- dovecot - dovecot.org

Configuring pigeonhole/sieve
by Timothy Murphy 02 Aug '14

02 Aug '14

I've been trying for a few days to get pigeonhole/sieve working in order to filter email with spamassassin. Unfortunately I have had no success; and I have found no document which simply tells me what changes I need to make to which files, and what other action I have to take. I'm running CentOS-7 on my home-server, and have postfix + dovecot working perfectly; moreover spam is marked with ***Spam*** added to the Subject header. The only problem is that this spam is getting through to my inbox. It's clear that I'm overlooking some action I should be taking, and I'm sure there must be a document somewhere that gives simple and complete instructions on setting up pigeonhole/sieve to work with SpamAssassin. If anyone knows of such a document I should be eternally grateful. I was told at one point that "You need to pass your mail through dovecot-lda or lmtp", but I have no idea what this means. I see in /var/log/dovecot when I re-start dovecot "Aug 02 00:13:04 master: Info: Dovecot v2.2.10 starting up for imap, pop3, lmtp, sieve, sieve (core dumps disabled", which seems to imply that lmtp is enabled. Any suggestions or advice gratefully received. -- Timothy Murphy e-mail: gayleard /at/ eircom.net School of Mathematics, Trinity College, Dublin 2, Ireland

2 1

Dovecot EE on SciLinux 6.5: No Config Files in /etc
by Asai 02 Aug '14

02 Aug '14

Greetings, I tried installing Dovecot EE on Scientific 6.5 yesterday, but there was no repo under that release version, so I hardcoded the release version to 6 in yum.repos.d/dovecot.repo. That worked, but when I installed, it didn't install any default configuration files. /etc/dovecot was empty. Is that to be expected for EE? -- --Asai

2 2

Fwd: HIGHESTMODSEQ tracking
by Kostya Vasilyev 01 Aug '14

01 Aug '14

Michael, 2014-07-10 1:37 GMT+04:00 Michael M Slusarz <slusarz(a)curecanti.org>: Quoting Kostya Vasilyev <kmansoft(a)gmail.com>: > > Hello, >> >> I'd like to follow up on someone else's old thread: >> >> http://dovecot.org/list/dovecot/2012-April/082624.html >> >> I understand that Dovecot (that 2012 discussion was about version 2.0.18) >> can return "HIGHESTMODSEQ 1" upon SELECT if persistent modseq tracking was >> never enabled for a mailbox. >> > > This behavior is largely irrelevant ... a client should ignore any > HIGHESTMODSEQ data that is sent if it (the client) hasn't sent a CONDSTORE > enabling command. True, but I was just pointing out a quirk that existed in a older version, to ask for a clarification. > > > I'd like to get a clarification on how to enable proper persistent modseq >> tracking. >> >> Per RFC 4551, "A client supporting CONDSTORE.... indicates its willingness >> to receive mod-sequence updates... by issuing:" >> >> SELECT mailbox (CONDSTORE) >> STATUS (... HIGHESTMODSEQ ...) >> ... others ... >> > > 4551 is deprecated --> it is now RFC 7162. > Thanks, didn't notice that 4551 was "obsoleted". > > Also note there's actually 6 different categories of CONDSTORE-enabling > commands. SELECT/EXAMINE with CONDSTORE is just one of the categories. > There are five listed in RFC 4551, yes, there are six in 7162, but my question was about two specific ones out of those five / six. > > These days, you *really* should be using QRESYNC instead though. There are some mail servers that support CONDSTORE but not QRESYNC. The old chicken and egg IMAP problem :) > > > It seems that Dovecot 2.1.7 (Debian 7.5) enables persistent modseq >> tracking >> after one of the above two commands (and maybe others). So far so good. >> > > Incorrect. Dovecot has supported CONDSTORE/QRESYNC since 1.2.0. Incorrect? I wrote: "it seems that Dovecot 2.1.7 enables persistent modseq tracking...". Are you implying that Dovecot 2.1.7 doesn't enable persistent modseq tracking in this case? I never claimed that earlier versions of Dovecot didn't advertise CONDSTORE or didn't implement it properly, etc. Perhaps I should have written "...after *any* of the two commands... (and maybe others)" -- meaning it does after either of those two commands, and the other ones I don't care about and so didn't test. > And as mentioned above, there are 6 different ways of enabling CONDSTORE. > (Enabling QRESYNC is done 1 way ... the "ENABLE QRESYNC" command). Yes, agreed, noted. I'm asking about two out of those five / six. And not just about what the RFC says, but about how real, out in the field, installed on mail servers that people use, possibly quite old, versions of Dovecot behave. So let me try again: Is sending SELECT ... (CONDSTORE) or STATUS (... HIGHESTMODSEQ ...) enough to enable reliable persistent modseq tracking for all versions of Dovecot which advertise CONDSTORE in their capabilities? Not what the currently relevant RFC says, but how Dovecot versions with CONDSTORE in their caps behave. This is the one thing I'd really like to know. > > > So my questions are: >> >> 1 - Is this (enabling persistent modseq) also the case for all Dovecot >> versions prior to 2.1.7 that advertise CONDSTORE? >> >> There must be people running older versions out there, older than 2.1.7. >> >> If not, how can I branch my logic to not use HIGHESTMODSEQ, given that >> Dovecot doesn't appear to return any version info via its greeting or via >> the ID command? >> > > As noted above, this is irrelevant. As a client author, you should ALWAYS > ignore HIGHESTMODSEQ if you haven't enabled CONDSTORE/QRESYNC . All caps look nice in RFCs, but the real world has more variety :) > > > 3 - I guess the change to return NOMOSEQ instead of "1" for mailboxes with >> modseq tracking disabled, as mentioned in that discussion from 2012, never >> happened? At least on the 2.1 branch? >> > > NOMODSEQ is only relevant *if* you have enabled CONDSTORE. Agreed. However: > Returning NOMODSEQ on mailboxes that don't support persistent > mod-sequences has worked since 1.2.0, at least as far as I know. The linked message from 2012, discussing 2.0.18, says: "2) If a mailbox doesn't have modseqs enabled, return NOMODSEQ. This isn't ideal, but seems like the only possibility" And based on my tests, Dovecot 2.1.7 returns "HIGHESTMODSEQ 1" for mailboxes where modseq tracking has not been enabled. You're largely right about the value only being relevant if the client enabled CONDSTORE, and I don't care too much about this quirk, just wanted to to get a clarification on this as well, if possible. Thanks, -- K

