- dovecot - dovecot.org

empty %d value leading to wrong path to Maildir
by isb＠forscotland.com 23 Sep '24

23 Sep '24

Running i dovecot-core 1:2.3.16+dfsg1-3ubuntu2.4 arm64 secure POP3/IMAP server - core files ii dovecot-imapd 1:2.3.16+dfsg1-3ubuntu2.4 arm64 secure POP3/IMAP server - IMAP daemon ii dovecot-lmtpd 1:2.3.16+dfsg1-3ubuntu2.4 arm64 secure POP3/IMAP server - LMTP server my /etc/dovecot/users admin@TESTdomain:{PLAIN}xxxxxxxxxx:::::: My virtual mail is delivered by postfix to /home/virtualmailboxes/TESTdomain/admin/Maildir/{cur,new,tmp} BUT when I login to dovecot I see (look at >>>> below) Sep 23 03:43:17 imap-login: Info: Login: user=<admin>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=164750, TLS, session=<ze54MMEiWqZ/AAAB> Sep 23 03:43:17 imap(admin)<164750><ze54MMEiWqZ/AAAB>: Debug: Effective uid=1002, gid=118, home=/home/admin >>>Sep 23 03:43:17 imap(admin)<164750><ze54MMEiWqZ/AAAB>: Debug: Namespace inbox: type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes, subscriptions=yes location=mbox:/home/virtualmailboxes//admin >>>>Sep 23 03:43:17 imap(admin)<164750><ze54MMEiWqZ/AAAB>: Debug: mbox: INBOX defaulted to /home/virtualmailboxes//admin/inbox >>>>Sep 23 03:43:17 imap(admin)<164750><ze54MMEiWqZ/AAAB>: Debug: fs: root=/home/virtualmailboxes//admin, index=, indexpvt=, control=, inbox=/home/virtualmailboxes//admin/inbox, alt= Sep 23 03:43:17 imap(admin)<164750><ze54MMEiWqZ/AAAB>: Debug: Mailbox INBOX: Mailbox opened because: STATUS Sep 23 03:43:17 imap(admin)<164750><ze54MMEiWqZ/AAAB>: Debug: Mailbox INBOX: Mailbox opened because: SELECT Sep 23 03:43:17 imap(admin)<164750><ze54MMEiWqZ/AAAB>: Info: Disconnected: Logged out in=105 out=955 deleted=0 expunged=0 trashed=0 hdr_count=0 hdr_bytes=0 body_count=0 body_bytes=0 Sep 23 03:43:17 imap-login: Debug: SSL alert: close notify Sep 23 03:44:17 auth-worker(164599): Debug: conn unix:auth-worker (pid=164598,uid=122): Disconnected: Connection closed (fd=-1) WHERE HAS TESTdomain gone in lined flagged >>>>? Thanks Ivan

2 4

bug dir copy group permissions?
by Marc 23 Sep '24

23 Sep '24

I am not sure if this page is correct, looks at least like this g+s not ok https://doc.dovecot.org/2.3/admin_manual/filesystem_permission/ work-around is to manually create dirs mdbox mdbox/storage mdbox/mailboxes. I would think this is a bug as files seem to be created correctly. group rights are not copied on directories, resulting in getfacl #effective:--- for the acl groups just testing with rm -R -f everything below usertest6 [@ shared]# ls -ln total 4 drwxr-xr-x 4 0 0 34 Sep 23 11:50 bak drwxrwx---+ 4 10001 10001 34 Sep 23 12:18 usertest drwxrwx---+ 3 10002 10002 19 Sep 23 11:51 usertest2 drwxrwx---+ 3 10006 10006 19 Sep 23 12:37 usertest6 -rw-r--r-- 1 0 0 121 Sep 23 11:46 README where are the group rights on mdbox? [usertest6]# ls -lartn total 0 drwxr-xr-x+ 6 0 0 84 Sep 23 11:50 .. drwxrwx---+ 3 10006 10006 19 Sep 23 12:37 . drwx------+ 2 10006 10006 30 Sep 23 12:37 mdbox now group rights are back? [usertest6]# ls -lartn mdbox/ total 0 drwxrwx---+ 3 10006 10006 19 Sep 23 12:37 .. -rw-rw----+ 1 10006 10006 0 Sep 23 12:37 dovecot-acl-list drwx------+ 2 10006 10006 30 Sep 23 12:37 . trying again with g+s usertest6 [usertest6]# ls -arltn total 0 drwxr-xr-x+ 6 0 0 84 Sep 23 11:50 .. drwx--S---+ 2 10006 10006 30 Sep 23 12:48 mdbox drwxrws---+ 3 10006 10006 19 Sep 23 12:48 .

1 1

why am getting these foldertest17270834637853 / foldertest
by Marc 23 Sep '24

23 Sep '24

I am testing with sharing folders and constantly changing namespaces configs. But quite regulary I am seeing these mailboxes popup foldertest17270834637853 with sub mailbox foldertest

1 0

problems with testing shared mailbox availability
by Marc 23 Sep '24

23 Sep '24

this seems to show doveadm mailbox list -u usertest6 Trash Sent NotSpam Drafts Junk Shared UserShares UserShares/usertest UserShares/usertest/sharedtest3 UserShares/usertest/sharedtest1 UserShares/usertest/sharedtest2 INBOX But thunderbird / roundcube show nothing. Any idea's why?

2 3

Mail Backup from IMAP to POP3
by Reprobus 23 Sep '24

23 Sep '24

Hi, I'm in a situation whereas I need to backup my email from an IMAP server to a POP3 email client of my choosing. I'm hoping Dovecot can do such a task and is there a container to which I can run to set this up from ? My IMAP email server is maxed and I need to dump all the emails off the IMAP to POP3 as to clear it up. Thank You

7 11

shared mailbox not visible, acl_shared_dict stays empty
by Marc 22 Sep '24

22 Sep '24

I am creating the mailbox like this: doveadm -o mail_gid=testgroup2 mailbox create -u usertest shared/sharedtest1 I can set acl's (I think), at least the acl get produces the same. doveadm acl set -u usertest shared/sharedtest1 user=usertest6 lookup read write write-seen insert post doveadm acl get -u usertest shared/sharedtest1 However this file stays empty, I have read somewhere it should automatically be updated? acl_shared_dict = file:/tmp/shared-mailboxes.db How should I add entries manually there with: doveadm dict set file:/tmp/shared-mailboxes.db shared/sharedtest2 kempotest6 or with this syntax still???? https://www.dovecot.org/list/dovecot/2009-April/038922.html

1 1

dovecot supports filesystem acls?
by Marc 22 Sep '24

22 Sep '24

doveadm -o mail_gid=testgroup2 mailbox create -u usertest public/publictest1 public/mdbox/mailboxes) failed: Operation not permitted [@public]# getfacl mdbox/ # file: mdbox/ # owner: root # group: root user::rwx group::rwx group:testgroup2:rwx group:testgroup3:rwx mask::rwx other::---

1 0

public mailbox filesystem layout + permission best practice
by Marc 22 Sep '24

22 Sep '24

I have some issues testing public mailboxes with linux users and groups creating mailboxes for users for the first group is not really a problem: doveadm -o mail_gid=testgroup2 mailbox create -u usertest public/publictest1 doveadm -o mail_gid=testgroup2 mailbox create -u usertest6 public/publictest2 doveadm -o mail_gid=testgroup2 mailbox create -u usertest2 public/publictest3 If I remove usertest6 from testgroup2 roundcube instantly stops showing these mailboxes. However when I try to make a new public mailbox with a different group. I am getting errors. doveadm -o mail_gid=testgroup3 mailbox create -u usertest6 public/publictest4 missing +r perm: public/mdbox/storage/dovecot.map.index.log public/mdbox/storage/dovecot.map.index.log, we're not in group I have the impression I am doing something wrong here, maybe configure the namespace with different filesystem layout? I assume it is possible to work with multiple groups in one public namespace? public/ └── mdbox ├── dovecot.list.index.log ├── dovecot-uidvalidity ├── dovecot-uidvalidity.66f00cc7 ├── mailboxes │ ├── publictest1 │ │ └── dbox-Mails │ │ ├── dovecot.index.cache │ │ └── dovecot.index.log │ ├── publictest2 │ │ └── dbox-Mails │ │ ├── dovecot.index.cache │ │ └── dovecot.index.log │ ├── publictest3 │ │ └── dbox-Mails │ │ └── dovecot.index.log │ └── testthunderbird │ └── dbox-Mails │ ├── dovecot.index.cache │ └── dovecot.index.log └── storage └── dovecot.map.index.log namespace public { disabled = no type = public separator = / prefix = public/ location = mdbox:/home/popusers/public/mdbox list = yes subscriptions = no }

1 1

sieve combine or not to be combine ?
by Marc 21 Sep '24

21 Sep '24

I am cleaning a bit my sieve scripts and wondered if I should stick to this solution sieve_before = sieve_before2 = sieve_before3 = or just one sieve_before = and put all scripts in this one. What are the advantages / disadvantages of doing this?

