- dovecot - dovecot.org

[Dovecot] dovecot 2.2.9 - ssl_cert and ssl_key ignored
by Alexandru Bostina 11 May '14

11 May '14

Hello, It seems that Dovecot ignores the new /ssl_cert and ssl_key /settings. Using them in the dovecot configuration results in the error: Fatal: Couldn't parse private ssl_key: error:0906D06C:PEM routines:PEM_read_bio:no start line: Expecting: ANY PRIVATE KEY] Using the old /ssl_//cert//_file/ and /ssl_key_file/ results in their being obsolete warning but no fatal error.

3 4

[Dovecot] Only part of sieve script works
by Sebastian Schlingmann 10 May '14

10 May '14

Hi, I am using Dovecot 2.2.11 with Pigeonhole on Arch Linux. I have a partly working sieve script (pasted to the end of this mail) which sorts mail into various imap folders. The first, third and fourth if blocks work just fine. The second and fifth block do not sort any mails. However, if I apply the script with sieve-test to mails the second and fifth block seem to work. How is the manual check with sieve-test different from the sieve filtering during mail delivery? I am thankful for any hints. Sebastian this is the sieve script I am talking about require "fileinto"; # Musik wegsortieren if anyof ( header :comparator "i;ascii-casemap" :contains "Subject" "Mixing.DJ", header :comparator "i;ascii-casemap" :contains "Subject" "John B", header :comparator "i;ascii-casemap" :contains "Subject" "FLOSS Weekly", header :comparator "i;ascii-casemap" :contains "Subject" "BrainStuff", header :comparator "i;ascii-casemap" :contains "Subject" "Nerdy Show", header :comparator "i;ascii-casemap" :contains "Subject" ["My Brother", " My Brother And Me"], header :comparator "i;ascii-casemap" :contains "Subject" "MoJoMenace", header :comparator "i;ascii-casemap" :contains "Subject" "GWJ Conference Call", header :comparator "i;ascii-casemap" :contains "Subject" "Welcome to Night Vale", header :comparator "i;ascii-casemap" :contains "Subject" "International Waters" ) { fileinto "Feeds.music"; stop; } # Youtube wegsortieren if address :all :comparator "i;ascii-casemap" :contains "From" "noreply(a)youtube.com" { fileinto "Feeds.Youtube"; stop; } # Awesomer wegsortieren if header :comparator "i;octet" :contains "Subject" "[The Awesomer]" { fileinto "Feeds.Awesomer"; stop; } # Feeds sortieren if address :all :comparator "i;octet" :contains "From" "sebi+feedmailer(a)mighty.selfhost.bz" { fileinto "Feeds"; stop; } # AIStA wegsortieren if header :comparator "i;ascii-casemap" :contains "Received" "webmail.awista.net" { fileinto "AIStA"; stop; }

2 1

[Dovecot] Denial of Service attacks against Dovecot v1.1+
by Timo Sirainen 10 May '14

10 May '14

There's an upper limit to how many IMAP/POP3 connections can exist that haven't logged in (and separate limits for post-login). Normally when this limit is reached, the oldest connection gets disconnected. There is of course some potential to try to DoS Dovecot by doing a lot of IMAP/POP3 connections, but because the oldest connection always gets destroyed this requires quite a lot of activity from the attacker. This "destroy oldest connection" however hasn't been working in v1.1+ releases for connections that have started SSL/TLS handshake, but haven't finished it. So an attacker could just do a bunch of TCP connections to port 993 and leave them hanging around and Dovecot would pretty quickly reach the upper limit without being able to disconnect any of the oldest connections. Here are patches to fix this: http://hg.dovecot.org/dovecot-2.2/rev/41622541a7a3 http://hg.dovecot.org/dovecot-2.1/rev/b7ac23b4d339 http://hg.dovecot.org/dovecot-2.0/rev/48f90e7e92dc http://hg.dovecot.org/dovecot-1.2/rev/8ba4253adc9b http://hg.dovecot.org/dovecot-1.1/rev/fe0e6550585c The fix will be in v2.2.13. Maybe also in v2.1.18 if I decide to release it. For older releases you need to patch it yourself. For people who are using dovecot-ee releases the fix is also in v2.2.12.12 and v2.1.7.7 releases.

