- dovecot - dovecot.org

[Dovecot] [stava@telcotec.se: [stava: antispam problem]]
by Lars Stavholm 24 Oct '10

24 Oct '10

Hi All, I've built the dovecot-antispam-plugin from hg.dovecot.org and installed it. I've turned on debugging with "mail_debug = yes" in dovecot.conf and restarted dovecot. However, the antispam plugin module gets loaded by dovecot, but then nothing, i.e. when moving mail from Inbox to Spam and vice versa, I see nothing. How do I get debug messages from the dovecot-antispam-plugin? There's a few i_debug() statements in there (and I added a few myself), but I don't see any of these messages. # dovecot -n # 2.0.6: /etc/dovecot/dovecot.conf # OS: Linux 2.6.34.7-0.4-desktop x86_64 openSUSE 11.3 (x86_64) auth_debug = yes auth_debug_passwords = yes auth_mechanisms = plain login auth_username_format = %Lu auth_verbose = yes base_dir = /var/run/dovecot disable_plaintext_auth = no dotlock_use_excl = yes listen = * mail_access_groups = mail mail_debug = yes mail_full_filesystem_access = yes mail_location = maildir:~/Mail:LAYOUT=fs mail_plugins = autocreate quota zlib managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date passdb { args = /etc/dovecot/ldap.conf driver = ldap } plugin { antispam_backend = dspam antispam_dspam_binary = /usr/sbin/dspam antispam_signature = X-DSPAM-Signature antispam_spam = Spam antispam_trash = Trash autocreate = Spam autocreate2 = Sent autocreate3 = Trash autosubscribe = Spam autosubscribe2 = Sent autosubscribe3 = Trash quota = fs:disk quota quota2 = fs:user quota } protocols = imap ssl = no userdb { args = /etc/dovecot/ldap.conf driver = ldap } verbose_ssl = yes protocol imap { mail_plugins = autocreate quota zlib imap_quota imap_zlib antispam } Any help appreciated /Lars Stavholm

2 2

[Dovecot] minimize mbox mdbox fragmentation
by Stan Hoeppner 22 Oct '10

22 Oct '10

Hi Timo, Any chance the mbox/mdbox writer code could be modified to do physical preallocation on files to help avoid file(system) fragmentation? Constantly appending a file is the prime recipe for causing fragmentation, and mbox is notorious for this--not a fault of Dovecot but the nature of the mbox beast. Obviously maildir doesn't have such a problem, but some (many?) of us still prefer mbox for many reasons, fast full body search being one, portability being another. mdbox file fragmentation could benefit from such a change as well. I was having a discussion on the XFS list about this, trying to tweak XFS mount options to mitigate the fragmentation effects. Alas, there is no way to do this purely at the filesystem level. From Dave Chinner, one of the lead XFS devs: "What you want is _physical_ preallocation, not speculative preallocation. i.e. look up XFS_IOC_RESVSP or FIEMAP so your application does _permanent_ preallocate past EOF. Alternatively, the filesystem will avoid the truncation on close() if the file has the APPEND attribute set and the application is writing via O_APPEND... The filesystem cannot do everything for you. Sometimes the application has to help...." How great would the effort need to be to implement something like this? Would the return on investment be sufficient to justify doing this, in your eyes? -- Stan