3 7

Differences in "Delivered-To" header between deliver and LMTP
by Jeff Rice 01 Aug '14

01 Aug '14

Hi, I'm transitioning my server over from using the deliver LDA and LMTP. Suddenly a bunch of sieve filters stopped working, and I noticed the contents of the Delivered-To header are different. Using Dovecot's deliver LDA, the contents are a bare email address (foo(a)bar.com) Using Dovecot LMTP, they are in brackets (<foo(a)bar.com>). Is there a reason why this isn't consistent between the two delivery agents? It seems like it ought to be. Jeff

6 7

[PATCH] Fix typo in src/imap-urlauth/imap-urlauth-worker.c
by Jelmer Vernooij 01 Aug '14

01 Aug '14

The attached trivial patch fixes a typo in src/imap-urlauth/imap-urlauth-worker.c. Cheers, Jelmer

2 1

Maybe error in login-common/login-proxy.c/proxy_client_input
by Potapov Sergey 01 Aug '14

01 Aug '14

Hi! It seems that o_stream_cork should be done on proxy->server_output but not on proxy->client_output. o_stream_cork(proxy->client_output); ret2 = o_stream_send(proxy->server_output, buf, ret); o_stream_uncork(proxy->server_output);

2 1

solr_add_definite_query quotes queries
by G H 01 Aug '14

01 Aug '14

So Solr 4.0 and higher supports regular expressions in searching. However, Dovecot is quoting search queries in solr_add_definite_query (via solr_add_str_arg). This breaks regex searching. I do a sample search for emails with "merged" in their body via the query /merg.*/. If you look at the Solr logs, it is sending: q=body:"/merg.*/" which is converted to body:\"/merg.*/\" inside Solr. but if it had sent only: q=body:/merg.*/ then regex would have worked. Is regular expression searching on the dashboard? I'm considering patching fts-backend-solr.c to not quote-enclose the search, but am looking for any better suggestions. Or perhaps not quote-enclose if the search is prefixed with RX: (ie: "RX:/merg.*/")... Thanks, G H

2 1

using flat file for dictionary quota backend
by www-1223 01 Aug '14

01 Aug '14

Hi! I want use flat file for dictionary quota backend, but I didn't find the description of that he has to contain. Somebody can give an example of such file? PS: sorry for my English. Regards, Oleg Ivanov.

