- dovecot - dovecot.org

Re: [Dovecot] Dbox group file permissions
by Chris Lasater 28 Oct '13

28 Oct '13

Just in case someone else has the same problem, I had to change the following two variables mail_home = /mnt/home/imapd/%d/%n mail_location = dbox:/mnt/home/imapd/%d/%n to mail_home = /mnt/home/imapd/%d/%n mail_location = dbox:~/ "When mail_location begins with%h or~/, its permissions are copied from the first existing parent directory if it has setgid-bit set. This isn't done when the path contains any other %variables."

1 0

[Dovecot] Blocking certain hostnames/clients
by Charles Marcus 28 Oct '13

28 Oct '13

Hello, As a result of learning of the new 'Intro' App introduced by LinkedIn, and discussing how to block SMTP access to my postfix server from these clients, I'm now interested in doing the same for dovecot. Bottom line desire is to avoid scraping/hijacking email stored on my dovecot server by any client other than a users client. This includes Intro (so, LinkedIn), Blackberry, GMail, Outlook, etc. The boss has expressed the desire to NOT block all email from them, just disallow any of their clients from AUTH'ing (either SMTP or IMAP/POP). I'd be interested if anyone has any kind of database of hostnames/IP blocks of the freemailers out there that support adding 3rd party accounts, especially ones supporting IMAP. Anyway, article raising the concern found here: http://www.bishopfox.com/blog/2013/10/linkedin-intro/ "LinkedIn released a new product today called Intro. They call it ?doing the impossible?, but some might call it ?hijacking email?. Why do we say this? Consider the following: Intro reconfigures your iOS device (e.g. iPhone, iPad) so that all of your emails go through LinkedIn?s servers. You read that right. Once you install the Intro app, all of your emails, both sent and received, are transmitted via LinkedIn?s servers. LinkedIn is forcing all your IMAP and SMTP data through their own servers and then analyzing and scraping your emails for data pertaining to?whatever they feel like." -- Best regards, */Charles/*

3 2

[Dovecot] Which MTA for a personal-use dovecot instance?
by Dan Langille 27 Oct '13

27 Oct '13

I'm planning to deploy a personal dovecot IMAP server (i.e. I am the only user) in a FreeBSD jail. At present, I have IMAP deployed on the same host as one of my mail servers, which is running Postfix. I do like Postfix, but it seems to be a bit overkill for this particular situation. All my incoming MX are provided by Google. They handle the incoming mail and forward to my private MX, and from there the mail for me goes into my ~/Maildir. With the move to IMAP in a jail, I need to get the mail from my private MX into that jail. All mail being sent to that jail will be destined for my ~/Maildir, with some massaging via procmail. Given that I've just started using mail/nullmailer, I was wondering if there was something simple that I could use. I was planning to use postfix, require TLS, lock things down tightly. But I'm open to suggestions for something simple. -- Dan Langille - http://langille.org/

2 2

[Dovecot] fts-solr indexer-worker connects to wrong solr host dovecot-2.2.4
by Richard Platel 26 Oct '13

