GROUP}), access(/home/{user}/Maildir/.Sent/dovecot-uidlist, 4) failed: No such file or directory) dovecot: imap({USER}): Error: file_dotlock_create(/home/{user}/Maildir/.Sent/dovecot-uidlist) failed: Permission denied (euid=1014({USER}) egid=1003({GROUP}), access(/home/{user}/Maildir/.Sent/dovecot-uidlist, 4) failed: No such file or directory) dovecot: imap({USER}): Error: opendir(/home/{user}/Maildir/.Sent/new) failed: Permission denied (euid=1014({USER}) egid=1003({GROUP}) UNIX perms appear ok (ACL/MAC wrong?)) dovecot: imap({USER}): Error: file_dotlock_create(/home/{user}/Maildir/.Sent/dovecot-uidlist) failed: Permission denied (euid=1014({USER}) egid=1003({GROUP}), access(/home/{user}/Maildir/.Sent/dovecot-uidlist, 4) failed: No such file or directory) dovecot: imap({USER}): Error: file_dotlock_open(/home/{user}/Maildir/.Sent/dovecot.index.log) failed: Permission denied (euid=1014({USER}) egid=1003({GROUP}), access(/home/{user}/Maildir/.Sent/dovecot.index.log, 4) failed: No such file or directory) dovecot: imap({USER}): Error: file_dotlock_create(/home/{user}/Maildir/.Sent/dovecot-uidlist) failed: Permission denied (euid=1014({USER}) egid=1003({GROUP}), access(/home/{user}/Maildir/.Sent/dovecot-uidlist, 4) failed: No such file or directory) dovecot: imap({USER}): Error: file_dotlock_create(/home/{user}/Maildir/.Sent/dovecot-uidlist) failed: Permission denied (euid=1014({USER}) egid=1003({GROUP}), access(/home/{user}/Maildir/.Sent/dovecot-uidlist, 4) failed: No such file or directory) dovecot: imap({USER}): Error: opendir(/home/{user}/Maildir/.Sent/new) failed: Permission denied (euid=1014({USER}) egid=1003({GROUP}) UNIX perms appear ok (ACL/MAC wrong?)) dovecot: imap({USER}): Error: file_dotlock_create(/home/{user}/Maildir/.Sent/dovecot-uidlist) failed: Permission denied (euid=1014({USER}) egid=1003({GROUP}), access(/home/{user}/Maildir/.Sent/dovecot-uidlist, 4) failed: No such file or directory) --------------------------------------------------------------------------------------------------- --[master.cf ]---------------------------------------------------------------------------------------------- smtp inet n - n - - smtpd smtps inet n - n - - smtpd -o smtpd_tls_wrappermode=yes pickup unix n - n 60 1 pickup cleanup unix n - n - 0 cleanup qmgr unix n - n 300 1 qmgr tlsmgr unix - - n 1000? 1 tlsmgr rewrite unix - - n - - trivial-rewrite bounce unix - - n - 0 bounce defer unix - - n - 0 bounce trace unix - - n - 0 bounce verify unix - - n - 1 verify flush unix n - n 1000? 0 flush proxymap unix - - n - - proxymap proxywrite unix - - n - 1 proxymap smtp unix - - n - - smtp relay unix - - n - - smtp showq unix n - n - - showq error unix - - n - - error retry unix - - n - - error discard unix - - n - - discard local unix - n n - - local virtual unix - n n - - virtual lmtp unix - - n - - lmtp anvil unix - - n - 1 anvil scache unix - - n - 1 scache dovecot unix - n n - - pipe flags=DRhu user=vmail:vmail argv=/usr/lib/dovecot/deliver -d ${recipient} ----------------------------------------------------------------------------------------------------------- --[doveconf]----------------------------------------------------------------------------------------------- # 2.2.15: /etc/dovecot/dovecot.conf # OS: Linux 3.16.4-1.g7a8842b-default x86_64 openSUSE 20141011 (x86_64) # NOTE: Send doveconf -n output instead when asking for help. auth_anonymous_username = anonymous auth_cache_negative_ttl = 1 hours auth_cache_size = 0 auth_cache_ttl = 1 hours auth_debug = no auth_debug_passwords = no auth_default_realm = auth_failure_delay = 2 secs auth_gssapi_hostname = auth_krb5_keytab = auth_master_user_separator = auth_mechanisms = plain login auth_proxy_self = auth_realms = auth_socket_path = auth-userdb auth_ssl_require_client_cert = no auth_ssl_username_from_cert = no auth_use_winbind = no auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@ auth_username_format = %Lu auth_username_translation = auth_verbose = yes auth_verbose_passwords = no auth_winbind_helper_path = /usr/bin/ntlm_auth auth_worker_max_count = 30 base_dir = /var/run/dovecot config_cache_size = 1 M debug_log_path = default_client_limit = 1000 default_idle_kill = 1 mins default_internal_user = dovecot default_login_user = dovenull default_process_limit = 100 default_vsz_limit = 256 M deliver_log_format = msgid=%m: %$ dict_db_config = director_doveadm_port = 0 director_mail_servers = director_servers = director_user_expire = 15 mins director_username_hash = %u disable_plaintext_auth = yes dotlock_use_excl = yes doveadm_allowed_commands = doveadm_password = doveadm_port = 0 doveadm_socket_path = doveadm-server doveadm_worker_count = 0 dsync_alt_char = _ dsync_remote_cmd = ssh -l%{login} %{host} doveadm dsync-server -u%u -U first_valid_gid = 1 first_valid_uid = 500 hostname = imap_capability = imap_client_workarounds = imap_id_log = imap_id_send = name * imap_idle_notify_interval = 2 mins imap_logout_format = in=%i out=%o imap_max_line_length = 64 k imap_metadata = no imap_urlauth_host = imap_urlauth_logout_format = in=%i out=%o imap_urlauth_port = 143 imapc_features = imapc_host = imapc_list_prefix = imapc_master_user = imapc_max_idle_time = 29 mins imapc_password = imapc_port = 143 imapc_rawlog_dir = imapc_ssl = no imapc_ssl_verify = yes imapc_user = import_environment = TZ CORE_OUTOFMEM CORE_ERROR LISTEN_PID LISTEN_FDS info_log_path = instance_name = dovecot last_valid_gid = 0 last_valid_uid = 0 lda_mailbox_autocreate = no lda_mailbox_autosubscribe = no lda_original_recipient_header = libexec_dir = /usr/lib/dovecot listen = 12.34.56.78 lmtp_address_translate = lmtp_proxy = no lmtp_rcpt_check_quota = no lmtp_save_to_detail_mailbox = no lock_method = fcntl log_path = syslog log_timestamp = "%b %d %H:%M:%S " login_access_sockets = login_greeting = Dovecot ready. login_log_format = %$: %s login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c session=<%{session}> login_source_ips = login_trusted_networks = mail_access_groups = mail_always_cache_fields = mail_attachment_dir = mail_attachment_fs = sis posix mail_attachment_hash = %{sha1} mail_attachment_min_size = 128 k mail_attribute_dict = mail_cache_fields = flags mail_cache_min_mail_count = 0 mail_chroot = mail_debug = yes mail_fsync = optimized mail_full_filesystem_access = no mail_gid = mail_home = mail_location = maildir:~/Maildir mail_log_prefix = "%s(%u): " mail_max_keyword_length = 50 mail_max_lock_timeout = 0 mail_max_userip_connections = 10 mail_never_cache_fields = imap.envelope mail_nfs_index = no mail_nfs_storage = no mail_plugin_dir = /usr/lib64/dovecot/modules mail_plugins = mail_prefetch_count = 0 mail_privileged_group = mail mail_save_crlf = no mail_shared_explicit_inbox = no mail_temp_dir = /tmp mail_temp_scan_interval = 1 weeks mail_uid = mailbox_idle_check_interval = 30 secs mailbox_list_index = no mailbox_list_index_very_dirty_syncs = no maildir_broken_filename_sizes = no maildir_copy_with_hardlinks = yes maildir_empty_new = no maildir_stat_dirs = no maildir_very_dirty_syncs = no managesieve_client_workarounds = managesieve_implementation_string = Dovecot Pigeonhole managesieve_logout_format = bytes=%i/%o managesieve_max_compile_errors = 5 managesieve_max_line_length = 65536 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave duplicate master_user_separator = mbox_dirty_syncs = yes mbox_dotlock_change_timeout = 2 mins mbox_lazy_writes = yes mbox_lock_timeout = 5 mins mbox_md5 = apop3d mbox_min_index_size = 0 mbox_read_locks = fcntl mbox_very_dirty_syncs = no mbox_write_locks = dotlock fcntl mdbox_preallocate_space = no mdbox_purge_preserve_alt = no mdbox_rotate_interval = 0 mdbox_rotate_size = 2 M mmap_disable = no namespace inbox { disabled = no hidden = no ignore_on_failure = no inbox = yes list = yes location = mailbox Drafts { auto = subscribe driver = special_use = \Drafts } mailbox Junk { auto = subscribe driver = special_use = \Junk } mailbox Sent { auto = subscribe driver = special_use = \Sent } mailbox "Sent Messages" { auto = no driver = special_use = \Sent } mailbox Trash { auto = no driver = special_use = \Trash } prefix = ~/Maildir/ separator = / subscriptions = yes type = private } passdb { args = default_fields = deny = no driver = pam master = no name = override_fields = pass = no result_failure = continue result_internalfail = continue result_success = return-ok skip = never } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } pop3_client_workarounds = pop3_deleted_flag = pop3_enable_last = no pop3_fast_size_lookups = no pop3_lock_session = no pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s pop3_no_flag_updates = no pop3_reuse_xuidl = no pop3_save_uidl = no pop3_uidl_duplicates = allow pop3_uidl_format = %08Xu%08Xv pop3c_host = pop3c_master_user = pop3c_password = pop3c_port = 110 pop3c_quick_received_date = no pop3c_rawlog_dir = pop3c_ssl = no pop3c_ssl_verify = yes pop3c_user = %u postmaster_address = protocols = imap pop3 quota_full_tempfail = no recipient_delimiter = + rejection_reason = Your message to <%t> was automatically rejected:%n%r rejection_subject = Rejected: %s replication_dsync_parameters = -d -N -l 30 -U replication_full_sync_interval = 1 days replication_max_conns = 10 replicator_host = replicator replicator_port = 0 sendmail_path = /usr/sbin/sendmail service aggregator { chroot = . client_limit = 0 drop_priv_before_exec = no executable = aggregator extra_groups = fifo_listener replication-notify-fifo { group = mode = 0600 user = } group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener replication-notify { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service anvil { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = anvil extra_groups = group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 1 protocol = service_count = 0 type = anvil unix_listener anvil-auth-penalty { group = mode = 0600 user = } unix_listener anvil { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service auth-worker { chroot = client_limit = 1 drop_priv_before_exec = no executable = auth -w extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 1 type = unix_listener auth-worker { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service auth { chroot = client_limit = 0 drop_priv_before_exec = no executable = auth extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-client { group = mode = 0600 user = $default_internal_user } unix_listener auth-login { group = mode = 0600 user = $default_internal_user } unix_listener auth-master { group = mode = 0600 user = } unix_listener auth-userdb { group = mode = 0666 user = $default_internal_user } unix_listener login/login { group = mode = 0666 user = } unix_listener token-login/tokenlogin { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service config { chroot = client_limit = 0 drop_priv_before_exec = no executable = config extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = config unix_listener config { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service dict { chroot = client_limit = 1 drop_priv_before_exec = no executable = dict extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener dict { group = vmail mode = 0700 user = vmail } user = $default_internal_user vsz_limit = 18446744073709551615 B } service director { chroot = . client_limit = 0 drop_priv_before_exec = no executable = director extra_groups = fifo_listener login/proxy-notify { group = mode = 00 user = } group = idle_kill = 4294967295 secs inet_listener { address = port = 0 reuse_port = no ssl = no } privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener director-admin { group = mode = 0600 user = } unix_listener director-userdb { group = mode = 0600 user = } unix_listener login/director { group = mode = 00 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service dns_client { chroot = client_limit = 1 drop_priv_before_exec = no executable = dns-client extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener dns-client { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service doveadm { chroot = client_limit = 1 drop_priv_before_exec = no executable = doveadm-server extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 1 type = unix_listener doveadm-server { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service imap-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = imap-login extra_groups = group = idle_kill = 0 inet_listener imap { address = port = 143 reuse_port = no ssl = no } inet_listener imaps { address = 12.34.56.78 port = 993 reuse_port = no ssl = yes } privileged_group = process_limit = 0 process_min_avail = 0 protocol = imap service_count = 1 type = login user = $default_login_user vsz_limit = 18446744073709551615 B } service imap-urlauth-login { chroot = token-login client_limit = 0 drop_priv_before_exec = no executable = imap-urlauth-login extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = imap service_count = 1 type = login unix_listener imap-urlauth { group = mode = 0666 user = } user = $default_login_user vsz_limit = 18446744073709551615 B } service imap-urlauth-worker { chroot = client_limit = 1 drop_priv_before_exec = no executable = imap-urlauth-worker extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = imap service_count = 1 type = unix_listener