1 0

indexer: Error: conn unix:indexer (pid=562491,uid=10003): didn't reply with a valid VERSION line
by phren＠ist-einmalig.de 20 Sep '24

20 Sep '24

Hi, A few weeks ago we moved our mailserver to a new location. On the new location we use now dovecot v2.3.19.1 insteadof v2.3.4.1. We moved the mailboxes by zipping all mailbox on the old location and unzip on the new location. Now we see an indexer error quite often: > indexer: Error: conn unix:indexer (pid=563158,uid=10005): didn't reply with a valid VERSION line: 1 0 indexer indexer Sometimes when we try to use the index for searching we just get no results. We can't really find a cause for this error on the internet. As solution we found "Just do a re-indexing." Ok, but what may cause this error? And how can we prevent this error in the future? As indexer we use lucene. Any hint is appreciated. -- Phren

1 0

dovecot lmtp delivery fails with compression enabled and mailbox stored under different os users
by jonas＠mc2.dev 20 Sep '24

20 Sep '24

# dovecot --version 2.3.21.1 (d492236fa0) Error itself(I've replaced some data like original domains/and usernames): Sep 20 14:24:08 lmtp(lxc(a)forwardusr.org)<486449><+IvZKVhb7WYxbAcAZOUKzw>: Debug: auth-master: userdb lookup(lxc(a)forwardusr.org): Started userdb lookup Sep 20 14:24:08 lmtp(lxc(a)forwardusr.org)<486449><+IvZKVhb7WYxbAcAZOUKzw>: Debug: auth-master: userdb lookup(lxc(a)forwardusr.org): auth USER input: lxc(a)forwardusr.org uid=1006 gid=12 home=/home/forwardusr/imap/forwardusr.org/lxc quota_rule=*:bytes=50M Sep 20 14:24:08 lmtp(lxc(a)forwardusr.org)<486449><+IvZKVhb7WYxbAcAZOUKzw>: Debug: auth-master: userdb lookup(lxc(a)forwardusr.org): Finished userdb lookup (username=lxc(a)forwardusr.org uid=1006 gid=12 home=/home/forwardusr/imap/forwardusr.org/lxc quota_rule=*:bytes=50M) Sep 20 14:24:08 lmtp(lxc(a)forwardusr.org)<486449><+IvZKVhb7WYxbAcAZOUKzw>: Debug: lmtp-server: conn unix:pid=492384,uid=8 [4]: rcpt lxc(a)forwardusr.org: Added userdb setting: plugin/quota_rule=*:bytes=50M Sep 20 14:24:08 lmtp(lxc(a)forwardusr.org)<486449><+IvZKVhb7WYxbAcAZOUKzw>: Debug: Effective uid=1006, gid=12, home=/home/forwardusr/imap/forwardusr.org/lxc Sep 20 14:24:08 lmtp(lxc(a)forwardusr.org)<486449><+IvZKVhb7WYxbAcAZOUKzw>: Debug: Quota root: name= backend=maildir args= Sep 20 14:24:08 lmtp(lxc(a)forwardusr.org)<486449><+IvZKVhb7WYxbAcAZOUKzw>: Debug: Quota rule: root= mailbox=* bytes=52428800 messages=0 Sep 20 14:24:08 lmtp(lxc(a)forwardusr.org)<486449><+IvZKVhb7WYxbAcAZOUKzw>: Debug: Quota grace: root= bytes=5242880 (10%) Sep 20 14:24:08 lmtp(lxc(a)forwardusr.org)<486449><+IvZKVhb7WYxbAcAZOUKzw>: Debug: Namespace inbox: type=private, prefix=, sep=., inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:~/Maildir Sep 20 14:24:08 lmtp(lxc(a)forwardusr.org)<486449><+IvZKVhb7WYxbAcAZOUKzw>: Debug: maildir++: root=/home/forwardusr/imap/forwardusr.org/lxc/Maildir, index=, indexpvt=, control=, inbox=/home/forwardusr/imap/forwardusr.org/lxc/Maildir, alt= Sep 20 14:24:08 lmtp(lxc(a)forwardusr.org)<486449><+IvZKVhb7WYxbAcAZOUKzw>: Debug: quota: quota_over_flag check: quota_over_script unset - skipping Sep 20 14:24:08 lmtp(lxc(a)forwardusr.org)<486449><+IvZKVhb7WYxbAcAZOUKzw>: Debug: User session is finished Sep 20 14:24:08 lmtp(lxc(a)site.edu)<486449><+IvZKVhb7WYxbAcAZOUKzw:R2>: Debug: auth-master: userdb lookup(lxc(a)site.edu): Started userdb lookup Sep 20 14:24:08 lmtp(lxc(a)site.edu)<486449><+IvZKVhb7WYxbAcAZOUKzw:R2>: Debug: auth-master: userdb lookup(lxc(a)site.edu): auth USER input: lxc(a)site.edu uid=1002 gid=12 home=/home/siteowner/imap/site.edu/lxc quota_rule=*:bytes=50M Sep 20 14:24:08 lmtp(lxc(a)site.edu)<486449><+IvZKVhb7WYxbAcAZOUKzw:R2>: Debug: auth-master: userdb lookup(lxc(a)site.edu): Finished userdb lookup (username=lxc(a)site.edu uid=1002 gid=12 home=/home/siteowner/imap/site.edu/lxc quota_rule=*:bytes=50M) Sep 20 14:24:08 lmtp(lxc(a)site.edu)<486449><+IvZKVhb7WYxbAcAZOUKzw:R2>: Debug: lmtp-server: conn unix:pid=492384,uid=8 [4]: rcpt lxc(a)site.edu: Added userdb setting: plugin/quota_rule=*:bytes=50M Sep 20 14:24:08 lmtp(lxc(a)site.edu)<486449><+IvZKVhb7WYxbAcAZOUKzw:R2>: Debug: Effective uid=1002, gid=12, home=/home/siteowner/imap/site.edu/lxc Sep 20 14:24:08 lmtp(lxc(a)site.edu)<486449><+IvZKVhb7WYxbAcAZOUKzw:R2>: Debug: Quota root: name= backend=maildir args= Sep 20 14:24:08 lmtp(lxc(a)site.edu)<486449><+IvZKVhb7WYxbAcAZOUKzw:R2>: Debug: Quota rule: root= mailbox=* bytes=52428800 messages=0 Sep 20 14:24:08 lmtp(lxc(a)site.edu)<486449><+IvZKVhb7WYxbAcAZOUKzw:R2>: Debug: Quota grace: root= bytes=5242880 (10%) Sep 20 14:24:08 lmtp(lxc(a)site.edu)<486449><+IvZKVhb7WYxbAcAZOUKzw:R2>: Debug: Namespace inbox: type=private, prefix=, sep=., inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:~/Maildir Sep 20 14:24:08 lmtp(lxc(a)site.edu)<486449><+IvZKVhb7WYxbAcAZOUKzw:R2>: Debug: maildir++: root=/home/siteowner/imap/site.edu/lxc/Maildir, index=, indexpvt=, control=, inbox=/home/siteowner/imap/site.edu/lxc/Maildir, alt= Sep 20 14:24:08 lmtp(lxc(a)site.edu)<486449><+IvZKVhb7WYxbAcAZOUKzw:R2>: Debug: quota: quota_over_flag check: quota_over_script unset - skipping Sep 20 14:24:08 lmtp(lxc(a)site.edu)<486449><+IvZKVhb7WYxbAcAZOUKzw:R2>: Debug: User session is finished Sep 20 14:24:08 lmtp(lxc(a)forwardusr.org)<486449><+IvZKVhb7WYxbAcAZOUKzw>: Debug: Effective uid=1006, gid=12, home=/home/forwardusr/imap/forwardusr.org/lxc Sep 20 14:24:08 lmtp(lxc(a)forwardusr.org)<486449><+IvZKVhb7WYxbAcAZOUKzw>: Debug: Quota root: name= backend=maildir args= Sep 20 14:24:08 lmtp(lxc(a)forwardusr.org)<486449><+IvZKVhb7WYxbAcAZOUKzw>: Debug: Quota rule: root= mailbox=* bytes=52428800 messages=0 Sep 20 14:24:08 lmtp(lxc(a)forwardusr.org)<486449><+IvZKVhb7WYxbAcAZOUKzw>: Debug: Quota grace: root= bytes=5242880 (10%) Sep 20 14:24:08 lmtp(lxc(a)forwardusr.org)<486449><+IvZKVhb7WYxbAcAZOUKzw>: Debug: Namespace inbox: type=private, prefix=, sep=., inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:~/Maildir Sep 20 14:24:08 lmtp(lxc(a)forwardusr.org)<486449><+IvZKVhb7WYxbAcAZOUKzw>: Debug: maildir++: root=/home/forwardusr/imap/forwardusr.org/lxc/Maildir, index=, indexpvt=, control=, inbox=/home/forwardusr/imap/forwardusr.org/lxc/Maildir, alt= Sep 20 14:24:08 lmtp(lxc(a)forwardusr.org)<486449><+IvZKVhb7WYxbAcAZOUKzw>: Debug: quota: quota_over_flag check: quota_over_script unset - skipping Sep 20 14:24:08 lmtp(lxc(a)forwardusr.org)<486449><+IvZKVhb7WYxbAcAZOUKzw>: Debug: duplicate db: Initialize Sep 20 14:24:08 lmtp(lxc(a)forwardusr.org)<486449><+IvZKVhb7WYxbAcAZOUKzw>: Debug: sieve: Pigeonhole version 0.5.21.1 (49005e73) initializing Sep 20 14:24:08 lmtp(lxc(a)forwardusr.org)<486449><+IvZKVhb7WYxbAcAZOUKzw>: Debug: sieve: include: sieve_global is not set; it is currently not possible to include `:global' scripts. Sep 20 14:24:08 lmtp(lxc(a)forwardusr.org)<486449><+IvZKVhb7WYxbAcAZOUKzw>: Debug: sieve: file storage: Storage path `/home/forwardusr/imap/forwardusr.org/lxc/sieve' not found Sep 20 14:24:08 lmtp(lxc(a)forwardusr.org)<486449><+IvZKVhb7WYxbAcAZOUKzw>: Debug: sieve: file storage: Storage path `/home/forwardusr/imap/forwardusr.org/lxc/.dovecot.sieve' not found Sep 20 14:24:08 lmtp(lxc(a)forwardusr.org)<486449><+IvZKVhb7WYxbAcAZOUKzw>: Debug: sieve: storage: No default script location configured Sep 20 14:24:08 lmtp(lxc(a)forwardusr.org)<486449><+IvZKVhb7WYxbAcAZOUKzw>: Debug: sieve: User has no personal script Sep 20 14:24:08 lmtp(lxc(a)forwardusr.org)<486449><+IvZKVhb7WYxbAcAZOUKzw>: Debug: sieve: No scripts to execute: reverting to default delivery. Sep 20 14:24:08 lmtp(lxc(a)forwardusr.org)<486449><+IvZKVhb7WYxbAcAZOUKzw>: Debug: duplicate db: Cleanup Sep 20 14:24:08 lmtp(lxc(a)forwardusr.org)<486449><+IvZKVhb7WYxbAcAZOUKzw>: Debug: Mailbox INBOX: Mailbox opened Sep 20 14:24:08 lmtp(lxc(a)forwardusr.org)<486449><+IvZKVhb7WYxbAcAZOUKzw>: Debug: Mailbox INBOX: UID 10: Opened mail because: access Sep 20 14:24:08 lmtp(lxc(a)forwardusr.org)<486449><+IvZKVhb7WYxbAcAZOUKzw>: Info: msgid=<F386DD43-FE57-4CDE-A48B-3D0945ACC98C(a)sender.domain>: saved mail to INBOX Sep 20 14:24:08 lmtp(lxc(a)site.edu)<486449><+IvZKVhb7WYxbAcAZOUKzw:R2>: Debug: Effective uid=1002, gid=12, home=/home/siteowner/imap/site.edu/lxc Sep 20 14:24:08 lmtp(lxc(a)site.edu)<486449><+IvZKVhb7WYxbAcAZOUKzw:R2>: Debug: Quota root: name= backend=maildir args= Sep 20 14:24:08 lmtp(lxc(a)site.edu)<486449><+IvZKVhb7WYxbAcAZOUKzw:R2>: Debug: Quota rule: root= mailbox=* bytes=52428800 messages=0 Sep 20 14:24:08 lmtp(lxc(a)site.edu)<486449><+IvZKVhb7WYxbAcAZOUKzw:R2>: Debug: Quota grace: root= bytes=5242880 (10%) Sep 20 14:24:08 lmtp(lxc(a)site.edu)<486449><+IvZKVhb7WYxbAcAZOUKzw:R2>: Debug: Namespace inbox: type=private, prefix=, sep=., inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:~/Maildir Sep 20 14:24:08 lmtp(lxc(a)site.edu)<486449><+IvZKVhb7WYxbAcAZOUKzw:R2>: Debug: maildir++: root=/home/siteowner/imap/site.edu/lxc/Maildir, index=, indexpvt=, control=, inbox=/home/siteowner/imap/site.edu/lxc/Maildir, alt= Sep 20 14:24:08 lmtp(lxc(a)site.edu)<486449><+IvZKVhb7WYxbAcAZOUKzw:R2>: Debug: quota: quota_over_flag check: quota_over_script unset - skipping Sep 20 14:24:08 lmtp(lxc(a)site.edu)<486449><+IvZKVhb7WYxbAcAZOUKzw:R2>: Debug: duplicate db: Initialize Sep 20 14:24:08 lmtp(lxc(a)site.edu)<486449><+IvZKVhb7WYxbAcAZOUKzw:R2>: Debug: sieve: Pigeonhole version 0.5.21.1 (49005e73) initializing Sep 20 14:24:08 lmtp(lxc(a)site.edu)<486449><+IvZKVhb7WYxbAcAZOUKzw:R2>: Debug: sieve: include: sieve_global is not set; it is currently not possible to include `:global' scripts. Sep 20 14:24:08 lmtp(lxc(a)site.edu)<486449><+IvZKVhb7WYxbAcAZOUKzw:R2>: Debug: sieve: file storage: Storage path `/home/siteowner/imap/site.edu/lxc/sieve' not found Sep 20 14:24:08 lmtp(lxc(a)site.edu)<486449><+IvZKVhb7WYxbAcAZOUKzw:R2>: Debug: sieve: file storage: Storage path `/home/siteowner/imap/site.edu/lxc/.dovecot.sieve' not found Sep 20 14:24:08 lmtp(lxc(a)site.edu)<486449><+IvZKVhb7WYxbAcAZOUKzw:R2>: Debug: sieve: storage: No default script location configured Sep 20 14:24:08 lmtp(lxc(a)site.edu)<486449><+IvZKVhb7WYxbAcAZOUKzw:R2>: Debug: sieve: User has no personal script Sep 20 14:24:08 lmtp(lxc(a)site.edu)<486449><+IvZKVhb7WYxbAcAZOUKzw:R2>: Debug: sieve: No scripts to execute: reverting to default delivery. Sep 20 14:24:08 lmtp(lxc(a)site.edu)<486449><+IvZKVhb7WYxbAcAZOUKzw:R2>: Debug: duplicate db: Cleanup Sep 20 14:24:08 lmtp(lxc(a)site.edu)<486449><+IvZKVhb7WYxbAcAZOUKzw:R2>: Debug: Mailbox INBOX: Mailbox opened Sep 20 14:24:08 lmtp(lxc(a)site.edu)<486449><+IvZKVhb7WYxbAcAZOUKzw:R2>: Info: msgid=<F386DD43-FE57-4CDE-A48B-3D0945ACC98C(a)sender.domain>: save failed to INBOX: Internal error occurred. Refer to server log for more information. [2024-09-20 14:24:08] (received-date) Sep 20 14:24:08 lmtp(lxc(a)site.edu)<486449><+IvZKVhb7WYxbAcAZOUKzw:R2>: Debug: User session is finished Sep 20 14:24:08 lmtp(lxc(a)forwardusr.org)<486449><+IvZKVhb7WYxbAcAZOUKzw>: Debug: User session is finished With error itself. Sep 20 14:24:08 lmtp(lxc(a)forwardusr.org)<486449><+IvZKVhb7WYxbAcAZOUKzw>: Error: Mailbox INBOX: stat(/home/forwardusr/imap/forwardusr.org/lxc/Maildir/new/1726831448.M70920… failed: Permission denied (euid=1002(quakeowner) egid=12(mail) missing +x perm: /home/forwardusr, dir owned by 1006:1003 mode=0710) Basically there's etc. domainA and domainB stored under different OS users. In case etc. there's alias from domainA to domainB which results in lmtp delivery with both recipients submitted in the same "lmtp session" as "batch", it seems that only one delivery happens, as by the time zlib plugin kicks in - effective user id for the process is already set to second delivery user which fails zlib(at least disabling that/removing it from mail plugins delivery/save is successful). I know that it can mitigate by modifying (in this case exim's) conf and setting batch_max to 1, which results in single submit(single RCPT TO), though still curious if that's by design? What I guess is asynchronous compression ? Or that would be considered a bug? Best Regards