26 Oct '13

Hello. We're setting up fts solr and want to have the solr server host be set per-user via UserDB. It looks like if a user connects and fts indexes mail, and then another user connects and indexes mail, indexer-worker is connecting to the first user's fts host: User1, hammer(a)rp-auth-test.com connects, does a SEARCH for the first time, indexer-worker gets UserDB settings and correctly indexes mail on ftsvs01: [...] auth-worker(2195): Debug: dict(hammer(a)rp-auth-test.com): lookup shared/userdb/hammer(a)rp-auth-test.com auth-worker(2195): Debug: dict(hammer(a)rp-auth-test.com): result: {"uid":"8","fts":"solr","quota_rule4":"Spam:ignore","_session":"talk15_590ec6d100042","quota_rule3":"Trash:ignore","quota_rule2":"*:messages=2684354","quota_rule":"*:storage=5242880k","mail":"maildir:/mail/mailstore01/215/573/hammer@rp-auth-test.com/:INDEX=/mail/index01/215/573/hammer@rp-auth-test.com/","fts_solr":"debug url=http://ftsvs01:8080/solr/","gid":"8"} auth: Debug: userdb out: USER 1 hammer(a)rp-auth-test.com uid=8 fts=solr quota_rule4=Spam:ignore _session=talk15_590ec6d100042 quota_rule3=Trash:ignore quota_rule2=*:messages=2684354 quota_rule=*:storage=5242880k mail=maildir:/mail/mailstore01/215/573/hammer@rp-auth-test.com/:INDEX=/mail/index01/215/573/hammer@rp-auth-test.com/ fts_solr=debug url=http://ftsvs01:8080/solr/ gid=8 indexer-worker: Debug: auth input: hammer(a)rp-auth-test.com uid=8 fts=solr quota_rule4=Spam:ignore _session=talk15_590ec6d100042 quota_rule3=Trash:ignore quota_rule2=*:messages=2684354 quota_rule=*:storage=5242880k mail=maildir:/mail/mailstore01/215/573/hammer@rp-auth-test.com/:INDEX=/mail/index01/215/573/hammer@rp-auth-test.com/ fts_solr=debug url=http://ftsvs01:8080/solr/ gid=8 indexer-worker: Debug: Added userdb setting: plugin/_session=talk15_590ec6d100042 indexer-worker: Debug: Added userdb setting: plugin/fts=solr indexer-worker: Debug: Added userdb setting: plugin/fts_solr=debug url=http://ftsvs01:8080/solr/ indexer-worker: Debug: Added userdb setting: mail=maildir:/mail/mailstore01/215/573/hammer@rp-auth-test.com/:INDEX=/mail/index01/215/573/ha mmer(a)rp-auth-test.com/ indexer-worker: Debug: Added userdb setting: plugin/quota_rule=*:storage=5242880k indexer-worker: Debug: Added userdb setting: plugin/quota_rule2=*:messages=2684354 indexer-worker: Debug: Added userdb setting: plugin/quota_rule3=Trash:ignore indexer-worker: Debug: Added userdb setting: plugin/quota_rule4=Spam:ignore indexer-worker(hammer(a)rp-auth-test.com): Debug: Effective uid=8, gid=8, home= indexer-worker(hammer(a)rp-auth-test.com): Debug: Namespace inbox: type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes, subscriptions =yes location=maildir:/mail/mailstore01/215/573/hammer@rp-auth-test.com/:INDEX=/mail/index01/215/573/hammer@rp-auth-test.com/ indexer-worker(hammer(a)rp-auth-test.com): Debug: maildir++: root=/mail/mailstore01/215/573/hammer(a)rp-auth-test.com, index=/mail/index01/215/ 573/hammer(a)rp-auth-test.com, indexpvt=, control=, inbox=/mail/mailstore01/215/573/hammer(a)rp-auth-test.com, alt= indexer-worker(hammer(a)rp-auth-test.com): Debug: Ignoring unknown cache field: pop3.order indexer-worker(hammer(a)rp-auth-test.com): Debug: Ignoring unknown cache field: binary.parts indexer-worker(hammer(a)rp-auth-test.com): Warning: Created dotlock file's timestamp is different than current time (1380294685 vs 1380294612 ): /mail/index01/215/573/hammer(a)rp-auth-test.com/.INBOX/dovecot.index.log indexer-worker(hammer(a)rp-auth-test.com): Debug: http-client: request [POST http://ftsvs01:8080/solr/update] Submitted [...] User1 index finishes and imap searches against ftsvs01 [...] imap(hammer(a)rp-auth-test.com): Debug: http-client: request [GET http://ftsvs01:8080/solr/select?fl=uid,score&rows=2&sort=uid+asc&q=(hdr:%22…] Submitted [...] User2 grant(a)rp-auth-test.com connects and does a SEARCH, index worker gets gets UserDB settings, including fts host ftsvs02, but connects to ftsvs01 (also note index-worker initially shows wrong user in loglines) [...] auth-worker(2195): Debug: dict(grant(a)rp-auth-test.com): lookup shared/userdb/grant(a)rp-auth-test.com auth-worker(2195): Debug: dict(grant(a)rp-auth-test.com): result: {"uid":"8","fts":"solr","quota_rule4":"Spam:ignore","_session":"cow80_609fed7600001","quota_rule3":"Trash:ignore","quota_rule2":"*:messages=2684354","quota_rule":"*:storage=5242880k","mail":"maildir:/mail/mailstore01/812/023/grant@rp-auth-test.com/:INDEX=/mail/index01/812/023/grant@rp-auth-test.com/","fts_solr":"debug