August 2015 - dovecot

mail_log proposal: recipient
by Peter Chiochetti 27 Aug '15

27 Aug '15

As Timo seems to be on a committing spree; I'd like to propose that in the mail_log_fields the recipient would be available. Like probably many dovecot users, my MUAs save to Sent; so when grepping the log to learn etc. that would just be useful Kind regards -- peter

2 2

Duplicate folder names
by Paulo Matos 26 Aug '15

26 Aug '15

Hi, I have setup message filtering and for example, I might move a message which a given sender to folder special/. This folder is created and shows up twice in INBOX/special/ and special/. They are however exactly the same folder. If I subscribe to one I am automatically subscribed to the other and viceversa. Not too happy with this configuration. I have a feeling this is related to namespaces but I am not sure in which way to configure things in order to have only INBOX/special but not special/. How can I set this up. My current configuration is: $ dovecot -n # 2.2.18: /etc/dovecot/dovecot.conf # OS: Linux 4.1.0-x86_64-linode59 x86_64 Fedora release 22 (Twenty Two) ext4 auth_debug = yes auth_mechanisms = plain login digest-md5 cram-md5 auth_verbose = yes auth_verbose_passwords = yes default_internal_user = root imap_client_workarounds = delay-newmail tb-extra-mailbox-sep mail_debug = yes mail_location = maildir:/home/vmail/%d/%n/Maildir maildir_very_dirty_syncs = yes mbox_write_locks = fcntl namespace { inbox = yes location = prefix = INBOX. separator = . type = private } namespace inbox { location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } postmaster_address = pmatos protocols = imap quota_full_tempfail = yes service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-master { mode = 0600 user = vmail } user = $default_internal_user } ssl = required ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { args = uid=5000 gid=5000 home=/home/vmail/%d/%n allow_all_users=yes driver = static } protocol lda { auth_socket_path = /var/run/dovecot/auth-master deliver_log_format = msgid=%m: %$ log_path = /home/vmail/dovecot-deliver.log } protocol imap { mail_max_userip_connections = 100 } Regards, Paulo Matos

2 2

PROXY protocol
by Hoggins! 26 Aug '15

26 Aug '15

Hello folks, Any plans on implementing the PROXY protocol to allow Dovecot being behind a TCP proxy, and still logging the real IP address of the users ? See : http://blog.haproxy.com/haproxy/proxy-protocol/ Thanks !