1 0

Free ecards
by Amelia Marie 20 Sep '24

20 Sep '24

Free ecards from Sendwishonline.com are designed to create memorable and engaging experiences. Many cards feature interactive elements, such as animations and music, that enhance the recipient's experience. This level of creativity and engagement sets Sendwishonline.com apart, making their free ecards not just a message but a delightful experience. Visit To:- https://sendwishonline.com/en/ecards

5 5

Free ecards
by Amelia Marie 20 Sep '24

20 Sep '24

Free ecards from Sendwishonline.com are designed to create memorable and engaging experiences. Many cards feature interactive elements, such as animations and music, that enhance the recipient's experience. This level of creativity and engagement sets Sendwishonline.com apart, making their free ecards not just a message but a delightful experience. Visit To:- https://sendwishonline.com/en/ecards

1 0

User is missing UID
by Marc 19 Sep '24

19 Sep '24

sieve-test(1164123): Fatal: Couldn't drop privileges: User is missing UID (see mail_uid setting) I don't get what this is about. Users are not missing an UID and how is it related with testing sieve scripts?

2 1

sieve: Terminated with non-zero exit code 2
by Marc 18 Sep '24

18 Sep '24

What could this be, I am not even having an exit code 2 in my sieve plugin. If I cat a message via cli I am getting exit code 0. ps where are stderr messages logged of the plugin?

