- dovecot - dovecot.org

[Dovecot] IMAP bandwidth
by Martijn de Munnik 01 Jul '09

01 Jul '09

Hi, I want to calculate the bandwidth usage of the IMAP protocol. POP3 displays a message when the connection is closed about the transfered bytes. In an old mailinglist post I found this message: http://www.dovecot.org/list/dovecot/2007-March/020478.html Is this patch integrated or is there another way to calculate the bandwidth for IMAP connections? Martijn de Munnik -- YoungGuns Kasteleinenkampweg 7b 5222 AX 's-Hertogenbosch T. 073 623 56 40 F. 073 623 56 39 www.youngguns.nl KvK 18076568

3 2

Re: [Dovecot] No folders listed in felamimail
by Jonathan Knight 01 Jul '09

01 Jul '09

dovecot-request(a)dovecot.org wrote: > I thought I try and solve a long standing bug we've had with felamimail > not listing folders from our dovecot server. > Is it bad form to reply to your own postings? I've managed to find the source of the problem and apply a temporary hack to get the folders listed. I'm not sure whether it's a bug or a feature or if there is a proper fix. The issue is that our mail folder layout is still based on "elm" (hands up everyone who remembers that) and we store all the users folders in mbox format under a directory called Mail in their home directory. We've defined a namespace in dovecot called "" which knows to look there and will list all the folders. However, we have run uw-imap in the past so we have a hidden namespace that maps all the folders starting "Mail/" to the new namespace so that we didn't have to change any of the clients. Egroupware has a bunch of code that tries to guess what sort of IMAP server is on the other end based on what folders it can find. One of those checks is for "Mail" and when it finds it it assumes that's the place to go looking for folders rather than using what the Namespace command returned. I'm guessing that this was put in by someone with the same layout as we used to have with "elm" trying to overcome the lack of a configuration file in uw-imap. Our "Mail/" namespace doesn't list any folders and so felamimail can't see anything for the user. My temporary hack was to comment out all the IMAP server guessing code and that fixes the problem for us. Now I need to find out how felamimail deals with IMAP servers that can't have mail folders containing messages and subfolders (it's one or the other with dovecot using mbox) Jon.

1 0

[Dovecot] sieve vacation messages trouble
by Stéphane Cottin 30 Jun '09

30 Jun '09

Hi, sieve vacation replies are rejected by gmail with a "555 5.5.2 Syntax error". The return path is set to "<>", I think this is why this error is triggered by gmail. The rest of the vacation message seems ok. I'm using dovecot 1.1.11 (waiting for final 1.2 to upgrade) , delivering with "/usr/lib/dovecot/deliver -d email@domain" Stéphane Cottin

2 3

[Dovecot] configure dovecot to invoke pam_setcred() from the same process that accesses ~/Maildir?
by Adam Megacz 30 Jun '09

30 Jun '09

Hello. I'm wondering how one would go about configuring dovecot to invoke pam_setcred() from the same process as (or a parent process of) the process which eventually reads the user's mail off the disk. This is required for pam modules that set kernel-level credentials which are later used to access the user's mail files. In particular, I'm trying to use dovecot with pam_krb5 (which associates a ticket cache to a specific pid) and pam_afs_session (which associates tokens to a specific process authentication group -- roughly equivalent to a process and all its descendents). Thanks, - a

2 3

[Dovecot] v1.2.rc8 released
by Timo Sirainen 30 Jun '09

30 Jun '09

http://dovecot.org/releases/1.2/rc/dovecot-1.2.rc8.tar.gz http://dovecot.org/releases/1.2/rc/dovecot-1.2.rc8.tar.gz.sig Last few fixes before tomorrow's v1.2.0 release. Also this release was built in dovecot.org to make sure I can make a usable Dovecot release while not at work/home. :) - Fixed building LDAP as plugin - Fixed starting up in OS X

