- dovecot - dovecot.org

[Dovecot] Global ACL configuration problems: mailboxes not visible, set ACLs not honoured
by Andreas Ntaflos 01 Sep '09

01 Sep '09

Hi list, I am having trouble getting global ACLs to work correctly. This is, I assume, an issue separate from the one I reported a few days ago [1], where the imap process crashes when creating subfolders of folders with an ACL set. As you can see from my 'dovecot -n' output below I have three namespaces; two private ("Backup" and the default, empty one) and one public ("Public"). I also use the autocreate plugin to create a few standard folders. Those folders, along with some others, should have some special permissions and restrictions in place. I.e. messages must not be deletable, the mailbox itself may not be deleted, etc. I want to use global ACLs so that I don't have to put a dovecot-acl file in every folder that I want to have an ACL set. Thus, according to the wiki, if have set acl:vfile:/etc/dovecot/acls I can create files named "Sent", "Trash", "Drafts", "INBOX.Spam" and "Backup.sent", "Backup.received", "Public.Spam", "Public.Ham" in the directory /etc/dovecot/acls. These files contain the ACL, such as "owner lrp", "owner lrwsipk" and "authenticated lrwstipk". Any and all "dovecot-acl-list" files have been deleted before testing and reproducing that problem again just now. Is there anything more to it? I ask, because I can't seem to get it to work correctly using this approach with global ACLs. Problems include: - Can't get the mailboxes "Spam" and "Ham" under the "Public" namespace to show up in the mail client (Thunderbird, KMail, Horde/IMP) at all. These have the ACL "authenticated lrwstipk" set so the should be visible to authenticated clients, shouldn't they? All I see is the namespace with no mailboxes beneath it. - Deleting messages from the "Backup.sent" or "Backup.received" mailboxes is possible from Thunderbird, KMail and Horde/IMP, despite having the ACL "owner rlp" set, which, if I understand correctly, should only allow users to lookup, read and post to the mailing list via LDA/Sieve. What am I doing wrong? It seems to me that the global ACL files for namespaces other than the empty one are not at all considered? Do I have to use another notation for the ACL file names? Any help is much appreciated. Thanks in advance! Configuration information follows. Contents of /etc/dovecot/acl ============================ Backup.received owner rlp Backup.sent owner rlp Drafts owner lrwstipk INBOX.Spam owner lrwstipk Public.Ham authenticated lrwstipk Public.Spam authenticated lrwstipk Sent owner lrwstipk Trash owner lrwstipk 'dovecot -n' ============ # 1.2.4: /usr/local/etc/dovecot.conf # OS: Linux 2.6.26-2-686 i686 Debian 5.0.2 log_timestamp: %Y-%m-%d %H:%M:%S protocols: managesieve imap imaps pop3 pop3s login_dir: /usr/local/var/run/dovecot/login login_executable(default): /usr/local/libexec/dovecot/imap-login login_executable(imap): /usr/local/libexec/dovecot/imap-login login_executable(pop3): /usr/local/libexec/dovecot/pop3-login login_executable(managesieve): /usr/local/libexec/dovecot/managesieve-login mail_access_groups: mail mail_privileged_group: mail mail_location: maildir:~/Maildir mail_drop_priv_before_exec: yes mail_executable(default): /usr/local/libexec/dovecot/imap mail_executable(imap): /usr/local/libexec/dovecot/imap mail_executable(pop3): /usr/local/libexec/dovecot/pop3 mail_executable(managesieve): /usr/local/libexec/dovecot/managesieve mail_plugins(default): autocreate acl mail_plugins(imap): autocreate acl mail_plugins(pop3): mail_plugins(managesieve): mail_plugin_dir(default): /usr/local/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/lib/dovecot/imap mail_plugin_dir(pop3): /usr/local/lib/dovecot/pop3 mail_plugin_dir(managesieve): /usr/local/lib/dovecot/managesieve namespace: type: public separator: . prefix: Public. location: maildir:/var/mail/public:CONTROL=~/Maildir/control/public:INDEX=~/Maildir/index/public list: yes namespace: type: private separator: . prefix: Backup. location: maildir:~/Maildir-backup hidden: yes list: no namespace: type: private separator: . inbox: yes list: yes subscriptions: yes lda: log_path: info_log_path: auth_socket_path: /var/run/dovecot/auth-master postmaster_address: postmaster(a)mailtest0.rise-s.com mail_plugins: sieve acl auth default: mechanisms: plain login passdb: driver: pam passdb: driver: sql args: /etc/dovecot/dovecot-sql.conf userdb: driver: passwd userdb: driver: static args: uid=vmail gid=vmail home=/var/vmail/%Ld/%Ln allow_all_users=yes socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384 user: vmail plugin: sieve: ~/.dovecot.sieve sieve_dir: ~/sieve sieve_global_path: /etc/dovecot/sieve/default.sieve sieve_global_dir: /etc/dovecot/sieve/global/ sieve_before: /etc/dovecot/sieve/before/ autocreate: Trash autocreate2: Drafts autocreate3: Sent autocreate4: INBOX.Spam autosubscribe: Trash autosubscribe2: Drafts autosubscribe3: Sent autosubscribe4: INBOX.Spam acl: vfile:/etc/dovecot/acl [1] http://dovecot.org/list/dovecot/2009-August/042467.html -- Andreas Ntaflos Vienna, Austria GPG Fingerprint: 6234 2E8E 5C81 C6CB E5EC 7E65 397C E2A8 090C A9B4

