- dovecot - dovecot.org

Dovecot not listening when testing connection
by Alvaro Lacerda 20 Apr '17

20 Apr '17

Hi, This is my environment: SMTP: Exim 4.89 with Mailscanner 5.0.3 IMAP: Dovecot 2.2.10 At the moment I'm just trying to test out my Dovecot to check if it's listening on port 993. *netstat -tuln:* Shows that my machine is listening on ports 143 and 993. *telnet localhost 993: *This is my issue, I get the following message: # telnet localhost 993 Trying ::1... Connected to localhost. Escape character is '^]'. Connection closed by foreign host. According to the wiki.dovecot test installation page I should be getting this instead: https://wiki.dovecot.org/TestInstallation Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE STARTTLS AUTH=PLAIN] Dovecot ready. When I run doveconf this is what I get: # doveconf protocols listen protocols = imap pop3 lmtp listen = *, :: Does anyone have an idea of what I'm missing here? Thanks. -- The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of this information by persons or entities other than the intended recipient is prohibited. If you receive this in error, please contact the sender and delete this material from any computer. Cantella does not permit execution of trades requested by email. Please call to ensure prompt execution of orders, as we are not responsible for orders transmitted through email. Investing involves risk and you may incur a profit or a loss. Please carefully consider investment objectives, risks, charges, and expenses before investing. Cantella & Co., Inc. does not provide legal or tax advice. For legal or tax advice, please seek the services of a qualified professional. The performance data featured represents past performance, which is no guarantee of future results. Mutual funds and UITs are sold by prospectus only. Please carefully consider the fund's investment objective, risks, charges and expenses applicable to a continued investment in the fund before investing. For this and other information, call or write for a free prospectus, or view one online. Read it carefully before you invest or send money. Fixed income is subject to availability and change in price. Bonds are subject to market and interest rate risk if sold prior to maturity. Interest rate increases can cause the price of a debt security to decrease. Interest income may be subject to federal, state, local, and/or alternative minimum tax. In accordance with industry regulations, all messages are retained and are subject to monitoring. This message has been scanned for viruses and dangerous content and is believed to be clean. Securities offered through Cantella & Co., Inc., Member FINRA/SIPC. Home Office: 28 State St 40th Floor, Boston, MA 02109 Telephone: (800)652-8358

3 8

Using filter in an imapsieve script?
by Tobi 20 Apr '17

20 Apr '17

Hello list I currently have an issue with an imapsieve script on my dovecot server CentOS Linux release 7.3.1611 (Core) Dovecot 2.2.26.0 (23d1de6) Pigeonhole 2.2.26.0 The goal is to "fire" an imapsieve script upon mailclient saves message to sent folder I setup the following in 90-plugin.conf: plugin { sieve_plugins = sieve_imapsieve sieve_extprograms sieve_extensions = +vnd.dovecot.filter +vnd.dovecot.pipe +vnd.dovecot.execute sieve_filter_bin_dir = /etc/dovecot/sieve-filters sieve_pipe_bin_dir = /etc/dovecot/sieve-filters sieve_execute_bin_dir = /etc/dovecot/sieve-filters sieve_filter_exec_timeout = 10000 sieve_pipe_exec_timeout = 10000 sieve_execute_exec_timeout = 10000 imapsieve_mailbox1_name = Sent imapsieve_mailbox1_causes = COPY APPEND imapsieve_mailbox1_before = file:/home/vmail/domain/user/dovecot-crypt-sent.sieve } and the content of the sieve script is: require ["environment", "vnd.dovecot.filter", "variables", "imapsieve", "vnd.dovecot.pipe", "vnd.dovecot.execute"]; if anyof (environment :is "imap.cause" "APPEND", environment :is "imap.cause" "COPY") { filter "gpgit" "myuser(a)mydomain.tld"; } gpgit is a perl script that encrypts a given message using the users pub key and returns back the encrypted message As a sieve script for lmtp/lda it works fine and encrypted messages show up in the mailbox. But it does not work if it is used as imap sieve script There is nothing in the logs that indicates a problem with the imap sieve script. Is it possible that 'filter' is not supported for imapsieve as it changes the content of a message? Thanks for any hint tobi