imap-urlauth-worker { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service imap-urlauth { chroot = client_limit = 1 drop_priv_before_exec = no executable = imap-urlauth extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = imap service_count = 1 type = unix_listener token-login/imap-urlauth { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service imap { chroot = client_limit = 1 drop_priv_before_exec = no executable = imap extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = imap service_count = 1 type = unix_listener imap { group = mode = 0700 user = } unix_listener login/imap { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service indexer-worker { chroot = client_limit = 1 drop_priv_before_exec = no executable = indexer-worker extra_groups = group = idle_kill = 0 privileged_group = process_limit = 10 process_min_avail = 0 protocol = service_count = 0 type = unix_listener indexer-worker { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service indexer { chroot = client_limit = 0 drop_priv_before_exec = no executable = indexer extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener indexer { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service ipc { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = ipc extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener ipc { group = mode = 0600 user = } unix_listener login/ipc-proxy { group = mode = 0600 user = $default_login_user } user = $default_internal_user vsz_limit = 18446744073709551615 B } service lmtp { chroot = client_limit = 1 drop_priv_before_exec = no executable = lmtp extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = lmtp service_count = 0 type = unix_listener lmtp { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service log { chroot = client_limit = 0 drop_priv_before_exec = no executable = log extra_groups = group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = log unix_listener log-errors { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service managesieve-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = managesieve-login extra_groups = group = idle_kill = 0 inet_listener sieve { address = port = 4190 reuse_port = no ssl = no } privileged_group = process_limit = 0 process_min_avail = 0 protocol = sieve service_count = 1 type = login user = $default_login_user vsz_limit = 18446744073709551615 B } service managesieve { chroot = client_limit = 1 drop_priv_before_exec = no executable = managesieve extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = sieve service_count = 1 type = unix_listener login/sieve { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service pop3-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = pop3-login extra_groups = group = idle_kill = 0 inet_listener pop3 { address = port = 110 reuse_port = no ssl = no } inet_listener pop3s { address = 12.34.56.78 port = 995 reuse_port = no ssl = yes } privileged_group = process_limit = 0 process_min_avail = 0 protocol = pop3 service_count = 1 type = login user = $default_login_user vsz_limit = 18446744073709551615 B } service pop3 { chroot = client_limit = 1 drop_priv_before_exec = no executable = pop3 extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = pop3 service_count = 1 type = unix_listener login/pop3 { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service replicator { chroot = client_limit = 0 drop_priv_before_exec = no executable = replicator extra_groups = group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener replicator-doveadm { group = mode = 00 user = $default_internal_user } unix_listener replicator { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service ssl-params { chroot = client_limit = 0 drop_priv_before_exec = no executable = ssl-params extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = startup unix_listener login/ssl-params { group = mode = 0666 user = } unix_listener ssl-params { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service stats { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = stats extra_groups = fifo_listener stats-mail { group = mode = 0600 user = } group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener stats { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service tcpwrap { chroot = client_limit = 1 drop_priv_before_exec = no executable = tcpwrap extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = user = $default_internal_user vsz_limit = 18446744073709551615 B } shutdown_clients = yes ssl = yes ssl_ca = ssl_cert = </etc/ssl/certs/server.crt ssl_cert_username_field = commonName ssl_cipher_list = ALL:!LOW:!SSLv2:!EXP:!aNULL ssl_client_ca_dir = ssl_client_ca_file = ssl_client_cert = ssl_client_key = ssl_crypto_device = ssl_dh_parameters_length = 1024 ssl_key = </etc/ssl/private/server.pem ssl_key_password = ssl_options = ssl_parameters_regenerate = 0 ssl_prefer_server_ciphers = no ssl_protocols = !SSLv2 ssl_require_crl = yes ssl_verify_client_cert = no state_dir = /var/lib/dovecot stats_command_min_time = 1 mins stats_domain_min_time = 12 hours stats_ip_min_time = 12 hours stats_memory_limit = 16 M stats_session_min_time = 15 mins stats_user_min_time = 1 hours submission_host = syslog_facility = mail userdb { args = default_fields = driver = passwd name = override_fields = result_failure = continue result_internalfail = continue result_success = return-ok skip = never } valid_chroot_dirs = verbose_proctitle = no verbose_ssl = no version_ignore = no ----------------------------------------------------------------------------------------------------------------------- *********************************************************************************************************************** --[postconf]----------------------------------------------------------------------------------------------------------- 2bounce_notice_recipient = postmaster access_map_defer_code = 450 access_map_reject_code = 554 address_verify_cache_cleanup_interval = 12h address_verify_default_transport = $default_transport address_verify_local_transport = $local_transport address_verify_map = btree:$data_directory/verify_cache address_verify_negative_cache = yes address_verify_negative_expire_time = 3d address_verify_negative_refresh_time = 3h address_verify_poll_count = ${stress?1}${stress:3} address_verify_poll_delay = 3s address_verify_positive_expire_time = 31d address_verify_positive_refresh_time = 7d address_verify_relay_transport = $relay_transport address_verify_relayhost = $relayhost address_verify_sender = $double_bounce_sender address_verify_sender_dependent_default_transport_maps = $sender_dependent_default_transport_maps address_verify_sender_dependent_relayhost_maps = $sender_dependent_relayhost_maps address_verify_sender_ttl = 0s address_verify_service_name = verify address_verify_transport_maps = $transport_maps address_verify_virtual_transport = $virtual_transport alias_database = hash:/etc/aliases alias_maps = allow_mail_to_commands = alias, forward allow_mail_to_files = alias, forward allow_min_user = no allow_percent_hack = yes allow_untrusted_routing = no alternate_config_directories = always_add_missing_headers = no always_bcc = anvil_rate_time_unit = 60s anvil_status_update_time = 600s append_at_myorigin = yes append_dot_mydomain = yes application_event_drain_time = 100s authorized_flush_users = static:anyone authorized_mailq_users = static:anyone authorized_submit_users = static:anyone backwards_bounce_logfile_compatibility = yes berkeley_db_create_buffer_size = 16777216 berkeley_db_read_buffer_size = 131072 best_mx_transport = biff = no body_checks = body_checks_size_limit = 51200 bounce_notice_recipient = postmaster bounce_queue_lifetime = 5d bounce_service_name = bounce bounce_size_limit = 50000 bounce_template_file = broken_sasl_auth_clients = yes canonical_classes = envelope_sender, envelope_recipient, header_sender, header_recipient canonical_maps = cleanup_service_name = cleanup command_directory = /usr/sbin command_execution_directory = command_expansion_filter = 1234567890!@%-_=+:,./abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ command_time_limit = 1000s config_directory = /etc/postfix connection_cache_protocol_timeout = 5s connection_cache_service_name = scache connection_cache_status_update_time = 600s connection_cache_ttl_limit = 2s content_filter = cyrus_sasl_config_path = daemon_directory = /usr/lib/postfix daemon_table_open_error_is_fatal = no daemon_timeout = 18000s data_directory = /var/lib/postfix debug_peer_level = 2 debug_peer_list = debugger_command = PATH=/bin:/usr/bin:/usr/local/bin:/usr/X11R6/bin ddd $daemon_directory/$process_name $process_id & sleep 5 default_database_type = hash default_delivery_slot_cost = 5 default_delivery_slot_discount = 50 default_delivery_slot_loan = 3 default_destination_concurrency_failed_cohort_limit = 1 default_destination_concurrency_limit = 20 default_destination_concurrency_negative_feedback = 1 default_destination_concurrency_positive_feedback = 1 default_destination_rate_delay = 0s default_destination_recipient_limit = 50 default_extra_recipient_limit = 1000 default_filter_nexthop = default_minimum_delivery_slots = 3 default_privs = nobody default_process_limit = 100 default_rbl_reply = $rbl_code Service unavailable; $rbl_class [$rbl_what] blocked using $rbl_domain${rbl_reason?; $rbl_reason} default_recipient_limit = 20000 default_recipient_refill_delay = 5s default_recipient_refill_limit = 100 default_transport = smtp default_verp_delimiters = += defer_code = 450 defer_service_name = defer defer_transports = delay_logging_resolution_limit = 2 delay_notice_recipient = postmaster delay_warning_time = 0h deliver_lock_attempts = 20 deliver_lock_delay = 1s destination_concurrency_feedback_debug = no detect_8bit_encoding_header = yes disable_dns_lookups = no disable_mime_input_processing = no disable_mime_output_conversion = no disable_verp_bounces = no disable_vrfy_command = yes dnsblog_reply_delay = 0s dnsblog_service_name = dnsblog dont_remove = 0 double_bounce_sender = double-bounce dovecot_delivery_slot_cost = $default_delivery_slot_cost dovecot_delivery_slot_discount = $default_delivery_slot_discount dovecot_delivery_slot_loan = $default_delivery_slot_loan dovecot_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit dovecot_destination_concurrency_limit = $default_destination_concurrency_limit dovecot_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback dovecot_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback dovecot_destination_rate_delay = $default_destination_rate_delay dovecot_destination_recipient_limit = $default_destination_recipient_limit dovecot_extra_recipient_limit = $default_extra_recipient_limit dovecot_initial_destination_concurrency = $initial_destination_concurrency dovecot_minimum_delivery_slots = $default_minimum_delivery_slots dovecot_recipient_limit = $default_recipient_limit dovecot_recipient_refill_delay = $default_recipient_refill_delay dovecot_recipient_refill_limit = $default_recipient_refill_limit dovecot_time_limit = $command_time_limit duplicate_filter_limit = 1000 empty_address_default_transport_maps_lookup_key = <> empty_address_recipient = MAILER-DAEMON empty_address_relayhost_maps_lookup_key = <> enable_long_queue_ids = no enable_original_recipient = yes error_delivery_slot_cost = $default_delivery_slot_cost error_delivery_slot_discount = $default_delivery_slot_discount error_delivery_slot_loan = $default_delivery_slot_loan error_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit error_destination_concurrency_limit = $default_destination_concurrency_limit error_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback error_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback error_destination_rate_delay = $default_destination_rate_delay error_destination_recipient_limit = $default_destination_recipient_limit error_extra_recipient_limit = $default_extra_recipient_limit error_initial_destination_concurrency = $initial_destination_concurrency error_minimum_delivery_slots = $default_minimum_delivery_slots error_notice_recipient = postmaster error_recipient_limit = $default_recipient_limit error_recipient_refill_delay = $default_recipient_refill_delay error_recipient_refill_limit = $default_recipient_refill_limit error_service_name = error execution_directory_expansion_filter = 1234567890!@%-_=+:,./abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ expand_owner_alias = no export_environment = TZ MAIL_CONFIG LANG fallback_transport = fallback_transport_maps = fast_flush_domains = $relay_domains fast_flush_purge_time = 7d fast_flush_refresh_time = 12h fault_injection_code = 0 flush_service_name = flush fork_attempts = 5 fork_delay = 1s forward_expansion_filter = 1234567890!