- dovecot - dovecot.org

[Dovecot] Mail location security
by Roman Gelfand 06 Feb '14

06 Feb '14

I am not sure I understood this issue correctly... When using maildir with ie ldap. Suppose ldap attribute settings say gid 8 and uid 999, Those are the permissions for every email address. If so, someone who has access to one email user on the server, has access to all. If this is so, is using mailbox instead of maildir resolve this problem? Thanks in advance

2 1

[Dovecot] userdb section not recognized in dovecot.conf. Help?
by CypherPunk 06 Feb '14

06 Feb '14

I'm following a tutorial[1] on how to configure dovecot and the tutorial says to insert the following configuration options into the dovecot.conf file: disable_plaintext_auth = no mail_privileged_group = mail mail_location = mbox:~/mail:INBOX=/var/mail/%u userdb { driver = passwd } This seems to have worked for a lot of others using this tutorial but not for me. When I try to start dovecot, I am told that the section at userdb is an unknown section type. I've spent the last few hours on Google searching this out and I've gotten conflicting answers that don't make sense. Is this the proper way to use the userdb directive? For information, I've also tried userdb{ driver = passwd-file } and that didn't work either. So I'm assuming that perhaps userdb is deprecated somehow but I don't know what to replace it with. Can someone point me in the right direction? Many Thanks! CypherPunk [1] https://www.digitalocean.com/community/articles/how-to-set-up-a-postfix-e-m…

2 1

[Dovecot] Debian Wheezy-Backports - Dovecot (1:2.2.9-1~bpo70+1) missing xz compression support?
by T.B. 05 Feb '14

05 Feb '14

Hallo Everyone, since some days a new dovecot version is available in Debian "wheezy-backports": (1:2.2.9-1~bpo70+1) wheezy-backports As described in http://wiki2.dovecot.org/Plugins/Zlib and http://www.dovecot.org/doc/NEWS-2.2 "xz"-compression is available since Dovecot version 2.2.9. Today I tried to convert my mailboxes with the new xz compression. Therfore I changed my config as follows: /etc/dovecot/conf.d/10-mail.conf: # Space separated list of plugins to load for all services. Plugins specific to IMAP, LDA, etc. are added to this list in their own .conf files. mail_plugins = zlib acl fts fts_solr /etc/dovecot/conf.d/90-plugin.conf: # Enable these only if you want compression while saving: zlib_save_level = 9 # 1..9 zlib_save = xz # gz or bz2 or xy Now I tried to convert my mailboxes - but somehow, something goes wrong: root@SERVER:/# dovecot --version 2.2.9 root@SERVER:/# dsync mirror mdbox:/srv/converted_vmail/ doveadm(root): Error: zlib_save: Support not compiled in for handler: xz dsync(root): Error: zlib_save: Support not compiled in for handler: xz Where is the failure? Did the packet maintainer forget to activate xz? I can't find anything xz related in the debian package changelog: http://metadata.ftp-master.debian.org/changelogs//main/d/dovecot/dovecot_2.… Should I contact the Debian packet maintainer? http://packages.qa.debian.org/d/dovecot.html Best regards T.B.

2 2

[Dovecot] How to archive mails on different server
by Anant Saraswat 05 Feb '14

05 Feb '14

Hi Guys, I want to make some new changes to my exim mail server So if any user archive his/her mail they will save on any other server not on Exim server , and whenever user want to search for any old mail he will go to archive folder and can search it from there.... So basically i want to setup a diffrent server for archiving and want to connect it to my Exim server. So whevever user archive his/her mail it will autometically save to diffrent server. So is it possible using any plugin , or something else . I am using Roundcube,Exim 4.72, Dovecot(LMTP). Regards, Anant Saraswat

2 1

[Dovecot] imap2json
by Kai Hendry 05 Feb '14

05 Feb '14

Hi there, I've started work on a side project that I've been long wanting to do; better HTML archives of email. https://github.com/kaihendry/imap2json I'm just designing the JSON schema atm, and I thought it would be good to get your feedback (Esp Timo) before I make a horrible mistake. https://github.com/kaihendry/imap2json/blob/master/JSON-design.mdwn Is it a good idea to base the id of a converation by the sha1sum of the first message for example? Any other tips or words of encouragement would be great. Kind regards,

1 1

[Dovecot] Dovecot 2.2.10 shared mailbox
by Florin Portase 05 Feb '14

05 Feb '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Well, after some debugging I've decided to do some more changes: namespace { type = public prefix = Shared. separator = . list = children location = maildir:/home/vpopmail/Public/Maildir subscriptions = yes inbox = no } So, WORKING againg!! Question is: is namespace = shared deprecated ???????? -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQEcBAEBAgAGBQJS8fx2AAoJECEzxtLP+204oAIIAMnElUi3izL/ytiDROGjVJl4 RdWkKb+2x55ANfNbB+tbMaG5CmCUi0qfS0Z6K2pKke/UxnR4RAWVZGxZ7ESl0MIs LtHKt1uv/pnoR4htO+QhloYIBzbs9Cpf8Nu7sWaxOsWl6Y7m3p9FqNvLBFYrzVsM Yx/G85GCyAlPHtpBuCtbNtLsuc4Oeh+cXbYMAu3+YiTcU9VB3Dhw21ViI3PgglYV Ffz/J+xtkvvNlcvmxX4Aqspv1LHK76nvBnYN/pDDHAgJNyGl0pOqo9HjVKZAlFZP Rg25EpuoaMZhHIMB2R5EAIHQddzBOqQc2OrWognvmB+7e+8qUtQMjpougamPg8w= =Y/hd -----END PGP SIGNATURE-----

