- dovecot - dovecot.org

Re: "client_id" in lua script
by Michael Slusarz 25 Oct '24

25 Oct '24

> On 10/25/2024 9:47 AM MDT ecdlguy--- via dovecot <dovecot(a)dovecot.org> wrote: > > Hi, > > I'm trying to block specific MUAs, like e.g. Outlook-App for iOS and Android or Xiaomi Mail / MiMail using a lua script. > While implementing this, I noticed that "client_id" is always nil in the lua script or I am doing something wrong. > This is part of the postfix config: A note that this is explicitly not a supported IMAP ID use-case. Per https://www.rfc-editor.org/rfc/rfc2971.html#section-3: Servers MUST NOT deny access to or refuse service for a client based on information from the ID command. Clients MUST NOT refuse to operate or limit their operation with a server based on the ID response. Client blocking is much better handled via other mechanisms, that may incorporate ID information as a part of the decision making process but does not make a determinative decision based on that string. michael

1 0

"client_id" in lua script
by ecdlguy＠gmail.com 25 Oct '24

25 Oct '24

Hi, I'm trying to block specific MUAs, like e.g. Outlook-App for iOS and Android or Xiaomi Mail / MiMail using a lua script. While implementing this, I noticed that "client_id" is always nil in the lua script or I am doing something wrong. This is part of the postfix config: imap_id_retain = yes imap_id_log = * passdb { driver = lua args = file=/etc/dovecot/lua/badimapid.lua blocking=yes } Logging (imap_id_log = *) works, the dovecot log has entries like: imap(user@domain)<226><pWFZx9siRt+CUwMp>: ID sent: name=Thunderbird, version=115.15.0 Here is the content of the lua-script file: function auth_passdb_lookup(req) req.log_info('badimapid info: user="'..req.user..'", client_id="'..req.client_id..'"') return dovecot.auth.PASSDB_RESULT_NEXT, "" end function script_init() return 0 end function script_deinit() end In principle, "req.client_id" should contain the client id string according to https://doc.dovecot.org/2.3/configuration_manual/authentication/lua_based_a… However, dovecot log reads: auth-worker(163): Error: conn unix:auth-worker (pid=162,uid=401): auth-worker<27>: lua(user@domain): db-lua: lua_pcall(auth_passdb_lookup, 1, 2) failed: /etc/dovecot/lua/badimapid.lua:2: attempt to concatenate a nil value (field 'client_id') Why is client_id nil? Thanks, Thorsten

1 0

BUG: logging bug creeped back in pop3-login
by Laura Steynes 25 Oct '24

25 Oct '24

Oct 20 14:23:29 pop3-login: Info: Disconnected: Disconnected: Too many bad commands (no auth attempts in 0 secs): use....... Double logging of Disconnected