url=http://ftsvs02:8080/solr/","gid":"8"} auth: Debug: userdb out: USER 2 grant(a)rp-auth-test.com uid=8 fts=solr quota_rule4=Spam:ignore _session=cow80_609fed7600001 quota_rule3=Trash:ignore quota_rule2=*:messages=2684354 quota_rule=*:storage=5242880k mail=maildir:/mail/mailstore01/812/023/grant@rp-auth-test.com/:INDEX=/mail/index01/812/023/grant@rp-auth-test.com/ fts_solr=debug url=http://ftsvs02:8080/solr/ gid=8 indexer-worker(hammer(a)rp-auth-test.com): Debug: auth input: grant(a)rp-auth-test.com uid=8 fts=solr quota_rule4=Spam:ignore _session=cow80_609fed7600001 quota_rule3=Trash:ignore quota_rule2=*:messages=2684354 quota_rule=*:storage=5242880k mail=maildir:/mail/mailstore01/812/023/grant@rp-auth-test.com/:INDEX=/mail/index01/812/023/grant@rp-auth-test.com/ fts_solr=debug url=http://ftsvs02:8080/solr/ gid=8 indexer-worker(hammer(a)rp-auth-test.com): Debug: Added userdb setting: plugin/_session=cow80_609fed7600001 indexer-worker(hammer(a)rp-auth-test.com): Debug: Added userdb setting: plugin/fts=solr indexer-worker(hammer(a)rp-auth-test.com): Debug: Added userdb setting: plugin/fts_solr=debug url=http://ftsvs02:8080/solr/ indexer-worker(hammer(a)rp-auth-test.com): Debug: Added userdb setting: mail=maildir:/mail/mailstore01/812/023/grant@rp-auth-test.com/:INDEX=/mail/index01/812/023/grant@rp-auth-test.com/ indexer-worker(hammer(a)rp-auth-test.com): Debug: Added userdb setting: plugin/quota_rule=*:storage=5242880k indexer-worker(hammer(a)rp-auth-test.com): Debug: Added userdb setting: plugin/quota_rule2=*:messages=2684354 indexer-worker(hammer(a)rp-auth-test.com): Debug: Added userdb setting: plugin/quota_rule3=Trash:ignore indexer-worker(hammer(a)rp-auth-test.com): Debug: Added userdb setting: plugin/quota_rule4=Spam:ignore indexer-worker(grant(a)rp-auth-test.com): Debug: Effective uid=8, gid=8, home= indexer-worker(grant(a)rp-auth-test.com): Debug: Namespace inbox: type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:/mail/mailstore01/812/023/grant@rp-auth-test.com/:INDEX=/mail/index01/812/023/grant@rp-auth-test.com/ indexer-worker(grant(a)rp-auth-test.com): Debug: maildir++: root=/mail/mailstore01/812/023/grant(a)rp-auth-test.com, index=/mail/index01/812/023/grant(a)rp-auth-test.com, indexpvt=, control=, inbox=/mail/mailstore01/812/023/grant(a)rp-auth-test.com, alt= indexer-worker(grant(a)rp-auth-test.com): Debug: Ignoring unknown cache field: pop3.order indexer-worker(grant(a)rp-auth-test.com): Debug: Ignoring unknown cache field: binary.parts indexer-worker(grant(a)rp-auth-test.com): Warning: Created dotlock file's timestamp is different than current time (1380294736 vs 1380294664): /mail/index01/812/023/grant(a)rp-auth-test.com/.INBOX/dovecot.index.cache indexer-worker(grant(a)rp-auth-test.com): Warning: Created dotlock file's timestamp is different than current time (1380294736 vs 1380294664): /mail/index01/812/023/grant(a)rp-auth-test.com/.INBOX/dovecot.index.log indexer-worker(grant(a)rp-auth-test.com): Warning: Created dotlock file's timestamp is different than current time (1380294736 vs 1380294664): /mail/index01/812/023/grant(a)rp-auth-test.com/.INBOX/dovecot.index.cache indexer-worker(grant(a)rp-auth-test.com): Debug: http-client: request [POST http://ftsvs01:8080/solr/update] Submitted [...] indexer-worker indexes User2's mail on wrong fts host: [...] indexer-worker(grant(a)rp-auth-test.com): Debug: http-client: request [POST http://ftsvs01:8080/solr/update] Sent header indexer-worker(grant(a)rp-auth-test.com): Debug: http-client: request [POST http://ftsvs01:8080/solr/update] Partially sent payload indexer-worker(grant(a)rp-auth-test.com): Debug: http-client: request [POST http://ftsvs01:8080/solr/update] Partially sent payload indexer-worker(grant(a)rp-auth-test.com): Debug: http-client: request [POST http://ftsvs01:8080/solr/update] Partially sent payload indexer-worker(grant(a)rp-auth-test.com): Debug: http-client: request [POST http://ftsvs01:8080/solr/update] Partially sent payload indexer-worker(grant(a)rp-auth-test.com): Debug: http-client: request [POST http://ftsvs01:8080/solr/update] Partially sent payload indexer-worker(grant(a)rp-auth-test.com): Debug: http-client: request [POST http://ftsvs01:8080/solr/update] Partially sent payload [...] indexer-worker finishes and imap searches against correct fts host ftsvs02 [...] imap(grant(a)rp-auth-test.com): Debug: http-client: request [GET http://ftsvs02:8080/solr/select?fl=uid,score&rows=194&sort=uid+asc&q=(hdr:%…] Submitted [...]

