- dovecot - dovecot.org

[Dovecot] Encryption solution for messages at rest
by Alan Brown 29 Oct '13

29 Oct '13

> Date: Tue, 29 Oct 2013 08:54:04 +0100 > From: Robert Schetterer <rs(a)sys4.de> > To: dovecot(a)dovecot.org > Subject: Re: [Dovecot] Encryption solution for messages at rest > Message-ID: <526F699C.9080402(a)sys4.de> > Content-Type: text/plain; charset=ISO-8859-1 > > > you shouldnt host mail/imap services on the same servers with massive > http hosting, You shouldn't host anything else on a webserver FULLSTOP. Webservers are best treated as "disposable" and should be heavily sandboxed. Any resources they can use should be vetted and ideally set as "read only" Inbound external access should be firewalled down to the webserver ports and OUTBOUND traffic should be firewalled too (If it has no business initiating external connections then block all SYNs), in order to stop it becoming a DDoS zombie. It's foolish (at best) to have mail servers running on a webserver, because if it's compromised it can immediately be used as a spam engine without much further effort. At least if it has to hand mail off to another mailserver you have a chance to run outbound filtering on the emitted mail without worrying about that being compromised too.

1 0

[Dovecot] recipient_delimiter deux
by LuKreme 29 Oct '13

29 Oct '13

OK, I've been banging my head on why my procmail setup for virtual users is no longer working (difficult to test, since enabling it breaks live user's mail). There are only a few virtual users who have any sort of filters in place anyway (the heavy procmail users are local, not virtual), and they are fairly simple, so I think I can recreate them with sieve. I think I have everything I need for sieve to work, but now what? The first thing I want to do is have sieve process recipient_delimiter into a separate mailbox (creating it, if needed). Googling just for example sieve scripts comes up empty (well, directing to the dovecot wiki which at least on the links that come up, does not have sample scripts). so, foo+bar(a)example.com will go into foo's mailstore in the folder .bar/new/ On 27 Sep 2013, at 00:24 , Steffen Kaiser <skdovecot(a)smail.inf.fh-brs.de> wrote: > Dovecot LDA uses the "-m" option and only lda_mailbox_autocreate and lda_mailbox_autosubscribe, no need for recipient_delimiter to override the default mailbox. Which I still don't understand. recipient_delimiter = + is the default, so I shouldn't need to set it in my confs, I just need to setup a sieve recipe (is that what it is called? script?) that will process these messages, right? What would that look like? I have to setup the SQL users so that LMTP or LDA is used for deliver, but I want that to apply only to the sql users. Something like this, maybe? userdb { args = /etc/dovecot/dovecot-sql.conf.ext default_fields = uid=vpopmail gid=vchkpw mail_location=/usr/local/virtual/%u mail=maildir:/usr/local/virtual/%u sieve=/var/sieve/%u.sieve protocol_lda=$mailplugins sieve driver = sql } I'm sure that protoco_lda isn't the right syntax though. If I set sieve=/var/sieve/%u.sieve as above would users still be able to use sieve-manage to manage their own sieve files? And what MUAs support this? If I left that out, do I put ~/.dovecot.sieve in with the other mailboxes and {cur,new,tmp} and the index files, or will there be issues? If I put a dovecot.sieve file there will it just be seen, processed, and work? (SQL user's $HOME is their maildir) $ doveconf -n # 2.2.5: /usr/local/etc/dovecot/dovecot.conf # OS: FreeBSD 9.1-RELEASE i386 auth_mechanisms = PLAIN LOGIN disable_plaintext_auth = no first_valid_uid = 89 login_log_format_elements = user=<%u> %r %m %c mail_location = maildir:~/Maildir mail_max_userip_connections = 90 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox NotJunk { auto = subscribe } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocols = imap sieve service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } } service imap-login { inet_listener imaps { port = 993 ssl = yes } } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = passwd } userdb { args = /etc/dovecot/dovecot-sql.conf.ext default_fields = uid=vpopmail gid=vchkpw mail_location=/usr/local/virtual/%u mail=maildir:/usr/local/virtual/%u driver = sql } -- 'He's mad, isn't he?' 'No, mad's when you froth at the mouth,' said Gaspode. ' He's insane. That's when you froth at the brain.'

2 4

[Dovecot] pigeonhole sources no more available
by me＠electronico.nc 29 Oct '13

29 Oct '13

Hi all, Please excuse me for this message but I can't find the pigeonhole sources available anymore. This page : http://pigeonhole.dovecot.org/download.html Points to (for latest sources) : http://www.rename-it.nl/dovecot/2.2/dovecot-2.2-pigeonhole-0.4.2.tar.gz And it seems that : www.rename-it.nl is now : http://www.medicalbits.nl So we get 404 error ... Could someone point us the to right URL and, maybe, update pigeonhole.dovecot.org ? Thanks in advance for your time. Nicolas

5 4

[Dovecot] When imapc can't connect to remote IMAP prevents user login (and blocks LDA)
by Marcin Mirosław 28 Oct '13

28 Oct '13

Hi! I'm using dovecot 2.1.12-r1. When remote imap server rejects connections then I can't login into account and MTA can't deliver emails to maildir also. I'm attaching snippets of logs: 2012-12-15T18:05:43.072594+01:00 meteor dovecot: imap-login: Login: user=<marcin(a)mejor.pl>, method=PLAIN, rip=2001:470:1f0b:1ab3:50af:bef4:6918:78ad, lip=2001:470:1f15:1b61::2, mpid=32533, TLS, session=<T0GGKOfQCQAgAQRwHwsas1CvvvRpGHit> 2012-12-15T18:05:43.442598+01:00 meteor dovecot: imap(marcin(a)mejor.pl) <T0GGKOfQCQAgAQRwHwsas1CvvvRpGHit>: Error: imapc(imap.wp.pl:143): Server disconnected: Connection reset by peer 2012-12-15T18:05:43.442598+01:00 meteor dovecot: imap(marcin(a)mejor.pl) <T0GGKOfQCQAgAQRwHwsas1CvvvRpGHit>: Error: imapc(imap.wp.pl:143): Authentication failed: Disconnected from server 2012-12-15T18:05:43.442598+01:00 meteor dovecot: imap(marcin(a)mejor.pl) <T0GGKOfQCQAgAQRwHwsas1CvvvRpGHit>: Error: imapc: Command failed: Disconnected from server 2012-12-15T18:05:43.442598+01:00 meteor dovecot: imap(marcin(a)mejor.pl) <T0GGKOfQCQAgAQRwHwsas1CvvvRpGHit>: Error: user marcin(a)mejor.pl: Initialization failed: Namespace 'xxx-wp-pl.': imapc: LIST failed: Internal error occurred. Refer to server log for more information. [2012-12-15 18:05:43] 2012-12-15T18:05:43.442598+01:00 meteor dovecot: imap(marcin(a)mejor.pl) <T0GGKOfQCQAgAQRwHwsas1CvvvRpGHit>: Error: Invalid user settings. Refer to server log for more information. And snippet when LDA tries to deliver email: 2012-12-15T18:00:54.689877+01:00 meteor dovecot: lda(marcin(a)mejor.pl) <>: Error: imapc(imap.wp.pl:143): Server disconnected: Connection reset by peer 2012-12-15T18:00:54.689877+01:00 meteor dovecot: lda(marcin(a)mejor.pl) <>: Error: imapc(imap.wp.pl:143): Authentication failed: Disconnected from server 2012-12-15T18:00:54.689877+01:00 meteor dovecot: lda(marcin(a)mejor.pl) <>: Error: imapc: Command failed: Disconnected from server 2012-12-15T18:00:54.689877+01:00 meteor dovecot: lda(marcin(a)mejor.pl) <>: Error: user marcin(a)mejor.pl: Initialization failed: Namespace 'xxx-wp-pl.': imapc: LIST failed: Internal error occurred. Refer to server log for more information. [2012-12-15 18:00:54] 2012-12-15T18:00:54.689877+01:00 meteor dovecot: lda(marcin(a)mejor.pl) <>: Fatal: Invalid user settings. Refer to server log for more information. I'd like to ask is this behavior correct? Thanks, Marcin doveconf -n: # 2.1.12: /etc/dovecot/dovecot.conf # OS: Linux 3.6.8-hardened x86_64 Gentoo Base System release 2.1 auth_cache_size = 1 k auth_mechanisms = login digest-md5 cram-md5 plain deliver_log_format = msgid=%m: from=%f: phys=%p: virt=%w %$ dict { quota = pgsql:/etc/dovecot/dovecot-dict-sql.conf.ext } first_valid_uid = 8 last_valid_uid = 8 lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes mail_attachment_dir = /dane/domeny/zalaczniki mail_attachment_min_size = 10000 k mail_cache_min_mail_count = 20 mail_gid = mail mail_log_prefix = "%s(%u) <%{session}>: " mail_plugins = autocreate quota notify mail_log stats zlib mail_privileged_group = mail mail_uid = mail maildir_stat_dirs = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy incl ude variables body enotify environment mailbox date ihave mdbox_preallocate_space = yes mdbox_rotate_interval = 60 days mdbox_rotate_size = 50 M namespace inbox { inbox = yes list = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = . subscriptions = yes } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { autocreate = Trash autocreate2 = Spam autocreate3 = Sent autocreate4 = Drafts autosubscribe = Trash autosubscribe2 = Spam autosubscribe3 = Sent autosubscribe4 = Drafts quota = dict:User quota::proxy::quota quota_exceeded_message = Quota exceeded / Skrzynka odbiorcy jest przepelniona, wiadomosc nie zostala dostarczona sieve = ~/.dovecot.sieve sieve_dir = ~/sieve stats_command_min_time = 1 mins stats_domain_min_time = 12 hours stats_ip_min_time = 12 hours stats_memory_limit = 1M stats_refresh = 30 s stats_session_min_time = 15 mins stats_track_cmds = yes stats_user_min_time = 1 hours zlib_save = gz } postmaster_address = postmaster(a)mejor.pl protocols = imap pop3 sieve service auth { unix_listener auth-userdb { group = mail mode = 0660 user = root } } service dict { unix_listener dict { user = mail } } service stats { fifo_listener stats-mail { mode = 0600 user = mail } } ssl_cert = </etc/ssl/gwiazdka.mejor.pl.pem ssl_key = </etc/ssl/gwiazdka.mejor.pl.pem userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } verbose_proctitle = yes protocol lda { mail_plugins = autocreate quota notify mail_log stats zlib sieve } protocol imap { mail_max_userip_connections = 25 mail_plugins = autocreate quota notify mail_log stats zlib imap_quota imap_stats imap_zlib }

2 5

[Dovecot] Dovecot replication - I'm stuck
by IT geek 31 28 Oct '13

28 Oct '13

Hi, I've been following the wiki document at http://wiki2.dovecot.org/Replication, but I've become stuck. I'm running version 2.1.3 on NetBSD 5.2 (v2.2+ isn't available as a package yet, and compiling my own is well outside my wheelhouse). I have a couple of questions: The wiki page keeps referring to "vmail". Is this a just system user I need to create? Presumably on both Dovecot boxes? If I don't use virtual users, do I need this? Here is my dovecot -n: # 2.1.3: /usr/pkg/etc/dovecot/dovecot.conf # OS: NetBSD 5.2 cobalt auth_mechanisms = plain login dsync_remote_cmd = ssh -l%{login} %{host} doveadm dsync-server -u%u listen = 192.168.1.1 login_greeting = Go on then, let's have it... mail_location = mbox:~/mail:INBOX=/var/mail/%u mail_plugins = " notify replication" passdb { driver = passwd } plugin { mail_replica = remote:vmail@server2.mydomain.com replication_full_sync_interval = 1 hours } protocols = imap service aggregator { fifo_listener replication-notify-fifo { user = vmail } unix_listener replication-notify { user = vmail } } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } user = root } service imap-login { inet_listener imap { port = 0 } } service replicator { process_min_avail = 1 unix_listener replicator-doveadm { mode = 0600 } } ssl_cert = </etc/openssl/certs/mail.mydomain.com.crt ssl_key = </etc/openssl/private/mail.mydomain.com.key userdb { driver = passwd } protocol lda { postmaster_address = postmaster(a)mydomain.com } Any help would be greatly appreciated, as I'd really love to get this working. Thanks, -Mark

3 4

Re: [Dovecot] Dbox group file permissions
by Chris Lasater 28 Oct '13

28 Oct '13

Just in case someone else has the same problem, I had to change the following two variables mail_home = /mnt/home/imapd/%d/%n mail_location = dbox:/mnt/home/imapd/%d/%n to mail_home = /mnt/home/imapd/%d/%n mail_location = dbox:~/ "When mail_location begins with%h or~/, its permissions are copied from the first existing parent directory if it has setgid-bit set. This isn't done when the path contains any other %variables."

1 0

[Dovecot] Blocking certain hostnames/clients
by Charles Marcus 28 Oct '13

28 Oct '13

Hello, As a result of learning of the new 'Intro' App introduced by LinkedIn, and discussing how to block SMTP access to my postfix server from these clients, I'm now interested in doing the same for dovecot. Bottom line desire is to avoid scraping/hijacking email stored on my dovecot server by any client other than a users client. This includes Intro (so, LinkedIn), Blackberry, GMail, Outlook, etc. The boss has expressed the desire to NOT block all email from them, just disallow any of their clients from AUTH'ing (either SMTP or IMAP/POP). I'd be interested if anyone has any kind of database of hostnames/IP blocks of the freemailers out there that support adding 3rd party accounts, especially ones supporting IMAP. Anyway, article raising the concern found here: http://www.bishopfox.com/blog/2013/10/linkedin-intro/ "LinkedIn released a new product today called Intro. They call it ?doing the impossible?, but some might call it ?hijacking email?. Why do we say this? Consider the following: Intro reconfigures your iOS device (e.g. iPhone, iPad) so that all of your emails go through LinkedIn?s servers. You read that right. Once you install the Intro app, all of your emails, both sent and received, are transmitted via LinkedIn?s servers. LinkedIn is forcing all your IMAP and SMTP data through their own servers and then analyzing and scraping your emails for data pertaining to?whatever they feel like." -- Best regards, */Charles/*

3 2

[Dovecot] Which MTA for a personal-use dovecot instance?
by Dan Langille 27 Oct '13

27 Oct '13

I'm planning to deploy a personal dovecot IMAP server (i.e. I am the only user) in a FreeBSD jail. At present, I have IMAP deployed on the same host as one of my mail servers, which is running Postfix. I do like Postfix, but it seems to be a bit overkill for this particular situation. All my incoming MX are provided by Google. They handle the incoming mail and forward to my private MX, and from there the mail for me goes into my ~/Maildir. With the move to IMAP in a jail, I need to get the mail from my private MX into that jail. All mail being sent to that jail will be destined for my ~/Maildir, with some massaging via procmail. Given that I've just started using mail/nullmailer, I was wondering if there was something simple that I could use. I was planning to use postfix, require TLS, lock things down tightly. But I'm open to suggestions for something simple. -- Dan Langille - http://langille.org/

2 2

[Dovecot] fts-solr indexer-worker connects to wrong solr host dovecot-2.2.4
by Richard Platel 26 Oct '13

26 Oct '13

Hello. We're setting up fts solr and want to have the solr server host be set per-user via UserDB. It looks like if a user connects and fts indexes mail, and then another user connects and indexes mail, indexer-worker is connecting to the first user's fts host: User1, hammer(a)rp-auth-test.com connects, does a SEARCH for the first time, indexer-worker gets UserDB settings and correctly indexes mail on ftsvs01: [...] auth-worker(2195): Debug: dict(hammer(a)rp-auth-test.com): lookup shared/userdb/hammer(a)rp-auth-test.com auth-worker(2195): Debug: dict(hammer(a)rp-auth-test.com): result: {"uid":"8","fts":"solr","quota_rule4":"Spam:ignore","_session":"talk15_590ec6d100042","quota_rule3":"Trash:ignore","quota_rule2":"*:messages=2684354","quota_rule":"*:storage=5242880k","mail":"maildir:/mail/mailstore01/215/573/hammer@rp-auth-test.com/:INDEX=/mail/index01/215/573/hammer@rp-auth-test.com/","fts_solr":"debug url=http://ftsvs01:8080/solr/","gid":"8"} auth: Debug: userdb out: USER 1 hammer(a)rp-auth-test.com uid=8 fts=solr quota_rule4=Spam:ignore _session=talk15_590ec6d100042 quota_rule3=Trash:ignore quota_rule2=*:messages=2684354 quota_rule=*:storage=5242880k mail=maildir:/mail/mailstore01/215/573/hammer@rp-auth-test.com/:INDEX=/mail/index01/215/573/hammer@rp-auth-test.com/ fts_solr=debug url=http://ftsvs01:8080/solr/ gid=8 indexer-worker: Debug: auth input: hammer(a)rp-auth-test.com uid=8 fts=solr quota_rule4=Spam:ignore _session=talk15_590ec6d100042 quota_rule3=Trash:ignore quota_rule2=*:messages=2684354 quota_rule=*:storage=5242880k mail=maildir:/mail/mailstore01/215/573/hammer@rp-auth-test.com/:INDEX=/mail/index01/215/573/hammer@rp-auth-test.com/ fts_solr=debug url=http://ftsvs01:8080/solr/ gid=8 indexer-worker: Debug: Added userdb setting: plugin/_session=talk15_590ec6d100042 indexer-worker: Debug: Added userdb setting: plugin/fts=solr indexer-worker: Debug: Added userdb setting: plugin/fts_solr=debug url=http://ftsvs01:8080/solr/ indexer-worker: Debug: Added userdb setting: mail=maildir:/mail/mailstore01/215/573/hammer@rp-auth-test.com/:INDEX=/mail/index01/215/573/ha mmer(a)rp-auth-test.com/ indexer-worker: Debug: Added userdb setting: plugin/quota_rule=*:storage=5242880k indexer-worker: Debug: Added userdb setting: plugin/quota_rule2=*:messages=2684354 indexer-worker: Debug: Added userdb setting: plugin/quota_rule3=Trash:ignore indexer-worker: Debug: Added userdb setting: plugin/quota_rule4=Spam:ignore indexer-worker(hammer(a)rp-auth-test.com): Debug: Effective uid=8, gid=8, home= indexer-worker(hammer(a)rp-auth-test.com): Debug: Namespace inbox: type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes, subscriptions =yes location=maildir:/mail/mailstore01/215/573/hammer@rp-auth-test.com/:INDEX=/mail/index01/215/573/hammer@rp-auth-test.com/ indexer-worker(hammer(a)rp-auth-test.com): Debug: maildir++: root=/mail/mailstore01/215/573/hammer(a)rp-auth-test.com, index=/mail/index01/215/ 573/hammer(a)rp-auth-test.com, indexpvt=, control=, inbox=/mail/mailstore01/215/573/hammer(a)rp-auth-test.com, alt= indexer-worker(hammer(a)rp-auth-test.com): Debug: Ignoring unknown cache field: pop3.order indexer-worker(hammer(a)rp-auth-test.com): Debug: Ignoring unknown cache field: binary.parts indexer-worker(hammer(a)rp-auth-test.com): Warning: Created dotlock file's timestamp is different than current time (1380294685 vs 1380294612 ): /mail/index01/215/573/hammer(a)rp-auth-test.com/.INBOX/dovecot.index.log indexer-worker(hammer(a)rp-auth-test.com): Debug: http-client: request [POST http://ftsvs01:8080/solr/update] Submitted [...] User1 index finishes and imap searches against ftsvs01 [...] imap(hammer(a)rp-auth-test.com): Debug: http-client: request [GET http://ftsvs01:8080/solr/select?fl=uid,score&rows=2&sort=uid+asc&q=(hdr:%22…] Submitted [...] User2 grant(a)rp-auth-test.com connects and does a SEARCH, index worker gets gets UserDB settings, including fts host ftsvs02, but connects to ftsvs01 (also note index-worker initially shows wrong user in loglines) [...] auth-worker(2195): Debug: dict(grant(a)rp-auth-test.com): lookup shared/userdb/grant(a)rp-auth-test.com auth-worker(2195): Debug: dict(grant(a)rp-auth-test.com): result: {"uid":"8","fts":"solr","quota_rule4":"Spam:ignore","_session":"cow80_609fed7600001","quota_rule3":"Trash:ignore","quota_rule2":"*:messages=2684354","quota_rule":"*:storage=5242880k","mail":"maildir:/mail/mailstore01/812/023/grant@rp-auth-test.com/:INDEX=/mail/index01/812/023/grant@rp-auth-test.com/","fts_solr":"debug url=http://ftsvs02:8080/solr/","gid":"8"} auth: Debug: userdb out: USER 2 grant(a)rp-auth-test.com uid=8 fts=solr quota_rule4=Spam:ignore _session=cow80_609fed7600001 quota_rule3=Trash:ignore quota_rule2=*:messages=2684354 quota_rule=*:storage=5242880k mail=maildir:/mail/mailstore01/812/023/grant@rp-auth-test.com/:INDEX=/mail/index01/812/023/grant@rp-auth-test.com/ fts_solr=debug url=http://ftsvs02:8080/solr/ gid=8 indexer-worker(hammer(a)rp-auth-test.com): Debug: auth input: grant(a)rp-auth-test.com uid=8 fts=solr quota_rule4=Spam:ignore _session=cow80_609fed7600001 quota_rule3=Trash:ignore quota_rule2=*:messages=2684354 quota_rule=*:storage=5242880k mail=maildir:/mail/mailstore01/812/023/grant@rp-auth-test.com/:INDEX=/mail/index01/812/023/grant@rp-auth-test.com/ fts_solr=debug url=http://ftsvs02:8080/solr/ gid=8 indexer-worker(hammer(a)rp-auth-test.com): Debug: Added userdb setting: plugin/_session=cow80_609fed7600001 indexer-worker(hammer(a)rp-auth-test.com): Debug: Added userdb setting: plugin/fts=solr indexer-worker(hammer(a)rp-auth-test.com): Debug: Added userdb setting: plugin/fts_solr=debug url=http://ftsvs02:8080/solr/ indexer-worker(hammer(a)rp-auth-test.com): Debug: Added userdb setting: mail=maildir:/mail/mailstore01/812/023/grant@rp-auth-test.com/:INDEX=/mail/index01/812/023/grant@rp-auth-test.com/ indexer-worker(hammer(a)rp-auth-test.com): Debug: Added userdb setting: plugin/quota_rule=*:storage=5242880k indexer-worker(hammer(a)rp-auth-test.com): Debug: Added userdb setting: plugin/quota_rule2=*:messages=2684354 indexer-worker(hammer(a)rp-auth-test.com): Debug: Added userdb setting: plugin/quota_rule3=Trash:ignore indexer-worker(hammer(a)rp-auth-test.com): Debug: Added userdb setting: plugin/quota_rule4=Spam:ignore indexer-worker(grant(a)rp-auth-test.com): Debug: Effective uid=8, gid=8, home= indexer-worker(grant(a)rp-auth-test.com): Debug: Namespace inbox: type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:/mail/mailstore01/812/023/grant@rp-auth-test.com/:INDEX=/mail/index01/812/023/grant@rp-auth-test.com/ indexer-worker(grant(a)rp-auth-test.com): Debug: maildir++: root=/mail/mailstore01/812/023/grant(a)rp-auth-test.com, index=/mail/index01/812/023/grant(a)rp-auth-test.com, indexpvt=, control=, inbox=/mail/mailstore01/812/023/grant(a)rp-auth-test.com, alt= indexer-worker(grant(a)rp-auth-test.com): Debug: Ignoring unknown cache field: pop3.order indexer-worker(grant(a)rp-auth-test.com): Debug: Ignoring unknown cache field: binary.parts indexer-worker(grant(a)rp-auth-test.com): Warning: Created dotlock file's timestamp is different than current time (1380294736 vs 1380294664): /mail/index01/812/023/grant(a)rp-auth-test.com/.INBOX/dovecot.index.cache indexer-worker(grant(a)rp-auth-test.com): Warning: Created dotlock file's timestamp is different than current time (1380294736 vs 1380294664): /mail/index01/812/023/grant(a)rp-auth-test.com/.INBOX/dovecot.index.log indexer-worker(grant(a)rp-auth-test.com): Warning: Created dotlock file's timestamp is different than current time (1380294736 vs 1380294664): /mail/index01/812/023/grant(a)rp-auth-test.com/.INBOX/dovecot.index.cache indexer-worker(grant(a)rp-auth-test.com): Debug: http-client: request [POST http://ftsvs01:8080/solr/update] Submitted [...] indexer-worker indexes User2's mail on wrong fts host: [...] indexer-worker(grant(a)rp-auth-test.com): Debug: http-client: request [POST http://ftsvs01:8080/solr/update] Sent header indexer-worker(grant(a)rp-auth-test.com): Debug: http-client: request [POST http://ftsvs01:8080/solr/update] Partially sent payload indexer-worker(grant(a)rp-auth-test.com): Debug: http-client: request [POST http://ftsvs01:8080/solr/update] Partially sent payload indexer-worker(grant(a)rp-auth-test.com): Debug: http-client: request [POST http://ftsvs01:8080/solr/update] Partially sent payload indexer-worker(grant(a)rp-auth-test.com): Debug: http-client: request [POST http://ftsvs01:8080/solr/update] Partially sent payload indexer-worker(grant(a)rp-auth-test.com): Debug: http-client: request [POST http://ftsvs01:8080/solr/update] Partially sent payload indexer-worker(grant(a)rp-auth-test.com): Debug: http-client: request [POST http://ftsvs01:8080/solr/update] Partially sent payload [...] indexer-worker finishes and imap searches against correct fts host ftsvs02 [...] imap(grant(a)rp-auth-test.com): Debug: http-client: request [GET http://ftsvs02:8080/solr/select?fl=uid,score&rows=194&sort=uid+asc&q=(hdr:%…] Submitted [...]

