April 2020 - dovecot - dovecot.org

Creating folders
by Andrei Petru Mura 25 Apr '20

25 Apr '20

Hi, I managed to install dovecot 2.2.36 along postfix, with virtual users. When I send mails from my thunderbird client a Sent folder is created, which is mirrored on server by Maildir/cur/.Sent. If I try to create other directories the same thing happenes, adding to the created folder name . prefix. For example, created a_folder would be found on server under Maildir/cur/.b_dir. If I remove the client from thunderbird (with cached data) and reconfigure it, this folders are no longer available. How can I make them be available? Indication for right documentation pages is much appreciated. Thanks, Mura Andrei

2 5

error service quota-status
by Admin Beckspaced 25 Apr '20

25 Apr '20

dear dovecot users, trying to setup this quota-status thingy in dovecot so postfix can query the quota on the mailbox via following in main.cf smtpd_recipient_restrictions = ... check_policy_service inet:127.0.0.1:12340 I got this in my dovecot config service quota-status { client_limit = 1 executable = quota-status -p postfix inet_listener { port = 12340 } } plugin { ... quota_status_nouser = DUNNO quota_status_overquota = 552 5.2.2 Mailbox is over quota / Mailbox ist voll quota_status_success = DUNNO ... } but whenever I try I get this error: Apr 24 20:04:32 cx20 dovecot[7236]: quota-status(beckidouche(a)domain.com)<7290><qQpiJzAqo156HAAAct2Jzg>: Error: quota check failed: Failed to get quota resource STORAGE_BYTES for INBOX: quota-dict: dict_lookup(priv/quota/storage) failed: net_connect_unix(/var/run/dovecot/dict) failed: Permission denied (euid=303(vmail) egid=303(vmail) missing +r perm: /var/run/dovecot/dict, we're not in group 489(dovecot), dir owned by 0:0 mode=0755) (reply took 0.000 secs (0.000 in dict wait, 0.000 in other ioloops, 0.000 in locks)) what am I missing here? perhaps too many hours in front of the screen today already ;) thanks a lot for your time & help greetings Becki /* ==================================================================================================================================== */ cx20: # doveconf -n # 2.3.3 (dcead646b): /etc/dovecot/dovecot.conf # Pigeonhole version 0.5.3 (f018bbab) # OS: Linux 4.12.14-lp151.28.48-default x86_64 ext4 # Hostname: cx20.domain.com auth_debug = yes auth_debug_passwords = yes auth_mechanisms = plain login cram-md5 apop auth_verbose = yes auth_verbose_passwords = yes dict { quota = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext } first_valid_uid = 300 mail_debug = yes mail_gid = vmail mail_home = /srv/maildirs/%d/%n mail_location = maildir:/srv/maildirs/%d/%n mail_plugins = " quota" mail_privileged_group = vmail mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = / type = private } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { quota = dict:User quota::proxy::quota quota_grace = 10%% quota_rule = *:bytes=102400000 quota_rule2 = Trash:storage=+100M quota_status_nouser = DUNNO quota_status_overquota = 552 5.2.2 Mailbox is over quota / Mailbox ist voll quota_status_success = DUNNO quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u sieve = file:~/sieve;active=~/.dovecot.sieve } protocols = imap pop3 lmtp sieve service auth { unix_listener auth-userdb { mode = 0777 } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0666 user = postfix } } service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 ssl = yes } } service quota-status { client_limit = 1 executable = quota-status -p postfix inet_listener { port = 10042 } } service quota-warning { executable = script /usr/local/bin/quota-warning.sh unix_listener quota-warning { group = vmail mode = 0660 user = vmail } user = vmail } ssl_cert = </etc/dehydrated/certs/webmail.domain.com/fullchain.pem ssl_cipher_list = ALL:!aNULL:!eNULL:!EXPORT:!DES:!3DES:!MD5:!PSK:!RC4:!ADH:!LOW@STRENGTH ssl_dh = # hidden, use -P to show it ssl_key = # hidden, use -P to show it ssl_options = no_compression ssl_prefer_server_ciphers = yes userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } verbose_proctitle = yes protocol imap { mail_plugins = " quota imap_quota" } /* ==================================================================================================================================== */

2 2

replication newbie: some beginner questions
by Stefan G. Weichinger 25 Apr '20

25 Apr '20

At a customer we run dovecot-2.3.10 along with postfix and mariadb, using postfixadmin as GUI. Now I plan to migrate to a new hardware (bigger machine) and in the same step to migrate from Gentoo Linux to Debian Linux. So I think about how to get the mailboxes from A to B. We use one UID afaik: mail_home = /home/vmail/%d/%u mail_location = maildir:~ I read about dsync and wonder: * does it make sense in this case to set up replication and let the servers replicate at first while still running on the old server? * do I have advantages over doing some rsync-jobs? * I somewhere read about not being able to sync sieve-scripts below the maildirs? We have: plugin { sieve = /home/vmail/%d/%u/sieve/.dovecot.sieve sieve_before = /etc/dovecot/sieve/global/default.sieve sieve_dir = /home/vmail/%d/%u/sieve/scripts/ sieve_extensions = +imapflags } * would the replication sync over all the existing mails/mailboxes or only the ones created *after* starting the replication? Stupid question maybe, but I just want to be sure before I screw up the installation. - sure, backups backups all the way ;-) thanks for any feedback on this! Stefan

5 13

IMAP ghost login
by Jos Chrispijn 25 Apr '20

25 Apr '20

Would it be possible to generate a user list that Dovecot permits to fetch mail from? Thanks, Joz

1 0

Dovecot Load balancing - Please Please Please help me
by Kishore Potnuru 24 Apr '20