1 1

Pay Someone to Take My Online Course?
by xotawa2329＠hapincy.com 17 Sep '24

17 Sep '24

Pay Someone to Take My Online Course? Different understudies who battle with reworking school, work, and family obligations select online class tutors to assist them with finishing their tests and complete their coursework. In any case, some solicitation the ethicality of this planning. While <a href="https://onlineclassservices.com/nurs-fpx-4040-assessment-4-attempt-1-inform…">NURS FPX 4040 Assessment 4</a>  has every one of the reserves of being enticing, it goes with two or three serious dangers. This article will examine a piece of the things you ought to remember going before enlisting an online class help association. It's clearly a fact that online classes can be truly troublesome, particularly for working professionals who have a clamoring plan. Oftentimes they are searching for someone to take a whole course or individual tasks for them, to assist with managing their grades and moderate their strain. Nonetheless, be wary of affiliations that guarantee too wonderful to be authentic. They could charge you enormous totals for their associations and end up not conveying. The best technique for guaranteeing that you are getting anything that would be fair is to use an online class tutor who offers an inadequate responsibility. Additionally, review that different schools consider paying someone to take an online class to swindle. Therefore, whenever got, you could go facing silly outcomes like besieging the course, scholarly suspension or even send off. To this end picking a fair relationship with a showed history is crucial. The association is clear: present your mentioning and survey offers from qualified educated authorities. Then enlist the one that is reasonable for yourself and store maintains in <a href="https://onlineclassservices.com/nurs-fpx-4050-assessment-1-attempt-3-prelim…">NURS FPX 4050 Assessment 1</a>  scrow until your assignment is finished. Online classes are eminent among understudies who need to save time on education and spotlight more on work or other private issues. These merge understudies who are taking courses while working and attempting to change family and profession responsibilities, military understudies on sending, and understudies with genuine inadequacies or sickness that make it pursuing for them to go to classes. Unfortunately, there are many tricks that confirmation to take online courses for you. These affiliations charge ridiculous totals and don't complete their obligations. They may also hand you over to your school. Tolerating that they do, you could be killed from your underwriting project or even suspended or removed from school. This isn't the very thing that you truly need for your business and future. Therefore, you genuinely need to track down serious areas of strength for a that offers a fair cost and mind blowing results. To this end you ought to search for a <a href="https://onlineclassservices.com/nurs-fpx-4050-assessment-2-attempt-1-ethica…">NURS FPX 4050 Assessment 2</a>  affiliation that has an inadequate responsibility and splendid customer association. Various individuals decide to use a professional to take their online class since they need the opportunity to go to it very close. They could be working the whole day, supervising family issues, or fighting disease and disappointments that log jam their review tendencies. These professionals can assist you with fulfilling time necessities, stay away from imaginative theft, and set free your nights to zero in on work or other unwinding works out. They may comparatively have the decision to help you with beating any learning handicaps you have. Copyright infringement suggests utilizing someone else's words and thoughts without their endorsement. It is viewed as a kind of cheating and can accomplish a delicate grade or even send off from school. It is difficult to ensure that a used professional won't phony. This is on the grounds that educational foundations don't have <a href="https://onlineclassservices.com/nurs-fpx-4900-assessment-1-assessing-the-pr…">NURS FPX 4900 Assessment 1 Assessing the Problem</a>  assets for check whether understudies are authentic or not. This truly expects that tolerant you are gotten, you will probably lose the cash you paid to have someone take your class. There's no veritable strategy for remaining caution assuming the solitary you enroll to take your online course will tell the truth and dependable. They probably won't be in a tantamount state as you. Moreover, they apparently won't be as dedicated to finishing the class for you as you are. They may very well be doing the base extent of work expected to get reviewed and a brief time frame later vanish. MORE <a href="https://dev.gajim.org/gajim/website/-/issues/35#note_211778">Facebook is a powerful tool for business</a> <a href="https://xtremepape.rs/members/horridhenry7860.397211/about">Mobile Application Development Services</a> <a href="https://xtremepape.rs/members/samfarrid4563.397213/about">best digital marketing agencies</a>

4 3

Re: Dovecot v2.3.21.1 released
by Aleksandr Mezin 17 Sep '24

17 Sep '24

Hello. https://www.dovecot.org/download/ still points to v2.3.21 as the latest stable release (not 2.3.21.1)

2 1

Correct permissions for global sieve scripts
by Richard 16 Sep '24

16 Sep '24

Hi there, I've set up dovecot via global sieve scripts to send mails that a user manually moved to their junk directory to rspamd to learn them as spam (and learn messages as ham if they are moved out of it). I thought I had it all properly set up, but I'm now again seeing log messages like this: Sep 15 13:01:00 dovecot[523226]: imap(username)<823661><4+8RXyYi2L9/AAAB>: Error: sieve: failed to execute to program `rspamd-learn-spam.sh': refer to server log for more information. [2024-09-15 13:01:00] Sep 15 13:01:00 dovecot[523226]: imap(username)<823661><4+8RXyYi2L9/AAAB>: Error: sieve: Execution of script /etc/dovecot/sieve/global/learn-spam.sieve failed The content of learn-spam.sieve is this: require ["vnd.dovecot.pipe", "copy", "imapsieve"]; pipe :copy "rspamd-learn-spam.sh"; And the content of rspamd-learn-spam.sh is this: #!/bin/sh exec /usr/bin/rspamc learn_spam All the necessary files are located in /etc/dovecot/sieve/global and are owned by dovecot:dovecot with rw, r, r permissions. Also, I have compiled the .sieve files with sievec, the resulting .svbin files have the same permissions and ownership. What am I doing wrong? I don't see any further "server log" that will tell me more information. I'm using dovecot 2.3.19.1 (9b53102964) on Debian 12.7 Best Richard

4 11

Allowing parallel read-only requests via doveadm http api
by Kevin Kelker 16 Sep '24

16 Sep '24

Hi, is there any chance to open the doveadm http api to handle more than one client at a time if the requests are read-only commands that have no risk of breaking something when they run simultaneously? We have a scenario of using it only for getQuota to visualize a live-status of the mailbox usage but every once in a while, there are more than one parallel requests for that that are then getting tcp connection resets. As far as I've seen it in https://dovecot.org/mailman3/archives/list/dovecot@dovecot.org/thread/PYMMJ… spawning another doveadm http api service with another port wouldn't do the trick. If that's not possible, wouldn't be a failure code as a response a more clean approach than just refusing the connection at all? Right now, it's getting logged on the dovecot backend as "doveadm server can handle only a single client" but the requesting client gets a connection reset instead of a json-type response with a failure code. Best Kevin

2 1

Selectively query folders for new emails
by Habakuk Tibatong 12 Sep '24

12 Sep '24

Hi folks, I have two questions: - Is it possible to exclude folders from being queried for new emails? I have many folders in my maildir, each of which has many sub-folders, with many sub-sub-folders. My Thunderbird logs in and then queries one folder after the other and this takes a very long time. However, there are only 5 folders into which I automatically sort emails with sieve, and I would like to query only these 5 folders. The other folders are folders into which I sort emails manually. It makes no sense to query them. How could I achieve this? - How can I exclude folders from being displayed in the subscribe window, i.e. that these folders exist, e.g. they are available but cannot be subscribed to, and therefore cannot be displayed in the email client? I plan to introduce a all-times "non-deletable" spam folder, which contains a copy of all spam emails that this user received and which I use to teach spamassassin, without the user being able to see, empty or delete this folder, and without him being able to infect himself with potentially infected emails.

3 3

Dovecot v2.3.21.1 released
by Aki Tuomi 07 Sep '24

07 Sep '24

Hi all, we are releasing a CVE patch release 2.3.21.1. https://dovecot.org/releases/2.3/dovecot-2.3.21.1.tar.gz https://dovecot.org/releases/2.3/dovecot-2.3.21.1.tar.gz.sig Binary packages in https://repo.dovecot.org/ Docker images in https://hub.docker.com/r/dovecot/dovecot Kind regards, Aki Tuomi Open-Xchange oy --- - CVE-2024-23184: A large number of address headers in email resulted in excessive CPU usage. - CVE-2024-23185: Abnormally large email headers are now truncated or discarded, with a limit of 10MB on a single header and 50MB for all the headers of all the parts of an email. - oauth2: Dovecot would send client_id and client_secret as POST parameters to introspection server. These need to be optionally in Basic auth instead as required by OIDC specification. - oauth2: JWT key type check was too strict. - oauth2: JWT token audience was not validated against client_id as required by OIDC specification. - oauth2: XOAUTH2 and OAUTHBEARER mechanisms were not giving out protocol specific error message on all errors. This broke OIDC discovery. - oauth2: JWT aud validation was not performed if aud was missing from token, but was configured on Dovecot.

5 9

~/mail/.imap
by graeme.dovecot＠vetterlein.com 05 Sep '24

05 Sep '24

the box that runs my mailsever just reported disk > 80% full , so looking to tidy up. I note: sudo du -d2 -k -x /home/graeme/mail | sort -n ... ... 66788 /home/graeme/mail/.imap/spam 198328 /home/graeme/mail/.imap 1564680 /home/graeme/mail/2023 4009336 /home/graeme/mail Now in .imap I have directories dating back to 2013 .... the corresponding mail folders have long since moved to backup. What would be the effect of deleting EVERYTHING in .imap.... will it just get recreated as needed? or do I need to take care and only remove stuff I know is no longer used?