1 0

[Dovecot] ACLs, imap and launchd
by Axel Luttgens 30 Jun '09

30 Jun '09

I was going to experiment with ACLs when I faced a small problem. It is just sufficient to enable the acl plugin for getting the behavior described hereafter. When launching dovecot from the command line, one gets: sh-3.2# /usr/local/dovecot/sbin/dovecot -F ILoading modules from directory: /usr/local/dovecot-1.2.rc6/lib/ dovecot/imap IModule loaded: /usr/local/dovecot-1.2.rc6/lib/dovecot/imap/ lib01_acl_plugin.so IEffective uid=65534, gid=65534, home=/tmp Iacl: No acl setting - ACLs are disabled ^C In fact, a "dummy" imap process is run so as to fetch the capability (see master-settings.c); that process is run with an hardcoded uid/gid 65534. But this appears to be problematic when dovecot is started from launchd; clearly, launchd doesn't like arbitrary users, as it may be seen from system.log: org.dovecot[28382]: ^AILoading modules from directory: /usr/local/ dovecot-1.2.rc6/lib/dovecot/imap org.dovecot[28382]: ^AIModule loaded: /usr/local/dovecot-1.2.rc6/lib/ dovecot/imap/lib01_acl_plugin.so com.apple.launchd[1] (com.apple.launchd.peruser.65534[28384]): getpwuid("65534") failed com.apple.launchd[1] (com.apple.launchd.peruser.65534[28384]): PID 28383 "imap" has no account to back it! Real/effective/saved UIDs: 65534/65534/65534 com.apple.launchd[1] (com.apple.launchd.peruser.65534[28384]): Exited with exit code: 1 com.apple.launchd[1] (com.apple.launchd.peruser.65534): Throttling respawn: Will start in 10 seconds com.apple.launchd[1] (org.dovecot[28382]): Stray process with PGID equal to this dead job: PID 28383 PPID 1 imap com.apple.launchd[1] (org.dovecot[28382]): Exited abnormally: Alarm clock com.apple.launchd[1] (org.dovecot): Throttling respawn: Will start in 5 seconds com.apple.launchd[1] (com.apple.launchd.peruser.65534[28386]): getpwuid("65534") failed com.apple.launchd[1] (com.apple.launchd.peruser.65534[28386]): Exited with exit code: 1 com.apple.launchd[1] (com.apple.launchd.peruser.65534): Throttling respawn: Will start in 10 seconds ... and so on ... A workaround is to create the corresponding system user and group; launchd then doesn't complain anymore and everything seems to be working fine. But I feel somewhat uncomfortable with that... Wouldn't it be possible, for example, to consider using a system user such as "nobody" (unless I'm wrong, it should be defined on any unix flavor)? TIA, Axel sh-3.2# /usr/local/dovecot/sbin/dovecot -n # 1.2.rc6: /usr/local/etc/dovecot.conf # OS: Darwin 9.7.0 i386 protocols: pop3 imap ssl: no disable_plaintext_auth: no login_dir: /usr/local/var/run/dovecot/login login_executable(default): /usr/local/dovecot-1.2.rc6/libexec/dovecot/ imap-login login_executable(imap): /usr/local/dovecot-1.2.rc6/libexec/dovecot/ imap-login login_executable(pop3): /usr/local/dovecot-1.2.rc6/libexec/dovecot/ pop3-login first_valid_uid: 2001 last_valid_uid: 65533 mail_location: mbox:~/_mailboxes:INBOX=~/_mailboxes/inbox mail_debug: yes mbox_read_locks: flock mbox_write_locks: flock dotlock mail_executable(default): /usr/local/dovecot-1.2.rc6/libexec/dovecot/ imap mail_executable(imap): /usr/local/dovecot-1.2.rc6/libexec/dovecot/imap mail_executable(pop3): /usr/local/dovecot-1.2.rc6/libexec/dovecot/pop3 mail_plugins(default): acl mail_plugins(imap): acl mail_plugins(pop3): mail_plugin_dir(default): /usr/local/dovecot-1.2.rc6/lib/dovecot/imap mail_plugin_dir(imap): /usr/local/dovecot-1.2.rc6/lib/dovecot/imap mail_plugin_dir(pop3): /usr/local/dovecot-1.2.rc6/lib/dovecot/pop3 pop3_lock_session(default): no pop3_lock_session(imap): no pop3_lock_session(pop3): yes pop3_uidl_format(default): %08Xu%08Xv pop3_uidl_format(imap): %08Xu%08Xv pop3_uidl_format(pop3): %08Xv%08Xu auth default: debug: yes passdb: driver: pam args: * userdb: driver: passwd