2 1

[Dovecot] Dovecot 1.2.4 Crashing on amd64
by Lawrence Sheed 01 Sep '09

01 Sep '09

On the offchance that this was fixed in the nightlies, tried the 9/1/09 build, but no go. Sep 1 09:06:23 usa kernel: [955179.633005] dovecot-auth[19737]: segfault at 0 ip 0 sp 7fffc8839fa8 error 14 in dovecot-auth [400000+49000] Any ideas? dovecot -n and crash logs posted previously. Lawrence Sheed COMPUTER SOLUTIONS Room 401-402 Han Wen Xuan Building 2 No.14, 955 Yan An Middle Road Shanghai China 200040 Tel: +86 21 62890765 +86 21 62890056 Fax: +86 21 62890700 Mobile: +86 13901 802 269 Skype: computersolutions.cn Twitter: compsolutions Web: www.computersolutions.cn E-mail: support(a)computersolutions.cn

1 0

[Dovecot] NTLM failures with an interesting twist
by Gavin Hamill 01 Sep '09

01 Sep '09

This is a tired old topic but I've at least got an angle on it: Outlook Express works perfectly with IMAP / SPA for users logged into our Windows domain; I just give the server address and username, and it logs in without any password required; beautiful! auth_ntlm_use_winbind = yes auth_winbind_helper_path = /usr/bin/ntlm_auth auth default { mechanisms = ntlm userdb static { args = uid=500 gid=500 home=/var/mail/%u allow_all_users=yes } } Dovecot is the 1.1.13-2~bpo50+1 package from backports.org on Debian lenny, with winbind 3.2.5 Aug 28 23:49:38 ccimap dovecot: auth(default): client in: AUTH#0111#011NTLM#011service=imap#011lip=10.6.1.82#011rip=10.6.1.81#011lport=143#011rport=1205 Aug 28 23:49:38 ccimap dovecot: auth(default): client out: CONT#0111#011 Aug 28 23:49:38 ccimap dovecot: auth(default): client in: CONT#0111#011TlRMTVNTUAABAAAAB7IIogIAAgAvAAAABwAHACgAAAAFASgKAAAAD01SSklHR1NBRA== Aug 28 23:49:38 ccimap dovecot: auth(default): client out: CONT#0111#011TlRMTVNTUAACAAAABAAEADAAAAAFgominEGMs1Rz3YQAAAAAAAAAAGYAZgA0AAAAQQBEAAIABABBAEQAAQAMAEMAQwBJAE0AQQBQAAQAGgBsAGEAdABlAHIAbwBvAG0AcwAuAGMAbwBtAAMAKABjAGMAaQBtAGEAcAAuAGwAYQB0AGUAcgBvAG8AbQBzAC4AYwBvAG0AAAAAAA== Aug 28 23:49:38 ccimap dovecot: auth(default): client in: CONT#0111#011TlRMTVNTUAADAAAAGAAYAGYAAAAYABgAfgAAAAQABABIAAAADAAMAEwAAAAOAA4AWAAAAAAAAACWAAAABYKIogUBKAoAAAAPQQBEAG0AagBpAGcAZwBzAE0AUgBKAEkARwBHAFMAKYRSdfpULaQAAAAAAAAAAAAAAAAAAAAAj90Vff2FIU1+Gs/eei8bL8dMJFGZnzSg Aug 28 23:49:38 ccimap dovecot: auth(default): client out: OK#0111#011user=mjiggs Aug 28 23:49:38 ccimap dovecot: auth(default): master