3 2

[Dovecot] Strange behavior on with "listescape" and "lda_mailbox_autocreate" - double entries
by Patrick De Zordo 09 May '14

09 May '14

Hello Guys, we are using Dovecot since years; all working flawless but one strange behavior: Let me explain.. - we have enabled the "listescape" plugin in "15-lda.conf", "10-mail.conf" and "20-imap.conf". - we use the following default namespace in "10-mail.conf": --------------- 10-mail.conf ----------------------------------------- namespace { type = private prefix = separator = / inbox = yes subscriptions = yes } ---------------------------------------------------------------------------------------- - we use a sieve script that automatically generates folders in the following form (example): ---------------------------------------------------------------------------------------- ".INBOX.2014.05.patrick.incoming" for user "patrick(a)xx.com" ".INBOX.2014.05.patrick.outgoing" for user "patrick(a)xx.com" ".INBOX.2014.05.p\2edezordo.incoming" for user "p.dezordo(a)xx.com" ---------------------------------------------------------------------------------------- This is ok, but the automatically generated "subscriptions"-file of the user contains double lines (the second line is something strange?!); the second one should not be created, its totally wrong..! --------------- subscriptions ----------------------------------------- Trash Sent INBOX.2014.05.patrick.incoming INBOX.2014.05.patrick.outgoing INBOX.2014.05.p\2edezordo.incoming INBOX\2e2014\2e05\2ep\5c2edezordo\2eincoming <----- this line!?!?!? ---------------------------------------------------------------------------------------- Have you any ideas whats going on? Could this be a bug, or misconfiguration? Thanks in advance!! Greeting from Italy! Patrick.

2 6

[Dovecot] Disable IMAP for ONE user only
by SIW 09 May '14

09 May '14

I use MySQL to store my virtual users passwords and I am running the latest version of Dovecot. What I need to do is have one particular user have ONLY access to their email via Roundcube (webmail) and no IMAP/SMTP access. Therefore, how do I disable IMAP/SMTP access for just one user?

8 23

[Dovecot] Lifetime of redirect info stored by Sieve in .dovecot.lda-dupes
by Axel Luttgens 09 May '14

09 May '14

Hello, A quick question. How long are the Message-ID and recipient of forwarded messages (thru the redirect action) kept in .dovecot.lda-dupes? According to the code, it could be 24 hours; am I right? TIA, Axel

2 6

[Dovecot] Migrate from LDA to LMTP
by Davide 09 May '14

09 May '14

Hi to all, i have qmail installed on my system with dot-qmail files format to deliver to mailbox (maildir format with dovecot 2.2.12); currently i use LDA to delivery agent but we would migrate to LMTP is it possible? and if yes someone could bring me to the right direction to implement this? thanks. -- *Davide Marchi* *T*eorema *F*errara *Srl* Via Spronello, 7 - Ferrara - 44121 Tel. *0532783161* Fax. *0532783368* E-m@il: *davide.marchi(a)mail.cgilfe.it* Skype: *davide.marchi73* Web: *http://www.cgilfe.it* *CONFIDENZIALITA'* *Ai sensi del D.Lgs. 196/2003 si precisa che le informazioni contenute in questo messaggio sono riservate ed a uso esclusivo del destinatario/dei destinatari. Qualora il messaggio in parola Le fosse pervenuto per errore, La invitiamo ad eliminarlo senza copiarlo e a non inoltrarlo a terzi, dandocene gentilmente comunicazione.* *Per favore, pensa all'ambiente. Stampa questa email solo se necessario.*

6 9

[Dovecot] imapc with Outlook.com transfers max 22-23 messages per mailbox!?
by Nicholas Riley 08 May '14

08 May '14

Hi, I'm trying to migrate a user from Outlook.com IMAP to Dovecot. I'm using a setup similar to that on http://wiki2.dovecot.org/Migration/Dsync: imapc_host = imap-mail.outlook.com imapc_user = [...](a)hotmail.com imapc_password = [...] imapc_features = rfc822.size fetch-headers mail_prefetch_count = 20 imapc_port = 993 imapc_ssl = imaps imapc_ssl_verify = yes ssl_client_ca_dir = /etc/ssl # this needs fixing on the wiki page Here's how I sync a single mailbox, which should have a few hundred messages in it: % doveadm -D -v -c [...] sync -1 -R -u [...] -m Avalon imapc: Output is at http://sabi.net/temp/sync.txt But every mailbox contains at most 22-23 messages. % for i in Maildir/**/cur; do echo $i $(ls -1 $i | wc -l) done Maildir/Alaska/cur 23 Maildir/Avalon/cur 22 Maildir/Christine Scott/cur 22 Maildir/Cornell/cur 22 Maildir/Coupons/cur 10 Maildir/Deleted/cur 22 [...] I was using 2.2.9 but I also tried with the dovecot-2.2 hg tip and did not see any difference. Is there a rawlog equivalent for imapc? I'm hoping that there is a simple protocol usage change that could let me get entire mailboxes. -- Nicholas Riley <njriley(a)illinois.edu>

