- dovecot - dovecot.org

I can no longer use TLS for Windows7 and Outlook
by Mark Constable 03 Jun '20

03 Jun '20

I currently use Ubuntu 20.04 with Dovecot 2.3.7.2 and OpenSSL 1.1.1f. A few months ago there was an update to all these systems and since then I've had to talk W7 and old Mac clients through disabling ports 993/995 with TLS enabled back to ports 143/110 without SSL or they could not pick up email. Thunderbird users (ie; me) were unaffected. Could anyone share a set of port 993/995 SSL settings known to work with Windows7 and Outlook16 using "dovecot -n|grep ^ssl_" please ? Mine is currently... ssl_ca = </etc/ssl/certs/ca-certificates.crt ssl_cert = </etc/ssl/example.com/fullchain.pem ssl_dh = # hidden, use -P to show it ssl_key = # hidden, use -P to show it ssl_options = no_compression no_ticket ssl_prefer_server_ciphers = yes I have commented out ssl_cipher_list, ssl_min_protocol and others to get back to whatever the defaults are so I am not simply guessing what the optimal settings would be to cover Win7 and up. Yes I know Win7 is no longer supported but that does not help the 100s of older users I have that can't/won't upgrade their computers.

7 6

Packages for CentOS 8
by Peter 01 Jun '20

01 Jun '20

I've now successfully built Dovecot packages for CentOS 8 that do not have the quota support stripped out. I was able to do this because CentOS has now finally shipped the quota-devel package as well as the other -devel packages that were previously missing from CentOS 8. For those of you who are interested they are in the GhettoForge Testing repo for el8 at: http://mirror.ghettoforge.org/distributions/gf/el/8/testing/x86_64/ These are untested so let me know if anyone experiences any issues with them. Peter

3 6

locking question
by Tom Lieuallen 01 Jun '20

01 Jun '20

We're running dovecot 2.3.10 on two different servers (two different environments). Both very similarly configured (sendmail and procmail for mail delivery); same OS and patch levels. One environment has nearly 10,000 users and hasn't seen problems. The other environment has just a handful of users, but one user is very active with email and has a fairly complicated procmail configuration. I'm having ongoing mail file locking problems with that one user... Procmail says it's using dotlocking and fcntl: procmail v3.22 2001/09/10 Locking strategies: dotlocking, fcntl() I'm using defaults for dovecot: #mbox_read_locks = fcntl #mbox_write_locks = dotlock fcntl I have seen this a number of times in dovecot's logs. This signifies a start of locking problems with a mailbox. Mailbox aa_checkme_second: fcntl() failed with mbox: No locks available Procmail's logs show this: procmail: Locking "mail/aa_checkme_second.lock" procmail: Assigning "LASTFOLDER=mail/aa_checkme_second" procmail: Opening "mail/aa_checkme_second" procmail: Acquiring kernel-lock procmail: Kernel-lock failed procmail: Unlocking "mail/aa_checkme_second.lock" These errors were not concurrent; dovecot's errors happened first. I've been suspicious that there was a locking conflict of some kind. My only remaining question on that front is about the read locks. Is it worth trying dotlock for it instead of fcntl? If that's not the problem, then could we be running into some system limitations or a bug in the kernel or mailbox storage? The server running dovecot is Centos 6.10. The mailbox storage is on Isilon OneFS 8.1.2.0. I should probably increase dovecot's logging to see if anything else jumps out at me. thank you for any suggestions. Tom Lieuallen Oregon State Univesity

1 0

Problems with userdb and mail deliveribility
by Chris Bennett 01 Jun '20

01 Jun '20

I briefly got some mails delivered, but not anymore. Attached are dovecot-info.log, dovecot-debug.log, dovecot.log, maillog, /etc/mail/passwd smtpd.conf, vaddr, vusers, vdomains Thanks for any help. Chris Bennett

3 4

auth_policy_server vs client_id and x-originating-ip
by Zdeněk Zámečník 01 Jun '20

01 Jun '20

I run into troubles when trying to set up auth_policy_server in Dovecot 2.3.10.1. It works almost as expected but I cannot get client ID in this process. By setting up "imap_id_log=*" I see in log that Dovecot gets details about mail client like name and version: May 31 14:20:58 mail dovecot: imap(xxx(a)example.xxx)<24796><ft7ytfCmjdZWMSZQ>: ID sent: name=Thunderbird, version=68.8.1 But the auth_policy_server is getting all details except this ID, it's empty: May 31 14:20:58 mail auth-policy[10357]: { May 31 14:20:58 mail auth-policy[10357]: device_id: '', May 31 14:20:58 mail auth-policy[10357]: login: 'xxx(a)example.xxx', May 31 14:20:58 mail auth-policy[10357]: protocol: 'imap', May 31 14:20:58 mail auth-policy[10357]: pwhash: '097a', May 31 14:20:58 mail auth-policy[10357]: remote: '1.2.3.4', May 31 14:20:58 mail auth-policy[10357]: tls: true May 31 14:20:58 mail auth-policy[10357]: } However in some cases I see that client_id is passed to auth_policy_server: May 31 14:27:41 mail auth-policy[10357]: { May 31 14:27:41 mail auth-policy[10357]: device_id: '"name" "Outlook-iOS-Android" "version" "2.0"', May 31 14:27:41 mail auth-policy[10357]: login: 'yyy(a)example.xxx', May 31 14:27:41 mail auth-policy[10357]: protocol: 'imap', May 31 14:27:41 mail auth-policy[10357]: pwhash: '0b63', May 31 14:27:41 mail auth-policy[10357]: remote: '3.4.5.6', May 31 14:27:41 mail auth-policy[10357]: tls: true May 31 14:27:41 mail auth-policy[10357]: } I think I am missing some important point. Maybe IMAP command ID and client_id are totally different. Can you please advise? Is it possible to pass details about mail client to auth_policy_server? Second question is: how I can get "x-originating-ip" from ID command to auth_policy_server? Below is my config file: # 2.3.10.1 (a3d0e1171): /etc/dovecot/dovecot.conf # Pigeonhole version 0.5.10 (67bf5bd7) # OS: Linux 5.3.18-2-pve x86_64 Debian 10.4 # Hostname: mail.z-technics.com auth_cache_size = 2 M auth_cache_ttl = 5 mins auth_master_user_separator = * auth_mechanisms = plain login auth_policy_check_before_auth = no auth_policy_hash_nonce = # hidden, use -P to show it auth_policy_report_after_auth = no auth_policy_server_timeout_msecs = 1500 auth_policy_server_url = http://127.0.0.1:8090/ dict { acl = pgsql:/etc/dovecot/dovecot-dict-sql.conf.ext quota = pgsql:/etc/dovecot/dovecot-dict-sql.conf.ext } disable_plaintext_auth = no imap_client_workarounds = delay-newmail imap_hibernate_timeout = 5 secs imap_id_log = * imap_id_retain = yes login_trusted_networks = 127.0.0.1 mail_gid = 2000 mail_home = /var/vmail/%d/%n mail_location = mdbox:~/mdbox:ALT=/var/vmail-archive/%d/%n/mdbox mail_max_userip_connections = 60 mail_plugins = acl zlib fts quota mail_uid = 2000 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext vacation-seconds editheader imapsieve vnd.dovecot.imapsieve mdbox_rotate_interval = 1 days mdbox_rotate_size = 16 M passdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } passdb { args = /etc/dovecot/masters.db driver = passwd-file master = yes pass = yes } plugin { acl = vfile acl_shared_dict = proxy::acl imapsieve_mailbox1_before = file:/var/vmail/sieve/report-spam.sieve imapsieve_mailbox1_causes = COPY imapsieve_mailbox1_name = Spam imapsieve_mailbox2_before = file:/var/vmail/sieve/report-ham.sieve imapsieve_mailbox2_causes = COPY imapsieve_mailbox2_from = Spam imapsieve_mailbox2_name = * imapsieve_mailbox3_before = file:/var/vmail/sieve/report-spam.sieve imapsieve_mailbox3_causes = COPY imapsieve_mailbox3_name = Junk imapsieve_mailbox4_before = file:/var/vmail/sieve/report-ham.sieve imapsieve_mailbox4_causes = COPY imapsieve_mailbox4_from = Junk imapsieve_mailbox4_name = * mailbox_alias_new = Sent Messages mailbox_alias_new2 = Sent Items mailbox_alias_new3 = Deleted Items mailbox_alias_old = Sent mailbox_alias_old2 = Sent mailbox_alias_old3 = Trash quota = dict:User quota::proxy::quota quota_grace = 10%% quota_rule2 = Trash:ignore quota_rule3 = Junk:ignore quota_warning = storage=80%% quota-warning 90 %u quota_warning2 = storage=85%% quota-warning 95 %u quota_warning3 = storage=95%% quota-warning 105 %u sieve = /var/vmail/%d/%n/sieve/.sieve sieve_after = /var/vmail/%d/%n/sieve/autoreply.sieve sieve_before = /var/vmail/sieve/global.sieve sieve_dir = /var/vmail/%d/%n/sieve sieve_extensions = +editheader +vacation-seconds sieve_global_dir = /var/vmail/sieve/ sieve_global_extensions = +vnd.dovecot.pipe +vnd.dovecot.environment sieve_max_redirects = 20 sieve_pipe_bin_dir = /usr/lib/dovecot sieve_plugins = sieve_imapsieve sieve_extprograms sieve_vacation_send_from_recipient = yes } protocols = imap sieve lmtp pop3 service auth-worker { unix_listener auth-worker { user = vmail } user = $default_internal_user } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { mode = 0600 user = vmail } user = vmail } service dict { unix_listener dict { mode = 0600 user = vmail } } service imap-hibernate { unix_listener imap-hibernate { group = $default_internal_group mode = 0660 } } service imap-login { process_min_avail = 10 service_count = 0 vsz_limit = 512 M } service imap { executable = imap process_limit = 3500 unix_listener imap-master { user = $default_internal_user } vsz_limit = 2 G } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } service managesieve-login { inet_listener sieve { port = 4190 } process_min_avail = 0 service_count = 1 vsz_limit = 64 M } service managesieve { process_limit = 400 } service pop3-login { process_min_avail = 3 service_count = 0 vsz_limit = 320 M } service pop3 { process_limit = 200 vsz_limit = 320 M } service quota-warning { executable = script /etc/dovecot/quota_warning.sh unix_listener quota-warning { mode = 0666 user = vmail } user = vmail } ssl_cert = </etc/ssl/private/multi.z-technics.cz.dovecot.pem ssl_dh = # hidden, use -P to show it ssl_key = # hidden, use -P to show it stats_writer_socket_path = userdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } protocol sieve { managesieve_implementation_string = Dovecot Pigeonhole managesieve_max_compile_errors = 5 } protocol imap { mail_plugins = quota imap_quota fts mailbox_alias imap_acl acl imap_zlib imap_sieve } protocol lda { mail_fsync = optimized } protocol lmtp { mail_fsync = optimized mail_plugins = quota sieve acl }

2 1

2.3.10 + lazy expunge
by Matt Bryant 01 Jun '20

01 Jun '20

Hi, so currently run dovecot 2.2.x on CentOS 7 box and was looking to upgrade to 2.3.10. I use lazy expunge atm into a different namespace but saw on the new doco pages that is is depracted in 2.3.0. Have tested and still seems to work so question is more around why ? Why would this be deprecated given using a different namespace allows 2 things a) the folder where message is located is taken accross so if I want to restore and know where it went b) namespace allows me to specify an alternate location for storing the messages. Also given it does still work is there any indication as to what version the deprecation basically equates to it not working. rgds Matt ------ 8< --------- namespace Deprecated since version v2.3.0.

