- dovecot - dovecot.org

[Dovecot] Fail2ban and logging
by Paul van der Vlis 17 Jul '13

17 Jul '13

Hello, Dovecot is logging authentication failures this way: ------ Jul 12 18:07:19 vps0 dovecot: imap-login: Disconnected (auth failed, 22 attempts in 172 secs): user=<info>, method=PLAIN, rip=82.95.148.152, lip=1.2.3.4, TLS, session=<QylMqlLhVwBSX5SY> ------ Fail2ban is trying to catch them with this regex: ------ failregex = .*(?:pop3-login|imap-login):.*(?:Authentication failure|Aborted login \(auth failed|Aborted login \(tried to use disabled|Disconnected \(auth failed).*rip=(?P<host>\S*),.* ------ This way fail2ban is counting 22 attempts as 1 attempt... I expect I need to change something on the logging, so that every attempt is seperate logged. But I don't know how. Is here somebody who knows how to get fail2ban correct working? No help on this on the wiki's: http://wiki1.dovecot.org/HowTo/Fail2Ban http://wiki1.dovecot.org/Logging http://www.fail2ban.org/wiki/index.php/Dovecot With regards, Paul van der Vlis. -- Paul van der Vlis Linux systeembeheer, Groningen http://www.vandervlis.nl/

2 4

[Dovecot] plugin expire
by Felix Rubio Dalmau 17 Jul '13

17 Jul '13

Hi everybody, I'm trying to configure the expire plugin, unsuccessfully. This is my configuration, the part related to this plugin. Could somebody give a look to it? I can not figure out why is not working :-S. Thank you, and regards! Felix ############ doveconf output dict { expire = mysql:/etc/dovecot/dovecot-dict-expire.conf.ext } plugin { expire = Trash 15 Junk 15 expire_dict = proxy::expire } protocol imap { mail_plugins = " zlib expire" } ########### dovecot-dict-expire.conf.ext # CREATE TABLE virtual_expires ( # username varchar(100) not null, # mailbox varchar(255) not null, # expire_stamp integer not null, # primary key (username, mailbox) # ); map { pattern = shared/expire/$user/$mailbox table = virtual_expires value_field = expire_stamp fields { username = $user mailbox = $mailbox } }

1 0

[Dovecot] courier to dovecot
by J Gao 17 Jul '13

17 Jul '13

Hi, All, I am new here and I need your advises. Here is my story: I have a mail server like this: - CentOS 5 32 bit (LAMP) - Postfix 2.3 - Courier - MailScanner Courier use maildir to save emails in /home/vmail/<virtual domain>/<user> / Now I want to build a new system on CentOS 6.4 64bit with postfix, dovecot and migrate all user accounts and their emails. I already installed CentOS 6.4, postfix and mysql. Also just installed Dovecot v2.2.4 from the RPM. Now I am looking into how to Is there a good instruction on how to do this kind of migration? I still prefer using the maildir system. If I just copy all users email from old server to new dovecot user maildir, will dovecot see these mails (and sub-folders) ? Do I need do anything extra? Thanks in advance. Gao -- __ _|==|_ ('')__/ >--(`^^') (`^'^'`) `======'

3 2

[Dovecot] reload without shutting imap connections down
by Hajo Locke 16 Jul '13

16 Jul '13

Hello, we have some problems with users who report connectionproblems to dovecot sometimes. According to the logs there are dovecot reloads at this times. Seems that a reload also causes dovecot to shut all imapconnections down: Jul 16 13:31:40 myhostname dovecot: master: Warning: SIGHUP received - reloading configuration Jul 16 13:31:40 myhostname dovecot: imap: Server shutting down. bytes=251/675 I tried to reload by initscript or sending -HUP manually to pid, dovecot is shutting down imapconnections and i think this is the reason for users to report this problems with some clients. This seems to be new with versions 2.x, i have some old 1.2.x dovecots running and cant find "Server shutting down" in their logs after reload. I have still potential to reduce reloads, but cant avoid them completely. Is there a workaround? Thanks, Hajo

4 6

[Dovecot] Difference between using auth_realms and setting up virtual mailboxes in postfix?
by Gab IIpop 16 Jul '13

16 Jul '13

Hi, there is a possibility in the future that I might have to support multiple domain names(but using the same IP address). Postfix has something called 'virtual mailboxes' to help handle this. But I also noticed that dovecot has a setting "auth_realms" where I can specify domains separated by a space. What is the relationship between the two?

2 1

[Dovecot] mail not reject when the mailbox is full (Dovecot-LDAP-Imap_quota)
by Victor Oñate 16 Jul '13

16 Jul '13

Hello List. Currently I have configured the share of users through the LDAP query as shown #dovecot.conf protocol imap { mail_plugins = quota imap_quota } plugin { quota = dirsize } userdb ldap { args = /etc/dovecot/dovecot-ldap.conf } #dovecot-ldap.conf auth_bind = yes ldap_version = 3 base = dc=XXX,dc=YY,dc=ZZ deref = never scope = subtree user_attrs = homeDirectory=home,uidNumber=uid,gidNumber=gid,mail=Maildir,mailQuotaSize=quota_rule=*:storage=%$ user_filter = (&(objectClass=posixAccount)(uid=%u)) pass_attrs = uid=user,userPassword=password,homeDirectory=userdb_home,uidNumber=userdb_uid,gidNumber=userdb_gid pass_filter = (&(objectClass=posixAccount)(uid=%u)) Additionally in thunderbird customers have the plug so they can see the share. This works perfect! However, when the mailbox exceeds 100% users continue to receive mail which makes the risk set allocated disk space, the idea is that when full the mail reject with a message "mailbox XXX full" . As always appreciate the ideas. Victor Oñate

