- dovecot - dovecot.org

Re: [Dovecot] troubles with 1.1.8 and squirrelmail over HTTPS
by Frank Bonnet 26 Jan '09

26 Jan '09

Hello Jack Setting up imapproxy on a third machine greatly improve performances on my mailhub which doesn't refuse connexions anymore. Thanks a lot for your help ! Frank Jack Stewart wrote: > > > Frank Bonnet wrote: >> Timo Sirainen wrote: >>> On Thu, 2009-01-15 at 16:25 +0100, Frank Bonnet wrote: >>>> I had to increase the max_mail_processes to 8192 >>>> to have a functionnal IMAP server with normal clients AND >>>> squirrelmail clients >>>> >>>> 8192 sounds enormous to me , any infos welcome ! >>> >>> How many imap processes have you running typically? >>> >> > > Hi, > > I don't know if this will help or not - I'm taking my comments offline > because it isn't clear if they are related to your core problem. Also, > they seem to be specific to high usage servers/people. > > We're not 1.1.8 yet but I've spent a reasonable amount of time tweaking > the Linux side. > > We run at about ~1300 processes per server. > > Squirrelmail does a login/logout on every single page that is clicked. > So I've found that running an imap proxy (such as the one at > imapproxy.org really helps). It creates some additional connections but > they get re-used pretty frequently. > > If 1.1.8 isn't logging out quickly, or not cleanly shutting down the > connection, or something similar, that could explain additional > connections. What does netstat -an show? On some O/S's the process will > disappear from ps but not be fully released until the socket/connection > disappears (in this case tcp). If you have a bunch of WAIT/FIN_WAIT's > something like this seems pretty likely. > > I've found that going through localhost allows you to bypass TLS while > still enforcing TLS for non-localhost connections. It's pretty nice for > overhead/connect speed. Also, an imap proxy may need a non-encrypted > connection. > > Besides the dovecot max_ ... settings, in our system you need to tweak > limits.conf and bump up the limits via the ulimit command in the dovecot > init script. Open file descriptors and process limits seem to be the > main settings. > > After this, you get into kernel tuning such as inotify settings. > > Let me know if you have any questions. If some of this helps, we might > want to feed it back into the list. > > ---Jack > >

1 0

[Dovecot] help writeing rule for preventin spam
by Sophia Alikhani 26 Jan '09

26 Jan '09

I used dovecot-1.1.7 + qmail-jms1-7+ vpopmail + ... everyday , everyuser has many spams from his/her mail to his/her for example in Bulk folder there are many spam e-mails that the sender is ourselves (from mymail@mydomain to myself@mydomain) how can i prevent these types of spam -- with regards Sophia Alikhani WorkPhone: +98-21-8497057 Mobile : +98-912-3361036

3 2

[Dovecot] dovecot 1.2 latest copy delete etc perfomance slowed down extremly works partly
by Robert Schetterer 26 Jan '09

26 Jan '09

Hi Timo, with dovecot 1.2 copy delete etc imap funktions get slow down extremly log shows that the copy command is done right but takes extremly log to perform sometimes goes into timeout --log dovecot: Jan 20 15:48:48 Info: IMAP(huber(a)schetterer.com): copy: uid=5, box=Drafts, dest=Trash, msgid=<20090120140432.516062360C0(a)master.schetterer.com>, size=748 dovecot: Jan 20 15:48:48 Info: auth(default): new auth connection: pid=28816 Timeout leak: 0x80a9720 --- after restart dovecot the imap function i.e. delete is done and deleted mails are shown up in i.e the trash folder any idea whats happening after the last patcheswhich might be envolved? any hint to get more info out of the logs for debug ? client was latest thunderbird stable -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria

2 4

[Dovecot] userdb didn't return a home directory with v1.1.7
by Ivars Strazdiņš 26 Jan '09