1 0

identify 143 vs 993 clients
by mj 01 Jun '20

01 Jun '20

Hi, I am trying to find a nice way to identify dovecot clients that are still configured to use port 143 to connect to our mailserver, from the dovecot logs. I would then ask them to move over to 993, and finally disable port 143 altogether. When looking at the dovecot logs, it seems this is not logged in any obvious way. Of course I could use netflow etc, but that would not give us usernames, but IP's, etc. So, is there a nice way to somehow indicate in the dovecot logs, if a client connected on 143 or on 993? Thanks!

13 25

Running doveadm without config file?
by Joseph Tam 01 Jun '20

01 Jun '20

It would be useful to run the "doveadm" utility on a non-dovecot server e.g. generating password hashes: # echo plaintextpass | doveadm pw -s BLF-CRYPT doveadm(user): Fatal: Error reading configuration: stat(/etc/dovecot/dovecot.conf) failed: No such file or directory Is there a way to circumvent the need for a configuration file? Joseph Tam <jtam.home(a)gmail.com>

2 4

Current thinking on backups ?
by Laura Smith 30 May '20

30 May '20

Hi, What are people doing for backups ? My current process is LVM snapshot and backup from that to NFS share. But there seems to be hints around the internet that people use/abuse "doveadm backup" for backup purposes even though it seems its original intention was for transferring mailboxes between dovecot instances. Assuming its ok to "doveadm backup" to an NFS share, is it ok to use "doveadm backup" when dovecot has replication setup (replication-notify etc.) ? Or will it interfere ? Thanks! Laura

4 4

Operation not permitted - fchown() failed for /run/dovecot/login
by Dshah 30 May '20

30 May '20

# dovecot --version 2.3.10.1 (a3d0e1171) Dovecot is unable to start, I see error " Fatal: fchown() failed for /run/dovecot/login: Operation not permitted" what could be the problem? any help please $ls -la /var/mail/ drwxr-xr-x 1 root root 4096 May 29 17:32 . drwxr-xr-x 1 root root 4096 May 28 17:08 .. drw------- 2 root root 4096 May 29 17:32 domains ====# cat /etc/dovecot/dovecot.conf===== auth_mechanisms = plain login auth_username_format = %Lu auth_verbose = yes auth_debug = yes auth_debug_passwords = no log_timestamp = "%Y-%m-%d %H:%M:%S " login_greeting = IMAP server ready disable_plaintext_auth = no protocols = imap pop3 log_timestamp = "%Y-%m-%d %H:%M:%S " mail_location = maildir:/var/mail/domains/%d/%n first_valid_gid = 105 first_valid_uid = 102 last_valid_gid = 105 last_valid_uid = 102 service anvil { client_limit = 2100 } ssl_cert = </secret/tls.crt ssl_key = </secret/tls.key ssl_ca = </secret/ca.crt namespace inbox { inbox = yes mailbox Trash { auto = create special_use = \Trash } mailbox Spam { auto = no special_use = \Junk } mailbox Ham { auto = no } mailbox Sent { auto = subscribe special_use = \Sent } } # service auth { # unix_listener auth-master { # mode = 0600 # user = vmail # } # unix_listener /var/spool/postfix/private/auth { # mode = 0666 # user = postfix # group = postfix # } # user = root # } # service auth-worker { # user = root # } # protocol lda { # log_path = /home/vmail/dovecot-deliver.log # auth_socket_path = /var/run/dovecot/auth-master # postmaster_address = postmaster(a)razalabs.com # } protocol pop3 { pop3_uidl_format = %08Xu%08Xv } userdb { driver = static args = uid=102 gid=105 home=/var/mail/domains/%d/%n allow_all_users=yes } passdb { driver = sql args = /etc/dovecot/dovecot-sql.conf.ext } =================/etc/dovecot/dovecot-sql.conf.ext=============== driver = mysql connect = host=localhost dbname=mail user=root password=pass default_pass_scheme = CRYPT password_query = SELECT email as user, password FROM users WHERE email='%u'; =================dovecot-sql.conf.ext=============== =================/etc/dovecot/dovecot-sql.conf.ext=============== driver = mysql connect = host=localhost dbname=mail user=root password=pass default_pass_scheme = CRYPT password_query = SELECT email as user, password FROM users WHERE email='%u'; =================dovecot-sql.conf.ext=============== and postfix =================/etc/postfix/main.cf=============== inet_protocols = all meta_directory = /etc/postfix shlib_directory = /usr/lib/postfix myhostname = mail.my-domain.com mynetworks = 127.0.0.0/8 message_size_limit = 30720000 virtual_alias_domains = virtual_alias_maps = proxy:mysql:/etc/postfix/mysql-virtual_forwardings.cf, mysql:/etc/postfix/mysql-virtual_email2email.cf virtual_mailbox_domains = proxy:mysql:/etc/postfix/mysql-virtual_domains.cf virtual_mailbox_maps = proxy:mysql:/etc/postfix/mysql-virtual_mailboxes.cf virtual_mailbox_base = /var/mail/domains virtual_uid_maps = static:102 virtual_gid_maps = static:105 smtpd_sasl_type = dovecot smtpd_sasl_path = /var/spool/postfix/private/auth smtpd_sasl_auth_enable = yes broken_sasl_auth_clients = yes smtpd_sasl_authenticated_header = yes smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination smtpd_use_tls = yes smtpd_tls_cert_file = /secret/tls.crt smtpd_tls_key_file = /secret/tls.key #virtual_create_maildirsize = yes #virtual_maildir_extended = yes proxy_read_maps = $local_recipient_maps $mydestination $virtual_alias_maps $virtual_alias_domains $virtual_mailbox_maps $virtual_mailbox_domains $relay_recipient_maps $relay_domains $canonical_maps $sender_canonical_maps $recipient_canonical_maps $relocated_maps $transport_maps $mynetworks virtual_transport = dovecot dovecot_destination_recipient_limit = 1 smtpd_milters = inet:127.0.0.1:8891 milter_default_action = accept =================/etc/postfix/main.cf===============

1 1

migrating dovecot to new server
by David Mehler 30 May '20

30 May '20

Hello, I'm needing to migrate my dovecot installation it's 2.3 on FreeBSD 12.1 to a new server. I'd ideally like to back up all the mails in the maildir location, copy that over, load in my configuration files, and bring the system back up. I doubt it's that easy, any pitfalls I should watch out for? Thanks. Dave.

4 4

director -> POP3s/IMAPs -> mailbox host
by patosec 28 May '20

28 May '20

Hello again, I did a lot of trial and error already, but I can't seem to find a way to encrypt my dovecot director to dovceot mailbox traffic. Is there a way to configure dovecot director to only use ssl/tls encrypted connections for specific tagged mailbox clusters? (or all clusters, in fact does not matter if it could be restricted to tags) Looks like there is also no documentation available for this sort of configuration. I tried setting my mailbox nodes to "ssl = require" butt after doing so I can't login through director proxy anymore. It always looks like ssl/tls termination is finally done on director side. Anyone tried this already or has a running setup doing encryption from lets say frontend to backend? Thanks, greetings Patrick

2 2

service doveadm - how to debug proxying with director
by patosec 28 May '20

28 May '20

Hello everyone, I'm on a small dovecot director -> dovecot mailbox setup and I try to get doveadm command proxying to work. Though I don't get the expected output. My directors do not forward the doveadm commands to the expected backend host. Doveadm is working as expected on the backend hosts, the director hosts just dont log anything about the proxying that should happen or anything else about the doveadm commands at all. Can someone guide me in a direction on what to try next or maybe got a working config regarding doveadm proxying? Thanks in advance! Some technical data regarding my problem: Dovecot Version: 2.3.10 (0da0eff44) Output of a 'doveadm director status' command: mail server ip tag vhosts state state changed users 10.0.0.81 tag1 100 up - 0 10.0.0.82 tag1 100 up - 1 Output of a 'doveadm director ring status' command: director ip port type last failed status ping ms input output buffered buffered peak last read last write 10.0.0.193 9090 self never ring synced 5 - - - - - - 10.0.0.194 9090 right never synced 0 2051 6400 0 757 2020-05-28 09:56:37 2020-05-28 09:56:37 10.0.0.195 9090 left never synced 0 4929 1804 0 37 2020-05-28 09:56:37 2020-05-28 09:56:37 This is my dovecot-director hosts configuration (doveadm related part): service doveadm { inet_listener { # any port you want to use for this: port = 24245 } } local 0.0.0.0 { # password to use for client authentication doveadm_password = secret # allow client to only use specified list of commands (default is all): #doveadm_allowed_commands = } # same port as doveadm's inet_listener doveadm_port = 24245 protocol doveadm { # NOTE: director-userdb socket is actually used only for passdb lookups, not userdb lookups auth_socket_path = director-userdb } And here the dovecot-backend hosts configuration (doveadm related part): ### director conf service doveadm { inet_listener { # any port you want to use for this: port = 24245 } } local 0.0.0.0 { # password to use for client authentication doveadm_password = secret # allow client to only use specified list of commands (default is all): #doveadm_allowed_commands = } A 'doveadm user -u test(a)test.com' command on the backend host: userdb: test(a)test.com user : test(a)test.com home : /var/spool/imap/test(a)test.com quota : maildir:User quota quota_rule: *:storage=1048576:messages=153000 A 'doveadm user -u test(a)test.com' command on the director host: userdb: test(a)test.com user : test(a)test.com

2 3

Determinant of umask for sieve_pipe_bin_dir scripts?
by Laura Smith 27 May '20

27 May '20

Hi, What determines the umask of sieve_pipe_bin_dir scripts ? The results from my script are always being set to 0600. My script is simple and shown below, even if I adjust the right line to add " && chmod 644", the actual resulting file still remains at 0600 ?!? #!/bin/bash # Usage: imapsieve_copy <email> <spam|ham> MSG_USER="$1" MSG_TYPE="$2" RUN_UUID=$(cat /proc/sys/kernel/random/uuid) BASE_DIR="/foo/bar" TARGET_DIR="${BASE_DIR}/${MSG_TYPE}" TARGET_FILE="${TARGET_DIR}/${RUN_UUID}" cat > "${TARGET_FILE}" < /dev/stdin && pigz -9 "${TARGET_FILE}"

2 2

How to make IMAPS SSL Cert for Dovecot that works with Thunderbird
by hanasaki＠gmail.com 27 May '20

27 May '20

Hello all, What are the instructions for making an SSL cert for Dovecot IMAPS? Two methods have been tried, and work, with Evolution; however generate the following error when Thunderbird tries to connect. Thank you, method 1 : self signed openssl req -newkey rsa:4096 -sha512 -x509 -days 365 -nodes -keyout mykey.key -out mycert.pem method 2 : Let's Encrypt (LE) CA Created with Certbot ERROR TLS handshaking: SSL_accept() failed: error:14094412:SSL routines:ssl3_read_bytes:sslv3 alert bad certificate: SSL alert number 42, session=<+oooooo>