1 0

Can I delete duplicate messages under Maildir on the server?
by MI 05 Sep '24

05 Sep '24

After a client misconfiguration, many messages have been deleted. I restored them from backups, but now there are many duplicates. I can identify them on the server, and delete them. But do I need to also delete the dovecot.index files and/or other dovecot* files in the affected folders, or will these be automatically updated? (My Dovecot version is 2.3.13, so I guess I should not use doveadm deduplicate which would risk deleting non-duplicate messages, according to the "doveadm-deduplicate deletes non-duplicates" thread here?)

1 0

Re: Dovecot authentication hangs when ldap_start_tls_s() fails for invalid certificate
by Aki Tuomi 04 Sep '24

04 Sep '24

> On 19/11/2020 12:55 sebastiano degan <sebastiano.degan(a)frigoveneta.it> wrote: > > > On a Debian10 I've installed postfix 3.4.14 and dovecot 2.3.4.1. > I've configured multiple passdb sources and I expect that if one fails > the other ones are tested. > This is usually the case, except when the failure is due to an invalid > certificate from the ldap server. > In that case all authentication attempts from that moment on will fail. Hi! Can you try with latest CE release from https://repo.dovecot.org/ Regards, Aki

2 1

allow_nets check failure still performs LDAP bind authentication
by Florian Wunderlich 04 Sep '24

04 Sep '24

Postfix authentication via Dovecot. Dovecot performs the allow_nets check, which fails. It then still attempts to authenticate the user via LDAP bind, thus allowing DoS attacks where the entry in the directory will be locked after a few failed attempts. dovecot --version: 2.3.19.1 (9b53102964) Debian GNU/Linux 12 (bookworm), x86, no NFS Sep 04 07:26:05 postfix/smtpd[48225]: connect from unknown[182.176.211.10] Sep 04 07:26:17 dovecot[33863]: auth: *ldap(XXX,182.176.211.10): allow_nets check failed: IP 182.176.211.10 not in allowed networks* Sep 04 07:26:17 dovecot[33863]: auth: *ldap(XXX,182.176.211.10): Password mismatch (for LDAP bind)* Sep 04 07:26:27 postfix/smtpd[48225]: warning: unknown[182.176.211.10]: SASL LOGIN authentication failed: Connection lost to authentication server, sasl_username=(unavailable) Sep 04 07:26:27 postfix/smtpd[48225]: lost connection after AUTH from unknown[182.176.211.10] Sep 04 07:26:27 postfix/smtpd[48225]: disconnect from unknown[182.176.211.10] ehlo=2 starttls=1 auth=0/1 commands=3/4 The allow_nets extra field comes from LDAP. This works as a pass_filter query is performed first, which returns the allow_nets. /DN is looked up by sending a pass_filter LDAP request and getting the DN from the reply. This is very similar to doing a password lookup. The only difference is that userPassword attribute isn’t returned. Just as with password lookups, the pass_attrs may contain special extra fields./ https://doc.dovecot.org/2.3/configuration_manual/authentication/ldap_bind/#… After this, Dovecot should immediately fail the authentication. /If the user tries to log in from elsewhere, the authentication will fail the same way as if a wrong password was given./ https://doc.dovecot.org/2.3/configuration_manual/authentication/allow_nets/ There is no need to perform the bind authentication. According to the log (and the locked user accounts), it is still performed. Configuration is irrelevant, for completeness’s sake: auth_bind = yes pass_filter = (&(|(objectClass=simpleSecurityObject)(objectClass=posixAccount))(cn=%n)) pass_attrs = \ cn=user, \ allowNets=allow_nets

1 0

What are all the /var/spool/smtpd/offline/1689525601.XXXXlJ85yQ
by Steve Litt 03 Sep '24

03 Sep '24

Hi all, I just filled up my whole /var with zillions of files /var/spool/smtpd/offline , dating back to 2018. What are these files and is it safe for me to delete the ones more than a week old? Thanks, SteveT Steve Litt http://444domains.com

5 7

Inconsistency in map index with dovecot v2.3.21
by Nikolaos Pyrgiotis 02 Sep '24

02 Sep '24

Hello, We have been running dovecot version 2.3.21 since July on debian bookworm system. After upgrading we have seen in the logs similar messages to the following: 2024-08-29T19:33:27.755399+03:00 server1 dovecot: lmtp(user1(a)modulus.gr)<481240><7TMeHNei0GYpeTkA1g8ogQ:P1>: Warning: mdbox /path/user1/mdbox/storage: Inconsistency in map index (2213,40 != 2213,56). 2024-08-29T19:33:27.755399+03:00 server1 dovecot: lmtp(user1(a)modulus.gr)<481240><7TMeHNei0GYpeTkA1g8ogQ:P1>: Warning: mdbox /path/user1/mdbox/storage: Inconsistency in map index (2213,40 != 2213,56) 2024-08-29T19:33:27.838990+03:00 server1 dovecot: lmtp(user1(a)modulus.gr)<481240><7TMeHNei0GYpeTkA1g8ogQ:P1>: sieve: msgid=<39f9c444-0c08-4bda-bfc9-512c34584470(a)modulus.gr>: fileinto action: stored mail into mailbox 'Replies' 2024-08-29T19:33:27.840222+03:00 server1 dovecot: lmtp(user1(a)modulus.gr)<481240><7TMeHNei0GYpeTkA1g8ogQ:P1>: Warning: fscking index file /path/user1/mdbox/storage/dovecot.map.index 2024-08-29T19:33:27.953281+03:00 server1 dovecot: lmtp(user1(a)modulus.gr)<481240><7TMeHNei0GYpeTkA1g8ogQ:P1>: Warning: mdbox /path/user1/mdbox/storage: rebuilding indexes 2024-08-29T19:37:27.989792+03:00 server1 dovecot: lmtp(user1(a)modulus.gr)<481249><vhzsLROj0GYQVgcAfAk26A:P1>: Error: Timeout (180s)while waiting for lock for transaction log file /path/user1/mdbox/storage/dovecot.map.index.log (WRITE lock held by pid 481240) 2024-08-29T19:37:27.995913+03:00 server1 dovecot: lmtp(user1(a)modulus.gr)<481249><vhzsLROj0GYQVgcAfAk26A:P1>: Error: sieve: msgid=<39f9c444-0c08-4bda-bfc9-512c34584470(a)modulus.gr>: fileinto action: failed to store into mailbox 'Mailbox': Timeout (180s) while waiting for lock for transaction log file /path/user1/mdbox/storage/dovecot.map.index.log (WRITE lock held by pid 481240) This has happened a few times since we upgraded always by a lmtp process. It seems to be happening randomly and we have not been able to reproduce it. The mailboxes are stored in a glusterfs server, and we use the dovecot director with shared mailboxes architecture. Usually this was mitigated automatically by dovecot index rebuilding, but last time it happened on a mailbox with a lot of giga byte of mail data the following logs were produced for more than an hour: 2024-08-29T19:45:30.506694+03:00 server1 dovecot: lmtp(user1(a)modulus.gr)<481240><7TMeHNei0GYpeTkA1g8ogQ:P1>: Error: mmap_anon(/path/user/mdbox/mailboxes/Mailbox/dbox-Mails/dovecot.index.cache, 74076160) failed: Cannot allocate memory During that period segfaults starting being generated for the imap processes accessing that mailbox probably caused by timeouts from imap processes attempting to fetch emails from the affected mailbox: [3912187.557029] imap[481783]: segfault at 38 ip 00007fb03248abf8 sp 00007ffc88b264f0 error 4 in libdovecot-storage.so.0.0.0[7fb0323c7000+d8000] likely on CPU 6 (core 3, socket 0) What might be the reason that inconsistency of the map index is introduced on random users? We have seen some other users had similar issues and have mentioned them on this mailing list(dovecot Digest, Vol 249, Issue 4, dovecot Digest, Vol 250, Issue 8)? Is there any update for a mitigation or bug confirmation for dovecot version 2.3.21 that might be responsible? Thank you, Nikos Pyrgiotis

4 6

Fwd: maintainer-feedback requested: [Bug 280929] mail/dovecot move bogus warning "Time moved forwards" to debug
by Larry Rosenman 01 Sep '24

01 Sep '24

Comments from the dovecot community? Aug 19, 2024 11:07:30 AM bugzilla-noreply(a)freebsd.org: Bugzilla Automation <bugzilla(a)FreeBSD.org> has asked Larry Rosenman <ler(a)FreeBSD.org> for maintainer-feedback: Bug 280929: mail/dovecot move bogus warning "Time moved forwards" to debug https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=280929 --- Description --- Dovecot complains about time moving forward, which seems to be due to a broken mechanism (on FreeBSD) used to measure timeouts. This warning spams the maillog up to several hundred times per day. There's an ongoing thread about this issue in the freebsd forums: https://forums.freebsd.org/threads/dovecot-time-moved-forwards.82886 In post #33 RypPn points out the offending line in main.c and in post #34 msplsh suggests instead of completely removing/commenting out the line, it would be more sensible to move it from 'warning' to 'debug'. This is what this patch does: change the log facility to 'debug' to mute that bogus message for standard configurations, but keep it in 'debug' for anyone who might want to debug that issue in the future. I tested the patch as a local patch in poudriere and it builds fine on 13.3-RELEASE with the quarterly and latest branch.