6 15

Shared Mailboxes Not Visible
by Mark Usrey 26 Aug '15

26 Aug '15

OK, gurus, I've spent the last 2 days crawling through all of the posts and web postings regarding shared folders, and I simply cannot get it to work. I'm sure that there is something simple that I've overlooked, but cannot for the life of me see it :) Here's my current config: # 2.2.9: /etc/dovecot/dovecot.conf # OS: Linux 3.16.0-46-generic x86_64 Ubuntu 14.04.3 LTS xfs auth_mechanisms = plain login debug_log_path = /var/log/debug.log listen = * mail_gid = mail mail_location = mdbox:/mail/data/private/%n:INDEX=/mail/index/private/%n mail_plugins = acl notify mail_log stats mail_privileged_group = mail namespace { list = children location = mdbox:/mail/data/shared/%%n:INDEXPVT=/mail/index/private/%n/shared_indices/%%n prefix = Shared/%%n/ separator = / subscriptions = no type = shared } namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = / type = private } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { acl = vfile acl_shared_dict = file:/mail/dict/shared-mailboxes autocreate = Trash autocreate2 = Spam autocreate3 = Drafts autocreate4 = Junk autosubscribe = Trash autosubscribe2 = Spam autosubscribe3 = Drafts autosubscribe4 = Junk mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename flag_change append mail_log_fields = uid box msgid size subject stats_refresh = 30 secs stats_track_cmds = yes } protocols = " imap lmtp" service auth { unix_listener /var/spool/postfix/private/auth { user = postfix } } service dict { unix_listener dict { group = mail mode = 0600 user = root } } service imap-login { process_min_avail = 5 service_count = 0 } service imap { process_limit = 4096 } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } service stats { fifo_listener stats-mail { group = mail mode = 0660 user = root } } ssl_ca = </etc/dovecot/thawte2.crt ssl_cert = </etc/dovecot/dovecot2.pem ssl_key = </etc/dovecot/private/solaray-sunglasses.com.key userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocol lmtp { postmaster_address = postmaster(a)solaray-sunglasses.com } protocol imap { mail_plugins = acl notify mail_log stats imap_acl imap_stats } All of our users are "real" (no virtual users or domains) and only a single domain supported. We have a user, rself, that is attempting to share his inbox with a few others that also need access to it. So the corresponding ACL files: root@srv56:/mail/data/shared/rself# ls -la /mail/data/shared/rself/ total 20 drwx------ 4 rself mail 79 Aug 24 15:22 . drwxrwx--- 7 mail mail 71 Aug 24 16:01 .. -rw------- 1 rself mail 17 Aug 24 15:22 dovecot-acl-list drwx------ 10 rself mail 130 Aug 24 12:28 mailboxes drwx------ 2 rself mail 12288 Aug 25 16:25 storage -rw------- 1 rself mail 70 Aug 24 12:28 subscriptions And the contents of dovecot-acl-list: root@srv56:/mail/data/shared/rself# cat dovecot-acl-list 1440447778 INBOX root@srv56:/mail/data/shared/rself# And the mailbox-specific files: root@srv56:/mail/data/shared/rself/mailboxes/INBOX/dbox-Mails# ls -la total 4 drwx------ 2 rself mail 24 Aug 25 08:16 . drwx------ 3 rself mail 23 Aug 24 12:28 .. -rw------- 1 rself mail 24 Aug 24 15:22 dovecot-acl root@srv56:/mail/data/shared/rself/mailboxes/INBOX/dbox-Mails# Content: root@srv56:/mail/data/shared/rself/mailboxes/INBOX/dbox-Mails# cat dovecot-acl user=musrey akxeilprwts root@srv56:/mail/data/shared/rself/mailboxes/INBOX/dbox-Mails# Now, the global ACL dictionary (just a flat file, not enough users to justify SQL :) root@srv56:~# ls -la /mail/dict/ total 12 drwxrwxr-x 2 root mail 4096 Aug 24 18:05 . drwxr-xr-x 5 root root 4096 Aug 23 08:51 .. -rw-r--r-- 1 rself mail 40 Aug 24 18:05 shared-mailboxes And contents: root@srv56:~# cat /mail/dict/shared-mailboxes shared/shared-boxes/user/musrey/rself 1 root@srv56:~# So, as far as I can tell from my RTFM activities, I think the configuration is correct. Now, I go to attempt to check the ACL using doveadm, and I get this: root@srv56:~# doveadm acl debug -u musrey Shared/rself/INBOX doveadm(musrey): Error: Can't open mailbox Shared/rself/INBOX: Mailbox doesn't exist: Shared/rself/INBOX root@srv56:~# WTH, over? So, not thinking this is an ACL issue, but simply a namespace issue - either I have the shared namespace configured incorrectly, or I'm using it incorrectly in attempting to identify rself's INBOX when trying to verify that the ACL is working. So, I thought to myself, let's try a mailbox list, so I executed root@srv56:~# doveadm mailbox list -u musrey ACT! ACT!/General AES Outdoors AES Outdoors/Christy AES Outdoors/Gwen .... (many, many mailboxes in here - I should probably eliminate some of them :) VMWare Watchguard Xata Corporation Xata Corporation/Mike Brossman Xata Corporation/Mike Uremovich INBOX root@srv56:~# But no "Shared" or "rself" to be found. Help, please. I'm quickly going bald over this one. -- *Mark Usrey* Director of Information Technologies *Solaray LLC Solaray LLC* 620 S. Linden Sapulpa, Ok 74066 (918) 227-0722 Ext. 527

1 0

sieve_after seems to ignored ?
by Per Jessen 25 Aug '15

25 Aug '15

sieve and managesieve are both working fine, have been for years. Now I want to add a sieve_after script: /etc/dovecot/conf.d/90-sieve.conf : plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_before = sieve_after = ~/sieve/personal.sieve sieve_subaddress_sep = + } I have compiled ~/sieve/personal.sieve to ~/sieve/personal.svbin, but it doesn't seem to be read. Any hints? thanks Per Jessen -- Per Jessen, Zürich (17.2°C) http://www.hostsuisse.com/ - dedicated server rental in Switzerland.