2 3

[Dovecot] Dovecot proxy hooks
by dac＠getodata.ro 26 Oct '13

26 Oct '13

I am interested in the possibility of using Dovecot IMAP/POP proxying capabilities to analyze emails that are passing through and possibly modify content on the fly. This subject has been discussed here [1] before. I have tried the mail-filter plugin [2], but the hooks it uses are only called in a non-proxy setup. Is there a practical way of doing this, or plans to add such a feature? Links: [1]: http://dovecot.org/list/dovecot/2006-February/011704.html [2]: http://www.dovecot.org/patches/2.2/mail-filter.tar.gz

2 1

[Dovecot] Plugin issue with update from 2.0.19 to 2.1.17
by Reinaldo Matukuma 26 Oct '13

26 Oct '13

Hello. Probably only Timo can help-me with this. I have a self-made plugin based on the zlib plugin that i use to cryptograph the messages at inbox. As a side-effect of the cryptography, my plugin changes the size of the message, but until 2.0.19 this works well with dovecot index and the W/S flags. But now, i'm going to upgrade to 2.1.17 and now i have these messages on log at my test ambiance: Oct 15 20:19:25 test dovecot: imap(reinaldo(a)exemplo.com.br): Error: Cached message size smaller than expected (367 < 529) Oct 15 20:19:25 test dovecot: imap(reinaldo(a)exemplo.com.br): Error: Maildir filename has wrong S value, renamed the file from /storage/test/messages/exemplo.com.br/reinaldo/Maildir/.Sent/cur/1381879158.M634385P5208.test,S=367,W=378:2,S to /storage/test/messages/exemplo.com.br/reinaldo/Maildir/.Sent/cur/1381879158.M634385P5208.test,S=529:2,S Oct 15 20:19:25 test dovecot: imap(reinaldo(a)exemplo.com.br): Error: Corrupted index cache file /storage/test/messages/exemplo.com.br/reinaldo/Maildir/.Sent/dovecot.index.cache: Broken physical size for mail UID 6 I understood with these messages that the dovecot is arguing to get the real size of the file now, overriding the return of size from my crypto plugin. But i don't understood if this is a consequence from the changes to correct the index issue (the dovecot.index.cache issue). So... I want know if the correct way to fix this would be change my plugin to return the real size of the file (that will be larger than the effective message that the plugin returne after the de-cryptography) or if i need use some new function to the plugin replace the expected size based on the real size of the message, not of the file. Thanks Reinaldo

3 4

[Dovecot] unusual dsync lines
by Anand Kumria 26 Oct '13

26 Oct '13

Hi, Another day, another dysnc attempt. Using Dovecot v2.2.5.4; I see: # doveadm -v -o imapc_user=user(a)example.com -o imapc_password=password -o imapc_host=imap.example.com -o imapc_port=993 -o imapc_ssl=imaps -o imapc_ssl_dir=/etc/ssl -o imapc_feature=rfc822.size -o imapc_ssl_verify=no sync -1 -R -u user(a)example.com imapc: dsync(user(a)example.com): Info: copy from Drafts: box=Drafts, uid=8343, msgid=<4F387A25.5010900(a)example.com>, size=2954969 dsync(user(a)example.com): Info: copy from Drafts: box=Drafts, uid=8344, msgid=<5237B0BF.7030402(a)example.com>, size=3371710 dsync(user(a)example.com): Info: copy from Drafts: box=Drafts, uid=8345, msgid=<5237B588.6040009(a)example.com>, size=3266 dsync(user(a)example.com): Info: copy from Drafts: box=Drafts, uid=8346, msgid=<5237B6B4.2030203(a)example.com>, size=4201 dsync(user(a)example.com): Info: copy from Drafts: box=Drafts, uid=8347, msgid=<5237B888.7030807(a)example.com>, size=3371445 dsync(user(a)example.com): Info: copy from Drafts: box=Drafts, uid=8348, msgid=<5237C224.9010608(a)example.com>, size=3371745 dsync(user(a)example.com): Info: copy from Drafts: box=Drafts, uid=8349, msgid=<5237C350.5080608(a)example.com>, size=3371700 dsync(user(a)example.com): Info: copy from Drafts: box=Drafts, uid=8350, msgid=<5237C5EE.5030408(a)example.com>, size=3371619 dsync(user(a)example.com): Info: expunge: box=Drafts, uid=8209, msgid=< 4F387A25.5010900(a)example.com>, size=2954969 The interesting lines being uid=8209 and uid=8343; why would dsync both copy and then expunge the same message from the same mailbox? Regards, Anand

2 3

[Dovecot] Strange output from LIST command
by azurIt 26 Oct '13

26 Oct '13

Hi, i'm using Dovecot 2.1.7 (Debian Wheezy) and output from LIST command looks strange: C: 4 LIST () "" (INBOX INBOX.Karantena INBOX.Spam) RETURN (STATUS (UNSEEN)) S: * LIST () "." "INBOX" S: * LIST () "." "INBOX.Karantena" S: * STATUS "INBOX.Karantena" (UNSEEN 0) S: * LIST () "." "INBOX.Spam" S: * STATUS "INBOX.Spam" (UNSEEN 0) S: 4 OK List completed. The UNSEEN information for INBOX is completely missing. It is correct behavior? If not, is this a known bug in 2.1.7? Thank you. azur

9 21

[Dovecot] Login into other user's account // master user for non-master users // chroot to users.<user>
by Steffen Kaiser 26 Oct '13

26 Oct '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Currently some of our organizational roles uses shared secrets (aka the password) to access the mail account of an organizational role, say "sales" for example. For one, I don't like shared secrets, for second, there had been some changes to shared mailboxes, I can only say "user sales has deleted the message at then and then". Therefore I would like to access the mailboxes of organizational roles with the accounts of the humans performing the role currently. Using sharing and ACLs it is possible to map the mailboxes of "sales" to "users.sales" namespace for specific other users, actually the human ones, say userA and userB for example. However, userB does not like managing identities in its MUA and refuses to acknowledge the messages in users.sales for various reasons. One reason was that userB wants to visibly separate strictly both mail accounts, the private messages in "userB" and the role's ones in "sales". Now, I came into thinking that it would be good in such case, if userB could authentificate as, say "sales*userB" - much like a master user - and ends in "sales"'s home, but with access permissions of "userB", well, like a chroot. Would it be an interesting feature to add to Dovecot's core? If I simulate "sales*userB" with password of userB and let the userdb return the home of sales, userB would gain "owner" privilegues of sales implicitly. So there seems to exist no workaround. Kind regards, - -- Steffen Kaiser -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iQEVAwUBUmDx3l3r2wJMiz2NAQLgVwgAw/RgAll9QPEwEPAY4hNHrTcieyZoCMUc iTGBDYcfaELnlLZJupbM4fRPyVYMe4uRmuy2pBKXwDplCriW9FIETQ36Jx6oppZn Ojf1+ZLjBUwr0OBpGMXyDd0XpNWgaEOiEzvvpOykO+pJJCKEJR7uR0usQ5cV6JRt z7qiY3t7n7H0j12Oas7w+IsRrTgMe9FsJ4D37SwxeZCpM12y17E2T2mX10ycvnTM 27/Gai8iyp/4dlO0NqBZ+qU/txqs2h+y5SARngj4Ru9YkmwutC9b8/4kBObTzzdx w1ahO3sYPTH0KmQ0Voc63H6T6U6CkBmYr9kqplkTdEiwtdg9AJSSfQ== =1arj -----END PGP SIGNATURE-----

5 7

[Dovecot] LMTP, TLS/SSL, authentication, proxy
by Jogi Hofmüller 26 Oct '13

26 Oct '13

Folks, Several questions packed into one email ;) Can dovecot use TLS/SSL on LTMP inet socket? Can I configure dovecot to only let an authenticated user deliver mail via LMTP? Can I tell dovecot to use a user/password for proxying LMTP connections? All this is related to my quest to move from cyrus to dovecot transparently to our users. And if any of the above questions can be answered with yes, I would appreciate the odd hint on howto configure that :) Thanks in advance! -- j.hofmüller aka Thesix http://users.mur.at/thesix/

2 1

[Dovecot] Problems with userdb lookup
by Mario Arnold 26 Oct '13

26 Oct '13

Hello, since few days there are problems with the userdb lookup. The problem occur if the recipient user is unknown (here test(a)xtlv.cn) doveconf -n # 2.2.6 (f89e645cba90): /etc/dovecot/dovecot.conf # OS: Linux 3.2.45.stk32 i686 Debian jessie/sid ext3 auth_debug = yes auth_debug_passwords = yes auth_mechanisms = digest-md5 cram-md5 auth_username_translation = %Lu auth_verbose = yes auth_verbose_passwords = plain debug_log_path = /var/log/dovecot/dov_debug.log hostname = kyoto.vtlx.cn login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c %k mail_debug = yes mail_gid = vmail mail_home = /var/mail/vhosts/%Ld/%Ln mail_location = sdbox:/var/mail/vhosts/%Ld/%Ln:DIRNAME=DbOx-mAiLs mail_plugins = " quota mail_log notify expire zlib" mail_privileged_group = vmail mail_uid = vmail mailbox_list_index = yes ... passdb { args = scheme=PLAIN username_format=%Lu /etc/dovecot/user_pw/passwd driver = passwd-file } postmaster_address = postmaster(a)xtlv.cn protocols = " imap lmtp sieve pop3" service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { mode = 0600 user = vmail } } service config { unix_listener config { mode = 0600 user = vmail } } service dict { unix_listener dict { mode = 0600 user = vmail } } service imap-login { inet_listener imap { port = 0 } inet_listener imaps { address = 84.38.75.44 port = 993 ssl = yes } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0660 user = postfix } } service managesieve-login { inet_listener sieve { address = 84.38.75.44 port = 4190 } } service pop3-login { inet_listener pop3 { port = 0 } inet_listener pop3s { address = 84.38.75.44 port = 995 ssl = yes } } service quota-status { client_limit = 1 executable = quota-status -p postfix unix_listener /var/spool/postfix/private/quota-status { group = postfix mode = 0660 user = postfix } } ... userdb { args = username_format=%Lu /etc/dovecot/user_pw/passwd driver = passwd-file } ... > gdb /usr/lib/dovecot/auth core_dbg GNU gdb (GDB) 7.6 (Debian 7.6-5) Copyright (C) 2013 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "i486-linux-gnu". For bug reporting instructions, please see: <http://www.gnu.org/software/gdb/bugs/>... Reading symbols from /usr/lib/dovecot/auth...Reading symbols from /usr/lib/debug/usr/lib/dovecot/auth...done. done. [New LWP 26466] warning: Could not load shared library symbols for linux-gate.so.1. Do you need "set solib-search-path" or "set sysroot"? [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib/i386-linux-gnu/i686/cmov/libthread_db.so.1". Core was generated by `dovecot/auth'. Program terminated with signal 6, Aborted. #0 0xb779d424 in __kernel_vsyscall () (gdb) bt full #0 0xb779d424 in __kernel_vsyscall () No symbol table info available. #1 0xb74ec80f in __GI_raise (sig=sig@entry=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:56 resultvar = <optimized out> resultvar = <optimized out> pid = -1218015232 selftid = 26466 #2 0xb74efcc3 in __GI_abort () at abort.c:90 save_stage = 2 act = {__sigaction_handler = {sa_handler = 0xb7794ff4, sa_sigaction = 0xb7794ff4}, sa_mask = {__val = {0, 3077744103, 3216056844, 3078348800, 3078207408, 1, 3078184664, 3078275225, 3078207848, 3077070192, 1, 1, 0, 0, 159279448, 3077360220, 3077743598, 3078180852, 3075085960, 3077367868, 159354316, 3077744683, 3078186032, 3075227880, 3216056948, 3077897967, 0, 3078180852, 0, 0, 159354316, 3078300704}}, sa_flags = 1, sa_restorer = 0xb74efb80 <__GI_abort>} sigs = {__val = {32, 0 <repeats 31 times>}} #3 0xb772abf9 in default_fatal_finish (type=<optimized out>, status=status@entry=0) at failures.c:192 backtrace = 0x97e6978 "/usr/lib/dovecot/libdovecot.so.0(+0x67bcf) [0xb772abcf] -> /usr/lib/dovecot/libdovecot.so.0(+0x67c51) [0xb772ac51] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0xb76de1d6] -> /usr/lib/dovecot/libdo"... #4 0xb772ac51 in i_internal_fatal_handler (ctx=0xbfb122e4, format=0xb7757344 "file %s: line %d (%s): assertion failed: (%s)", args=0xbfb12304 "") at failures.c:653 status = 0 #5 0xb76de1d6 in i_panic (format=format@entry=0xb7757344 "file %s: line %d (%s): assertion failed: (%s)") at failures.c:264 ctx = {type = LOG_TYPE_PANIC, exit_status = 0, timestamp = 0x0} args = 0xbfb12304 "" #6 0xb7751886 in p_strndup (pool=0xb7796544 <static_unsafe_data_stack_pool>, str=str@entry=0x0, max_chars=max_chars@entry=4294967295) at strfuncs.c:74 mem = <optimized out> len = <optimized out> __FUNCTION__ = "p_strndup" #7 0xb7751d7f in t_strndup (str=0x0, max_chars=4294967295) at strfuncs.c:236 No locals. #8 0x08057003 in auth_request_append_password (str=str@entry=0x97e68a8, request=0x97f8da8, request=0x97f8da8) at auth-request.c:1799 p = <optimized out> log_type = <optimized out> max_len = 4294967295 #9 0x08058cf2 in auth_request_log_unknown_user (request=request@entry=0x97f8da8, subsystem=subsystem@entry=0x807a0cc "passwd-file") at auth-request.c:1846 str = 0x97e68a8 #10 0x0806268c in db_passwd_file_lookup (db=0x97f4430, request=request@entry=0x97f8da8, username_format=0x97ef148 "%Lu") at db-passwd-file.c:466 pw = 0x97f4470 pu = <optimized out> table = <optimized out> username = 0x97e6598 dest = <optimized out> #11 0x0806d8bf in passwd_file_lookup (auth_request=0x97f8da8, callback=0x80599b0 <auth_request_userdb_callback>) at userdb-passwd-file.c:45 _module = <optimized out> module = <optimized out> pu = <optimized out> table = <optimized out> str = <optimized out> key = <optimized out> value = <optimized out> p = <optimized out> #12 0x08059c94 in auth_request_lookup_user (request=0x97f8da8, callback=callback@entry=0x8054ce0 <user_callback>) at auth-request.c:1072 userdb = 0x97ef150 cache_key = <optimized out> #13 0x08055612 in master_input_user (args=0x97f8751 "7\ttest(a)xtlv.cn\tservice=quota-status", conn=0x97f8b48) at auth-master-connection.c:314 auth_request = 0x97f8da8 error = 0xbfb125ac "\244\325s\267H\213\177\t" ret = <optimized out> -- 中華人民共和國

2 1

[Dovecot] Empty Mails from MAILER-DAEMON with Dovecot-Antispam and DSPAM
by Anna Christina Naß 26 Oct '13

26 Oct '13

Hallo, I've installed the dovecot-Antispam extension to my dovecot IMAP installation in conjunction with DSPAM. But when moving Mails from e.g. INBOX to Spam or vice versa, empty mails from MAILER-DAEMON appear after the original mail has been moved. This happens using Thunderbird 17esr, K-9 Mail on Android and Apple Mail (Mountain Lion). (Perhaps also when using a Webmail IMAP client) The source from one of these empty mails looks like this: ----snip---- Return-Path: <MAILER-DAEMON> X-Original-To: acn Delivered-To: acn(a)mydomain.name Received: from localhost (localhost.localdomain [127.0.0.1]) by <my host name> (Postfix) with SMTP id CB81B140011 for <acn>; Thu, 24 Oct 2013 09:23:33 +0200 (CEST) X-DSPAM-Reclassified: Spam Message-Id: <20131024072333.CB81B140011@<my host name>> Date: Thu, 24 Oct 2013 09:23:33 +0200 (CEST) From: MAILER-DAEMON ----/snip---- Do you have any idea why these mails appear and how I can prevent it? I'm using these Debian packages: ii dovecot-antispam 2.0+20120225-3 ii dovecot-core 1:2.1.7-7 ii dovecot-imapd 1:2.1.7-7 ii dovecot-ldap 1:2.1.7-7 ii dovecot-lmtpd 1:2.1.7-7 ii dovecot-managesieved 1:2.1.7-7 ii dovecot-sieve 1:2.1.7-7 ii dspam 3.10.1+dfsg-11 ii postfix 2.9.6-2 ii postfix-ldap 2.9.6-2 DSPAM is integrated in Postfix via master.cf: ----snip---- smtp inet n - - - - smtpd -o content_filter=dspam dspam unix - n n - - pipe flags=u user=vmail:vmail argv=/usr/bin/dspamc --deliver=innocent,spam --user $user Mails go to dovecot via this 'virtual'-transport: dovecot unix - n n - - pipe flags=ODRhu user=vmail:vmail argv=/usr/lib/dovecot/dovecot-lda -e -f ${sender} -d ${user} ----/snip---- The rest of my configuration follows: dovecot -n: ----snip---- # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-686-pae i686 Debian 7.2 ext4 auth_cache_size = 1 M auth_mechanisms = plain login auth_worker_max_count = 5 listen = *, [::] log_timestamp = "%Y-%m-%d %H:%M:%S " mail_location = maildir:/var/vmail/%u/Maildir mail_privileged_group = mail mailbox_idle_check_interval = 15 secs managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave imapflags notify passdb { args = /etc/dovecot/ldap-passdb.conf.ext driver = ldap } plugin { antispam_allow_append_to_spam = no antispam_backend = dspam antispam_dspam_args = --user;%Lu;--deliver=spam,innocent;--source=error antispam_dspam_binary = /usr/bin/dspamc antispam_dspam_notspam = --class=innocent antispam_dspam_spam = --class=spam antispam_signature = X-DSPAM-Signature antispam_signature_missing = move antispam_spam = Spam;Junk antispam_trash = Trash;Deleted Items;Deleted Messages sieve = ~/.dovecot.sieve sieve_before = /etc/dovecot/sieve-before.d sieve_extensions = +notify +imapflags sieve_storage = ~/sieve } protocols = imap sieve service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-master { group = vmail mode = 0600 user = vmail } user = $default_internal_user } service imap-login { process_min_avail = 2 service_count = 0 vsz_limit = 32 M } service lmtp { inet_listener lmtp { address = 127.0.0.1 port = 24 } user = vmail } ssl_cert = </etc/ssl/mycerts/my.imzadi.de.pem ssl_cipher_list = HIGH:MEDIUM:+TLSv1:!SSLv2:+SSLv3:!EXP:!aNULL:!ADH ssl_key = </etc/ssl/mycerts/my.imzadi.de.key userdb { args = /etc/dovecot/ldap-userdb.conf.ext default_fields = uid=vmail gid=vmail home=/var/vmail/%u driver = ldap } protocol imap { mail_max_userip_connections = 20 mail_plugins = antispam } protocol lda { auth_socket_path = /var/run/dovecot/auth-master mail_plugins = sieve postmaster_address = postmaster(a)my.imzadi.de } ----/snip---- My dspam.conf looks like: ----snip---- Home /var/spool/dspam StorageDriver /usr/lib/i386-linux-gnu/dspam/libmysql_drv.so DeliveryHost 127.0.0.1 DeliveryPort 10026 DeliveryIdent localhost DeliveryProto SMTP OnFail error Trust vmail Trust root Trust dspam TrainingMode teft TestConditionalTraining on Feature noise Feature whitelist Algorithm graham burton Tokenizer osb PValue bcr WebStats off Preference "trainingMode=TEFT" # { TOE | TUM | TEFT | NOTRAIN } -> default:teft Preference "spamAction=deliver" # { quarantine | tag | deliver } -> default:quarantine Preference "spamSubject=[SPAM]" # { string } -> default:[SPAM] Preference "statisticalSedation=5" # { 0 - 10 } -> default:0 Preference "enableBNR=on" # { on | off } -> default:off Preference "enableWhitelist=on" # { on | off } -> default:on Preference "signatureLocation=headers" # { message | headers } -> default:message Preference "tagSpam=off" # { on | off } Preference "tagNonspam=off" # { on | off } Preference "showFactors=off" # { on | off } -> default:off Preference "optIn=off" # { on | off } Preference "optOut=off" # { on | off } Preference "whitelistThreshold=10" # { Integer } -> default:10 Preference "makeCorpus=off" # { on | off } -> default:off Preference "storeFragments=off" # { on | off } -> default:off Preference "localStore=" # { on | off } -> default:username Preference "processorBias=on" # { on | off } -> default:on Preference "fallbackDomain=off" # { on | off } -> default:off Preference "trainPristine=off" # { on | off } -> default:off Preference "optOutClamAV=off" # { on | off } -> default:off Preference "ignoreRBLLookups=off" # { on | off } -> default:off Preference "RBLInoculate=off" # { on | off } -> default:off Preference "notifications=off" # { on | off } -> default:off AllowOverride enableBNR AllowOverride enableWhitelist AllowOverride fallbackDomain AllowOverride ignoreGroups AllowOverride ignoreRBLLookups AllowOverride localStore AllowOverride makeCorpus AllowOverride optIn AllowOverride optOut AllowOverride optOutClamAV AllowOverride processorBias AllowOverride RBLInoculate AllowOverride showFactors AllowOverride signatureLocation AllowOverride spamAction AllowOverride spamSubject AllowOverride statisticalSedation AllowOverride storeFragments AllowOverride tagNonspam AllowOverride tagSpam AllowOverride trainPristine AllowOverride trainingMode AllowOverride whitelistThreshold AllowOverride dailyQuarantineSummary AllowOverride notifications IgnoreHeader DKIM-Signature IgnoreHeader X-Spam-Status IgnoreHeader X-Spam-Scanned IgnoreHeader X-Virus-Scanner-Result Notifications off PurgeSignatures 14 # Stale signatures PurgeNeutral 90 # Tokens with neutralish probabilities PurgeUnused 90 # Unused tokens PurgeHapaxes 30 # Tokens with less than 5 hits (hapaxes) PurgeHits1S 15 # Tokens with only 1 spam hit PurgeHits1I 15 # Tokens with only 1 innocent hit LocalMX 127.0.0.1 SystemLog on UserLog on Opt out ClamAVPort 3310 ClamAVHost 127.0.0.1 ClamAVResponse spam ServerMode auto ServerPass.Relay1 "<pwd>" ServerParameters "--deliver=innocent,spam --user %u" ServerIdent "localhost.localdomain" ServerDomainSocketPath "/var/run/dspam/dspam.sock" ClientHost /var/run/dspam/dspam.sock ClientIdent "<pwd>@Relay1" ProcessorURLContext on ProcessorBias off StripRcptDomain off Include /etc/dspam/dspam.d/ ----/snip---- Thanks a lot! Kind regards, Anna Christina Naß

2 1

[Dovecot] UIDL conversion courier -> dovecot
by Will Yardley 25 Oct '13

25 Oct '13

I've got a weird split setup where POP3 is currently handled by Courier (courier-imap-3.0.2 distribution), and IMAP is currently handled by the RHEL 5 version of Dovecot (1.0.7) I'm trying to figure out a way to convert the POP3 UIDLs (in cases where the courierpop3dsizelist is newer than dovecot-uidlist, at least) to something that Dovecot will read, or to configure Dovecot's pop3 to use a UIDL format that will work, as mentioned in the migration wiki. We have some "squeaky wheel" users who don't have their POP clients set to delete messages, and are likely to complain about re-downloading their several GB of mail. Thus far, the migration scripts haven't seemed to work properly, maybe because of the versions I'm using. I'm not sure whether the Courier versions there refer to Courier MTA version or Courier IMAP version, but adjusting the UIDL format to %v-%u (as suggested for early Courier 3 / Dovecot 1.0) hasn't worked (I saw %u-%v online, but that also didn't work). Since the Courier system doesn't seem to report validity, I also tried just '%u' - this works *if* I delete the header line as well as rename the courierpop3dsizelist to dovecot-uidlist, but I still don't get the exact same UIDLs as before. I'm willing to write my own migration tool, or to adapt the existing one, but I could use some assistance knowing how to do the translation. Dovecot -n for that instance is below, slightly sanitized, obviously I can change pop3_uidl_format; I also tried getting rid of pop3_reuse_xuidl: Basically, to give a concreate example, the Courier system seems to use the filename as the UIDL, with this courierpop3dsizelist: /2 45 1382654636 1199751891.13891_0.water-ox:2,Sa 2412 0:1382654636 1199927364.22870_0.fire-ox:2,S 2440 0:1382654636 1199936486.3332_0.wood-ox:2,Sa 2074 0:1382654636 1199985712.27745_0.water-ox:2,RS 4007 0:1382654636 1199993867.23139_0.fire-ox:2,S 1550 0:1382654636 producing this UIDL output: UIDL +OK 1 1199751891.13891_0.water-ox 2 1199927364.22870_0.fire-ox 3 1199936486.3332_0.wood-ox 4 1199985712.27745_0.water-ox 5 1199993867.23139_0.fire-ox [...] Dovecot's dovecot-uidlist: 3 V1199747645 N606 562 W2412 :1199751891.13891_0.water-ox:2,Sa 563 W2440 :1199927364.22870_0.fire-ox:2,S 564 W2074 :1199936486.3332_0.wood-ox:2,Sa 565 W4007 :1199985712.27745_0.water-ox:2,RS 566 W1550 :1199993867.23139_0.fire-ox:2,S producing: UIDL +OK 1 1199747645-562 2 1199747645-563 3 1199747645-564 4 1199747645-565 5 1199747645-566 (or, if I change the format to just %u): +OK 1 650 2 651 3 652 4 653 5 654 # dovecot --version 1.0.7 # 1.0.7: /etc/dovecot.d/XXX.cfg base_dir: /var/run/dovecot/pop-its syslog_facility: local4 protocols: pop3 pop3s listen: *:110 ssl_listen: *:995 ssl_ca_file: /etc/pki/dovecot/certs/XX.pem ssl_cert_file: /etc/pki/dovecot/certs/XXXX.pem ssl_key_file: /etc/pki/dovecot/private/XXXX.key disable_plaintext_auth: yes login_dir: /var/run/dovecot/pop-its/login login_executable: /usr/libexec/dovecot/pop3-login login_greeting_capability: yes login_processes_count: 4 login_max_processes_count: 512 verbose_proctitle: yes mail_location: maildir:/var/spool/maildir/%1Ln/%Ln:INDEX=/var/spool/dovecot/indexes/%1Ln/%Ln mail_debug: yes mmap_disable: yes maildir_copy_with_hardlinks: yes mail_executable: /usr/libexec/dovecot/pop3 mail_plugin_dir: /usr/lib/dovecot/pop3 pop3_reuse_xuidl: yes pop3_uidl_format: %v-%u pop3_client_workarounds: outlook-no-nuls oe-ns-eoh namespace: type: private separator: . prefix: Mail. inbox: yes auth default: mechanisms: plain login passdb: driver: ldap args: /etc/dovecot.conf-ldap userdb: driver: static args: uid=vmail gid=mail home=/var/spool/maildir/%1Ln/%Ln socket: type: listen master: path: /var/run/dovecot/pop-its/auth-master mode: 384 user: vmail group: mail TIA! /wby

1 1

[Dovecot] Replication (Mac OS X)
by Rusty Ross 25 Oct '13

25 Oct '13

Hello, I am taking a stab at setting up dovecot replication between two OS X Mavericks servers. (The dovecot version in Mavericks is 2.2.5.) The first question I have is in regards to userdb. The user accounts are Open Directory based. The output of: doveadm user ‘*' …yields only: # doveadm user ‘*' submit However, specific user accounts can be looked up explicitly, ie: # doveadm user 'mary' field value uid 214 gid 6 home mail maildir:/Library/Server/Mail/Data/mail/10C94BF9-5CC4-4DDB-B0F0-5D23F22B2D9F quota maildir:User quota:noenforcing quota_rule *:storage=0 mail_location maildir:/Library/Server/Mail/Data/mail/10C94BF9-5CC4-4DDB-B0F0-5D23F22B2D9F sieve /Library/Server/Mail/Data/rules/10C94BF9-5CC4-4DDB-B0F0-5D23F22B2D9F/dovecot.sieve sieve_dir /Library/Server/Mail/Data/rules/10C94BF9-5CC4-4DDB-B0F0-5D23F22B2D9F sieve_storage /Library/Server/Mail/Data/rules/10C94BF9-5CC4-4DDB-B0F0-5D23F22B2D9F According to http://wiki2.dovecot.org/Replication, user listing via “doveadm user ‘*’” is required for replication. Any thoughts about how I can get that working (or work around it) in this environment? Thanks, Rusty