5 10

doveadm: extra lines?
by Felipe Gasper 27 May '20

27 May '20

Hello, I’m sending doveadm “kick” commands to doveadm-server via the doveadm protocol. When “kick” sends back a NOTFOUND error, though, it’s sending back additional output. strace shows: write(3<UNIX:[3158354->3156665]>, "\t\tkick\tmyssltest\n", 17) = 17 ... read(3<UNIX:[3158354->3156665]>, "\n-NOTFOUND\n\n-\n", 8192) = 14 Going by the protocol documentation (https://wiki2.dovecot.org/Design/DoveadmProtocol) there appear to be 3 extra bytes at the end of the server’s response: "\n-\n". Is this a bug in doveadm-server? Or am I misreading the protocol documentation? Thank you! cheers, -Felipe Gasper

1 2

Panic: assert opcode == HASH_TABLE_OP_UPDATE during replication (dsync-local)
by Alexey 26 May '20

26 May '20

Hello. I got an error and have no idea how to fix it, or workaround it. dsync-local(mymail(a)mymail.org)<PR2hBB86zV52SQAACjx0Gw>: Panic: file hash.c: line 251 (hash_table_insert_node): assertion failed: (opcode == HASH_TABLE_OP_UPDATE) dsync-local(mymail(a)mymail.org)<PR2hBB86zV52SQAACjx0Gw>: Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(backtrace_append+0x3d) [0x7fd8acd5d15d] -> /usr/lib/dovecot/libdovecot.so.0(backtrace_get+0x1e) [0x7fd8acd5d27e] -> /usr/lib/dovecot/libdovecot.so.0(+0xec88b) [0x7fd8acd6688b] -> /usr/lib/dovecot/libdovecot.so.0(+0xec8c1) [0x7fd8acd668c1] -> /usr/lib/dovecot/libdovecot.so.0(+0x4ec56) [0x7fd8accc8c56] -> /usr/lib/dovecot/libdovecot.so.0(+0x4f9b3) [0x7fd8accc99b3] -> doveadm(dsync_mailbox_tree_find_delete+0x1b2) [0x5567056b7aa2] -> doveadm(+0x4a265) [0x5567056ad265] -> doveadm(dsync_brain_recv_mailbox_tree_deletes+0xc8) [0x5567056aded8] -> doveadm(dsync_brain_run+0x1ae) [0x5567056aaa9e] -> doveadm(+0x48104) [0x5567056ab104] -> doveadm(+0x58d1f) [0x5567056bbd1f] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x69) [0x7fd8acd7cb79] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0x131) [0x7fd8acd7e0c1] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0x4c) [0x7fd8acd7cc1c] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x40) [0x7fd8acd7cd90] -> doveadm(+0x2e9f4) [0x5567056919f4] -> doveadm(+0x30b16) [0x556705693b16] -> doveadm(+0x3170a) [0x55670569470a] -> doveadm(doveadm_mail_try_run+0x21e) [0x556705694ffe] -> doveadm(main+0x552) [0x5567056851b2] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xeb) [0x7fd8ac90109b] -> doveadm(_start+0x2a) [0x5567056852fa] This is output of manual run doveadm sync process between dovecot 2.3.10.1 (side with error message) and dovecot 2.3.7.2 (remote side). I have `require ["fileinto"];` on both sides in .dovecot.sieve files. Regards, Alukardd.

1 0

Avoiding logging password when dict lookup fails
by Geo Mander 26 May '20

26 May '20

I've made a unix-socket auth setup, by looking at the examples here: https://doc.dovecot.org/configuration_manual/authentication/dict/#complete-… I need to ship the plain password to the socket as well, so i have simply added %w to the lookup key, like so: key = passdb/U=%u P=%w My problem is, that if the socket connection is down for whatever reason, dovecot will write the entire message above - including the plaintext password - into the logfile. --- May 25 11:17:48 imap-1 dovecot: auth-worker(32690): Error: dict-client: Lookup 'shared/passdb/U=john.doe(a)example.com P=john123 failed: net_connect_unix(/var/run/dovecot/doveauthdsocket) failed: Connection refused (reply took 0.000 secs (0.000 in dict wait, 0.000 in other ioloops, 0.000 in locks)) May 25 11:17:48 imap-1 dovecot: auth-worker(32690): Error: dict( john.doe(a)example.com,8.8.4.4,<Px/Ic3WmsNhb7s1N>): Failed to lookup key shared/passdb/U=john.doe(a)example.com P=john123 -- Can i disable dict client logging? Or can i structure my dict request in a different way to avoid this logging, while still getting the complete user-name and plaintext password shipped over the socket? $ dovecot --version 2.2.36 (1f10bfa63)

1 0

child killed by signal 6
by Peter Nabbefeld 26 May '20

26 May '20

Hello, from time to time I keep getting problems with some emails causing signal 6. I've already reported those, but it seems not to be easy to find the cause. From the logs, it seems to occur in sieve implementation. I've checked the email envelopes tody by accident, probably this part of my telnet session might help: a11 fetch 1 all * 1 FETCH (RFC822.SIZE 16750 INTERNALDATE "22-May-2020 05:02:34 +0000" ENVELOPE ("Fri, 22 May 2020 03:46:54 +0000" "RE: Http2 tomact server taking time in responding when 1st StreamId is a large integer value like 2147483641" (("Prateek Kohli" NIL "prateek.kohli" "ericsson.com.INVALID")) (("Prateek Kohli" NIL "prateek.kohli" "ericsson.com.INVALID")) (("Tomcat Users List" NIL "users" "tomcat.apache.org")) (("Tomcat Users List" NIL "users" "tomcat.apache.org")) NIL NIL "<d778507f-306b-5395-b583-fc1f2651431d(a)apache.org>" " <DB7PR07MB40285E61F0731810A615E3FB92B40(a)DB7PR07MB4028.eurprd07.prod.outlook.com>") FLAGS (\Seen)) a11 OK FETCH completed a12 fetch 2 all * 2 FETCH (RFC822.SIZE 21146 INTERNALDATE "22-May-2020 06:39:54 +0000" ENVELOPE ("Fri, 22 May 2020 06:39:35 +0000" "RE: RST on TCP level sent by Tomcat" (("Arshiya Shariff" NIL "arshiya.shariff" "ericsson.com.INVALID")) (("Arshiya Shariff" NIL "arshiya.shariff" "ericsson.com.INVALID")) (("Tomcat Users List" NIL "users" "tomcat.apache.org")) (("Tomcat Users List" NIL "users" "tomcat.apache.org")) (("markt(a)apache.org" NIL "markt" "apache.org")("M Venkata Pratap M" NIL "m.m.venkata.pratap" "ericsson.com")) NIL " <AM7PR07MB6561761FA78F23F5AAF398399FB70(a)AM7PR07MB6561.eurprd07.prod.outlook.com>" " <AM7PR07MB65615CD03F422AC8D8384FC09FB40(a)AM7PR07MB6561.eurprd07.prod.outlook.com>") FLAGS ()) a12 OK FETCH completed The first message causes signal 6, the second does not. Probably the problem is killed by the two consecutive "NIL"s? I'm not an experienced administrator, only managing my private computer, so I don't know the meaning of every envelope field. But might these two "NIL"s cause the abort? BTW, to download all messages from my IMAP account to my private dovecot instance I had to delete the first message, since I couldn't download any other messages from the IMAP folder otherwise. Kind regards Peter

3 4

Sieve test string and case sensitivity
by Kim Minh Kaplan 25 May '20

25 May '20

Hello, I have found that Pigeonhole comes with an extensive testsuite against the Sieve RFCs. As I am working on a personal Sieve project I decided to run my tool on this testsuite and it stumbled on "Basic assignment: string test failed"[1]. Pigeonhole defaults to comparator "i;octet"[2] for the string test. But Sieve says that the default comparator should be "i;ascii-casemap"[3]. Did I miss some other part of the standard? Can you point me in the right direction? Thank you, Kim Minh. [1]: https://github.com/dovecot/pigeonhole/blob/master/tests/extensions/variable… [2]: https://github.com/dovecot/pigeonhole/blob/master/src/lib-sieve/plugins/var… [3]: https://tools.ietf.org/html/rfc5228#section-2.7.3

2 1

Sieve addheader directive works only partially
by Peter Folta 25 May '20

25 May '20

Hi all, I want to add a custom header to incoming emails from a particular sender. This is what my user Sieve script looks like: require “editheader”; if address :is "From” “special-sender(a)example.xn--com-9o0a { addheader “X-My-Custom-Header” “Header Value"; } I have enabled the editheader extension in my Dovecot configuration: plugin { … sieve_extensions = +editheader } This doesn’t seem to work and no header is added to the email. However, if I also move the email to a different folder in the same if-block, the header gets added just fine: require “editheader”; require “fileinto”; if address :is "From” “special-sender(a)example.xn--com-9o0a { addheader “X-My-Custom-Header” “Header Value”; fileinto “MyFolder”; } Am I missing something? Thanks Peter

4 6

missing man page for “doveadm dsync-server”?
by Felipe Gasper 25 May '20

25 May '20

Hello, Is there a man page for this command? I don’t see one in the repository. Given its utility in, e.g., syncing mailboxes via SSH, it seems like documentation for this command would be useful? Thank you! -Felipe Gasper

3 3

doveadm backup : Error: Failed to access mailbox
by Laura Smith 25 May '20

25 May '20

Hi All, So close and yet so far. ;-( Have been migrating users from an old Dovecot server to a new one. All of the users have doveadm backup'd perfectly, except for one ! What does the below mean ? $ sudo doveadm -v -o imapc_user=jd(a)example.org.tld -o imapc_password=secretSquirrel -o imapc_host=old-server.example.com backup -1 -R -u jd(a)example.org.tld imapc: dsync(jd(a)example.org.tld): Info: imapc(old-server.example.com:993): Connected to 10.10.10.10:993 (local 10.10.10.11:35858) dsync(jd(a)example.org.tld): Error: Failed to access mailbox Sent Messages (jasmin@example: Mailbox doesn't exist: Sent Messages (jasmin@example (0.001 + 0.000 secs). dsync(jd(a)example.org.tld): Error: Failed to access mailbox Sent Messages (jasmin(a)example.org: Mailbox doesn't exist: Sent Messages (jasmin(a)example.org (0.001 + 0.000 secs). dsync(jd(a)example.org.tld): Error: Failed to access mailbox Drafts (jasmin@example: Mailbox doesn't exist: Drafts (jasmin@example (0.001 + 0.000 secs). dsync(jd(a)example.org.tld): Error: Failed to access mailbox Drafts (jasmin(a)example.org: Mailbox doesn't exist: Drafts (jasmin(a)example.org (0.001 + 0.000 secs). dsync(jd(a)example.org.tld): Error: Failed to access mailbox Deleted Messages (jasmin@example: Mailbox doesn't exist: Deleted Messages (jasmin@example (0.001 + 0.000 secs). dsync(jd(a)example.org.tld): Error: Failed to access mailbox Deleted Messages (jasmin(a)example.org: Mailbox doesn't exist: Deleted Messages (jasmin(a)example.org (0.001 + 0.000 secs).