2 3

[Dovecot] Dovecot proxy hooks
by dac＠getodata.ro 26 Oct '13

26 Oct '13

I am interested in the possibility of using Dovecot IMAP/POP proxying capabilities to analyze emails that are passing through and possibly modify content on the fly. This subject has been discussed here [1] before. I have tried the mail-filter plugin [2], but the hooks it uses are only called in a non-proxy setup. Is there a practical way of doing this, or plans to add such a feature? Links: [1]: http://dovecot.org/list/dovecot/2006-February/011704.html [2]: http://www.dovecot.org/patches/2.2/mail-filter.tar.gz

2 1

[Dovecot] Plugin issue with update from 2.0.19 to 2.1.17
by Reinaldo Matukuma 26 Oct '13

26 Oct '13

Hello. Probably only Timo can help-me with this. I have a self-made plugin based on the zlib plugin that i use to cryptograph the messages at inbox. As a side-effect of the cryptography, my plugin changes the size of the message, but until 2.0.19 this works well with dovecot index and the W/S flags. But now, i'm going to upgrade to 2.1.17 and now i have these messages on log at my test ambiance: Oct 15 20:19:25 test dovecot: imap(reinaldo(a)exemplo.com.br): Error: Cached message size smaller than expected (367 < 529) Oct 15 20:19:25 test dovecot: imap(reinaldo(a)exemplo.com.br): Error: Maildir filename has wrong S value, renamed the file from /storage/test/messages/exemplo.com.br/reinaldo/Maildir/.Sent/cur/1381879158.M634385P5208.test,S=367,W=378:2,S to /storage/test/messages/exemplo.com.br/reinaldo/Maildir/.Sent/cur/1381879158.M634385P5208.test,S=529:2,S Oct 15 20:19:25 test dovecot: imap(reinaldo(a)exemplo.com.br): Error: Corrupted index cache file /storage/test/messages/exemplo.com.br/reinaldo/Maildir/.Sent/dovecot.index.cache: Broken physical size for mail UID 6 I understood with these messages that the dovecot is arguing to get the real size of the file now, overriding the return of size from my crypto plugin. But i don't understood if this is a consequence from the changes to correct the index issue (the dovecot.index.cache issue). So... I want know if the correct way to fix this would be change my plugin to return the real size of the file (that will be larger than the effective message that the plugin returne after the de-cryptography) or if i need use some new function to the plugin replace the expected size based on the real size of the message, not of the file. Thanks Reinaldo

3 4

[Dovecot] unusual dsync lines
by Anand Kumria 26 Oct '13

26 Oct '13

Hi, Another day, another dysnc attempt. Using Dovecot v2.2.5.4; I see: # doveadm -v -o imapc_user=user(a)example.com -o imapc_password=password -o imapc_host=imap.example.com -o imapc_port=993 -o imapc_ssl=imaps -o imapc_ssl_dir=/etc/ssl -o imapc_feature=rfc822.size -o imapc_ssl_verify=no sync -1 -R -u user(a)example.com imapc: dsync(user(a)example.com): Info: copy from Drafts: box=Drafts, uid=8343, msgid=<4F387A25.5010900(a)example.com>, size=2954969 dsync(user(a)example.com): Info: copy from Drafts: box=Drafts, uid=8344, msgid=<5237B0BF.7030402(a)example.com>, size=3371710 dsync(user(a)example.com): Info: copy from Drafts: box=Drafts, uid=8345, msgid=<5237B588.6040009(a)example.com>, size=3266 dsync(user(a)example.com): Info: copy from Drafts: box=Drafts, uid=8346, msgid=<5237B6B4.2030203(a)example.com>, size=4201 dsync(user(a)example.com): Info: copy from Drafts: box=Drafts, uid=8347, msgid=<5237B888.7030807(a)example.com>, size=3371445 dsync(user(a)example.com): Info: copy from Drafts: box=Drafts, uid=8348, msgid=<5237C224.9010608(a)example.com>, size=3371745 dsync(user(a)example.com): Info: copy from Drafts: box=Drafts, uid=8349, msgid=<5237C350.5080608(a)example.com>, size=3371700 dsync(user(a)example.com): Info: copy from Drafts: box=Drafts, uid=8350, msgid=<5237C5EE.5030408(a)example.com>, size=3371619 dsync(user(a)example.com): Info: expunge: box=Drafts, uid=8209, msgid=< 4F387A25.5010900(a)example.com>, size=2954969 The interesting lines being uid=8209 and uid=8343; why would dsync both copy and then expunge the same message from the same mailbox? Regards, Anand