@%-_=+:,./abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ forward_path = $home/.forward${recipient_delimiter}${extension}, $home/.forward frozen_delivered_to = yes hash_queue_depth = 1 hash_queue_names = deferred, defer header_address_token_limit = 10240 header_checks = header_size_limit = 102400 helpful_warnings = yes home_mailbox = Maildir/ hopcount_limit = 50 html_directory = /usr/share/doc/packages/postfix-doc/html ignore_mx_lookup_error = no import_environment = MAIL_CONFIG MAIL_DEBUG MAIL_LOGTAG TZ XAUTHORITY DISPLAY LANG=C in_flow_delay = 1s inet_interfaces = 46.4.58.151 inet_protocols = ipv4 initial_destination_concurrency = 5 internal_mail_filter_classes = invalid_hostname_reject_code = 501 ipc_idle = 5s ipc_timeout = 3600s ipc_ttl = 1000s line_length_limit = 2048 lmdb_map_size = 16777216 lmtp_address_preference = any lmtp_assume_final = no lmtp_bind_address = lmtp_bind_address6 = lmtp_body_checks = lmtp_cname_overrides_servername = no lmtp_connect_timeout = 0s lmtp_connection_cache_destinations = lmtp_connection_cache_on_demand = yes lmtp_connection_cache_time_limit = 2s lmtp_connection_reuse_count_limit = 0 lmtp_connection_reuse_time_limit = 300s lmtp_data_done_timeout = 600s lmtp_data_init_timeout = 120s lmtp_data_xfer_timeout = 180s lmtp_defer_if_no_mx_address_found = no lmtp_delivery_slot_cost = $default_delivery_slot_cost lmtp_delivery_slot_discount = $default_delivery_slot_discount lmtp_delivery_slot_loan = $default_delivery_slot_loan lmtp_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit lmtp_destination_concurrency_limit = $default_destination_concurrency_limit lmtp_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback lmtp_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback lmtp_destination_rate_delay = $default_destination_rate_delay lmtp_destination_recipient_limit = $default_destination_recipient_limit lmtp_discard_lhlo_keyword_address_maps = lmtp_discard_lhlo_keywords = lmtp_dns_resolver_options = lmtp_dns_support_level = lmtp_enforce_tls = no lmtp_extra_recipient_limit = $default_extra_recipient_limit lmtp_generic_maps = lmtp_header_checks = lmtp_host_lookup = dns lmtp_initial_destination_concurrency = $initial_destination_concurrency lmtp_lhlo_name = $myhostname lmtp_lhlo_timeout = 300s lmtp_line_length_limit = 998 lmtp_mail_timeout = 300s lmtp_mime_header_checks = lmtp_minimum_delivery_slots = $default_minimum_delivery_slots lmtp_mx_address_limit = 5 lmtp_mx_session_limit = 2 lmtp_nested_header_checks = lmtp_per_record_deadline = no lmtp_pix_workaround_delay_time = 10s lmtp_pix_workaround_maps = lmtp_pix_workaround_threshold_time = 500s lmtp_pix_workarounds = disable_esmtp,delay_dotcrlf lmtp_quit_timeout = 300s lmtp_quote_rfc821_envelope = yes lmtp_randomize_addresses = yes lmtp_rcpt_timeout = 300s lmtp_recipient_limit = $default_recipient_limit lmtp_recipient_refill_delay = $default_recipient_refill_delay lmtp_recipient_refill_limit = $default_recipient_refill_limit lmtp_reply_filter = lmtp_rset_timeout = 20s lmtp_sasl_auth_cache_name = lmtp_sasl_auth_cache_time = 90d lmtp_sasl_auth_enable = no lmtp_sasl_auth_soft_bounce = yes lmtp_sasl_mechanism_filter = lmtp_sasl_password_maps = lmtp_sasl_path = lmtp_sasl_security_options = noplaintext, noanonymous lmtp_sasl_tls_security_options = $lmtp_sasl_security_options lmtp_sasl_tls_verified_security_options = $lmtp_sasl_tls_security_options lmtp_sasl_type = cyrus lmtp_send_dummy_mail_auth = no lmtp_send_xforward_command = no lmtp_sender_dependent_authentication = no lmtp_skip_5xx_greeting = yes lmtp_skip_quit_response = no lmtp_starttls_timeout = 300s lmtp_tcp_port = 24 lmtp_tls_CAfile = lmtp_tls_CApath = lmtp_tls_block_early_mail_reply = no lmtp_tls_cert_file = lmtp_tls_ciphers = export lmtp_tls_dcert_file = lmtp_tls_dkey_file = $lmtp_tls_dcert_file lmtp_tls_eccert_file = lmtp_tls_eckey_file = $lmtp_tls_eccert_file lmtp_tls_enforce_peername = yes lmtp_tls_exclude_ciphers = lmtp_tls_fingerprint_cert_match = lmtp_tls_fingerprint_digest = md5 lmtp_tls_force_insecure_host_tlsa_lookup = no lmtp_tls_key_file = $lmtp_tls_cert_file lmtp_tls_loglevel = 0 lmtp_tls_mandatory_ciphers = medium lmtp_tls_mandatory_exclude_ciphers = lmtp_tls_mandatory_protocols = !SSLv2 lmtp_tls_note_starttls_offer = no lmtp_tls_per_site = lmtp_tls_policy_maps = lmtp_tls_protocols = !SSLv2 lmtp_tls_scert_verifydepth = 9 lmtp_tls_secure_cert_match = nexthop lmtp_tls_security_level = lmtp_tls_session_cache_database = lmtp_tls_session_cache_timeout = 3600s lmtp_tls_trust_anchor_file = lmtp_tls_verify_cert_match = hostname lmtp_use_tls = no lmtp_xforward_timeout = 300s local_command_shell = local_delivery_slot_cost = $default_delivery_slot_cost local_delivery_slot_discount = $default_delivery_slot_discount local_delivery_slot_loan = $default_delivery_slot_loan local_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit local_destination_concurrency_limit = 2 local_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback local_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback local_destination_rate_delay = $default_destination_rate_delay local_destination_recipient_limit = 1 local_extra_recipient_limit = $default_extra_recipient_limit local_header_rewrite_clients = permit_inet_interfaces local_initial_destination_concurrency = $initial_destination_concurrency local_minimum_delivery_slots = $default_minimum_delivery_slots local_recipient_limit = $default_recipient_limit local_recipient_maps = proxy:unix:passwd.byname $alias_maps local_recipient_refill_delay = $default_recipient_refill_delay local_recipient_refill_limit = $default_recipient_refill_limit local_transport = local:$myhostname luser_relay = mail_name = Postfix mail_owner = postfix mail_release_date = 20140115 mail_spool_directory = /var/mail mail_version = 2.11.0 mailbox_command = mailbox_command_maps = mailbox_delivery_lock = fcntl, dotlock mailbox_size_limit = 0 mailbox_transport = mailbox_transport_maps = mailq_path = /usr/bin/mailq manpage_directory = /usr/share/man maps_rbl_domains = maps_rbl_reject_code = 554 masquerade_classes = envelope_sender, header_sender, header_recipient masquerade_domains = masquerade_exceptions = master_service_disable = max_idle = 100s max_use = 100 maximal_backoff_time = 4000s maximal_queue_lifetime = 5d message_reject_characters = message_size_limit = 0 message_strip_characters = milter_command_timeout = 30s milter_connect_macros = j {daemon_name} v milter_connect_timeout = 30s milter_content_timeout = 300s milter_data_macros = i milter_default_action = tempfail milter_end_of_data_macros = i milter_end_of_header_macros = i milter_header_checks = milter_helo_macros = {tls_version} {cipher} {cipher_bits} {cert_subject} {cert_issuer} milter_macro_daemon_name = $myhostname milter_macro_v = $mail_name $mail_version milter_mail_macros = i {auth_type} {auth_authen} {auth_author} {mail_addr} {mail_host} {mail_mailer} milter_protocol = 6 milter_rcpt_macros = i {rcpt_addr} {rcpt_host} {rcpt_mailer} milter_unknown_command_macros = mime_boundary_length_limit = 2048 mime_header_checks = $header_checks mime_nesting_limit = 100 minimal_backoff_time = 300s multi_instance_directories = multi_instance_enable = no multi_instance_group = multi_instance_name = multi_instance_wrapper = multi_recipient_bounce_reject_code = 550 mydestination = domain.org, domain.eu, $myhostname, localhost.$mydomain mydomain = domain.org myhostname = server.domain.org mynetworks = 12.34.56.70/27 mynetworks_style = subnet myorigin = domain.org nested_header_checks = $header_checks newaliases_path = /usr/bin/newaliases non_fqdn_reject_code = 504 non_smtpd_milters = notify_classes = resource, software owner_request_special = yes parent_domain_matches_subdomains = debug_peer_list,fast_flush_domains,mynetworks,permit_mx_backup_networks,qmqpd_authorized_clients,relay_domains,smtpd_access_maps permit_mx_backup_networks = pickup_service_name = pickup plaintext_reject_code = 450 postmulti_control_commands = reload flush postmulti_start_commands = start postmulti_stop_commands = stop abort drain quick-stop postscreen_access_list = permit_mynetworks postscreen_bare_newline_action = ignore postscreen_bare_newline_enable = no postscreen_bare_newline_ttl = 30d postscreen_blacklist_action = ignore postscreen_cache_cleanup_interval = 12h postscreen_cache_map = btree:$data_directory/postscreen_cache postscreen_cache_retention_time = 7d postscreen_client_connection_count_limit = $smtpd_client_connection_count_limit postscreen_command_count_limit = 20 postscreen_command_filter = postscreen_command_time_limit = ${stress?10}${stress:300}s postscreen_disable_vrfy_command = $disable_vrfy_command postscreen_discard_ehlo_keyword_address_maps = $smtpd_discard_ehlo_keyword_address_maps postscreen_discard_ehlo_keywords = $smtpd_discard_ehlo_keywords postscreen_dnsbl_action = ignore postscreen_dnsbl_reply_map = postscreen_dnsbl_sites = postscreen_dnsbl_threshold = 1 postscreen_dnsbl_ttl = 1h postscreen_dnsbl_whitelist_threshold = 0 postscreen_enforce_tls = $smtpd_enforce_tls postscreen_expansion_filter = $smtpd_expansion_filter postscreen_forbidden_commands = $smtpd_forbidden_commands postscreen_greet_action = ignore postscreen_greet_banner = $smtpd_banner postscreen_greet_ttl = 1d postscreen_greet_wait = ${stress?2}${stress:6}s postscreen_helo_required = $smtpd_helo_required postscreen_non_smtp_command_action = drop postscreen_non_smtp_command_enable = no postscreen_non_smtp_command_ttl = 30d postscreen_pipelining_action = enforce postscreen_pipelining_enable = no postscreen_pipelining_ttl = 30d postscreen_post_queue_limit = $default_process_limit postscreen_pre_queue_limit = $default_process_limit postscreen_reject_footer = $smtpd_reject_footer postscreen_tls_security_level = $smtpd_tls_security_level postscreen_upstream_proxy_protocol = postscreen_upstream_proxy_timeout = 5s postscreen_use_tls = $smtpd_use_tls postscreen_watchdog_timeout = 10s postscreen_whitelist_interfaces = static:all prepend_delivered_header = command, file, forward process_id = 14480 process_id_directory = pid process_name = postconf propagate_unmatched_extensions = canonical, virtual proxy_interfaces = proxy_read_maps = $local_recipient_maps $mydestination $virtual_alias_maps $virtual_alias_domains $virtual_mailbox_maps $virtual_mailbox_domains $relay_recipient_maps $relay_domains $canonical_maps $sender_canonical_maps $recipient_canonical_maps $relocated_maps $transport_maps $mynetworks $smtpd_sender_login_maps $sender_bcc_maps $recipient_bcc_maps $smtp_generic_maps $lmtp_generic_maps $alias_maps proxy_write_maps = $smtp_sasl_auth_cache_name $lmtp_sasl_auth_cache_name $address_verify_map $postscreen_cache_map proxymap_service_name = proxymap proxywrite_service_name = proxywrite qmgr_clog_warn_time = 300s qmgr_daemon_timeout = 1000s qmgr_fudge_factor = 100 qmgr_ipc_timeout = 60s qmgr_message_active_limit = 20000 qmgr_message_recipient_limit = 20000 qmgr_message_recipient_minimum = 10 qmqpd_authorized_clients = qmqpd_client_port_logging = no qmqpd_error_delay = 1s qmqpd_timeout = 300s queue_directory = /var/spool/postfix queue_file_attribute_count_limit = 100 queue_minfree = 0 queue_run_delay = 300s queue_service_name = qmgr rbl_reply_maps = readme_directory = /usr/share/doc/packages/postfix-doc/README_FILES receive_override_options = recipient_bcc_maps = recipient_canonical_classes = envelope_recipient, header_recipient recipient_canonical_maps = recipient_delimiter = reject_code = 554 reject_tempfail_action = defer_if_permit relay_clientcerts = relay_delivery_slot_cost = $default_delivery_slot_cost relay_delivery_slot_discount = $default_delivery_slot_discount relay_delivery_slot_loan = $default_delivery_slot_loan relay_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit relay_destination_concurrency_limit = $default_destination_concurrency_limit relay_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback relay_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback relay_destination_rate_delay = $default_destination_rate_delay relay_destination_recipient_limit = $default_destination_recipient_limit relay_domains = $mydestination, hash:/etc/postfix/relay relay_domains_reject_code = 554 relay_extra_recipient_limit = $default_extra_recipient_limit relay_initial_destination_concurrency = $initial_destination_concurrency relay_minimum_delivery_slots = $default_minimum_delivery_slots relay_recipient_limit = $default_recipient_limit relay_recipient_maps = relay_recipient_refill_delay = $default_recipient_refill_delay relay_recipient_refill_limit = $default_recipient_refill_limit relay_transport = relay relayhost = relocated_maps = remote_header_rewrite_domain = require_home_directory = no reset_owner_alias = no resolve_dequoted_address = yes resolve_null_domain = no resolve_numeric_domain = no retry_delivery_slot_cost = $default_delivery_slot_cost retry_delivery_slot_discount = $default_delivery_slot_discount retry_delivery_slot_loan = $default_delivery_slot_loan retry_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit retry_destination_concurrency_limit = $default_destination_concurrency_limit retry_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback retry_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback retry_destination_rate_delay = $default_destination_rate_delay retry_destination_recipient_limit = $default_destination_recipient_limit retry_extra_recipient_limit = $default_extra_recipient_limit retry_initial_destination_concurrency = $initial_destination_concurrency retry_minimum_delivery_slots = $default_minimum_delivery_slots retry_recipient_limit = $default_recipient_limit retry_recipient_refill_delay = $default_recipient_refill_delay retry_recipient_refill_limit = $default_recipient_refill_limit rewrite_service_name = rewrite