1 1

A small mistake in a Dovecot error message.
by Bill Shirley 24 May '20

24 May '20

I'm setting up a new mail server and got this message: May 21 11:55:09 vader dovecot[4090]: imap-login: Error: Diffie-Hellman key exchange requested, but no DH parameters provided. Set ssh_dh=</path/to/dh.pem The Dovecot parameter is actually: ss*l*_dh<=/path/to/dh.pem not ssh... Fedora release 32 (Thirty Two) dovecot-2.3.9.3-1.fc32.x86_64 Many thanks for such useful software. Bill

2 1

Dovecot passdb and postfix login
by Laura Smith 24 May '20

24 May '20

Hi, Long story short I've got a fully functional Dovecot IMAP instance and I am now looking to upgrade some perimiter authenticated SMTP relays to authenticate against the Dovecot instance. Trouble is that I am seeing errors such as "auth: Warning: sql: Ignoring changed user_query in /etc/dovecot/local_sql_users.conf, because userdb sql not used." in my Postfix server logs and not able to successfully authenticate via AUTH LOGIN on the Postfi instance. Perhaps I'm missing something obvious from my config ? Here is the doveconf -n from the Postfix server in question: # 2.3.10.1 (a3d0e1171): /etc/dovecot/dovecot.conf # OS: Linux 4.19.0-9-amd64 x86_64 Debian 10.4 # Hostname: foobar.example.com auth_mechanisms = plain login auth_verbose = yes auth_verbose_passwords = sha1:7 disable_plaintext_auth = no mail_location = mbox:~/mail:INBOX=/var/mail/%u namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /etc/dovecot/local_sql_users.conf driver = sql } service auth { inet_listener { address = 127.0.0.1 port = 7425 } inet_listener { address = ::1 port = 7425 } unix_listener /var/spool/postfix-authrelay/private/dovecot-auth { group = postfix mode = 0660 user = postfix } } ssl = no The local_sql_users.conf is the same one that's used on the functioning IMAP servers, just copied accross to the authenticated relay server: $ sudo cat /etc/dovecot/local_sql_users.conf driver = pgsql connect = host=foo dbname=bar user=secret password=squirrel default_pass_scheme = ARGON2ID password_query = select dovecot_username as user,password from get_user('%u') user_query = select 'vmail' as uid, 'vmail' as gid iterate_query = select dovecot_username as user from get_users()

2 1

Re: fail2ban setup centos 7 not picking auth fail?
by Voytek Eymont 23 May '20

23 May '20

On Fri, May 22, 2020 2:05 pm, Adi Pircalabu wrote: > On 22-05-2020 10:38, Voytek Eymont wrote: > > Hardly a Dovecot issue. Can you please post the output of this command? > /usr/bin/fail2ban-regex /var/log/dovecot.log > /etc/fail2ban/filter.d/dovecot.conf Adi, thanks, what I get is: # /usr/bin/fail2ban-regex /var/log/dovecot.log /etc/fail2ban/filter.d/dovecot.conf Running tests ============= Use failregex filter file : dovecot, basedir: /etc/fail2ban Use datepattern : Default Detectors Use log file : /var/log/dovecot.log Use encoding : UTF-8 Results ======= Failregex: 5149 total |- #) [# of hits] regular expression | 2) [5149] ^(?:\[\])?\s*(?:<[^.]+\.[^.]+>\s+)?(?:\S+\s+)?(?:kernel:\s?\[ *\d+\.\d+\]:?\s+)?(?:@vserver_\S+\s+)?(?:(?:(?:\[\d+\])?:\s+[\[$]?\S*(?:\(\S+$)?[\]\)]?:?|[\[$]?\S*(?:\(\S+$)?[\]\)]?:?(?:\[\d+\])?:?)\s+)?(?:\[ID \d+ \S+\]\s+)?(?:pop3|imap)-login: (?:Info: )?(?:Aborted login|Disconnected)(?::(?: [^ $]+)+)? \((?:auth failed, \d+ attempts( in \d+ secs)?|tried to use (disabled|disallowed) \S+ auth)$:( user=<[^>]+>,)?( method=\S+,)? rip=<HOST>(?:, lip=\S+)?(?:, TLS(?: handshaking(?:: SSL_accept failed: error:[\dA-F]+:SSL routines:[TLS\d]+_GET_CLIENT_HELLO:unknown protocol)?)?(: Disconnected)?)?(, session=<\S+>)?\s*$ `- Ignoreregex: 0 total Date template hits: |- [# of hits] date format | [338975] {^LN-BEG}(?:DAY )?MON Day %k:Minute:Second(?:\.Microseconds)?(?: ExYear)? `- Lines: 338975 lines, 0 ignored, 5149 matched, 333826 missed [processed in 87.44 sec] Missed line(s): too many to print. Use --print-all-missed to print all 333826 lines

7 8

Sieve regexp matches wrong
by kverizhnikov 23 May '20

23 May '20

Hello! Recently I've faced with strange issue. So, I want to filter some mails which do not contain cyrillic symbols. I would not like receive email on foreign language except russian and I'm using rule below, but it does not work when text of mail has unicode symbol u2019 or ’ - right single quotation mark. |require ["body","regex"];| |# rule:[Regexp test]| |if not body :text :regex ".*[аАбБвВгГдДеЕёЁжЖзЗиИйЙкКлЛмМнНоОпПрРсСтТуУфФхХцЦчЧшШщЩъЪыЫьЬэЭюЮяЯ].*"| |{| | discard;| | stop;| |}| I checked this behavior on different versions of dovecot and pigeonhole, and it was the same in all cases. If I change u2019 to, for instance to apostrophe, it begins work as I expect - the mail discarded. Below some information which was got from sieve-test utility. The text consist of only one phrase *Test’test*. Check string *Test’test *- without u2019, using apostrophe root@a4e4b17d33a1:/srv/mail# tail -2 1586937347.M574837P24389.vps.kveri.ru\,S\=1904\,W\=1944\:2\,S Test'test sieve-test output * Script metadata (block: 0): class = file class.version = 0 location = /srv/mail/roundcube.sieve * Required extensions (block: 1): 0: body (id: 18) 1: regex (id: 13) * Main program (block: 2): Address Line Code 00000000: DEBUG BLOCK: 3 00000001: EXTENSIONS [2]: 00000002: body 00000004: regex 00000006: 3: BODY 00000007: BODY-TRANSFORM: TEXT 0000000b: match type: regex 0000000d: key list: STR[138] ".*[аАбБвВгГдДеЕёЁжЖзЗиИйЙкКлЛмМнНоОпПрРс... 0000009b: 3: JMPTRUE 6 [000000a2] 000000a0: 5: DISCARD 000000a1: 6: STOP 000000a2: 6: [End of code] Performed actions: * discard Implicit keep: (none) In this case the rule works as I expect The second test *Test’test* with ’ instead of apostrophe root@a4e4b17d33a1:/srv/mail# tail -2 1586937347.M574837P24389.vps.kveri.ru\,S\=1904\,W\=1944\:2\,S Test’test sieve-test output * Script metadata (block: 0): class = file class.version = 0 location = /srv/mail/roundcube.sieve * Required extensions (block: 1): 0: body (id: 18) 1: regex (id: 13) * Main program (block: 2): Address Line Code 00000000: DEBUG BLOCK: 3 00000001: EXTENSIONS [2]: 00000002: body 00000004: regex 00000006: 3: BODY 00000007: BODY-TRANSFORM: TEXT 0000000b: match type: regex 0000000d: key list: STR[138] ".*[аАбБвВгГдДеЕёЁжЖзЗиИйЙкКлЛмМнНоОпПрРс... 0000009b: 3: JMPTRUE 6 [000000a2] 000000a0: 5: DISCARD 000000a1: 6: STOP 000000a2: 6: [End of code] Performed actions: (none) Implicit keep: * store message in folder: INBOX In this case email "was located" into INBOX, but I expected it should be discarded. As I said this behavior does not depend on dovecot and pigeonhole version - I've tried dovecot 2.3.7, 2.2.30.x, 2.3.9.3 and 2.3.10, pigeonhole 0.5.7.2, 0.5.9 and 0.5.10, fresh install and working in docker container. The dovecot-sysreport was taken from the last one. What am I doing wrong? Is it pigeonhole bug or smth like that?

2 1

Convert standalone mbox to standalone Maildir with Dsync - hierarchy separator error
by Sam Kuper 23 May '20