26 Jan '09

Hi all, I am running Dovecot v1.1.7 in a relatively quiet and calm environment. Suddenly overnight cron job has started throwing out errors like: /usr/sbin/dovecot --exec-mail ext /usr/lib/dovecot/expire-tool Error: userdb(user1(a)mail.example) didn't return a home directory Error: userdb(user2(a)mail.example) didn't return a home directory Indeed, running this command produces: ------------------------- $ sudo /usr/sbin/dovecot --exec-mail ext /usr/lib/dovecot/expire-tool --test Error: userdb(user1(a)mail.example) didn't return a home directory Info: User lookup failed: user1(a)mail.example Error: userdb(user2(a)mail.example) didn't return a home directory Info: User lookup failed: user2(a)mail.example ------------------------- Yet these mailboxes are valid, corresponding users can login, send and receive mail. Other mailboxes are OK, too. Where to to start looking? I found that similar error message with v1.1.6 is fixed in v1.1.7, but I am running v.1.1.7 already. Please see dovecot configuration below. Thank you for your time, Ivars # 1.1.7: /etc/dovecot/dovecot.conf # OS: Linux 2.6.27-9-server i686 Ubuntu 8.10 ext3 base_dir: /var/run/dovecot/ syslog_facility: local1 protocols: imap imaps pop3 pop3s managesieve ssl_cert_file: /etc/certs/mail.mail.example.crt ssl_key_file: /etc/certs/mail.mail.example.key disable_plaintext_auth: no login_dir: /var/run/dovecot//login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login login_executable(managesieve): /usr/lib/dovecot/managesieve-login login_user: postfix login_greeting: VDEAVK epasta serveris. login_processes_count: 2 first_valid_uid: 107 mail_location: maildir:/home/vmail/%d/%n mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_executable(managesieve): /usr/lib/dovecot/managesieve mail_plugins(default): expire fts fts_squat antispam mail_plugins(imap): expire fts fts_squat antispam mail_plugins(pop3): expire mail_plugins(managesieve): mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 mail_plugin_dir(managesieve): /usr/lib/dovecot/modules/managesieve managesieve_implementation_string(default): dovecot managesieve_implementation_string(imap): dovecot managesieve_implementation_string(pop3): dovecot managesieve_implementation_string(managesieve): Cyrus timsieved v2.2.13 sieve_storage(default): sieve_storage(imap): sieve_storage(pop3): sieve_storage(managesieve): /etc/dovecot/sieve/ sieve(default): sieve(imap): sieve(pop3): sieve(managesieve): /home/vmail/sieve-scripts/%u.sieve auth default: mechanisms: PLAIN LOGIN user: vmail username_format: %n(a)mail.example verbose: yes passdb: driver: sql args: /etc/dovecot/dovecot-mysql.conf userdb: driver: sql args: /etc/dovecot/dovecot-mysql.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384 user: vmail group: vmail plugin: sieve: /home/vmail/sieve-scripts/%u.sieve expire: Trash 30 Trash/* 30 Spam 60 expire_dict: proxy::expire fts: squat antispam_signature: X-DSPAM-Signature antispam_trash: trash;Trash;Deleted Items antispam_spam: Spam antispam_dspam_binary: /usr/bin/dspam antispam_dspam_args: --deliver=;--user;%u;-s antispam_mail_tmpdir: /tmp antispam_mail_sendmail: /usr/sbin/sendmail antispam_mail_spam: spam-%u(a)mail.example antispam_mail_notspam: notspam-%u(a)mail.example antispam_crm_binary: /bin/false dict: expire: mysql:/etc/dovecot/dovecot-dict-expire.conf root@mail:~# cat /etc/dovecot/dovecot-dict-expire.conf connect = host=127.0.0.1 dbname=postfix user=postfix password=removed table = expire select_field = timestamp where_field = path username_field = username root@mail:~# # 1.1.7: /etc/dovecot/dovecot.conf # OS: Linux 2.6.27-9-server i686 Ubuntu 8.10 ext3 base_dir: /var/run/dovecot/ syslog_facility: local1 protocols: imap imaps pop3 pop3s managesieve ssl_cert_file: /etc/certs/mail.mail.example.crt ssl_key_file: /etc/certs/mail.mail.example.key disable_plaintext_auth: no login_dir: /var/run/dovecot//login login_executable(default): /usr/lib/dovecot/imap-login login_executable(imap): /usr/lib/dovecot/imap-login login_executable(pop3): /usr/lib/dovecot/pop3-login login_executable(managesieve): /usr/lib/dovecot/managesieve-login login_user: postfix login_greeting: VDEAVK epasta serveris. login_processes_count: 2 first_valid_uid: 107 mail_location: maildir:/home/vmail/%d/%n mail_executable(default): /usr/lib/dovecot/imap mail_executable(imap): /usr/lib/dovecot/imap mail_executable(pop3): /usr/lib/dovecot/pop3 mail_executable(managesieve): /usr/lib/dovecot/managesieve mail_plugins(default): expire fts fts_squat antispam mail_plugins(imap): expire fts fts_squat antispam mail_plugins(pop3): expire mail_plugins(managesieve): mail_plugin_dir(default): /usr/lib/dovecot/modules/imap mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 mail_plugin_dir(managesieve): /usr/lib/dovecot/modules/managesieve managesieve_implementation_string(default): dovecot managesieve_implementation_string(imap): dovecot managesieve_implementation_string(pop3): dovecot managesieve_implementation_string(managesieve): Cyrus timsieved v2.2.13 sieve_storage(default): sieve_storage(imap): sieve_storage(pop3): sieve_storage(managesieve): /etc/dovecot/sieve/ sieve(default): sieve(imap): sieve(pop3): sieve(managesieve): /home/vmail/sieve-scripts/%u.sieve auth default: mechanisms: PLAIN LOGIN user: vmail username_format: %n(a)mail.example verbose: yes passdb: driver: sql args: /etc/dovecot/dovecot-mysql.conf userdb: driver: sql args: /etc/dovecot/dovecot-mysql.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384 user: vmail group: vmail plugin: sieve: /home/vmail/sieve-scripts/%u.sieve expire: Trash 30 Trash/* 30 Spam 60 expire_dict: proxy::expire fts: squat antispam_signature: X-DSPAM-Signature antispam_trash: trash;Trash;Deleted Items antispam_spam: Spam antispam_dspam_binary: /usr/bin/dspam antispam_dspam_args: --deliver=;--user;%u;-s antispam_mail_tmpdir: /tmp antispam_mail_sendmail: /usr/sbin/sendmail antispam_mail_spam: spam-%u(a)mail.example antispam_mail_notspam: notspam-%u(a)mail.example antispam_crm_binary: /bin/false dict: expire: mysql:/etc/dovecot/dovecot-dict-expire.conf