sample_directory = /usr/share/doc/packages/postfix-doc/samples send_cyrus_sasl_authzid = no sender_bcc_maps = sender_canonical_classes = envelope_sender, header_sender sender_canonical_maps = sender_dependent_default_transport_maps = sender_dependent_relayhost_maps = sendmail_fix_line_endings = always sendmail_path = /usr/sbin/sendmail service_throttle_time = 60s setgid_group = maildrop show_user_unknown_table_name = yes showq_service_name = showq smtp_address_preference = any smtp_always_send_ehlo = yes smtp_bind_address = smtp_bind_address6 = smtp_body_checks = smtp_cname_overrides_servername = no smtp_connect_timeout = 30s smtp_connection_cache_destinations = smtp_connection_cache_on_demand = yes smtp_connection_cache_time_limit = 2s smtp_connection_reuse_count_limit = 0 smtp_connection_reuse_time_limit = 300s smtp_data_done_timeout = 600s smtp_data_init_timeout = 120s smtp_data_xfer_timeout = 180s smtp_defer_if_no_mx_address_found = no smtp_delivery_slot_cost = $default_delivery_slot_cost smtp_delivery_slot_discount = $default_delivery_slot_discount smtp_delivery_slot_loan = $default_delivery_slot_loan smtp_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit smtp_destination_concurrency_limit = $default_destination_concurrency_limit smtp_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback smtp_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback smtp_destination_rate_delay = $default_destination_rate_delay smtp_destination_recipient_limit = $default_destination_recipient_limit smtp_discard_ehlo_keyword_address_maps = smtp_discard_ehlo_keywords = smtp_dns_resolver_options = smtp_dns_support_level = smtp_enforce_tls = no smtp_extra_recipient_limit = $default_extra_recipient_limit smtp_fallback_relay = $fallback_relay smtp_generic_maps = smtp_header_checks = smtp_helo_name = $myhostname smtp_helo_timeout = 300s smtp_host_lookup = dns smtp_initial_destination_concurrency = $initial_destination_concurrency smtp_line_length_limit = 998 smtp_mail_timeout = 300s smtp_mime_header_checks = smtp_minimum_delivery_slots = $default_minimum_delivery_slots smtp_mx_address_limit = 5 smtp_mx_session_limit = 2 smtp_nested_header_checks = smtp_never_send_ehlo = no smtp_per_record_deadline = no smtp_pix_workaround_delay_time = 10s smtp_pix_workaround_maps = smtp_pix_workaround_threshold_time = 500s smtp_pix_workarounds = disable_esmtp,delay_dotcrlf smtp_quit_timeout = 300s smtp_quote_rfc821_envelope = yes smtp_randomize_addresses = yes smtp_rcpt_timeout = 300s smtp_recipient_limit = $default_recipient_limit smtp_recipient_refill_delay = $default_recipient_refill_delay smtp_recipient_refill_limit = $default_recipient_refill_limit smtp_reply_filter = smtp_rset_timeout = 20s smtp_sasl_auth_cache_name = smtp_sasl_auth_cache_time = 90d smtp_sasl_auth_enable = no smtp_sasl_auth_soft_bounce = yes smtp_sasl_mechanism_filter = smtp_sasl_password_maps = smtp_sasl_path = smtp_sasl_security_options = smtp_sasl_tls_security_options = $smtp_sasl_security_options smtp_sasl_tls_verified_security_options = $smtp_sasl_tls_security_options smtp_sasl_type = cyrus smtp_send_dummy_mail_auth = no smtp_send_xforward_command = no smtp_sender_dependent_authentication = no smtp_skip_5xx_greeting = yes smtp_skip_quit_response = yes smtp_starttls_timeout = 300s smtp_tls_CAfile = smtp_tls_CApath = smtp_tls_block_early_mail_reply = no smtp_tls_cert_file = smtp_tls_ciphers = export smtp_tls_dcert_file = smtp_tls_dkey_file = $smtp_tls_dcert_file smtp_tls_eccert_file = smtp_tls_eckey_file = $smtp_tls_eccert_file smtp_tls_enforce_peername = yes smtp_tls_exclude_ciphers = smtp_tls_fingerprint_cert_match = smtp_tls_fingerprint_digest = md5 smtp_tls_force_insecure_host_tlsa_lookup = no smtp_tls_key_file = smtp_tls_loglevel = 0 smtp_tls_mandatory_ciphers = medium smtp_tls_mandatory_exclude_ciphers = smtp_tls_mandatory_protocols = !SSLv2 smtp_tls_note_starttls_offer = no smtp_tls_per_site = smtp_tls_policy_maps = smtp_tls_protocols = !SSLv2 smtp_tls_scert_verifydepth = 9 smtp_tls_secure_cert_match = nexthop, dot-nexthop smtp_tls_security_level = smtp_tls_session_cache_database = smtp_tls_session_cache_timeout = 3600s smtp_tls_trust_anchor_file = smtp_tls_verify_cert_match = hostname smtp_use_tls = no smtp_xforward_timeout = 300s smtpd_authorized_verp_clients = $authorized_verp_clients smtpd_authorized_xclient_hosts = smtpd_authorized_xforward_hosts = smtpd_banner = $myhostname ESMTP smtpd_client_connection_count_limit = 50 smtpd_client_connection_rate_limit = 0 smtpd_client_event_limit_exceptions = ${smtpd_client_connection_limit_exceptions:$mynetworks} smtpd_client_message_rate_limit = 0 smtpd_client_new_tls_session_rate_limit = 0 smtpd_client_port_logging = no smtpd_client_recipient_rate_limit = 0 smtpd_client_restrictions = smtpd_command_filter = smtpd_data_restrictions = smtpd_delay_open_until_valid_rcpt = yes smtpd_delay_reject = yes smtpd_discard_ehlo_keyword_address_maps = smtpd_discard_ehlo_keywords = smtpd_end_of_data_restrictions = smtpd_enforce_tls = no smtpd_error_sleep_time = 1s smtpd_etrn_restrictions = smtpd_expansion_filter = \t\40!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~ smtpd_forbidden_commands = CONNECT GET POST smtpd_hard_error_limit = ${stress?1}${stress:20} smtpd_helo_required = yes smtpd_helo_restrictions = smtpd_history_flush_threshold = 100 smtpd_junk_command_limit = ${stress?1}${stress:100} smtpd_log_access_permit_actions = smtpd_milters = smtpd_noop_commands = smtpd_null_access_lookup_key = <> smtpd_peername_lookup = yes smtpd_per_record_deadline = ${stress?yes}${stress:no} smtpd_policy_service_max_idle = 300s smtpd_policy_service_max_ttl = 1000s smtpd_policy_service_timeout = 100s smtpd_proxy_ehlo = $myhostname smtpd_proxy_filter = smtpd_proxy_options = smtpd_proxy_timeout = 100s smtpd_recipient_limit = 1000 smtpd_recipient_overshoot_limit = 1000 smtpd_recipient_restrictions = permit_inet_interfaces,permit_sasl_authenticated smtpd_reject_footer = smtpd_reject_unlisted_recipient = yes smtpd_reject_unlisted_sender = no smtpd_relay_restrictions = permit_mynetworks, permit_sasl_authenticated, defer_unauth_destination smtpd_restriction_classes = smtpd_sasl_auth_enable = yes smtpd_sasl_authenticated_header = no smtpd_sasl_exceptions_networks = smtpd_sasl_local_domain = smtpd_sasl_path = private/auth smtpd_sasl_security_options = noanonymous smtpd_sasl_service = smtp smtpd_sasl_tls_security_options = $smtpd_sasl_security_options smtpd_sasl_type = dovecot smtpd_sender_login_maps = smtpd_sender_restrictions = permit_sasl_authenticated,permit_mynetworks, smtpd_service_name = smtpd smtpd_soft_error_limit = 10 smtpd_starttls_timeout = ${stress?10}${stress:300}s smtpd_timeout = ${stress?10}${stress:300}s smtpd_tls_CAfile = smtpd_tls_CApath = smtpd_tls_always_issue_session_ids = yes smtpd_tls_ask_ccert = no smtpd_tls_auth_only = no smtpd_tls_ccert_verifydepth = 9 smtpd_tls_cert_file = /etc/ssl/certs/server.crt smtpd_tls_ciphers = export smtpd_tls_dcert_file = smtpd_tls_dh1024_param_file = smtpd_tls_dh512_param_file = smtpd_tls_dkey_file = $smtpd_tls_dcert_file smtpd_tls_eccert_file = smtpd_tls_eckey_file = $smtpd_tls_eccert_file smtpd_tls_eecdh_grade = strong smtpd_tls_exclude_ciphers = smtpd_tls_fingerprint_digest = md5 smtpd_tls_key_file = /etc/ssl/private/server.pem smtpd_tls_loglevel = 0 smtpd_tls_mandatory_ciphers = medium smtpd_tls_mandatory_exclude_ciphers = smtpd_tls_mandatory_protocols = !SSLv2 smtpd_tls_protocols = smtpd_tls_received_header = no smtpd_tls_req_ccert = no smtpd_tls_security_level = smtpd_tls_session_cache_database = smtpd_tls_session_cache_timeout = 3600s smtpd_tls_wrappermode = no smtpd_upstream_proxy_protocol = smtpd_upstream_proxy_timeout = 5s smtpd_use_tls = yes soft_bounce = no stale_lock_time = 500s stress = strict_7bit_headers = no strict_8bitmime = no strict_8bitmime_body = no strict_mailbox_ownership = yes strict_mime_encoding_domain = no strict_rfc821_envelopes = no sun_mailtool_compatibility = no swap_bangpath = yes syslog_facility = mail syslog_name = ${multi_instance_name:postfix}${multi_instance_name?$multi_instance_name} tcp_windowsize = 0 tls_append_default_CA = no tls_daemon_random_bytes = 32 tls_dane_digest_agility = on tls_dane_digests = sha512 sha256 tls_dane_trust_anchor_digest_enable = yes tls_disable_workarounds = tls_eecdh_strong_curve = prime256v1 tls_eecdh_ultra_curve = secp384r1 tls_export_cipherlist = aNULL:-aNULL:ALL:+RC4:@STRENGTH tls_high_cipherlist = aNULL:-aNULL:ALL:!EXPORT:!LOW:!MEDIUM:+RC4:@STRENGTH tls_legacy_public_key_fingerprints = no tls_low_cipherlist = aNULL:-aNULL:ALL:!EXPORT:+RC4:@STRENGTH tls_medium_cipherlist = aNULL:-aNULL:ALL:!EXPORT:!LOW:+RC4:@STRENGTH tls_null_cipherlist = eNULL:!aNULL tls_preempt_cipherlist = no tls_random_bytes = 32 tls_random_exchange_name = ${data_directory}/prng_exch tls_random_prng_update_period = 3600s tls_random_reseed_period = 3600s tls_random_source = dev:/dev/urandom tls_ssl_options = tls_wildcard_matches_multiple_labels = yes tlsmgr_service_name = tlsmgr tlsproxy_enforce_tls = $smtpd_enforce_tls tlsproxy_service_name = tlsproxy tlsproxy_tls_CAfile = $smtpd_tls_CAfile tlsproxy_tls_CApath = $smtpd_tls_CApath tlsproxy_tls_always_issue_session_ids = $smtpd_tls_always_issue_session_ids tlsproxy_tls_ask_ccert = $smtpd_tls_ask_ccert tlsproxy_tls_ccert_verifydepth = $smtpd_tls_ccert_verifydepth tlsproxy_tls_cert_file = $smtpd_tls_cert_file tlsproxy_tls_ciphers = $smtpd_tls_ciphers tlsproxy_tls_dcert_file = $smtpd_tls_dcert_file tlsproxy_tls_dh1024_param_file = $smtpd_tls_dh1024_param_file tlsproxy_tls_dh512_param_file = $smtpd_tls_dh512_param_file tlsproxy_tls_dkey_file = $smtpd_tls_dkey_file tlsproxy_tls_eccert_file = $smtpd_tls_eccert_file tlsproxy_tls_eckey_file = $smtpd_tls_eckey_file tlsproxy_tls_eecdh_grade = $smtpd_tls_eecdh_grade tlsproxy_tls_exclude_ciphers = $smtpd_tls_exclude_ciphers tlsproxy_tls_fingerprint_digest = $smtpd_tls_fingerprint_digest tlsproxy_tls_key_file = $smtpd_tls_key_file tlsproxy_tls_loglevel = $smtpd_tls_loglevel tlsproxy_tls_mandatory_ciphers = $smtpd_tls_mandatory_ciphers tlsproxy_tls_mandatory_exclude_ciphers = $smtpd_tls_mandatory_exclude_ciphers tlsproxy_tls_mandatory_protocols = $smtpd_tls_mandatory_protocols tlsproxy_tls_protocols = $smtpd_tls_protocols tlsproxy_tls_req_ccert = $smtpd_tls_req_ccert tlsproxy_tls_security_level = $smtpd_tls_security_level tlsproxy_use_tls = $smtpd_use_tls tlsproxy_watchdog_timeout = 10s trace_service_name = trace transport_maps = transport_retry_time = 60s trigger_timeout = 10s undisclosed_recipients_header = unknown_address_reject_code = 450 unknown_address_tempfail_action = $reject_tempfail_action unknown_client_reject_code = 450 unknown_helo_hostname_tempfail_action = $reject_tempfail_action unknown_hostname_reject_code = 450 unknown_local_recipient_reject_code = 550 unknown_relay_recipient_reject_code = 550 unknown_virtual_alias_reject_code = 550 unknown_virtual_mailbox_reject_code = 550 unverified_recipient_defer_code = 450 unverified_recipient_reject_code = 450 unverified_recipient_reject_reason = unverified_recipient_tempfail_action = $reject_tempfail_action unverified_sender_defer_code = 450 unverified_sender_reject_code = 450 unverified_sender_reject_reason = unverified_sender_tempfail_action = $reject_tempfail_action verp_delimiter_filter = -=+ virtual_alias_domains = virtual_alias_expansion_limit = 1000 virtual_alias_maps = hash:/etc/postfix/virtualdb virtual_alias_recursion_limit = 1000 virtual_delivery_slot_cost = $default_delivery_slot_cost virtual_delivery_slot_discount = $default_delivery_slot_discount virtual_delivery_slot_loan = $default_delivery_slot_loan virtual_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit virtual_destination_concurrency_limit = $default_destination_concurrency_limit virtual_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback virtual_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback virtual_destination_rate_delay = $default_destination_rate_delay virtual_destination_recipient_limit = $default_destination_recipient_limit virtual_extra_recipient_limit = $default_extra_recipient_limit virtual_gid_maps = virtual_initial_destination_concurrency = $initial_destination_concurrency virtual_mailbox_base = virtual_mailbox_domains = $virtual_mailbox_maps virtual_mailbox_limit = 51200000 virtual_mailbox_limit_inbox = no virtual_mailbox_limit_maps = virtual_mailbox_limit_override = no virtual_mailbox_lock = fcntl, dotlock virtual_mailbox_maps = virtual_maildir_extended = no virtual_maildir_filter = no virtual_maildir_filter_maps = virtual_maildir_limit_message = Sorry, the user's maildir has overdrawn his diskspace quota, please try again later. virtual_maildir_limit_message_maps = virtual_maildir_suffix = virtual_minimum_delivery_slots = $default_minimum_delivery_slots virtual_minimum_uid = 100 virtual_overquota_bounce = no virtual_recipient_limit = $default_recipient_limit virtual_recipient_refill_delay = $default_recipient_refill_delay virtual_recipient_refill_limit = $default_recipient_refill_limit virtual_transport = dovecot virtual_trash_count = no virtual_trash_name = .Trash virtual_uid_maps = -----------------------------------------------------------------------------------------------------------------------