24 Apr '20

I need your help on my issue very badly. I have the dovecot version 2.0.9 installed on RHEL linux 6.10 version. It's a single Live server. I need to add a load balancer by adding another server for resilience. I cannot upgrade the dovecot version at this time as it is a single live server. If something goes wrong, I will be in trouble. Basically the requirement/issue is: a) it's a single live dovecot POP3/IMAP server b) people are accessing their emails from microsoft outlook (by giving the same server name as IMAP and SMTP server). But more than 100000 emails will be travelled/routed. c) This server is not rebooted from couple of years. d) Now they are worried about, just in case if the server is having any issues during the reboot or if something goes wrong with the server in any case, there will be huge issues. e) They would like to create resilience by adding another server and emails will be travelled from both the servers. If one server is having any issues due to any technical issue and if it doesn't come back easily, then the emails will be travelled through the other server and there will no disturbance to the emails. atleast it travels from the other server. I have very less knowledge on this. Could you please help me providing the best solution for this. I will wait for your reply. Please please please help me. Thanks, Kishore Potnuru

4 8

Batching quota clone updates
by micah anderson 23 Apr '20

23 Apr '20

Hi, I like the quota count+clone configuration. However, I'm wondering if the cloning process could batch its updates into chunks, or spread them out over time? The clone updates happen whenever the quota is updated, typically this is fine, but when a tsunami of spam comes resulting in delivery to every user on the system, then can be quite overwhelming for a sql server to do an update for every user. Thanks! -- micah

1 0

Help with Shared Mailboxes
by Alan Stevens 23 Apr '20

23 Apr '20

dovecot version = 2.2..27 I have a running debian server ( jessie-backports ) supporting email for three different domains. It is working fine. My boss has asked me to look into using Shared folders/mailboxes - for instance, he wants selected users of Domain-A to be able to see the shared Inbox of the user "support" who is also in Domain-A. Sorry if my questions are basic, but here goes:- 1. Can I simply change the relevant dovecot configuration files and introduce Shared mailboxes into an already running system? Very basically, add the imap-acl plugin, the shared namespace, the dict file and restart dovecot? 2. If I can do this, would it wipe out the tens of thousands of existing emails I have on the system now? i.e. Does Sharing have to be introduced when new email server is being brought up? Can it be added on-the-fly to my working server? Would the emails in /var/mail/vmail/Domain-A/alan/mail seemlessly populate /var/mail/vmail/Domain-A/Shared/alan/mail after making such changes? 3. If adding the Sharing to my running system is possible, can I add it on only one of my three domains? I have a test domain with one user. My principle domain ( Domain-A ) has many users, and as I stated previously, very very many stored emails. Emails I absolutely cannot afford to lose. Any insights are appreciated. Alan Stevens ---||--- alanrstevens(a)yahoo.com https://www.linkedin.com/in/alanrstevens

1 0

Testing COI
by lists＠mlserv.org 23 Apr '20

23 Apr '20

Hi, I am playing around with the COI plugin and try to get things working. I followed the Dovecot docs and also got the source from Github (dovecot/coi). I have compiled and installed coi successfully. IMAP seems to be fine, but LMTP has some errors in the logs, so I removed imap_coi for the moment: Apr 23 17:05:16 mx dovecot: lmtp(10752): Fatal: Couldn't load required plugin /usr/lib64/dovecot/lib11_imap_coi_plugin.so: dlopen() failed: /usr/lib64/dovecot/lib11_imap_coi_plugin.so: undefined symbol: client_add_capability I am running Dovecot 2.3.10 and coi at the same version. Am I missing something here? Thanks in advance Christian -- Rößner-Network-Solutions Karl-Bröger-Str. 10, 36304 Alsfeld Fax: +49 6631 78823409, Mobil: +49 171 9905345 USt-IdNr.: DE225643613, https://roessner.website PGP fingerprint: 658D 1342 B762 F484 2DDF 1E88 38A5 4346 D727 94E5

2 2

Re-to-archived-thread: Dict issue with PostgreSQL for last_login plugin (duplicate key)
by lists＠mlserv.org 23 Apr '20

23 Apr '20

Hi, I have tried to implement last_login with PostgreSQL and I found an old thread from June 2019. I have found a simple solution that I want to share with you: I followed the instructions on how to set up a last_login on the official documentation. Therefor I creates a very simple table having userid and last_login fields. Added plugin and dict information. I received the duplicate key errors and I did this trick for now, which seems to solve this issue: CREATE OR REPLACE RULE insert_to_update AS ON INSERT TO users WHERE EXISTS (SELECT userid FROM users WHERE userid = NEW.userid) DO INSTEAD UPDATE users SET last_login = NEW.last_login WHERE userid = NEW.userid With this rule in place, INSERTs are changed to UPDATEs, if a userid entry already exists. No ned to patch code. Feel free to comment :-) Christian Thread online: https://www.dovecot.org/list/dovecot/2019-May/115921.html -- Rößner-Network-Solutions Karl-Bröger-Str. 10, 36304 Alsfeld Fax: +49 6631 78823409, Mobil: +49 171 9905345 USt-IdNr.: DE225643613, https://roessner.website PGP fingerprint: 658D 1342 B762 F484 2DDF 1E88 38A5 4346 D727 94E5

1 0

Recommendations on intrusion prevention/detection?
by Johannes Rohr 23 Apr '20

23 Apr '20

Dear all, what are the key strategies for intrusion prevention and detection with dovecot, apart from installing fail2ban? It is a pity that the IMAP protocol does not support 2 factor authentication, which seems to stop 90% of intrusion attempts in their tracks. Without it, if someone has obtained your password and reads your mail without modifying it, you will hardly ever notice. Is there a reasonable way of detecting and preventing logins from unusual IP ranges? Or are there other strategies you would recommend? Cheers, Johannes

10 13