3 4

[Dovecot] segfault with shared namespace version > 2.1.16
by Tom Lieuallen 08 May '14

08 May '14

We're currently running 2.1.16. I've been wanting to update to a 2.2.X version, but have been running into problems, even with the latest (2.2.12). I'm not sure at what version this issue appeared, but I believe I've tried 2.2.10, 2.2.11, and now 2.2.12. We have a shared maildir setup. With that configuration in place and with a user in the dovecot-acl file, I can do the following to make it segfault every time. Note if I comment out the shared namespace config, it does not segfault. /private/dovecot/libexec/dovecot/imap -u tom2 * PREAUTH [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDSUBJECT MULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS SPECIAL-USE BINARY MOVE] Logged in as tom2 l list "" * Segmentation fault (core dumped) The /a1 and /a2 mentioned here for shared folders and indexes are both local ext4 file systems. =========== Here is the output of dovecot -n: # 2.2.12: /private/dovecot/etc/dovecot/dovecot.conf # OS: Linux 2.6.32-431.el6.x86_64 x86_64 CentOS release 6.5 (Final) first_valid_uid = 100 listen = * mail_location = mbox:~/mail:INBOX=/var/mail/%u:INDEX=/a2/imap-index/%u mail_plugins = quota acl namespace { hidden = yes inbox = no list = children location = maildir:/a1/dove-shared:INDEX=/a2/imap-index/dove-shared/%u prefix = sharedimap/ separator = / type = shared } namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = / type = private } passdb { args = /private/dovecot/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } passdb { args = scheme=CRYPT username_format=%u /private/dovecot/etc/passwd driver = passwd-file } plugin { acl = vfile quota = fs:INBOX:mount=/a1 quota2 = fs:Home quota:mount=%h } protocols = imap lmtp service imap-login { process_limit = 500 process_min_avail = 16 service_count = 1 } service imap { process_limit = 2048 } ssl_cert = </private/ssl/certs/mail.engr.oregonstate.edu.pem ssl_key = </private/ssl/certs/mail.engr.oregonstate.edu.pem userdb { args = /private/dovecot/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } userdb { args = username_format=%u /private/dovecot/etc/passwd driver = passwd-file } ============== I've got core dumps from it. I assume the gdb examples give a reverse trace of the calls. If more is needed, I can supply. Core was generated by `/private/dovecot/libexec/dovecot/imap -u tom2'. Program terminated with signal 11, Segmentation fault. #0 mailbox_settings_find (user=0x6866c0, vname=0x670800 "sharedimap/support-reports") at mail-storage.c:624 624 { Missing separate debuginfos, use: debuginfo-install glibc-2.12-1.132.el6.x86_64 sssd-client-1.9.2-129.el6.x86_64 (gdb) bt full #0 mailbox_settings_find (user=0x6866c0, vname=0x670800 "sharedimap/support-reports") at mail-storage.c:624 box_set = <value optimized out> ns = <value optimized out> #1 0x00007f1cb0323fd0 in mailbox_list_get_storage (list=0x7fff73b39088, vname=<value optimized out>, storage_r=0x7fff73b39080) at mailbox-list.c:821 set = <value optimized out> #2 0x00007f1cb03164a7 in mail_namespace_find_shared ( namespaces=<value optimized out>, mailbox=0x670800 "sharedimap/support-reports") at mail-namespace.c:651 list = 0x68ea30 storage = 0x0 #3 mail_namespace_find (namespaces=<value optimized out>, mailbox=0x670800 "sharedimap/support-reports") at mail-namespace.c:669 ns = 0x68ad70 __FUNCTION__ = "mail_namespace_find" .... .... thank you Tom Lieuallen Oregon State University