3 16

[Dovecot] dsync core dump
by Jogi Hofmüller 25 Oct '13

25 Oct '13

Dear all, We're slowly progressing towards migration, and now run into dscyn dumping core when trying to sync mailboxes from the old imap server. Needless to say that not one byte get's transferred. On the old.server all I see is a correct login. This is what we get for one example user: server:~# doveadm -v -D backup -R -u USER imapc: doveadm(root): Debug: Loading modules from directory: /usr/lib/dovecot/modules doveadm(root): Debug: Module loaded: /usr/lib/dovecot/modules/lib01_acl_plugin.so doveadm(root): Debug: Loading modules from directory: /usr/lib/dovecot/modules/doveadm doveadm(root): Debug: Module loaded: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_acl_plugin.so doveadm(root): Debug: Skipping module doveadm_expire_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_expire_plugin.so: undefined symbol: expire_set_deinit (this is usually intentional, so just ignore this message) doveadm(root): Debug: Skipping module doveadm_quota_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_quota_plugin.so: undefined symbol: quota_user_module (this is usually intentional, so just ignore this message) doveadm(root): Debug: Skipping module doveadm_zlib_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_zlib_plugin.so: undefined symbol: i_stream_create_deflate (this is usually intentional, so just ignore this message) doveadm(root): Debug: Skipping module doveadm_fts_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib20_doveadm_fts_plugin.so: undefined symbol: fts_backend_rescan (this is usually intentional, so just ignore this message) doveadm(USER): Debug: auth input: USER system_groups_user=USER uid=XXXX gid=YYYY home=/home/USER /etc/dovecot/proxy-userdb doveadm(USER): Debug: Unknown userdb setting: plugin//etc/dovecot/proxy-userdb=yes doveadm(USER): Debug: Effective uid=XXXX, gid=YYYY, home=/home/USER doveadm(USER): Debug: Namespace inbox: type=private, prefix=, sep=, inbox=yes, hidden=yes, list=no, subscriptions=yes location=maildir:~/Maildir doveadm(USER): Debug: maildir++: root=/home/USER/Maildir, index=, control=, inbox=/home/USER/Maildir, alt= doveadm(USER): Debug: acl: initializing backend with data: vfile doveadm(USER): Debug: acl: acl username = USER doveadm(USER): Debug: acl: owner = 1 doveadm(USER): Debug: acl vfile: Global ACL directory: (none) doveadm(USER): Debug: Namespace : type=shared, prefix=shared/%u/, sep=, inbox=no, hidden=no, list=children, subscriptions=no location=maildir:%h/Maildir:INDEX=~/Maildir/shared/%u doveadm(USER): Debug: shared: root=/var/run/dovecot, index=, control=, inbox=, alt= doveadm(USER): Debug: acl: initializing backend with data: vfile doveadm(USER): Debug: acl: acl username = USER doveadm(USER): Debug: acl: owner = 0 doveadm(USER): Debug: acl vfile: Global ACL directory: (none) dsync(USER): Debug: Effective uid=XXXX, gid=YYYY, home=/home/USER dsync(USER): Debug: Namespace inbox: type=private, prefix=, sep=, inbox=yes, hidden=yes, list=no, subscriptions=yes location=imapc: dsync(USER): Debug: imapc: root=, index=, control=, inbox=, alt= dsync(USER): Debug: imapc(old.server:PORT): Looking up IP address dsync(USER): Debug: imapc(old.server:PORT): Connecting to IP dsync(USER): Debug: imapc(old.server:PORT): Starting SSL handshake dsync(USER): Debug: imapc(old.server:PORT): SSL handshake successful dsync(USER): Debug: imapc(old.server:PORT): Server capabilities: IMAP4 IMAP4rev1 ACL QUOTA LITERAL+ MAILBOX-REFERRALS NAMESPACE UIDPLUS ID NO_ATOMIC_RENAME UNSELECT CHILDREN MULTIAPPEND SORT THREAD=ORDEREDSUBJECT THREAD=REFERENCES IDLE AUTH=PLAIN ANNOTATEMORE dsync(USER): Debug: imapc(old.server:PORT): Authenticating as cyrus for user USER dsync(USER): Debug: imapc(old.server:PORT): Authenticated successfully dsync(USER): Debug: acl: initializing backend with data: vfile dsync(USER): Debug: acl: acl username = USER dsync(USER): Debug: acl: owner = 1 dsync(USER): Debug: acl vfile: Global ACL directory: (none) dsync(USER): Debug: Namespace : type=shared, prefix=shared/%u/, sep=, inbox=no, hidden=no, list=children, subscriptions=no location=maildir:%h/Maildir:INDEX=~/Maildir/shared/%u dsync(USER): Debug: shared: root=/var/run/dovecot, index=, control=, inbox=, alt= dsync(USER): Debug: acl: initializing backend with data: vfile dsync(USER): Debug: acl: acl username = USER dsync(USER): Debug: acl: owner = 0 dsync(USER): Debug: acl vfile: Global ACL directory: (none) Segmentation fault (core dumped) Here is the output of dovecot -n # 2.1.17: /etc/dovecot/dovecot.conf # OS: Linux 3.10-3-amd64 x86_64 Debian jessie/sid auth_debug = yes imapc_features = rfc822.size imapc_host = old.server imapc_list_prefix = INBOX imapc_master_user = MASTERUSER imapc_password = MASTERPASS imapc_port = PORT imapc_ssl = imaps imapc_ssl_ca_dir = /etc/ssl/certs lmtp_save_to_detail_mailbox = yes mail_debug = yes mail_location = maildir:~/Maildir mail_plugins = acl namespace { list = children location = maildir:%%h/Maildir:INDEX=~/Maildir/shared/%%u prefix = shared/%%u/ subscriptions = no type = shared } namespace inbox { hidden = yes inbox = yes list = no location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { auto = subscribe special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = subscriptions = yes type = private } passdb { args = session=yes driver = pam } plugin { acl = vfile acl_shared_dict = file:/var/lib/dovecot/shared-mailboxes sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = " imap lmtp pop3" service auth { unix_listener auth-userdb { mode = 0777 } } service lmtp { inet_listener lmtp { address = 172.16.16.78 port = 24 } } ssl_cert = </etc/dovecot/dovecot.pem ssl_key = </etc/dovecot/private/dovecot.pem userdb { args = /etc/dovecot/proxy-userdb driver = passwd } protocol lmtp { mail_plugins = acl } protocol imap { mail_plugins = acl autocreate imap_acl } -- j.hofmüller aka Thesix http://users.mur.at/thesix/

2 1

[Dovecot] "Renaming not supported across conflicting directory permissions"
by Richard Platel 25 Oct '13

25 Oct '13

Is it possible to disable this check in 2.1.7? (without a patch and re-compile?)

3 2

[Dovecot] Replication not happening on 2.2
by Lucas Rothamel - Eye Catching Webdesign 24 Oct '13

24 Oct '13

Hello, first - thanks for the help in getting dovecot 2.2 compiled and installed on Debian. I have Dovecot 2.2 running now on two servers, and to test replication, I am polling mail on one server whilst the other creates mail regularly from crontab output. I have replication set up, but nothing at all is appearing on the other server, and I do not have any dsync / doveadm messages in /var/log/mail.log any more. With 2.1, these two used to spam many errors into mail.log. Any hints? Here is my dovecot-n output: # 2.2.6: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.2 ext4 auth_mechanisms = plain login cram-md5 disable_plaintext_auth = no log_timestamp = "%Y-%m-%d %H:%M:%S " mail_location = maildir:/home/%d/%n/Maildir mail_plugins = " notify replication" mail_privileged_group = mail passdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } plugin { mail_replica = remote:vmail@mydomain quota = maildir:User quota quota_rule = *:storage=1GB replication_full_sync_interval = 1 hours } protocols = imap pop3 service aggregator { fifo_listener replication-notify-fifo { mode = 0600 user = vmail } unix_listener replication-notify { mode = 0600 user = vmail } } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } user = root } service config { unix_listener config { user = vmail } } service doveadm { user = vmail } service replicator { process_min_avail = 1 } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } protocol imap { mail_plugins = quota imap_quota } protocol pop3 { mail_plugins = quota pop3_uidl_format = %08Xu%08Xv } protocol lda { mail_plugins = quota postmaster_address = sysop@mydomain } Thanks, Lucas -- Lucas Rothamel Eye Catching Webdesign info(a)eye-catching-webdesign.de - www.eye-catching-webdesign.de You know, we go to the gym to keep the body fit. Similarly the mind needs some rest. The mind is bombarded with so many impressions. Our mind has been bombarded by impressions the whole time. It needs a different kind of rest other than sleep. And meditation is such a rest. It calms the mind. energizes the spirit and makes the body more strong and vibrant. improves the immune system. The immune cells, the T-cell count go higher through Sudarshan Kriya and meditation. And you feel so nice inside. - Sri Sri Ravi Shankar I love deadlines. I like the whooshing sound they make as they fly by. -- Douglas Adams

1 0

[Dovecot] mailbox sharing with mdbox
by NOC WVNET 24 Oct '13

24 Oct '13

Hello, i want to know if it's possible to use mailbox sharing with mdbox. I have done a setup with maildir where it's working fine but with mdbox I'm only able to subscribe the shared folder but there are no messages in it. (maybe a problem with the namespace) I'm running dovecot 2.2.6 [deb http://xi.rename-it.nl/debian/ stable-auto/dovecot-2.2.patched main ] on Debian Wheezy Kind regards Stefan

1 0

[Dovecot] secure email server
by BONNET, Frank 23 Oct '13

23 Oct '13

Hello I have to setup a "secured" email server - encrypted filesystem - SSL or TLS only for SMTP and IMAPS - Talking only to some known other same-secured servers Any info/links welcome ! Please do not start some flame war around this ! I've been ordered to set up such server and I KNOW there are probably security holes but nothing's perfect so a starting point is necessary *Thank you for any infos*

6 7

[Dovecot] Odd Feature Request - RBL blacklist lookup to prevent authentication
by Marc Perkel 23 Oct '13

23 Oct '13

I would like to have a list of IPs (hacker list) that I can do a lookup on so that if anyone tries to authenticate to dovecot they always fail if they are on my list. I have the list - and the list is available as a DNS blacklist. I'd like to have it work with both local IP lists or RBL lookup. The idea is so hackers from known IP addresses never succeed. If Dovecot provides the feature I have about 1/2 million IP addresses of known current hackers to block. Anyone else interested in this?

8 7

[Dovecot] fstat() errors on /srv/mail/<username>/dovecot.index.log
by Zach La Celle 22 Oct '13

22 Oct '13

Dovecot version 2.1.7 Ubuntu 12.04.3 LTS Kernel 3.2.0-35-generic x86_64 I'm not sure exactly when this started occurring, but sporatically users report issues receiving email, having email saved to "Sent," etc. Looking in dovecot.log, I see the following errors: 2013-10-16 09:53:20 imap-login: Info: Login: user=<user1>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=27434, secured, session=<PnoiBtzoBgB/AAAB> 2013-10-16 09:53:20 imap(user1): Info: Disconnected: Logged out in=93 out=846 2013-10-16 09:53:21 imap(user2): Info: Disconnected: Logged out in=3616 out=495 2013-10-16 09:53:24 imap-login: Info: Login: user=<user3>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=27436, secured, session=<jE5kBtzoBwB/AAAB> 2013-10-16 09:53:24 imap(user3): Info: Disconnected: Logged out in=93 out=819 2013-10-16 09:53:33 imap(user4): Error: fstat() failed with file /srv/mail/user4/dovecot.index.log: No such file or directory 2013-10-16 09:53:33 imap(user4): Error: fstat() failed with file /srv/mail/user4/dovecot.index.log: No such file or directory 2013-10-16 09:53:33 imap(user4): Error: fstat() failed with file /srv/mail/user4/dovecot.index.log: No such file or directory 2013-10-16 09:53:33 imap(user4): Error: fstat() failed with file /srv/mail/user4/dovecot.index.log: No such file or directory 2013-10-16 09:53:33 imap(user4): Error: fstat() failed with file /srv/mail/user4/dovecot.index.log: No such file or directory 2013-10-16 09:53:33 imap(user4): Error: fstat() failed with file /srv/mail/user4/dovecot.index.log: No such file or directory 2013-10-16 09:53:41 imap-login: Info: Login: user=<user3>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=27438, secured, session=<UDJlB9zoCAB/AAAB> 2013-10-16 09:53:41 imap(user3): Info: Disconnected: Logged out in=93 out=819 2013-10-16 09:54:12 imap-login: Info: Login: user=<user1>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=27440, secured, session=<6bI5CdzoCQB/AAAB> 2013-10-16 09:54:12 imap(user1): Info: Disconnected: Logged out in=93 out=846 2013-10-16 09:54:12 imap(user5): Info: Disconnected: Logged out in=736 out=7064 2013-10-16 09:54:15 imap-login: Info: Login: user=<user6>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=27442, secured, session=<t+FnCdzoCgB/AAAB> 2013-10-16 09:54:15 imap(user6): Info: Disconnected: Logged out in=95 out=902 2013-10-16 09:54:20 imap-login: Info: Login: user=<user1>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=27444, secured, session=<c/q1CdzoCwB/AAAB> 2013-10-16 09:54:20 imap(user1): Info: Disconnected: Logged out in=93 out=846 2013-10-16 09:54:24 imap-login: Info: Login: user=<user3>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=27446, secured, session=<nOb3CdzoDAB/AAAB> 2013-10-16 09:54:24 imap(user3): Info: Disconnected: Logged out in=93 out=819 These errors are not confined to a single user, and do not occur with the same frequency. I originally was running the Dovecot shipped with the default Ubuntu repositories (don't remember which version, but it was 1.*) and used a backport to upgrade to 2.1.7 to see if that fixed it. It did not. Any ideas why this is happening?

2 4

[Dovecot] doveadm: Fatal: open(/dev/tty)
by Dan Langille 22 Oct '13

22 Oct '13

I received this message today, and remembered, you can't do that... $ doveadm pw -s SHA512-CRYPT Enter new password: doveadm(dan): Fatal: open(/dev/tty) failed: No such file or directory </pre> It seems if you have no tty, you can't create a password. Surely there is a better way to do this? Looking at the code, it's trying to open the tty and turn off echo. For the record: FreeBSD 8.4-RELEASE-p3 And yes, there is no console. I'm attached to a FreeBSD jail from the host system, directly via the ezjail-admin console command. # w 6:52PM up 18 days, 23:34, 0 users, load averages: 0.96, 0.57, 0.46 USER TTY FROM LOGIN@ IDLE WHAT # Ain't nobody there.. -- Dan Langille - http://langille.org/

2 3

[Dovecot] using dovecot in Asterisk imap storage
by Asmaa Ahmed 22 Oct '13

22 Oct '13

Hello, I am trying to use postfix/dovecot as mail server to be the imap storage for my voicemail system.For that I installed postfix and dovecot and trying to follow the instructions in this post http://etel.wiki.oreilly.com/wiki/index.php?title=Storing_Voicemail_on_an_I… I should add a master user for Asterisk to your IMAP server that has access to all user's mailboxes and as per the instructions, I should edit auth section in dovecot.conf which I can't find! Is there something wrong or should I add this section by myselfAlso I don't have dovecot.masterusers, should I create it? $/etc/dovecot$ /usr/sbin/dovecot -n# 2.0.19: /etc/dovecot/dovecot.conf# OS: Linux 3.2.0-31-virtual x86_64 Ubuntu 12.04.3 LTS mail_location = maildir:~/Maildirmanagesieve_notify_capability = mailtomanagesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihavepassdb { driver = pam}plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve}protocols = imap pop3 sieveservice auth { unix_listener /var/spool/postfix/private/dovecot-auth { group = postfix mode = 0660 user = postfix }}ssl_cert = </etc/ssl/certs/dovecot.pemssl_cipher_list = ALL:!LOW:!SSLv2:ALL:!aNULL:!ADH:!eNULL:!EXP:RC4+RSA:+HIGH:+MEDIUMssl_key = </etc/ssl/private/dovecot.pemuserdb { driver = passwd}protocol imap { imap_client_workarounds = delay-newmail mail_max_userip_connections = 10}protocol pop3 { mail_max_userip_connections = 10 pop3_client_workarounds = outlook-no-nuls oe-ns-eoh}protocol lda { deliver_log_format = msgid=%m: %$ mail_plugins = sieve postmaster_address = postmaster quota_full_tempfail = yes rejection_reason = Your message to <%t> was automatically rejected:%n%r} Thanks.

2 4

[Dovecot] Dbox group file permissions
by Chris Lasater 21 Oct '13

21 Oct '13

Hi everyone, I feel like I am missing something obvious here. I have dovecot up and running and every piece of mail is given user read/write permission. I see the option mail_gid, but I do not see anyplace to set the group permissions. I see the below wiki talking about new home directories getting their permission from the parent directory, but this does not seem to work. Any assistance would be appreciated. http://wiki2.dovecot.org/SharedMailboxes/Permissions I changed the group permissions on the parent directory, and used rm -rf to delete the user directories, then logged in again so it was recreated. [user@dovecot ~]$ sudo ls -la /mnt/home/imapd/domain.example.net/ total 24 drwxr-x--- 6 imapd imapd 4096 Oct 21 17:35 . drwxr-xr-x 46 imapd nagios 4096 Oct 21 16:55 .. drwx------ 3 imapd imapd 4096 Oct 21 16:59 user1 drwx------ 3 imapd imapd 4096 Oct 21 17:35 user2 Setup Mail is written in dbox format CentOS 5.9 dovecot 2.2.6 NFS with director Mail Configs mail_home = /mnt/home/imapd/%d/%n mail_location = dbox:/mnt/home/imapd/%d/%n mail_uid = imapd mail_gid = imapd Thanks, Chris

1 0

[Dovecot] Mailboxes separated from IMAP server
by Reymer Antonio Vargas Solano 21 Oct '13

21 Oct '13

Hello folks, At my university we are trying to implement a distributed email backend, but I have some troubles, The topology: Server A: Postfix+LMTP # MTA Server B: Dovecot+LMTP # Just mailboxes Server C: Dovecot # POP3/IMAP Right now the Server A can leave a received email to the Server B, but I don't know how to communicate Server C to the Server B to retrieve the emails. I think that we should use IMAP protocol, but I am confused about how to connect them, I don't know if we have to use a proxy IMAP server, or another thing. Can anyone give me an idea? Regards, Reymer Antonio Vargas Solano

5 14

[Dovecot] dovecot dropbox plugin created another problem ?
by Benny Pedersen 21 Oct '13

21 Oct '13

http://blog.dynamoo.com/2013/10/dropbox-spam-leads-to-malware-on-errr.html

1 0

[Dovecot] bangkokmaco@gmail.com has indicated you're a friend. Accept?
by bangkokmaco＠gmail.com 21 Oct '13

21 Oct '13

Hi, bangkokmaco(a)gmail.com wants to follow you. ****** Is bangkokmaco(a)gmail.com you friend? ****** If Yes please follow the link below: http://invites.fliporamail.com/signup_e.html?fullname=Dovecot+Mailing+List&… If No please follow the link below: http://invites.fliporamail.com/signup_e_no.html?fullname=Dovecot+Mailing+Li… Follow the link below to remove yourself from all such emails http://invites.fliporamail.com/uns.jsp?email=dovecot@dovecot.org&iid=3fa84c…

2 1

[Dovecot] Upgrade from 2.1 to 2.2 on Debian
by Lucas Rothamel - Eye Catching Webdesign 20 Oct '13

20 Oct '13

Hello, I am currently running Dovecot 2.1 on current Debian and need to upgrade to 2.2 to use the replication features. I understand that I therefore need to compile Dovecot myself. I am using a MySQL database for users authentication, therefore I need to compile Dovecot with mysql support: *./configure --with-mysql* Unfortunately this terminates with: *configure: error: Can't build with MySQL support: libmysqlclient not found* I installed libmysqlclient from debian repos, but it does not help. Also, how do I then connect the newly installed dovecot to my existing /etc/init.d/dovecot script? Thank you. Lucas -- Lucas Rothamel Eye Catching Webdesign info(a)eye-catching-webdesign.de - www.eye-catching-webdesign.de You know, we go to the gym to keep the body fit. Similarly the mind needs some rest. The mind is bombarded with so many impressions. Our mind has been bombarded by impressions the whole time. It needs a different kind of rest other than sleep. And meditation is such a rest. It calms the mind. energizes the spirit and makes the body more strong and vibrant. improves the immune system. The immune cells, the T-cell count go higher through Sudarshan Kriya and meditation. And you feel so nice inside. - Sri Sri Ravi Shankar I love deadlines. I like the whooshing sound they make as they fly by. -- Douglas Adams

3 4

[Dovecot] Question to sieve symlink
by Andreas Meyer 20 Oct '13

20 Oct '13

Hello! A Server running openSUSE 12.3 and dovecot version 2.1.13. In the log I find Oct 19 00:23:23 managesieve(anmeyer(a)anup.de): Warning: sieve-storage: Active sieve script symlink /var/spool/vhosts/anup.de/anmeyer/.dovecot.sieve is broken: invalid/unknown path to storage (points to /var/spool/vhosts/anup.de/anmeyer/.sieve/managesieve.sieve). But the link is ok and when I login to roundcube I can manage the filters. What's the problem? Greetings Andreas

4 12

[Dovecot] patch for ssl_prefer_server_ciphers in dovecot 2.1
by Adi Kriegisch 20 Oct '13

20 Oct '13

Dear all, I tried to do a backport of 'ssl_prefer_server_ciphers' (http://hg.dovecot.org/dovecot-2.2/rev/897484f45a87/) to Dovecot 2.1 (namely the Debian version of Dovecot) and wanted to ask if there is any chance to integrate this feature into Dovecot 2.1 'upstream' as well. As the code structure changed quite a bit, I am not sure if my patch is complete. I tested it with pop3s and imaps in my test environment and it works just as expected and seemed to not have any unwanted effects. (Dovecot code is probably the most beautiful and easy to read C code I've seen, but there might also be some pitfalls I missed.) best regards, Adi Kriegisch PS: I need that feature to enable PFS while allowing Outlook to still connect and the others not to fall back to a different cipher; I was unable to find a PFS cipher that is supported by Outlook and OpenSSL.

3 7

[Dovecot] dovecot-metadata-plugin v14 patches
by Sergey Sidlyarenko 19 Oct '13

19 Oct '13

Please apply patches for dovecot-metadata-plugin v14. 1. dovecot-metadata-plugin-value_nil - fix plugin crach if entry->value == NULL (strlen(NULL) - segfault). 2. dovecot-metadata-plugin-utf7_support - add support metadata for UTF8 mailfolder. -- Sidlyarenko Sergey https://github.com/lefoyer

2 1

[Dovecot] Issues with configure script / Makefile
by Bret Jordan 19 Oct '13

19 Oct '13

Dear Dovecot, I have noticed that when you pass a --prefix in to the configure script and say specify a path of /local/dovecot-2.2.6 that when you install most of the subdirectories (etc, lib, include, libexec,etc) have a dovecot directory in them, like if you were installing to /. This is not typical of most *nix software. So I tried to specify the exact location with the following configure options, but they are not honored when it comes to installation. I have looked through the configure script to see if I can see where the problem is and can not see it. These are the ones that do not work. Some of the others, however to work. # Do not work --sysconfdir=/local/dovecot-2.2.6/etc \ --libdir=/local/dovecot-2.2.6/lib \ --includedir=/local/dovecot-2.2.6/include \ --libexecdir=/local/dovecot-2.2.6/libexec \ # Do work --docdir=/local/dovecot-2.2.6/share/doc \ --with-ssl=openssl --with-ssldir=/local/dovecot.2.2.6/ssl \ --with-statedir=/local/dovecot-2.2.6/lib \ --with-moduledir=/local/dovecot-2.2.6/lib \ --with-rundir=/run/dovecot Bret Bret Jordan CISSP | Sr Security Architect PGP Fingerprint: 62A6 5999 0F7D 0D61 4C66 D59C 2DB5 111D 63BC A303 "Without cryptography vihv vivc ce xhrnrw, however, the only thing that can not be unscrambled is an egg."

1 0

[Dovecot] Having problem that e-mails for all users are grouped in the same "sent" file (same for "drafts").
by SiR 18 Oct '13

18 Oct '13

This is an urgent problem for us. Is this expected? the problem is that when users access their e-mail through web-mail (roundcubemail) users see each others messages in unified "Sent" folder We have used: joe /etc/postfix/virtual to enable managing e-mails on multiple domains by same Postfix server. Thank you -- View this message in context: http://dovecot.2317879.n4.nabble.com/Having-problem-that-e-mails-for-all-us… Sent from the Dovecot mailing list archive at Nabble.com.

2 3

[Dovecot] Public dovecot namespace visible only to some users
by Joachim Breitner 17 Oct '13

17 Oct '13

Hi, I have a dovecot IMAP server (version 2.1.7) with Maildirs and a virtual user setup (e.g. all accounts are mapped to the same system user). I’d like to create a public namespace shared between users A and B, but not any other user. I tried to set up the namespace as follows: namespace { type = public separator = . prefix = INBOX.XFeeds. location = maildir:/var/vhosts/feeds:INDEX=~/Maildir/feeds/ subscriptions = no } together with a acl-file: /var/vhosts/feeds $ cat dovecot-acl user=A lrwstipekxa user=B lrwipk Now user C cannot access the contents of the XFeeds mailbox, but it still shows up in its IMAP client. How can I make sure that other users cannot observe that this namespace exists? Thanks, Joachim PS: If you collect serverfault reputation, feel free to answer on http://serverfault.com/questions/544061/public-dovecot-namespace-visible-on… as well :-) PPS: Relevant parts of my configuration: first_valid_uid = 109 last_valid_uid = 109 mail_gid = vhost mail_location = maildir:~/Maildir mail_privileged_group = mail mail_uid = vhost managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace { location = maildir:/var/vhosts/feeds:INDEX=~/Maildir/feeds/ prefix = INBOX.XFeeds. separator = . subscriptions = no type = public } namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = INBOX. separator = . } passdb { args = /etc/vhosts/dovecot-userdb driver = passwd-file } plugin { acl = vfile sieve = ~/dovecot.sieve sieve_dir = ~/sieve } userdb { args = uid=vhost gid=vhost home=/var/vhosts/%d/%n driver = static } protocol imap { mail_plugins = " acl" } -- Joachim “nomeata” Breitner mail(a)joachim-breitner.de • http://www.joachim-breitner.de/ Jabber: nomeata(a)joachim-breitner.de • GPG-Key: 0x4743206C Debian Developer: nomeata(a)debian.org

2 3

Re: [Dovecot] Strange output from LIST command
by azurIt 16 Oct '13

16 Oct '13

> Od: Charles Sprickman <spork(a)bway.net> > Komu: azurIt <azurit(a)pobox.sk> > Dátum: 16.10.2013 23:20 > Predmet: Re: [Dovecot] Strange output from LIST command > >I just did a move from Courier to Dovecot 2.2, and also followed the namespace suggestions in the wiki. > >I've not had any issues, but if you want to drop me a note showing the IMAP commands and results you get for LIST, I'll compare locally and let you know if I see anything different… > >Charles >-- >Charles Sprickman >NetEng/SysAdmin >Bway.net - New York's Best Internet www.bway.net >spork(a)bway.net - 212.655.9344 > Thank you. I tried to upgrade to 2.1.17 just to see if it helps - it didn't. Looks like an unfixed bug in 2.1.. I will see tomorrow if i can rebuild Debian experimental packages so i can try version 2.2. azur

2 1

[Dovecot] "Perfect Forward Secrecy" on Redhat/Fedora
by Reindl Harald 15 Oct '13

15 Oct '13

RHEL/CentOS 6.5 will support ECDHE Fedora currently makes the turnaround no wonder that i burned down many hours: https://bugzilla.redhat.com/show_bug.cgi?id=1019390 https://bugzilla.redhat.com/show_bug.cgi?id=319901#c108 ______________________________ recent dovecot with also support older clients but perfer best possible encryption for modern ones ssl_prefer_server_ciphers = yes ssl_cipher_list = EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH+aRSA+RC4:EECDH:EDH+aRSA:RC4:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS:!SSLv2:@STRENGTH ______________________________ the same for Apache: SSLHonorCipherOrder On SSLCipherSuite EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH+aRSA+RC4:EECDH:EDH+aRSA:RC4:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS

1 0

[Dovecot] Using dovecot as LDA for postfix
by Farzad Mahdikhani 15 Oct '13

15 Oct '13

Hi Here is my environment: Red Hat Enterprise Linux Server release 5.7 (Tikanga) postfix-2.9.1-1.rhel5 dovecot 1.0.7 I want to config a complete postfix-dovecot mail server. First I configured postfix to use procmail, its default LDA and dovecot for pop3 and imap. I didn't changed main.cf a lot, just myhostname and a few other properties. I didn't set home_mailbox. About dovecot.conf here is the output of dovecot -n : # 1.0.7: /etc/dovecot.conf log_path: /var/log/dovecot.log protocols: imap pop3 login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login mail_debug: yes mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/lib64/dovecot/imap mail_plugin_dir(imap): /usr/lib64/dovecot/imap mail_plugin_dir(pop3): /usr/lib64/dovecot/pop3 auth default: mechanisms: plain login passdb: driver: pam userdb: driver: passwd As you can see mail_location is not set. At this time everything was OK and working. I was able to send email using SquirrelMail and thunderbird. I got two users, user1 and user2, in my linux machine and when I sent an email from user1(a)software.com to user2(a)software.com the sent mail was saved in /home/user1/mail/Sent and the received email was in /var/mail/user2. The log file for dovecot had entries like this for user1 and user2: dovecot: Oct 14 14:44:52 Info: IMAP(user1): maildir: couldn't find root dir dovecot: Oct 14 14:44:52 Info: IMAP(user1): mbox: root exists (/home/user1/mail) dovecot: Oct 14 14:44:52 Info: IMAP(user1): mbox: INBOX exists (/var/mail/user1) dovecot: Oct 14 14:44:52 Info: IMAP(user1): mbox: root=/home/user1/mail, index=/home/user1/mail, inbox=/var/mail/user1 At this point I tried to change the LDA from procmail to dovecot by the following settings: I added/changed the following in the main.cf: mailbox_command = /usr/libexec/dovecot/deliver dovecot_destination_recipient_limit = 1 virtual_mailbox_domains = software.com virtual_transport = dovecot I added the following in the master.cf: dovecot unix - n n - - pipe flags=DRhu user=vmail:vmail argv=/usr/libexec/dovecot/deliver -f ${sender} -d ${recipient} But it didn't work. When I send email from from user2 to user1 the sent email is correctly saved in /home/user2/mail/Sent but it seems that user1 doesn't receive the incoming email. dovecot.log had entries like the following: dovecot: Oct 14 14:54:04 Info: imap-login: Login: user=<user1>, method=PLAIN, rip=::ffff:172.27.7.8, lip=::ffff:172.16.100.183, TLS dovecot: Oct 14 14:54:04 Info: IMAP(user1): Effective uid=504, gid=504, home=/home/user1 dovecot: Oct 14 14:54:04 Info: IMAP(user1): maildir: access(/home/user1/Maildir, rwx): failed: No such file or directory dovecot: Oct 14 14:54:04 Info: IMAP(user1): maildir: couldn't find root dir dovecot: Oct 14 14:54:04 Info: IMAP(user1): mbox: root exists (/home/user1/mail) dovecot: Oct 14 14:54:04 Info: IMAP(user1): mbox: INBOX exists (/var/mail/user1) dovecot: Oct 14 14:54:04 Info: IMAP(user1): mbox: root=/home/user1/mail, index=/home/user1/mail, inbox=/var/mail/user1 Setting home_mailbox = Maildir/ in main.cf and mail_location = maildir:~/Maildir in dovecot.cf didn't help. I have been googling and reading and testing for 4 or 5 days for this but there was no chance. Now, I am stuck and any help would be really really appreciated. Regards, Ferez

4 3

[Dovecot] how to handle logging
by Andreas Schulze 15 Oct '13

15 Oct '13

Hello, I plan a migration to dovecot and have concerns about the amount of logged data. On a testsystem dovecot produced 1TB syslog per day with a comparable amount of pop3 sessions. The current server log to STDOUT which is connected to multilog (circular buffer, http://cr.yp.to/daemontools/multilog.html) That way I can have a look at the last activities to any time. I like to have that in dovecot too. But since dovecot uses syslog it's not possible to adopt 1:1 Any ideas? Thanks -- Andreas Schulze Internetdienste | P252 DATEV eG 90329 Nürnberg | Telefon +49 911 319-0 | Telefax +49 911 319-3196 E-Mail info @datev.de | Internet www.datev.de Sitz: 90429 Nürnberg, Paumgartnerstr. 6-14 | Registergericht Nürnberg, GenReg Nr.70 Vorstand Prof. Dieter Kempf (Vorsitzender) Dipl.-Kfm. Wolfgang Stegmann (stellvertretender Vorsitzender) Dipl.-Kfm. Michael Leistenschneider Dipl.-Kfm. Dr. Robert Mayr Jörg Rabe v. Pappenheim Dipl.-Vw. Eckhard Schwarzer Vorsitzender des Aufsichtsrates: Reinhard Verholen

4 5

[Dovecot] POP3 Setup help - more info
by Thomas I Higgins 14 Oct '13

14 Oct '13

Well my last email went unaswered - I assume because I didn't provide enough detailed information. Not a surprise if that is the case. Anyway, I also noted that there is no dovecot/pop3 process like there is for IMAP. Not certain that is wrong, but I am guessing it is. I am enclosing the output from a doveconf -an query - hopefully you can see a screenshot, otherwise I have to figure out how to get it in text form (work disables cp & scp traffic). Hopefully this will provide information that will help define what I am missing? Thanks again, Thomas Higgins

5 4

[Dovecot] Analyzing and correlating Dovecot with Postfix logs
by Igor David 14 Oct '13

14 Oct '13

Hi All, I was wondering if anyone knows what are best practices for correlating logs between Postfix and Dovecot ? I am having setup with postfix + amavisd + spamassassin + dovecot and everything looks like a charm for few years now. However, when e-mail arrives to my system, postfix is sending it to amavisd on port 10024, which is returning back to postfix on 10025, and postfix is then delivering e-mail to Dovecot (which is acting as LDA), so I can find e-mail header via message-ID easily in Postfix logs. But after that I cannot find e-mail in my Dovecot Maildir list as a filename, as Dovecot is having it's own way of storing e-mails in Maildir format, and I can't see that messageID in directory. I can grep all e-mails which can take some time, so I was wondering if there is more appropriate work around or setup Postfix/Dovecot, e.g. to modify somehow dovecot Maildir naming convention or similar? I was trying to find answer around but could not so any help is appreciated! Versions: Dovecot: 2.1.13 Amavisd: amavisd-new-2.6.6 postfix: 2.3.3 Thanks in advance! -- Kind regards, Igor

1 0

[Dovecot] Email address with special characters in userdb
by Arnon Weinberg 14 Oct '13

14 Oct '13

Hi, I have a userdb file set up in passwd-file format containing the following entries: >doveadm user test1*test2(a)test.com test1-test2(a)test.com test1étest2(a)test.com test1@test2@test.com test1%test2(a)test.com I can access the 1st entry (no special characters) no problem: >doveadm user test1-test2(a)test.com -f home /var/vmail The 2nd entry (using UTF-8 encoding) doesn't come up: >doveadm user test1étest2(a)test.com -f home userdb lookup: user test1étest2(a)test.com doesn't exist The 3rd entry does come up: >doveadm user test1@test2@test.com -f home /var/vmail but Postfix escapes this case using quotes, and they don't work: >doveadm user '"'test1@test2'"'@test.com userdb lookup: user "test1@test2"@test.com doesn't exist The 4th entry does not come up at all: >doveadm user test1%test2(a)test.com -f home userdb lookup: user test1%test2(a)test.com doesn't exist I believe these are all valid characters for email addresses (per the RFC) except '@' (which ironically works without escaping). How can I get them working? >dovecot --version 2.1.16 -- Arnon Weinberg www.back2front.ca

2 1

[Dovecot] LMTP Proxy auth
by claus.r＠bayern-mail.de 14 Oct '13

14 Oct '13

Hi, i tried to use lmtp proxy to a cyrus-server where i need authentication. My passdb lookup gives me: user=mailbox(a)cyrus.serv.er host=192.168.1.1 proxy=Y pass=secret destuser=cyrus_lmtp_master As i see in packettrace to the lmtp-cyrus-server the dovecot-proxy didn't try any authentication. Could someone please confirm to me that LMTP proxy with auth isn't supported or is there any configuration issue i have missed?

1 0

[Dovecot] Questions about special_use mailboxes
by Florian Lindner 14 Oct '13

14 Oct '13

Hello, I am using using dovecot 2.1.7 from debian stable: namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Spam { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } I monitor IMAP traffic using the MUA trojita. When I select the mailbox Drafts: >>> y10 SELECT Drafts (QRESYNC (1381746443 1)) <<< * FLAGS (\Answered \Flagged \Deleted \Seen \Draft) <<< * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft \*)] Flags permitted. Flag is \Draft instead of \Drafts? When I select Sent >>> y12 SELECT Sent (QRESYNC (1381746442 7 (2 2))) <<< * OK [CLOSED] Previous mailbox closed.␍␊ <<< * FLAGS (\Answered \Flagged \Deleted \Seen \Draft $SENT) <<< * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft $SENT \*)] Flags permitted. Why is the flag $SENT ? http://www.faqs.org/rfcs/rfc6154.html mentiones nothing like that. When I select Spam: >>> y14 SELECT Spam (QRESYNC (1381746444 1)) <<< * OK [CLOSED] Previous mailbox closed. <<< * FLAGS (\Answered \Flagged \Deleted \Seen \Draft) <<< * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft \*)] Flags permitted. No flag at all? Or am I getting IMAP wrong? Thanks, Florian

1 0

[Dovecot] dovecot 2.2.x and replication with dsync and shared / public namespace
by romain 13 Oct '13

13 Oct '13

Hi, I'm trying to configure replication with dsync on Dovecot 2.2.5 (and latest nightly). I did followed the guide at http://wiki2.dovecot.org/Replication But I can get dsync-server working only if my users do not have access to shared mailboxes and / or public mailboxes which is problematic for our setup. dsync-server is trying to create folders in public/ namespace : ------------------------------------- 2013-09-23 20:34:04 dsync-server(adupont): Panic: file dsync-brain-mailbox-tree.c: line 384 (dsync_brain_mailbox_tree_add_delete): assertion failed: (other_node->ns == NULL || other_node->ns == node->ns) 2013-09-23 20:34:04 dsync-server(adupont): Error: Raw backtrace: /usr/local/lib/dovecot/libdovecot.so.0(+0x64faa) [0x7f7bf42dcfaa] -> /usr/local/lib/dovecot/libdovecot.so.0(+0x64fee) [0x7f7bf42dcfee] -> /usr/local/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7f7bf4299299] -> dovecot/doveadm-server() [0x41ba52] -> dovecot/doveadm-server(dsync_brain_recv_mailbox_tree_deletes+0xbb) [0x41c39b] -> dovecot/doveadm-server(dsync_brain_run+0x37c) [0x41972c] -> dovecot/doveadm-server() [0x419bf8] -> dovecot/doveadm-server() [0x42ba20] -> /usr/local/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x36) [0x7f7bf42ed3d6] -> /usr/local/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0xaf) [0x7f7bf42ee23f] -> /usr/local/lib/dovecot/libdovecot.so.0(io_loop_run+0x28) [0x7f7bf42ecf18] -> dovecot/doveadm-server() [0x416e59] -> dovecot/doveadm-server() [0x40cc77] -> dovecot/doveadm-server() [0x415ddd] -> /usr/local/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x36) [0x7f7bf42ed3d6] -> /usr/local/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0xaf) [0x7f7bf42ee23f] -> /usr/local/lib/dovecot/libdovecot.so.0(io_loop_run+0x28) [0x7f7bf42ecf18] -> /usr/local/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f7bf429e553] -> dovecot/doveadm-server(main+0x11b) [0x40c9eb] -> /lib64/libc.so.6(__libc_start_main+0xed) [0x7f7bf3f0932d] -> dovecot/doveadm-server() [0x40ca59] 2013-09-23 20:34:04 dsync-server(adupont): Fatal: master: service(doveadm): child 28131 killed with signal 6 (core dumped) ------------------------------------- dsync-server is trying to create folders in shared/ namespace : ------------------------------------- 2013-09-23 20:34:05 dsync-server(s.durant): Panic: file dsync-mailbox-tree-sync.c: line 1029 (sync_create_mailboxes): assertion failed: (node->ns == other_node->ns) 2013-09-23 20:34:05 dsync-server(s.durant): Error: Raw backtrace: /usr/local/lib/dovecot/libdovecot.so.0(+0x64faa) [0x7ffb6fd74faa] -> /usr/local/lib/dovecot/libdovecot.so.0(+0x64fee) [0x7ffb6fd74fee] -> /usr/local/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7ffb6fd31299] -> dovecot/doveadm-server() [0x426025] -> dovecot/doveadm-server(dsync_mailbox_trees_sync_init+0x139) [0x427789] -> dovecot/doveadm-server(dsync_brain_recv_mailbox_tree_deletes+0xdd) [0x41c3bd] -> dovecot/doveadm-server(dsync_brain_run+0x37c) [0x41972c] -> dovecot/doveadm-server() [0x419bf8] -> dovecot/doveadm-server() [0x42ba20] -> /usr/local/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x36) [0x7ffb6fd853d6] -> /usr/local/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0xaf) [0x7ffb6fd8623f] -> /usr/local/lib/dovecot/libdovecot.so.0(io_loop_run+0x28) [0x7ffb6fd84f18] -> dovecot/doveadm-server() [0x416e59] -> dovecot/doveadm-server() [0x40cc77] -> dovecot/doveadm-server() [0x415ddd] -> /usr/local/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x36) [0x7ffb6fd853d6] -> /usr/local/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0xaf) [0x7ffb6fd8623f] -> /usr/local/lib/dovecot/libdovecot.so.0(io_loop_run+0x28) [0x7ffb6fd84f18] -> /usr/local/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7ffb6fd36553] -> dovecot/doveadm-server(main+0x11b) [0x40c9eb] -> /lib64/libc.so.6(__libc_start_main+0xed) [0x7ffb6f9a132d] -> dovecot/doveadm-server() [0x40ca59] 2013-09-23 20:34:05 dsync-server(s.durant): Fatal: master: service(doveadm): child 28137 killed with signal 6 (core dumped) ------------------------------------- If I run the command "doveadm -v sync -u my.user -f tcp:10.20.0.2:12345" mailboxes are sync correctly. No problem with public and shared mailboxes. If i run the command doveadm replicator replicate 's.durant' or doveadm replicator replicate '*', I get plenty of Panic / Error for all users that can access Public mailboxes or Shared mailboxes. Regards, MARIADASSOU Romain

1 1

[Dovecot] Problem with PAM, vpopmail and Roundcube
by ede＠ede.com.ec 12 Oct '13

12 Oct '13

Hello, I have a problem to which I have not been able to find a solution by myself or online. I have Dovecot running together with Qmail on a CentOS server. I need to be able to control which users are allowed IMAP access and at the same time allow IMAP access for all users when the requests are coming from a specific IP. My problem has two parts, detailed below. ----------------------------------------------------------- 1. PAM not working to allow access only for specified users ----------------------------------------------------------- Right now I am controlling IMAP access with [vmoduser -i] in Qmail which is not what I want. I need the IMAP access to be closed for everyone and then specify which users are allowed to access. I tried using [pam.d] for this as per http://wiki.dovecot.org/Authentication/RestrictAccess but although I am not getting any errors, all users are still allowed access unless I block them with [vmoduser -i]. In [dovecot.conf] I have: passdb pam { args = * } In [/etc/pam.d/imap] I have: auth required pam_listfile.so item=user sense=allow file=/etc/imapusers onerr=fail And in [/etc/imapusers] I have specified the only users that should have access. Any ideas why this isn't working? ------------------------------------------------------- 2. Allow access for all users coming from a specific IP ------------------------------------------------------- I have a Roundcube installation running on an external server and I need *all* my users to be able to use the Webmail regardless if they have IMAP or only POP access from their computer or mobile devices. Using PAM I tried in [/etc/pam.d/imap]: auth required pam_listfile.so item=user sense=allow file=/etc/imapusers onerr=fail allow_nets=127.0.0.0/8,192.168.0.0/16,1.2.3.4 ...where the webmail installation would be installed at IP [1.2.3.4]. But no luck! ------------------------------------------------------- Please - if there are anyone with ideas I could really use them. I have been going around in circles for the last couple of weeks and I don't know what to do! Sincerely, Daniel

2 2

[Dovecot] Problem with Dovecot after upgrade to Debian 7.0 (stable)
by Milan Milošević 12 Oct '13

12 Oct '13

Dear all, few days ago I updated Debian to the latest stable and since then Dovecot is not working. I use Dovecot as LDA for Postfix and also for IMAP access. Also I used SASL and everything was ok before update. After I updated to Dovecot 2.1.7 (it used to be 1.x before) it looks like that e-mail delever is working but I can not configure IMAP access to work. All users/passwords are stored as local users in /etc/passwd When I tried to connect to imap log file shows: Oct 12 22:16:16 seenet-mtp dovecot: auth-worker(24788): Debug: pam(user(a)mydomain.com,178.x.y.z): lookup service=dovecot Oct 12 22:17:16 seenet-mtp dovecot: auth: Error: auth worker: Aborted request: Lookup timed out Also tested access opensasl clent and after I tried to log in I have received: * OK Waiting for authentication process to respond.. tar NO [UNAVAILABLE] Temporary authentication failure. [seenet-mtp:2013-10-12 20:20:27] # doveconf -n # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-686-pae i686 Debian 7.2 auth_debug = yes auth_debug_passwords = yes auth_mechanisms = plain login auth_verbose = yes auth_verbose_passwords = plain login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c mail_location = maildir:/%h/mail namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } protocols = " imap" service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } } ssl_cert = </etc/dovecot/dovecot.pem ssl_key = </etc/dovecot/private/dovecot.pem syslog_facility = local0 userdb { driver = passwd } Please help, Milan ps. Sorry for my English.

3 4

[Dovecot] Transparent Migration from cyrus to dovecot
by Jogi Hofmüller 12 Oct '13

12 Oct '13

Hi dovecot people, We are in the process of preparing the migration from a cyrus 2.1 installation to dovecot. Dovecot will be installed on new hardware, so we have separated servers that can/will exist in parallel for a while. Our goal is to do the migration without interrupting the service for our users too much. Currently we tend to using dsync. So I am asking for best practice suggestions, tips and hints from people who have done such a thing before. Curiously awaiting your replies ;) Cheers! PS: I am subscribed to the list. So no need to include my address in replies. Thanks! -- j.hofmüller Optimism doesn't alter the laws of physics. - Subcommander T'Pol

7 9

[Dovecot] Dovecot 2.2.6 comression library build error
by Dimitri 11 Oct '13

11 Oct '13

Hi, I'm trying to build Dovecot 2.2.6 under Mageia Linux, and there are two issues. 1. I get the following errors during build, please see http://pastebin.com/RmSRZPip - the compression library requires dlopen/dlsym/etc functions, but the library providing them is not mentioned in the linking command. I've managed to workaround this by adding -ldl to the corresponding src/lib-compression/Makefile.in line. 2. The lib90_sieve_extprograms_plugin.so library gets installed into <libdir>/dovecot/sieve (and it's the only file to reside there), while all other modules are installed into <libdir>/dovecot/modules. Has this been done on purpose? For Mageia package, I've decided to move this file to the standard location. Thanks, Dimitri Mageia Linux packager

1 0

[Dovecot] re-sorting emails in chrono order
by voytek＠sbt.net.au 11 Oct '13

11 Oct '13

dovecot 2.1.1 I access my IMAP folders through SquirrelMail as a result of 'part copying' (probably through web client ? not sure), that is copying/moving some emails, later, the rest, I have a sub folder where I have maybe 30 emails from 2012 appear at the very end like so 2013/2012/2010/.../2006/2005/2012 how can I re-sort ? thanks Voytek

1 0

[Dovecot] Doveadm with a 2nd Instance
by Chris Lasater 11 Oct '13

11 Oct '13

Hi Guys, I am trying to use 2 instances of Dovecot on the same server so I can have a Director managing my connections, everything appears to be working, but I can not use doveadm to control my 2nd instance, but doveconf seems to work fine. [user@server logs]$ doveconf -i Director | grep logs debug_log_path = /home/user/apps/logs/director/director_debug.log info_log_path = /home/user/apps/logs/director/director_info.log log_path = /home/user/apps/logs/director/director.log info_log_path = /home/user/apps/logs/director/director_lmtp.log [user@server logs]$ doveadm -i Director log find Debug: /home/user/apps/logs/dovecot_debug.log Info: /home/user/apps/logs/dovecot_info.log Warning: /home/user/apps/logs/dovecot.log Error: /home/user/apps/logs/dovecot.log Fatal: /home/user/apps/logs/dovecot.log I have stopped and started both my instances so the config running is what is in the config file, but when I use -i Director with doveadm it uses the other instances config. [user@server logs]$ doveadm instance list path name last used running /home/user/apps/dovecot/var/run/dovecot Dovecot 2013-09-26 00:39:14 yes /home/user/apps/dovecot/var/run/director Director 2013-09-26 00:32:31 yes Any ideas, or does anyone have any experience with the Dovecot instance feature? Chris

4 6

[Dovecot] Solr issue with Zlib
by Ricardo Branco 11 Oct '13

11 Oct '13

I have found that if you the fts_solr plugin is listed after Zlib it will cause an indexing problem where any message that was compressed with Zlib is submitted to solr without being uncompressed. The order of the plugins is important. Not sure if this can be fixed but im trying to add a wiki note. -- The information contained in or attached to this email is intended only for the use of the individual or entity to which it is addressed. If you are not the intended recipient, you are not authorised to and must not disclose, copy, distribute, or retain any message or any part of it. If you have received an email in error, please contact the sender and delete the material from any computer. The contents of this email are not for publication unless specifically stated. Furthermore, the information contained in this message, and any attachment(s) thereto, is for information purposes only and may contain the personal views and opinions of the author, which are not necessarily the views and opinions of WENN or its subsidiaries and associated companies. We make every effort to keep our network free from viruses. However, you do need to check this e-mail and any attachments to it for viruses as we can take no responsibility for any computer virus which may be transferred by way! of this e-mail. WENN Ltd: Registered Office: 35 Tileyard Studios, Tileyard Road, London, N7 9AH, England. Registered No: 4375163. Place of Registration: United Kingdom. USA Entertainment News Inc (d/b/a WENN): Registered Office: 352 7th Avenue, Suite 1105, New York, NY 10001-5657, USA The WENN name, design and related marks are trademarks of the WENN group of companies. (c) 2013 All Rights Reserved.

1 0

[Dovecot] ./configure not checking solr deps
by Ricardo Branco 11 Oct '13

11 Oct '13

It seems that when you run ./configure with --with-solr it does not check for deps libcurl and libexpat. When we compiled it silently went though and still compiled without a problem then missed installing solr. Maybe im missing something? -- The information contained in or attached to this email is intended only for the use of the individual or entity to which it is addressed. If you are not the intended recipient, you are not authorised to and must not disclose, copy, distribute, or retain any message or any part of it. If you have received an email in error, please contact the sender and delete the material from any computer. The contents of this email are not for publication unless specifically stated. Furthermore, the information contained in this message, and any attachment(s) thereto, is for information purposes only and may contain the personal views and opinions of the author, which are not necessarily the views and opinions of WENN or its subsidiaries and associated companies. We make every effort to keep our network free from viruses. However, you do need to check this e-mail and any attachments to it for viruses as we can take no responsibility for any computer virus which may be transferred by way! of this e-mail. WENN Ltd: Registered Office: 35 Tileyard Studios, Tileyard Road, London, N7 9AH, England. Registered No: 4375163. Place of Registration: United Kingdom. USA Entertainment News Inc (d/b/a WENN): Registered Office: 352 7th Avenue, Suite 1105, New York, NY 10001-5657, USA The WENN name, design and related marks are trademarks of the WENN group of companies. (c) 2013 All Rights Reserved.

1 0

[Dovecot] Sieve and Namespace in dovecot 2.0.X
by Mauricio Tavares 11 Oct '13

11 Oct '13

Based on what I read in http://wiki2.dovecot.org/Pigeonhole/Sieve/Usage, if I have a namespace defined as tail conf.d/10-mail.conf namespace inbox { inbox = yes location = prefix = INBOX. separator =. type = private } A global script like cat /etc/dovecot/sieve/global-spam.sieve require ["fileinto", "regex"]; # Must use regex here as 'contains' may not be valid, it erroneously # moved: # X-Spam-Status: No, score=-4.0 required=8.0 tests=ALL_TRUSTED,BAYES_00, # DCC_CHECK_NEGATIVE,HTML_MESSAGE,T_TM2_M_HEADER_IN_MSG,UNTRUSTED_Relay, # XM_SPF_Neutral autolearn=disabled version=3.2.5, No # # Due to the 'YES' in BAYES, let's just make sure YES is at the # _beginning_ of X-Spam-Status, while ignoring anything past it. #if header :regex "X-Spam-Status" "^[Yy][Ee][Ss].*" { if header :matches "X-Spam-Status" "Yes*" { fileinto "INBOX.Spam"; stop; } should put spam in bob/.Spam. But, I am getting an error message stating that INBOX.Spam does not exist: Oct 11 09:57:33 mail dovecot: lda(bob(a)domain.com): Error: sieve: msgid=<0.0.0.71C.1CEC689A21CFF08.7068B7(a)ip.aidolip.us>: failed to store into mailbox 'INBOX.Spam': Mailbox doesn't exist: INBOX.Spam How come?