in: REQUEST#0112#0111869#0111 Aug 28 23:49:38 ccimap dovecot: auth(default): passwd(mjiggs,10.6.1.81): lookup Aug 28 23:49:38 ccimap dovecot: auth(default): master out: USER#0112#011mjiggs#011system_user=mjiggs#011uid=10416#011gid=10000#011home=/home/AD/mjiggs Aug 28 23:49:38 ccimap dovecot: imap-login: Login: user=<mjiggs>, method=NTLM, rip=10.6.1.81, lip=10.6.1.82 So, Outlook Express works. Great. The worst email client I know and it works fine with SPA. Unfortunately Outlook 2007 doesn't work - it prompts me for a password, and then obviously fails with NT_STATUS_WRONG_PASSWORD.. Aug 28 23:39:40 ccimap dovecot: auth(default): client in: AUTH#0111#011NTLM#011service=imap#011lip=10.6.1.82#011rip=10.6.1.81#011lport=143#011rport=1162 Aug 28 23:39:40 ccimap dovecot: auth(default): client out: CONT#0111#011 Aug 28 23:39:40 ccimap dovecot: auth(default): client in: CONT#0111#011TlRMTVNTUAABAAAAB4IIogAAAAAAAAAAAAAAAAAAAAAFASgKAAAADw== Aug 28 23:39:40 ccimap dovecot: auth(default): client out: CONT#0111#011TlRMTVNTUAACAAAABAAEADAAAAAFgomiAN6hAS8XKA4AAAAAAAAAAGYAZgA0AAAAQQBEAAIABABBAEQAAQAMAEMAQwBJAE0AQQBQAAQAGgBsAGEAdABlAHIAbwBvAG0AcwAuAGMAbwBtAAMAKABjAGMAaQBtAGEAcAAuAGwAYQB0AGUAcgBvAG8AbQBzAC4AYwBvAG0AAAAAAA== Aug 28 23:39:40 ccimap dovecot: auth(default): client in: CONT#0111#011TlRMTVNTUAADAAAAGAAYAGIAAAAYABgAegAAAAAAAABIAAAADAAMAEgAAAAOAA4AVAAAAAAAAACSAAAABYKIogUBKAoAAAAPbQBqAGkAZwBnAHMATQBSAEoASQBHAEcAUwBVhYHxX9PdSQAAAAAAAAAAAAAAAAAAAAC0rohzeNXOHMxVHQkogW4ytyNC9hcpnCg= Aug 28 23:39:40 ccimap dovecot: auth(default): winbind(?,10.6.1.81): user not authenticated: NT_STATUS_WRONG_PASSWORD Aug 28 23:39:40 ccimap dovecot: auth(default): new auth connection: pid=1867 Aug 28 23:39:41 ccimap dovecot: auth(default): client out: FAIL#0111 Does anyone have any magic beans for Outlook 2007 (tried both original release + SP2) ? Cheers, Gavin

3 13

[Dovecot] v2.0 configuration paths
by Timo Sirainen 01 Sep '09

01 Sep '09

In Dovecot v2.0 I'm splitting dovecot-example.conf to multiple files. It's probably annoying to have tons of dovecot-*-example.conf files, so what do you think about: 1. Change default sysconfdir from $prefix/etc to $prefix/etc/dovecot (that's what most distros do anyway) 2. Install *.conf files to $sysconfdir/example/ without the "-example" part in any of the config files. So new installations would then start with "mv example/* ."