3 3

[Dovecot] troubles with 1.1.8 and squirrelmail over HTTPS
by Frank Bonnet 26 Jan '09

26 Jan '09

Hello I noticed a problem after upgrading to 1.1.8 Users that access to their mailboxes using webmail squirrelmail and HTTPS using HTTP seems to work correctly but it not safe enough ... There is an error message saying the imap server send a BYE command ... I downgraded our Dovecot server to 1.1.7 then it works again ... Does somebody has the same problem ? -- Cordialement Frank Bonnet ESIEE Paris

4 8

[Dovecot] Shared Mailboxes (symlink) and kmail: known issues?
by Wilhelm Meier 26 Jan '09

26 Jan '09

Hi, are there any known issues with symlinked-shared-mailboxes and kmail? I use virtual users (LDAP), so there are no unix-permissions related problems here: all mailboxes are owned by the local user vmail. Each user maildir has some symlinks to shared mailboxes. This works fine if I use squirrelmail as a MUA. kmail instead seems to have some problems: if I save a mail into the shared-folder, the other users are seeing this new mail almost immediately. But if I delete(!) a mail from the shared-folder, the list of the other kmails remains untouch. Refreshing does nothing. I have to close kmail and restart. Is this related to some sort of wrong config of the shared mailboxes or is this a (known) dovecot <-> kmail problem? -- Wilhelm