2 2

fixing sieve (?)
by Stefan G. Weichinger 24 Oct '24

24 Oct '24

Yesterday I was told that at a customer the vacation scripts don't work anymore. Looking closer it seems the whole sieve-funtionality is missing (eg. filtering mails into folders). I am in the process of analysing, and don't have a clue yet. Editing scripts via managesieved works (for example from roundcube). The scripts are in the right place, afai understand. I compare this with another setup where things work and don't see the difference. All this worked perfectly until maybe summer. This is Debian 12.7 bookworm, the dovecot repo still points to bullseye. # cat /etc/apt/sources.list.d/dovecot.list deb [arch=amd64 signed-by=/usr/share/keyrings/dovecot.gpg] https://repo.dovecot.org/ce-2.3-latest/debian/bullseye bullseye main There is rspamd in place with postfix if that is somehow relevant. The installation is on premise and has maybe 60-100 mailboxes in now 2 domains. That was the largest change this year: add a so-called "alias domain" in postfixadmin: mailbox(a)new.domain points to mailbox(a)old.domain I assume the sieve scripts should simply be executed as before. The basics of mailing etc work fine! I'd appreciate any pointers. trying to enable debug logs etc, for example I don't get anything into "sieve_user_log" --- # 2.3.21.1 (d492236fa0): /etc/dovecot/dovecot.conf # Pigeonhole version 0.5.21.1 (49005e73) # OS: Linux 6.1.0-26-amd64 x86_64 Debian 12.7 # Hostname: mail2.my.tld auth_cache_size = 4 M default_process_limit = 300 listen = * mail_home = /mnt/mailboxes/%d/%u mail_location = maildir:~ mail_plugins = " notify quota acl" managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext imapflags imapsieve vnd.dovecot.imapsieve namespace { inbox = yes location = prefix = separator = / type = private } namespace { location = maildir:/home/vmail/oeffentlich prefix = Oeffentlich/ separator = / subscriptions = yes type = public } passdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } plugin { acl = vfile:/etc/dovecot/dovecot-acl:cache_secs=300 acl_shared_dict = file:/var/lib/dovecot/shared-mailboxes imapsieve_mailbox1_before = file:/etc/dovecot/sieve/global/learn-spam.sieve imapsieve_mailbox1_causes = COPY imapsieve_mailbox1_name = Spam imapsieve_mailbox2_before = file:/etc/dovecot/sieve/global/learn-ham.sieve imapsieve_mailbox2_causes = COPY imapsieve_mailbox2_from = Spam imapsieve_mailbox2_name = * sieve = /home/vmail/%d/%u/sieve/.dovecot.sieve sieve_before = /etc/dovecot/sieve/global/spam-global.sieve sieve_dir = /home/vmail/%d/%u/sieve/scripts/ sieve_extensions = +imapflags sieve_global_extensions = +vnd.dovecot.pipe sieve_pipe_bin_dir = /usr/bin sieve_plugins = sieve_imapsieve sieve_extprograms sieve_trace_dir = /tmp/sieve_trace/ sieve_trace_level = commands sieve_user_log = /home/vmail/%d/%u/sieve/sieve_user.log } protocols = imap sieve lmtp service auth { client_limit = 1200 unix_listener auth-client { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { mode = 0777 } user = root } service imap-login { process_min_avail = 10 } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0660 user = postfix } user = vmail } service managesieve-login { inet_listener sieve { port = 4190 } } ssl = required ssl_ca = </etc/letsencrypt/pfsense/cloud_imap_mail_smtp_LE_cert.ca ssl_cert = </etc/letsencrypt/pfsense/cloud_imap_mail_smtp_LE_cert.fullchain ssl_cipher_list = ALL:HIGH:!SSLv2:!MEDIUM:!LOW:!EXP:!RC4:!MD5:!aNULL:@STRENGTH ssl_key = # hidden, use -P to show it ssl_key_password = # hidden, use -P to show it userdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } protocol lmtp { mail_debug = yes mail_plugins = sieve postmaster_address = logs(a)my.tld } protocol imap { mail_max_userip_connections = 20 mail_plugins = " notify quota acl imap_sieve imap_acl" } protocol sieve { managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave imapflags }

4 14

Issue with logrotate and dovecot
by jim＠themailshack.com 24 Oct '24

24 Oct '24

Something new here has cropped up, no changes to configs for some time. I've had my dovecot using the default /var/log/dovecot.log location for logging, logrotate used to back this up weekly and logging would continue using this same file. Now when logrotate runs, it correctly backs up the log but then creates a new dovecot.log-yyyymmdd file and dovecot starts logging to that. I'm at a loss as to why this is happening. My postfix and other processes are still using their correct log files, so it seems related only to dovecot. From dovecot/conf.d/10-logging.conf: # Log file to use for error messages. "syslog" logs to syslog, # /dev/stderr logs to stderr. #log_path = syslog log_path = /var/log/dovecot.log From /etc/logrotate.d/dovecot /var/log/dovecot.log { weekly rotate 4 missingok notifempty compress delaycompress sharedscripts postrotate doveadm log reopen endscript } Looks like something happened mid last month but other than periodic software updates nothing has changed for a while here. If I reboot the system, dovecot resumes logging to /var/log/dovecot.log, but as soon as logrotate runs (I did a --force to test) it logs to the new file again. Hoping this may sound familiar to someone on the list.