3 6

ldap attribute modifiers. how to lowercase non ASCII
by matthias lay 24 Aug '15

24 Aug '15

hi all, I encountered some problem with lowercasing chars like an "Ä" with user_attrs like this: user_attrs = uid=home=/mail/%Lu, =myvar=%L{ldap:uid} the Ä doesnt get lower cased in both cases # doveadm user BLÄTULA field value user blÄtula uid vmail gid vmail home /mail/blÄtula mail maildir:~/Maildir:LAYOUT=fs:INBOX=~/Maildir/INBOX myvar blÄtula somebody knows if there a fix for that? Greetz Matze

2 2

Store ACL files within shared mailbox / rename shared folder problem
by Chris Laif 24 Aug '15

24 Aug '15

Hi. If $otheruser shares a mailbox to $myuser, my private index is stored in *my* Maildir, according to this template (from the dovecot docs): mail_location = maildir:%%h/Maildir:INDEXPVT=%h/Maildir/shared/%%u If $otheruser renames the shared mailbox, all my private mail flags (Seen) are lost because my mailclient couldn't find the private index anymore. Is there any way to store the private index within the shared mailbox? If $otheruser renames the mailbox, the index will be 'migrated' as well. Something like this: /data/mails/$otheruser/Maildir/.MagicSharedFolder/shared/$myuser.dovecot.index.pvt.log I see no way on how to do craft a INDEXPVT for this. Kind regards, Chris

2 1

plugin antispam sa-learn run program failed with exit code -1
by Guillaume Lakano - DOVECOT 24 Aug '15

