- dovecot - dovecot.org

[Dovecot] limiting the per-time connections from one single IP address
by suomi 28 Jul '08

28 Jul '08

Hi every we had a havy pop3 attach yesterday morning: about 400'000 connects in three hours from one single IP address within wandadoo.fr. the easiest way, to protect the dovecot server against such attacks would be to limit the number of connections anyone can open from one single IP address to the server in a certain time. this feature is available in newer versions of postfix, where i have limited the number of SMTP connections possible from one single IP address in one minute to three (3). i checked to see in the dovecot-wiki, but found only the #login_max_processes_count = 128 #login_max_connections = 256 which both do not contain neither a per-time constraint nor a per-IP-address constraint. is this already possible with current versions of deovecot? the dovecot -n: # 1.0.14: /etc/dovecot.conf ssl_cert_file: /etc/pki/ldap/mirador.cert.pem ssl_key_file: /etc/pki/ldap/mirador.key.pem login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login first_valid_uid: 51 mail_location: maildir:%h/%m mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/lib/dovecot/imap mail_plugin_dir(imap): /usr/lib/dovecot/imap mail_plugin_dir(pop3): /usr/lib/dovecot/pop3 auth default: passdb: driver: ldap args: /etc/openldap/dovecot.conf userdb: driver: ldap args: /etc/openldap/dovecot.conf thank you very much for any valid hint. suomi

3 2

[Dovecot] Strange checkpassword issue
by Andy Dills 28 Jul '08

28 Jul '08

I'm helping a friend setup a small mailserver using dovecot, and I'm finding a strange problem with checkpasswd that I haven't had on my servers. How is the following debug output even possible? Jul 25 12:12:20 company2 dovecot: auth(default): master out: USER 5 joe home=/var/mail/joe.com/joe/Maildir/ uid=1005 gid=1005 Jul 25 12:12:20 company2 dovecot: pop3-login: Login: user=<joe>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Jul 25 12:12:20 company2 dovecot: POP3(joe): open(/var/mail/joe) failed: Permission denied (euid=1005 egid=1005) I don't see how, when it's clearly getting the correct home directory from checkpassword, that it would then try the default mail directory. (mail_location is commented out, version 1.1.1) Here's the entire auth clause: auth default { mechanisms = plain login passdb checkpassword { args = /usr/local/sbin/checkpassword } userdb prefetch { } user = mailman # 1005,1005 socket listen { master { mode = 0666 } client { path = /var/run/dovecot/auth mode = 0660 user = postfix group = postfix } } } Any suggestions? I'm probably just missing something obvious, not having messed with setting this up for 6 months. Thanks, Andy --- Andy Dills Xecunet, Inc. www.xecu.net 301-682-9972 ---