1 1

Struggling to get sieve running
by nick＠howitts.co.uk 23 Oct '24

23 Oct '24

Hi, I am new to Dovecot and Debian, but I seem to have got Dovecot up and running with local delivery and then switched to LMTP. I am running Debian 12.7 and Webmin 2.202 to try and get things running, but I've had to tweak files. Also Webmin did not install dovecot-lmtpd, dovecot-sieve or dovecot-managesieved, so I did that manually. I have tried following the configuration guide from Dovecot (but there seems to be little there) and other sources I've found on the internet, but there is nothing I have found to get sieve listening on port 4190 when checked with ss. My Dovecot config from `dovecot -n` is: ``` # 2.3.19.1 (9b53102964): /etc/dovecot/dovecot.conf # Pigeonhole version 0.5.19 (4eae2f79) # OS: Linux 6.1.0-26-amd64 x86_64 Debian 12.7 # Hostname: my.fqdn auth_username_format = %Ln disable_plaintext_auth = no first_valid_uid = 1000 mail_location = maildir:~/Maildir mail_privileged_group = mail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } plugin { sieve = file:~/sieve;active=~/.dovecot.sieve } protocols = imap lmtp service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } service managesieve-login { inet_listener sieve { port = 4190 } } ssl_cert = </etc/letsencrypt/live/mydomain.com/fullchain.pem ssl_client_ca_dir = /etc/ssl/certs ssl_dh = # hidden, use -P to show it ssl_key = # hidden, use -P to show it userdb { driver = passwd } protocol lmtp { mail_plugins = " sieve" postmaster_address = nick(a)mydomain.com } protocol lda { mail_plugins = " sieve" } ``` Dovecot packages installed from the Debian repos are: ``` dovecot-core/stable,stable-security,now 1:2.3.19.1+dfsg1-2.1+deb12u1 amd64 [installed] dovecot-imapd/stable,stable-security,now 1:2.3.19.1+dfsg1-2.1+deb12u1 amd64 [installed] dovecot-lmtpd/stable,stable-security,now 1:2.3.19.1+dfsg1-2.1+deb12u1 amd64 [installed] dovecot-managesieved/stable,stable-security,now 1:2.3.19.1+dfsg1-2.1+deb12u1 amd64 [installed] dovecot-pop3d/stable,stable-security,now 1:2.3.19.1+dfsg1-2.1+deb12u1 amd64 [installed] dovecot-sieve/stable,stable-security,now 1:2.3.19.1+dfsg1-2.1+deb12u1 amd64 [installed] ``` Ultimately I intend to run manage sieve from Roundcube which I have already got running, or I may try a Thunderbird addon. Can anyone give me some pointers, please?

3 2

Missing IMAP folders after upgrading from 2.3.17 to 2.3.21.1
by Frank Kirschner 23 Oct '24