2 5

[Dovecot] Optimisation opportunity for IMAP searches
by Rick van Rein (OpenFortress) 11 Oct '13

11 Oct '13

Hello, I love Dovecot, but when developing a small IMAP tool, I ran into searching behaviour can easily be optimised. Please forgive a rather detailed suggestion. This was on Dovecot 1.2.15 on Debian Squeeze. My tool? It's called "midget" and retrieves documents from an IMAP box based on their mid: or cid: identifier, as per RFC 2392. I thought this would be useful to retrieve email attachments into a remote shell environment. When using Kerberos, the credentials and a strong hint of one's mail address are already present anyway, DNS SRV does the rest. If you want to see the early code, I'll be happy to share it here. The three formats of the URIs in RFC 2392 are: * mid:messageid * cid:contentid * mid:messageid/contentid Searching for a mid: with only a Message-ID part is quick and probably indexed, (HEADER Message-ID <messageid>) Searching for a cid: meant ploughing through body text to get to the attachments, so it was a slow and costly and needed checking of the outcome: (TEXT <contentid>) The quicker URI form to get to a Content-Id should be to mention it at the end of a mid: URI, and search for (HEADER Message-ID <messageid>)(TEXT <conentid>) Much to my surprise, this took about as long as the cid: query -- ploughing through lots of body text while it only needed to look through a one message bodies! As a human, I can see a straightforward improvement. However, it is more difficult to find a general solution -- but that is what I'm describing below, in the hope that it will help to improve Dovecot's search performance. 0. In general, searches are Boolean expressions composed with implied AND and explicit (NOT …) and (OR ….) constructs. 1. Using the theorems of The Morgan, push all (NOT …) constructs inside as far as possible, until they surround elementary statements. Some may have a trivial solution, such as (NOT (ALL)). Others will retain the NOT but that might be handled with a different use of the indexes. In general, this phase turns all AND and OR constructs into positive logic, without duplicating search terms. 2. Estimate the effort involved in every part of the calculation. (HEADER) is lighter than (TEXT) and headers may be further split into with / without index. Larger sets could be more work to search than smaller ones. In general, an estimate of the number of comparisons could be a good metric for work to be done. 3. For AND compositions, start with the simplest one in the AND compostition, and continue with increasingly heavier ones. Apply later conditions only on the output of the previous conditions, either after collecting all of it or everytime something is found. Whatever is optimal -- bulk operations are more efficient, but may collect large sets to handle. 4. For OR compositions, either start a thread for each part, or switch focus and collect sorted streams into one collectively sorted stream. I've been doing this stuff all through my PhD thesis work, so it come easy to me :-) But this optimisation does not appear to be implemented yet, so I thought I'd suggest it. I hope this is useful to Dovecot! Best wishes, Rick van Rein

2 2

[Dovecot] Questio about replication
by Patrick Westenberg 11 Oct '13

11 Oct '13

Hi everyone, this article (http://blog.dovecot.org/2012/02/dovecot-clustering-with-dsync-based.html) describes the situation for director/NFS-based clusters and SSH-based clusters. Right now I'm running the first setup with one proxy/director and two backends (all 2.2.x) mounting an NFS-share but I'd like to get rid of NFS (it's slow) and, if one backend is down, the proxy still sends the user to that backend. The article says: "High-availability non-NFS setup One possibility is to use Dovecot proxies, which know which servers are down. Instead of directing users to those servers, it would direct them to replica servers." My question is, if I can still use my proxy/direcot setup but every backend having it's local (or iSCSI-backed) ext4 storage and not using the SSH-based replication method? Regards Patrick

2 1

[Dovecot] SSL with startssl.com certificates
by Dan Langille 10 Oct '13

10 Oct '13

I'm using Dovecot 2.2.5. I'm setting up and new IMAPS server for personal use (i.e. only me). I have success with self-signed certificates but not with others (e.g. StartSSL.com) With StartSSL certs: I've been able to connect and test commands via: openssl s_client -connect imaps.unixathome.org:993 Can you configure your iPhone or Macbook to access the above? Authentication isn't the issue. Connection is the issue. I've been able to get Thunderbird to connect and access my mail. However, I've been unable to get my iPhone or my Mac configured to use the same IMAP server. On the iPhone, adding the new Mail account causes the Settings app to crash on a persistently consistent basis when adding the new account. The crash occurs when connecting to the IMAPS server. Configuration never completes. I suspect the problem is SSL because in both cases (iPhone and Mac), I see these messages I see in the logs: *** /var/log/debug.log *** Sep 13 11:50:32 imaps dovecot: imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3 read client certificate A [166.137.84.11] Sep 13 11:50:45 imaps dovecot: auth: Debug: auth client connected (pid=31647) Sep 13 11:50:45 imaps dovecot: imap-login: Debug: SSL: where=0x10, ret=1: before/accept initialization [166.137.84.11] Sep 13 11:50:45 imaps dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: before/accept initialization [166.137.84.11] Sep 13 11:50:45 imaps dovecot: imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv2/v3 read client hello A [166.137.84.11] Sep 13 11:50:45 imaps dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read client hello A [166.137.84.11] Sep 13 11:50:45 imaps dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write server hello A [166.137.84.11] Sep 13 11:50:45 imaps dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write certificate A [166.137.84.11] Sep 13 11:50:45 imaps dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write server done A [166.137.84.11] Sep 13 11:50:45 imaps dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 flush data [166.137.84.11] Sep 13 11:50:45 imaps dovecot: imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3 read client certificate A [166.137.84.11] *** /var/log/maillog *** Sep 13 11:50:46 imaps dovecot: imap-login: Warning: SSL failed: where=0x2002: SSLv3 read client certificate A [166.137.84.11] Sep 13 11:50:46 imaps dovecot: imap-login: Disconnected (no auth attempts in 1 secs): user=<>, rip=166.137.84.11, lip=199.233.228.197, TLS handshaking: Disconnected, session=<a7AJd0LmWwCmiVQL> /usr/local/etc/ssl/imaps.unixathome.org.crt contains only the cert issued by StartSSL /usr/local/etc/ssl/imaps.unixathome.org.nopassword.key contains a no-password key generated by myself. Output of doveconf -n: # 2.2.5: /usr/local/etc/dovecot/dovecot.conf # OS: FreeBSD 9.1-RELEASE-p6 amd64 auth_debug = yes auth_verbose = yes first_valid_gid = 1001 first_valid_uid = 1001 mail_debug = yes mail_location = maildir:~/Maildir mail_privileged_group = mail passdb { args = scheme=BLF-CRYPT /var/db/dovecot.users driver = passwd-file } protocols = imap service imap-login { inet_listener imap { port = 0 } inet_listener imaps { address = 199.233.228.197 } } ssl = required ssl_cert = </usr/local/etc/ssl/imaps.unixathome.org.crt ssl_key = </usr/local/etc/ssl/imaps.unixathome.org.nopassword.key userdb { args = /var/db/dovecot.users driver = passwd-file } verbose_proctitle = yes verbose_ssl = yes protocol imap { imap_client_workarounds = delay-newmail tb-extra-mailbox-sep } -- Dan Langille - http://langille.org/

10 53

[Dovecot] cached message size errors
by Charles Sprickman 10 Oct '13

10 Oct '13

Hello, We recently moved from courier to dovecot, and I'm seeing a handful of errors that prevent people from retrieving email. Below is a snippet of the log sequence I see when this happens: Oct 10 13:44:24 mbox dovecot: imap(xxx(a)bway.net): Error: Cached message size smaller than expected (1759 < 1830) Oct 10 13:44:24 mbox dovecot: imap(xxx(a)bway.net): Error: Maildir filename has wrong S value, renamed the file from /home/vpopmail/domains/bway.net/1/xxx/Maildir/cur/1381381552.91972.xena.bway.net,S=1759:2,b to /home/vpopmail/domains/bway.net/1/xxx/Maildir/cur/1381381552.91972.xena.bway.net,S=1830:2,b Oct 10 13:44:24 mbox dovecot: imap(xxx(a)bway.net): Error: Corrupted index cache file /home/vpopmail/domains/bway.net/1/xxx/Maildir/dovecot.index.cache: Broken physical size for mail UID 447401 Oct 10 13:44:24 mbox dovecot: imap(xxx(a)bway.net): Error: read(/home/vpopmail/domains/bway.net/1/xxx/Maildir/cur/1381381552.91972.xen… failed: Invalid argument Oct 10 13:44:24 mbox dovecot: imap(xxx(a)bway.net): Disconnected: Internal error occurred. Refer to server log for more information. [2013-10-10 13:44:24] in=784 out=3017 Basically it looks like dovecot detects a mismatch in the file size vs. the file size embedded in the maildir filename, tries to fix it and then has issues reading the fixed file. Removing the file in question allows the user to retrieve email. The "invalid argument" error seems especially strange, as I'm able to view the file by hand with no problems. Blowing away the indexes and letting them get recreated seems to not help at all. This was an old vpopmail setup with both maildrop and vdelivermail doing the final delivery both now and prior to the migration to dovecot. For a quick fix, is there a way to have dovecot ignore the error and present the rest of the mailbox? Longer term fix, I'm not even sure where to start I've used dovecot elsewhere for quite some time (with maildirs) and I've never had an issue like this. 'doveconf -n' below... Thanks, Charles -- Charles Sprickman NetEng/SysAdmin Bway.net - New York's Best Internet www.bway.net spork(a)bway.net - 212.655.9344 # 2.2.5: /usr/local/etc/dovecot/dovecot.conf # OS: FreeBSD 8.4-RELEASE-p1 amd64 auth_default_realm = bway.net auth_socket_path = /var/run/dovecot/auth-userdb auth_verbose = yes base_dir = /var/run/dovecot/ default_process_limit = 300 disable_plaintext_auth = no first_valid_uid = 89 instance_name = dovecot1 last_valid_uid = 90 listen = 127.0.0.1,216.220.96.26,216.220.96.25 login_greeting = Dovecot ready - bway.net. mail_plugins = " quota" mailbox_list_index = yes namespace inbox { hidden = no inbox = yes list = yes location = mailbox Drafts { special_use = \Drafts } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Spam { special_use = \Junk } mailbox Trash { special_use = \Trash } prefix = INBOX. separator = . subscriptions = yes type = private } passdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { quota = maildir:User quota quota_rule = Inbox.Trash:storage=+100M quota_rule2 = Inbox.Spam:storage=+100M } pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = %v-%u protocols = imap pop3 ssl_cert = </usr/local/etc/ssl/bwaynet.pem ssl_key = </usr/local/etc/ssl/bwaynet.key userdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol imap { mail_max_userip_connections = 40 mail_plugins = " quota imap_quota" } protocol pop3 { mail_max_userip_connections = 20 }

1 1

[Dovecot] Maildir and home location
by Florian Lindner 10 Oct '13

10 Oct '13

Hello! My current mail setup looks like that: MTA is postfix, MDA is maildrop. Each system user configures mail delivery using the .mailfilter of maildrop to arbitrary maildirs in his home. For each maildir a POP3/IMAP account can be configured, currently I use courier-imap/-pop and think about replacing it by dovecot. AFAIK with dovecot each account has a home and maildir assigned which should not be equal neither should a home dir be used for mulitple accounts. My problem is where to put these homedirs? System users have full SSH access on the machine. I would really prefer to put them somewhere where the users could delete them (if they need to reset or delete their account). Optimal would be in the maildir itself, but... What are your suggestions? Regards, Florian

1 0

[Dovecot] v2.2: Fix to slow process creation in some setups
by Timo Sirainen 10 Oct '13

10 Oct '13

Especially some imap/pop3 login bursts could have caused errors like: imap-login: Error: net_connect_unix(imap) failed: Resource temporarily unavailable Fix in http://hg.dovecot.org/dovecot-2.2/rev/69179ca6007d Explanation & workaround in http://wiki2.dovecot.org/SocketUnavailable : Dovecot v2.2.0 - v2.2.6 were attempting to optimize host.domain lookups by doing them only once in the master process. Unfortunately they were actually doing the lookup every time when creating a new process. In some configuration this lookup could have done a somewhat slow DNS lookup, causing the process creation to become very slow and triggering this message. The fix is in v2.2.7 and you can also workaround this: • Add to dovecof.conf: import_environment = TZ DEBUG_OUTOFMEM DOVECOT_HOSTDOMAIN • Before "dovecot" binary is started, run: export DOVECOT_HOSTDOMAIN=mailserver.example.com (of course changing the value)

1 0

[Dovecot] smartsieve managesieve-login failure with dovecot 2.1.7
by Wouter Berkepeis 09 Oct '13

09 Oct '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, I just subscribed to the mailing list because I am stuck trying to solve a problem getting smartsieve to work with a new version of dovecot. But let me first explain the situation shortly. I am running a mail server at home for personal use, and for fun. At this moment this is an old, slow machine running Debian Squeeze, Dovecot 1.2.15 and Exim 4.72. Authentication is done with LDAP, running OpenLDAP 2.4.23. For managing mail filtering I use Smartsieve 1.0.0-RC2 in conjunction with Dovecot's Managesieve plugin. It's all working properly. But because this machine is slow, I'm now busy upgrading building a new machine running Debian Wheezy, Dovecot 2.1.7 and Exim 4.80. I've got it all running and working now (that is: locally in my lan): imap with dovecot, smtp with exim, Dovecot's sieve plugin working properly, authentication done through LDAP backend. But what I can't get to work is Smartsieve. Looking at the logs on my server I can tell managesieve-login is not working well with Smartsieve. As far as I understand authentication is always done over a secure connection using TLS. Here is some logged output, Dovecot as well as Smartsieve. dovecot-info.log: 2013-10-06 21:16:20 managesieve-login: Info: Disconnected (no auth attempts in 0 secs): user=<>, rip=127.0.0.1, lip=127.0.0.1, TLS handshaking: SSL_accept() failed: error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure: SSL alert number 40, session=<NkXdXhfodwB/AAAB> syslog: Oct 6 21:51:40 jingo smartsieve[12168]: getCryptLib: using rc4 Oct 6 21:51:40 jingo smartsieve[12168]: getCryptLib: using rc4 Oct 6 21:51:40 jingo smartsieve[12168]: FAILED LOGIN: jingo [192.168.2.12] {Private Lotus}: starttls: TLS initialization failed: socket timed out while reading server response: #002 Oct 6 21:51:40 jingo smartsieve[12168]: 2Z#027#015141003200542Z0??1#0130#011#006#003U#004#006#023#002NL1#0230#021#006#003U#004#010#014#012Overijssel1#0200#016#006#003U#004#007#014#007Hengelo1#0!#006#003U#004#012#014#032Private Lotus Organization1#0230#021#006#003U#004#013#014#012Jingo Mail1&0$#006#003U#004#003#014#035jingo.private-lotus.no-ip.net1&0$#006#011*?H?÷#015#001#011#001#026#027amigo(a)private-lotus.org0?#001"0#015#006#011*?H?÷#015#001#001#001#005 Oct 6 21:51:40 jingo smartsieve[12168]: #003#001 Oct 6 21:51:40 jingo smartsieve[12168]: èm¬NþgHÁßt#021×?Ð#011$?f+»#013?#021?ø#013yùZd#032Òí}Ì#012ù?#003xPË What is clear is that somehow no user information is being negotiated. Issuing a manual TLS login give the following results: root@amigos:~# gnutls-cli --starttls -p 4190 jingo.private-lotus.no-ip.net Resolving 'jingo.private-lotus.no-ip.net'... Connecting to '82.161.181.183:4190'... - - Simple Client Mode: "IMPLEMENTATION" "Dovecot Pigeonhole" "SIEVE" "fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave" "NOTIFY" "mailto" "SASL" "" "STARTTLS" "VERSION" "1.0" OK "Dovecot ready." STARTTLS OK "Begin TLS negotiation now." *** Starting TLS handshake - - Ephemeral Diffie-Hellman parameters - Using prime: 1024 bits - Secret key: 1022 bits - Peer's public key: 1024 bits - - Certificate type: X.509 - Got a certificate list of 1 certificates. - Certificate[0] info: - subject `C=NL,ST=Overijssel,L=Hengelo,O=Private Lotus Organization,OU=Jingo Mail,CN=jingo.private-lotus.no-ip.net,EMAIL=amigo(a)private-lotus.org', issuer `C=NL,ST=Overijssel,L=Hengelo,O=Private Lotus Organization,OU=Private Lotus Certificate Authority,CN=private-lotus.no-ip.net,EMAIL=amigo(a)private-lotus.org', RSA key 2048 bits, signed using RSA-SHA, activated `2013-10-03 20:05:42 UTC', expires `2014-10-03 20:05:42 UTC', SHA-1 fingerprint `85ff6b5846a53e7eb5d46c3c4ebfd7beb253ba15' - - The hostname in the certificate matches 'jingo.private-lotus.no-ip.net'. - - Peer's certificate issuer is unknown - - Peer's certificate is NOT trusted - - Version: TLS1.1 - - Key Exchange: DHE-RSA - - Cipher: AES-128-CBC - - MAC: SHA1 - - Compression: NULL Everything OK I guess. Especially the first part of the output is interesting: "IMPLEMENTATION" "Dovecot Pigeonhole" This is what Smartsieve is looking at. With the former version the string was 'dovecot', so I changed this in the 'Managesieve.php' file. This file was already patched as stated on the site. Furthermore I changed everything referring to port 2000 to port 4190. But it still ain't working. Am I doing something wrong? Or is Smartsieve just becoming too outdated to work with newer versions of Dovecot? To get the picture complete, hereby my used config of Dovecot, generated with 'dovecot -n' : root@jingo:~# dovecot -n # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-686-pae i686 Debian 7.1 info_log_path = /var/log/dovecot/dovecot-info.log log_path = /var/log/dovecot/dovecot.log log_timestamp = "%Y-%m-%d %H:%M:%S " mail_location = maildir:~/Maildir managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { mail_log_fields = uid box msgid size flags sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_global_dir = /etc/dovecot/sieve/ } protocols = " imap sieve" service auth-worker { user = $default_internal_user } service imap-login { inet_listener imap { address = * port = 143 } inet_listener imaps { address = * port = 993 } } service managesieve-login { executable = /usr/lib/dovecot/managesieve-login inet_listener sieve { port = 4190 } } service managesieve { executable = /usr/lib/dovecot/managesieve } ssl_cert = </etc/pki_jingo/private-lotus_CA/certs/server.crt ssl_cipher_list = HIGH:+TLSv1:+SSLv3:!LOW:!SSLv2:!EXP:!aNULL ssl_key = </etc/pki_jingo/private-lotus_CA/private/server.key ssl_protocols = !SSLv2 SSLv3 userdb { args = /etc/dovecot/dovecot-ldap-userdb.conf.ext driver = ldap } protocol lda { info_log_path = /var/log/dovecot/deliver.log log_path = /var/log/dovecot/deliver-errors.log mail_plugin_dir = /usr/lib/dovecot/modules mail_plugins = sieve postmaster_address = amigo(a)private-lotus.org } protocol imap { mail_max_userip_connections = 50 } protocol sieve { mail_debug = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave } Any help would be appreciated. Thanks in advance. Greetings Wouter -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQEcBAEBAgAGBQJSUeueAAoJEHmiGeisoomH6LEH/irXWxa7kRDB1Gy929Z7E1p6 sZR7pk3tfDPz5PUPNVro+8AG5a+mjUhlVVsxi7pHfadgqGmXZmbbpQLBKQcAbtHI WzY//0t6Dvnn/ywBloWIarWO10SGFRrMBKEBJp/5glUJu0XMnB1PLEZjpFKobwuo WBHjynIEs9fzPjPk7/Kc74LysbtQ931OSeKFsLfqMfP3/Iem75CLGgNg8QFuzZj3 yTv/Kk2D8gMkvSNsP1dmZ8i2B3p75kV6hTvbU9Z8fS2P1rqi3DpbRilKXxw0wMdi gRE3r8yfcRCOhA7vjRe6o63DbadeDm0ZTepIcf8cjFtd9Bsq3cdS9TqUH//jMPI= =Rv4p -----END PGP SIGNATURE-----

4 12

[Dovecot] dovecot: ssl-params
by Frank Elsner 09 Oct '13

09 Oct '13

Hello *, what is the reason for this strange behaviour? May I ignore it? Oct 8 19:32:20 seymour dovecot: ssl-params: Generating SSL parameters Oct 8 19:32:29 seymour dovecot: ssl-params: SSL parameters regeneration completed Oct 9 07:01:05 seymour dovecot: ssl-params: Generating SSL parameters Oct 9 07:01:06 seymour dovecot: imap-login: Login: frank, 192.168.28.1, TLS Oct 9 07:01:06 seymour dovecot: ssl-params: SSL parameters regeneration completed Oct 9 07:01:07 seymour dovecot: ssl-params: Error: epoll_ctl(del, 7) failed: No such file or directory Oct 9 07:01:07 seymour dovecot: ssl-params: Error: epoll_ctl(del, 8) failed: No such file or directory Kind regards, Frank Elsner

1 0

[Dovecot] shared or acl or etc
by John Smith 09 Oct '13

09 Oct '13

Hello, I need help: [root@dovecot]# dovecot -n # 2.1.16: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-358.18.1.el6.x86_64 x86_64 CentOS release 6.4 (Final) auth_debug = yes auth_mechanisms = plain login auth_use_winbind = yes auth_username_format = %u auth_verbose = yes base_dir = /var/run/dovecot/ disable_plaintext_auth = no listen = * mail_access_groups = vmail mail_debug = yes mail_gid = 5000 mail_location = maildir:~/:LAYOUT=fs mail_plugins = " quota acl" mail_privileged_group = vmail mail_uid = 5000 mbox_write_locks = fcntl namespace { list = children location = maildir:%%h:INDEX=~/shared/%%u prefix = shared/%%u/ separator = / subscriptions = no type = shared } namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { acl = vfile:/etc/dovecot/global-acls:cache_secs=300 autocreate = Sent autocreate2 = Trash autocreate3 = Drafts autosubscribe = Sent autosubscribe2 = Trash autosubscribe3 = Drafts quota = maildir:User quota quota_rule = *:storage=100M quota_rule2 = Trash:storage=+100M quota_rule3 = Sent:storage=+100M quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u } service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } unix_listener auth-userdb { mode = 0666 user = vmail } } service quota-warning { executable = script /usr/local/bin/quota-warning.sh unix_listener quota-warning { user = vmail } user = dovecot } ssl = no ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } userdb { args = uid=5000 gid=5000 driver = static } valid_chroot_dirs = /home/vmail/ protocol imap { mail_plugins = " quota acl autocreate imap_quota imap_acl" } [root@dovecot]# grep -v '^ *$#.*$\?$' dovecot-ldap.conf.ext hosts = dc1.domain.local dc2.domain.local dn = CN=ldapsearch,OU=Service Accounts,DC=domain,DC=local dnpass = ****** auth_bind = yes auth_bind_userdn = %Lu base = OU=GroupOfCompanies,DC=domain,DC=local deref = never scope = subtree user_filter = (&(!(userAccountControl:1.2.840.113556.1.4.803:=2))(|(mail=%Lu)(otherMailbox=%Lu)(sAMAccountName=%Lu))) user_attrs = sAMAccountName=home=/home/vmail/%L$, maxStorage=quota_rule=*:bytes=%$M pass_filter = (&(sAMAccountType=805306368)(sAMAccountName=%Lu)) pass_attrs = sAMAccountName=user,userPassword=password With these settings the domain users successfully authenticate and can receive mail from their mail_localtion, however there are a few users with the same email address, but different sAMAccountName These users use the same e-mail on all connected by imap. Tell me how to beat this situation?

2 1

[Dovecot] POP3 Setup help
by Thomas I Higgins 09 Oct '13

09 Oct '13

I am lost as to what I am missing. I am setting up dovecot 2.0.9 on a RHEL 6.4 machine as provided by my provider. I have IMAP up and running, and I have POP3 up and running. Testing confirms this. Also, if it makes a difference, I enabled dovecot as my LDA. Sendmail was setup as well due to our 1.x version using it and I though I had to. Anyway, everything is working perfectly with the services, except the mail is sending to the wrong location for POP. I am trying to use Maildir for both services, but it keeps delivering the POP3 mail to /var/spool/mail/u% instead of to Maildir as specified in the configuration files. I have rechecked every setting at least twice and still can't see what I am doing wrong. I suppose I can use mbox and redirect after making the appropriate namespace changes, but that has it's own potential drawbacks and seems more like a kludge than the correct way around this (unless I misunderstand how it should work). Can anyone point me in the right direction on how to fix this? Thanks in advance, Thomas Higgins

3 2

[Dovecot] cas proxy ticket as password
by b m 08 Oct '13

08 Oct '13

Hi everybody. Hi I'm tryingto use CAS for authenticating in dovecot. I have installed pam_cas and when I try castest i get "<cas:authenticationSuccess>" for my service (imaps://mywebmail.com) But when I actually try to login, dovecot uses the PT from the cas server as password. Any ideas what I'm missing? Thanks a lot.

1 0

Re: [Dovecot] Proxy to gmail not working
by Joseph Tam 07 Oct '13

07 Oct '13

On Mon, 7 Oct 2013, Alex Wanderley writes: > passdb { > args = proxy=y nopassword=y user=remotemail destuser=remotemail(a)gmail.comhost= > pop.gmail.com port=995 proxy_timeout=15 starttls=y > driver = static > } > ... > Oct 7 09:33:13 dserver dovecot: auth: Debug: client passdb out: OK > 2 user=remotemail proxy nopassword=y destuser= > remotemail(a)gmail.com host=pop.gmail.com port=995 proxy > _timeout=15 starttls=y hostip=74.125.142.108 pass=123456789 > Oct 7 09:33:13 dserver dovecot: pop3-login: Debug: Ignoring unknown passdb > extra field: nopassword > Oct 7 09:33:28 dserver dovecot: pop3-login: Error: proxy(remotemail): > Login for pop.gmail.com:995 timed out in state=0 (after 15 secs, > local=162.106.yyy.zzz:59282) Idle speculation, but remote port 995 usually means SSL type connection (i.e. dive right into SSL protocol), whereas "starttls=y" starts out in plaintext, and SSL negotiations starts after a STARTTLS directive. Looking at http://wiki2.dovecot.org/PasswordDatabase/ExtraFields/Proxy methinks you want to replace "starttls=y" with "ssl=yes". Joseph Tam <jtam.home(a)gmail.com>

1 0

[Dovecot] Proxy to gmail not working
by Alex Wanderley 07 Oct '13

07 Oct '13

Hi, I've been trying to build a password forwarding proxy to Gmail without success... The SSL connection to Dovecot is happening no problem (as far as I can tell), but for some reason the conversation between Dovecot and Gmail is getting timed out. I know this is supposed to be simple... :-( But could somebody please give me some help by pointing what I'm not doing right? No matter how much I've been researching about this, I can't find the solution. Thanks a lot, Alex # 2.2.5: /etc/dovecot/dovecot.conf # OS: Linux 2.6.18-308.8.2.el5xen x86_64 CentOS release 5.8 (Final) auth_cache_negative_ttl = 10 mins auth_cache_size = 1 k auth_cache_ttl = 10 mins auth_debug = yes auth_debug_passwords = yes auth_mechanisms = cram-md5 digest-md5 apop login plain auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@% auth_username_translation = %@AaBbCcDdEeFfGgHhIiJjKkLlMmNnOoPpQqRrSsTtUuVvWwXxYyZz auth_verbose = yes base_dir = /var/run/dovecot/ listen = 162.106.yyy.zzz login_greeting = Dovecot Ready login_log_format_elements = %u %r %m %c mail_debug = yes mail_max_userip_connections = 100 passdb { args = proxy=y nopassword=y user=remotemail destuser=remotemail(a)gmail.comhost= pop.gmail.com port=995 proxy_timeout=15 starttls=y driver = static } protocols = pop3 service pop3-login { client_limit = 200 inet_listener pop3 { address = dserver port = 110 } process_limit = 1 process_min_avail = 1 service_count = 0 vsz_limit = 256 M } ssl = required ssl_ca = </etc/pki/tls/certs/ca-bundle.crt ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_cipher_list = EECDH+AES:EDH+AES:-SHA1:EECDH+RC4:EDH+RC4:RC4-SHA:EECDH+AES256:EDH+AES256:AES256-SHA:HIGH:!aNULL:!eNULL:!EXP:!MD5:!LOW:!SSLv2 ssl_client_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_client_key = </etc/pki/dovecot/private/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { args = static uid=10000 gid=10000 home=/dev/null driver = static } verbose_ssl = yes version_ignore = yes Oct 7 09:32:51 dserver dovecot: pop3-login: Debug: SSL: where=0x10, ret=1: before/accept initialization [162.106.xxx.yyy] Oct 7 09:32:51 dserver dovecot: pop3-login: Debug: SSL: where=0x2001, ret=1: before/accept initialization [162.106.xxx.yyy] Oct 7 09:32:51 dserver dovecot: pop3-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read client hello A [162.106.xxx.yyy] Oct 7 09:32:51 dserver dovecot: pop3-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write server hello A [162.106.xxx.yyy] Oct 7 09:32:51 dserver dovecot: pop3-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write certificate A [162.106.xxx.yyy] Oct 7 09:32:51 dserver dovecot: pop3-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write key exchange A [162.106.xxx.yyy] Oct 7 09:32:51 dserver dovecot: pop3-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write server done A [162.106.xxx.yyy] Oct 7 09:32:51 dserver dovecot: pop3-login: Debug: SSL: where=0x2001, ret=1: SSLv3 flush data [162.106.xxx.yyy] Oct 7 09:32:51 dserver dovecot: pop3-login: Debug: SSL: where=0x2002, ret=-1: SSLv3 read client certificate A [162.106.xxx.yyy] Oct 7 09:32:51 dserver dovecot: pop3-login: Debug: SSL: where=0x2002, ret=-1: SSLv3 read client certificate A [162.106.xxx.yyy] Oct 7 09:32:51 dserver dovecot: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth Oct 7 09:32:51 dserver dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_mysql.so Oct 7 09:32:51 dserver dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_pgsql.so Oct 7 09:32:51 dserver dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so Oct 7 09:32:51 dserver dovecot: auth: Debug: Read auth token secret from /var/run/dovecot//auth-token-secret.dat Oct 7 09:32:51 dserver dovecot: auth: Debug: auth client connected (pid=25878) Oct 7 09:32:51 dserver dovecot: pop3-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read client key exchange A [162.106.xxx.yyy] Oct 7 09:32:51 dserver dovecot: pop3-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read finished A [162.106.xxx.yyy] Oct 7 09:32:51 dserver dovecot: pop3-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write change cipher spec A [162.106.xxx.yyy] Oct 7 09:32:51 dserver dovecot: pop3-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write finished A [162.106.xxx.yyy] Oct 7 09:32:51 dserver dovecot: pop3-login: Debug: SSL: where=0x2001, ret=1: SSLv3 flush data [162.106.xxx.yyy] Oct 7 09:32:51 dserver dovecot: pop3-login: Debug: SSL: where=0x20, ret=1: SSL negotiation finished successfully [162.106.xxx.yyy] Oct 7 09:32:51 dserver dovecot: pop3-login: Debug: SSL: where=0x2002, ret=1: SSL negotiation finished successfully [162.106.xxx.yyy] Oct 7 09:33:13 dserver dovecot: auth: Debug: client in: AUTH 2 PLAIN service=pop3 secured session=oePRXijoMQCiat/X lip=162.106.yyy.zzz rip=162.106.xxx.yyy lport=995 rport=502 25 resp=AHNtYXJ0YnVzZWRtAHMwbWV0aGluZw== (previous base64 data may contain sensitive data) Oct 7 09:33:13 dserver dovecot: auth: Debug: static(remotemail,162.106.xxx.yyy,<oePRXijoMQCiat/X>): lookup Oct 7 09:33:13 dserver dovecot: auth: Debug: static(remotemail,162.106.xxx.yyy,<oePRXijoMQCiat/X>): Allowing any password Oct 7 09:33:13 dserver dovecot: auth: Debug: client passdb out: OK 2 user=remotemail proxy nopassword=y destuser= remotemail(a)gmail.com host=pop.gmail.com port=995 proxy _timeout=15 starttls=y hostip=74.125.142.108 pass=123456789 Oct 7 09:33:13 dserver dovecot: pop3-login: Debug: Ignoring unknown passdb extra field: nopassword Oct 7 09:33:28 dserver dovecot: pop3-login: Error: proxy(remotemail): Login for pop.gmail.com:995 timed out in state=0 (after 15 secs, local=162.106.yyy.zzz:59282) Oct 7 09:33:34 dserver dovecot: pop3-login: Aborted login (internal failure, 1 successful auths): remotemail, 162.106.xxx.yyy, PLAIN, TLS Oct 7 09:33:34 dserver dovecot: pop3-login: Debug: SSL alert: close notify [162.106.xxx.yyy]