7 12

Debug: open(/proc/self/io) failed: Permission denied
by Alex 31 Aug '24

31 Aug '24

Hi, I've seen a few emails over the years related to this error message, but they are typically associated with doveadm. In my case, it's related to dovecot itself. I've just set up dovecot-2.3.20-1.fc37.x86_64 on fedora37 and unable to receive mail. The main config was copied over from another dovecot system on fedora37 with virtually identical settings, including the same SSL cert. I've also tried to just migrate the important stuff and otherwise leave the defaults, but I'm having the same problem. imap(bcc-user)<2977522><rappeBf6vLZEw8Eq>: Debug: Loading modules from directory: /usr/lib64/dovecot imap(bcc-user)<2977522><rappeBf6vLZEw8Eq>: Debug: Module loaded: /usr/lib64/dovecot/lib20_listescape_plugin.so imap(bcc-user)<2977522><rappeBf6vLZEw8Eq>: Debug: Effective uid=1001, gid=1001, home=/home/bcc-user imap(bcc-user)<2977522><rappeBf6vLZEw8Eq>: Debug: open(/proc/self/io) failed: Permission denied imap(bcc-user)<2977522><rappeBf6vLZEw8Eq>: Debug: Namespace inbox: type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes, subscriptions=yes location=mbox:~/mail:INBOX=/var/spool/mail/bcc-user imap(bcc-user)<2977522><rappeBf6vLZEw8Eq>: Debug: fs: root=/home/bcc-user/mail, index=, indexpvt=, control=, inbox=/var/spool/mail/bcc-user, alt= imap(bcc-user)<2977522><rappeBf6vLZEw8Eq>: Debug: Mailbox Trash: Mailbox opened I've set the /var/spool/mail/bcc-user permissions to 600, bcc-user:mail. The /home/bcc-user directory is 611, bcc-user:bcc-user. Here is my doveconf -n: # 2.3.20 (80a5ac675d): /etc/dovecot/dovecot.conf # Pigeonhole version 0.5.20 (149edcf2) # OS: Linux 6.1.15-200.fc37.x86_64 x86_64 Fedora release 37 (Thirty Seven) auth_debug = yes auth_verbose = yes mail_debug = yes mail_gid = mail mail_home = mail/ mail_location = mbox:~/mail:INBOX=/var/spool/mail/%u mail_max_userip_connections = 500 mail_plugins = " listescape" mail_privileged_group = mail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext mbox_write_locks = fcntl namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } protocols = imap service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } } service imap-login { inet_listener imap { port = 0 } inet_listener imaps { port = 993 } process_min_avail = 6 service_count = 0 vsz_limit = 512 M } ssl_cert = </etc/letsencrypt/fullchain.cer ssl_cipher_list = ALL:!LOW:!EXP:!aNULL:!RC4::!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS ssl_dh = # hidden, use -P to show it ssl_key = # hidden, use -P to show it ssl_prefer_server_ciphers = yes userdb { driver = passwd } verbose_ssl = yes Any ideas greatly appreciated. I was very surprised to be having problems after having done this so many times before.

3 5

Connection closed (user disabled)
by Roberto J. Bolivar Plenge 28 Aug '24

28 Aug '24

Hello everyone Thank you in advance for your help. Why do I get the following error: Aug 23 10:37:51 cp-cl02 dovecot[2337577]: pop3-login: Disconnected: Connection closed (user disabled): user=<loliva(a)romaseguro.pe>, method=PLAIN, rip=x.x.x.x, lip=x.x.x.x, TLS: Connection closed, session=<8na4jlsg3HK1Q1LE>. I never observed this before: Connection closed (user disabled): I wish to know what is causing it and how can I fix it. Thank you.

2 4

Dovecot with LDAP and Solr: Force Solr user key
by Michele Giacomoli 27 Aug '24

27 Aug '24

Good morning everyone. I am configuring dovecot with ldap and solr as fts plugins. The LDAP configuration works correctly and users can log in both via the userPrincipalName attribute and via mail. In this configuration the LDAP realm and the email domain differ, and on the server the LDAP realm domain is privileged. This means that the mail dir is located in ./ldap_realm/username and in the same way postfix delivers the emails to dovecot using username@ldap_realm as envelope recipient. Consequently the emails are indexed on solr using "username@ldap_realm" as user key. However if I log in in imap using the email address as username and try to do some searches dovecot sends a select to solr using the email address as key and not the ldap user, and consequently I do not get any results from the search. So my question is: is it possible to configure dovecot to force queries to solr so that "username@ldap_realm" is always used as the key even when logging in via email? Dovecot version is: 2.3.7.2 Solr version: 7.2.1 Ldap configuration: [...] user_filter = (&(|(userPrincipalName=%u)(mail=%u))(objectClass=person)(!(userAccountControl=514))(memberOf=cn=Mail,ou=Groups,dc=example,dc=org)) pass_filter = (&(|(userPrincipalName=%u)(mail=%u))(objectClass=person)(!(userAccountControl=514))(memberOf=cn=Mail,ou=Groups,dc=example,dc=org)) pass_attrs = userPassword=password user_attrs = =home=/data/mail/%Ld/%Ln/Maildir/,=mail=maildir:/data/mail/%Ld/%Ln/Maildir/ Solr configuration: plugin { fts = solr fts_solr = url=http://solr_host:8983/solr/dovecot/ fts_autoindex=yes } Best regards -- Logo Mynet *Michele Giacomoli* Reparto IT 32.000 km di fibra ottica nel nord Italia al servizio delle aziende *www.mynet.it* <https://www.mynet.it/> - *www.vogliadifibra.it* <https://www.vogliadifibra.it/>

1 1

2.3.21(.1) build error on aarch64 (using slackware ARM -current)
by shawn.kubik＠shaw.ca 22 Aug '24

22 Aug '24

I've spent the last week trying to rebuild Dovecot on my Raspberry Pi 3 (aarch64; running Slackware ARM -current) and am running into the following build error. I suspected it may be my recent update to Slackware but I've been able to build the same source tarball on an x86 system running slackware64-current without any problems, so it *seems* specific to aarch64. I've tried both building from the 2.3.21 (and 2.3.21.1) tarball(s) as well as pulling the latest code from github and they all fail similarly, though in different spots it appears. I am building from source instead of using the available Slackware packages bc those packages don't have support for postgresql built in, but has mysql/mariadb support, which I am not using and is not installed on my systems. While it does run, when I try to connect to it, it fails citing a missing mariadb.so file. gcc -v output: Reading specs from /usr/lib64/gcc/aarch64-slackware-linux-gnu/14.2.0/specs COLLECT_GCC=gcc COLLECT_LTO_WRAPPER=/usr/libexec/gcc/aarch64-slackware-linux-gnu/14.2.0/lto-wrapper Target: aarch64-slackware-linux-gnu Configured with: ../configure --with-arch=armv8-a --verbose --prefix=/usr --mandir=/usr/man --infodir=/usr/info --libdir=/usr/lib64 --enable-bootstrap --enable-checking=release --enable-libstdcxx-dual-abi --enable-shared --enable-languages=ada,c,c++,d,fortran,go,lto,m2,objc,obj-c++,rust --enable-objc-gc --enable-threads=posix --enable-__cxa_atexit --enable-gnu-unique-object --enable-clocale=gnu --enable-plugin --enable-lto --with-arch-directory= --with-system-zlib --with-gnu-ld --with-isl --with-default-libstdcxx-abi=new --disable-libunwind-exceptions --disable-libstdcxx-pch --disable-libssp --disable-werror --disable-gtktest --disable-install-libiberty --host=aarch64-slackware-linux-gnu --build=aarch64-slackware-linux-gnu --target=aarch64-slackware-linux-gnu Thread model: posix Supported LTO compression algorithms: zlib zstd gcc version 14.2.0 (GCC) ldd --version output: ldd (GNU libc) 2.40 Copyright (C) 2024 Free Software Foundation, Inc. This is free software; see the source for copying conditions. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. Written by Roland McGrath and Ulrich Drepper. Configure is: ./configure \ --with-pgsql \ --localstatedir=/var \ --with-lucene \ --with-libcap \ --with-inotify=inotify \ --disable-static \ --build=$ARCH-slackware-linux || exit 1 And the output at the point of failure is: libtool: compile: gcc -DHAVE_CONFIG_H -I. -I../../../.. -I../../../../src/lib -I../../../../src/lib-test -I../../../../src/lib-settings -I../../../../src/lib-mail -I../../../../src/lib-imap -I../../../../src/lib-imap-client -I../../../../src/lib-index -I../../../../src/lib-storage -I../../../../src/lib-storage/list -I../../../../src/lib-storage/index -I../../../../src/lib-ssl-iostream -std=gnu99 -g -O2 -fstack-protector-strong -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime -Wstrict-aliasing=2 -MT imapc-sync.lo -MD -MP -MF .deps/imapc-sync.Tpo -c imapc-sync.c -fPIC -DPIC -o .libs/imapc-sync.o free(): double free detected in tcache 2 during GIMPLE pass: slp imapc-sync.c: In function ‘imapc_initial_sync_check’: imapc-sync.c:294:1: internal compiler error: Aborted 294 | imapc_initial_sync_check(struct imapc_sync_context *ctx, bool nooped) | ^~~~~~~~~~~~~~~~~~~~~~~~ 0x1b4a3df internal_error(char const*, ...) ???:0 0x7f80a139fc pthread_kill@@GLIBC_2.34 ???:0 0x7f809c419b gsignal ???:0 0x7f809abfa7 abort ???:0 0x7f80a06943 __libc_message_impl ???:0 0x7f80a1e2c7 malloc_printerr ???:0 0x7f80a2053b _int_free ???:0 0x7f80a22b7f __free ???:0 0xfa35d7 _slp_tree::~_slp_tree() ???:0 0xfa3aa7 vect_free_slp_instance(_slp_instance*) ???:0 0xfb9a7f vect_slp_analyze_operations(vec_info*) ???:0 0xfc06a7 vect_slp_function(function*) ???:0 Please submit a full bug report, with preprocessed source (by using -freport-bug). Please include the complete backtrace with any bug report. See <https://gcc.gnu.org/bugs/> for instructions. make[5]: *** [Makefile:597: imapc-sync.lo] Error 1 make[5]: Leaving directory '/data/local/src/Dovecot/dovecot-2.3.21/src/lib-storage/index/imapc' make[4]: *** [Makefile:733: all-recursive] Error 1 make[4]: Leaving directory '/data/local/src/Dovecot/dovecot-2.3.21/src/lib-storage/index' make[3]: *** [Makefile:1107: all-recursive] Error 1 make[3]: Leaving directory '/data/local/src/Dovecot/dovecot-2.3.21/src/lib-storage' make[2]: *** [Makefile:573: all-recursive] Error 1 make[2]: Leaving directory '/data/local/src/Dovecot/dovecot-2.3.21/src' make[1]: *** [Makefile:704: all-recursive] Error 1 make[1]: Leaving directory '/data/local/src/Dovecot/dovecot-2.3.21' make: *** [Makefile:548: all] Error 2 Can someone please help me figure this out? If more output is required let me know and I can provide it. Thank You!