2 6

RSA key not found
by Michael Segel 20 Apr '17

20 Apr '17

I’ve got a couple of issues with a new mail server set up… I’m getting the following error: warning: cannot get RSA certificate from file /etc/pki/dovecot/certs/<mycert>.pem: disabling TLS support The problem is that <mycert>.pem isn’t an RSA ticket, but a X509 certificate. The RSA ticket is in /etc/pki/dovecot/private directory. I checked both files and they are good certificates. I’m using webmin to manage my server. In webmin, the TLS certificate file is the X509 and the private key is the RSA file. So why does Postfix check the certificate link for the RSA file and not the X509? Thx -Mike

2 1

Adding secure POP3?
by ＠lbutlr 20 Apr '17

20 Apr '17

I have a working server that only allows connections over secure IMAP (port 993) and secured submission (587). However, I have one account that has been forwarding mail to gmail for many years and that is getting to be more and more of a problem as more large sites enforce DMARC. So, the only way that gmail will pull mail is via pop3, so I need to add pop3 access. 1) How do I add a secure (TLS) POP3 service to dovecot 2) can I restrict access to that to specific users? Domains? OT, but someone probably knows, is secured POP3 going to work with gmail? ===BEGIN passdb { driver = pam } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocols = imap service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } } service imap-login { inet_listener imaps { port = 993 ssl = yes } } ===END I did read <https://wiki.dovecot.org/SSL/DovecotConfiguration> but it’s about adding ssl to an existing setup. -- Apple broke AppleScripting signatures in Mail.app, so no random signatures.

3 5

help
by Bhushan Bhosale 20 Apr '17

20 Apr '17

Dear Team I have faced issue with email downloading in the email client by using pop3 SSL port 995 in dovecot v2.1.17 for outlook client 2016 on production environment. As per my troubleshooting on my test environment, I have upgraded dovecot version v2.2.28, and changed paramer "ssl_dh_parameters_length = 2048" and "verbose_ssl = yes", The issue seems to be resolved in dovecot v2.2.28. What can i do to resolve this issue in dovecot v2.1.17 in Production environment? Kindly help. Thanks a lot in advance. Regards, Bhushan Bhosale

4 3

my domain in both my destination and virtual_mailbox_domains?
by Michael Segel 20 Apr '17

20 Apr '17

I’m doing a new dovecot mail server for my domain. Here’s yet another thing I mucked up. I wanted to set up virtual mailboxes. One reason was that I wanted to set up virtual users for the domain so I don’t need to create user accounts just mail accounts. I followed one of the many examples / tutorials out there and I end up with the following warning message. postfix/trivial-rewrite[8818]: warning: do not list domain <machine>.<domain>.com in BOTH mydestination and virtual_mailbox_domains I checked my configuration, I don’t see where I’ve set up anything for mydestination in postfix. I’m trying to work thru the log file issues that I can find… this is just one more. To add to the confusion, I’m using webmin as my server admin UI to make life easier… yet it seems to much things up a bit Any suggestions? Thx -Mike

4 3

[Configuration question] Shared Folders: sql dict - missing information
by dovecot＠avv.solutions 19 Apr '17

19 Apr '17

Hello Community, I have implemented shared folders/acl using the 'file' driver sucessfully. Now, I want to move the shared folders information to my sql DB where I have moved all user/nets/quota information. I have read carefully the documentation (https://wiki.dovecot.org/SharedMailboxes/Shared) but, as far as I can see, only the $to and $from (+ dummy) are handled in the DB? I was expecting the same granularity (per folder + explicit rights) than found using the actual solution. Did I miss something? Or how should I implement this? (Running version 2.2.13) Than you already for your help and feedback. Cheers, A

2 1

Extension record update for invalid uid=
by Luca Bertoncello 18 Apr '17

18 Apr '17

Hi list yesterday I got many of these errors: Error: Log synchronization error at seq=832,offset=2348 for indexes/.INBOX/dovecot.index: Extension record update for invalid uid=29175 But just for __ONE__ user. I couldn't find any misconfiguration for this user, it's just all other... Can someone say what it happens and how can I fix it? Thanks Luca Bertoncello (lucabert(a)lucabert.de)