2 1

how to recover mails - dovecot 2.2.13
by Götz Reinicke - IT Koordinator 21 Nov '14

21 Nov '14

Hi, I still have a messed up user account, with no mail client (appl mail, thunderbird, sogo) mails show up as expected. Folders look empty, some have something in it, but cant access the mails. My idea is, to move the users mal folder, let him regenerate the folderstructure from scratch and than reimport the old mails. Question: We use maildir. Can I just copy the "old" mails from e.g. user-backup/Maildir/curl/* to user/Maildir/curl/* Or which steps are needed? rebuilding any index or something etc ....? Thanks very much for any suggestion! Regards . Götz -- Götz Reinicke IT-Koordinator Tel. +49 7141 969 82 420 E-Mail goetz.reinicke(a)filmakademie.de Filmakademie Baden-Württemberg GmbH Akademiehof 10 71638 Ludwigsburg www.filmakademie.de Eintragung Amtsgericht Stuttgart HRB 205016 Vorsitzender des Aufsichtsrats: Jürgen Walter MdL Staatssekretär im Ministerium für Wissenschaft, Forschung und Kunst Baden-Württemberg Geschäftsführer: Prof. Thomas Schadt

2 1

Dovecot POP3 STARTTLS works on Thunderbird but not on Gmail
by Aleš Grm 21 Nov '14

21 Nov '14

Hello, I have configured Dovecot to work perfectly on Thundrebird using SSL certificates with STARTTLS on port 110. When I try to add this account on Gmail I get the error: Nov 16 14:04:17 mail dovecot: auth: Debug: auth client connected (pid=31587) Nov 16 14:04:17 mail dovecot: pop3-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=209.85.160.136, lip=192.168.100.94, session=<gxLlf/kHwgDRVaCI> In Gmail my settings include port 110 and the use of SSL is checked. Dovecot configuration: # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.7 auth_debug = yes auth_debug_passwords = yes auth_mechanisms = plain login auth_verbose = yes auth_verbose_passwords = plain disable_plaintext_auth = no hostname = kopitarna.eu mail_debug = yes mail_location = maildir:~/Maildir namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } postmaster_address = postmaster(a)kopitarna.eu protocols = " imap pop3" ssl_cert = </etc/ssl/certs/www.kopitarna.com.crt ssl_key = </etc/ssl/private/www.kopitarna.com.key userdb { driver = passwd } verbose_ssl = yes Any idea why does it work with Thunderbird and not with Gmail?