3 2

[Dovecot] Replication: long detalys
by Lucas Rothamel - Eye Catching Webdesign 07 Oct '13

07 Oct '13

Hello everybody, I am running dovecot 2.1.7 on Debian Wheezy on two servers with replication set up, MTA is postfix. The idea is to have a redundant mail system so that when one server fails, users can continue using the other server (failover of POP/IMAP through DNS redirection). Servers are called srv06 and srv07: Below is the dovecot config, both servers have identical config, only the replica srv0x address is different. I read to put this line into 10-mail.conf and I did: mail_plugins = $mail_plugins notify replication My Problem: When E-Mail arrives on one server, it is only available on the other server many hours later. Same behaviour in both directions. This means I see different mailboxes via IMAP depending on which server I connect to - in theory I want the client not to be able to tell which server it is connected to. dovecot -n: # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.1 ext4 auth_mechanisms = plain login cram-md5 disable_plaintext_auth = no log_timestamp = "%Y-%m-%d %H:%M:%S " mail_location = maildir:/home/%d/%n/Maildir mail_privileged_group = mail passdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } plugin { mail_replica = remote:vmail@srv07.xxx quota = maildir:User quota quota_rule = *:storage=1GB replication_full_sync_interval = 1 hours } protocols = imap pop3 service aggregator { fifo_listener replication-notify-fifo { mode = 0600 user = vmail } unix_listener replication-notify { mode = 0600 user = vmail } } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } user = root } service config { unix_listener config { user = vmail } } service doveadm { user = vmail } service replicator { process_min_avail = 1 } ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } protocol imap { mail_plugins = quota imap_quota } protocol pop3 { mail_plugins = quota pop3_uidl_format = %08Xu%08Xv } protocol lda { mail_plugins = quota postmaster_address = mk@xxx } output of cat /var/log/mail.log | grep dsync: Oct 7 05:31:45 srv06 dovecot: dsync-local(sysop@xxxxx): Error: remote: dsync-remote(sysop@xxxxx): Warning: Maildir /home/xxxxx/sysop/Maildir: Expunged message reappeared, giving a new UID (old uid=1522, file=1381075321.V902I19a2a66M626453.srv07.xxxxx:2,) Oct 7 05:31:45 srv06 dovecot: dsync-local(sysop@xxxxx): Error: remote: dsync-remote(sysop@xxxxx): Warning: Maildir /home/xxxxx/sysop/Maildir: Expunged message reappeared, giving a new UID (old uid=1523, file=1381075381.V902I19a2bb2M737865.srv07.xxxxx:2,) Oct 7 05:31:45 srv06 dovecot: dsync-local(sysop@xxxxx): Error: remote: dsync-remote(sysop@xxxxx): Warning: Maildir /home/xxxxx/sysop/Maildir: Expunged message reappeared, giving a new UID (old uid=1524, file=1381075441.V902I19a3185M959529.srv07.xxxxx:2,) Oct 7 05:31:45 srv06 dovecot: dsync-local(sysop@xxxxx): Error: remote: dsync-remote(sysop@xxxxx): Warning: Maildir /home/xxxxx/sysop/Maildir: Expunged message reappeared, giving a new UID (old uid=1525, file=1381075501.V902I19a3187M989935.srv07.xxxxx:2,) Oct 7 05:31:45 srv06 dovecot: dsync-local(sysop@xxxxx): Error: remote: dsync-remote(sysop@xxxxx): Warning: Maildir /home/xxxxx/sysop/Maildir: Expunged message reappeared, giving a new UID (old uid=1526, file=1381075561.V902I19a3188M971187.srv07.xxxxx:2,) Oct 7 05:31:45 srv06 dovecot: dsync-local(sysop@xxxxx): Error: remote: dsync-remote(sysop@xxxxx): Warning: Maildir /home/xxxxx/sysop/Maildir: Expunged message reappeared, giving a new UID (old uid=1527, file=1381075622.V902I19a3189M60093.srv07.xxxxx:2,) Oct 7 05:31:45 srv06 dovecot: dsync-local(sysop@xxxxx): Error: remote: dsync-remote(sysop@xxxxx): Warning: Maildir /home/xxxxx/sysop/Maildir: Expunged message reappeared, giving a new UID (old uid=1528, file=1381075682.V902I19a318aM231725.srv07.xxxxx:2,) Oct 7 05:31:45 srv06 dovecot: dsync-local(sysop@xxxxx): Error: remote: dsync-remote(sysop@xxxxx): Warning: Maildir /home/xxxxx/sysop/Maildir: Expunged message reappeared, giving a new UID (old uid=1529, file=1381075741.V902I19a318bM353115.srv07.xxxxx:2,) Oct 7 05:31:46 srv06 dovecot: dsync-local(sysop@xxxxx): Error: remote: dsync-remote(sysop@xxxxx): Warning: Maildir /home/xxxxx/sysop/Maildir: Expunged message reappeared, giving a new UID (old uid=1530, file=1381075801.V902I19a318cM609633.srv07.xxxxx:2,) Oct 7 05:31:46 srv06 dovecot: dsync-local(sysop@xxxxx): Error: remote: dsync-remote(sysop@xxxxx): Warning: Maildir /home/xxxxx/sysop/Maildir: Expunged message reappeared, giving a new UID (old uid=1531, file=1381075861.V902I19a318dM392514.srv07.xxxxx:2,) Oct 7 05:31:46 srv06 dovecot: dsync-local(sysop@xxxxx): Error: remote: dsync-remote(sysop@xxxxx): Warning: Maildir /home/xxxxx/sysop/Maildir: Expunged message reappeared, giving a new UID (old uid=1532, file=1381075921.V902I19a318eM521040.srv07.xxxxx:2,) Oct 7 05:31:46 srv06 dovecot: dsync-local(sysop@xxxxx): Error: remote: dsync-remote(sysop@xxxxx): Warning: Maildir /home/xxxxx/sysop/Maildir: Expunged message reappeared, giving a new UID (old uid=1533, file=1381075981.V902I19a318fM611775.srv07.xxxxx:2,) Oct 7 05:31:46 srv06 dovecot: dsync-local(sysop@xxxxx): Error: remote: dsync-remote(sysop@xxxxx): Warning: Maildir /home/xxxxx/sysop/Maildir: Expunged message reappeared, giving a new UID (old uid=1534, file=1381076041.V902I19a3190M734263.srv07.xxxxx:2,) Oct 7 05:31:46 srv06 dovecot: dsync-local(sysop@xxxxx): Error: remote: dsync-remote(sysop@xxxxx): Warning: Maildir /home/xxxxx/sysop/Maildir: Expunged message reappeared, giving a new UID (old uid=1535, file=1381076101.V902I19a3191M850303.srv07.xxxxx:2,) Oct 7 05:31:46 srv06 dovecot: dsync-local(sysop@xxxxx): Error: remote: dsync-remote(sysop@xxxxx): Warning: Maildir /home/xxxxx/sysop/Maildir: Expunged message reappeared, giving a new UID (old uid=1536, file=1381076881.V902I19a3192M362845.srv07.xxxxx:2,S) Oct 7 05:31:46 srv06 dovecot: dsync-local(sysop@xxxxx): Error: remote: dsync-remote(sysop@xxxxx): Warning: Maildir /home/xxxxx/sysop/Maildir: Expunged message reappeared, giving a new UID (old uid=1537, file=1380998413.V902I19a315bM206668.srv07.xxxxx:2,e) Oct 7 05:31:46 srv06 dovecot: dsync-local(sysop@xxxxx): Error: remote: dsync-remote(sysop@xxxxx): Warning: Maildir /home/xxxxx/sysop/Maildir: Expunged message reappeared, giving a new UID (old uid=1538, file=1380999043.V902I19a315cM413578.srv07.xxxxx:2,e) Oct 7 05:31:46 srv06 dovecot: dsync-local(sysop@xxxxx): Error: remote: dsync-remote(sysop@xxxxx): Warning: Maildir /home/xxxxx/sysop/Maildir: Expunged message reappeared, giving a new UID (old uid=1539, file=1380574384.V902I19a3146M616434.srv07.xxxxx:2,e) Oct 7 05:31:46 srv06 dovecot: dsync-local(sysop@xxxxx): Error: remote: dsync-remote(sysop@xxxxx): Warning: Maildir /home/xxxxx/sysop/Maildir: Expunged message reappeared, giving a new UID (old uid=1540, file=1381110251.V902I19a3186M993173.srv07.xxxxx) Oct 7 05:31:46 srv06 dovecot: dsync-local(sysop@xxxxx): Warning: Mailbox changes caused a desync. You may want to run dsync again. However, I cannot understand what this log wants to tell me? Please advise. Thanks. Lucas -- Lucas Rothamel Eye Catching Webdesign info(a)eye-catching-webdesign.de - www.eye-catching-webdesign.de You know, we go to the gym to keep the body fit. Similarly the mind needs some rest. The mind is bombarded with so many impressions. Our mind has been bombarded by impressions the whole time. It needs a different kind of rest other than sleep. And meditation is such a rest. It calms the mind. energizes the spirit and makes the body more strong and vibrant. improves the immune system. The immune cells, the T-cell count go higher through Sudarshan Kriya and meditation. And you feel so nice inside. - Sri Sri Ravi Shankar I love deadlines. I like the whooshing sound they make as they fly by. -- Douglas Adams

2 1

[Dovecot] retr errors
by Bill Morgan 07 Oct '13

07 Oct '13

My ISP uses Dovecot and I have had an ongoing problem for a while using several email clients. Sometimes the response to a retr request is mal-formed. The expected response "+OK nnn octets" is not returned. The response looks like it started somewhere in the message headers. Sometimes a retry can clear the problem but I usually need to delete the first message via a putty session. The problem, when present, is always on the first message. Never seen it in the middle of a series of messages. This problem has been seen on different machines, different versions of Windows, at home and on the road. I have wireshark traces showing good and bad sessions.... ====================== stat +OK 93 1000437 retr 1 +OK 6946 octets Return-path: ..... ========================= retr 1 of blahblah(a)blah.com designates 2607:f8b0:4001:c03::235 as permitted sender) smtp.mail=blahblah(a)blah.com; dkim=pass header.i=(a)blah.com Reply-To: android-developers(a)googlegroups.com Precedence: list Mailing-list: ...... ================== My ISP has been non-helpful. Any ideas how I can track down the problem? Thanks Bill

5 6

[Dovecot] Yet another going from 1.2 to 2.X question: authentication
by Mauricio Tavares 07 Oct '13

07 Oct '13

So in 1.2.9 I had something like this: [...] socket listen { master { path = /var/run/dovecot/auth-master mode = 0600 user = virtual # User running Dovecot LDA's deliver } } # Dovecot as SASL Auth socket listen { client { path = /var/spool/postfix/private/dovecot-auth mode = 0660 user = postfix group = postfix } } I see I can, per http://wiki2.dovecot.org/HowTo/PostfixAndDovecotSASL, setup the sasl entry as # Dovecot as SASL Auth service auth { unix_listener /var/spool/postfix/private/dovecot-auth mode = 0660 user = postfix group = postfix } what about the lda? From http://wiki2.dovecot.org/LDA I take it would be as simple as service auth { unix_listener auth-userdb { mode = 0600 user = virtual # User running Dovecot LDA's deliver } } Am I correct?

2 3

[Dovecot] couple of errors on new setup
by Dean Guenther 07 Oct '13

07 Oct '13

I have stood up a new test mail server as an upgraded version of my existing mail server. I have been fairly consistently getting two types of error messages. I'm thinking they may be related permissions issues, but I can't figure out what their problem is. Oct 4 12:45:47 digory dovecot: imap(guenther): Error: file_dotlock_open() failed with file /home/guenther/mail/ForUs/.imap/Home/dovecot.index.log: Resource temporarily unavailable Oct 4 12:46:16 digory dovecot: imap(guenther): Error: file_dotlock_open(/home/guenther/mail/ForUs/PCS/.imap/PCS misc/dovecot.index.log) failed: Permission denied (euid=500(guenther) egid=500(guenther), access(/home/guenther/mail/ForUs/PCS/.imap/PCS misc/dovecot.index.log, 4) failed: No such file or directory) Here are my specifics: OS: CentOS 6.4 - 2.6.32-358.11.1.el6.x86_64 MailScanner: 4.84.6 Postfix: 2.6.6 DoveCot: 2.2.4 NFS v4 (both the mail spool and /home are NVS v4 mounts to file server) Here are the non-default settings: dovecot -n # 2.2.4: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-358.11.1.el6.x86_64 x86_64 CentOS release 6.4 (Fina auth_verbose = yes disable_plaintext_auth = no mail_access_groups = users,guenther mail_location = mbox:~/mail:INBOX=/var/spool/mail/%u mail_privileged_group = mail mbox_write_locks = fcntl namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } } ssl_cert = </etc/postfix/ssl/xxxxxxxxxx.crt ssl_key = </etc/postfix/ssl/xxxxxxxxxx.key userdb { driver = passwd } verbose_ssl = yes Thanks -- Dean Guenther

3 3

[Dovecot] Problems getting Squirrelmail and Avelsieve to connect to Pigeonhole
by Steve 06 Oct '13

06 Oct '13

Hi, I have been going around in circles trying to find the solution. Many others appear to have the same problem, but never a solution or explanation. I am running Dovecot 2.0.21 under Fedora 16. All components are running on the same server, whose IP address is shown as '192.168.x.y'. The dovecot -n output is: <quote> /SSH Secure Shell 3.2.0 (Build 267)/ /Copyright (c) 2000-2002 SSH Communications Security Corp - http://www.ssh.com// /This copy of SSH Secure Shell is a non-commercial version./ /This version does not include PKI and PKCS #11 functionality./ /Last login: Sun Oct 6 17:00:08 2013 from 192.168.2.196/ /[root@nsi-server2 ~]# /usr/sbin/dovecot -n/ /# 2.0.21: /etc/dovecot/dovecot.conf/ /# OS: Linux 3.6.11-4.fc16.x86_64 x86_64 Fedora release 16 (Verne) / /auth_debug_passwords = yes/ /auth_verbose = yes/ /auth_verbose_passwords = plain/ /log_path = /var/log/mail/dovecot.log/ /mail_access_groups = mail/ /mail_location = mbox:~/mail:INBOX=/var/mail/%u/ /managesieve_notify_capability = mailto/ /managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave/ /mbox_write_locks = fcntl/ /passdb {/ / driver = pam/ /}/ /passdb {/ / args = /etc/dovecot/users/ / driver = passwd-file/ /}/ /plugin {/ / sieve = ~/.dovecot.sieve/ / sieve_dir = ~/sieve/ / sieve_global_path = /var/lib/dovecot/sieve/default.sieve/ /}/ /protocols = imap pop3 sieve sieve/ /service imap-login {/ / inet_listener imap {/ / address = 192.168.x.y,localhost/ / }/ / inet_listener imaps {/ / address = 192.168.x.y/ / }/ /}/ /service managesieve-login {/ / inet_listener sieve {/ / port = 4190/ / }/ /}/ /service pop3-login {/ / inet_listener pop3 {/ / address = 192.168.x,y,localhost/ / }/ / inet_listener pop3s {/ / address = 192.168.x.y/ / }/ /}/ /ssl_cert = </etc/pki/dovecot/certs/dovecot.pem/ /ssl_key = </etc/pki/dovecot/private/dovecot.pem/ /userdb {/ / driver = passwd/ /}/ /userdb {/ / args = /etc/dovecot/users/ / driver = passwd-file/ /}/ </quote> On attempting to connect to the managesieve port from Squirrelmail, using the 'Filter' button i get the following error message: /*Could not log on to timsieved daemon on your IMAP server localhost.*/ /*Please contact your administrator*/ Running/*# /usr/sbin/ngrep -d lo port 4190 */produces the following trace: <quote> /[root@nsi-server root]# /usr/sbin/ngrep -d lo port 4190/ /interface: lo (127.0.0.0/255.0.0.0)/ /filter: (ip or ip6) and ( port 4190 )/ /####/ /T 127.0.0.1:4190 -> 127.0.0.1:35495 [AP]/ / "IMPLEMENTATION" "Dovecot Pigeonhole".."SIEVE" "fileinto reject envelope encoded-character vacation subaddress comparator/ / -i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave".."NOTIFY/ / " "mailto".."SASL" "PLAIN".."STARTTLS".."VERSION" "1.0"..OK "Dovecot ready.".. / /##/ /T 127.0.0.1:35495 -> 127.0.0.1:4190 [AP]/ / AUTHENTICATE "PLAIN" \{28+}.. / /##/ /T 127.0.0.1:35495 -> 127.0.0.1:4190 [AP]/ /c3RldmUAc3RldmUAbWFnaWNsaWs=.. / /##/ /T 127.0.0.1:4190 -> 127.0.0.1:35495 [AP]/ / NO "Invalid characters in atom"..NO "Error in MANAGESIEVE command received by server.".. / /###/ </quote> I hope that someone can provide a way to get the filter management working as I am more that happy with the way Dovecot and Squirrelmail are working, but just want to add server-side filtering, especially tagged mail produced by Spamassassin :) Many thanks Steve

2 1

[Dovecot] State of the FTS modules and packaging
by Benjamin Podszun 06 Oct '13

06 Oct '13

Hi there. I'm running a small (VPS) mail system just for myself for quite a while and want to support some friends and family now. For that I'm improving / documenting the setup. One thing I never cared to implement was FTS support. Looking at the options [1] now, I'm stuck. I don't want solr (no Java bashing here, I'm sure that's working awesome. But I don't want to pull all these dependencies in on my tiny VPS: Memory and disk will be as small as I can get away with). With that out of the way: What are my options? Squat: Why's squat deprecated? Did it stop working? Can someone shed some light on the original reasons for the deprecation? What are the risks to go with squat anyway? Clucene: That seems .. unusable. It would be my prefered choice (not deprecated, little dependencies), but .. it isn't packaged in deb based distributions (Debian, Ubuntu). It doesn't even _build_, because it doesn't use pkg-config to find the clucene includes (at least for 2.1.17) in these environments. Centos is even more out of date with 2.0.9. Given the experience above, is solr my only option to offer FTS? Can you guys share how you're having a stable base/os with a somewhat recent (and complete!) dovecot package? Thanks a lot & regards, Ben 1: http://wiki2.dovecot.org/Plugins/FTS

1 0

[Dovecot] Dovecot namespace solved while writing; preparing to refilter
by miro.rovis＠croatiafidelis.hr 06 Oct '13

06 Oct '13

Since I still have to send mail from web, I may not be able to get this message as a reply to my previous mail, but it belongs to this same thread: http://www.dovecot.org/list/dovecot/2013-October/092810.html Some of the work I have now done. I can now easily, lest some hurdle shows up, use a script based on the one I mentioned (here it is again: http://wiki.dovecot.org/HowTo/RefilterMail ), but I used maildrop, having harkened to the advice by the author of Debian Reference, Osamu Aoki: http://www.debian.org/doc/manuals/debian-reference/ch06.en.html#_the_remote… http://www.debian.org/doc/manuals/debian-reference/ch06.en.html#_mail_deliv… So while, after connecting with the password, I wait some 5 or 10 minutes (the machines I install/clone Debian onto are old machines) for all the mail from the other Dovecot on the other machine, same MBO and all, as I explained in the previous message, again; I am preparing this before going online, I haven't see if there are any replies in the last maybe 40 hours)... me@mybox2:~$ getmail getmail version 4.43.0 Copyright (C) 1998-2012 Charles Cazabon. Licensed under the GNU GPL version 2. SimpleIMAPSSLRetriever:me@mybox1.myfantasydomain:993: read_all and not delete -- all messages will be retrieved each time getmail is run SimpleIMAPSSLRetriever:me@mybox1.myfantasydomain:993: Enter password for SimpleIMAPSSLRetriever:me@mybox1.myfantasydomain:993: The: me@mybox2:~$ getmail command that I issued has just churned out all the 2945 messages into my homefolder here. And this is the previously prepared ----%<-------------------------------------------------------- $ cat ~/.getmail/getmailrc [retriever] type = SimpleIMAPSSLRetriever server = mybox1.myfantasydomain username = mr mailboxes= ALL [destination] type = MDA_external path = /usr/bin/maildrop unixfrom = True [options] verbose = 2 delete = False read_all = True delivered_to = False message_log = ~/.getmail/Mrinet_refilter.log ----%<-------------------------------------------------------- Not much talk needed about the getmailrc above, because it's all in the getmail manual, faq, and places. Sure, I also, prepared .mailfilter, for the maildrop, the fine program that nicely put all mails where I decided I wanted them! ----%<-------------------------------------------------------- $ cat ~/.mailfilter # ~/.mailfilter # based on: # http://www.wonkity.com/~wblock/docs/html/maildrop.html TYPE="maildir" logfile "$HOME/.mailfilter.log" ECHO="/bin/echo" MAIL="/usr/bin/mail" MAILDIRMAKE="/usr/bin/maildirmake" REFORMAIL="/usr/bin/reformail" MBOX=($TYPE =~ /mbox/) MAILDIR=($TYPE =~ /maildir/) # use mbox by default DEFAULT="$HOME/mail" FOLDERS="$DEFAULT/" if ( $MAILDIR ) { DEFAULT="$HOME/Maildir" FOLDERS="$DEFAULT/." } if ( $MAILDIR ) { `${MAILDIRMAKE} "$DEFAULT"` if ( $RETURNCODE == 0 ) { # notify the user when new folders are created NEWFOLDERMSG="${FOLDERS} folder created" `${ECHO} "$NEWFOLDERMSG" | ${MAIL} -s "$NEWFOLDERMSG" $LOGNAME` } } # filter out duplicate messages `${REFORMAIL} -D 8192 $HOME/.duplicate.cache` if ( $RETURNCODE == 0 ) { log "File: (duplicate) ($SIZE)\n" exit } if (/^(To|Cc|Envelope-To|Delivered-To):.*(miro\.rovis@croatiafidelis\.hr)/) { MYFOLDERDOT="$MATCH2" MYFOLDER=`echo $MYFOLDERDOT|sed 's/\.//g'` if ( $MAILDIR ) { `${MAILDIRMAKE} -f "$MYFOLDER" "$DEFAULT"` if ( $RETURNCODE == 0 ) { # notify the user when new folders are created NEWFOLDERMSG="${FOLDERS}$MYFOLDER list folder created" `${ECHO} "$NEWFOLDERMSG" | ${MAIL} -s "$NEWFOLDERMSG" $LOGNAME` } } # handle mailing list messages automatically if ( /^List-Id:.*<([0-9A-Za-z_\.\-]+)/ ) { LISTNAMEDOT="$MATCH1" LISTNAME=`echo $LISTNAMEDOT|sed 's/\.//g'` # don't create a folder for Mailman status messages, just deliver them if ( $LISTNAME =~ /Mailman/ ) to $DEFAULT if ( $MAILDIR ) { `${MAILDIRMAKE} -f "$MYFOLDER.$LISTNAME" "$DEFAULT"` if ( $RETURNCODE == 0 ) { # notify the user when new folders are created NEWFOLDERMSG="${FOLDERS}$MYFOLDER.$LISTNAME list folder created" `${ECHO} "$NEWFOLDERMSG" | ${MAIL} -s "$NEWFOLDERMSG" $LOGNAME` } } to ${FOLDERS}$MYFOLDER.$LISTNAME } to ${FOLDERS}$MYFOLDER } if (/^(To|Cc|Envelope-To|Delivered-To):.*(m.rovis@inet\.hr)/) { MYFOLDERDOT="$MATCH2" MYFOLDER=`echo $MYFOLDERDOT|sed 's/\.//g'` if ( $MAILDIR ) { `${MAILDIRMAKE} -f "$MYFOLDER" "$DEFAULT"` if ( $RETURNCODE == 0 ) { # notify the user when new folders are created NEWFOLDERMSG="${FOLDERS}$MYFOLDER list folder created" `${ECHO} "$NEWFOLDERMSG" | ${MAIL} -s "$NEWFOLDERMSG" $LOGNAME` } } if (/^Return-Path:.*@(facebookmail\.com)/) { MY2FOLDERDOT="$MATCH1" MY2FOLDER=`echo $MY2FOLDERDOT|sed 's/\.//g'` if ( $MAILDIR ) { `${MAILDIRMAKE} -f "${MYFOLDER}.${MY2FOLDER}" "$DEFAULT"` if ( $RETURNCODE == 0 ) { # notify the user when new folders are created NEWFOLDERMSG="${FOLDERS}${MYFOLDER}.${MY2FOLDER} list folder created" `${ECHO} "$NEWFOLDERMSG" | ${MAIL} -s "$NEWFOLDERMSG" $LOGNAME` } } # handle Facebook groups/lists messages automatically if ( /^List-Id:.*<([0-9A-Za-z_\-]+)\.+/ ) { LIST2NAME="$MATCH1" # don't create a folder for Mailman status messages, just deliver them if ( $LIST2NAME =~ /Mailman/ ) to $DEFAULT if ( $MAILDIR ) { `${MAILDIRMAKE} -f "${MYFOLDER}.${MY2FOLDER}.$LIST2NAME" "$DEFAULT"` if ( $RETURNCODE == 0 ) { # notify the user when new folders are created NEWFOLDERMSG="${FOLDERS}${MYFOLDER}.${MY2FOLDER}.$LIST2NAME list folder created" `${ECHO} "$NEWFOLDERMSG" | ${MAIL} -s "$NEWFOLDERMSG" $LOGNAME` } } to ${FOLDERS}${MYFOLDER}.${MY2FOLDER}.$LIST2NAME } to ${FOLDERS}${MYFOLDER}.$MY2FOLDER } if (/^(To|From):.*(childrenofmedugorje@gmail\.com)/) { MY2FOLDERDOT="$MATCH2" MY2FOLDER=`echo $MY2FOLDERDOT|sed 's/\.//g'` if ( $MAILDIR ) { `${MAILDIRMAKE} -f "${MYFOLDER}.${MY2FOLDER}" "$DEFAULT"` if ( $RETURNCODE == 0 ) { # notify the user when new folders are created NEWFOLDERMSG="${FOLDERS}${MYFOLDER}.${MY2FOLDER} list folder created" `${ECHO} "$NEWFOLDERMSG" | ${MAIL} -s "$NEWFOLDERMSG" $LOGNAME` } } to ${FOLDERS}${MYFOLDER}.$MY2FOLDER } if ( /^From:\s*EWTN\s*<(wings(a)ewtn.com)>/ ) { MY2FOLDERDOT="$MATCH1" MY2FOLDER=`echo $MY2FOLDERDOT|sed 's/\.//g'` if ( $MAILDIR ) { `${MAILDIRMAKE} -f "${MYFOLDER}.${MY2FOLDER}" "$DEFAULT"` if ( $RETURNCODE == 0 ) { # notify the user when new folders are created NEWFOLDERMSG="${FOLDERS}${MYFOLDER}.${MY2FOLDER} list folder created" `${ECHO} "$NEWFOLDERMSG" | ${MAIL} -s "$NEWFOLDERMSG" $LOGNAME` } } to ${FOLDERS}${MYFOLDER}.$MY2FOLDER } # handle mailing list messages automatically if ( /^List-Id:.*<([0-9A-Za-z_\.\-]+)/ ) { LISTNAMEDOT="$MATCH1" LISTNAME=`echo $LISTNAMEDOT|sed 's/\.//g'` # don't create a folder for Mailman status messages, just deliver them if ( $LISTNAME =~ /Mailman/ ) to $DEFAULT if ( $MAILDIR ) { `${MAILDIRMAKE} -f "$MYFOLDER.$LISTNAME" "$DEFAULT"` if ( $RETURNCODE == 0 ) { # notify the user when new folders are created NEWFOLDERMSG="${FOLDERS}$MYFOLDER.$LISTNAME list folder created" `${ECHO} "$NEWFOLDERMSG" | ${MAIL} -s "$NEWFOLDERMSG" $LOGNAME` } } to ${FOLDERS}$MYFOLDER.$LISTNAME } to ${FOLDERS}$MYFOLDER } ----%<-------------------------------------------------------- Here is my .muttrc, to show nearly all the components of my setup, which I hope to be using for mail.. I really understand only now, that the basis is really e-mail, not the browsers, or other things, for the life on the internet... That the basis is really e-mail these days on Russia Today said also Ladar Levison, the Lavabit.com founder that fought for his users' privacy all the way to losing his business. I admire people of such integrity and humanity! Not like the Canadian Hushmail which sold NSA's whistleblower Thomas Drake... Who says I don't like people from NSA. I highly regard him, and Ross Tice, and some others! It's the usual perception most of people have, that email is less important/less advanced, whatnot, not just me, but not delving into it here. I'm yet to see if my "broader picture" provoked any angry reactions... (Note while proofreading: No reactions, neither good nor bad, I just saw.) But I hope this will be technical enough now and to the completion of this thread... I haven't found anywhere other then on the www.wonkity.com, the address that I gave above, examples for maildrop, so I hope other users will find mine useful, which will be source of content for me... I invested time and effort to arrange those lines. Just let me give you the .muttrc (and completely without the unrelated settings for this story), because the dominant talk is about the maildrop, not the other two configuration files. ----%<-------------------------------------------------------- $ cat ~/.muttrc set mbox_type="maildir" set spoolfile=imaps://me@mybox2/ set folder=imaps://me@mybox2/ set ssl_starttls=yes set ssl_force_tls=yes set imap_passive ----%<-------------------------------------------------------- What I got with that maildrop in my Dovecot, and it would need some functions set, because I used too much pastion to get same work repeated on different input, but I don't know hot to do it, and it is by no means urgent, since I achived all the refiltering and in the way I wanted it, is I decided I wanted all mail in folders by the e-mail address by which I recieve them, and used the usual List-Id header to sort mails into up to two levels deeper, exactly for the famous yukky Stasimail, oh, sorry! I meant zucky Facebookmail. Also it would be great to check for existance of a foled before attemting to create it... It hasn't been yet urgent to me, and I am rather exhausted now, not only from this coding, but also because I got the tumbleweed pollen allergy (American native plant, brought here as ornamental plant in Columbo's time, but nauseating/suffocating (but rarely to death), fever causing to lots of people in Europe, through allergy, so I was also bed-ridden much of the time... and I am not well neither as I am writing this, so not much of proofreading before sending this. And to check for existance I guess it's with ... ~= ( some expression) of folders, so not to get an error on every fail attempt at creating folders as Warren Block explained here: http://www.wonkity.com/~wblock/docs/html/maildrop.html#_em_maildir_em_compa… , and maybe improve those lines by using some foreach loop or some such means... Ah, notice that I start with no folder whatsoever, neither mbox not maildir type, I let the script do it all in my /home/mr! The .mailfilter settings above for maildrop upon completion of refiltering gave me, in my mutt, not going back to no GUIs no more, thanx so kindly!, but no love lost there, with all your Java and Javascript and stinking popup windows out of nowhere and rummiging in my machine which I in no way provoked, let alone initiated, and most certainly not acquiesced to... So this is, with a few copy-pastes (just the Mutt fine colors will be missing): y:Exit c:Chdir m:Mask ?:Help 1 IMAP + INBOX/ 2 IMAP + mirorovis@croatiafidelishr/ 3 IMAP + mirovis@inethr/ 4 IMAP + mrovis@inethr/ /\ /\ /\ /\ /\ /\ /\ / / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \/ \/ \/ \/ \/ \/ \/ -- Mutt: Directory [imaps://me@mybox2/], File mask: !^\.[^.] y:Exit c:Chdir m:Mask ?:Help 1 IMAP ../ 2 IMAP dovecotdovecotorg /\ /\ /\ /\ /\ /\ /\ / / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \/ \/ \/ \/ \/ \/ \/ -- Mutt: Directory [=mirorovis@croatiafidelishr/], File mask: !^\.[^.] y:Exit c:Chdir m:Mask ?:Help 1 IMAP ../ 2 IMAP dmo-discussiondeb-multimediaorg 3 IMAP gnewsense-usersnongnuorg 4 IMAP helpdeskiskonhr /\ /\ /\ /\ /\ /\ /\ / / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \ / \/ \/ \/ \/ \/ \/ \/ -- Mutt: Directory [=mirovis@inethr/], File mask: !^\.[^.] y:Exit c:Chdir m:Mask ?:Help 1 IMAP ../ 2 IMAP alsa-userlistssourceforgenet 3 IMAP blfs-supportlinuxfromscratchorg 4 IMAP childrenofmedugorje@gmailcom 5 IMAP cinelerraskolelinuxno 6 IMAP cjeniklosthr 7 IMAP dailydavelistsimmunityinccom 8 IMAP debburn-devellistsaliothdebianorg 9 IMAP + facebookmailcom/ 10 IMAP ffmpeg-userffmpegorg 11 IMAP gnewsense-usersnongnuorg 12 IMAP listalosthr 13 IMAP mencoder-usersmplayerhqhu 14 IMAP mplayer-usersmplayerhqhu 15 IMAP userslistsclaws-mailorg 16 IMAP wings@ewtncom 17 IMAP wireshark-announcewiresharkorg 18 IMAP wireshark-userswiresharkorg /\ /\ /\ /\ /\ /\ /\ / \/ \/ \/ \/ \/ \/ \/ -- Mutt: Directory [=mrovis@inethr/], File mask: !^\.[^.] It's this last directory, i.e. this e-mail address that has the most of the folders. So I'll show how I got all the Facebookmail in one folder, and devided by its' groups/lists you name what they are. y:Exit c:Chdir m:Mask ?:Help 1 IMAP ../ 2 IMAP 109806486481 3 IMAP 114674985270726 4 IMAP 116954758434576 5 IMAP 132773866800887 6 IMAP 141591592620540 7 IMAP 147623871992079 8 IMAP 148721478521575 9 IMAP 158927160843505 10 IMAP 166374096744320 11 IMAP 177486422318814 12 IMAP 178566045493622 13 IMAP 191938787541916 14 IMAP 195731330459694 15 IMAP 199083346818377 16 IMAP 203424869671315 17 IMAP 248203298232 18 IMAP 259057640810411 19 IMAP 312893169439 20 IMAP 37080471529 21 IMAP 77789534513 22 IMAP australiacroatiaunited 23 IMAP domovinausrcu 24 IMAP hrperoistine 25 IMAP hrvatirimokatolici 26 IMAP hrvatskastraza 27 IMAP nacionalist 28 IMAP stopkrscanofobiji 29 IMAP zakonoovrsi -- Mutt: Directory [=mrovis@inethr/facebookmailcom/], File mask: !^\.[^.] I didn't need any rudimentary ASCII drawing to represent the blank lines cut out, because this is all the Stasi lists/groups here. The fact that some are named in numbers and not in [a-z] is only because that is the first part of the address, before @facebookmail.com part. Not touching that, no need to spend time on those... If there is some user who would like to have any more explanaion on this, I can try and tell more, but I know most of the users here know more and can do better that I, so I leave the talk now. I'll take a few looks back to see if I got any replies, just I can't do it in very frequent periods at all. I also have a few issues probably for the Mutt people to solve, the issues I suspect are with Mutt, but they are not urgent either. And also, not major issue, I tried sticking :DIRNAME=mAildir to the end of my mail_location line, but it simply didn't work, I mean, as per: http://wiki2.dovecot.org/MailLocation/Maildir I will try and get the stunnel to get my outgoing mail on the 465 port with TLS, but that is not an issue related here at all I think. Thanks again to you fine developers for these great programs. Timo Sirainen, you are greatly appreciated here, and my respect for your fine country Finland, and for your nation! Miroslav Rovis Zagreb, Croatia