23 May '20

Dear Dovecot users/devs, I have the following mbox file: /tmp/dsync_test/mbox/2002-September I would like to convert it to a Maildir: /tmp/dsync_test/maildir (Currently, the latter is just an empty directory.) I am attempting this on an old PC running Debian 9 ("Stretch"). I installed the dovecot-core package in order to make the `dsync` tool available on that PC. I have not otherwise done anything with Dovecot on that PC; for instance, I have not created or edited any Dovecot config files. `man dsync` gives the Dovecot version as 2.2. Inspired by the man page and the Dovecot wiki, here was my first attempt to perform the conversion. (I have added newlines between each line of the output, for readability.) $ dsync -Dv -o 'mail_location=maildir:/tmp/dsync_test/maildir' \ backup \ mbox:/tmp/dsync_test/mbox/:INBOX=/tmp/dsync_test/mbox/2002-September Debug: Loading modules from directory: /usr/lib/dovecot/modules/doveadm Debug: Skipping module doveadm_acl_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_acl_plugin.so: undefined symbol: acl_lookup_dict_iterate_visible_next (this is usually intentional, so just ignore this message) Debug: Skipping module doveadm_expire_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_expire_plugin.so: undefined symbol: expire_set_deinit (this is usually intentional, so just ignore this message) Debug: Skipping module doveadm_quota_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_quota_plugin.so: undefined symbol: quota_user_module (this is usually intentional, so just ignore this message) Debug: Skipping module doveadm_fts_lucene_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib20_doveadm_fts_lucene_plugin.so: undefined symbol: lucene_index_iter_deinit (this is usually intentional, so just ignore this message) Debug: Skipping module doveadm_fts_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib20_doveadm_fts_plugin.so: undefined symbol: fts_user_get_language_list (this is usually intentional, so just ignore this message) Debug: Skipping module doveadm_mail_crypt_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/libdoveadm_mail_crypt_plugin.so: undefined symbol: mail_crypt_box_get_pvt_digests (this is usually intentional, so just ignore this message) doveadm(sampablokuper): Debug: Effective uid=1000, gid=1000, home=/home/sampablokuper doveadm(sampablokuper): Debug: Namespace inbox: type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:/tmp/dsync_test/maildir doveadm(sampablokuper): Debug: maildir++: root=/tmp/dsync_test/maildir, index=, indexpvt=, control=, inbox=/tmp/dsync_test/maildir, alt= doveadm(sampablokuper): Debug: Namespace : Using permissions from /tmp/dsync_test/maildir: mode=0755 gid=default dsync(sampablokuper): Debug: Effective uid=1000, gid=1000, home=/home/sampablokuper dsync(sampablokuper): Debug: Namespace inbox: type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes, subscriptions=yes location=mbox:/tmp/dsync_test/mbox/:INBOX=/tmp/dsync_test/mbox/2002-September dsync(sampablokuper): Debug: fs: root=/tmp/dsync_test/mbox, index=, indexpvt=, control=, inbox=/tmp/dsync_test/mbox/2002-September, alt= dsync(sampablokuper): Error: Mail locations must use the same virtual mailbox hierarchy separator (specify separator for the default namespace) As you can see, it ends with "Error: Mail locations must use the same virtual mailbox hierarchy separator (specify separator for the default namespace)". So, I tried specifying a hierarchy separator, but this failed too: $ dsync -Dv \ -o 'separator=.' \ -o 'mail_location=maildir:/tmp/dsync_test/maildir' \ backup \ mbox:/tmp/dsync_test/mbox/:INBOX=/tmp/dsync_test/mbox/2002-September Debug: Loading modules from directory: /usr/lib/dovecot/modules/doveadm Debug: Skipping module doveadm_acl_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_acl_plugin.so: undefined symbol: acl_lookup_dict_iterate_visible_next (this is usually intentional, so just ignore this message) Debug: Skipping module doveadm_expire_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_expire_plugin.so: undefined symbol: expire_set_deinit (this is usually intentional, so just ignore this message) Debug: Skipping module doveadm_quota_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_quota_plugin.so: undefined symbol: quota_user_module (this is usually intentional, so just ignore this message) Debug: Skipping module doveadm_fts_lucene_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib20_doveadm_fts_lucene_plugin.so: undefined symbol: lucene_index_iter_deinit (this is usually intentional, so just ignore this message) Debug: Skipping module doveadm_fts_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib20_doveadm_fts_plugin.so: undefined symbol: fts_user_get_language_list (this is usually intentional, so just ignore this message) Debug: Skipping module doveadm_mail_crypt_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/libdoveadm_mail_crypt_plugin.so: undefined symbol: mail_crypt_box_get_pvt_digests (this is usually intentional, so just ignore this message) doveadm(sampablokuper): Debug: Effective uid=1000, gid=1000, home=/home/sampablokuper doveadm(sampablokuper): Debug: Namespace inbox: type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:/tmp/dsync_test/maildir doveadm(sampablokuper): Debug: maildir++: root=/tmp/dsync_test/maildir, index=, indexpvt=, control=, inbox=/tmp/dsync_test/maildir, alt= doveadm(sampablokuper): Debug: Namespace : Using permissions from /tmp/dsync_test/maildir: mode=0755 gid=default dsync(sampablokuper): Debug: Effective uid=1000, gid=1000, home=/home/sampablokuper dsync(sampablokuper): Debug: Namespace inbox: type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes, subscriptions=yes location=mbox:/tmp/dsync_test/mbox/:INBOX=/tmp/dsync_test/mbox/2002-September dsync(sampablokuper): Debug: fs: root=/tmp/dsync_test/mbox, index=, indexpvt=, control=, inbox=/tmp/dsync_test/mbox/2002-September, alt= dsync(sampablokuper): Error: Mail locations must use the same virtual mailbox hierarchy separator (specify separator for the default namespace) I got the same error again when I tried the command above with "/" instead of "." as the hierarchy separator. Forgive me for my ignorance, but how should I correct the invocation I used above? In other words: using dsync, how can I extract/copy the emails from the mbox to the new Maildir? Thank you! -- A: When it messes up the order in which people normally read text. Q: When is top-posting a bad thing? () ASCII ribbon campaign. Please avoid HTML emails & proprietary /\ file formats. (Why? See e.g. https://v.gd/jrmGbS ). Thank you.

2 3

What causes mails to get striked-over only, and not deleted?
by Sebastian Nielsen 23 May '20

23 May '20

I have tried with this sieve config: imapsieve_mailbox1_name = Sent imapsieve_mailbox1_causes = COPY APPEND imapsieve_mailbox1_after = file:/etc/dovecot/sieve/sent.sieve and this sieve file (sent.sieve): discard; This should clearly cause the mail to be deleted right? But whats happen, is that the mail is not deleted, its just marked for deletion (gets a strike-through in Microsoft Outlook). (have tried with _before too, but it wont help). What can I do to ensure the mail actually gets deleted (completely, not moved to trash) and not just flagged for deletion?

3 3

dsync “destination” argument
by Felipe Gasper 22 May '20

22 May '20

Hello, Some code that I didn’t write but am maintaining passes a local script’s path as dsync’s “destination” argument, like so: dsync -D -u john -v backup -R -1 "/code/dsync_client.pl" 127.0.0.1 john(a)mydomain.org dsync_client.pl establishes a TCP connection with a remote dsync process then acts as a proxy between the two dsync processes. “127.0.0.1” and “john(a)mydomain.xn--org-9o0a are given as arguments to dsync_client.pl. I don’t see this usage described in dsync’s man page. I just want to be sure: is this a supported use of dsync? Thank you! cheers, -Felipe Gasper

2 3

fail2ban setup centos 7 not picking auth fail?
by Voytek Eymont 22 May '20

22 May '20

I'm trying to set up fail2ban with dovecot, I have it working on 'old' server Centos 6, but, not getting anywhere with 'new' server on Centos 7 using standard filters I've copied same 'filter' to new server, still get nothing any idea how to figure this out ? on old server, it logs to syslog/messages CentOS release 6.10 (Final) dovecot 2.3.10.1 (a3d0e1171) old # fail2ban-client status dovecot Status for the jail: dovecot |- Filter | |- Currently failed: 2 | |- Total failed: 168 | `- File list: /var/log/dovecot.log `- Actions |- Currently banned: 0 |- Total banned: 32 `- Banned IP list: on new server CentOS Linux release 7.8.2003 dovecot 2.3.10.1 (a3d0e1171) nothing shows up in fail2ban log (ssh, postfix does, only no dovecot) I've copied the actual /etc/fail2ban/filter.d/dovecot.conf from old server, still nothing not sure where/how to look is there a standard/approved doveot filter..? cat jail.local ... [dovecot] enabled = true filter = dovecot logpath = /var/log/dovecot.log maxretry = 3 ignoreip = 127.0.0.1 127.0.0.0/8 ... # fail2ban-client status dovecot Status for the jail: dovecot |- Filter | |- Currently failed: 0 | |- Total failed: 0 | `- Journal matches: _SYSTEMD_UNIT=dovecot.service `- Actions |- Currently banned: 0 |- Total banned: 0 `- Banned IP list: # grep 'auth failed' /var/log/dovecot.log | wc 7669 149916 1558909 # cat dovecot.conf # Fail2Ban filter Dovecot authentication and pop3/imap server # [INCLUDES] before = common.conf [Definition] _daemon = (auth|dovecot(-auth)?|auth-worker) failregex = ^%(__prefix_line)s(?:%(__pam_auth)s(?:$dovecot:auth$)?:)?\s+authentication failure; logname=\S* uid=\S* euid=\S* tty=dovecot ruser=\S* rhost=<HOST>(?:\s+user=\S*)?\s*$ ^%(__prefix_line)s(?:pop3|imap)-login: (?:Info: )?(?:Aborted login|Disconnected)(?::(?: [^ $]+)+)? \((?:auth failed, \d+ attempts( in \d+ secs)?|tried to use (disabled|disallowed) \S+ auth)$:( user=<[^>]+>,)?( method=\S+,)? rip=<HOST>(?:, lip=\S+)?(?:, TLS(?: handshaking(?:: SSL_accept failed: error:[\dA-F]+:SSL routines:[TLS\d]+_GET_CLIENT_HELLO:unknown protocol)?)?(: Disconnected)?)?(, session=<\S+>)?\s*$ ^%(__prefix_line)s(?:Info|dovecot: auth$default$|auth-worker$\d+$): pam$\S+,<HOST>$: pam_authenticate failed: (User not known to the underlying authentication module: \d+ Time$s$|Authentication failure $password mismatch\?$)\s*$ ^%(__prefix_line)s(?:auth|auth-worker$\d+$): (?:pam|passwd-file)$\S+,<HOST>$: unknown user\s*$ ^%(__prefix_line)s(?:auth|auth-worker$\d+$): Info: ldap$\S*,<HOST>,\S*$: invalid credentials\s*$ ignoreregex = [Init] journalmatch = _SYSTEMD_UNIT=dovecot.service # DEV Notes: # * the first regex is essentially a copy of pam-generic.conf # * Probably doesn't do dovecot sql/ldap backends properly (resolved in edit 21/03/2016) # * Removed the 'no auth attempts' log lines from the matches because produces # lots of false positives on misconfigured MTAs making regexp unusable # # Author: Martin Waschbuesch # Daniel Black (rewrote with begin and end anchors) # Martin O'Neal (added LDAP authentication failure regex) # Sergey G. Brester aka sebres (reviewed, optimized, IPv6-compatibility)

2 1

pass a block of parameters to doveadm
by dovecot-user 21 May '20

21 May '20

Hello everyone. Please tell me how to override the configuration file options when using the doveadm utility with the -o switch in case I need to pass a block of parameters, for example, like this: passdb { args = scheme=PLAIN username_format=%u /path/to/file driver = passwd-file } Thanks.

2 1

v2.3.10.1 released
by Aki Tuomi 21 May '20

21 May '20

We are pleased to release v2.3.10.1 Please find it from locations below: https://dovecot.org/releases/2.3/dovecot-2.3.10.1.tar.gz https://dovecot.org/releases/2.3/dovecot-2.3.10.1.tar.gz.sig Binary packages in https://repo.dovecot.org/ Docker images in https://hub.docker.com/r/dovecot/dovecot Aki Tuomi Open-Xchange oy --- - CVE-2020-10957: lmtp/submission: A client can crash the server by sending a NOOP command with an invalid string parameter. This occurs particularly for a parameter that doesn't start with a double quote. This applies to all SMTP services, including submission-login, which makes it possible to crash the submission service without authentication. - CVE-2020-10958: lmtp/submission: Sending many invalid or unknown commands can cause the server to access freed memory, which can lead to a server crash. This happens when the server closes the connection with a "421 Too many invalid commands" error. The bad command limit depends on the service (lmtp or submission) and varies between 10 to 20 bad commands. - CVE-2020-10967: lmtp/submission: Issuing the RCPT command with an address that has the empty quoted string as local-part causes the lmtp service to crash.

3 2

FTS-lucene errors : language not available for stemming
by David Gessel 21 May '20

21 May '20

I'm getting some log errors with clucene that I am having no luck tracking down on the interwebs. Errors: May 19 05:05:16 indexer-worker(gessel(a)blackrosetech.com)<62971><aPAEI3zLw17A/QAA0J78UA:EF25M3zLw1779QAA0J78UA>: Error: lucene index /mail/blackrosetech.com/gessel//lucene-indexes: IndexWriter::addDocument() failed (#4): language not available for stemming May 19 05:05:16 indexer-worker: Error: May 19 05:05:16 indexer-worker(gessel(a)blackrosetech.com)<62971><aPAEI3zLw17A/QAA0J78UA:EF25M3zLw1779QAA0J78UA>: Error: Mailbox Security: Mail search failed: Internal error occurred. Refer to server log for more information. [2020-05-19 05:05:16] May 19 05:05:16 indexer-worker(gessel(a)blackrosetech.com)<62971><aPAEI3zLw17A/QAA0J78UA:EF25M3zLw1779QAA0J78UA>: Error: Mailbox Security: Transaction commit failed: FTS transaction commit failed: transaction context (attempted to index 1 messages (UIDs 152736..152736)) Config: FreeBSD 11.3-RELEASE-p8 #0 r360490 dovecot-2.3.10_3 clucene-2.3.3.4_19 py37-pystemmer-2.0.0.1 py37-snowballstemmer-1.2.1 icu-67.1,1 plugin { #setting_name = value expire = Trash mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size fts_autoindex=yes #zlib_save_level = 6 # 1..9 #zlib_save = gz # or bz2 } plugin { fts = lucene # Lucene-specific settings, good ones are: fts_lucene = whitespace_chars=@. mime_parts } I am considering switch to xapian (solr and java... pls noe) as the port is quite tempting from an ease of integration perspective, but the easiest solution would be to resolve these odd indexing errors. Anyone have a clue? -David

6 11

dsync multiple mailboxes per connection?
by Felipe Gasper 21 May '20

21 May '20

Hello, Is it possible to batch syncs of multiple mailboxes in a single dsync session? We’re transferring users between servers and want to use dsync to transfer the mail; ideally we’d like to avoid creating a separate TCP connection per user. Thank you! cheers, -Felipe Gasper

3 2

how to automatically delete folders from Trash after x days
by chayes＠afo.net 20 May '20

20 May '20

This works great for keeping the Trash from overflowing ... doveadm expunge -A mailbox Trash before 30d ... but it doesn't delete folders that the user put in the trash. What is the recommended method for erasing folders from the trash?