2 2

[Dovecot] Error - Dovecot Permission denied
by kbajwa 28 Jul '08

28 Jul '08

CentOS 5.2 Postfix 2.3.3 (Came Packed with CentOS) Dovecot 1.1.1 Dovecot-Sieve 1.1.5 Did a complete new fresh install. When I send a message to: test(a)wildpeacockstudios.com, I get two error messages as listed in the /var/log/maillog: (1) (lost connection with mail.tibonline.net[12.179.81.11] while receiving the initial server greeting) (2) status=bounced (local configuration error. Command output: Fatal: open(/etc/dovecot.conf) failed: Permission denied ) Attached are copies of (a) Postfix, (b) Dovecot, (c) Dovecot-Sieve in '/home/test/' and (d) /var/log/maillog ---------------------- [root@www ~]# postconf -n alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases broken_sasl_auth_clients = yes command_directory = /usr/sbin config_directory = /etc/postfix daemon_directory = /usr/libexec/postfix debug_peer_level = 2 home_mailbox = Maildir/ html_directory = no inet_interfaces = all mail_owner = postfix mailbox_command = /usr/libexec/dovecot/deliver mailq_path = /usr/bin/mailq.postfix manpage_directory = /usr/share/man mydestination = $myhostname, localhost.$mydomain, localhost, $mydomain mydomain = wildpeacockstudios.com myhostname = mail.wildpeacockstudios.com mynetworks = 127.0.0.0/8 myorigin = $mydomain newaliases_path = /usr/bin/newaliases.postfix queue_directory = /var/spool/postfix readme_directory = /usr/share/doc/postfix-2.3.3/README_FILES relay_domains = relayhost = sample_directory = /usr/share/doc/postfix-2.3.3/samples sendmail_path = /usr/sbin/sendmail.postfix setgid_group = postdrop smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination smtpd_sasl_auth_enable = yes smtpd_sasl_path = private/auth smtpd_sasl_type = dovecot unknown_local_recipient_reject_code = 550 [root@www ~]# [root@www ~]# ---------------------- [root@www ~]# dovecot -n # 1.1.2: /etc/dovecot.conf login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login mail_location: maildir:~/Maildir mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/lib/dovecot/imap mail_plugin_dir(imap): /usr/lib/dovecot/imap mail_plugin_dir(pop3): /usr/lib/dovecot/pop3 imap_client_workarounds(default): delay-newmail outlook-idle netscape-eoh imap_client_workarounds(imap): delay-newmail outlook-idle netscape-eoh imap_client_workarounds(pop3): pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh auth default: mechanisms: plain login passdb: driver: pam userdb: driver: passwd socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix [root@www ~]# ---------------------- /home/test/.dovecot-sieve require ["fileinto", "vacation"]; # Move spam to spam folder if exists "X-Spam-Flag" { fileinto "spam"; # Stop here so that we do not reply on spams stop; } vacation # Reply at most once a day to a same sender :days 1 :subject "Out of office reply" # List of recipient addresses which are included in the auto replying. # If a mail's recipient is not on this list, no vacation reply is sent for it. :addresses ["test(a)wildpeacockstudios.com"] "I'm out of office, please contact Joan Doe instead. Best regards John Doe"; ---------------------- /var/log/maillog Jul 26 09:39:28 www dovecot: Dovecot v1.1.2 starting up Jul 26 09:39:29 www postfix/postfix-script: starting the Postfix mail system Jul 26 09:39:29 www postfix/master[4963]: daemon started -- version 2.3.3, configuration /etc/postfix Jul 26 09:39:29 www postfix/qmgr[4969]: 6EBA241C0007: from=<test(a)wildpeacockstudios.com>, size=722, nrcpt=1 (queue active) Jul 26 09:39:31 www postfix/smtp[4996]: 6EBA241C0007: to=<kbajwa(a)tibonline.net>, relay=mail.tibonline.net[12.179.81.11]:25, delay=1011, delays=1009/0.15/2.3/0, dsn=4.4.2, status=deferred (lost connection with mail.tibonline.net[12.179.81.11] while receiving the initial server greeting) Jul 26 09:41:07 www dovecot: pop3-login: Login: user=<test>, method=PLAIN, rip=192.168.0.64, lip=65.103.190.107 Jul 26 09:41:08 www dovecot: POP3(test): Disconnected: Logged out top=0/0, retr=0/0, del=0/0, size=0 Jul 26 09:41:17 www postfix/smtpd[5583]: connect from unknown[192.168.0.64] Jul 26 09:41:17 www postfix/smtpd[5583]: D7F3F41C001C: client=unknown[192.168.0.64], sasl_method=PLAIN, sasl_username=kirtib Jul 26 09:41:17 www postfix/cleanup[5587]: D7F3F41C001C: message-id=<488B459C.90600(a)wildpeacockstudios.com> Jul 26 09:41:17 www postfix/qmgr[4969]: D7F3F41C001C: from=<test(a)wildpeacockstudios.com>, size=720, nrcpt=1 (queue active) Jul 26 09:41:17 www postfix/smtpd[5583]: disconnect from unknown[192.168.0.64] Jul 26 09:41:18 www postfix/smtp[5588]: D7F3F41C001C: to=<kbajwa(a)tibonline.net>, relay=mail.tibonline.net[12.179.81.11]:25, delay=0.43, delays=0.06/0.01/0.37/0, dsn=4.4.2, status=deferred (lost connection with mail.tibonline.net[12.179.81.11] while receiving the initial server greeting) Jul 26 09:42:05 www postfix/smtpd[5583]: connect from mail.spaceportusa.net[12.179.81.11] Jul 26 09:42:05 www postfix/smtpd[5583]: 8675D41C0028: client=mail.spaceportusa.net[12.179.81.11] Jul 26 09:42:06 www postfix/cleanup[5587]: 8675D41C0028: message-id=<87B5712FBA1548208A9A393D2D28A036@Sunshine> Jul 26 09:42:06 www postfix/qmgr[4969]: 8675D41C0028: from=<kbajwa(a)tibonline.net>, size=880, nrcpt=1 (queue active) Jul 26 09:42:06 www postfix/smtpd[5583]: disconnect from mail.spaceportusa.net[12.179.81.11] Jul 26 09:42:06 www postfix/local[5596]: 8675D41C0028: to=<test(a)wildpeacockstudios.com>, relay=local, delay=1, delays=0.72/0.26/0/0.07, dsn=5.3.5, status=bounced (local configuration error. Command output: Fatal: open(/etc/dovecot.conf) failed: Permission denied ) Jul 26 09:42:06 www postfix/cleanup[5587]: 6C2DA41C002A: message-id=<20080726154206.6C2DA41C002A(a)mail.wildpeacockstudios.com> Jul 26 09:42:06 www postfix/qmgr[4969]: 6C2DA41C002A: from=<>, size=2882, nrcpt=1 (queue active) Jul 26 09:42:06 www postfix/bounce[5598]: 8675D41C0028: sender non-delivery notification: 6C2DA41C002A Jul 26 09:42:06 www postfix/qmgr[4969]: 8675D41C0028: removed Jul 26 09:42:06 www postfix/smtp[5588]: 6C2DA41C002A: to=<kbajwa(a)tibonline.net>, relay=mail.tibonline.net[12.179.81.11]:25, delay=0.37, delays=0/0/0.37/0, dsn=4.4.2, status=deferred (lost connection with mail.tibonline.net[12.179.81.11] while receiving the initial server greeting) --------------------------------- Help in fixing these errors is highly appreciated. FYI: New to Postfix & Dovecot. Thanks. Kirti