1 0

[Dovecot] fail2ban
by Nick Edwards 05 Oct '13

05 Oct '13

For dovecot 2.1 as per wiki2, is this still valid? noticed a problem before and saw it does seem to be triggering, I use: maxretry = 6 findtime = 600 bantime = 3600 and there was like, 2400 hits in 4 minutes, it is pointing to the correct log file, but I am no expert with fail2ban, so not sure if the log format of today is compatible with the wiki2 entry filter.d/dovecot.conf [Definition] failregex = (?: pop3-login|imap-login): (?:Authentication failure|Aborted login \(auth failed|Aborted login \(tried to use disabled|Disconnected \(auth failed).*rip=(?P<host>\S*),.* ignoreregex =

4 7

[Dovecot] Fixing Timestamps
by LuKreme 04 Oct '13

04 Oct '13

I have a user with a lot of email (A LOT of email, probably over 500,000 emails). Recently, several thousand messages of his were lost, and I pulled them out of the backup archives (zip files containing each days emails in an mbox) that are created on his account and fed them into his procmail scripts and they were all processed just fine and ended up in the right directories. Except. The messages were from 6 months back, and the messages now show up in his mail client with the time stamp of the date they were restored, and not the date that shows up in the headers of the message. Anything I can do? -- I AM NOT A LICENSED HAIRSTYLIST Bart chalkboard Ep. AABF04

5 8

[Dovecot] Dovecot sending quota warning to MAILER-DAEMON
by Mathieu R. 04 Oct '13

04 Oct '13

Hello, i'm testing quota now, and dovecot is not sending quota warning to the user, but to MAILER-DAEMON, wich obviously give me an error. here is my 90-quota.conf http://paste.debian.net/50580/ dovecot 2.1.7, on debian stable any idea ? -- Mathieu R.

1 1

[Dovecot] On mailboxes, separators, and dovecot2
by Mauricio Tavares 04 Oct '13

04 Oct '13

While I was running dovecot 1.2.9, I had my mailboxes using the old Courier IMAP format. i.e. my mailboxes would look like INBOX.Orders.Scams Going to dovecot 2 (but not 2.1), I see to have a few questions: 1) It seems I would device my mailbox thingies in 10-mail.conf: namespace inbox { inbox = yes separator = . location = prefix = INBOX. type = private mailbox SPAM { auto=subscribe special_use = \Junk } mailbox Trash { auto=subscribe special_use = \Trash } mailbox Sent { auto=subscribe special_use = \Sent } } but how would I prepresent my INBOX.Orders.Scams folder? Something like mailbox Orders.Scams { auto=subscribe } perhaps? 2) Reading (am I literate?) through http://wiki2.dovecot.org/Namespaces, it seems having separator = . is not only outdated but also a bad idea (but, I had child mailboxes as shown above). Could anybody elaborate one that? And which clients still do LSUB *?

1 0

[Dovecot] version 2.2.6 breaks compiling on Solaris 10 sparc
by Jake Goerzen 04 Oct '13

04 Oct '13

Hello, I maintain the dovecot package at opencsw.org. The latest release of dovecot verison 2.2.6 has some changes to lib-http which is breaking compiling on Solaris 10 sparc (though x86 builds successfully). Here is part of the compiler output while building: libtool: compile: /opt/SUNWspro/bin/cc -DHAVE_CONFIG_H -I. -I../.. -I../../src/lib -I../../src/lib-test -I../../src/lib-dns -I../../src/lib-ssl-iostream -I/opt/csw/include/mysql -I/opt/csw/include/postgresql -I/opt/csw/include -xO3 -m32 -xarch=sparc -I/opt/csw/include -c http-header-parser.c -KPIC -DPIC -o .libs/http-header-parser.o "http-header-parser.c", line 264: warning: statement not reached "http-header-parser.c", line 281: warning: argument #3 is incompatible with prototype: prototype: pointer to unsigned int : "../../src/lib/istream.h", line 152 argument : pointer to unsigned long long "http-header-parser.c", line 317: warning: argument #2 is incompatible with prototype: prototype: pointer to unsigned int : "../../src/lib/buffer.h", line 93 argument : pointer to unsigned long long and then later on a linking error: /bin/bash ../../libtool --tag=CC --mode=link /opt/SUNWspro/bin/cc -xO3 -m32 -xarch=sparc -I/opt/csw/include -no-undefined -m32 -xarch=sparc -L/opt/csw/lib -o test-http-url test-http-url.o http-url.lo ../lib-test/libtest.la ../lib/liblib.la -export-dynamic -lrt -lnsl -lsocket -lsendfile libtool: link: /opt/SUNWspro/bin/cc -xO3 -m32 -xarch=sparc -I/opt/csw/include -m32 -xarch=sparc -o test-http-url test-http-url.o .libs/http-url.o -L/opt/csw/lib ../lib-test/.libs/libtest.a ../lib/.libs/liblib.a -lrt -lnsl -lsocket -lsendfile Undefined first referenced symbol in file http_header_field_find .libs/http-url.o http_header_field_get .libs/http-url.o http_header_get_fields .libs/http-url.o ld: fatal: symbol referencing errors. No output written to test-http-url version 2.2.5 and previous releases of dovecot have compiled successfully on both Solaris sparc & x86. Regards, jgoerzen(a)opencsw.org

3 4

[Dovecot] Can sieve filter mail based on emails earlier in the thread?
by Hugh Davenport 03 Oct '13

03 Oct '13

Basically I want the following scenario: Subscribe to lots of mailing lists - each filtered into separate folders When I participate in a thread (by starting it, replying to it, or ... setting a flag on an email in the thread) - filter into the particular mailing list folder - AND filter into INBOX (or another folder of my choosing) I'm thinking for this, the first two can have rules that take into account In-Reference-To and using my domain. But the third case of using a flag... that seems to require referencing earlier emails in the thread. Is this possible in sieve? Or am I barking up the wrong tree? I believe gmail can do it, but who knows what they use for their filtering... Thanks for any help anyone provides! Cheers, Hugh

2 1

[Dovecot] Proxy to gmail help
by Alex Wanderley 03 Oct '13

03 Oct '13

Hello, I understand the matter of using Dovecot as a forward proxy to Gmail is very popular (and even trivial), but my lack of Dovecot experience took me to at point where I truly need your help... I'm starting my task by trying to have something simple, where I can test connectivity to Gmail by sending a telnet to our Dovecot server. The Dovecot server accepts the telnet request, but for some reason (and here I guess is something related to SSL/TLS), I can't get to Gmail. Here my configuration and logs/outputs: ==> OS: * I'm using an old Centos 5.8 server as a proof of concept. ############################################################# ==> Dovecot configuration: # 2.2.5: /etc/dovecot/dovecot.conf # OS: Linux 2.6.18-308.8.2.el5xen x86_64 CentOS release 5.8 (Final) auth_cache_negative_ttl = 10 mins auth_cache_size = 1 k auth_cache_ttl = 10 mins auth_debug = yes auth_debug_passwords = yes auth_mechanisms = cram-md5 digest-md5 apop login plain auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@% auth_username_translation = %@AaBbCcDdEeFfGgHhIiJjKkLlMmNnOoPpQqRrSsTtUuVvWwXxYyZz auth_verbose = yes base_dir = /var/run/dovecot/ disable_plaintext_auth = no listen = XXX.XXX.XXX.XXX login_greeting = Dovecot Ready login_log_format_elements = %u %r %m %c mail_debug = yes mail_max_userip_connections = 100 passdb { args = /etc/dovecot/sql.conf driver = sql } protocols = pop3 service pop3-login { client_limit = 200 inet_listener pop3 { address = dovecotserver.<full domain> port = 110 } process_limit = 1 process_min_avail = 1 service_count = 0 vsz_limit = 256 M } shutdown_clients = no ssl_ca = /etc/pki/dovecot/certs/dovecot.pem ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_cipher_list = EECDH+AES:EDH+AES:-SHA1:EECDH+RC4:EDH+RC4:RC4-SHA:EECDH+AES256:EDH+AES256:AES256-SHA:HIGH:!aNULL:!eNULL:!EXP:!MD5:!LOW:!SSLv2 ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { args = static uid=10000 gid=10000 home=/dev/null driver = static } verbose_ssl = yes version_ignore = yes ############################################################# ==> sql.conf file driver = mysql connect = host=/var/lib/mysql/mysql.sock dbname=mysql user=root password=xxxxxx password_query = SELECT NULL AS password, host, destuser, proxy, 'Y' AS starttls, '995' AS port, 'Y' AS nopassword FROM DovecotProxy WHERE user = '%u' ############################################################# ==> DovecotProxy table mysql> select * from DovecotProxy where user = 'MYUSER'; +-------------+---------------+-----------------------+------------------------------------------------+-------+ | user | host | destuser | password | proxy | +-------------+---------------+-----------------------+------------------------------------------------+-------+ | MYUSER | pop.gmail.com | MYUSER(a)gmail.com | {MD5-CRYPT}$1$L824LVh4$r.hyZ icsE5tmGaeJrY/dw/ | Y | +-------------+---------------+-----------------------+------------------------------------------------+-------+ ##>> I understand "proxy" and "password" are not required there. That happened for testing. ############################################################# ==> Telnet session: xxxxxx [/tmp] > telnet dovecotserver 110 Trying XXX.XXX.XXX.XXX... Connected to dovecotserver. Escape character is '^]'. +OK Dovecot Ready <6111.1.524dad13.VYOVkhqfe1Ox7Wz+VfogMg==@dovecotserver> user MYUSER +OK pass PASSWD -ERR Account is temporarily unavailable. quit +OK Logging out Connection to dovecotserver closed by foreign host. ############################################################# ==> Logged messages in /var/log/mailllog: Oct 3 12:23:02 dovecotserver dovecot: master: Warning: Killed with signal 15 (by pid=26790 uid=0 code=kill) Oct 3 12:23:53 dovecotserver dovecot: master: Dovecot v2.2.5 starting up (core dumps disabled) Oct 3 12:23:53 dovecotserver dovecot: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth Oct 3 12:23:53 dovecotserver dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_mysql.so Oct 3 12:23:53 dovecotserver dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_pgsql.so Oct 3 12:23:53 dovecotserver dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so Oct 3 12:23:53 dovecotserver dovecot: auth: Debug: Read auth token secret from /var/run/dovecot//auth-token-secret.dat Oct 3 12:23:53 dovecotserver dovecot: auth: Debug: auth client connected (pid=26810) Oct 3 12:24:30 dovecotserver dovecot: auth: Debug: client in: AUTH 1 PLAIN service=pop3 session=/IH8S9rnzACiat/X lip=162.106.XXX.YYY rip=162.106.XXX.ZZZ lport=110 rport=37836 resp=AHNtYXJ0YnVzZWRtAHMwbWV0aGluZw== (previous base64 data may contain sensitive data) Oct 3 12:24:30 dovecotserver dovecot: auth: Debug: cache(MYUSER,162.106.223.215,</IH8S9rnzACiat/X>): miss Oct 3 12:24:30 dovecotserver dovecot: auth-worker(26823): Debug: Loading modules from directory: /usr/lib64/dovecot/auth Oct 3 12:24:30 dovecotserver dovecot: auth-worker(26823): Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_mysql.so Oct 3 12:24:30 dovecotserver dovecot: auth-worker(26823): Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_pgsql.so Oct 3 12:24:30 dovecotserver dovecot: auth-worker(26823): Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so Oct 3 12:24:30 dovecotserver dovecot: auth-worker(26823): Debug: sql(MYUSER,162.106.XXX.ZZZ): query: SELECT NULL AS password, host, destuser, proxy, 'Y' AS starttls, '995' AS port, 'Y' AS nopassword FROM DovecotProxy WHERE user = 'MYUSER' Oct 3 12:24:30 dovecotserver dovecot: auth: Debug: client passdb out: OK 1 user=MYUSER host=pop.gmail.com destuser= MYUSER(a)gmail.com proxy starttls=Y port=995 nopassword=Y hostip=74.125.142.108 pass=XXXXXXXXX Oct 3 12:24:30 dovecotserver dovecot: pop3-login: Debug: Ignoring unknown passdb extra field: nopassword Oct 3 12:25:00 dovecotserver dovecot: pop3-login: Error: proxy(MYUSER): Login for pop.gmail.com:995 timed out in state=0 (after 30 secs, local=162.106.XXX.YYY:51196) Oct 3 12:25:12 dovecotserver dovecot: pop3-login: Aborted login (internal failure, 1 successful auths): MYUSER, 162.106.XXX.ZZZ, PLAIN ==> Something that caught my attention here: "....proxy starttls=Y..." shouldn't look like "...proxy=Y starttls=Y..." ??? I didn't see "...proxy=Y..." even after setting the sql query like "...'Y' as proxy...". ############################################################# If you had the patience to read this far, thanks a lot for trying to help... Alex

1 0

[Dovecot] How to configure statistics tracking
by Bruce Marriner 03 Oct '13

03 Oct '13

I'm trying to configure the dovecot statistics tracking option with Dovecot 2.1.12 on FreeBSD 9.1-RELEASE. I've seen on the wiki page the configuration settings needed for this but it does not say which configuration file these settings should be added to. http://wiki2.dovecot.org/Statistics I was hoping someone could tell me which file these settings should be added to? Do they all just go into the same file or different files? I have a primary dovecot.conf file then inside conf.d/ there are dozens of files that hold the configuration settings for all the different parts of dovecot. Would I just add all of these settings into a conf.d/stats.conf file that would be pulled into the main configuration? Does it matter what order the (10-stats.conf, 20-stats.conf, etc) the file is set for? Thanks.

3 2

[Dovecot] Username issue with Dovecot LDA, IMAP and Winbind Authentication
by Laz Peterson 03 Oct '13

03 Oct '13

Hi there Dovecot community -- I'll try to make this short. Here's the setup … Ubuntu 12.04, Postfix, Dovecot, along with Amavis/Clamd/Spamassassin. Postfix is currently receiving emails for virtual users in multiple domains, all of which are authenticating through Winbind to Windows AD servers. The users log in to the POP/IMAP/SMTP services using the format user(a)domain.corp (the internal domain, not the external mail domain). The domains are all in the same forest, but there are many different domains to authenticate against. Dovecot is currently handling POP, IMAP, and authentication. Postfix uses a MySQL database to map the external email domain to the internal AD domain, for example domain.com -> domain.corp. Postfix also queries the same SQL database for where to save the messages -- /home/vmail/domain\user -- I have the SQL query strip off the ".corp". I had to do this because pam_winbind returns the usernames as "DOMAIN\user" upon successful Dovecot authentication, instead of "user(a)domain.corp", which ends up invalidating all of the %u, %n, and %d variables. On the user side, after successful auth, I can only define %u and %n in my Dovecot configuration -- %d is null, %u is "DOMAIN\user", and %n is "DOMAIN\user". (I use %Lu or %Ln to make it all lower-case.) With this, I am able to authenticate users off of multiple domains, have the mail delivered to a folder that is also accessible to the user when they log in. It serves its purpose. Here's my problem. I am trying to now integrate Pigeonhole and ManageSieve using Dovecot-LDA specified by "virtual_transport", and this is where things get confusing. Dovecot IMAP/POP/SMTP auth notes the user account to be "DOMAIN\user", while Dovecot-LDA receives the email to user(a)domain.com, noting the user account to be "user(a)domain.corp". The same arguments for userdb in "auth-system.conf.ext" are used by both Dovecot when user is logging in for IMAP/POP/SMTP and Dovecot-LDA when it is storing the mail. Because of the way pam_winbind returns the usernames without being able to use %d anymore, I cannot seem to get the same behavior for both sides of Dovecot. For example, if I set home and maildir to "/home/vmail/%Ln", Dovecot-LDA delivers emails into the folder "/home/vmail/user(a)domain.corp" and Dovecot IMAP/POP looks in "/home/vmail/domain\user". If I set the home/maildir to "/home/vmail/%Ld/%Lu", Dovecot-LDA delivers emails into the folder "/home/vmail/domain.corp/user" and Dovecot IMAP/POP looks in "/home/vmail/\/domain\user". So, I seem to be thoroughly unable to get something here that works … The closest I can get is setting home/maildir to "/home/vmail/%Ld\%Lu", but that now gives the LDA side "/home/vmail/domain.corp\user" and the IMAP/POP/SMTP side "/home/vmail/\\domain\user". If I am able to get pam_winbind to return "user(a)domain.corp" instead of "DOMAIN\user", I'd be fine. Or, if I could set the home and maildir locations separately for Dovecot-LDA and Dovecot, I would also be okay. Any suggestions? I know this is probably a Winbind limitation, but I do not know a thing about working with PAM authentication. I tried to compile and install a pam_regex module (which seems to not be offered as a native package in Ubuntu), but it gives errors after adding that to my PAM configuration. I'm stumped. Please let me know if I can include my configuration for either Postfix or Dovecot. Thank you so much for any help. ~ Laz Peterson

1 2

[Dovecot] understanding user_attrs and mail_uid/gid
by Vincent Zakofski 03 Oct '13

03 Oct '13

Hello, I'm trying to understand what's the difference between those parameters. In my dovecot.conf in the global section I have a definition of mail_uid and mail_gid. In my LDAP configuration used by passdb and userdb, I have a definition for user_attrs= uidNumber=500,gidNumber=8. Here is a part of my configuration files (dovecot version: 2.1.7) dovecot.conf mail_gid = 8 mail_uid = 500 passdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } userdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } dovecot-ldap.conf user_filter = (&(objectClass=posixAccount)(mailLocalAddress=%n)) user_attrs = uidNumber=500,gidNumber=8 So everything works fine when all those parameters are present in my configuration files. If I suppress one of them nothing is working (mail reading or delivering). Can someone tell me where I can find a definition of those arguments, if found nothing relevant on the wiki. Thanks,

1 0

[Dovecot] sieve notify and lmtp
by Lampa 02 Oct '13

02 Oct '13

Hello, i've setup sieve script which send notify to user (user(a)domain.com) But user(a)domain.com is alias user(a)domain.com and user(a)anotherdomain.com. LMTP delivers notification only to user(a)domain.com but not to user(a)anotherdomain.com. How to force send notification over smtp (which will be delivered to both) or i must use to=user(a)anotherdomain.com in notify ? Thank you for your advices. Lampa

2 1

[Dovecot] Dovecot namespace solved while writing; preparing to refilter
by miro.rovis＠croatiafidelis.hr 02 Oct '13