23 Oct '24

Hi, I have upgraded from 2.3.17 to 2.3.21.1. mail_location = maildir Now in some mailboxes are IMAP folder in subdir of INBOX missing. When I do a 'ls -la' in filesystem, I see the subfolder like other folder with identical owner an permissions. But when I do doveadm mailbox list -u [user] the IMAP folder is not displayed. So I have deleted all files in /opt/dovecot/[hash]/[user] because I use INDEX=/opt/dovecot/%2.256Nu/%u:ITERINDEX The restart dovecot and re-login the Imap client. All IMAP folders are rebuilt but the same folders like before are still missing. Any ideas please? thanks, Frank doveconf -n # 2.3.21.1 (d492236fa0): /etc/dovecot/dovecot.conf # Pigeonhole version 0.5.21.1 (49005e73) # OS: Linux 5.15.149-1-pve x86_64 AlmaLinux release 8.10 (Cerulean Leopard) # Hostname: *** auth_verbose = yes disable_plaintext_auth = no doveadm_password = # hidden, use -P to show it first_valid_uid = 1000 imap_id_send = lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes lmtp_save_to_detail_mailbox = yes log_path = /var/log/dovecot.log login_greeting = IMAP ready. mail_fsync = always mail_full_filesystem_access = yes mail_gid = 1000 mail_home = /srv/mail/mail_storage2/%d/%n mail_location = maildir:~/mail:VOLATILEDIR=/dev/shm/dovecot/%2.256Nu/%u:INDEX=/opt/dovecot/%2.256Nu/%u:ITERINDEX mail_plugins = " notify replication" mail_privileged_group = vpostfix mail_uid = 1000 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext vacation-seconds mbox_write_locks = fcntl mmap_disable = yes namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Spam { auto = subscribe special_use = \Junk } mailbox Trash { special_use = \Trash } prefix = } passdb { args = scheme=CRYPT username_format=%u /etc/dovecot/users driver = passwd-file } plugin { recipient_delimiter = + replication_full_sync_interval = 1 hour sieve = file:~/sieve;active=~/.dovecot.sieve sieve_before = /etc/dovecot/spam-global.sieve sieve_extensions = +vacation-seconds sieve_vacation_default_period = 1d sieve_vacation_max_period = 30d sieve_vacation_min_period = 0 sieve_vacation_use_original_recipient = yes } postmaster_address = ***** protocols = imap pop3 lmtp sieve service aggregator { fifo_listener replication-notify-fifo { mode = 0666 user = vpostfix } unix_listener replication-notify { mode = 0666 user = vpostfix } } service auth { inet_listener { address = 192.168.130.192 port = 3659 } unix_listener /var/spool/postfix/private/auth { group = vpostfix mode = 0666 user = vpostfix } unix_listener auth-userdb { group = vpostfix mode = 0600 user = vpostfix } } service config { unix_listener config { user = vpostfix } } service doveadm { inet_listener { port = 4711 } user = vpostfix } service imap-login { process_min_avail = 1 service_count = 1 } service lmtp { inet_listener lmtp { address = 192.168.130.192 port = 24 } } service managesieve-login { inet_listener sieve { port = 4190 } } service replicator { process_min_avail = 1 unix_listener replicator-doveadm { mode = 0666 user = vpostfix } } ssl_alt_cert = </etc/alt/fullchain.pem ssl_alt_key = # hidden, use -P to show it ssl_cert = </etc/fullchain.pem ssl_cipher_list = PROFILE=SYSTEM ssl_dh = # hidden, use -P to show it ssl_key = # hidden, use -P to show it userdb { args = username_format=%u /etc/dovecot/users driver = passwd-file } protocol lmtp { mail_plugins = " notify replication sieve" } protocol lda { mail_plugins = " notify replication sieve" } protocol imap { mail_max_userip_connections = 10 mail_plugins = " notify replication quota imap_quota" }

3 5

disable sieve header
by Marc 22 Oct '24

22 Oct '24

Is it possible to disable emitting the sieve header? X-Sieve: Pigeonhole Sieve

1 0

Uppercase username emails are rejected
by lua8ds＠proton.me 20 Oct '24

20 Oct '24

When a sender writes my email address with my username uppercase, e.g. USERNAME(a)name.com, in the to: field of their MUA, my mail server rejects that email. /var/log/mail.log prints: <USERNAME(a)redacted.com>: host mail.redacted.com[private/dovecot-lmtp] said: 550 5.1.1 > <USERNAME(a)redacted.com> User doesn't exist: USERNAME(a)redacted.com (in reply to RCPT TO > command) In the manual, I found that: auth_username_format Default: %Lu Formatting applied to username before querying the auth database. You can use the standard variables here. Examples: %Lu Lowercases the username [...] My current setting was not the default; I had: auth_username_format = %n So I updated that setting to: auth_username_format = %Lu expecting that %Lu would lowercase the username - and that my problem would be fixed. It does not though. Updating this setting not only prompts my email server to still reject USERNAME(a)redacted.com, but now also rejects (lowercase username) username(a)redacted.com (which my server had no issue receiving beforehand). So I reverted auth_username_format to: auth_username_format = %n Emails sent to username(a)redacted.com land in my mailbox again - but emails sent to USERNAME(a)redacted.com still don't. What can I try to troubleshoot? Which config file shall I share with you?

10 22

vsz_limit status
by Joan Moreau 19 Oct '24

19 Oct '24

Hi How to get (programatically, c++) the current usage of memory, under the limit of vsz_limit ? https://doc.dovecot.org/2.3/configuration_manual/service_configuration/#ser… Thank you

2 15