1 0

vacation rule addresses
by Héctor Moreno Blanco 01 Aug '14

01 Aug '14

Hello everyone, We have Dovecot 2.1.6 and Pigeonhole 0.3.0. We would like Pigeonhole not to send the vacation response to noreply(a)whatever.com<mailto:noreply@whatever.com>. In this wiki http://wiki2.dovecot.org/Pigeonhole/Sieve/Usage#Vacation_auto-reply are showed the different exceptions, but the noreply is not in there. How can I add this address, or another one, to this exception list? Thank you very much in advanced. Kind regards. Héctor Moreno. P Please consider the environment before printing this e-mail. ______________________ This message including any attachments may contain confidential information, according to our Information Security Management System, and intended solely for a specific individual to whom they are addressed. Any unauthorised copy, disclosure or distribution of this message is strictly forbidden. If you have received this transmission in error, please notify the sender immediately and delete it. ______________________ Este mensaje, y en su caso, cualquier fichero anexo al mismo, puede contener informacion clasificada por su emisor como confidencial en el marco de su Sistema de Gestion de Seguridad de la Informacion siendo para uso exclusivo del destinatario, quedando prohibida su divulgacion copia o distribucion a terceros sin la autorizacion expresa del remitente. Si Vd. ha recibido este mensaje erroneamente, se ruega lo notifique al remitente y proceda a su borrado. Gracias por su colaboracion. ______________________

2 1

Re: [PATCH] Fix typo in src/imap-urlauth/imap-urlauth-worker.c
by Jelmer Vernooij 01 Aug '14

01 Aug '14

On Sun, Jul 20, 2014 at 12:50:43AM +0200, Jelmer Vernooij wrote: > The attached trivial patch fixes a typo in src/imap-urlauth/imap-urlauth-worker.c. Ping? > diff -r fd0616d553b0 -r 6fabd9046558 src/imap-urlauth/imap-urlauth-worker.c > --- a/src/imap-urlauth/imap-urlauth-worker.c Fri Jul 11 16:49:35 2014 +0300 > +++ b/src/imap-urlauth/imap-urlauth-worker.c Sun Jul 20 00:29:35 2014 +0200 > @@ -478,7 +478,7 @@ > } > if (client_run_url(client) < 0) { > client_abort(client, > - "Session aborted: Fatal failure while transfering URL"); > + "Session aborted: Fatal failure while transferring URL"); > return 0; > } > }

1 0

Solr 4+ schema.xml?
by G H 31 Jul '14

31 Jul '14

Does anyone have a Solr 4+ compatible schema.xml for dovecot indexing? I am trying to test to see if regex-based FTS searching works through IMAP, but Solr 4.9.0 is throwing an error, "SolrException: undefined field text", on startup with the schema.xml included with Dovecot 2.2.9. Thanks. G H

2 2

Issue with exim and auth protocol
by Mildred Ki'Lya 31 Jul '14

31 Jul '14

Hi, I'm trying to set up exim (4.83) as a submission server, and need to set up the dovecot authentication in exim. I'm having an issue with that (documented at <https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=756258>) The problem is that exim doesn't follow the handshake as described here: <http://wiki2.dovecot.org/Design/AuthProtocol>. The wiki page says that the client should start the handshake, but exim waits for the server to start and to receive the DONE command until it starts its own handshake. What I actually get is: exim connects to dovecot auth dovecot VERSION 1 1 dovecot SPID 48 And then, dovecot stops (I presume it waits for the client handshake, VERSION and CPID). Exim on its side waits for the DONE. This results in the SMTP connection by exim never replying to the AUTH PLAIN command. This is exim 4.80 (or 4.83) and dovecot 2.1.7. I have another server set up almost exactly the same (but with dovecot 2.1.17) where it does work. In that case, dovecot finishes the handshake before exim starts its handshake. It results in: exim connects to dovecot auth dovecot VERSION 1 1 dovecot MECH PLAIN plaintext dovecot SPID 10905 dovecot CUID 1 dovecot COOKIE d3861d29441f06d962490eab8549fd46 dovecot DONE exim VERSION 1 0 exim CPID 10619 exim AUTH 1 PLAIN service=smtp secured rip=82.247.184.53 lip=80.67.179.36 nologin resp=<base64 encoded string> I don't understand what could change the dovecot behaviour in that regard. Is there a solution that would only require modifying the configuration? Thank you, Mildred

3 6

Die Hütchen-Spiel Mafia wird das nicht gerne sehen. Diese Katze ist Profi!
by Michael Grimm 31 Jul '14

31 Jul '14

http://heftig.co/katze-mit-huetchen/

3 5

▶ Leopard Is Getting Relaxed big cat purrs - YouTube
by Michael Grimm 30 Jul '14

30 Jul '14

Whow! In einer Auffangstation für Wildtiere in den USA laut Spiegel.de http://www.youtube.com/watch?v=4BLoHyeevcU

