- dovecot - dovecot.org

[Dovecot] Maildir locking by LDA of dovecot
by Mike Grozak 25 May '08

25 May '08

Hi all! First of all, I want ti thank the whole Dovecot community (developers for developing and fast responses, users for populating and responses too). Dovecot is a really good and fast IMAP server - it serves near 3000 in our installation. Now I have a problem and request community's help its resolving;) Dovecot version: 1.0.13, compiled with vpopmail support. I have an account spam(a)domain.com (:-), in which we put all our spam (we gather statistic later). There can be 10 and more delivery attempts in a second to maildir of this account during the spam attacks on our server. The queue of our server can grow up to 20k messages, and all of these messages are sent to spam(a)domain.com. I found a lot of such strings in dovecot.log file during such DoS attack: dovecot.log:deliver(spam@domain.com): May 16 04:18:48 Info: msgid=<01c8b6da$a8bacf80$b7af2abe@sale>: save failed to INBOX: Timeout while waiting for lock dovecot.log:deliver(spam@domain.com): May 16 04:18:59 Info: msgid=<6611811842.20080516012444(a)poiusadfhnvxzmdiasdasgkhlsdkfg.com>: save failed to INBOX: Timeout while waiting for lock dovecot.log:deliver(spam@domain.com): May 16 04:20:06 Info: msgid=<01c8b6a8$7b552e00$a0a4034c@sale>: save failed to INBOX: Timeout while waiting for lock dovecot.log:deliver(spam@domain.com): May 16 04:20:14 Info: msgid=<360825920.32055246029506(a)mirgames.ru>: save failed to INBOX: Timeout while waiting for lock dovecot.log:deliver(spam@domain.com): May 16 04:20:50 Info: msgid=<01c8b6b1$0df9cb00$cc36dfc9@tek2>: save failed to INBOX: Timeout while waiting for lock dovecot.log:deliver(spam@domain.com): May 16 04:21:00 Info: msgid=<087901c7ca2d$ef272640$1e01a8c0(a)telefonia.InterCable.net>: save failed to INBOX: Timeout while waiting for lock dovecot.log:deliver(spam@domain.com): May 16 04:21:01 Info: msgid=<000701c8b6d2$01ff999f$c491aca7@snoueiij>: save failed to INBOX: Timeout while waiting for lock dovecot.log:deliver(spam@domain.com): May 16 04:22:32 Info: msgid=<000801c8b69b$060c0230$3cd8a4b7@cpbvlrx>: save failed to INBOX: Timeout while waiting for lock dovecot.log:deliver(spam@domain.com): May 16 04:22:45 Info: msgid=<000801c8b6a5$04ba6412$9910848d@aldldr>: save failed to INBOX: Timeout while waiting for lock dovecot.log:deliver(spam@domain.com): May 16 04:22:45 Info: msgid=<031401c772e2$adc5be40$1e01a8c0(a)mtu-net.ru>: save failed to INBOX: Timeout while waiting for lock dovecot.log:deliver(spam@domain.com): May 16 04:23:08 Info: msgid=<01c8b6db$0222fe80$b7af2abe@info>: save failed to INBOX: Timeout while waiting for lock What can I do for resolving this locks? The queue of my server becomes really big! May be, while looking into uidlist file, can dovecot LDA lock it? And other deliver processes can't open it and wait for him? $ dovecot --version 1.0.13 # dovecot -n # 1.0.13: /etc/dovecot.conf log_path: /var/log/dovecot.log protocols: imap pop3 ssl_disable: yes login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login login_greeting: Server is ready. login_process_per_connection: no login_greeting_capability(default): yes login_greeting_capability(imap): yes login_greeting_capability(pop3): no login_max_connections: 1024 first_valid_uid: 39 last_valid_uid: 39 first_valid_gid: 39 last_valid_gid: 39 fsync_disable: yes maildir_copy_with_hardlinks: yes mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugins(default): quota imap_quota mail_plugins(imap): quota imap_quota mail_plugins(pop3): quota mail_plugin_dir(default): /usr/lib/dovecot/imap mail_plugin_dir(imap): /usr/lib/dovecot/imap mail_plugin_dir(pop3): /usr/lib/dovecot/pop3 auth default: mechanisms: plain login cram-md5 default_realm: tversu.ru cache_size: 10240 user: vpopmail username_format: %Lu passdb: driver: vpopmail args: cache_key=%u dovecot userdb: driver: vpopmail socket: type: listen client: path: /var/spool/postfix/private/auth mode: 438 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 438 plugin: quota: maildir:ignore=Trash --------------------------- WBR, Mike Grozak, TvSU IC