24 Aug '15

Hello ! I've installed iRedMail on an Ubuntu Server 14.04.1 I'm not the only one on the iRedMail forum to have the problem, but the developpers of iRedMail doesn't found the problem and advice me to ask you directly. When I want to move an email directly to /Junk/ this not works. In Thunderbird, the error is : "[SERVERBUG] failed to send mail" In RoundCube, the error is : "Server Error: UID MOVE: failed to send mail ." But, if we firstly delete the email, then move the email from /Trash/ to /Junk/ this works. Here is the package versions: dovecot 2.2.9-1ubuntu2.1 dovecot-antispam 2.0+20130822-2build1 spamassassin 3.4.0-1ubuntu2.1 I have enabled antispam-debug in syslog, and the sa-learn seems to return an error: Aug 20 20:21:13 mail imap: antispam: plugin initialising (2.0-notgit) Aug 20 20:21:13 mail imap: antispam: verbose debug enabled Aug 20 20:21:13 mail imap: antispam: "Junk" is exact match spam folder Aug 20 20:21:13 mail imap: antispam: no unsure folders Aug 20 20:21:13 mail imap: antispam: "Trash" is exact match trash folder Aug 20 20:21:13 mail imap: antispam: pipe backend spam argument = --spam Aug 20 20:21:13 mail imap: antispam: pipe backend not-spam argument = --ham Aug 20 20:21:13 mail imap: antispam: pipe backend program = /usr/bin/sa-learn Aug 20 20:21:13 mail imap: antispam: pipe backend program arg[0] = -D --username=guillaume.XXXX(a)nydomain.com Aug 20 20:21:13 mail imap: antispam: pipe backend tmpdir /tmp Aug 20 20:21:14 mail imap: antispam: mailbox_is_unsure(Junk): 0 Aug 20 20:21:14 mail imap: antispam: mailbox_is_trash(INBOX): 0 Aug 20 20:21:14 mail imap: antispam: mailbox_is_trash(Junk): 0 Aug 20 20:21:14 mail imap: antispam: mail copy: from trash: 0, to trash: 0 Aug 20 20:21:14 mail imap: antispam: mailbox_is_spam(INBOX): 0 Aug 20 20:21:14 mail imap: antispam: mailbox_is_spam(Junk): 1 Aug 20 20:21:14 mail imap: antispam: mailbox_is_unsure(INBOX): 0 Aug 20 20:21:14 mail imap: antispam: mail copy: src spam: 0, dst spam: 1, src unsure: 0 Aug 20 20:21:14 mail imap: antispam: running mailtrain backend program /usr/bin/sa-learn Aug 20 20:21:14 mail imap: antispam: running mailtrain backend program /usr/bin/sa-learn Aug 20 20:21:14 mail imap: antispam: running mailtrain backend program parameter 1 -D --username=guillaume.XXXX(a)mydomain.com Aug 20 20:21:14 mail imap: antispam: running mailtrain backend program parameter 2 --spam Aug 20 20:21:16 mail imap: antispam: run program failed with exit code -1 There is no other log in /var/log/dovecot.log or /var/log/mail.log Here is my dovecot configuration: # dovecot -n # 2.2.9: /etc/dovecot/dovecot.conf # OS: Linux 3.13.0-62-generic x86_64 Ubuntu 14.04.1 LTS auth_master_user_separator = * auth_mechanisms = PLAIN LOGIN dict { acl = mysql:/etc/dovecot/dovecot-share-folder.conf quotadict = mysql:/etc/dovecot/dovecot-used-quota.conf } first_valid_uid = 2000 last_valid_uid = 2000 listen = * [::] log_path = /var/log/dovecot.log mail_gid = 2000 mail_location = maildir:%Lh/Maildir/:INDEX=%Lh/Maildir/ mail_plugins = quota mailbox_alias acl mail_uid = 2000 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { auto = no special_use = \Sent } mailbox Spam { auto = no special_use = \Junk } mailbox Trash { auto = subscribe special_use = \Trash } prefix = separator = / type = private } namespace { list = children location = maildir:%%Lh/Maildir/:INDEX=%%Lh/Maildir/Shared/%%u prefix = Shared/%%u/ separator = / subscriptions = yes type = shared } passdb { args = /etc/dovecot/dovecot-mysql.conf driver = sql } passdb { args = /etc/dovecot/dovecot-master-users driver = passwd-file master = yes } plugin { acl = vfile acl_shared_dict = proxy::acl antispam_backend = pipe antispam_debug_target = syslog antispam_pipe_program = /usr/bin/sa-learn antispam_pipe_program_args = --username=%Lu antispam_pipe_program_notspam_arg = --ham antispam_pipe_program_spam_arg = --spam antispam_spam = Junk antispam_trash = Trash antispam_verbose_debug = 1 auth_socket_path = /var/run/dovecot/auth-master mailbox_alias_new = Sent Messages mailbox_alias_new2 = Sent Items mailbox_alias_old = Sent mailbox_alias_old2 = Sent quota = dict:user::proxy::quotadict quota_rule = *:storage=1G quota_warning = storage=85%% quota-warning 85 %u quota_warning2 = storage=90%% quota-warning 90 %u quota_warning3 = storage=95%% quota-warning 95 %u sieve = %Lh/sieve/dovecot.sieve sieve_before = /var/vmail/sieve/dovecot.sieve sieve_dir = %Lh/sieve sieve_execute_bin_dir = /usr/lib/dovecot/sieve-execute sieve_filter_bin_dir = /usr/lib/dovecot/sieve-filter sieve_global_dir = /var/vmail/sieve sieve_global_extensions = +vnd.dovecot.pipe +vnd.dovecot.filter +vnd.dovecot.execute sieve_pipe_bin_dir = /usr/lib/dovecot/sieve-pipe sieve_plugins = sieve_extprograms } protocols = pop3 imap sieve lmtp service auth { unix_listener /var/spool/postfix/private/dovecot-auth { group = postfix mode = 0666 user = postfix } unix_listener auth-master { group = vmail mode = 0666 user = vmail } unix_listener auth-userdb { group = vmail mode = 0660 user = vmail } } service dict { unix_listener dict { group = vmail mode = 0660 user = vmail } } service imap-login { process_limit = 500 service_count = 1 } service lmtp { executable = lmtp -L inet_listener lmtp { address = 127.0.0.1 port = 24 } process_min_avail = 5 unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } user = vmail } service managesieve-login { inet_listener sieve { address = 127.0.0.1 port = 4190 } } service pop3-login { service_count = 1 } service quota-warning { executable = script /usr/local/bin/dovecot-quota-warning.sh unix_listener quota-warning { group = vmail mode = 0660 user = vmail } } ssl = required ssl_cert = </etc/ssl/certs/iRedMail.crt ssl_cipher_list = ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA ssl_dh_parameters_length = 2048 ssl_key = </etc/ssl/private/iRedMail.key ssl_prefer_server_ciphers = yes ssl_protocols = !SSLv2 !SSLv3 userdb { args = /etc/dovecot/dovecot-mysql.conf driver = sql } protocol lda { auth_socket_path = /var/run/dovecot/auth-master lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes log_path = /var/log/dovecot-sieve.log mail_plugins = quota mailbox_alias acl sieve postmaster_address = root } protocol lmtp { info_log_path = /var/log/dovecot-lmtp.log lmtp_save_to_detail_mailbox = yes mail_plugins = quota sieve postmaster_address = postmaster recipient_delimiter = + } protocol imap { imap_client_workarounds = tb-extra-mailbox-sep mail_max_userip_connections = 20 mail_plugins = quota mailbox_alias acl imap_quota imap_acl antispam } protocol pop3 { mail_max_userip_connections = 20 mail_plugins = quota mailbox_alias acl pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = %08Xu%08Xv } I don't known if it's a problem related to dovecot or to spamassassin. If you could help me to solve the problem, this will be really appreciated :) Regards