2 1

question about director_mail_servers setting
by Joe Wong 20 May '20

20 May '20

Hello, I have a question about director_mail_servers setting for director, I am aware that I can define a list of dovecot backend hostname there but I am not sure if the hashing apply to the hostname or underlying IP address of each hostname given? What if the IP of a specify hostname is changed? Will director pickup the new IP automatically? Will the same user hashed into the original IP still be mapped back to the new IP in this case? - Joe

1 0

Problem with tika
by Arjen Heidinga 19 May '20

19 May '20

Hello all, For some time now we've bin using solr as a search engine (working great). I have added tika for searching inside documents, however it keeps crashing when indexing. When just indexing mails that arrive works good, but a reindex on all mail constantly crashes with below stacktrace. When I observe the packets with wireshark I see a HTTP-flow going to tika and suddenly, midway a document dovecot (or the server) sends a RST. Sometimes after thousands of documents, sometimes after a few. Usually after a few hundred. It appears there are less errors using http than https. Relevant config: OS: CentOS6, fully updated plugin { fts = solr batch_size = 1 fts_solr = url=https://username:password@solr-01.vevida.net:443/solr/dovecot/ #fts_tika = https://solr-01.vevida.net:443/tika/ batch_size = 1000 fts_autoindex=yes soft_commit=no } # dovecot --version 2.3.9.3 (9f41b88fa) # Configure options: --docdir=%{_docdir}/dovecot \ --disable-static \ --with-nss \ --with-shadow \ --with-pam \ --with-gssapi=plugin \ --with-ldap=plugin \ --with-sql=plugin \ --with-pgsql \ --with-sqlite \ --with-zlib \ --with-bzlib \ --with-lzma \ --with-libcap \ --with-ssl=openssl \ --with-ssldir=%{ssldir} \ --with-solr \ --with-docs # It is compiled agains the latest openssl # Tika and Solr: Both latest versions. #Stacktrace: doveadm(info(a)samenmetrenske.nl): Info: Sent: Caching mails seq=1..161 doveadm(info(a)samenmetrenske.nl): Panic: file http-client-request.c: line 1173 (http_client_request_send_more): assertion failed: (req->payload_input != NULL) doveadm(info(a)xxxxxxxxxxxxxxxxxxx.x): Error: Raw backtrace: /usr/lib64/dovecot/libdovecot.so.0(backtrace_append+0x2f) [0x7f95d805acbf] -> /usr/lib64/dovecot/libdovecot.so.0(backtrace_get+0x26) [0x7f95d805add6] -> /usr/lib64/dovecot/libdovecot.so.0(+0xe90ba) [0x7f95d80660ba] -> /usr/lib64/dovecot/libdovecot.so.0(+0xe9161) [0x7f95d8066161] -> /usr/lib64/dovecot/libdovecot.so.0(+0x41158) [0x7f95d7fbe158] -> /usr/lib64/dovecot/libdovecot.so.0(http_client_request_send_more+0x424) [0x7f95d8005094] -> /usr/lib64/dovecot/libdovecot.so.0(http_client_connection_output+0x11a) [0x7f95d800a24a] -> /usr/lib64/dovecot/libssl_iostream_openssl.so(+0x8f6a) [0x7f95d57a2f6a] -> /usr/lib64/dovecot/libdovecot.so.0(+0x114483) [0x7f95d8091483] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_call_io+0x61) [0x7f95d807e581] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0xdc) [0x7f95d808076c] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_handler_run+0x5c) [0x7f95d807e67c] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_run+0x38) [0x7f95d807e8c8] -> /usr/lib64/dovecot/libdovecot.so.0(+0x89105) [0x7f95d8006105] -> /usr/lib64/dovecot/libdovecot.so.0(http_client_request_send_payload+0x1f) [0x7f95d80063cf] -> /usr/lib64/dovecot/lib20_fts_plugin.so(+0xd31d) [0x7f95d6ad931d] -> /usr/lib64/dovecot/lib20_fts_plugin.so(fts_parser_more+0x1a) [0x7f95d6ad83ca] -> /usr/lib64/dovecot/lib20_fts_plugin.so(fts_build_mail+0x761) [0x7f95d6ad6401] -> /usr/lib64/dovecot/lib20_fts_plugin.so(+0x114ca) [0x7f95d6add4ca] -> /usr/lib64/dovecot/libdovecot-storage.so.0(mail_precache+0x2a) [0x7f95d835ab4a] -> doveadm(+0x31e75) [0x55e7c1052e75] -> doveadm(+0x321fb) [0x55e7c10531fb] -> doveadm(+0x2c321) [0x55e7c104d321] -> doveadm(+0x2c577) [0x55e7c104d577] -> doveadm(doveadm_cmd_ver2_to_mail_cmd_wrapper+0x1e8) [0x55e7c104ec38] -> doveadm(doveadm_cmd_run_ver2+0x52e) [0x55e7c105fafe] -> doveadm(doveadm_cmd_try_run_ver2+0x37) [0x55e7c105fb97] -> doveadm(main+0x21a) [0x55e7c1062aca] -> /lib64/libc.so.6(__libc_start_main+0x100) [0x7f95d7983d20] -> doveadm(+0x1c479) [0x55e7c103d479]

1 1

doveadm backup, question
by dovecot-user 19 May '20

19 May '20

Hello everyone. I am an inexperienced user of dovecot and I faced probably a simple problem, but I still do not understand how to solve it. The issue is related to using doveadm backup - I want to backup mailboxes; make this copy on the same machine (hereinafter, files with backup copies will be taken from this machine into the storage by a separate mechanism, this is not related to the issue). I am using dovecot 2.2.27 (c0f36b0) on Debian GNU/Linux 9 (stretch). The options related to storing mail and attachments are as follows: mail_location = mdbox:/var/mail/%d/%n mail_attachment_dir = /var/mail/%d/%n/attach Thus, the mail of user(a)domain.tld is stored in /var/mail/domain.tld/user/, and mail attachments inside this directory, for example: /var/mail/domain.tld/user/attach. When I start copying (as root while in test mode): #doveadm backup -u "user(a)domain.tld" sdbox:/backup/domain.tld/user, copying passes, but, as I understand it, the attachments are not copied (I am judging so far by the volume of the initial storage and the received one, it should not differ VERY much, but it differs by 10 times, it seems that it’s just the total amount of attachments). Tell me, plz, how to run doveadm backup correctly so that everything is copied so that you can subsequently deploy it from the backup? Thanks.

1 0

Multiple vulnerabilities in Dovecot
by Aki Tuomi 18 May '20

18 May '20

Dear subscribers, we are sending notifications for three vulnerabilities, - CVE-2020-10957 - CVE-2020-10958 - CVE-2020-10967 Please find them below --- Aki Tuomi Open-Xchange Oy ------------------ Open-Xchange Security Advisory 2020-05-18 Product: Dovecot Vendor: OX Software GmbH Internal reference: DOV-3784 Vulnerability type: NULL pointer dereference (CWE-476) Vulnerable version: 2.3.0 - 2.3.10 Vulnerable component: submission, lmtp Report confidence: Confirmed Solution status: Fixed by Vendor Fixed version: 2.3.10.1 Researcher credits: Philippe Antoine (Catena Cyber) Vendor notification: 2020-03-24 Solution date: 2020-04-02 Public disclosure: 2020-05-18 CVE reference: CVE-2020-10957 CVSS: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vulnerability Details: Sending malformed NOOP command causes crash in submission, submission-login or lmtp service. Risk: Remote attacker can keep submission-login service down, causing denial of service attack. For lmtp the risk is neglible, as lmtp is usually behind a trusted MTA. Steps to reproduce: Send ``NOOP EE"FY`` to submission port, or similarly malformed command. Solution: Upgrade to fixed version. ------------------ Open-Xchange Security Advisory 2020-05-18 Product: Dovecot IMAP server Vendor: OX Software GmbH Internal reference: DOV-3875 Vulnerability type: Improper handling of input data (CWE-20) Vulnerable version: 2.3.0 - 2.3.10 Vulnerable component: submission, lmtp Report confidence: Confirmed Solution status: Fixed by Vendor Fixed version: 2.3.10.1 Researcher credits: Philippe Antoine (Catena Cyber) Vendor notification: 2020-03-23 Solution date: 2020-04-02 Public disclosure: 2020-05-18 CVE reference: CVE-2020-10958 CVSS: 5.3 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vulnerability Details: Sending command followed by sufficient number of newlines triggers a use-after-free bug that might crash submission-login, submission or lmtp service. Risk: Remote attacker can keep submission-login service down, causing denial of service attack. For lmtp the risk is neglible, as lmtp is usually behind a trusted MTA. Steps to reproduce: This can be currently reproduced with ASAN or Valgrind. Reliable way to crash has not yet been discovered. Solution: Upgrade to fixed version. ------------------ Open-Xchange Security Advisory 2020-05-18 Product: Dovecot Vendor: OX Software GmbH Internal reference: DOV-1745 Vulnerability type: Improper input validation (CWE-20) Vulnerable version: 2.3.0 - 2.3.10 Vulnerable component: submission, lmtp Report confidence: Confirmed Solution status: Fixed by Vendor Fixed version: 2.3.10.1 Researcher credits: mailbox.org Vendor notification: 2020-03-20 Solution date: 2020-04-02 Public disclosure: 2020-05-18 CVE reference: CVE-2020-10967 CVSS: 5.3 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vulnerability Details: Sending mail with empty quoted localpart causes submission or lmtp component to crash. Risk: Malicious actor can cause denial of service to mail delivery by repeatedly sending mails with bad sender or recipient address. Steps to reproduce: Send mail with envelope sender or recipient as ``<""@example.org>``. Workaround: For submission there is no workaround, but triggering the bug requires valid credentials. For lmtp, one can implement sufficient filtering on MTA level to prevent mails with such addresses from ending up in LMTP delivery. Solution: Upgrade to fixed version. ------------------