2 2

limits to auth of submission
by horizon＠secubox.org 21 Aug '24

21 Aug '24

Hello I am using a plaintext db as the auth db. The db content is like this line: user@mail.com:{CRYPT}$****::::::userdb_quota_rule=*:bytes=1G How can I limit some people can auth with postfix submission (port 587), and some others can't? Thank you.

1 0

Seeking Suggestions for Optimizing Dovecot Performance
by leoniemeeyr＠gmail.com 21 Aug '24

21 Aug '24

Hi everyone, I hope you’re all doing well! I’ve been working with Dovecot for a while now and I’m looking to optimize its performance on my server. I’d love to hear any tips or suggestions you might have to help me get the best performance out of it. Specifically, I’m interested in: 1. Configuration Tweaks: Any key settings that you’ve found to be particularly beneficial for performance? 2. Best Practices: Are there any common practices or tools that help in monitoring and improving performance? 3. Resource Management: How do you handle resource allocation to ensure smooth operation under heavy loads? Any advice or experiences you can share would be greatly appreciated! Thanks in advance for your help. Best Regards https://www.igmguru.com/blog/msbi-vs-power-bi

1 0

dovecot-indexer writting as root
by Joan Moreau 20 Aug '24

20 Aug '24

Hi I have that issue times to times Full case described properly here : https://github.com/grosjo/fts-xapian/issues/168 Can you help understand the root cause of that ? THank you

3 6

SQL Multiple passwords
by Aubry 19 Aug '24

19 Aug '24

Hi, From what I understood from the archive and from my tests, we cannot have multiple passwords for a given account. (I get the error: Password query returned multiple matches) But it looks like it can be done via a PAM module. Does anyone succeeded setup multiple password with PAM or any other method with a SQL backend ? Regards, Aubry

6 7

Re: Frequency Control for IMAP connection
by Joseph Tam 16 Aug '24

16 Aug '24

From: Corey H <coreyh(a)alwaysdata.net> > $ sudo tail -10000 /var/log/mail.log|grep **(a)**mail.com|wc -l > 3544 > > logs like this: > > Aug 15 19:54:10 mx dovecot: imap-login: Login: user=<**(a)**mail.com>, > method=PLAIN, rip=**, lip=**, mpid=4151830, TLS, > session=<UPotgLcfTOjYUzTN> > > How can I implement a Frequency Control on client connections to slow > down his requests? Is this a MacOSX client? I think they have a habit of doing this when doing global mailbox searches. Instead of doing a sane serial march through mailboxes, it opens up as many mailboxes as it can, then closes them when the IMAP server denies then when they hit the max. If Aki doesn't can't offer a solution, neither can I, but maybe you can play around with mail_max_userip_connections to stop them from swamping all your connections. You might have to resort to firewall or other general network controls to actually rate limit connections. Joseph Tam <jtam.home(a)gmail.com>

2 1

dovecot-2.3.2.1 and dovecot-pigeonhole-0.5.2 bug?
by Jan Nowak 16 Aug '24

16 Aug '24

Hello, we have a problem after updating the software with the operation of sieve scripts sending a copy of the e-mails, e-mails are not transferred. Configuration: dovecot-2.3.2.1 + dovecot-pigeonhole-0.5.2 + FreeBSD 11.2 log: Sep 06 13:28:17 lda(XXX@XXX)<38615><XXX+XXX>: Info: sieve: msgid=<XXX-XXX-XXX-7788-XXX@XXXXnet>: stored mail into mailbox 'INBOX' Sep 06 13:28:17 lda(XXX@XXX)<38615><XXX+XXX>: Info: sieve: Execution of script /usr/home/XXX/mail/XXX(a)XXX/.dovecot.sieve failed, but implicit keep was successful (user logfile /usr/home/XXX/mail/XXX(a)XXX/.dovecot.sieve.log may reveal additional details) .dovecot.sieve.log: error: msgid=<XXX-XXX-XXX-7788-XXX@XXXXnet>: failed to redirect message to <XXXXX(a)XXXXXX.com>: smtp(127.0.0.1:25): DATA failed: 552 Message header not CRLF terminated (permanent failure). On old configuration: dovecot 2.2 + dovecot-pigeonhole- 0.4 + FreeBSD 11.2 we don't have problem. Has anyone had a similar problem, knows the solution?

5 12

The future of SIS
by Sebastian Marsching 16 Aug '24

16 Aug '24

Hi, I am currently in the process of planning a new deployment of Dovecot. I was planning to use mdbox or sdbox with “mail_attachment_fs = sis posix”, but I stumbled across the following notice in the documentation for Dovecot 3.0 (https://doc.dovecot.org/3.0/settings/core/#core_setting-mail_attachment_fs) > Changed in version 2.4.0 (CE): SIS is deprecated and writing of SIS files is disabled. Reading is supported for now, any missing SIS attachments are replaced with files filled with spaces. > > Changed in version 3.0.0 (Pro): SIS is deprecated and writing of SIS files is disabled. Reading is supported for now, any missing SIS attachments are replaced with files filled with spaces. And https://doc.dovecot.org/3.0/installation_guide/upgrading/from-2.3-to-3.0/ says: > Saving new mails’ attachments via fs-sis is disabled, but reading SIS attachments is still supported. Missing SIS attachments are replaced with files filled with spaces. What is not entirely clear from this comment is whether this only applied to “sis posix” or also to “sis-queue posix”. Does anybody whether sis-queue is also affected by this? I saw that the notice was added to the dovecot/documentation Git repository in April 2023, but I couldn’t find any further information there or the main branch of the dovecot/core repository. Maybe, the code for 2.4 / 3.0 has not made it into that branch or repository yet. SIS sounds like a neat concept and I would like to use it, but obviously I do not want to use a soon-to-be-deprecated feature in a completely new deployment. So, does anybody know an alternative solution for attachment deduplication (except file-system level deduplication)? Thanks, Sebastian

19 43

vacation is not using from in envelope
by Marc 16 Aug '24

16 Aug '24

How to get dovecot use the from in sieve in the envelope?

3 5

Frequency Control for IMAP connection
by Corey H 15 Aug '24

15 Aug '24

Hello one of our users makes too quick IMAP connections to the server. $ sudo tail -10000 /var/log/mail.log|grep **(a)**mail.com|wc -l 3544 logs like this: Aug 15 19:54:10 mx dovecot: imap-login: Login: user=<**(a)**mail.com>, method=PLAIN, rip=**, lip=**, mpid=4151830, TLS, session=<UPotgLcfTOjYUzTN> How can I implement a Frequency Control on client connections to slow down his requests? Thank you.