4 6

Delivering email to Maildir PreINBOX
by Paulo Matos 24 Aug '15

24 Aug '15

Hi all, I have a running dovecot with: $ dovecot -n # 2.2.18: /etc/dovecot/dovecot.conf # OS: Linux 4.1.0-x86_64-linode59 x86_64 Fedora release 22 (Twenty Two) ext4 auth_debug = yes auth_mechanisms = plain login digest-md5 cram-md5 auth_verbose = yes auth_verbose_passwords = yes default_internal_user = root imap_client_workarounds = delay-newmail tb-extra-mailbox-sep mail_debug = yes mail_location = maildir:/home/vmail/%d/%n/Maildir maildir_very_dirty_syncs = yes mbox_write_locks = fcntl namespace { inbox = yes location = prefix = INBOX. separator = . type = private } namespace inbox { location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } postmaster_address = pmatos protocols = imap quota_full_tempfail = yes service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-master { mode = 0600 user = vmail } user = $default_internal_user } ssl = required ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { args = uid=5000 gid=5000 home=/home/vmail/%d/%n allow_all_users=yes driver = static } protocol lda { auth_socket_path = /var/run/dovecot/auth-master deliver_log_format = msgid=%m: %$ log_path = /home/vmail/dovecot-deliver.log } protocol imap { mail_max_userip_connections = 100 } I started to filter my email with imapfilter running on the same host as dovecot. I would therefore like to deliver email to a folder called PreINBOX so that imapfilter then sorts the email and ends up delivering only the useful email to INBOX. How can I change the name of the inbox dovecot delivers to? Best, -- Paulo Matos

1 1

IMAP Folder Mail Separator
by Alex 23 Aug '15

23 Aug '15

Hi, I have a fedora21 install with dovecot-2.2.18, and when creating a new subfolder with thunderbird, the actual folder name is "Folder1^Folder2" with a carat as a separator, instead of creating Folder2 in the Folder1 directory. Is this a thunderbird problem? I don't recall having this problem prior to upgrading to fedora21, so thought maybe it's a dovecot problem. Maybe the separator character is customizable? Thanks, Alex

3 5