2 3

[Dovecot] Strange output from LIST command
by azurIt 26 Oct '13

26 Oct '13

Hi, i'm using Dovecot 2.1.7 (Debian Wheezy) and output from LIST command looks strange: C: 4 LIST () "" (INBOX INBOX.Karantena INBOX.Spam) RETURN (STATUS (UNSEEN)) S: * LIST () "." "INBOX" S: * LIST () "." "INBOX.Karantena" S: * STATUS "INBOX.Karantena" (UNSEEN 0) S: * LIST () "." "INBOX.Spam" S: * STATUS "INBOX.Spam" (UNSEEN 0) S: 4 OK List completed. The UNSEEN information for INBOX is completely missing. It is correct behavior? If not, is this a known bug in 2.1.7? Thank you. azur

9 21

[Dovecot] Login into other user's account // master user for non-master users // chroot to users.<user>
by Steffen Kaiser 26 Oct '13

26 Oct '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Currently some of our organizational roles uses shared secrets (aka the password) to access the mail account of an organizational role, say "sales" for example. For one, I don't like shared secrets, for second, there had been some changes to shared mailboxes, I can only say "user sales has deleted the message at then and then". Therefore I would like to access the mailboxes of organizational roles with the accounts of the humans performing the role currently. Using sharing and ACLs it is possible to map the mailboxes of "sales" to "users.sales" namespace for specific other users, actually the human ones, say userA and userB for example. However, userB does not like managing identities in its MUA and refuses to acknowledge the messages in users.sales for various reasons. One reason was that userB wants to visibly separate strictly both mail accounts, the private messages in "userB" and the role's ones in "sales". Now, I came into thinking that it would be good in such case, if userB could authentificate as, say "sales*userB" - much like a master user - and ends in "sales"'s home, but with access permissions of "userB", well, like a chroot. Would it be an interesting feature to add to Dovecot's core? If I simulate "sales*userB" with password of userB and let the userdb return the home of sales, userB would gain "owner" privilegues of sales implicitly. So there seems to exist no workaround. Kind regards, - -- Steffen Kaiser -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iQEVAwUBUmDx3l3r2wJMiz2NAQLgVwgAw/RgAll9QPEwEPAY4hNHrTcieyZoCMUc iTGBDYcfaELnlLZJupbM4fRPyVYMe4uRmuy2pBKXwDplCriW9FIETQ36Jx6oppZn Ojf1+ZLjBUwr0OBpGMXyDd0XpNWgaEOiEzvvpOykO+pJJCKEJR7uR0usQ5cV6JRt z7qiY3t7n7H0j12Oas7w+IsRrTgMe9FsJ4D37SwxeZCpM12y17E2T2mX10ycvnTM 27/Gai8iyp/4dlO0NqBZ+qU/txqs2h+y5SARngj4Ru9YkmwutC9b8/4kBObTzzdx w1ahO3sYPTH0KmQ0Voc63H6T6U6CkBmYr9kqplkTdEiwtdg9AJSSfQ== =1arj -----END PGP SIGNATURE-----

5 7

[Dovecot] LMTP, TLS/SSL, authentication, proxy
by Jogi Hofmüller 26 Oct '13

26 Oct '13

Folks, Several questions packed into one email ;) Can dovecot use TLS/SSL on LTMP inet socket? Can I configure dovecot to only let an authenticated user deliver mail via LMTP? Can I tell dovecot to use a user/password for proxying LMTP connections? All this is related to my quest to move from cyrus to dovecot transparently to our users. And if any of the above questions can be answered with yes, I would appreciate the odd hint on howto configure that :) Thanks in advance! -- j.hofmüller aka Thesix http://users.mur.at/thesix/

2 1