1 0

v2.2.29.1 released
by Timo Sirainen 17 Apr '17

17 Apr '17

https://dovecot.org/releases/2.2/dovecot-2.2.29.1.tar.gz https://dovecot.org/releases/2.2/dovecot-2.2.29.1.tar.gz.sig Mainly because I had missed one cherry-pick from the release, which caused unit tests to also fail. And I didn't notice that, because make distcheck had been broken for some years now when it ran clang static analyzer, although I had assumed it would have run make check already before it failed.. On a related note, we're looking for a test engineer :) http://avoimettyopaikat.monster.fi/v2/job/View?JobID=182881783 - imapc reconnection fix was forgotten from 2.2.29 release, which also made "make check" fail in a unit test - dict-sql: Merging multiple UPDATEs to a single statement wasn't actually working. - Fixed building with vpopmail

5 5

Re: several misc questions, public folders and sharing, quota, ssl
by Aki Tuomi 16 Apr '17

16 Apr '17

Please keep responses on the list. Thank you. =) Without ACL plugin there is no way to restrict access, it's free for all. my site is a very tiny few user site, but ... auth_mechanisms = login plain mail_attribute_dict = file:%h/Mail/dovecot-attributes mail_location = sdbox:~/Mail mail_plugins = stats quota fts fts_lucene namespace inbox { inbox = yes list = yes location = mailbox Drafts { special_use = \Drafts } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Spam { auto = subscribe special_use = \Junk } mailbox Trash { special_use = \Trash } prefix = separator = . subscriptions = yes type = private } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { fts = lucene fts_lucene = whitespace_chars=@. imapsieve_mailbox1_before = file:/usr/lib/dovecot/sieve/report-spam.sieve imapsieve_mailbox1_causes = COPY imapsieve_mailbox1_name = Spam imapsieve_mailbox2_before = file:/usr/lib/dovecot/sieve/report-ham.sieve imapsieve_mailbox2_causes = COPY imapsieve_mailbox2_from = Spam imapsieve_mailbox2_name = * quota = count:User quota quota_vsizes = yes recipient_delimiter = + sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_extensions = +notify +imapflags sieve_global_extensions = +vnd.dovecot.pipe +vnd.dovecot.execute sieve_pipe_bin_dir = /usr/lib/dovecot/sieve sieve_plugins = sieve_imapsieve sieve_extprograms stats_refresh = 30 } protocols = imap lmtp service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } user = $default_internal_user } service doveadm { inet_listener http { address = 127.0.0.1 port = 38080 } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } } service lmtp { inet_listener lmtp { address = 127.0.0.1 port = 8025 } } service stats { fifo_listener stats-mail { mode = 0666 } } ssl = required ssl_cert = # ssl_cipher_list = ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES128-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES256-GCM-SHA384:AES256-SHA256:AES256-SHA:AES128-SHA ssl_dh_parameters_length = 4096 ssl_key = # ssl_prefer_server_ciphers = yes ssl_protocols = !SSLv2 !SSLv3 submission_host = 127.0.0.1:25 userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol imap { mail_plugins = stats quota fts fts_lucene imap_stats imap_sieve } protocol lmtp { mail_plugins = stats quota fts fts_lucene sieve } protocol lda { mail_plugins = stats quota fts fts_lucene sieve } Aki > On April 14, 2017 at 7:21 PM David Mehler <dave.mehler(a)gmail.com> wrote: > > > Hello Aki, > > Thank you for your reply. > > I've implemented your changes and thanks for the @STRENGTH reminder, I > had forgotten about that one. > > I'll check out the acl plugin. Is it required when sharing a public > folder or are public folders usable by all? I know it is for shared > folders. > > The TestFolder1 is still not showing up in public not sure why > everything looks good. > > My configuration was migrated from 2.0 to 2.1 then 2.2, various ports > along the way. > > I was wondering if I could take a look at your dovecot configuration > files and a doveconf -n output? > > Thanks. > Dave. > > > On 4/14/17, Aki Tuomi <aki.tuomi(a)dovecot.fi> wrote: > > > >> On April 14, 2017 at 3:04 AM David Mehler <dave.mehler(a)gmail.com> wrote: > >> > >> > >> Hello, > >> > >> I'm running dovecot 2.29 on a freebsd 10.3 system. I'm wanting to > >> optimize how