02 Oct '13

Hi! My plea to readers: =================== Pls., people who only want strictly technical issues to read, and frown at any broader context regardless how intrinsically related, but not strictly technically related, it might be, skip all the way, all the way to, search for exact words: "strictly technical" or visually, find two lines of sole "===" characters. Thank you! Upon umptieth failure, and having cloned the system onto another same arch, much more: same MBO-model box (cloning and restoring clean is my defence to get the system into as clean a state as can be, after any longer time online --I had had systems comprimised, and now I am a little paranoid)... So, after weeks of some failures in some phases of installations of dovecot and friends (as explained further in this text), I cloned the same system, but from previously taken clean backup, used it some time, and now I want to update the mailbox back because now the first system is in clean state, having I restored from clean backup... This is a Debian weekly testing install, which I clone btwn two same MBO-model boxes to keep it as clean as a non-expert user like me can have it... To a large extent I do trust installing and update/upgrading my systems from the weekly builds (but hey, why don't they PGP-sign those as kernel tarballs and as Grsecurity or Tor-browser tarballs are signed? any Debian developer reading this, why not?)... because I can check with some trust the weekly builds' sums for integrity, but how and why could or would I trust simply installing anything straight from the internet? By cloning (I used to dd disk dump when cloning, but nowadays it seems faster and reliable enough with Sysresccd's fsarchiver, so I dd just the small boot partition), by cloning I keep the system as close to clean as those non-pgp-signed weekly builds allow... Now add to that that the real FFmpeg is not allowed into Debian, and I am a fan of it (I very much use it, it's running almost all the time, on some or other of my systems), but you have to get it through deb-multimedia.org if you want it on Debian (what freedom is that, banning programs from official repositories?!)... and add to that that I want Grsecurity/Pax at all cost, in my system, and not: http://www.nsa.gov/research/selinux/ which I don't want in my system, at all cost, but to which the Debian current leadership seems to be total-blind-fidelity bound to... Add those and you get pretty much all the basic ingredients of my fight for freedom and true privacy which are layed siege onto in the GNU/Linux Operating System and the few related other free OS's, in most of its flavors and branches and deployments of the day, from the outside and also from the inside. Because even with the long-delayed-in-updating gNewSense, for insufficient developer power (I mean: too few), probably, what's the use of the fine deblobbed kernel if they put SELinux into it? Where's freedom with what I suspect can not be other than fake security with surreptitious surveillance? (BTW, go and ask people, but not loudly, who compile their Gentoo's --there' a link to my short post on forums.gentoo.org a few lines below-- like I compile (on other systems of mine), only a minority of very uninformed or some special entities' aficionados use anything other than Grsecurity on their Hardened Gentoos --and Gentoo is unquestionably the leader in hardening-- it's not just me, it's only that I am loud about it)... But I also tried to call this issue to GNU-freedom seeking people's attention such as here: https://lists.nongnu.org/archive/html/gnewsense-users/2013-09/msg00001.html and entire thread: Grsecurity on gNewSense, but for real? I didn't mean to dwell on these issues here, and it is not the reason I write my messege to dovecot-mailing list, but this is the broad perspective of my, and I am sure not only my case, of my deployment of dovecot and broadly these are the reasons why I deploy it on my system. No, this broader picture I don't think is not off-topic. I did think hard about it... No, I believe it is good to mention these issues in this post-Snowden era when the scale and scope of total surveillance can not be successfully sneered and scoffed at and dismissed, like some "exceptional" (Obama talking to the U.S. of A. nation in September 2013, in his quest for support, thankfully lacking, of then being planned Iraq-2003-like-in-pretence-and-lies attack-to-be on Syria)... like some "exceptional" people would want it (that's the Gentoo Forum's link mentioned above)... http://forums.gentoo.org/viewtopic-t-967806.html A case of actual protection of my Gentoo box by Grsecurity At least these issues should not be anymore successfully sneered and scoffed at and dismissed, but we're all less and less free as mankind... And, since I don't connect to my SOHO network the box which I open to the internet, I have mails to refilter into the very probably clean cloned box... And I need to refilter using dovecot (which I finally got to work)... These lines, all the dozen or so paragraphs from the beginning up unto here, do appear first for reading, but are written just about all the very last, after the rest of the text below has already been written, except the final proofreading notes intersparsed). ============================================================================= ============================================================================= Now nearly only strictly technical I go, for the sake of people who prefer so. That maildir mailbox being all poorly sorted (I must have made other mistakes, I am just still new and generally lack expertise in all these true mailer tools; but very impressed I am with them! thanks Sirainen, thanks Varshavchik, thanks MuttDude, thanks Venema, and all, I admire you people!), so I removed the old Maildir and I made this scriptlet: This is my configuration: me@mybox:# dovecot -n # 2.1.17: /etc/dovecot/dovecot.conf # OS: Linux 3.10.9-grsec-130827 x86_64 Debian jessie/sid auth_debug = yes mail_debug = yes mail_location = maildir:~/Maildir:LAYOUT=fs mail_plugins = acl quota mail_privileged_group = mail namespace { hidden = yes inbox = yes list = no location = mbox:~/mail:INBOX=/var/mail/%u prefix = "#mbox/" separator = / } namespace { location = maildir:~/Maildir prefix = separator = / } passdb { args = dovecot driver = pam } protocols = " imap" ssl_cert = </etc/dovecot/dovecot.pem ssl_key = </etc/dovecot/private/dovecot.pem userdb { driver = passwd } protocol imap { mail_plugins = acl quota imap_acl imap_quota mail_log notify } me@mybox:# cd ~ maildirmake Maildir maildirmake -f Drafts Maildir/ maildirmake -f Sent Maildir/ maildirmake -f someFolder1 Maildir/ maildirmake -f someFolder2 Maildir/ maildirmake -f someFolder2.Facebk Maildir/ One note: pls. don't get me wrong, I hate Stasibook (Facebk above is less typing, but it's for Facebook mail), I just would like to learn enough to teach and get at least some of my friends who "socialize" there out of reach of those stasi-like entities that Zuck and his Gang serve all the "socializing" users' data to, which is so hard a task for me to do, but which desire keeps me moving in this steep-learning-curve quest of mine that got me this far where I am now, with dovecot and other tools. That is the reason I am still subscribed there, to be able to follow what my people do, occasionally. I'm not logging into that walled-off sewage-like stasi hole featuring as virtual garden! I saved that scriplet as maildirmake_00.sh, then $ chmod 755 maildirmake_00.sh and ran it. me@mybox:~$ ./maildirmake_00.sh And I have, I guess so far, all correct: me@mybox:~$ ls -la Maildir/ total 40 drwx------ 10 mr mr 4096 Oct 1 23:06 . drwxr-xr-x 33 mr mr 4096 Oct 1 23:06 .. drwx------ 2 mr mr 4096 Oct 1 23:06 cur drwx------ 5 mr mr 4096 Oct 1 23:06 .Drafts drwx------ 5 mr mr 4096 Oct 1 23:06 .someFolder1 drwx------ 5 mr mr 4096 Oct 1 23:06 .someFolder2 drwx------ 5 mr mr 4096 Oct 1 23:06 .someFolder2.Facebk drwx------ 2 mr mr 4096 Oct 1 23:06 new drwx------ 5 mr mr 4096 Oct 1 23:06 .Sent drwx------ 2 mr mr 4096 Oct 1 23:06 tmp me@mybox:~$ I really hope no mistake I made so far. someFolder1 and someFolder2 are for two different servers I get my mail from. Will probably need to tell some more about them later if the thread develops, when the problems I have are more fully explained/solved/expanded. Now the dovecot. It has, in Debian, and I'm on weekly testing branch, currently up to date, actually last week's, that's just a little behind... It has 15-mailboxes.conf like this (only pasting non-commented lines), /etc/dovecot/conf.d/15-mailboxes.conf namespace inbox { mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Trash { special_use = \Trash } mailbox Sent { special_use = \Sent } } [ here is a time lapse of cca 5-10 hours ] Well, since I began writing, I realized that I can get the namespace to work properly, but exactly only without the above: /etc/dovecot/conf.d/15-mailboxes.conf (I mean with all the lines above commented out) It kept telling me this (in the logs I find): Error: user me: Initialization failed: namespace configuration error: Duplicate namespace prefix Let me first say that it's I finally got closer to solution, and saw directories with mutt as ~/Maildir/this/that instead of what maildirs are: ~/Maildir/.this.that only after getting the following in the 10-mail.conf /etc/dovecot/conf.d/10-mail.conf: mail_location = maildir:~/Maildir:LAYOUT=fs mail_plugins = acl quota namespace { separator = / location = mbox:~/mail:INBOX=/var/mail/%u inbox = yes hidden = yes list = no } namespace { separator = / prefix = location = maildir:~/Maildir } It's what is recommended in <Namespaces.txt> on the wiki and maybe other places. But only after the 15-mailboxes.conf was completely commented out. Now I can view my mailbox from anywhere on my network, I guess (tried from the other box and from the same box with mutt, it works!). So namespace is solved I guess. However, for my mail system to completely function in the right GNU/Linux way, I have to get more GNU good things together in harmony. Naming some of the other dovecot friends: *getmail*, which hands on to *maildrop* for delivery... And *postfix* with TLS for sending mail, via 465 port, *stunnel*... That bit feels daunting to me, really... This namespace thing also cost me a few ounces of raw nerves and some occasional darkness in feelings... The worse is still before my mind constantly: still not being able to send mail the normal way, since the normal way is simply not in cleartext anymore... I probably could just fine sent to port 25, but after all the political persecution and censorship that as homeland-living dissident I suffered and still suffer, I don't see that as a solution at all... The obscured morale that I was upon me for a while is due to that stunnel connection not being yet set up... So, sending this from the web yet, I guess (prepared upfront, jealous of my time fixing systems that suffer from strange behavior or break whenever I'm longer online)... However, since I have been writing this not really hoping to get the namespace working in the process (quite a few days I spent on it, and weeks on mail system altogether, I can only hope to get the stunnel right if I really study it as if attending university classes, I'm afraid, just like the hurdles that I went finally past cost me real studying your manuals, my GNU freedom heros!)... ...And this message I having had started some five or ten hours ago [ before the final broader picture paragraphs that are all in the beginning part of the message; this very note is at the time of the very last proofreading ], now I see that I went different direction before discovering the setup for namespace that worked for me. How I used maildirmake (it's the maildrop's not the dovecot's one) I thought but now see doesn't probably have much to do with the solution for namespace I found. I leave it there though, because I need to fix the mailbox by refiltering it, with the aid of the dovecot server, similar to how it is explained in: http://wiki.dovecot.org/HowTo/RefilterMail Because I got some syntax wrong in ~/.mailfiler for the maildrop MDA, and then I got some of those wrongly named (numbered, no a-z, only 0-9 digits in names) fake mailing-list folders that can be seen in my post on mutt mailing-list: http://marc.info/?l=mutt-users&m=138021971816188&w=2 (the .muttrc however is completely different now, sure, than in that link) I hope the main, the namespace dovecot part of this message may elicit someone's advice, if they got past that phase with the 15-mailboxes.conf at its default. Or it is explained in the manuals I need to give a second or a third read to understand them... And I'll be back to report if I made ordered mails in my Maildir right with the refiltering. Just pls. allow time, I'm a late adopter, I'm 56 years of age, can't make these things as quick as you youngsters do it. Thanks for the fine Dovecot mail server! Miroslav Rovis Zagreb, Croatia

1 0

[Dovecot] LDAP for passdb and SQL for userdb
by Bambero 02 Oct '13

02 Oct '13

Hello Is it possible to setup double backend ? ldap for auth only and SQL for userdb information(quota,maildir etc) ? Now I'm using SQL backend and configuration looks like this: passdb { driver = sql args = /etc/dovecot/dovecot-sql.conf } userdb { driver = prefetch } userdb { driver = sql args = /etc/dovecot/dovecot-sql.conf } Can I do something like: passdb { driver = sql args = /etc/dovecot/dovecot-ldap.conf } userdb { driver = prefetch } userdb { driver = sql args = /etc/dovecot/dovecot-sql.conf } Should I leave: userdb { driver = prefetch } Bambero

2 1

[Dovecot] Older messages not showing up after reinstall
by dclist 02 Oct '13

02 Oct '13

I reinstalled Ubuntu, keeping my maildir directories. Messages older than the date of reinstall are not being served by dovecot. The messages show up normally in my MUA if I load the maildir directory directly. I assume there is a file somewhere where dovecot is keeping a list of seen messages which I need to reset. The old messages appear to be in dovecot-uidlist. I tried moving dovecot.index* to no effect. How do I get the pre-reinstall messages to be served by dovecot? # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.8.0-31-generic x86_64 Ubuntu 13.04 auth_debug = yes auth_debug_passwords = yes log_timestamp = "%Y-%m-%d %H:%M:%S " mail_debug = yes mail_location = mbox:~/mail:INBOX=/var/mail/%u mail_privileged_group = mail namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /etc/dovecot/password driver = passwd-file } passdb { driver = pam } plugin { fts = squat fts_squat = partial=4 full=4 } protocols = imap service auth { user = root } ssl_cert = </etc/dovecot/dovecot.pem ssl_key = </etc/dovecot/private/dovecot.pem userdb { args = uid=vmail gid=vmail home=/home/vmail/%u driver = static } userdb { driver = passwd } protocol imap { mail_plugins = fts fts_squat } protocol pop3 { pop3_uidl_format = %08Xu%08Xv }

2 1

[Dovecot] Dovecot disconnecting while downloading large attachments
by Marc Casas - Girotec 01 Oct '13

01 Oct '13

Hi, We're using Dovecot 1.2.15 with Debian Squeeze. The mail server is working properly (we use both POP3 and IMAP) with normal messages, but if we try to download a large message (more than 20mb) using POP3, the server disconnects and our application fails. It's possible to change this behavior? How can we setup Dovecot so it disconnects after 20 or 30 minutes (I think now is disconnecting after 10 minutes) of "inactivity"? Regards, Marc

1 0

[Dovecot] Panic: file mail-storage.c: line 834 (mailbox_verify_name): assertion failed
by Kamil Andrusz 30 Sep '13

30 Sep '13

Hello List! I've encountered an error after upgrading my system and dovecot. I guess it's probably a result of a configuration problem, however after quite some tinkering with configuration I am still missing the source of the problem. Sep 28 16:57:21 shwurzbung dovecot: imap(wizz): Panic: file mail-storage.c: line 834 (mailbox_verify_name): assertion failed: (strncmp(vname, ns->prefix, ns->prefix_len-1) == 0) Sep 28 16:57:21 shwurzbung dovecot: imap(wizz): Fatal: master: service(imap): child 23203 killed with signal 6 (core not dumped - set service imap { drop_priv_before_exec=yes }) The problem above appears with both dovecot 2.2.5 and 2.2.6. It did not happen while using dovecot 2.1.12. Operating system is OpenBSD 5.4-current and AMD64. FS type is FFS (default for OpenBSD). Output of dovecot -n: # 2.2.6: /etc/dovecot/dovecot.conf # OS: OpenBSD 5.4 amd64 auth_mechanisms = plain login default_process_limit = 200 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave mbox_write_locks = fcntl mmap_disable = yes namespace { hidden = yes inbox = yes list = no location = mbox:~/mail:INBOX=/var/mail/%u prefix = inbox/ type = private } namespace inbox { location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = bsdauth } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } pop3_client_workarounds = outlook-no-nuls oe-ns-eoh protocols = imap pop3 lmtp sieve service auth { unix_listener /var/run/dovecot/auth-master { group = virtuals mode = 0600 user = virtuals } unix_listener /var/spool/postfix/private/auth { mode = 0660 user = _postfix } user = root } service managesieve-login { inet_listener sieve { port = 4190 } inet_listener sieve_deprecated { port = 2000 } } ssl_cert = </etc/ssl/ssl.crt ssl_key = </etc/ssl/private/ssl.key userdb { driver = passwd override_fields = mail_home=/home/%u } protocol lmtp { mail_plugins = " sieve" } protocol lda { mail_plugins = " sieve" } protocol imap { imap_client_workarounds = delay-newmail tb-extra-mailbox-sep tb-lsub-flags mail_max_userip_connections = 64 } Thanks in advance for any pointers to a resolution. Best regards, Kamil Andrusz -- It's just a matter of opinion.

2 2

[Dovecot] New install not working.
by Rhorer, Leslie 30 Sep '13

30 Sep '13

Hello. I need some help. I was running uw-imap on my IMAP server (so I am using mbox email files), but I was having trouble with Outlook 2013, so I decided to move to dovecot. At first things were looking much better, except that most of my folders, other than the Inbox, were not showing up. I started changing both the dovecot configuration and the folder structure of my mail files, but now I can't even get the Inbox to populate. Outlooks says it is there, along with any folders I create new in Outlook, plus the Trash folder, which is the only non-local folder with anything in it. Try what I might, I can't get my Inbox to populate or any of the existing folders to show up at all. Here is the current output from dovecot -n: # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.1 xfs mail_location = mbox:/RAID/home/%u/mail namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } protocols = " imap pop3" ssl_cert = </etc/dovecot/dovecot.pem ssl_key = </etc/dovecot/private/dovecot.pem userdb { driver = passwd } I have the mail files on a RAID array (separate from the boot arrays) at /RAID/home/<User>/mail. Here is a snapshot of one of t he directories: drwx------ 2 lrhorer lrhorer 59 Sep 26 21:32 Amazon -rw------- 1 lrhorer lrhorer 118889 Jul 23 09:57 CPS Energy -rw------- 1 lrhorer lrhorer 58343 Dec 26 2011 Craigs List -rw------- 1 lrhorer lrhorer 105676 Aug 24 2011 DAR Support -rw------- 1 lrhorer lrhorer 351546 Sep 20 11:21 Drafts -rw------- 1 lrhorer lrhorer 5767297 Jun 24 2012 eBay -rw------- 1 lrhorer lrhorer 50503746 Nov 27 2012 Family -rw------- 1 lrhorer lrhorer 109653 Apr 14 2012 Helipal -rw------- 1 lrhorer lrhorer 144094265 Sep 27 22:50 inbox -rw------- 1 lrhorer lrhorer 549 Jun 16 11:05 Junk E-mail -rw------- 1 lrhorer lrhorer 499 Jul 27 09:09 Junk E-mail1 -rw------- 1 lrhorer lrhorer 499 Aug 18 13:27 Junk E-mail2 -rw-r--r-- 1 lrhorer lrhorer 0 Sep 27 22:41 Junk E-mail3 -rw------- 1 lrhorer lrhorer 144094265 Sep 26 21:30 lrhorer -rw------- 1 lrhorer lrhorer 178218 Jan 11 2013 Mdadm -rw------- 1 lrhorer lrhorer 1022804 Dec 21 2011 NewEgg -rw------- 1 lrhorer lrhorer 6102422 Sep 17 2012 NUT -rw------- 1 lrhorer lrhorer 1588992 May 28 2010 RAID Halting -rw------- 1 lrhorer lrhorer 139695 Dec 13 2009 Rebuild an Array -rw------- 1 lrhorer lrhorer 3657762 Jul 26 10:24 Save -rw------- 1 root root 3657762 Sep 27 22:48 Save.sav -rw------- 1 lrhorer lrhorer 44458963 Jun 21 2011 Sent Items -rw------- 1 lrhorer lrhorer 10349 Jan 3 2010 SMART -rw-rw-rw- 1 lrhorer lrhorer 238 Sep 27 22:46 subscriptions -rw------- 1 lrhorer lrhorer 2732568 Jun 5 2011 tempAmazon -rw-r--r-- 1 lrhorer lrhorer 0 Sep 27 22:11 testing -rw------- 1 lrhorer lrhorer 19152044 Sep 27 22:42 Trash -rw------- 1 lrhorer lrhorer 536 Sep 5 01:14 Unsent -rw------- 1 lrhorer lrhorer 58550 Apr 8 2012 Wine -rw------- 1 lrhorer lrhorer 105015 Apr 2 2012 Xheli Since the home directories are on a subdirectory of a separate array, I have the following: lrwxrwxrwx 1 root root 10 Sep 27 21:22 /home -> /RAID/home /var/mail: total 140724 lrwxrwxrwx 1 root mail 30 Sep 27 21:31 ljrhorer -> /RAID/home/ljrhorer/mail/inbox lrwxrwxrwx 1 root mail 29 Sep 27 21:31 lrhorer -> /RAID/home/lrhorer/mail/inbox ------------- The content contained in this electronic message is not intended to constitute formation of a contract binding tw telecom. tw telecom will be contractually bound only upon execution, by an authorized officer, of a contract including agreed terms and conditions or by express application of its tariffs. This message is intended only for the use of the individual or entity to which it is addressed. If the reader of this message is not the intended recipient, or the employee or agent responsible for delivering the message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this message is strictly prohibited. If you have received this communication in error, please notify us immediately by replying to the sender of this E-Mail or by telephone.

2 2

[Dovecot] Using MailDir but local messages still save in mbox format
by Mike Edwards 30 Sep '13

30 Sep '13

I am using MailDir format for all my virtual users and it is working well. However, if email comes in to a unix system user, it delivers in Mbox format. This is mostly cron jobs that do this. Mail addressed to my virtual users goes to the MailDir locations just fine. None of these mailboxes have ever been created, they are just incorrect assumed addresses. There should NEVER be any email to username(a)my.host.name because everything is virtual. Does anyone know how to fix this? Here is my config. # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-358.18.1.el6.x86_64 x86_64 CentOS release 6.4 (Final) auth_debug = yes auth_mechanisms = plain login cram-md5 ntlm auth_verbose = yes auth_verbose_passwords = plain disable_plaintext_auth = no listen = * mail_location = maildir:~/Maildir mail_privileged_group = mail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date mbox_write_locks = fcntl passdb { args = /etc/dovecot/conf.d/dovecot-sql.conf.ext driver = sql } plugin { autocreate = Trash autocreate2 = Spam autocreate3 = Drafts autocreate4 = Sent autocreate5 = Archives autosubscribe = Trash autosubscribe2 = Spam autosubscribe3 = Drafts autosubscribe4 = Sent autosubscrube5 = Archives sieve = ~/.dovecot.sieve sieve_before = /home/vmail/movespam.sieve sieve_dir = ~/sieve } protocols = imap pop3 service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-master { mode = 0600 user = vmail } } ssl_ca = /etc/pki/dovecot/ca/dovecot.pem ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem ssl_cipher_list = HIGH:MEDIUM:+TLSv1:!SSLv2:+SSLv3 userdb { args = uid=vmail gid=vmail home=/home/vmail/%d/%n driver = static } protocol lda { auth_socket_path = /var/run/dovecot/auth-master log_path = /home/vmail/dovecot-deliver.log mail_plugins = " sieve sieve" postmaster_address = postmaster(a)zeus.deltatechnicalservices.com } protocol lmtp { mail_plugins = " sieve" } protocol imap { mail_plugins = autocreate } protocol sieve { managesieve_implementation_string = Dovecot Pigeonhole } protocol pop3 { pop3_uidl_format = %08Xu%08Xv }

4 9

[Dovecot] pop3-login problem
by Oleksii Krykun 30 Sep '13

30 Sep '13

Hi! I have dovecot-2.2.5 installed as part of postfix+dovecot+mysql+amavisd. My server has two NICs (Internet and local). /etc/resolv.conf point to ISP DNS. Local names are not resolved. If ISP link goes to down state I see (after about 1minute) a following error: Sep 26 15:44:29 pop3-login: Error: master(pop3): Auth request timed out (received 0/12 bytes) and following informational message: Sep 26 15:44:29 pop3-login: Info: Internal login failure (pid=12809 id=17815) (internal failure, 1 successful auths): user=<xxx(a)xxx.xxx> ..... If link is restored (even for a short time) all works fine again. After next down errors are repeated. I suppose that this is dns issue. Am I wrong? And I have a following question. Is it possible to disable dns requests? I haven't external clients. Or I must fix a name resolution e.g. to use a caching dns server? Thanks.

3 4

[Dovecot] proxy: can I use the password returned from passdb to log in to the back-end?
by Justin McAleer 30 Sep '13

30 Sep '13

I am hoping to support encrypted passwords, which I know is generally not allowed in a proxy setup. However, I can return the password in clear-text out of the password database, so I was hoping for something similar to the destuser field. I have successfully used the master password functionality to support encrypted passwords (users impersonating themselves), as long as the back-end server supports that. However, I need to proxy POP3 to Gmail, which does not.

2 2

[Dovecot] Processing sent items
by Bruce Markey 29 Sep '13

29 Sep '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 How does dovecot handle sent items and is it possible to "process" them befor they get saved in the sent item folder? My scenario is that I'm running postifx + dovecot with all incoming and outgoing mail passed to a script that encrypts the mail with the public key of the recipient. The only place now that has unencrypted mail sitting on the server is the sent items, I'd like to fix that. What would be the best way to proceed here? - -- Encrypt everything. Public key: https://www.secryption.com/BruceMarkey.asc I believe that any violation of privacy is nothing good. Lech Walesa -----BEGIN PGP SIGNATURE----- Version: OpenPGP.js v.1.20130420 Comment: http://openpgpjs.org wsFcBAEBCAAQBQJSR+odCRDIVcS4Lgc6WAAAIOYP/AqT3HWNbZZnoRXgeq27 n8id40wWemf+IgXGEe1fCTX7d/x+Zinj7bZw5EVq8WlLDxwpOhJGDNUAfA2+ 2z+6J7H0dAHk8rSJZqZfNaGWQQhY3ZehwJnojGJnM5ORuHHH/9WsY91jq26u 4Bzg54tUo+aIoWJHLWlVdqiDjJsW4n536UaHcKlVQx0JCe1byt4eXAmJP9dh Dc9YkP3lKUdW9oxgusJRLOxGfaN++nIFHSBDV6wGp0gEdCuzkgphdEFMnUX9 mD1dwPrDMlEmqHkiyHFH9RGGFvHRaTmdREW8eX9vnHp2PBXthbqd3RKWs7Q4 FmnfoS18inSbTM9Cp79HgQBMKBu66/qtdI6q5q45An9lmQAGf2ElvApSj8b+ ZI5GklVGSyrkxwRTOSRij57SDcRexNhlHg1jsDwSFvNjW5CzH0cB+mVU98eB TqfbIPKvGuqKzpdgf7SNJhZXmmkRrtsL/pI3xCheaZVh34Jxx6N/mP01pDEv d4IrajaTS+0mv6cM4z5f6k62YypHNB9fSTTjIKIqAvLgWMyQIFdjd9BQ1PQK pPiu+btbhhb4RgKa3LFSTp2xJVZlKXd2bqTaRkv63eUgF9NUIr3RYM98I75z mMnxfR5QDZIS6s5tlmZXF7zvCzXoRj30xEp8IsTMrfA4GzLpfAVsJaSUZlSo j5I3 =5Tw/ -----END PGP SIGNATURE-----

2 2

[Dovecot] How to authenticate against SQL DB with custom-ciphered passwords?
by Nicolay Vizovitin 29 Sep '13

29 Sep '13

Hello, I'm about to start developing authentication/password-scheme module for Dovecot. So I would like to get some advice before actually committing to doing things in particular way. Hope somebody will be able to help me :) For the record, I am currently targeting latest stable Dovecot version 2.2.5. I have an SQL DB with mail users' authentication data. Passwords are stored either encrypted via system crypt(3) or ciphered with some custom algorithm (think something symmetrical like AES, so passwords can be decrypted into plain form). I want to use this DB as both userdb and passdb backend. The issue, of course, is with ciphered passwords support. 1) Is it feasible to just implement a new password scheme for ciphered passwords support and still use stock passdb driver in Dovecot for SQL DB access? So that passwords in this scheme would be treated as PLAIN (in a sense that both cleartext and shared secret authentication methods would work). 2) Provided I implement custom password scheme for ciphered passwords, what is the best way to be capable to perform authentication against both ciphered and encrypted passwords? Ciphered and encrypted passwords are stored in different fields of SQL table (one of them is NULL when the other one is set). a) Do I define two passdb clauses with their own default_pass_scheme (equal to my new scheme or CRYPT for encrypted passwords) and use fallback to effectively check both of them? b) Do I modify SQL query so that it prefixes existing password with correct scheme (I'm not sure this will be easy enough to do)? 3) Is it mandatory to provide password generation routine for custom password scheme? When it will be used? 4) Maybe it's better to just implement a plugin that serves as both userdb and passdb driver (in other words a kind of generic authentication module)? What are advantages and disadvantages of each method - custom password scheme + stock SQL driver VS. custom userdb and passdb driver? Fortunately, I already have all the required credentials lookup and verification code. So in any case the question is only in figuring out suitable Dovecot APIs and integrating the existing code. 5) I have previously implemented similar custom authentication module for Courier-IMAP (Courier-Authlib to be precise) to use the same SQL DB. And I will need to support both IMAP servers for some time. So it is only natural to expect some generic solution to be possible. I'd like to remind that I need to be able to supply either encrypted password or deciphered plain password, or just check against them. Is it possible to do so in a common way? If so, what method should I use? I would expect SASL helping me out here, but AFAIK, both Dovecot and Courier-IMAP can only serve as SASL servers (providing authentication services), not clients. 6) I obviously care about providing enhanced security, especially against stealing mail passwords. So any additional advice or related guidelines are welcome. 7) Somewhat unrelated question: what is the best way to test IMAP (and maybe POP3 as well) server performance and compare it to another server? I'm interested in both login performance (the part I will influence) and performance with many mails in mailbox. I heard imaptest is suitable for this task. Are there any recipes or example testing scenarios you might share? ;) I would be grateful for any insight in these issues. If I chose a wrong mailing list to post to, please feel free to correct me. Thanks for your time! :) -- Best regards, Nick

2 2