6 15

[Dovecot] Correct permissions for base_dir??
by Odhiambo Washington 21 Oct '10

21 Oct '10

I am having problems with dovecot regarding base_dir: I have :: base_dir = /opt/dovecot2/var/run/ For some reason, I have to set permissions to(chmod -R 1777 /opt/dovecot2/var/) for dovecot to run properly, but when I start dovecot, I see this: [root@gw] /opt/dovecot2/etc/dovecot# less /var/log/dovecot/dovecot.log Oct 21 16:15:27 master: Warning: Killed with signal 15 (by pid=72634 uid=0 code=kill) Oct 21 16:15:27 master: Warning: Corrected permissions for login directory /opt/dovecot2/var/run/login Oct 21 16:15:27 master: Warning: Corrected permissions for empty directory /opt/dovecot2/var/run/empty Oct 21 16:15:27 master: Info: Dovecot v2.0.5 (38e726a2b3b9) starting up Now, when I send a test mail: [root@gw] /usr/home/wash# less /var/log/dovecot/dovecot.log Oct 21 16:15:27 master: Warning: Killed with signal 15 (by pid=72634 uid=0 code=kill) Oct 21 16:15:27 master: Warning: Corrected permissions for login directory /opt/dovecot2/var/run/login Oct 21 16:15:27 master: Warning: Corrected permissions for empty directory /opt/dovecot2/var/run/empty Oct 21 16:15:27 master: Info: Dovecot v2.0.5 (38e726a2b3b9) starting up Oct 21 16:33:18 lda: Debug: Loading modules from directory: /opt/dovecot2/lib/dovecot Oct 21 16:33:18 lda: Debug: Module loaded: /opt/dovecot2/lib/dovecot/lib10_quota_plugin.so Oct 21 16:33:18 lda: Error: userdb lookup: connect(/opt/dovecot2/var/run/auth-userdb) failed: Permission denied (euid=26(mailnull) egid=26(mailnull) missing +r perm: /opt/dovecot2/var/run/auth-userdb, euid is not dir owner) Oct 21 16:33:18 lda: Fatal: Internal error occurred. Refer to server log for more information. My doveconf -n output: # OS: FreeBSD 8.1-RELEASE amd64 auth_cache_negative_ttl = 1 days auth_cache_size = 10 M auth_mechanisms = plain digest-md5 auth_socket_path = /opt/dovecot2/var/run/auth-userdb auth_verbose = yes base_dir = /opt/dovecot2/var/run/ default_login_user = dovecot disable_plaintext_auth = no first_valid_gid = 26 first_valid_uid = 26 log_path = /var/log/dovecot/dovecot.log login_greeting = Dovecot-2.0-sis ready. mail_attachment_dir = ~/mdbox/attachments mail_debug = yes mail_location = mdbox:~/mdbox mail_plugins = quota mail_privileged_group = mailnull passdb { args = /opt/dovecot2/etc/dovecot/dovecot-sql.conf driver = sql } plugin { mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size } postmaster_address = postmaster(a)thisuglytest.name service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } service_count = 1 } service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 } } ssl_cert = </etc/ssl/dovecot/cert.pem ssl_key = </etc/ssl/dovecot/key.pem userdb { args = /opt/dovecot2/etc/dovecot/dovecot-sql.conf driver = sql } protocol imap { imap_client_workarounds = delay-newmail tb-extra-mailbox-sep mail_plugins = quota } protocol pop3 { mail_plugins = quota pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } And my full doveconf output is at: http://bit.ly/c6vLNw I am not sure what I am getting wrong, really. Thanking everyone in advance. -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254733744121/+254722743223 _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ Damn!!

2 2

Re: [Dovecot] Segfault in libdovecot-sieve
by Jerry 21 Oct '10

21 Oct '10

On Thu, 21 Oct 2010 18:20:51 +0200 fakessh(a)fakessh.eu articulated: > it is the webmail problem or postfix problem Or something else; or not! -- Jerry ✌ Dovecot.user(a)seibercom.net Disclaimer: off-list followups get on-list replies or get ignored. Please do not ignore the Reply-To header. __________________________________________________________________ A: Because it fouls the order in which people normally read text. Q: Why is top-posting such a bad thing? A: Top-posting. Q: What is the most annoying thing on usenet and in e-mail? TOPIC: Posting Etiquette