2 4

Re: [Dovecot] Under POP attack - now to prevent?
by James Brown 30 Jun '09

30 Jun '09

On 05/06/2009, at 4:19 PM, James Brown wrote: > > Thanks to Curtis and others who replied. > > I managed to block the IP at our Firewall (learnt a few quirky > things about Astaro Security Gateway on the way!) > > In order to automate the process, Fail2Ban has been suggested. I > know this is getting a bit off topic, but has anyone installed in > Mac OS X 10.5.7? There is a how-to for 10.4 ( HOWTO Mac OS X Server > (10.4) - Fail2ban )- does this work unchanged in 10.5? > > Anyone managed to get Fail2Ban working on Leopard with Dovecot 1.2 > RC4? I'll answer my own question! There is a OS X Installer file at: LSA Mac OS X Ported and Developed Software | LSA Information Technology | University of Michigan Any regex experts out there that can help me set up Fail2Ban to stop this? Jun 5 11:48:20 mail dovecot[2620]: pop3-login: Aborted login (auth failed, 1 attempts): user=<audrey>, method=PLAIN, rip=85.189.169.94, lip=192.168.1.9 Jun 5 11:48:24 mail dovecot[2620]: pop3-login: Aborted login (auth failed, 1 attempts): user=<august>, method=PLAIN, rip=85.189.169.94, lip=192.168.1.9 Jun 5 11:48:24 mail dovecot[2620]: pop3-login: Aborted login (auth failed, 1 attempts): user=<autumn>, method=PLAIN, rip=85.189.169.94, lip=192.168.1.9 Jun 5 11:48:25 mail dovecot[2620]: pop3-login: Aborted login (auth failed, 1 attempts): user=<austin>, method=PLAIN, rip=85.189.169.94, lip=192.168.1.9 Jun 5 11:48:27 mail dovecot[2620]: pop3-login: Aborted login (auth failed, 1 attempts): user=<audrey>, method=PLAIN, rip=85.189.169.94, lip=192.168.1.9 Jun 5 11:48:28 mail dovecot[2620]: pop3-login: Aborted login (auth failed, 1 attempts): user=<autumn>, method=PLAIN, rip=85.189.169.94, lip=192.168.1.9 Jun 5 11:48:30 mail dovecot[2620]: pop3-login: Aborted login (auth failed, 1 attempts): user=<august>, method=PLAIN, rip=85.189.169.94, lip=192.168.1.9 Jun 5 11:48:31 mail dovecot[2620]: pop3-login: Aborted login (auth failed, 1 attempts): user=<autumn>, method=PLAIN, rip=85.189.169.94, lip=192.168.1.9 Many thanks, James.

2 1

[Dovecot] No folders listed in felamimail
by Jonathan Knight 30 Jun '09

30 Jun '09

Egroupware 1.4.004 I thought I try and solve a long standing bug we've had with felamimail not listing folders from our dovecot server. Watching dovecot's packet dumps I'm seeing dovecot do a namespace call and the a list call. Felamimail does a namespace and gets back * NAMESPACE (("" "/")) NIL NIL which is how I've configured dovecot to keep the client configuration very simple. Now Felamimail does a LIST "" "" which gets no folders returned and is obviously why it won't show anything in the felamimail display. I was expecting felamimail to do something more like: LIST "" "%" or LIST "" "*" Is there something I need to configure to make felamimail happy with our dovecot configuration? We use dovecot with outlook express, thunderbird (1,2,3), Mozilla, squirrelmail, iPod, iPhone and symbian with no issues so I'm tending towards felamimail being the source of the problem. Jon.

1 0

[Dovecot] Location of sieve_global_dir setting
by Rainer Frey 30 Jun '09

30 Jun '09

Hi, I'm a bit confused by the Wiki. Do the settings "sieve_dir" and "sieve_global_dir" belong to the lda or the plugin section (Dovecot 1.1.11)? Thanks Rainer

2 1

[Dovecot] SSL / TLS
by Carlos Williams 30 Jun '09

30 Jun '09

I am running Postfix and Dovecot on my mail server. I am required now to have SSL/TLS on my mail server. I did check and found out that I have a SSL certificate with Verisign issued to my mail servers FQDN. Now my question is when reading the Dovecot Wiki, I noticed it said that it is not common to use SSL but rather TLS on most mail servers. Even though SSL will work, which should I use on my server? We already have a purchased SSL certificate but does that really matter? Should I simply just revoke that certificate & use TLS instead? So when I read this link: http://wiki.dovecot.org/SSL/DovecotConfiguration Is it talking about a actual SSL certificate or TLS? Thanks for any clarification! - Carlos

8 12