1 0

dovecot-2-2-pigeonhole-92405f753f6a - 77e6a42bff9b
by Tamsy 30 Jul '14

30 Jul '14

Just a report to Stephan: I tried to compile two builds from the Mercurial: - dovecot-2-2-pigeonhole-92405f753f6a - dovecot-2-2-pigeonhole-77e6a42bff9b Both builds fail to compile with the same following error: ---------------- 8< ---------------- ../../src/lib-sieve-tool/.libs/libsieve-tool.a(sieve-tool.o): In function `sieve_tool_open_output_stream': /usr/local/src/dovecot-2-2-pigeonhole-77e6a42bff9b/src/lib-sieve-tool/sieve-tool.c:518: undefined reference to `o_stream_create_fd_autoclose' ../../src/lib-sieve/.libs/libdovecot-sieve.so: undefined reference to `i_stream_create_fd_autoclose' collect2: ld returned 1 exit status make[3]: *** [sievec] Error 1 make[3]: Leaving directory `/usr/local/src/dovecot-2-2-pigeonhole-77e6a42bff9b/src/sieve-tools' make[2]: *** [all-recursive] Error 1 make[2]: Leaving directory `/usr/local/src/dovecot-2-2-pigeonhole-77e6a42bff9b/src' make[1]: *** [all-recursive] Error 1 make[1]: Leaving directory `/usr/local/src/dovecot-2-2-pigeonhole-77e6a42bff9b' make: *** [all] Error 2 Server OS: 2 servers, both running on Ubuntu 10.04 32 Bit Rgds Tamsy