8 12

[Dovecot] Dovecot POP question
by CJ Keist 01 Sep '09

01 Sep '09

Quick question, Have dovecot 1.1.16. Does Dovecot's POP handle sub folders? -- C. J. Keist Email: cj.keist(a)colostate.edu UNIX/Network Manager Phone: 970-491-0630 Engineering Network Services Fax: 970-491-5569 College of Engineering, CSU Ft. Collins, CO 80523-1301 All I want is a chance to prove 'Money can't buy happiness'

2 1

[Dovecot] Active IMAP sessions per server?
by Brent Bloxam 31 Aug '09

31 Aug '09

Hi, I'm curious about some of the larger dovecot installs out there and what your current active user load looks like per server. Realistically, how many active IMAP sessions are some of you maintaining? At what point did you find the load became unmanageable? I know there's a lot of different factors involved in this, but I'm just looking to get a rough idea of what I can expect to be able to handle with dovecot. Any help is appreciated Regards, Brent

2 1

[Dovecot] Quotas ignored on INBOX only
by Random Monkey 31 Aug '09

31 Aug '09

I have set up postifx and dovecot (1.1) with virtual users and delivery via LDA. I am very pleased with the results so far but have this problem with quotas. Setting a global quota using plugin { } I initially used maildir to set quotas, but they seem to apply to all folders apart from INBOX. For debugging I switched maildir to dict using mysql. The table populates as it should with sizes and message count for all messages created in trash/drafts/sent folders - but messages in the INBOX do not increment size or message count in the table. I have tried with quota rules for both messages and storage. I have also tried specifying INBOX instead of * Any suggestions on how to fix please? Dovecot -n output: # 1.1.11: /etc/dovecot/dovecot-postfix.conf # OS: Linux 2.6.28-14-server i686 Ubuntu 9.04 ext3 log_timestamp: %Y-%m-%d %H:%M:%S protocols: imaps pop3s managesieve ssl_cert_file: /etc/ssl/certs/ssl-mail.pem ssl_key_file: /etc/ssl/private/ssl-mail.key ssl_cipher_list: ALL:!LOW:!SSLv2:ALL:!aNULL:!ADH:!eNULL:!EXP:RC4+RSA:+HIGH:+MEDIUM login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login login_executable(managesieve): /usr/lib/dovecot/managesieve-login login_greeting_capability(default): yes login_greeting_capability(imap): yes login_greeting_capability(pop3): no login_greeting_capability(managesieve): no mail_max_userip_connections(default): 10 mail_max_userip_connections(imap): 10 mail_max_userip_connections(pop3): 3 mail_max_userip_connections(managesieve): 10 mail_privileged_group: mail mail_location: maildir:/var/vmail/%d/%n/Maildir mail_debug: yes mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_executable(managesieve): /usr/lib/dovecot/managesieve mail_plugins(default): quota imap_quota mail_plugins(imap): quota imap_quota mail_plugins(pop3): quota mail_plugins(managesieve): mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 mail_plugin_dir(managesieve): /usr/lib/dovecot/modules/managesieve imap_client_workarounds(default): outlook-idle delay-newmail imap_client_workarounds(imap): outlook-idle delay-newmail imap_client_workarounds(pop3): imap_client_workarounds(managesieve): pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh pop3_client_workarounds(managesieve): sieve_storage(default): sieve_storage(imap): sieve_storage(pop3): sieve_storage(managesieve): ~/sieve sieve(default): sieve(imap): sieve(pop3): sieve(managesieve): ~/.dovecot.sieve auth default: mechanisms: plain login passdb: driver: sql args: /etc/dovecot/dovecot-sql.conf userdb: driver: passwd userdb: driver: static args: uid=5000 gid=5000 home=/var/vmail/%d/%n allow_all_users=yes socket: type: listen client: path: /var/spool/postfix/private/dovecot-auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384 user: vmail plugin: quota: dict:user::proxy::quotadict quota_rule: *:messages=5 dict: quotadict: mysql:/etc/dovecot/dovecot-dict-quota.conf

2 3

[Dovecot] expire plugin: columns not uniq
by Nikita Koshikov 31 Aug '09

31 Aug '09

Hello list, My dovecot setup have expire plugin enabled. It is working fine: new records added to database(sqlite), expire-tool successfully expunges old mail, but when expire-tool try to update database record for processed user, I get error in logs: root@mail dovecot 0:0 # /usr/sbin/dovecot --exec-mail ext /usr/libexec/dovecot/expire-tool.sh --test Info: koshikov.n(a)domain.com/Spam: timestamp 1250622406 (Tue Aug 18 22:06:46 2009) -> 1250684287 (Wed Aug 19 15:18:07 2009) in logs: Aug 19 13:29:11 dict: Error: sqlite: exec(INSERT INTO expires (expire_stamp,username,mailbox) VALUES ('1250684287','koshikov.n(a)domain.com','Spam')) failed: columns username, mailbox are not unique (19) Aug 19 13:29:11 dict: Error: sql dict: commit failed: 1҅�t+�]�Ћu�}��]Ð�t& This is my expire dict config file: connect = /var/mail/expire.db #v1.2 map { pattern = shared/expire/$user/$mailbox table = expires value_field = expire_stamp fields { username = $user mailbox = $mailbox } } expire plugin related dovecot sections: dict { expire = sqlite:/etc/dovecot/plugins/expire.conf } plugin { expire = Trash 30 Spam 20 expire_dict = proxy::expire } Version of sqlite is 3.6.16, dovecot-1.2.3. How can I solve this ? and why expire plugin is trying to use INSERT, instead of UPDATE ?