1 0

dovecot sync not pushing automatically ?
by Laura Smith 17 May '20

17 May '20

Hi, I'm aware its an async process, but despite sending test messages and then waiting a few minutes, the stats are still unchanged : $ sudo doveadm replicator status Queued 'sync' requests 0 Queued 'high' requests 0 Queued 'low' requests 0 Queued 'failed' requests 0 Queued 'full resync' requests 0 Waiting 'failed' requests 0 Total number of known users 18 However if I manually run it using : sudo doveadm -D sync -u test(a)example.com -1 -d -N -l 30 -U It syncs fine and the mails are visible on the standby server. The master server is setup as per the docs : replication_dsync_parameters = -1 -d -N -l 30 -U plugin { mail_replica = tcps:foobar.example.com:11867 } service replicator { process_min_avail = 1 } service aggregator { fifo_listener replication-notify-fifo { user = foobar } unix_listener replication-notify { user = foobar } } service replicator { unix_listener replicator-doveadm { mode = 0600 user = foobar } } replication_max_conns = 10

1 0

iterate_query with static userdb ?
by Laura Smith 17 May '20

17 May '20

Hi, Going by the "static userdb" example on this page (https://wiki.dovecot.org/VirtualUsers#homedirs) tried to achieve a similar setup in conjunction with pgsql for passdb. However I get an error "auth: Warning: sql: Ignoring changed iterate_query in /etc/dovecot/local_sql_users.conf, because userdb sql not used. (If this is intentional, set userdb_warning_disable=yes)" Does this mean the following is not a valid config ? Or at least I will not be able to achieve iteration ? mail_location = maildir:/foobar/mail/%d/%n/Maildir passdb { driver = sql args = /etc/dovecot/local_sql_users.conf } userdb { driver = static args = uid=foo gid=bar home=/foobar/mail/%d/%n }

3 4

"/etc/dovecot/dovecot.conf: passdb is missing driver"
by Laura Smith 17 May '20

17 May '20

Hi, I'm trying to get dovecot working with postgres, I'm on Debian 10 and have installed dovecot-pgsql from the Dovecot repo (https://repo.dovecot.org/ce-2.3-latest/debian/....) I have the following in my local.conf : passdb sql { args = /etc/dovecot/local_sql_users.conf } And the following in the referenced file: driver = pgsql connect = host=localhost dbname=foobar user=bar password=foo default_pass_scheme = ARGON2ID password_query = select dovecot_username as user,password from get_user('%u') iterate_query = select dovecot_username as user from get_users() So surely it should work ? doveconf -n just to complete the picture .... # 2.3.10 (0da0eff44): /etc/dovecot/dovecot.conf # Pigeonhole version 0.5.10 (bf8ef1c2) # OS: Linux 4.19.0-9-amd64 x86_64 Debian 10.4 xfs # Hostname: foobar.example.com auth_verbose = yes auth_verbose_passwords = sha1:7 doveadm_password = # hidden, use -P to show it mail_location = maildir:/foobar/mail/%d/%n/Maildir mail_plugins = " notify replication" managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } passdb { args = /etc/dovecot/local_sql_users.conf name = sql } plugin { mail_replica = tcps:standby.example.com:11867 sieve = file:~/sieve;active=~/.dovecot.sieve } protocols = imap lmtp replication_dsync_parameters = -1 -d -N -l 30 -U service aggregator { fifo_listener replication-notify-fifo { user = foobar } unix_listener replication-notify { user = foobar } } service auth { unix_listener /var/spool/postfix/private/dovecot-auth { group = postfix mode = 0660 user = postfix } vsz_limit = 2 G } service doveadm { inet_listener { port = 11867 ssl = yes } } service imap-login { process_min_avail = 5 service_count = 1 } service lmtp { process_min_avail = 5 unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0660 user = postfix } user = foobar } service managesieve-login { inet_listener sieve { port = 4190 } inet_listener sieves { address = port = 5190 ssl = yes } } service replicator { process_min_avail = 1 unix_listener replicator-doveadm { mode = 0600 user = foobar } } ssl = required ssl_ca = </etc/foobar/ssl/example.com.chain ssl_cert = </etc/foobar/ssl/example.com.pem ssl_client_ca_dir = /etc/ssl/certs ssl_dh = # hidden, use -P to show it ssl_key = # hidden, use -P to show it ssl_min_protocol = TLSv1.2 ssl_prefer_server_ciphers = yes userdb { driver = passwd } userdb { args = uid=foobar gid=foobar home=/foobar/mail/%d/%n driver = static } protocol lmtp { mail_plugins = sieve postmaster_address = foobar(a)example.com } protocol lda { deliver_log_format = msgid=%m: %$ mail_plugins = sieve postmaster_address = postmaster quota_full_tempfail = yes rejection_reason = Your message to <%t> was automatically rejected:%n%r } protocol imap { mail_max_userip_connections = 20 }

2 1

Fallback driver after autodection
by Bjoern Koenig 16 May '20

16 May '20

Dear developers and dovecot users, I am running a dovecot with virtual users that have a mailbox using the Maildir format. mail_location = maildir:/usr/local/virtual/%d/%n New mailboxes are created on-the-fly if a new user logs in. I had the wish that the mailboxes of new users are created using the sdbox format and old mailboxes remain in Maildir format. In case the Maildir and sdbox mailboxes already exist, it is easy to use the "auto" driver which detects the correct format. But it is not possible to create mailboxes with the "auto" driver because there is no way to tell dovecot the preferred mailbox format. I wrote some lines of code which add the possibility to specify a fallback driver that will be used if a mailbox is created with the "auto" driver. mail_location = auto:/usr/local/virtual/%d/%n:FALLBACK=sdbox In case you like the idea you might want to develop it further. I am aware of the fact that there are some caveats if you mix it with other settings like LAYOUT. It won't work in any case. Best regards Bjoern --------------------------------------------------------------------------- diff -ruN src.bak/lib-storage/mail-storage.c src/lib-storage/mail-storage.c --- src/lib-storage/mail-storage.c.bak 2020-03-05 15:35:53.000000000 +0100 +++ src/lib-storage/mail-storage.c 2020-05-15 22:35:40.975992000 +0200 @@ -144,6 +144,10 @@ return classes[i]; } } + + if (set->fallback_driver != NULL) + return mail_storage_find_class(set->fallback_driver); + return NULL; } @@ -216,8 +220,10 @@ } storage_class = mail_storage_autodetect(ns, list_set); - if (storage_class != NULL) + if (storage_class != NULL) { + storage_class->v.get_list_settings(ns, list_set); return storage_class; + } (void)mail_user_get_home(ns->user, &home); if (home == NULL || *home == '\0') home = "(not set)"; diff -ruN src.bak/lib-storage/mailbox-list.c src/lib-storage/mailbox-list.c --- src/lib-storage/mailbox-list.c.bak 2020-03-05 15:35:53.000000000 +0100 +++ src/lib-storage/mailbox-list.c 2020-05-15 22:34:44.329802000 +0200 @@ -173,6 +173,8 @@ list->set.inbox_path = p_strdup(list->pool, set->inbox_path); list->set.subscription_fname = p_strdup(list->pool, set->subscription_fname); + list->set.fallback_driver = + p_strdup(list->pool, set->fallback_driver); list->set.list_index_fname = p_strdup(list->pool, set->list_index_fname); list->set.list_index_dir = @@ -360,6 +362,8 @@ else if (strcmp(key, "FULLDIRNAME") == 0) { set_r->index_control_use_maildir_name = TRUE; dest = &set_r->maildir_name; + } else if (strcmp(key, "FALLBACK") == 0) { + dest = &set_r->fallback_driver; } else if (strcmp(key, "BROKENCHAR") == 0) { if (strlen(value) != 1) { *error_r = "BROKENCHAR value must be a single character"; diff -ruN src.bak/lib-storage/mailbox-list.h src/lib-storage/mailbox-list.h --- src/lib-storage/mailbox-list.h.bak 2020-03-05 15:35:53.000000000 +0100 +++ src/lib-storage/mailbox-list.h 2020-05-15 22:35:01.251579000 +0200 @@ -121,6 +121,7 @@ const char *inbox_path; const char *subscription_fname; + const char *fallback_driver; const char *list_index_fname; /* Mailbox list index directory. NULL defaults to index directory. The path may be relative to the index directory. */ ---------------------------------------------------------------------------

1 0

SSL Error
by Brandon Roa 15 May '20

15 May '20

I just installed a certificate on my mail server to Postfix and Dovecot. The certificate is functional on Postfix, but for some reason I keep getting this error. Any suggestions on how to fix it? mail dovecot: imap-login: Error: SSL: Stacked error: error:1408A10B:SSL routines:ssl3_get_client_hello:wrong version number Here is my configuration: # 2.2.22 (fe789d2): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.13 (7b14904) # OS: Linux 4.4.0-45-generic x86_64 Ubuntu 16.04.6 LTS ext4 auth_debug = yes auth_debug_passwords = yes auth_mechanisms = plain cram-md5 login auth_verbose = yes auth_verbose_passwords = plain base_dir = /var/run/dovecot/ disable_plaintext_auth = no mail_debug = yes mail_gid = 5000 mail_location = maildir:/home/vmail/%d/%n mail_plugins = quota mail_uid = 5000 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { quota_rule = *:storage=5G sieve = /etc/dovecot/sieve/default.sieve sieve_default = /var/lib/dovecot/sieve/default.sieve sieve_dir = ~/sieve } postmaster_address = postmaster(a)example.com protocols = " imap sieve pop3" service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } } ssl_cert = </etc/ssl/certs/example.pem ssl_key = </etc/ssl/private/example.key userdb { args = uid=5000 gid=5000 home=/home/vmail/%d/%n driver = static } verbose_ssl = yes protocol lda { mail_plugins = quota sieve } protocol imap { mail_plugins = quota imap_quota }