4 5

PAM and YubiKeys
by Jack 29 Jul '14

29 Jul '14

Hi List, I am trying to get authentication to Dovecot with a Yubikey OTP. I have the PAM modules installed and can successfully authenticate to ssh with the Yubikey, so I am confident that the network level and Yubikey configuration is correct. I can also authenticate to Dovecot via PAM using a plain password, however when I try to use the Yubikey authentication with Dovecot things don't go well. Network monitoring reveals that the software does not even attempt to connect to the authentication servers. My Dovecot authentication is configured as follows :- passdb { driver = pam args = failure_show_msg=yes dovecot override_fields = proxy host=1.2.3.4 master=XXXXXX pass=XXXXXX } userdb { driver = passwd-file args = username_format=%u /etc/dovecot/users } The dovecot Pam config file is :- auth sufficient pam_yubico.so id=99999 key="xxxxxxxxxxx" authfile=/etc/yubikey_mappings debug @include common-auth @include common-account @include common-session When failing to authenticate with Dovecot, the PAM debug log shows :- [../pam_yubico.c:parse_cfg(761)] called. [../pam_yubico.c:parse_cfg(762)] flags 0 argc 4 [../pam_yubico.c:parse_cfg(764)] argv[0]=id=xxxxxx [../pam_yubico.c:parse_cfg(764)] argv[1]=key="xxxxxx" [../pam_yubico.c:parse_cfg(764)] argv[2]=authfile=/etc/yubikey_mappings [../pam_yubico.c:parse_cfg(764)] argv[3]=debug [../pam_yubico.c:parse_cfg(765)] id=xxxxxx [../pam_yubico.c:parse_cfg(766)] key="xxxxxxxxx" [../pam_yubico.c:parse_cfg(767)] debug=1 [../pam_yubico.c:parse_cfg(768)] alwaysok=0 [../pam_yubico.c:parse_cfg(769)] verbose_otp=0 [../pam_yubico.c:parse_cfg(770)] try_first_pass=0 [../pam_yubico.c:parse_cfg(771)] use_first_pass=0 [../pam_yubico.c:parse_cfg(772)] authfile=/etc/yubikey_mappings [../pam_yubico.c:parse_cfg(773)] ldapserver=(null) [../pam_yubico.c:parse_cfg(774)] ldap_uri=(null) [../pam_yubico.c:parse_cfg(775)] ldapdn=(null) [../pam_yubico.c:parse_cfg(776)] user_attr=(null) [../pam_yubico.c:parse_cfg(777)] yubi_attr=(null) [../pam_yubico.c:parse_cfg(778)] yubi_attr_prefix=(null) [../pam_yubico.c:parse_cfg(779)] url=(null) [../pam_yubico.c:parse_cfg(780)] capath=(null) [../pam_yubico.c:parse_cfg(781)] token_id_length=12 [../pam_yubico.c:parse_cfg(782)] mode=client [../pam_yubico.c:parse_cfg(783)] chalresp_path=(null) [../pam_yubico.c:pam_sm_authenticate(823)] get user returned: jack [../pam_yubico.c:pam_sm_authenticate(929)] conv returned 44 bytes [../pam_yubico.c:pam_sm_authenticate(947)] Skipping first 0 bytes. Length is 44, token_id set to 12 and token OTP always 32. [../pam_yubico.c:pam_sm_authenticate(954)] OTP: ccccccbcitfdueencldivbcjvghvikdtrnujbgubirru ID: ccccccbcitfd [../pam_yubico.c:pam_sm_authenticate(985)] ykclient return value (101): Could not parse server response [../pam_yubico.c:pam_sm_authenticate(1038)] done. [Authentication service cannot retrieve authentication info] A successful authentication (via ssh) looks like [../pam_yubico.c:parse_cfg(761)] called. [../pam_yubico.c:parse_cfg(762)] flags 1 argc 4 [../pam_yubico.c:parse_cfg(764)] argv[0]=id=xxxx [../pam_yubico.c:parse_cfg(764)] argv[1]=key="xxxxxxxxxxxxxxxxxx" [../pam_yubico.c:parse_cfg(764)] argv[2]=authfile=/etc/yubikey_mappings [../pam_yubico.c:parse_cfg(764)] argv[3]=debug [../pam_yubico.c:parse_cfg(765)] id=xxxxxx [../pam_yubico.c:parse_cfg(766)] key="xxxxxxxxxxxxxxxxxxx" [../pam_yubico.c:parse_cfg(767)] debug=1 [../pam_yubico.c:parse_cfg(768)] alwaysok=0 [../pam_yubico.c:parse_cfg(769)] verbose_otp=0 [../pam_yubico.c:parse_cfg(770)] try_first_pass=0 [../pam_yubico.c:parse_cfg(771)] use_first_pass=0 [../pam_yubico.c:parse_cfg(772)] authfile=/etc/yubikey_mappings [../pam_yubico.c:parse_cfg(773)] ldapserver=(null) [../pam_yubico.c:parse_cfg(774)] ldap_uri=(null) [../pam_yubico.c:parse_cfg(775)] ldapdn=(null) [../pam_yubico.c:parse_cfg(776)] user_attr=(null) [../pam_yubico.c:parse_cfg(777)] yubi_attr=(null) [../pam_yubico.c:parse_cfg(778)] yubi_attr_prefix=(null) [../pam_yubico.c:parse_cfg(779)] url=(null) [../pam_yubico.c:parse_cfg(780)] capath=(null) [../pam_yubico.c:parse_cfg(781)] token_id_length=12 [../pam_yubico.c:parse_cfg(782)] mode=client [../pam_yubico.c:parse_cfg(783)] chalresp_path=(null) [../pam_yubico.c:pam_sm_authenticate(823)] get user returned: jack [../pam_yubico.c:pam_sm_authenticate(929)] conv returned 44 bytes [../pam_yubico.c:pam_sm_authenticate(947)] Skipping first 0 bytes. Length is 44, token_id set to 12 and token OTP always 32. [../pam_yubico.c:pam_sm_authenticate(954)] OTP: ccccccbcitfdetdfkbjrtfbuhgbtjgethkdebcgthgde ID: ccccccbcitfd [../pam_yubico.c:pam_sm_authenticate(985)] ykclient return value (0): Success [../pam_yubico.c:authorize_user_token(221)] Using system-wide auth_file /etc/yubikey_mappings [../pam_yubico.c:check_user_token(178)] Authorization line: jack:ccccccbcitfd [../pam_yubico.c:check_user_token(182)] Matched user: jack [../pam_yubico.c:check_user_token(187)] Authorization token: ccccccbcitfd [../pam_yubico.c:check_user_token(190)] Match user/token as jack/ccccccbcitfd [../pam_yubico.c:pam_sm_authenticate(1038)] done. [Success] I have just noticed that the 'flags' is set to 1 by ssh. I don't know where (or if) I can control how Dovecot sets that flag or if it has any relevance. The Pam configuration line for Yubikey is identical in the ssh configuration. Does anyone have any idea what is going wrong? Thanks in advance, Jack

1 0

identify MUA connecting?
by Juan Pablo 29 Jul '14

29 Jul '14

Hello I am using dovecot 1.2.15 on ubuntu. Is it possible to somehow log the MUA information that is connecting to Dovecot? The reason I am wanting to do this is I would like to know if people are getting their email on personal devices instead of work secured / standardized phones.