3 8

[Dovecot] Quick and dirty server optimized for IMAP upload speed?
by Adam McDougall 31 Aug '09

31 Aug '09

Early next week I need to upload over 100,000 emails to an IMAP server as quickly as possible from an Outlook client. I am looking for any methods I can use to (temporarily?) speed up the rate at which dovecot can accept and store IMAP uploads, whether it be storing on local disk, ram disk, etc. I can setup a temporary server on a laptop for example and once the upload has finished I can use standard file copying methods to transfer the mail to stable, permanent storage. I haven't been able to see over about 7 msgs/sec upload speed from a local folder in any mail client to dovecot (only NFS or ZFS backend tested so far with Maildir). Is there something horribly wrong with the speed I am seeing or are there just tricks I can try? Any tips? I'll be working on it all weekend until I find something satisfactory. It seems like I can upload mails to an Exchange server quicker. I'll setup just about anything that my experience allows me to, I can be very resourceful with adhoc hardware and software. Alternatively I'll take a fast way of converting Exchange email to a tree of local mbox files which I can then run mb2md on. I tried using Thunderbird to Import the mails from Outlook and while it was fast, it messed up the formatting of some of the mails so I don't think I can use that. I tried readpst briefly from libpst but it took a long time to run, took alot of cpu, and was spewing lots of errors so I canceled it. Thanks for any input!