1 0

[Dovecot] Question about Client Certificates
by William Gallafent 21 Oct '10

21 Oct '10

Hi, I have a simple dovecot installation, version 1.2.12 of ubuntu 10.10. I also have a straightforward newbie question! I've hunted in the wiki and on the wider web, but not yet found a solution. Current status: I have successfully configured imap with tls, accessed on port 993, and for security require a valid client certificate to be presented, using ssl_require_client_cert and ssl_verify_client_cert. This is all working fine! Now I want to add a SquirrelMail service to the same server. This will connect using IMAP over port 143, without TLS. My question is: how do I achieve this! At the moment, I simply get the following in the logs: Aborted login (cert required, client didn't start TLS): method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured If I comment out the "ssl_require_client_cert = yes" in the auth default section, SquirrelMail then works fine … but I can also connect remotely without presenting a valid certificate, which is no good! At the moment I have a single auth section in dovecot.conf, the "auth default { ... }" section. I wondered if I need a second section, which does not have the ssl requirement inside it. Is that right? If so, how do I link one auth section to the imaps service, and the other to the imap service (listening only on localhost)? In other words, I want "ssl_require_client_cert = yes" for remote connections (on port 993), but "ssl_require_client_cert = no" for local connections using non-tls imap on port 143. Is this possible? Hope that late-night explanation makes sense, and hope somebody can point me in the right direction, thanks in advance! -- Bill Gallafent.

3 3

[Dovecot] bug with null pointer
by Tobias Daucher 21 Oct '10

21 Oct '10

Hi, we found a serious bug while testing our migration scripts. in Solaris (or other system 5) the user variable is not always set. Dsync is not very happy about that and crashes with an segmentation fault. After hours of debugging and TWOE simple lines # USER=$LOGNAME # export USER the problem was solved! The null pointer was found - so i will go home now an drink a bottle of "Erdinger"... hope this hint helps for development - and we hope that we don't find more of these bugs :) bye Tobi -- Dr. Nagler & Company GmbH Hauptstraße 9 92253 Schnaittenbach Tel : 09622-7197-38 Fax : 09622-7197-50 Web : http://www.nagler-company.com E-Mail : tobias.daucher(a)nagler-company.com Hauptsitz: Schnaittenbach Handelregister: Amberg HRB 4653 Gerichtsstand: Amberg Steuernummer: 201/118/51825 USt.-ID-Nummer: DE 273143997 Geschäftsführer: Dr. Martin Nagler, Dr. Dr. Karl-Kuno Kunze

2 1

[Dovecot] allow_nets and local sockets
by Oliver Eales 21 Oct '10

21 Oct '10

Hello, i am running dovevot 2.0.5 using ldap authentication with the allow_nets paramter to limit access to some local networks. The problem is, when i want to use the local lmtp socket from postfix *virtual_transport = lmtp:unix:private/dovecot-lmtp * i get the follwing error: *Oct 21 15:48:03 auth: Info: passdb(username): allow_nets check failed: Remote IP not known *When using the TCP socket with postfix *virtual_transport = lmtp:localhost:30025 *it is working. (i have 127.0.0.0/8 in the allow_nets list) Is there a way, other than using two different config sets to get this working together ? Something like disabling the address lookup on local passdb sockets ? Regards, Oliver

2 1

Re: [Dovecot] anti-spam+anti-malware suggestions
by Paweł Madej 21 Oct '10

21 Oct '10

On Thu, 21 Oct 2010 11:37:40 -0200, Fabricio Archanjo <farchanjo(a)gmail.com> wrote: > Does someone run dspam or just me?? > I like very much this antispam solution. > I use dspam + sqlgrey + policyd-weight to prevent spam. 60% rejects are invalid recipient drop 30% nonreturning from sqlgrey 10% goes to dspam with autolearning. -- Pozdrawiam Paweł Madej

1 0

Re: [Dovecot] Error or bug?
by Daniel Luttermann 21 Oct '10

21 Oct '10

Robby Gunawan wrote on 10/21/2010: > how do I install / update to my system? Normally you should patch the file(s) in the source package. You can compile Dovecot from the official sources (apply the patch before), download/install Dovecot from Mercurial (hg.dovecot.org) or open a bugreport for the package maintainer so that the bug can be fixed for your distribution. -- Daniel