9 12

Missing IMAP Subfolders
by Tim 29 Jul '14

29 Jul '14

I've recently encountered an issue with my IMAP folders on Dovecot 2.0.19. When I telnet into my account and perform a list, I get the following response: A list "" "*" * LIST (\Unmarked) "." "INBOX" A OK List completed. However I know there are subfolders here and have examined the server directly via SSH and strangely: a select INBOX.Clients * OK [CLOSED] Previous mailbox closed. * FLAGS (\Answered \Flagged \Deleted \Seen \Draft) * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft \*)] Flags permitted. * 0 EXISTS * 0 RECENT * OK [UIDVALIDITY 1394028715] UIDs valid * OK [UIDNEXT 1] Predicted next UID * OK [HIGHESTMODSEQ 1] Highest a OK [READ-WRITE] Select completed. When I also subscribe to a couple if these which I am able to to do despite not being able to "LIST" them, I get this with LIST-EXTENDED: a04 LIST (SUBSCRIBED RECURSIVEMATCH) "*" "*" * LIST (\Subscribed \NonExistent) "." "INBOX" (CHILDINFO ("SUBSCRIBED")) * LIST (\Subscribed \NonExistent) "." "INBOX.Clients" (CHILDINFO ("SUBSCRIBED")) * LIST (\Subscribed \NonExistent) "." "INBOX.Clients.Bob" a04 OK List completed. Just not sure why a LIST is not giving me a full list as it's causing problems subscribing to these with Mail Clients. Any help is appreciated!

1 0

incremental mailbox syncs for quick migration
by Jogi Hofmüller 29 Jul '14

29 Jul '14

Hi all, We are facing quite large mailboxes (>10GB) in our migration from cyrus to dovecot. I did a test on one mailbox and repeated the sync a couple of times with the expected result that the second, third, etc. sync took only seconds compared to minutes for the first sync. We use this command to sync a mailbox: doveadm backup -R -u USER imapc: Are there any problems to be expected when we first do a sync for all mailboxes but do not migrate the users right away but instead do the actual migration using a second sync? Cheers, -- j.hofmüller http://thesix.mur.at/

1 0

problem migrating shared folders from cyrus to dovecot
by Jogi Hofmüller 29 Jul '14

29 Jul '14

Hi all, We face a problem migrating shared mailboxes from an old cyrus server to dovecot. Whereas migrating regular users works like a charm, the shared mailboxes cannot be migrated. dsync/doveadm states: "Error: Failed to access mailbox INBOX: Mailbox does not exist". This is somehow true since the shared mailboxes live not under user.mailbox but rather under shared.mailbox (cyrus special). Has anyone a solution for this peculiar problem? Cheers, -- j.hofmüller http://thesix.mur.at/

1 0

Multiple servers and NFS
by Richard Hector 29 Jul '14

29 Jul '14

Hi all, For some reason, I didn't go to http://wiki2.dovecot.org/NFS until now, and I'm starting to get worried ... The plan was to have multple servers (MXes) receiving mail, and delivering via LMTP to multiple backend dovecot servers (with amavis in front of dovecot; LMTP both sides). Then we'd have multiple servers for clients to use IMAP or POP3. This is more or less how the system already works, except with Courier IMAP, and postfix on the backends, delivering to maildirs with procmail. But with the recommendation to use the Director for both IMAP/POP3 and LMTP - that starts to sound like I need a whole bunch more servers to run Directors and proxies, and even then it might not be a good idea to have different servers running lmtp and imap/pop. One possible mitigating point is that our 'load balancing' is DNS round-robin, so a given client will probably stick with a single imap/pop server anyway, but if the user has multiple clients (desktop/mobile etc) then they may still hit different servers. Can someone clarify best practice for a setup needing multiple servers for load balancing and redundancy? Is Courier already likely to have been suffering these problems? Oh, the NFS server is a NetApp Filer, if that matters. I'm using dovecot 2.2.9 from debian wheezy backports, in order to get the quota policy daemon support. Thanks, Richard