3 7

[Dovecot] Postfix : lda problem
by denis 30 Aug '09

30 Aug '09

Hi, I come back with my problem: On debian lenny, using dovecot 1.1.13-2~bpo50+1 I try to configure my setup (with Postfix virtual domains) to use dovecot as lda but nothing happens, as if postfix not delegate to dovecot I am using the contreol panel alternc (http://www.alternc.org) All the maildir are in the format /var/alternc/mail/i/info_domainepublic.net for info(a)domainepublic.net The "virtual_mailbox_maps" will retrieve the correct maildir to deliver the message. For Alternc, an address is considered as an alias of the primary domain name. Thus info(a)domainepublic.net is assimilated to info_domainepublic.net(a)altern.domainepublic.net Here is a sequence of arrival of mail, the result of postconf -n, dovecot -n and the master.cf from postfix I looked in the documentation and google, but I do not understand the problem. Thanks Denis # Mail.log Aug 15 14:49:17 altern amavis[17243]: (17243-09) Passed CLEAN, [85.27.20.149] [85.27.20.149] <denis(a)collectifs.net> -> <info_domainepublic.net(a)altern.domainepublic.net>, Message-ID: <4A86AE18.7020706(a)collectifs.net>, mail_id: ozn7XWRcaHem, Hits: -9.27, size: 665, queued_as: 0A0054604A, 727 ms Aug 15 14:49:17 altern postfix/smtp[18138]: 345954610C: to=<info_domainepublic.net(a)altern.domainepublic.net>, orig_to=<info(a)domainepublic.net>, relay=127.0.0.1[127.0.0.1]:10024, delay=0.9, delays=0.17/0/0/0.73, dsn=2.0.0, status=sent (250 2.0.0 Ok, id=17243-09, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 0A0054604A) Aug 15 14:49:17 altern postfix/local[18256]: 0A0054604A: to=<info_domainepublic.net(a)altern.domainepublic.net>, relay=local, delay=0.23, delays=0.19/0/0/0.05, dsn=2.0.0, status=sent (delivered to maildir) # DOVECOT # 1.1.13: /etc/dovecot/dovecot.conf # OS: Linux 2.6.26-1-amd64 x86_64 Debian 5.0.2 log_timestamp: %Y-%m-%d %H:%M:%S protocols: imap imaps pop3 pop3s managesieve ssl_cert_file: /etc/ssl/domainepublic.net/domainepublic.net.crt ssl_key_file: /etc/ssl/domainepublic.net/domainepublic.net.key disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login login_executable(managesieve): /usr/lib/dovecot/managesieve-login first_valid_uid: 33 mail_privileged_group: mail mail_location: maildir:~/Maildir mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_executable(managesieve): /usr/lib/dovecot/managesieve mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 mail_plugin_dir(managesieve): /usr/lib/dovecot/modules/managesieve sieve_storage(default): sieve_storage(imap): sieve_storage(pop3): sieve_storage(managesieve): ~/sieve sieve(default): sieve(imap): sieve(pop3): sieve(managesieve): ~/.dovecot.sieve auth default: passdb: driver: sql args: /etc/dovecot/dovecot-sql.conf userdb: driver: sql args: /etc/dovecot/dovecot-sql.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix socket: type: listen master: path: /var/run/dovecot/auth-master mode: 432 user: postfix # POSTFIX alias_database = hash:/etc/aliases alias_maps = proxy:mysql:/etc/postfix/myalias.cf, hash:/etc/aliases append_dot_mydomain = no biff = no broken_sasl_auth_clients = yes config_directory = /etc/postfix content_filter = smtp-amavis:[127.0.0.1]:10024 default_privs = www-data disable_vrfy_command = yes inet_interfaces = all mailbox_size_limit = 0 message_size_limit = 20480000 mydestination = altern.domainepublic.net vacarme.domainepublic.net mail.domainepublic.net, altern, localhost.localdomain, localhost myhostname = altern.domainepublic.net mynetworks = 127.0.0.0/8 91.121.107.196 62.58.108.143 62.58.108.140 10.0.112.2 10.0.112.1 myorigin = altern.domainepublic.net owner_request_special = no readme_directory = no recipient_delimiter = + smtp_tls_CAfile = /etc/ssl/certs/cacert.org.pem smtp_tls_cert_file = /etc/ssl/domainepublic.net/domainepublic.net.crt smtp_tls_key_file = /etc/ssl/domainepublic.net/domainepublic.net.key smtp_tls_note_starttls_offer = yes smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache smtp_use_tls = yes smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU) smtpd_client_restrictions = permit_mynetworks, check_client_access hash:/etc/postfix/access, permit_sasl_authenticated, smtpd_data_restrictions = reject_unauth_pipelining smtpd_delay_reject = yes smtpd_helo_required = yes smtpd_helo_restrictions = permit_mynetworks, permit_sasl_authenticated, check_helo_access hash:/etc/postfix/helo_access, reject_invalid_hostname, reject_non_fqdn_hostname smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_invalid_hostname, reject_non_fqdn_hostname, reject_non_fqdn_sender, reject_non_fqdn_recipient, reject_unauth_pipelining, reject_unauth_destination, reject_multi_recipient_bounce, check_client_access hash:/etc/postfix/access, reject_rbl_client zombie.dnsbl.sorbs.net, reject_rbl_client zen.spamhaus.org, reject_rbl_client bl.spamcop.net, reject_rbl_client cbl.abuseat.org, reject_rbl_client dul.dnsbl.sorbs.net, check_policy_service inet:127.0.0.1:60000, permit smtpd_sasl_auth_enable = yes smtpd_sasl_path = private/auth smtpd_sasl_type = dovecot smtpd_sender_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_non_fqdn_sender, reject_invalid_hostname, smtpd_tls_CAfile = /etc/ssl/certs/root.pem smtpd_tls_cert_file = /etc/ssl/domainepublic.net/domainepublic.net.crt smtpd_tls_key_file = /etc/ssl/domainepublic.net/domainepublic.net.key smtpd_tls_loglevel = 1 smtpd_tls_received_header = yes smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache smtpd_tls_session_cache_timeout = 3600s smtpd_use_tls = yes strict_rfc821_envelopes = yes tls_random_source = dev:/dev/urandom unknown_local_recipient_reject_code = 550 virtual_gid_maps = proxy:mysql:/etc/postfix/mygid.cf virtual_mailbox_base = / virtual_mailbox_maps = proxy:mysql:/etc/postfix/myvirtual.cf virtual_minimum_uid = 1000 virtual_transport = dovecot virtual_uid_maps = static:33 # POSTFIX master.cnf # # Postfix master process configuration file. For details on the format # of the file, see the master(5) manual page (command: "man 5 master"). # # Do not forget to execute "postfix reload" after editing this file. # # ========================================================================== # service type private unpriv chroot wakeup maxproc command + args # (yes) (yes) (yes) (never) (100) # ========================================================================== smtp inet n - - - - smtpd #submission inet n - - - - smtpd # -o smtpd_tls_security_level=encrypt # -o smtpd_sasl_auth_enable=yes # -o smtpd_client_restrictions=permit_sasl_authenticated,reject # -o milter_macro_daemon_name=ORIGINATING smtps inet n - - - - smtpd -o smtpd_tls_wrappermode=yes -o smtpd_sasl_auth_enable=yes -o smtpd_client_restrictions=permit_sasl_authenticated,reject # -o milter_macro_daemon_name=ORIGINATING #628 inet n - - - - qmqpd pickup fifo n - - 60 1 pickup cleanup unix n - - - 0 cleanup qmgr fifo n - n 300 1 qmgr #qmgr fifo n - - 300 1 oqmgr tlsmgr unix - - - 1000? 1 tlsmgr rewrite unix - - - - - trivial-rewrite bounce unix - - - - 0 bounce defer unix - - - - 0 bounce trace unix - - - - 0 bounce verify unix - - - - 1 verify flush unix n - - 1000? 0 flush proxymap unix - - n - - proxymap proxywrite unix - - n - 1 proxymap smtp unix - - - - - smtp # When relaying mail as backup MX, disable fallback_relay to avoid MX loops relay unix - - - - - smtp -o smtp_fallback_relay= # -o smtp_helo_timeout=5 -o smtp_connect_timeout=5 showq unix n - - - - showq error unix - - - - - error retry unix - - - - - error discard unix - - - - - discard local unix - n n - - local virtual unix - n n - - virtual lmtp unix - - - - - lmtp anvil unix - - - - 1 anvil scache unix - - - - 1 scache # # ==================================================================== # Interfaces to non-Postfix software. Be sure to examine the manual # pages of the non-Postfix software to find out what options it wants. # # Many of the following services use the Postfix pipe(8) delivery # agent. See the pipe(8) man page for information about ${recipient} # and other message envelope options. # ==================================================================== # # maildrop. See the Postfix MAILDROP_README file for details. # Also specify in main.cf: maildrop_destination_recipient_limit=1 # maildrop unix - n n - - pipe flags=DRhu user=vmail argv=/usr/bin/maildrop -d ${recipient} # # See the Postfix UUCP_README file for configuration details. # uucp unix - n n - - pipe flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient) # # Other external delivery methods. # ifmail unix - n n - - pipe flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient) bsmtp unix - n n - - pipe flags=Fq. user=bsmtp argv=/usr/lib/bsmtp/bsmtp -t$nexthop -f$sender $recipient scalemail-backend unix - n n - 2 pipe flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store ${nexthop} ${user} ${extension} mailman unix - n n - - pipe flags=FR user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py ${nexthop} ${user} # added for amavisd-new smtp-amavis unix - - - - 4 smtp -o smtp_data_done_timeout=1200 -o smtp_send_xforward_command=yes -o disable_dns_lookups=yes -o max_use=20 127.0.0.1:10025 inet n - - - - smtpd -o content_filter= -o local_recipient_maps= -o relay_recipient_maps= -o smtpd_restriction_classes= -o smtpd_delay_reject=no -o smtpd_client_restrictions=permit_mynetworks,reject -o smtpd_helo_restrictions= -o smtpd_sender_restrictions= -o smtpd_recipient_restrictions=permit_mynetworks,reject -o mynetworks_style=host -o mynetworks=127.0.0.0/8 -o strict_rfc821_envelopes=yes -o smtpd_error_sleep_time=0 -o smtpd_soft_error_limit=1001 -o smtpd_hard_error_limit=1000 -o smtpd_client_connection_count_limit=0 -o smtpd_client_connection_rate_limit=0 -o receive_override_options=no_header_body_checks,no_unknown_recipient_checks -o smtpd_data_restrictions=reject_unauth_pipelining -o smtpd_end_of_data_restrictions= dovecot unix - n n - - pipe flags=DRhu user=www-data:www-data argv=/usr/lib/dovecot/deliver -d $(recipient)

5 14