2 6

[Dovecot] maildirfolder is created world-writeable
by Robert S 26 Jan '09

26 Jan '09

If I create a new folder using a mail client (eg. kmail/OE), the maildirfolder file is created world-writable. I assume that this is a security risk and should be -rw-------. eg. - create folder "Foo" in mail client ~ $ ls -la .maildir/.Foo/ total 20 drwx------ 5 robert users 4096 2009-01-21 19:56 . drwx------ 43 robert users 4096 2009-01-21 19:56 .. drwx------ 2 robert users 4096 2009-01-21 19:56 cur -rw-rw-rw- 1 robert users 0 2009-01-21 19:56 maildirfolder drwx------ 2 robert users 4096 2009-01-21 19:56 new drwx------ 2 robert users 4096 2009-01-21 19:56 tmp Some info: # dovecot --version 1.1.7 # dovecot -n # 1.1.7: /etc/dovecot/dovecot.conf # OS: Linux 2.6.27-gentoo-r7 x86_64 Gentoo Base System release 1.12.11.1 ssl_cert_file: /etc/ssl/dovecot/server.pem ssl_key_file: /etc/ssl/dovecot/server.key disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable: /usr/libexec/dovecot/imap-login mail_location: maildir:~/.maildir mail_plugins: deleted_to_trash namespace: type: public separator: / prefix: Public/ location: maildir:/var/local/mail/public/ list: yes namespace: type: private separator: / inbox: yes list: yes subscriptions: yes auth default: passdb: driver: pam args: * userdb: driver: passwd I can't find this is the bugs area.

2 1

[Dovecot] Bug or other issue? Jan 22 00:02:09 argon postfix/pipe[21251]: E8126A3671: to=<mbj@seonic.net>, orig_to=<root>, relay=dovecot, delay=0.38, delays=0.03/0/0/0.35, dsn=5.3.0, status=bounced (Command died with signal 6: "/usr/libexec/dovecot/deliver")
by Markus Schirp 26 Jan '09

26 Jan '09

Hi, I found the following in my logfiles: The failure is not reproducable at the moment. System is delivering mails to mailboxes with no problems at all. It is a production installation with medium load. dovecot --version: 1.1.7 OS: Linux (Gentoo/x86 stable) - grsec enabled kernel deliver.log: deliver(user(a)example.tld): Panic: file istream-tee.c: line 144 (i_stream_tee_read): assertion failed: (ret > 0) deliver(user(a)example.tld): Error: Raw backtrace: /usr/libexec/dovecot/deliver [0x80c8032] -> /usr/libexec/dovecot/deliver(default_fatal_handler+0x3a) [0x80c812a] -> /usr/libexec/dovecot/deliver [0x80c796c] -> /usr/libexec/dovecot/deliver [0x80cf5f8] -> /usr/libexec/dovecot/deliver(i_stream_read+0x2d) [0x80cc5dd] -> /usr/libexec/dovecot/deliver(i_stream_read_data+0x1d) [0x80cc6ed] -> /usr/libexec/dovecot/deliver [0x80d52cb] -> /usr/libexec/dovecot/deliver(o_stream_send_istream+0x35) [0x80d45b5] -> /usr/libexec/dovecot/deliver(maildir_save_continue+0x32) [0x806fbb2] -> /usr/libexec/dovecot/deliver(mail_storage_copy+0xd2) [0x8096512] -> /usr/libexec/dovecot/deliver(maildir_copy+0x5b) [0x806c51b] -> /usr/libexec/dovecot/deliver(deliver_save+0x17d) [0x805cbfd] -> /usr/libexec/dovecot/deliver(main+0x161b) [0x805e41b] -> /lib/libc.so.6(__libc_start_main+0xdc) [0x559a7fdc] -> /usr/libexec/dovecot/deliver [0x805bb41] mta.log (postfix with dovecot/deliver pipe transport): Jan 22 00:02:09 argon postfix/pipe[21251]: E8126A3671: to=<user(a)example.tld>, orig_to=<localalias>, relay=dovecot, delay=0.38, delays=0.03/0/0/0.35, dsn=5.3.0, status=bounced (Command died with signal 6: "/usr/libexec/dovecot/deliver") Neither the grsec.log nor dmesg said anything special. The box had filesystem issues a month ago. I sucessufly fscked it. Do you think its a hidden fs problem or a dovecot issue? Here in Germay the time is at 0:30, I'll sleep some hours until I can respond to "need more information request (conf-file, or so)" Thx in advance! Markus Schirp