4 6

IMAP child killed with signal 11
by Simon Lawrence 21 Nov '14

21 Nov '14

Hello, We’re running a cluster of dovecot servers for a large amount of users. It’s been working pretty well except we are seeing occasional fatal error messages. Here is a sample error message that we are seeing: Nov 20 19:51:29 ip-10-238-11-11 dovecot: imap(<USER_HERE>): Fatal: master: service(imap): child 796 killed with signal 11 (core dumped) We are running dovecot 2.2.9 installed from apt-get on Ubuntu 14.04. I’ve checked out the core dump and here is the stack trace: Core was generated by `dovecot/imap [e22a36135b5f40'. Program terminated with signal SIGSEGV, Segmentation fault. #0 0x00007f83d63aa757 in mail_transaction_log_view_mark (view=0x7f83d804f8c0) at mail-transaction-log-view.c:794 794 mail-transaction-log-view.c: No such file or directory. (gdb) bt #0 0x00007f83d63aa757 in mail_transaction_log_view_mark (view=0x7f83d804f8c0) at mail-transaction-log-view.c:794 #1 0x00007f83d63a3796 in view_sync_have_expunges (view=0x7f83d804f7e0) at mail-index-view-sync.c:223 #2 mail_index_view_sync_begin (view=0x7f83d804f7e0, flags=flags@entry=MAIL_INDEX_VIEW_SYNC_FLAG_NOEXPUNGES) at mail-index-view-sync.c:583 #3 0x00007f83d6382168 in index_mailbox_sync_init (box=box@entry=0x7f83d8049f80, flags=flags@entry=(MAILBOX_SYNC_FLAG_FAST | MAILBOX_SYNC_FLAG_NO_EXPUNGES), failed=<optimized out>) at index-sync.c:226 #4 0x00007f83d632983b in maildir_storage_sync_init (box=0x7f83d8049f80, flags=(MAILBOX_SYNC_FLAG_FAST | MAILBOX_SYNC_FLAG_NO_EXPUNGES)) at maildir-sync.c:1120 #5 0x00007f83d6356cf9 in mailbox_sync_init (box=box@entry=0x7f83d8049f80, flags=flags@entry=(MAILBOX_SYNC_FLAG_FAST | MAILBOX_SYNC_FLAG_NO_EXPUNGES)) at mail-storage.c:1668 #6 0x00007f83d6835e5e in imap_sync_init (client=client@entry=0x7f83d8046b60, box=<optimized out>, imap_flags=(unknown: 0), flags=(MAILBOX_SYNC_FLAG_FAST | MAILBOX_SYNC_FLAG_NO_EXPUNGES)) at imap-sync.c:230 #7 0x00007f83d6836af0 in cmd_sync_client (sync_cmd=0x7f83d8047760) at imap-sync.c:739 #8 cmd_sync_delayed_real (client=0x7f83d8046b60) at imap-sync.c:877 #9 cmd_sync_delayed (client=client@entry=0x7f83d8046b60) at imap-sync.c:885 #10 0x00007f83d682db61 in client_handle_input (client=client@entry=0x7f83d8046b60) at imap-client.c:906 #11 0x00007f83d682de35 in client_input (client=0x7f83d8046b60) at imap-client.c:933 #12 0x00007f83d608c247 in io_loop_call_io (io=0x7f83d8047660) at ioloop.c:388 #13 0x00007f83d608cfd7 in io_loop_handler_run (ioloop=ioloop@entry=0x7f83d8030760) at ioloop-epoll.c:220 #14 0x00007f83d608bde8 in io_loop_run (ioloop=0x7f83d8030760) at ioloop.c:412 #15 0x00007f83d603cc93 in master_service_run (service=0x7f83d80305f0, callback=<optimized out>) at master-service.c:566 #16 0x00007f83d68222f4 in main (argc=2, argv=0x7f83d8030390) at main.c:400 Here are the settings we’re running (I’ve removed our domain and path information): # 2.2.9: /etc/dovecot/dovecot.conf # OS: Linux 3.13.0-24-generic x86_64 Ubuntu 14.04.1 LTS auth_mechanisms = plain login base_dir = /var/run/dovecot/ default_client_limit = 1024 default_process_limit = 256 default_vsz_limit = 1 G disable_plaintext_auth = no mail_privileged_group = mail namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } protocols = " imap lmtp pop3" service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } } service imap-login { inet_listener imap { port = 143 } process_min_avail = 4 service_count = 0 vsz_limit = 128 M } service imap-postlogin { executable = script-login /real/location/to/the/script.sh user = vmail } service imap { client_limit = 1 executable = imap imap-postlogin process_limit = 65536 } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } service pop3-login { inet_listener pop3 { port = 110 } service_count = 0 } ssl = no userdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } verbose_proctitle = yes protocol lmtp { hostname = real.domain.here postmaster_address = postmaster(a)real.domain.here } This seems like some sort of bug within dovecot since we’re seeing a seg fault, but any help would be appreciated. Thanks!

1 0

Mailing list test
by Timo Sirainen 21 Nov '14

21 Nov '14

Apparently this list has somehow broken.. Not really sure what the problem is, lets see what happens to this mail.

4 4

Test
by Jorge Bastos 20 Nov '14

20 Nov '14

Test msg, nock nock dovecot list?

1 0

indexes with ocfs2
by Eduardo Ramos 20 Nov '14

20 Nov '14

Hi guys! I'm having performance issues with my dovecot+ocfs2 environment, so I'm thinking about some changes. Now, I have mail store and indexes stored in a iscsi-ocfs2 volume with that options: mmap_disable = yes dotlock_use_excl = yes mail_fsync = always mail_nfs_storage = yes mail_nfs_index = yes lock_method = dotlock I want to change indexes to local volume ext4 and do this: mmap_disable = no mail_nfs_index = no Could it cause some problem? Thanks.

1 0

High I/O wait with Dovecot POP3
by Frido Otten 20 Nov '14

20 Nov '14

Hello, In the past we've had 4 loadbalanced servers configured with courier pop3 and dovecot handling respectively POP3 and IMAP connections. These 4 servers have a shared NFS storage on a Netapp FAS3220 controller with SAS disks. This setup is handling 50 POP3 sessions per second without any problems. Now we're installing 6 new loadbalanced servers to do the same job on the same storage, but using Dovecot to handle the POP3 sessions instead of Courier. The IMAP sessions are already handled by those 6 new servers, but we're encountering high iowait issues when using POP3 on those servers. I've applied the hints from http://wiki2.dovecot.org/NFS but this had no improvement. The 6 new servers are quad core Intel(R) Xeon(R) CPU X3323 @ 2.50GHz, with 4 GB RAM connected with gigabit ethernet connection to the storage. The 4 old servers are single core (w/o HT) P4 2,8 GHz with 1 GB RAM. # dovecot --version 2.1.7 # /usr/sbin/dovecot -n # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-686-bigmem i686 Debian 6.0.10 ext4 auth_cache_negative_ttl = 0 auth_cache_size = 8 k auth_mechanisms = plain digest-md5 cram-md5 login base_dir = /var/run/imap/ dict { acl = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext } disable_plaintext_auth = no login_greeting = Dovecot MX. login_log_format_elements = user=<%u> method=%m rip=%r lip=%l %c mail_fsync = always mail_location = maildir:/var/spool/mail/%1u/%1.1u/%u mail_nfs_index = yes mail_nfs_storage = yes maildir_stat_dirs = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave mmap_disable = yes namespace { inbox = yes location = prefix = separator = . type = private } namespace { list = children location = maildir:/var/spool/mail/%%1u/%%1.1u/%%u/:INDEX=/var/spool/mail/%1u/%1.1u/%u/shared/%%u prefix = shared.%%u. separator = . subscriptions = no type = shared } passdb { args = /etc/dovecot/dovecot-sql-auth.conf driver = sql } plugin { acl = vfile acl_shared_dict = proxy::acl quota = maildir quota_rule2 = Trash:storage=+25M } protocols = imap service anvil { client_limit = 4614 } service auth { client_limit = 2560 executable = /usr/lib/dovecot/auth unix_listener auth-master { mode = 0600 user = exim } user = dovecot } service dict { unix_listener dict { group = exim mode = 0660 user = exim } } service imap-login { chroot = login client_limit = 2048 executable = /usr/lib/dovecot/imap-login inet_listener imap { address = *, :: port = 143 } inet_listener imaps { address = *, :: port = 993 } process_limit = 2048 process_min_avail = 3 service_count = 0 user = dovecot vsz_limit = 128 M } service imap { executable = /usr/lib/dovecot/imap process_limit = 2048 } service managesieve-login { chroot = login client_limit = 2048 process_limit = 2048 process_min_avail = 3 service_count = 0 user = dovecot vsz_limit = 128 M } service managesieve { process_limit = 2048 } service pop3-login { chroot = login client_limit = 512 inet_listener pop3 { address = 1.2.3.4 port = 110 } inet_listener pop3s { address = 1.2.3.4 port = 0 } process_limit = 512 process_min_avail = 3 service_count = 0 user = dovecot vsz_limit = 128 M } service pop3 { process_limit = 2560 } ssl_cert = </etc/ssl/certs/wildcardcertificate.crt ssl_key = </etc/ssl/private/wildcardcertificate.key syslog_facility = local7 userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-sql-auth.conf driver = sql } protocol imap { mail_plugins = quota imap_quota acl imap_acl } protocol pop3 { pop3_uidl_format = %v.%u } protocol lda { auth_socket_path = /var/run/imap/auth-master info_log_path = /var/log/dovecot-deliver.log log_path = /var/log/dovecot-deliver.log mail_plugins = sieve quota postmaster_address = Mailer-Daemon(a)mx.domain.nl rejection_reason = Your message with subject "%s" was automatically rejected:%n%r sendmail_path = /usr/sbin/exim } Best regards, Frido

3 3

redis dict auth and default_fields
by brd 20 Nov '14

20 Nov '14

Hi all, i'm trying to configure default_fields with redis dict (allow_nets, proxy, ...) but it seems that the properties defined are not used even if they appear on output of doveconf. It is a known behaviour? Does default_fields works only for ldap db? I have a director+NFS environment and with dict passdb i'have to put proxy=y for every entry in pass/userdb; to limit the redis memory footprint it should be cool if the proxy=y can be configured as a default_field. It is a limit of using dict for pass/userdb cause using SQL you can manage it as a SELECT fixed field, using LDAP you can manage with default_fields but with dict you are forced to put all inside the db entries. doveconf output: [...] passdb { args = /etc/dovecot/dovecot-dict-auth.conf.ext default_fields = proxy=y driver = dict } [...] Regards -brd