2 3

[Dovecot] Error Panic: file mail-storage.c
by Davide 08 May '14

08 May '14

Hi to all, i have dovecot 2.2.12 compiled from source on debian 6 i find this errors on errorlog ...... 2014-05-08 12:44:21 imap(XXXXXXXXX): Panic: file mail-storage.c: line 2141 (mailbox_copy): assertion failed: (!ctx->unfinished) 2014-05-08 12:44:21 imap(XXXXXXXXX): Error: Raw backtrace: /usr/local/lib/dovecot/libdovecot.so.0(+0x6f47a) [0x7f54671e847a] -> /usr/local/lib/dovecot/libdovecot.so.0(+0x6f4f6) [0x7f54671e84f6] -> /usr/local/lib/dovecot/libdovecot.so.0(i_error+0) [0x7f546719d9ef] -> /usr/local/lib/dovecot/libdovecot-storage.so.0(+0x899f8) [0x7f54674d79f8] -> /usr/local/lib/dovecot/libdovecot-storage.so.0(mailbox_move+0x1d) [0x7f54674d7a2d] -> dovecot/imap() [0x40d797] -> dovecot/imap(command_exec+0x3d) [0x419c0d] -> dovecot/imap() [0x418c00] -> dovecot/imap() [0x418d15] -> dovecot/imap(client_handle_input+0x125) [0x4191a5] -> dovecot/imap(client_input+0x6f) [0x419a5f] -> /usr/local/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x36) [0x7f54671f8fc6] -> /usr/local/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0x95) [0x7f54671fa345] -> /usr/local/lib/dovecot/libdovecot.so.0(io_loop_run+0x38) [0x7f54671f8f38] -> /usr/local/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f54671a2ed3] -> dovecot/imap(main+0x2a7) [0x423907] -> /lib/libc.so.6(__libc_start_main+0xfd) [0x7f5466e35c8d] -> dovecot/imap() [0x40bcc9] 2014-05-08 12:44:21 imap(XXXXXXXXX): Fatal: master: service(imap): child 23777 killed with signal 6 (core dumps disabled) 2014-05-08 12:44:21 imap(XXXXXXXXX): Panic: file mail-storage.c: line 2141 (mailbox_copy): assertion failed: (!ctx->unfinished) 2014-05-08 12:44:21 imap(XXXXXXXXX): Error: Raw backtrace: /usr/local/lib/dovecot/libdovecot.so.0(+0x6f47a) [0x7f31fc2ae47a] -> /usr/local/lib/dovecot/libdovecot.so.0(+0x6f4f6) [0x7f31fc2ae4f6] -> /usr/local/lib/dovecot/libdovecot.so.0(i_error+0) [0x7f31fc2639ef] -> /usr/local/lib/dovecot/libdovecot-storage.so.0(+0x899f8) [0x7f31fc59d9f8] -> /usr/local/lib/dovecot/libdovecot-storage.so.0(mailbox_move+0x1d) [0x7f31fc59da2d] -> dovecot/imap() [0x40d797] -> dovecot/imap(command_exec+0x3d) [0x419c0d] -> dovecot/imap() [0x418c00] -> dovecot/imap() [0x418d15] -> dovecot/imap(client_handle_input+0x125) [0x4191a5] -> dovecot/imap(client_input+0x6f) [0x419a5f] -> /usr/local/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x36) [0x7f31fc2befc6] -> /usr/local/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0x95) [0x7f31fc2c0345] -> /usr/local/lib/dovecot/libdovecot.so.0(io_loop_run+0x38) [0x7f31fc2bef38] -> /usr/local/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f31fc268ed3] -> dovecot/imap(main+0x2a7) [0x423907] -> /lib/libc.so.6(__libc_start_main+0xfd) [0x7f31fbefbc8d] -> dovecot/imap() [0x40bcc9] 2014-05-08 12:44:21 imap(XXXXXXXXX): Fatal: master: service(imap): child 23779 killed with signal 6 (core dumps disabled) ..... Some advice to resolve the problem? -- *Davide Marchi* *T*eorema *F*errara *Srl* Via Spronello, 7 - Ferrara - 44121 Tel. *0532783161* Fax. *0532783368* E-m@il: *davide.marchi(a)mail.cgilfe.it* Skype: *davide.marchi73* Web: *http://www.cgilfe.it* *CONFIDENZIALITA'* *Ai sensi del D.Lgs. 196/2003 si precisa che le informazioni contenute in questo messaggio sono riservate ed a uso esclusivo del destinatario/dei destinatari. Qualora il messaggio in parola Le fosse pervenuto per errore, La invitiamo ad eliminarlo senza copiarlo e a non inoltrarlo a terzi, dandocene gentilmente comunicazione.* *Per favore, pensa all'ambiente. Stampa questa email solo se necessario.*

1 0