the system is running and have a few misc questions. > >> > >> First ssl, is my cipher list good? I'm trying for pfs and wanting to > >> ensure these cipherlist is appropriate: > >> > >> ssl_cipher_list = EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH > >> > > > > I would add @STRENGTH to the end, so it'll get sorted by strengthness. > > > >> Next, a new feature that I'm trying for is virtual folders that store > >> All messages. My understanding of this is that it stores a version of > >> every received message in one place? I've got the virtual plugin > >> loaded and have: > >> > >> mailbox virtual/All { > >> comment = All my messages > >> special_use = \All > >> } > >> > >> I've got a directory /home/vmail/example.com/username/virtual under > >> which is an ALL folder both directories are accessible to the vmail > >> user, yet there's no contents in this folder and it's showing up > >> nowhere. > >> > > > > Configuring virtual all folder: > > > > namespace { > > prefix = virtual > > location = virtual:/etc/dovecot/virtual:INDEX=%h/virtual > > comment = All my messages > > special_use = \All > > mailbox All { > > auto = subscribe > > } > > } > > > > ==== /etc/dovecot/virtual/All/dovecot-virtual ==== > > * > > all > > ==== EOF === > > > >> Next, quota warnings, are not being sent at all. I set up a testuser > >> with a quota of 2 mb, then sent a message to that user getting the box > >> to 95% full, and no message. Took the user overquota with the next > >> message, still nothing, and a third message did trigger my custom > >> quota exceeded message and the message was bounced. > >> > > > > I would recommend you using > > > > mail_plugins = $mail_plugins quota quota_clone > > > > plugin { > > quota = count:User quota > > quota_clone_dict = proxy::sqlquota > > quota_vsizes = true > > } > > > > Also, > > > > "Note that the warning is ONLY executed at the exact time when the limit is > > being crossed, so when you're testing it you have to do it by crossing the > > limit by saving a new mail. If something else besides Dovecot updates quota > > so that the limit is crossed, the warning is never executed." > > > >> I'm wanting to implement public folders. My mailboxes are all > >> virtual, and they are stored under /home/vmail/example.com/username > >> and /home/vmail/example.org/username in the maildir format. I've got > >> one user uid and gid of 999 name of vmail who owns all the mailboxes. > >> I've separated out public folders storing them under > >> /home/vmail/public. I've created one mailbox called TestFolder and > >> new, cur, and tmp directories under it. This is what it looks like: > > > > <snip /> > > > >> The public/TestFolder is showing up fine and I can switch to it. The > >> public/TestFolder1 is not showing up at all so I'm not seeing it and > >> can't switch to it. Any ideas? > >> > > > > Not sure why it's not showing up, *but*, you could add :INDEXPVT=%h/public > > to the folder, to keep per-user indexes separate. > > > >> My second question involves public folders and domain sharing. Are > >> public folders accessible to all users and all domains? I've got two > >> domains example.com and example.org i'd like to create a folder that > >> some users in example.com can share with some users in example.org, > >> not necessarily all users in those domains should be able to see the > >> folders. > >> > > > > Dovecot does not, as per such, care about your domains. It cares about user > > names. If you want to do this kind of thing, please consult ACL plugin. > > https://wiki2.dovecot.org/ACL > > > >> Ideas welcome. > >> > >> Thanks. > >> Dave. > >> > > > > Some other comments, if you are using SSL, you can drop cram-md5 as auth > > mech, it's not storage-safe. > > > > you should use mail_location = maildir:~/maildir:LAYOUT=fs > > > > to avoid your other things in user's home being interprepted as mail > > directories. > > > > why are you setting these? > > maildir_broken_filename_sizes = yes > > maildir_empty_new = yes > > maildir_very_dirty_syncs = yes > > > > and in general I see lots of overconfiguring, dovecot defaults are usually > > right, and setting various things just for the fun of it, can cause > > problems. > > > > Aki > >

3 3