2 1

2.3.21.1 build failure on MacOS X 14.6.1
by Daniel J. Luke 15 Aug '24

15 Aug '24

Hi - I get a build failure from dbox-storage.c because the stat struct doesn't have st_atim/st_ctim This simple patch fixes it (and should also work on linux/glibc hosts, but I haven't tested it there). --- src/lib-storage/index/dbox-common/dbox-storage.c.orig 2024-08-14 14:59:57 +++ src/lib-storage/index/dbox-common/dbox-storage.c 2024-08-14 15:01:23 @@ -293,8 +293,8 @@ if the directory exists. In case, get also the ctime */ struct stat stats; if (stat(path, &stats) == 0) { - last_temp_file_scan = stats.st_atim.tv_sec; - change_time = stats.st_ctim.tv_sec; + last_temp_file_scan = stats.st_atime; + change_time = stats.st_ctime; } else { if (errno != ENOENT) e_error(user->event, "stat(%s) failed: %m", path); -- Daniel J. Luke

2 1

v2.3.21 compile error
by Goetz Schultz 14 Aug '24

14 Aug '24

Hi, I am trying to compile said version above under FreeBSD 14.1 . Config setting is: ./configure --with-pgsql --with-sql However, during compile the process halts with below errors: <quote> test-mail-index-transaction-update.c:648:17: error: incompatible pointer to integer conversion assigning to 'uint32_t' (aka 'unsigned int') from 'char *(*)(int, int)' [-Wint-conversion] 648 | hdr.day_stamp = tests[i].old_day_stamp + timezone; | ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ test-mail-index-transaction-update.c:650:49: warning: arithmetic on a pointer to the function type 'char *(int, int)' is a GNU extension [-Wgnu-pointer-arith] 650 | mail_index_update_day_headers(t, tests[i].now + timezone); | ^ ~~~~~~~~ test-mail-index-transaction-update.c:650:36: error: incompatible pointer to integer conversion passing 'char *(*)(int, int)' to parameter of type 'time_t' (aka 'long') [-Wint-conversion] 650 | mail_index_update_day_headers(t, tests[i].now + timezone); | ^~~~~~~~~~~~~~~~~~~~~~~ </quote> Other info: gcc -v FreeBSD clang version 18.1.5 (https://github.com/llvm/llvm-project.git llvmorg-18.1.5-0-g617a15a9eac9) Target: x86_64-unknown-freebsd14.1 Thread model: posix InstalledDir: /usr/bin Any clue or pointer (no pun intended) what's going wrong and how to fix it? -- Thanks and regards Goetz R Schultz Quis custodiet ipsos custodes? ---------------------------->8------------------------------ /"\ \ / ASCII Ribbon Campaign X against HTML e-mail / \ ---------------------------->8------------------------------ ---------------------------->8------------------------------ /"\ \ / ASCII Ribbon Campaign X against HTML e-mail / \ This message is transmitted on 100% recycled electrons. ---------------------------->8------------------------------ Unsigned message - no responsibillity that content is not altered

3 5

[bug?] doveadm -f json who output
by Jasper Spaans 14 Aug '24

14 Aug '24

Hi, I'm trying to parse the output of `doveadm -f json who`[0] and am running into a small issue when it returns data about multiple users: the stream that is emitted in that case is not valid json. dovecot -version tells me dovecot 2.3.21 (47349e2482), more specifically, this is the version shipped in ubuntu 24.04, 1:2.3.21+dfsg1-2ubuntu5 doveadm -f json who [{"username":"<REDACTED>","connections":"4","service":"imap","pids":"(272307 270876 270872 270869)","ips":"(2001:<REDACTED>:7488)"}],{"username":"<REDACTED>","connections":"2","service":"imap","pids":"(271469 271465)","ips":"(2a02:<REDACTED>:9c28)"} When trying to pretty print this with jq, it complains about invalid json: doveadm -f json who|jq [ { "username": "<REDACTED>", "connections": "4", "service": "imap", "pids": "(272307 270876 270872 270869)", "ips": "(2001:<REDACTED>0:7488)" } ] jq: parse error: Expected value before ',' at line 1, column 167 Is this expected behaviour? I would have expected a list of user objects, and then it seems like the list-closing bracket that is currently at the end of the first user object should have been at the end of the last user object. I can code around this in my parser, but would rather not. Best, Jasper [0] actually I'm parsing the output of the doveadm http api, but that just seems to copy the data from the json format in there verbatim

2 1

Dovecot refuses to install/run on machine without IPv6
by Kurt Fitzner 14 Aug '24

14 Aug '24

Hi, I just tried to install Dovecot (version 2.3.19.1 9b53102964) on a Debian 12 server I'm building. It failed because Dovecot's default listen address is explicitly "*, ::" and it appears to have no logic to determine if there actually is an IPv6-enabled interface or that IPv6 is enabled on the target machine before it tries to listen on it. If dovecot wants to listen on IPv6 by default, that's neither here nor there, but if this is default behaviour it should check first. I'm curious if it's the same behaviour for machines without IPv4. Kurt Fitzner

5 5

CVE-2024-23184: Having a large number of address headers (From, To, Cc, Bcc, etc.) becomes excessively CPU intensive
by Aki Tuomi 14 Aug '24

14 Aug '24

Affected product: Dovecot IMAP Server Internal reference: DOV-6464 Vulnerability type: CWE-770 (Allocation of Resources Without Limits or Throttling) Vulnerable version: 2.2, 2.3 Vulnerable component: lib-mail Report confidence: Confirmed Solution status: Fixed in 2.3.21.1 Researcher credits: Vendor internal discovery Vendor notification: 2024-01-30 CVE reference: CVE-2024-23184 CVSS: 5.0 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N) Vulnerability Details: Having a large number of address headers (From, To, Cc, Bcc, etc.) becomes excessively CPU intensive. With 100k header lines CPU usage is already 12 seconds, and in a production environment we observed 500k header lines taking 18 minutes to parse. Since this can be triggered by external actors sending emails to a victim, this is a security issue. The main problem is that each header line's address is added to the end of a linked list. This is done by walking the whole linked list, which becomes more inefficient the more addresses there are. Workaround: One can implement restrictions on address headers on MTA component preceding Dovecot. Fix: Install non-vulnerable version of Dovecot. Patch can be found at https://github.com/dovecot/core/compare/8e4c42d%5E...1481c04.patch

2 1

Dovecot CVE-2024-23185: Very large headers can cause resource exhaustion when parsing message
by Aki Tuomi 14 Aug '24

14 Aug '24

Affected product: Dovecot IMAP Server Internal reference: DOV-6601 Vulnerability type: CWE-770 (Allocation of Resources Without Limits or Throttling) Vulnerable version: 2.2, 2.3 Vulnerable component: lib-mail Report confidence: Confirmed Solution status: Fixed in 2.3.21.1 Researcher credits: Vendor internal discovery Vendor notification: 2024-01-31 CVE reference: CVE-2024-23185 CVSS: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vulnerability Details: Very large headers can cause resource exhaustion when parsing message. The message-parser normally reads reasonably sized chunks of the message. However, when it feeds them to message-header-parser, it starts building up "full_value" buffer out of the smaller chunks. The full_value buffer has no size limit, so large headers can cause large memory usage. It doesn't matter whether it's a single long header line, or a single header split into multiple lines. This bug exists in all Dovecot versions. Incoming mails typically have some size limits set by MTA, so even largest possible header size may still fit into Dovecot's vsz_limit. So attackers probably can't DoS a victim user this way. A user could APPEND larger mails though, allowing them to DoS themselves (although maybe cause some memory issues for the backend in general). Workaround: One can implement restrictions on headers on MTA component preceding Dovecot. Fix: Install non-vulnerable version of Dovecot. Patch can be found at https://github.com/dovecot/core/compare/f020e13%5E...ce88c33.patch

1 0

Pigeonhole v0.5.21.1 released
by Aki Tuomi 14 Aug '24

14 Aug '24

Hi all, we are releasing new version of Pigeonhole. https://pigeonhole.dovecot.org/releases/2.3/dovecot-2.3-pigeonhole-0.5.21.1… https://pigeonhole.dovecot.org/releases/2.3/dovecot-2.3-pigeonhole-0.5.21.1… Binary packages in https://repo.dovecot.org/ Docker images in https://hub.docker.com/r/dovecot/dovecot Kind regards, Aki Tuomi Open-Xchange oy --- - sieve: When saving to local storage failed after a successful action in sieve (e.g. redirect, vacation), the mail was reported as successfully delivered, although it was lost locally.

1 0

Extra listener for client cert ?
by Laura Smith 13 Aug '24

13 Aug '24

Is it possible to, and (if yes) has anyone had experience with setting up an extra listener that requires client certs. The problem I've got is I still need to support Outlook clients. Fortunately these are located in fixed locations on desktop computers. Meanwhile, I would like to harden the configuration for road warriors who are all using devices and OSs that play nicer with client certs than Outlook does (well, Outlook doesn't play at all !). So I was thinking of opening 993 on a seperate IP address with that listener requiring client certificates. The alternative is, of course a VPN, which is still under consideration as an option. But even then, with the security onion, I'd still rather have both .... :)

1 0

Synchronize email folders
by Odhiambo Washington 13 Aug '24

13 Aug '24

I moved services to a new server (VPS) when I had issues with my hardware. Now I have copied data from the disk of the old server into the VPS. On the VPS, mail is delivered to /var/spool/virtual/DOMAIN/USER/Maildir/ I have the old emails in /root/DOMAIN/USER/Maildir. What is the easiest way to import the old emails into the current active folders without causing chaos with MuAs?? -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 In an Internet failure case, the #1 suspect is a constant: DNS. "Oh, the cruft.", egrep -v '^$|^.*#' ¯\_(ツ)_/¯ :-) [How to ask smart questions: http://www.catb.org/~esr/faqs/smart-questions.html]

3 3