9 19

Dovecot mailstore performance tuning
by Murray Trainer 29 Jul '14

29 Jul '14

HI All, We have a couple of dovecot director proxies and six backed mailstores each accessing mailboxes stored on five NFSv4 filsystems with about 1TB of mail on each in maildir format. We have about 800 max users on each mailstore at peak times and performance appears to starting to degrade at these times. The mailstores are pretty recent hardware with 64GB of RAM and 24 cores. The NFS storage is EMC VNX and we are doing about 250 I/O per sec upto max of 500 on each filesystem. I need to squeeze more performance out of these servers whether that is in the NFS client, Dovecot or Linux OS/kernel areas. We use LDAP for auth and I am doing some tuning in that area. The NFS filesystems are mounted with the options below: 10.11.0.238:/mailbox_store_01 on /home1 type nfs4 (rw,relatime,vers=4.0,rsize=65536,wsize=65536,namlen=255,hard,nordirplus,proto=tcp,port=0,timeo=600,retrans=2,sec=sys,clientaddr=10.11.0.96,local_lock=none,addr=10.11.0.238) My dovecot config is below. I am not seeing any obvious issues in the server logs. Any suggestions on how to improve performance would be appreciated. Thanks Murray # doveconf -n # 2.2.9: /etc/dovecot/dovecot.conf doveconf: Warning: service auth { client_limit=40960 } is lower than required under max. load (41280) doveconf: Warning: service anvil { client_limit=40970 } is lower than required under max. load (41183) # OS: Linux 3.13-0.bpo.1-amd64 x86_64 Debian 7.5 auth_cache_size = 64 M auth_cache_ttl = 2 hours auth_failure_delay = 0 auth_mechanisms = plain login auth_username_chars = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789!#$-=?^_{}~./@+%" auth_username_translation = +@ auth_worker_max_count = 256 base_dir = /var/run/dovecot/ disable_plaintext_auth = no first_valid_gid = 1001 first_valid_uid = 1001 mail_fsync = always mail_location = maildir:~/ managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave mmap_disable = yes namespace { inbox = yes location = prefix = INBOX. type = private } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { acl = vfile quota = maildir quota_rule = INBOX.Trash:ignore } protocols = " imap lmtp sieve pop3" service anvil { client_limit = 40970 } service auth-worker { user = dovecot } service auth { client_limit = 40960 unix_listener auth-userdb { group = mail mode = 0666 user = dovecot } } service imap-login { chroot = login inet_listener imap { address = *, [::] port = 143 } inet_listener imaps { address = * port = 993 ssl = yes } process_limit = 20480 process_min_avail = 32 service_count = 1 user = dovecot vsz_limit = 256 M } service imap { process_limit = 40960 vsz_limit = 256 M } service lmtp { inet_listener lmtp { address = 27.54.95.41 port = 24 } process_min_avail = 32 } service managesieve-login { client_limit = 40960 process_limit = 120 process_min_avail = 5 service_count = 0 vsz_limit = 64 M } service managesieve { process_limit = 4096 vsz_limit = 256 M } service pop3-login { chroot = login inet_listener pop3 { address = *, [::] port = 110 } inet_listener pop3s { address = * port = 995 ssl = yes } process_limit = 20480 process_min_avail = 32 service_count = 1 user = dovecot vsz_limit = 256 M } service pop3 { process_limit = 40960 vsz_limit = 256 M } ssl_cert =

2 1

Re: identify MUA connecting?
by Joseph Tam 29 Jul '14

29 Jul '14

Juan Pablo <juanpablo83(a)openmailbox.org> writes: > That is what I was not sure. I did not know what information was > possible available. I was thinking or hoping something same as http logs My dovecot 2 installation logs this information. E.g. Jul 26 07:13:02 server dovecot: imap(user): ID sent: name=iPad Mail, version=11D201, os=iOS, os-version=7.1.1 (11D201) Jul 26 07:13:38 server dovecot: imap-login: ID sent: name=com.google.android.email, os=android, os-version=4.4.4; KTU84P, vendor=LGE, x-android-device-model=Nexus 4, x-android-mobile-net-operator=Koodo, AGUID=...: user=<>, rip={client-ip}, lip={server-ip}, TLS, session=<BH7SSxn/CQBFrJG2> If you want this info, upgrade, as a later poster suggests. Joseph Tam <jtam.home(a)gmail.com>