3 4

[Dovecot] Multiple private namespace question
by Troy Engel 24 May '08

24 May '08

(apologies if this has been covered, can't find it on the Wiki/FAQ, etc.) We have a stellar, fantastic, hard working Dovecot 1.0.5 (yes, I need to upgrade) installation running in Courier-IMAP compatibility mode: mail_location = maildir:~/Maildir:INDEX=/var/spool/dovecot/indexes/%1u/%u namespace private { separator = . prefix = INBOX. inbox = yes } A user purchased a Windows Mobile 6 device which is ignoring the namespace (it's the device's bug for sure, other people report it on forums around the 'net) and there's no way on this device to manually set the Prefix; so, his Sent mails are never making it back to the server when replying from the device because of the missing INBOX. issue. Can I add a second hidden namespace with no prefix: namespace private { separator = . prefix = hidden = yes } ...to fix his problem, but without adversely affecting anyone else? The issue that has given me pause is this comment in the config file: "Default namespace is simply done by having a namespace with empty prefix." ..but then there's also: "If namespace is hidden, it's not advertised to clients via NAMESPACE extension or shown in LIST replies." I'm not sure what exactly will happen by adding a hidden namespace with no prefix after an advertised namespace with a prefix; this is a live server, so mucking up the works with a bad config is not an option. :) Anyone have a clue if this is valid/good/correct and Dovecot will play nicely? Many thanks, -te -- Troy Engel | Systems Engineer Fluid, Inc | http://www.fluid.com

3 8

[Dovecot] Problem compiling antispam plugin with Dovecot 1.1
by Juan Asensio Sánchez 24 May '08

24 May '08

Hi I am trying to compile antispam plugin with Dovecot 1.1, but i get an error when running make install: pdc-server:~/tmp/dovecot-antispam# make cc -c -DHAVE_CONFIG_H -Wall -I/root/tmp/dovecot-1.1.rc5/ -I/root/tmp/dovecot-1.1.rc5/src/ -I/root/tmp/dovecot-1.1.rc5/src/lib/ -I/root/tmp/dovecot-1.1.rc5/src/lib-storage/ -I/root/tmp/dovecot-1.1.rc5/src/lib-mail/ -I/root/tmp/dovecot-1.1.rc5/src/lib-imap/ -I/root/tmp/dovecot-1.1.rc5/src/lib-dict/ -I/root/tmp/dovecot-1.1.rc5/src/lib-index/ -I/root/tmp/dovecot-1.1.rc5/src/imap/ -DCONFIG_DEBUG -DDEBUG_SYSLOG -DCONFIG_DEBUG_VERBOSE -DCONFIG_DOVECOT_11 "-Dmempool_unref(x)=pool_unref(x)" -fPIC -shared -Wall -Wextra -DPLUGINNAME=antispam -o debug.o.o debug.c cc -DHAVE_CONFIG_H -Wall -I/root/tmp/dovecot-1.1.rc5/ -I/root/tmp/dovecot-1.1.rc5/src/ -I/root/tmp/dovecot-1.1.rc5/src/lib/ -I/root/tmp/dovecot-1.1.rc5/src/lib-storage/ -I/root/tmp/dovecot-1.1.rc5/src/lib-mail/ -I/root/tmp/dovecot-1.1.rc5/src/lib-imap/ -I/root/tmp/dovecot-1.1.rc5/src/lib-dict/ -I/root/tmp/dovecot-1.1.rc5/src/lib-index/ -I/root/tmp/dovecot-1.1.rc5/src/imap/ -DCONFIG_DEBUG -DDEBUG_SYSLOG -DCONFIG_DEBUG_VERBOSE -DCONFIG_DOVECOT_11 "-Dmempool_unref(x)=pool_unref(x)" -fPIC -shared -Wall -Wextra -DPLUGINNAME=antispam antispam-storage-1.1.c -o antispam-storage-1.1 cc -o .o cc: no input files make: *** [.o] Error 1 When running make clean to try to compile again, a file called "antispam-storage-1.1.c" (without any extension) is not deleted, and this file was not before running make install. If I run again make install with that file present (after running make clean), i get this output: cc -c -DHAVE_CONFIG_H -Wall -I/root/tmp/dovecot-1.1.rc5/ -I/root/tmp/dovecot-1.1.rc5/src/ -I/root/tmp/dovecot-1.1.rc5/src/lib/ -I/root/tmp/dovecot-1.1.rc5/src/lib-storage/ -I/root/tmp/dovecot-1.1.rc5/src/lib-mail/ -I/root/tmp/dovecot-1.1.rc5/src/lib-imap/ -I/root/tmp/dovecot-1.1.rc5/src/lib-dict/ -I/root/tmp/dovecot-1.1.rc5/src/lib-index/ -I/root/tmp/dovecot-1.1.rc5/src/imap/ -DCONFIG_DEBUG -DDEBUG_SYSLOG -DCONFIG_DEBUG_VERBOSE -DCONFIG_DOVECOT_11 "-Dmempool_unref(x)=pool_unref(x)" -fPIC -shared -Wall -Wextra -DPLUGINNAME=antispam -o debug.o debug.c cc -o .o cc: no input files make: *** [.o] Error 1 If I run make clean and manually deleted that file before running make install, i get again the first output. Why am i getting this error? Regards.