1 0

[Dovecot] Applying a DNS RBL to deny authentication?
by Marc Perkel 05 Feb '14

05 Feb '14

Hope to get some attention about this idea to reduce hacking passwords. Here is a list of about 700,000 IP addresses that are hacking passwords through SMTP AUTH http://ipadmin.junkemailfilter.com/auth-hack.txt This is a list of IP addresses that attempted to authenticate against my fake AUTH advertizing on servers with no authentication. We do front end spam filtering for thousands of domains and I decided to advertize authentication where there is none and I accept and blackhole all authenticated email to those servers. I have harvested the IP addresses in this list that is available through an RBL. It seems to me that a nice dovecot feature would be the ability to do a black list check against IP addresses connecting and deny access if listed. Thoughts?

4 3

Re: [Dovecot] Dovecot 2.2.10 shared mailbox
by Joseph Tam 05 Feb '14

05 Feb '14

Florin Portase writes: > type of error: COREDUMP > Feb 04 11:49:59 imap(portase.florin(a)medianetork.ro): Fatal: master: > service(imap): child 23391 killed with signal 11 (core dumped) > > Disabling of shared mailbox results in correct functioning of dovecot. > To mention again: dovecot version previous to 2.2 was working OK. Debugging of this sort usually requires submitting a core dump traceback http://dovecot.org/bugreport.html This might be a known issue (check the Dovecot archives). Joseph Tam <jtam.home(a)gmail.com>

1 0

[Dovecot] dsync backup; compressed to uncompressed
by Michael Smith (DF) 05 Feb '14

05 Feb '14

I need to backup some of the mailboxes on our system. We are currently using mdbox with zlib compression plugin. The backups need to be maildir without compression. How can I accomplish this using dsync? The following just causes each msg file in maildir to be compressed as well. dsync -f -u user1 backup maildir:/var/tmp/user1 While this just causes the dsync to fail while spewing a bunch of errors because it can no longer read the compressed mdbox files. dsync -f -u user1 -o mail_plugins= backup maildir:/var/tmp/user1 # doveconf -n # 2.2.4: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-279.19.1.el6.x86_64 x86_64 CentOS release 6.3 (Final) auth_debug = yes auth_debug_passwords = yes auth_default_realm = domain1.net auth_master_user_separator = * auth_mechanisms = plain login auth_verbose = yes auth_verbose_passwords = plain debug_log_path = /var/log/dovecot-debug.log disable_plaintext_auth = no dotlock_use_excl = no lda_mailbox_autocreate = yes lock_method = dotlock mail_access_groups = mail mail_debug = yes mail_fsync = always mail_location = mdbox:~/mail:INDEX=~/index mail_plugins = quota zlib mail_privileged_group = mail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date mbox_read_locks = dotlock mbox_write_locks = dotlock mdbox_rotate_interval = 1 weeks mdbox_rotate_size = 20 M mmap_disable = yes namespace { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = separator = / type = private } passdb { args = /etc/dovecot/dovecot-sql-master.conf.ext driver = sql master = yes pass = yes } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { autosubscribe = Trash autosubscribe2 = Junk autosubscribe3 = Drafts autosubscribe4 = Sent autosubscribe5 = INBOX mail_max_userip_connections = 10 managesieve_max_line_length = 65536 quota = dict:User quota::file:%h/dovecot.quota quota2_rule = Trash:storage=+10%% quota3_rule = Junk:storage=+20%% quota_rule = *:storage=100M:messages=100000 recipient_delimiter = + sieve_before = /var/opt/mail/global.sieve/ zlib_save = gz zlib_save_level = 9 } pop3_reuse_xuidl = yes protocols = imap pop3 sieve lmtp service auth { inet_listener auth { port = 113 } unix_listener auth-userdb { user = nobody } } service lmtp { inet_listener lmtp { port = 24 } process_min_avail = 10 service_count = 1 } service managesieve-login { inet_listener sieve { port = 4190 } process_min_avail = 0 service_count = 1 vsz_limit = 64 M } ssl = no ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lda { mail_plugins = quota zlib sieve } protocol imap { mail_plugins = quota zlib imap_quota } protocol sieve { mail_max_userip_connections = 10 mail_plugins = quota zlib managesieve_max_line_length = 65536 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date } protocol lmtp { mail_plugins = quota zlib sieve }

2 2

[Dovecot] BLF-CRYPT passwords
by KT Walrus 04 Feb '14

04 Feb '14

I’m using the Dovecot Enterprise Edition on Centos 6.5, but Blowfish password hashes don’t seem to work. What can I do to enable Blowfish hashes for passwords? Maybe I don’t have my installation configured properly? Note that I really want to use the existing Blowfish hashes in my MySQL database for Dovecot Authentication. The hashes are generated by PHP crypt() that has Blowfish support built-in. I looked at PHP’s sources, and PHP uses crypt_blowfish.c from http://www.openwall.com/crypt/. This code is in the public domain and could easily be used by Dovecot to support Blowfish passwords on all platforms (if Dovecot doesn’t already support Blowfish on all platforms). Kevin

2 1