4 4

[Dovecot] Proxying improvements in v2.1.2
by Timo Sirainen 16 Jul '13

16 Jul '13

I just committed a couple of features that will make life easier for some types of proxying setups: 1. IMAP proxying has already for a while supported sending local/remote IP/port to backend server, which can use it for logging and other purposes. I've now implemented this for POP3 as well, although only the remote IP/port is forwarded, not local IP/port. I implemented this also for LMTP in v2.2 tree, but haven't bothered to backport that change. Both POP3 and LMTP uses XCLIENT command that is compatible to Postfix's (XCLIENT ADDR=1.2.3.4 PORT=110). 2. proxy_maybe=yes + host=host.example.com actually works now. As long as host.example.com DNS lookup returns one IP that belongs to the current server the proxying is skipped. 3. auth_proxy_self = 1.2.3.4 setting means that if proxy_maybe=yes and host=1.2.3.4 then Dovecot assumes that this is a local login and won't proxy it, even if 1.2.3.4 isn't the actual local IP. This can be helpful if the host field contains load balancer's IP address instead of the server's. You can add more than one IP (space separated) and of course everything related to this works just as well with hostnames as with IPs (even when hostname expands to multiple IPs).

2 2

[Dovecot] Sieve vacation variables reference
by Simon 16 Jul '13

16 Jul '13

Hi There. We are using dovecot v2.2.4 with pigeonhole 0.4.1 (both compiled from source) Centos 6.4. Sorry for the dumb question in advance if I'm just missing an obvious link somewhere (also if I've got the terminology all wrong!), but could someone point me to the reference list for "vacation", e.g.: vacation :days :subject :addresses :from is there a definitive list of things like "days", "subject" etc? Thanks Simon

2 2

[Dovecot] Sieve scripts in mysql?
by Simon 16 Jul '13

16 Jul '13

Hi There. We are using dovecot v2.2.4 with pigeonhole 0.4.1 (both compiled from source) Centos 6.4. We are storing our virtual user config in mysql. At the moment we are storing our sieve script configs in mysql and then running a script to write these out to a file.. But I'm wondering if there a way to store sieve scripts in mysql? Many thanks! Simon

1 1

[Dovecot] Services not starting in 2.1 (or 2.2)
by Tommy Wareing 15 Jul '13

15 Jul '13

I'm trying to install Dovecot onto my QNAP NAS. I apologise for this! It means I'm not working in a normal environment, and don't (necessarily) have the normal range of tools available (or the most up to date version of those tools). It seems that 2.0.21 works (at least, as far as I've tested), but 2.1.17 and 2.2.4 won't start up their child services. I've got the source code for all three from http://www.dovecot.org/download.html, and, for experimental purposes, I'm configuring with: ./configure --prefix=/opt The configure script ends by reporting: Install prefix . : /opt File offsets ... : 64bit I/O polling .... : epoll I/O notifys .... : inotify SSL ............ : yes (OpenSSL) GSSAPI ......... : no passdbs ........ : static passwd passwd-file shadow checkpassword : -pam -bsdauth -sia -ldap -sql -vpopmail userdbs ........ : static prefetch passwd passwd-file checkpassword nss : -ldap -sql -vpopmail SQL drivers .... : : -pgsql -mysql -sqlite The dovecot.conf I'm using, at the moment, is the absolute minimal to fire things up: protocols = imap listen = * ssl_cert = </opt/etc/ssl/certs/dovecot.pem ssl_key = </opt/etc/ssl/private/dovecot.pem dovecot -n is happy, and reports those four lines back to me. When I start this up, I get, in /var/log/messages file: Jul 10 10:09:28 QNAP mail.info dovecot: master: Dovecot v2.0.21 starting up (core dumps disabled) and ps shows: [admin@qnap dovecot]# ps -ef | grep dovecot admin 11478 1 0 10:09 ? 00:00:00 /opt/sbin/dovecot dovecot 11479 11478 0 10:09 ? 00:00:00 dovecot/anvil admin 11480 11478 0 10:09 ? 00:00:00 dovecot/log admin 11482 11478 0 10:09 ? 00:00:00 dovecot/config admin 11525 455 0 10:10 pts/5 00:00:00 grep dovecot All is right with the world! Well, until I try to use dovecot properly, at which point I'll need a full configuration. But it's alright so far! :) However, if I go through the same routine with Dovecot 2.1.17, I get the appropriate message in messages: Jul 10 10:12:45 QNAP mail.info dovecot: master: Dovecot v2.1.17 starting up (core dumps disabled) But this time, ps shows: [admin@qnap dovecot-2.1.17]# ps -ef | grep dovecot admin 15259 1 0 10:12 ? 00:00:00 /opt/sbin/dovecot admin 15294 455 0 10:12 pts/5 00:00:00 grep dovecot and the child services don't seem to have started. This is born out by the fact that no network connections work: they stall, and then eventually time out (telnet localhost 143 produces no output at all, until I disconnect it). Even dovecot stop has trouble, taking several seconds before it returns me to the prompt, and *not* killing the existing process. dovecot -n is still happy however (and in a full configuration, components which don't require the services seem to work properly, such as dovecot-lda, if it doesn't require auth). I'm not sure that I need those newer versions of dovecot, so I'll get back to version 2.0 for now. But I'd certainly like the option, and imagine that somebody else might care as to what the problem is! -- Tommy Wareing

4 8