1 0

Dovecot auth process repeatedly crashes on OS X Server 10.9
by James Reynolds 20 Nov '14

20 Nov '14

My dovecot/auth process crashes several times a minute, sometimes at the same second, sometimes randomly. I’ve turned on auth_debug and been pouring over everything trying to see if I can see what is going on but I can’t find anything. I’m running OS X Server 10.9 and dovecot 2.2.5. I can’t say for sure, but it looks to me like the crashed process doesn’t even save anything to mail-debug.log before it crashes. It takes about 2 seconds for it to come up. Once it crashed about 10 times in 2 seconds. Can anyone give me any ideas where I should look? Here are relevant portions from logs: mail-info.log Nov 06 17:19:10 pop3-login: Info: Aborted login (auth process communication failure): user=<>, method=DIGEST-MD5, rip=155.101.106.229, lip=10.0.0.128, TLS mail-err.log Nov 06 17:19:10 pop3-login: Warning: Auth connection closed with 1 pending requests (max 0 secs, pid=66114, EOF) Nov 06 17:19:10 auth: Fatal: master: service(auth): child 66100 killed with signal 11 (core dumps disabled) It looks exactly like what is discussed here: https://discussions.apple.com/thread/6482632?start=0&tstart=0 I do have clients using Outlook. I haven’t run wireshark or tried to verify it is Outlook by testing different clients. postconf -n # 2.2.5: /Library/Server/Mail/Config/dovecot/dovecot.conf # OS: Darwin 13.3.0 x86_64 hfs auth_mechanisms = cram-md5 digest-md5 plain login auth_realms = biomail.biology.utah.edu auth_socket_path = /var/run/dovecot/auth-userdb auth_username_format = %n debug_log_path = /Library/Logs/Mail/mail-debug.log default_internal_user = _dovecot default_login_user = _dovenull first_valid_gid = 6 first_valid_uid = 6 imap_id_log = * imap_id_send = "name" * "version" * imap_urlauth_submit_user = submit info_log_path = /Library/Logs/Mail/mail-info.log log_path = /Library/Logs/Mail/mail-err.log login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c mail_access_groups = mail mail_attribute_dict = file:/Library/Server/Mail/Data/attributes/attributes.dict mail_location = maildir:/Library/Server/Mail/Data/mail/%u mail_log_prefix = "%s(pid %p user %u): " mail_plugins = quota zlib acl fts fts_sk managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave mdbox_rotate_size = 200 M namespace acl-mailboxes { list = children location = maildir:/Library/Server/Mail/Data/mail/users/%%u:INDEX=/Library/Server/Mail/Data/mail/shared/%%u prefix = shared.%%u. separator = . subscriptions = no type = shared } namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } namespace list-archives { list = children location = maildir:/Library/Server/Mail/Data/listserver/messages/archive/lists/%%u:INDEX=/Library/Server/Mail/Data/listserver/messages/archive/shared/%%u prefix = archives.%%u. separator = . subscriptions = no type = shared } passdb { driver = od } passdb { args = /Library/Server/Mail/Config/dovecot/submit.passdb driver = passwd-file } plugin { acl = vfile:/Library/Server/Mail/Config/dovecot/global-acls:cache_secs=300 acl_shared_dict = file:/Library/Server/Mail/Data/shared/shared-mailboxes fts = sk quota = maildir:User quota quota_warning = storage=100%% quota-exceeded %u sieve = /Library/Server/Mail/Data/rules/%u/dovecot.sieve sieve_dir = /Library/Server/Mail/Data/rules/%u stats_refresh = 30 secs stats_track_cmds = yes } postmaster_address = postmaster(a)biology.utah.edu protocols = imap pop3 lmtp sieve quota_full_tempfail = yes service auth { idle_kill = 15 mins unix_listener auth-userdb { user = _dovecot } } service dns_client { unix_listener dns-client { mode = 0600 } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } service_count = 0 } service imap { client_limit = 5 process_limit = 200 service_count = 0 } service indexer-worker { user = _dovecot } service lmtp { unix_listener lmtp { mode = 0600 } } service managesieve-login { inet_listener sieve { port = 4190 } } service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 ssl = yes } } service pop3 { client_limit = 5 process_limit = 200 service_count = 0 } service quota-exceeded { executable = script /Applications/Server.app/Contents/ServerRoot/usr/libexec/dovecot/quota-exceeded.sh unix_listener quota-exceeded { group = mail mode = 0660 user = _dovecot } user = _dovecot } service quota-warning { executable = script /Applications/Server.app/Contents/ServerRoot/usr/libexec/dovecot/quota-warning.sh unix_listener quota-warning { group = mail mode = 0660 user = _dovecot } user = _dovecot } service stats { fifo_listener stats-mail { mode = 0600 user = _dovecot } } ssl_ca = </etc/certificates/biomail.biology.utah.edu.CE3811751089890AEEC60B91DF2C083EE1BAD5EB.chain.pem ssl_cert = </etc/certificates/biomail.biology.utah.edu.CE3811751089890AEEC60B91DF2C083EE1BAD5EB.cert.pem ssl_cipher_list = ALL:!LOW:!SSLv2:!EXP:!aNULL:!ADH:!eNULL ssl_key = </etc/certificates/biomail.biology.utah.edu.CE3811751089890AEEC60B91DF2C083EE1BAD5EB.key.pem ssl_key_path = /etc/certificates/biomail.biology.utah.edu.CE3811751089890AEEC60B91DF2C083EE1BAD5EB.key.pem userdb { args = partition=/Library/Server/Mail/Config/dovecot/partition_map.conf enforce_quotas=no driver = od } userdb { args = /Library/Server/Mail/Config/dovecot/submit.passdb driver = passwd-file } verbose_proctitle = yes protocol lmtp { mail_plugins = quota zlib acl fts fts_sk sieve } protocol lda { mail_plugins = quota zlib acl fts fts_sk sieve } protocol imap { mail_max_userip_connections = 20 mail_plugins = quota zlib acl fts fts_sk imap_acl imap_quota imap_zlib } protocol pop3 { mail_max_userip_connections = 6 } Here’s part of a crash report: Process: auth [60325] Path: /Applications/Server.app/Contents/ServerRoot/usr/libexec/dovecot/auth Identifier: auth Version: 294 Code Type: X86-64 (Native) Parent Process: dovecotd [149] Responsible: dovecotd [149] User ID: 214 Date/Time: 2014-11-06 16:34:20.777 -0700 OS Version: Mac OS X 10.9.4 (13E28) Report Version: 11 Anonymous UUID: 9EB07E95-1536-96FA-A8C7-3784045DCDDE Crashed Thread: 0 Dispatch queue: com.apple.main-thread Exception Type: EXC_BAD_ACCESS (SIGSEGV) Exception Codes: KERN_INVALID_ADDRESS at 0x0000000000000000 VM Regions Near 0: --> __TEXT 0000000103b39000-0000000103b6a000 [ 196K] r-x/rwx SM=COW /Applications/Server.app/Contents/ServerRoot/usr/libexec/dovecot/auth Thread 0 Crashed:: Dispatch queue: com.apple.main-thread 0 libsystem_c.dylib 0x00007fff8a181732 strlen + 18 1 libdovecot.0.dylib 0x0000000103bdc2b8 vstrconcat + 72 Thread 1: 0 libsystem_kernel.dylib 0x00007fff858f9e6a __workq_kernreturn + 10 1 libsystem_pthread.dylib 0x00007fff89901f08 _pthread_wqthread + 330 2 libsystem_pthread.dylib 0x00007fff89904fb9 start_wqthread + 13 Thread 2:: Dispatch queue: com.apple.libdispatch-manager 0 libsystem_kernel.dylib 0x00007fff858fa662 kevent64 + 10 1 libdispatch.dylib 0x00007fff8808f421 _dispatch_mgr_invoke + 239 2 libdispatch.dylib 0x00007fff8808f136 _dispatch_mgr_thread + 52 Thread 3: 0 libsystem_kernel.dylib 0x00007fff858f9e6a __workq_kernreturn + 10 1 libsystem_pthread.dylib 0x00007fff89901f08 _pthread_wqthread + 330 2 libsystem_pthread.dylib 0x00007fff89904fb9 start_wqthread + 13 Thread 0 crashed with X86 Thread State (64-bit): rax: 0x00007fff5c0c6878 rbx: 0x0000000000000001 rcx: 0x0000000000000001 rdx: 0x0000000000000001 rdi: 0x0000000000000000 rsi: 0x0000000103b6354d rbp: 0x00007fff5c0c6800 rsp: 0x00007fff5c0c6800 r8: 0x0000000103b6354e r9: 0x0000000000000000 r10: 0x00007fff8a1c92a8 r11: 0x00007fb60dca54c3 r12: 0x0000000000000028 r13: 0x00007fff5c0c6920 r14: 0x0000000000000028 r15: 0x0000000000000009 rip: 0x00007fff8a181732 rfl: 0x0000000000010246 cr2: 0x0000000000000000 Logical CPU: 0 Error Code: 0x00000004 Trap Number: 14

1 1

Handle of "subscription" file/folder for IMAP
by Jorge Bastos 19 Nov '14

19 Nov '14

Hi, For IMAP users, there's the subscription file in the user's home, and if I try to subscribe more imap folders that are invisible, there's that one, but as it is a file, nothing is supposed to happen. Is there an way to, allow users to create the "subscriptions" folder without any collision, or just deny or don't show this file as an possible folder (which Is not) to subscribe. What does people normally do? Thanks in advanced,

1 0

"subscription" file/folder for IMAP
by Jorge Bastos 19 Nov '14

19 Nov '14

Hi, For IMAP users, there's the subscription file in the user's home, and if I try to subscribe more imap folders that are invisible, there's that one, but as it is an file, nothing is supposed to happen. Is there an way to, allow users to create the "subscriptions" folder without any collision, or just deny or don't show this file as an possible folder (which Is not) to subscribe. What does people normally do? Thanks in advanced,

1 0

Storage IOPs Calculation for Qmail Server
by SasiKumar.K 19 Nov '14

19 Nov '14

Dear DovecotORG, In my organization, we are about to implement Qmail Server. * The number of current users will be 800, in future it may increase upto 1200. * The number of concurrent users will be 300. I am the engineer to deploy the Qmail in Linux server. I need to tell the storage team on the IOPs requirement. I requested 8TB usable space for the mail storage (can scale up in future). Kindly provide your suggestion on this. Thanks & Regards, K.SasiKumar Systems Engineer, Locuz Enterprise Solutions Limited, Bangalore