1 0

[Dovecot] I've moved
by Timo Sirainen 24 May '08

24 May '08

I've moved again. If you need to know my new address, whois imapwiki.org (dovecot.org address is still lagging behind). My living costs also increased some because of this, but hopefully I'll get enough money from Dovecot coding to pay for it. :) I'll try to get back to replying mails within the next few days.

2 2

[Dovecot] Disallow folder delete
by Kenneth Porter 24 May '08

24 May '08

Is there a straightforward way to disallow the deletion of all IMAP mailboxes? I have a user who's deleted an important IMAP mailbox and I'm now recovering a recent copy from the backup. But I'd rather just blanket disallow all folder deletions. The user is using Thunderbird and this has happened more than once so I suspect Tbird is willing to let a folder get deleted too easily. Perhaps there was a delay in the confirmation dialog and the user clicked ahead and confirmed something he shouldn't have. I'm looking at <http://wiki.dovecot.org/ACL> and it looks like I should be able to use a group override to disallow "x" (mailbox delete) but the page says that groups aren't implemented, so I don't know how one says that nobody can do this for any mailbox. I'm using 1.2.rc15 from CentOS 5 (RHEL5 equivalent).

7 16

[Dovecot] Don't Understand Error Entry
by Carlos Williams 24 May '08

24 May '08

I am using dovecot-0.99.11-8.EL4 on my system and decided to check the logs since I just took over as the administrator on this system and I noticed the same error entry over and over in the logs. I went to /var/log/dovecot.err and see: imap(rangry): May 22 13:33:31 Error: Error parsing IMAP envelope: "Thu, 20 Apr 2006 10:10:01 -0400" "Re: Hi there I have a question" (("Rodney Angry" NIL "rodney.s.angry" "example.com")) (("Rodney Angry" NIL "rodney.s.angry" " example.com")) ((NIL NIL "rodney.s.angry" "example.com")) (("Gryder, Connie" NIL "CONSTANCE.L.GRYDER" "example.com")) NIL NIL "< DD3761B99DC88F4284EDE00D608383C65DF16C(a)0088-its-exmp01.us.example.com>" NIL I don't understand what this error message means and why its flooding my logs. I do know the that the name in parenthesis on line one is a user on my email server. <rangry> is a user on my domain with a valid email account but I can't tell if the problem is coming from example.com or originating from <rangry>. Anyone happen to know what is causing this? I don't know if you guys need my config here so I don't want to flood this message. If this makes sense to anyone, please let me know what I can do to resolve this or keep this from flooding my email server. Thanks!

4 5

[Dovecot] log contents questions?
by Knute Johnson 24 May '08

24 May '08

I switched from using Pegasus and POP3 to Thunderbird and IMAP for my email. Now I get a lot of "Corrupted index cache file" errors in my log. Dovecot is running under Fedora 8 and is version 1.0.13-6.fc8. The Thunderbird is version 2.0.0.14 running under Windows XP. My wife's Blackberry is also using IMAP and not reporting any errors. Any ideas what the problem is or how to fix it? Thanks, knute... --------------------- Dovecot Begin ------------------------ Dovecot disconnects: Inactivity: 2 Time(s) Logged out: 2606 Time(s) in IDLE: 27 Time(s) **Unmatched Entries** dovecot: IMAP(knute): Connection closed: 5 Time(s) dovecot: IMAP(knute): Corrupted index cache file /home/knute/mail/.imap/CR-FFL/dovecot.index.cache: invalid record size: 3 Time(s) dovecot: IMAP(knute): Corrupted index cache file /home/knute/mail/.imap/INBOX/dovecot.index.cache: invalid record size: 2 Time(s) dovecot: IMAP(knute): Corrupted index cache file /home/knute/mail/.imap/frazmtn.com/dovecot.index.cache: invalid record size: 4 Time(s) dovecot: IMAP(linux): Connection closed: 4 Time(s) dovecot: IMAP(linux): Corrupted index cache file /home/linux/mail/.imap/Dovecot/dovecot.index.cache: invalid record size: 2 Time(s) dovecot: IMAP(linux): Corrupted index cache file /home/linux/mail/.imap/Fedora List/dovecot.index.cache: invalid record size: 4 Time(s) dovecot: IMAP(linux): Corrupted index cache file /home/linux/mail/.imap/Fedora Selinux List/dovecot.index.cache: invalid record size: 1 Time(s) dovecot: IMAP(linux): Corrupted index cache file /home/linux/mail/.imap/Fedora Test List/dovecot.index.cache: invalid record size: 2 Time(s) ---------------------- Dovecot End ------------------------- -- Knute Johnson linux(a)www.knutejohnson.com