5 8

[Dovecot] Sieve Notify Error
by Leroy Philippe 28 Jul '08

28 Jul '08

Hello, I'm using dovecot 1.1.1 and dovecot-sieve-1.1.5 . I'm very interested in the notify plugin, I've tried many code which have generated some errors (coding errors that have been arrived in the .dovecot.sieve.err) but these errors are fixed. But Notify is still not working, I've the following in mail.log :deliver(webmaster@xxx.net): SIEVE ERROR: Unknown [unimplemented] notify method mailto:phxxx@xxp.comhere is my .dovecot.sieve :require ["fileinto", "notify"];# Move spam to spam folderif exists "X-Spam-Flag" { fileinto "spam"; # Stop here so that we do not reply on spams stop;}notify :method "mailto:phxxx@xxp.com":message "Vous avez recu un message sur votre adresse"; # Don't send any further notifications stop;What's wrong? I've tried example from http://www.ietf.org/internet-drafts/draft-ietf-sieve-notify-12.txt but they are not working.Thanks for helpPhilippe _________________________________________________________________ Invite your mail contacts to join your friends list with Windows Live Spaces. It's easy! http://spaces.live.com/spacesapi.aspx?wx_action=create&wx_url=/friends.aspx…

3 2

Re: [Dovecot] Sieve Notify Error
by Anders Melchiorsen 28 Jul '08

28 Jul '08

Leroy Philippe wrote: > notify > :method "mailto:phxxx@xxp.com" > :message "Vous avez recu un message sur votre adresse"; This seems to work: notify :method "mailto" :options "phxxx(a)example.com" :message "Vous avez recu un message sur votre adresse"; Cheers, Anders.

1 0

[Dovecot] odd pam_authenticate() failed: authentication error followed by successful imap-login
by Sahil Tandon 28 Jul '08