2 1

userdb-nss crash
by Yuriy Tabolin 18 Nov '14

18 Nov '14

Hi All. I have a some problem with dovecot, when I try to use nss in auth userdb. nss was setup to resolve users and group by winbind. nss and winbind works well, command "id user" shows remote user's info. I would like to use nss userdb, but dovecot crashes on start. Is this a bug or incorrect settings? Thank you for any help. dovecot log Nov 18 14:58:36 mail dovecot: auth: Panic: file userdb-nss.c: line 110 (userdb_nss_preinit): assertion failed: (bufsize > 0) Nov 18 14:58:36 mail dovecot: auth: Fatal: master: service(auth): child 19387 killed with signal 6 (core dumped) Nov 18 14:58:36 mail dovecot: master: Error: service(auth): command startup failed, throttling for 8 secs # doveconf -n # 2.2.15: /usr/local/etc/dovecot/dovecot.conf # OS: FreeBSD 10.0-RELEASE-p12 amd64 ufs auth_cache_size = 256 M auth_failure_delay = 3 secs auth_username_format = %n auth_verbose = yes auth_winbind_helper_path = /usr/local/bin/ntlm_auth base_dir = /var/run/dovecot/ disable_plaintext_auth = no listen = * mail_location = maildir:/home/%u/Maildir passdb { args = dovecot driver = pam } protocols = imap service anvil { client_limit = 2051 } service auth { client_limit = 3000 } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } process_limit = 1000 process_min_avail = 5 service_count = 1 vsz_limit = 64 M } service imap { process_limit = 2048 vsz_limit = 256 M } ssl = no userdb { args = service=winbind driver = nss } verbose_proctitle = yes protocol imap { mail_max_userip_connections = 20 } # gdb /usr/local/libexec/dovecot/auth /home/tabolin/auth.core GNU gdb 6.1.1 [FreeBSD] Copyright 2004 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "amd64-marcel-freebsd"...(no debugging symbols found)... Core was generated by `auth'. Program terminated with signal 6, Aborted. Reading symbols from /usr/local/lib/dovecot/libdovecot.so.0...(no debugging symbols found)...done. Loaded symbols for /usr/local/lib/dovecot/libdovecot.so.0 Reading symbols from /lib/libcrypt.so.5...(no debugging symbols found)...done. Loaded symbols for /lib/libcrypt.so.5 Reading symbols from /usr/lib/libpam.so.5...(no debugging symbols found)...done. Loaded symbols for /usr/lib/libpam.so.5 Reading symbols from /usr/local/lib/libldap-2.4.so.2...(no debugging symbols found)...done. Loaded symbols for /usr/local/lib/libldap-2.4.so.2 Reading symbols from /usr/local/lib/liblber-2.4.so.2...(no debugging symbols found)...done. Loaded symbols for /usr/local/lib/liblber-2.4.so.2 Reading symbols from /lib/libc.so.7...(no debugging symbols found)...done. Loaded symbols for /lib/libc.so.7 Reading symbols from /usr/lib/libssl.so.7...(no debugging symbols found)...done. Loaded symbols for /usr/lib/libssl.so.7 Reading symbols from /lib/libcrypto.so.7...(no debugging symbols found)...done. Loaded symbols for /lib/libcrypto.so.7 Reading symbols from /libexec/ld-elf.so.1...(no debugging symbols found)...done. Loaded symbols for /libexec/ld-elf.so.1 #0 0x00000000114ece1a in kill () from /lib/libc.so.7 (gdb) # cat /etc/nsswitch.conf group: files winbind group_compat: nis hosts: files dns networks: files passwd: files winbind passwd_compat: nis shells: files services: compat services_compat: nis protocols: files rpc: files # cat /etc/pam.d/dovecot auth required /usr/local/lib/pam_winbind.so account required /usr/local/lib/pam_winbind.so -- <http://speechpro.com> С уважением, *Таболин Юрий Олегович* Системный администратор Центр Речевых Технологий Best regards, Tabolin Yuriy System administrator Speech Technology Center Тел/Tel: +7 (812) 325-8848, доб/ext 6225 Факс/Fax: +7 (812) 327-92-97 Моб/Mob: +7 (981) 130-23-03 <http://www.linkedin.com/company/speech-technology-center> <https://twitter.com/speechpro_ru> <http://vk.com/speechpro> <https://www.facebook.com/speechpro.ru>

1 0

custom ssh port doveadm sync
by dvm＠rdyn.net 18 Nov '14

18 Nov '14

Hi all, First sorry i really couldn't find it back been searching everywhere even the docs and its bit confusing. I am using # doveadm -D sync -u *(a)mydomain.net remote:myserver.net # which works perfect however for security reasons we now need to change the sshd port on the remote server. How do i tell doveadm to use a custom SSH port (would love to continue to use just the ssh connection), if anyone could explain that would be great, because all i found is custom tcp or tcp ssl which is not what we want to use, as i wish to stick with custom ssh port. Regards, r. -- This email was Virus checked by UTM 9. http://www.astaro.org

2 3

Different SSL certificates per IP and protocol
by tree 18 Nov '14

18 Nov '14

Hi Dovecot Users and Developers, I am hosting the server with multiple domains. I have setup the dovecot with the instructions from http://wiki2.dovecot.org/SSL/DovecotConfiguration Each domain has it's own ip address. However, when I connect via Thunderbird or any other mail clients, the client is ONLY picking up the top-level "default" ssl_key and ssl_cert and the certificat in /etc/ssl/dovecot.pem Is this a bug? This is on Debian Wheezy. Any help pointing in the right direction would be appreciated thanks. Here is the ssl section: ----------- ssl_cert = </etc/ssl/dovecot.pem ssl_key = </etc/ssl/dovecot.pem local 192.0.2.10 { # instead of IP you can also use hostname, which will be resolved protocol imap { ssl_cert = </etc/ssl/dovecot/imap-01.example.com.cert.pem ssl_key = </etc/ssl/dovecot/imap-01.example.com.key.pem } protocol pop3 { ssl_cert = </etc/ssl/dovecot/pop-01.example.com.cert.pem ssl_key = </etc/ssl/dovecot/pop-01.example.com.key.pem } } local 192.0.2.20 { protocol imap { ssl_cert = </etc/ssl/dovecot/imap-02.example.com.cert.pem ssl_key = </etc/ssl/dovecot/imap-02.example.com.key.pem } protocol pop3 { ssl_cert = </etc/ssl/dovecot/pop-02.example.com.cert.pem ssl_key = </etc/ssl/dovecot/pop-02.example.com.key.pem } } -----------------------

2 1

Mail sync at filesystem level
by Cédric Jeanneret 18 Nov '14

18 Nov '14

Hello, I'm currently building a mail infra using some decentralized filesystem for the storage. As I'm wanting to get multiple "entry-points" (servers running dovecot + postfix + other mail-related stuff), all of them sharing the same storage (most probably xtreemfs), how will dovecot cope in this case? As I see things: server1 gets a mail for User1; it pushes it to the xtreemfs directory. server2 shares the same xtreemfs directory, thus it can access the same mail listing User1 connects to server2: will he see the new mail? Will dovecot on server2 know about it? Thanks! Cheers, C.

1 0

Understanding why Dovecot unexpectedly died
by Luca Bertoncello 18 Nov '14

18 Nov '14

Hi list! I use Dovecot 1.2.17 (I can't upgrade right now, due to many reasons), controlled by Pacemaker (I have an HA-Cluster). Now I see that Pacemaker restarts often Dovecot. I wrote my own script to manage Dovecot, since Pacemaker does not have his own. My script, by the "monitor" section has this: monitor) if [ ! -e $OCF_RESKEY_pid ]; then echo "stopped (no pidfile)" echo "DOVECOT STOPPED - NO PIDFILE" | /usr/bin/logger -p local0.info -t DOVECOT-MONITOR -i exit $OCF_NOT_RUNNING else /bin/ps axuwf | /bin/grep `/bin/cat $OCF_RESKEY_pid` | /bin/grep -v grep > /dev/null 2>&1 if [ $? -ne 0 ]; then echo "stopped" echo "DOVECOT STOPPED - NO PROCESS" | /usr/bin/logger -p local0.info -t DOVECOT-MONITOR -i exit $OCF_NOT_RUNNING else if [ "`/bin/netstat -tupan | /bin/grep dovecot | /bin/grep $OCF_RESKEY_bindaddr | /usr/bin/wc -l`" -ne 0 ]; then exit $OCF_SUCCESS else echo "DOVECOT STOPPED - NO LISTEN [`/bin/netstat -tupan | /bin/grep dovecot`]" | /usr/bin/logger -p local0.info -t DOVECOT-MONITOR -i exit $OCF_ERR_GENERIC fi fi fi exit $OCF_SUCCESS ;; The "loggers" was added now to try to understand why it dies... Well, I can see in my syslog, when Pacemaker restarts Dovecot, these lines: ov 15 18:59:09 mail01 DOVECOT-MONITOR[530]: DOVECOT STOPPED - NO LISTEN [tcp 0 0 192.168.33.1:37545 192.168.33.3:3306 ESTABLISHED 637/dovecot-auth Nov 15 18:59:09 mail01 DOVECOT-MONITOR[530]: tcp 0 0 192.168.33.1:37537 192.168.33.3:3306 ESTABLISHED 529/dovecot-auth] So, there is no "dovecot"-Process listening anymore... Normally I have these: tcp 0 0 0.0.0.0:110 0.0.0.0:* LISTEN 634/dovecot tcp 0 0 0.0.0.0:143 0.0.0.0:* LISTEN 634/dovecot tcp 0 0 0.0.0.0:993 0.0.0.0:* LISTEN 634/dovecot tcp 0 0 0.0.0.0:995 0.0.0.0:* LISTEN 634/dovecot tcp 0 0 192.168.33.1:40994 192.168.33.3:3306 VERBUNDEN 891/dovecot-auth tcp 0 0 192.168.33.1:40984 192.168.33.3:3306 VERBUNDEN 638/dovecot-auth tcp6 0 0 :::110 :::* LISTEN 634/dovecot tcp6 0 0 :::143 :::* LISTEN 634/dovecot tcp6 0 0 :::993 :::* LISTEN 634/dovecot tcp6 0 0 :::995 :::* LISTEN 634/dovecot In the mail.log and mail.err I can't see anything but: Nov 15 18:59:13 mail01 dovecot: Dovecot v1.2.17 starting up Nov 15 18:59:13 mail01 dovecot: auth-worker(default): mysql: Connected to 192.168.33.3 (exim) And in the syslos there is nothing about Dovecot... Any idea? Thanks a lot! Luca Bertoncello (lucabert(a)lucabert.de)

2 1

stop deletion of mails
by Edwardo Garcia 18 Nov '14

18 Nov '14

Is possible with dovecot? Legal department have told us we need to stop anyone from delete email on corporate mail server, so nobody, even managers can not anymore delete any mail?

4 4

LMTPS : TLS over LMTP not working
by Stanislas SABATIER 17 Nov '14

17 Nov '14

Hello, I tried to activate SSL on LMTP service, to secure connections between Postfix and Dovecot on my LAN, but Dovecot is not negociating a TLS session with Postfix. If I enforce TLS for LMTP at Postfix's side, communication between Postfix and Dovecot is not working. I put ssl = yes ssl_cert = </dovecot/ssl/ssl-LMTP.pem ssl_key = </dovecot/ssl/ssl-LMTP.key in section protocol LMTP within 20-lmtp.conf and service lmtp { inet_listener lmtp { name = dovecot_lmtp address = xx.xx.xx.xx port = 26 ssl = yes } process_min_avail = 5 } within 10-master.conf Did I miss something ? Thank you for your help. Regards, Stan

4 10