1 0

Dovecot pigeonhole help sought
by Timothy Murphy 29 Jul '14

29 Jul '14

I'm running postfix + dovecot + dovecot-pigeonhole on my CentOS-7 home server. I would like spam to finish up in ~/Maildir/.Spam/ . Spam is being marked, but is not separated - it ends up with all the other email in ~/Maildir/cur/ . Evidently there is some step I have omitted to take. I give the output of "sudo doveconf -n" below. The file ~/.dovecot.sieve reads: ------------------------------ # Sieve Filter require ["fileinto","regex","envelope","vacation"]; if header :contains "X-Spam-Flag" "YES" { fileinto "/home/tim/Maildir/.Spam/"; } ------------------------------ When I run "sudo systemctl restart dovecot" I see the line Jul 27 18:54:23 alfred dovecot: master: Dovecot v2.2.10 starting up for imap, pop3, lmtp, sieve (core dumps disabled) in /var/log/maillog Output of "sudo doveconf -n > dovecot.conf" ------------------------------ # 2.2.10: /etc/dovecot/dovecot.conf # OS: Linux 3.10.0-123.4.4.el7.x86_64 x86_64 CentOS Linux release 7.0.1406 (Core) listen = * mail_debug = yes mail_location = maildir:~/Maildir managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave mbox_write_locks = fcntl namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = imap pop3 lmtp sieve ssl = required ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } protocol lmtp { mail_plugins = " sieve" } protocol lda { mail_plugins = " sieve" } ------------------------------ Any advice or suggestions gratefully received.

5 4

Error after Upgrade
by Jim Knuth 29 Jul '14

29 Jul '14

Hello, after upgrade (Debian wheezy) from dovecot 2:2.2.13-1~auto+103 => 2:2.2.13-1~auto+113 I discovered that in my log and all mails stuck in the Queue. I’ve had downgrade v 2:2.2.13-1~auto+103 an everything is fine. What’s wrong? Any ideas or solution greatly appreciated. Thanks. Jul 25 11:03:01 server2 dovecot: lmtp(25638): Fatal: master: service(lmtp): child 25638 killed with signal 11 (core dumps disabled) Jul 25 11:03:01 server2 dovecot: lmtp(25639): Connect from local Jul 25 11:03:01 server2 dovecot: lmtp(25639): Fatal: master: service(lmtp): child 25639 killed with signal 11 (core dumps disabled) Jul 25 11:03:01 server2 postfix/lmtp[25617]: 20773D10003: to=<web7p1(a)server1.art-domains.de>, orig_to=<jk(a)jkart.de>, relay=server1.art-domains.de[private/dovecot-lmtp], delay=0.05, delays=0.03/ 0/0.01/0.02, dsn=4.4.2, status=deferred (lost connection with server1.art-domains.de[private/dovecot-lmtp] while sending end of data -- message may be sent more than once) Jul 25 11:03:01 server2 amavis[25541]: (25541-01) Passed CLEAN {RelayedInbound}, [213.203.238.6]:53401 [193.175.143.182] <postfixbuch-users-bounces(a)listen.jpberlin.de> -> <jk(a)jkart.de>, Queue-I D: 62B8BD10001, Message-ID: <53D21B91.2070109(a)fh-landshut.de>, mail_id: AE71HPGl9ZR5, Hits: -5, size: 13518, queued_as: 20773D10003, 2771 ms Jul 25 11:03:01 server2 amavis[25541]: (25541-01) Passed CLEAN, <postfixbuch-users-bounces(a)listen.jpberlin.de> -> <jk(a)jkart.de>, Hits: -5, tag=-9999.9, tag2=2.5, kill=3, queued_as: 20773D10003, L/Y/0/0 Jul 25 11:03:01 server2 postfix/lmtp[25607]: 62B8BD10001: to=<jk(a)jkart.de>, relay=127.0.0.1[127.0.0.1]:10024, delay=3.9, delays=1.2/0/0.01/2.8, dsn=2.0.0, status=sent (250 2.0.0 from MTA(smtp:[ 127.0.0.1]:10025): 250 2.0.0 Ok: queued as 20773D10003) Jul 25 11:03:01 server2 postfix/qmgr[25508]: 62B8BD10001: removed Jul 25 11:03:02 server2 postfix/lmtp[25615]: 20773D10003: to=<web1p9(a)server1.art-domains.de>, orig_to=<admin(a)art-domains.de>, relay=server1.art-domains.de[private/dovecot-lmtp], delay=0.06, del ays=0.03/0/0.03/0.01, dsn=4.4.2, status=deferred (lost connection with server1.art-domains.de[private/dovecot-lmtp] while sending end of data -- message may be sent more than once) Jul 25 11:03:02 server2 dovecot: lmtp(25653): Connect from local Jul 25 11:03:02 server2 dovecot: lmtp(25653): Fatal: master: service(lmtp): child 25653 killed with signal 11 (core dumps disabled) -- Mit freundlichen Grüßen, with kind regards, Jim Knuth --------- Die Freiheit der Rede hat den Nachteil, daß immer wieder Dummes, Häßliches und Bösartiges gesagt wird. Wenn wir aber alles in allem nehmen, sind wir doch eher bereit, uns damit abzufinden, als sie abzuschaffen. [Churchill]

3 5