2 4

[Dovecot] procmail --> deliver question
by Ben Budts 23 May '08

23 May '08

Hi there, I use dovecot-1.1-rc4, got imap, imaps, pop3 & pop3s working fine with the mbox format. I use sendmail-8.14.2 as an MTA, sendmail uses procmail as an LDA. I migrated to maildir format now, and pipe all my mail to deliver right now to be able to make use of the indexing etc... Problem is I run into some errors : #My .procmailrc PATH=/usr/bin:/usr/local/bin:/usr/sbin SHELL="/bin/bash" SENDMAIL="sendmail -oi -t" DELIVER="/opt/dovecot/libexec/dovecot/deliver" LOGFILE="$HOME/procmail.log" #/dev/null VERBOSE=on LOGABSTRACT = "all" #DEFAULT="$HOME/Maildir/" #MAILDIR="$HOME/Maildir/" :0 w | $DELIVER ##### My procmail.log : procmail: [12743] Wed May 21 13:43:38 2008 procmail: Assigning "LOGABSTRACT=all" procmail: Executing "/opt/dovecot/libexec/dovecot/deliver" Fatal: destination user parameter (-d user) not given procmail: Error while writing to "/opt/dovecot/libexec/dovecot/deliver" procmail: Program failure (64) of "/opt/dovecot/libexec/dovecot/deliver" procmail: Assigning "LASTFOLDER=/opt/dovecot/libexec/dovecot/deliver" procmail: Locking "/var/spool/mail/kris.lock" procmail: Assigning "LASTFOLDER=/var/spool/mail/kris" procmail: Opening "/var/spool/mail/kris" ####" It's not working out and he falls back to delivering his mail to /var/spool/mail/%u Could you guys point me out in the right direction please ? Another question about the logging with deliver... I've put the following in my deliver.conf : deliver.conf in the lda section : log_path = /var/log/dovecot/deliver.log info_log_path = /var/log/dovecot-deliver.log root@blaat:/home/kris# ls -la /var/log/dovecot/ total 232 drwxrwxrwx 2 root root 4096 2008-05-20 10:44 . drwxr-xr-x 11 root root 4096 2008-05-19 10:08 .. -rw-rw-rw- 1 root root 0 2008-05-20 10:44 deliver.log But it's not logging at all... Also tried the syslog alternative, no logging either. Also put set user or group ID on execution (s) on the deliver binary : -rwsr-sr-x 1 root root 693300 2008-05-19 09:38 /opt/dovecot/libexec/dovecot/deliver thx a lot Benjamin

2 1

[Dovecot] dovecot-sieve on freebsd
by Lazar Szilard 22 May '08

22 May '08

Hi,I need some help. I use dovecot and dovecot-sieve on a freebsd 7.0-release. everything worked fine without dovecot sieve. I want to deliver amavisd spam marked messages to the 'spam' folder of the user. the system uses virtual environment with multiple domains (and users).all want is a global sieve, to all users, all domains.I googled, but I cannot find the problem,my protocol lda section:protocol lda {    log_path = /usr/local/vmail/dovecot-deliver.log    sieve_global_dir = /usr/local/vmail/globalsieverc    mail_plugins = cmusieve    mail_debug = yes    log_path = /var/log/dovecot-deliver    info_log_path = /var/log/dovecot-deliver     postmaster_address = postmaster(a)tamann.hu    mail_plugin_dir = /usr/local/lib/dovecot/lda    sendmail_path = /usr/sbin/sendmail}globalsieverc:require "fileinto";if header :contains "X-Spam-Flag" "YES" {        fileinto "Spam";        stop;}thank you for your help,and sorry for my bad english.t

1 0

[Dovecot] auth_socket_path permissiones
by Adrián Ribao Martínez 22 May '08

22 May '08

Hello, I'm using dovecot 1.0 under debian etch. The lda socket path is set to: auth_socket_path = /var/spool/postfix/private/auth But this gives me the error: net_connect(/var/spool/postfix/private/auth) failed: Permission denied I suppose deliver is run as dovecot user. I read about running deliver as root with the suid bit set. I'm not quite sure if this is a good solution. Is there any other way. In the wiki says: "Most MTAs won't let you run deliver as root, so for now you'll need to make it setuid root. However deliver isn't designed to be run as setuid-root" My MTA is postfix, does someone know if postfix let me run deliver as root? If not, should I go to the setuid option? Thank you. -- Adrián Ribao Martínez

3 3