2 2

[Dovecot] Dict quota negative values in MySql table?
by michael＠lattari.pl 26 Jan '09

26 Jan '09

Hi! I have a question about the dictionary quota :storage and :messages values in MySql quota table. How to interpret the following values? Why some values are negative? Are the values relative to something? I would like to write a simple php application to check the user quota but I don't know how to interpret this: mysql> select * from quota; +------------------------+----------------+-------------+ | username | path | current | +------------------------+----------------+-------------+ | mlattari | quota/storage | -6976 | | mlattari | quota/messages | -3 | | llattari | quota/storage | -2147483648 | | llattari | quota/messages | -874 | | mlattari_archivum_imap | quota/storage | 282475 | | mlattari_archivum_imap | quota/messages | 5 | +------------------------+----------------+-------------+ 6 rows in set (0.00 sec) pls help :-) dovecot -n # 1.1.8: /etc/dovecot/etc/dovecot.conf # OS: Linux 2.6.22.14-72.fc6 x86_64 Fedora Core release 6 (Zod) ext3 base_dir: /etc/dovecot/var/run/dovecot/ log_path: /etc/dovecot/var/log/dovecot_log info_log_path: /etc/dovecot/var/log/dovecot_log protocols: imaps ssl_cert_file: /etc/pki/dovecot/server.crt ssl_key_file: /etc/pki/dovecot/server.key ssl_cipher_list: ALL:!ADH!LOW:!SSLv2:!EXP:+HIGH:+MEDIUM verbose_ssl: yes login_dir: /etc/dovecot/var/run/dovecot/login login_executable: /etc/dovecot/libexec/dovecot/imap-login login_user: dovecot_login mail_privileged_group: mail mail_uid: 507 mail_gid: 507 mail_location: mbox:/home/%u/mail:INBOX=/home/spool/mail/%u mail_plugins: expire quota imap_quota trash auth default: mechanisms: plain login debug: yes passdb: driver: passwd-file args: /etc/dovecot/etc/passwd.dovecot socket: type: listen master: path: /etc/dovecot/var/run/dovecot/auth-master mode: 384 user: mail plugin: quota: dict:user::proxy::quotadict quota_rule: *:storage=5G:messages=2000 quota_rule2: Trash:storage=1G:messages=1000 trash: /etc/dovecot/etc/dovecot-trash.conf expire: Trash 7 Spam 7 INBOX 180 Sent 180 auth_socket_path: /etc/dovecot/var/run/dovecot/auth-master expire_dict: proxy::expire dict: quotadict: mysql:/etc/dovecot/etc/dovecot-dict-quota.conf expire: mysql:/etc/dovecot/etc/dovecot-dict-expire.conf Best regards michael

2 3

[Dovecot] Shared mailboxes support status
by Thomas Hummel 26 Jan '09

26 Jan '09

Hello Timo, I'm running dovecot-1.1.8 and I'm about to play with namespaces and shared mailboxes. I've read on the list that the Kolab people did contribute to that, and I read at http://dovecot.org/doc/NEWS-1.2 "+ Full support for shared mailboxes and IMAP ACL extension." I'd like to know the differences between shared mailboxes support between 1.1. and 1.2 branches and if it may be considered "safe" to use shared mailboxes on a production server running 1.1.8+ dovecot version (i.e. is it working and how, compared to the upcoming 1.2 release). I guess part of the answer is in the diffences between shared and public namespaces handling. Thanks -- Thomas Hummel | Institut Pasteur <hummel(a)pasteur.fr> | Pôle informatique - systèmes et réseau

3 3