1 0

[Dovecot] Error or bug?
by Robby Gunawan 21 Oct '10

21 Oct '10

Dear all, Please help me, I just change from vm-pop3d to dovecot, installed from rpm that provided by dovecot.org, I got this error for random email user Command died with signal 11: "/usr/libexec/dovecot/deliver" Below is my dovecot.conf # 2.0.5: /etc/dovecot/dovecot.conf # OS: Linux 2.6.9-34.ELsmp i686 Red Hat Enterprise Linux release 4 ext3 debug_log_path = /var/log/dovecot.log disable_plaintext_auth = no first_valid_uid = 1 info_log_path = /var/log/dovecot-info.log listen = * mail_location = maildir:/var/spool/mail/%u mbox_write_locks = fcntl passdb { driver = pam } protocols = pop3 service pop3-login { service_count = 0 vsz_limit = 96 M } service pop3 { process_limit = 512 } ssl = no ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } this is my postconf -n 2bounce_notice_recipient = netadmin(a)mydomain.com alias_maps = hash:/etc/aliases bounce_queue_lifetime = 12h bounce_size_limit = 10485760 broken_sasl_auth_clients = yes command_directory = /usr/sbin command_time_limit = 3h config_directory = /etc/postfix daemon_directory = /usr/libexec/postfix debug_peer_level = 2 default_destination_concurrency_limit = 50 default_privs = mail delay_warning_time = 1 header_checks = regexp:/etc/postfix/header_checks home_mailbox = Maildir/ html_directory = no inet_interfaces = all initial_destination_concurrency = 100 mail_owner = postfix mail_spool_directory = /var/spool/mail mailbox_command = /usr/libexec/dovecot/deliver mailbox_delivery_lock = dotlock mailbox_size_limit = 1048576000 mailq_path = /usr/bin/mailq manpage_directory = /usr/share/man maximal_backoff_time = 30s maximal_queue_lifetime = 12h message_size_limit = 8388608 minimal_backoff_time = 10s mydestination = localhost.localdomain, localhost, $mydomain, $myhostname, mail.asiatex.co.id, asiatex.co.id mydomain = mydomain.com myhostname = mail.mydomain.com mynetworks = 127.0.0.0/8, xxx.xxx.xxx.xxx/32 mynetworks_style = subnet myorigin = $mydomain newaliases_path = /usr/bin/newaliases notify_classes = 2bounce queue_directory = /var/spool/postfix queue_run_delay = 1m readme_directory = no sample_directory = /etc/postfix sendmail_path = /usr/sbin/sendmail setgid_group = postdrop smtp_sasl_auth_enable = yes smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd smtp_sasl_security_options = noanonymous permit_mynetworks, check_helo_access hash:/etc/postfix/helo_access,permit check_client_access hash:/etc/postfix/access, permit_sasl_authenticated, permit_mynetworks, reject_unauth_destination, check_policy_service inet:127.0.0.1:11026, reject_unknown_sender_domain, reject_unknown_recipient_domain, reject_unauth_pipelining smtp_sender_dependent_authentication = yes smtpd_banner = mydomain eMail Server. smtpd_recipient_restrictions = check_sender_access hash:/etc/postfix/restrictedsenders, permit_sasl_authenticated, permit_mynetworks, reject_unauth_destination, check_policy_service inet:127.0.0.1:11026, reject_unknown_sender_domain, reject_unknown_recipient_domain, reject_unauth_pipelining, reject_rbl_client cbl.abuseat.org, reject_rbl_client zen.spamhaus.org smtpd_reject_unlisted_sender = yes smtpd_restriction_classes = localonlyclass smtpd_sasl_auth_enable = yes smtpd_sasl_authenticated_header = yes smtpd_sasl_local_domain = $myhostname smtpd_sasl_security_options = noanonymous smtpd_sender_restrictions = hash:/etc/postfix/sender_access unknown_local_recipient_reject_code = 550 -- Thanks, Robby Gunawan S

2 1