28 Jul '08

I am seeing the following errors in my log: Jul 27 18:14:23 aegis dovecot: auth-worker(default_with_listener): pam(user(a)host.org,74.72.46.170): pam_authenticate() failed: authentication error Jul 27 18:14:23 aegis dovecot: imap-login: Login: user=<user(a)host.org>, method=PLAIN, rip=74.72.46.170, lip=206.251.255.39, TLS This happens *only* for virtual users; local UNIX users authenticate without that first error. However, all users are able to view mail, but that default_with_listener (which I setup just so Postfix could use dovecot to authenticate SASL senders) error only occurs for virtual users. Why is default_with_listener getting involved when users are trying to connect to dovecot directly without any involvement of Postfix? Non-default configuration parameters below; thanks for any hints. # dovecot -n # 1.1.1: /usr/local/etc/dovecot.conf listen: 127.0.0.1:143 ssl_listen: *:993 login_dir: /var/run/dovecot/login login_executable: /usr/local/libexec/dovecot/imap-login verbose_proctitle: yes first_valid_gid: 0 mail_privileged_group: mail mail_location: maildir:~/Maildir imap_client_workarounds: delay-newmail outlook-idle netscape-eoh tb-extra-mailbox-sep auth default_with_listener: mechanisms: plain login digest-md5 passdb: driver: pam passdb: driver: passwd-file args: /usr/local/etc/dovecot/passwd userdb: driver: passwd userdb: driver: passwd-file args: /usr/local/etc/dovecot/users socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix auth default: mechanisms: plain digest-md5 passdb: driver: passwd-file args: /usr/local/etc/dovecot/passwd passdb: driver: pam userdb: driver: passwd-file args: /usr/local/etc/dovecot/users userdb: driver: passwd -- Sahil Tandon <sahil(a)tandon.net>

1 1

[Dovecot] dovecot.sieve file location?
by kbajwa 28 Jul '08

28 Jul '08

CentOS 5.2 Postfix-2.3.3 Dovecot-1.1.1 Dovecot.Sieve-1.1.5 I have setup with: home_mailbox = Maildir/ (/etc/postfix/main.cf) & mail-location = maildir:~/Maildir (/etc/dovecot.conf) I have created a 'test' user to test Sieve 'Vacation' setup. My questions are: 1. Which folder '.dovecot.sieve' script is copied into? Is it 'home/test' -or- 'home/test/Maildir' or someplace else? 2. '.dovecot.sieve' script parameter ":days 1" means that the reply is sent once a day. Is it possible to send the reply 'immediately'? Kirti

1 0

Re: [Dovecot] Error - Dovecot Permission denied
by Sahil Tandon 27 Jul '08

27 Jul '08

kbajwa <kbajwa(a)tibonline.net> wrote: > I have posted the permissions on another post. However, when I look at > "properties" & then "permissions" for 'dovecot.conf' file, following are the > 'permissions' listed: > > Owner: dovecot > Access: Read & Write > > Group: Mail > Access: Read-Only > > Others > Access: none This is the problem. The mailbox_command runs neither as the dovecot user nor with the mail GID. You need to give others access to read the file. # chmod o+r /etc/dovecot.conf > > Execute: [] Allow executing file as program > SELinux Context: file_t > > I hope it makes sense to you, it does not to me. > > Let me know if the above need some change. [...] -- Sahil Tandon <sahil(a)tandon.net>

2 1

[Dovecot] mail extra field to override default mail_location for only certain users
by Sahil Tandon 27 Jul '08

27 Jul '08

I am running version 1.1.1 with mail_location: maildir:~/Maildir. This is working great as all our users have UNIX accounts with nologin shells. New domains (and their users) are about to come online and we would like to migrate to a setup with virtual mailboxes/users. From the wiki and comments within dovecot.conf, I see it is possible to do this piecemeal so both local and virtual users can co-exist during the transition. My question is how to keep things working as they are for existing users/domains (which will be migrated later), and use the virtual mailboxes (and thus, a different mail_location) exclusively for the new users. I understand that multiple userdbs and passdbs can be specified, and this will take care of authentication. On http://wiki.dovecot.org/VirtualUsers#homedirs it is stated that "The userdb can return the mail extra field to override the default mail_location setting. Usually you shouldn't need this." Where is this mail extra field defined? In the userdb passwd-file or somewhere within dovecot.conf? If the former, would something like this suffice (mind the wrapping): user@domain.org::5000:5000::/home/vhosts/domain.org/:/usr/sbin/nologin::mail=m aildir:/home/vhosts/%d/%n Thanks, -- Sahil Tandon <sahil(a)tandon.net>

1 1

[Dovecot] trace shows imap proceses stuck listing folders
by Ryan Rawdon 27 Jul '08

27 Jul '08

I just moved my mail setup from one machine to a new one. After doing so, I've encountered a problem where imap processes will start accumulating, stuck in a loop eating loads of IO. Below is a trace

1 0