2 3

converting old uucp buffer files to maildir
by mh＠mike.franken.de 15 May '20

15 May '20

Hi *, besides my dovecot maildir structure, that has been migrated from an Exchange server, I have an even older mail structure in an ancient uucp style. The program named CrossPoint I used for this isn't wideley known, but it used so called mpuffer files in a plain text format. It is the program I still use to write for example this mail. I wonder if there already exists a program or script to convert the files from this program to the Dovecot maildir structure or some Howto for writing it myself. The format of these files looks like shown below. Mails are separated by two new lines. ------------------------< snip snip snip >----------------------------- EMP: /archiv/net/dovecot^M KOP: <some_recipient>^M OEM: dovecot(a)dovecot.org^M ABS: ricardomachini(a)gmail.com (Ricardo Machini Barbosa)^M WAB: dovecot-bounces(a)dovecot.org^M BET: Header search on Dovecot with SOLR^M ROT: perth.mydomain.de!localhost!perth.hirmke.de!aqua.hirmke.de!elvis.otherdomain.de!rachael.otherdomain.de!talvi.dovecot.org!talvi.dovecot.org!mail-qk1-x72e.google.com!smtp.gmail.com!DESKTOP4CIJMB3^M MID: 078901d61d7e$0964bcd0$1c2e3670$(a)gmail.com^M EDA: 20200428165659W-03^M LEN: 6112^M MAILER: Microsoft Outlook 16.0^M X-XP-Boundary: ----=_NextPart_000_078A_01D61D64.E4184820^M MIME-Type: multipart/alternative; boundary="----=_NextPart_000_078A_01D61D64.E4184820"^M U-Content-Type: multipart/alternative; boundary="----=_NextPart_000_078A_01D61D64.E4184820"^M U-Sender: dovecot-bounces(a)dovecot.org^M U-Received: from localhost (localhost [127.0.0.1]) by perth.mydomain.de (Postfix) with ESMTP id 245AF862DA8 for <<some_recipient>>; Tue, 28 Apr 2020 18:58:11 +0200 (CEST)^M U-Authentication-Results: perth.mydomain.de (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com^M U-Received: from perth.mydomain.de ([127.0.0.1]) by localhost (perth.hirmke.de [127.0.0.1]) (amavisd-new, port 10024) with LMTP id RVP0-5mmK3XH for <<some_recipient>>; Tue, 28 Apr 2020 18:58:09 +0200 (CEST)^M U-Received: from aqua.mydomain.de (aqua.hirmke.de [192.168.1.11]) by perth.hirmke.de (Postfix) with ESMTP id 66A8B862D97 for <<some_recipient>>; Tue, 28 Apr 2020 18:58:07 +0200 (CEST)^M U-Received: by aqua.mydomain.de (Postfix, from userid 10) id 56D88506E; Tue, 28 Apr 2020 18:58:07 +0200 (CEST)^M U-Received: from rachael.otherdomain.de ([193.175.24.38]) by elvis.otherdomain.de with esmtp (Exim 3.36 #1) id 1jTTYK-0007WE-00 for <some_recipient>; Tue, 28 Apr 2020 18:57:48 +0200^M U-Received: from talvi.dovecot.org (talvi.dovecot.org [94.237.25.159]) by rachael.otherdomain.de (Postfix) with ESMTPS id 9C19510642C45 for <<some_recipient>>; Tue, 28 Apr 2020 18:57:46 +0200 (CEST)^M U-Received: from talvi.dovecot.org (localhost.localdomain [127.0.0.1]) by talvi.dovecot.org (Postfix) with ESMTP id 12ABD2B3C9F; Tue, 28 Apr 2020 19:57:06 +0300 (EEST)^M X-Original-To: dovecot(a)dovecot.org^M U-Delivered-To: dovecot(a)dovecot.org^M U-Received: from mail-qk1-x72e.google.com (mail-qk1-x72e.google.com [IPv6:2607:f8b0:4864:20::72e]) by talvi.dovecot.org (Postfix) with ESMTPS id D48EB2B3C6F for <dovecot(a)dovecot.org>; Tue, 28 Apr 2020 19:57:03 +0300 (EEST)^M U-Received: by mail-qk1-x72e.google.com with SMTP id c63so22534959qke.2 for <dovecot(a)dovecot.org>; Tue, 28 Apr 2020 09:57:03 -0700 (PDT)^M U-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:subject:date:message-id:mime-version:thread-index :content-language; bh=u9iSrDj6VaHxbCoUFYZ7Zp0PHd/EPA66NRtYVeLn0+Q=; b=QUqHsAo0P6JkAidluC5utFcRyQ3AaJXn6GJwM/l+wJE0XM40Ks/0A5uNE16l76pTNU 37Uu5RETZXTMIvyJHkCgJXDVQS5RPep8U0Bw//DMBSC09XMaxVDVu0hVln2UQvNhFkZy 3DvfA1z1HOMmUlVpyYuAVgJa1FUd7VB34jmKmyrB4+0PS39Cbo9+rVZvyKNxHj/z8Kh+ l/ivk5e35L2eq1cUiomqhcus8m7vZ3edA0wEQbU4Z5p3oGBQcGb/5pe3NczjRjJ0oF1q 5OEcIXAxiREMU3DuiYkJCQE28hPMFf10/1/NtGLwlFGdLTseq8LwMM9hY9h8aKmkFAyB Xrvg==^M X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:subject:date:message-id:mime-version :thread-index:content-language; bh=u9iSrDj6VaHxbCoUFYZ7Zp0PHd/EPA66NRtYVeLn0+Q=; b=VvYSZ0dCKbTlD3JWsIM+c/IvKn4ODGwMBBDIlHSpKHVjLOX3bAQk5NLCdJgsVrHTH3 eX+fCHmwyIgoaa2bMZK45aURu0H/kELwUc4k/ToQ+MLikNLe7J1GEcDeG2R0Mzk6oOCs wX3JHFLfpK0shX+XRLiJju8Xmk+dFnPWZcQKYVEsBsSIG4y4LaOEE9NCCWcUfmlwqXIH CUBJ/xVHAvrA/Tc4krWhLgjR6M0m8pKM+hX0XvlEcQM9aNgFOzVUJDyM0AgW/hWvurNb fPqEgehT3b2YieMUR90+aYHybQddNGb0PSaD33ocmNb4jhNyuQIWx/B2niV/lRhd68Mm 2IaQ==^M X-Gm-Message-State: AGi0Pub1W8n/ZsL3XKsrqZB7wN3LxZgnRvleyGc7wO5LZcvfpihQoI5H tsYQUwckNuvUN4/JneVuDEGcKyPY^M X-Google-Smtp-Source: APiQypIGqpcSdvRH6NE1wbVeWc8EFZqdGP6OWn+bpMR2BCfPfi4m+swvYIadz5cfAuOe3TXSjYk1Jg==^M X-Received: by 2002:a37:9ad0:: with SMTP id c199mr26948945qke.472.1588093022024; Tue, 28 Apr 2020 09:57:02 -0700 (PDT)^M U-Received: from DESKTOP4CIJMB3 ([2804:14c:90:81be:7d50:c076:9537:75cb]) by smtp.gmail.com with ESMTPSA id w42sm14281733qtj.63.2020.04.28.09.57.00 for <dovecot(a)dovecot.org> (version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128); Tue, 28 Apr 2020 09:57:01 -0700 (PDT)^M U-Thread-Index: AdYdffFdO2elBIGpSdyo3M9jdQ9BUQ==^M U-Content-Language: pt-br^M U-Content-Language: pt-br^M U-ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=dovecot.org; s=arc; t=1588093024; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: dkim-signature; bh=u9iSrDj6VaHxbCoUFYZ7Zp0PHd/EPA66NRtYVeLn0+Q=; b=Kfs/zrLFMMS+arGz8yJqX9KfjGpJWquL0QP4ccnziaPKOvpksDppuzM8snn/PS7bvhyiyr eDHKtsVFML1EME6QvvwTAbtUBDfaUN72KdIZsVSUs6raqIXWSNoXyIgH/1YmhSr1ClnY+E x5bNCnH/+rBbn0domw7lyZOLB672jMZsrz0qPOQekATrf7ISyFvwwXeWFO4PasT9R+F2Ci vlac2RY52IojdAiB7SF1E46WEhn6vVTnurM0z3G+lGSYI5UGQSKNkzfYAdyg7sXc1Bjd6f EV5zeNRkDyTpFbgIZWkT/VleWH3pKxzfboMpw6PZByMFJpo/+TgSJG/YiLY58A==^M U-ARC-Seal: i=1; s=arc; d=dovecot.org; t=1588093024; a=rsa-sha256; cv=none; b=grcJhp/zviK1BBKPNhz59Ktlw8wnbtBy/YamNS+vADIvfhbWKxTtQ+2MDQeri7sYFIjbG1 5wP5Ogs2mwF6BX4Ifjdv8Qj96FVD2RMcwVlv4xKH4gDoq/mJE9/lE0LJ2gouBBgt98dX54 itEhXRhSw+oe8bkMXljoV5GTVQEJeJaz5GAg35+XV/I1vbkFrrTVnUOw+JNKNSiFnBswk0 kxWaWOQXZTMJdg6WvKZ/Ru/iiaiiXzyG0q4gdU1Az8FQZ2HoXtZmjtvCOGw2gmXMmQn+Fi sMKbrvzDTeF8lS6L53ZVey0P2mAN172XsMXyaaCuZb7fQFyZvrCBNoXi5mV+TA==^M U-ARC-Authentication-Results: i=1; talvi.dovecot.org; dkim=pass header.d=gmail.com header.s=20161025 header.b=QUqHsAo0; spf=pass (talvi.dovecot.org: domain of ricardomachini(a)gmail.com designates 2607:f8b0:4864:20::72e as permitted sender) smtp.mailfrom=ricardomachini(a)gmail.com^M X-BeenThere: dovecot(a)dovecot.org^M X-Mailman-Version: 2.1.15^M U-Precedence: list^M U-List-Id: Dovecot Mailing List <dovecot.dovecot.org>^M U-List-Unsubscribe: <https://dovecot.org/mailman/options/dovecot>, <mailto:dovecot-request@dovecot.org?subject=unsubscribe>^M U-List-Archive: <https://dovecot.org/pipermail/dovecot/>^M U-List-Post: <mailto:dovecot@dovecot.org>^M U-List-Help: <mailto:dovecot-request@dovecot.org?subject=help>^M U-List-Subscribe: <https://dovecot.org/mailman/listinfo/dovecot>, <mailto:dovecot-request@dovecot.org?subject=subscribe>^M U-Errors-To: dovecot-bounces(a)dovecot.org^M X-XP-NTP: 40^M ^M This is a multipart message in MIME format.^M ^M ------=_NextPart_000_078A_01D61D64.E4184820^M Content-Type: text/plain;^M charset="us-ascii"^M Content-Transfer-Encoding: 7bit^M ... ------------------------< snip snip snip >----------------------------- TIA. Bye. Michael. -- Michael Hirmke

2 1

doveadm sync backup from old to new server
by Gregory Sloop 15 May '20

15 May '20

So I've done quite a lot of searching on the list and on the web - and perhaps my google-fu is really bad - but I can't find any real recipes on how to sync mail from the old server to the new. As an FYI - the old server is a CPanel/WHM setup on a VPS. The new is mailcow - which uses docker. However, I don't think either of these platforms is what's causing the issue - but I'm certainly not sure of that. --- I've tried several things - but have lost track of all the things I've tried. This seemed like the best of all the things I've tried. This particular mailbox/user+domain is setup on both servers. doveadm backup -D -u mc-user(a)abc.net ssh root(a)abc.net -p2200 doveadm dsync-server -u cp-user(a)abc.net mc-user(a)abc.net is the MC/NEW mailbox/domain cp-user(a)abc.net is the CPanel/OLD user/domain account The SSH server of the remote system is running on port 2200. However when I try this, I get: WARNING: The WATCHDOG_NOTIFY_EMAIL variable is not set. Defaulting to a blank string. dsync-local(user(a)abc.net)<v44NFyRWvF5efgAAb6OASA>: Error: read(remote) failed: EOF (version not received) doveadm(user(a)abc.net): Fatal: execvp(ssh) failed: No such file or directory The process appears to hang, and a Ctrl+C stops it. I'd love to get pointed at a reasonable recipe on how to make this work. I don't really get/understand the docs much at all. [And either everyone else understands it just fine, and never thinks to write a document on how to do it - or, and I think this is a lot more likely - they're using something like imapsync to do it. I found numerous places where others were, essentially, "Dovecot's tool is way too complicated and I can't get it to work right, so I used imapsync." I suppose I should probably just do that too, but it does seem a shame to do that when the dovecot tool is almost certainly the best tool for the job, but I can't figure out how to use it.] If someone can help me grok what's going on, I'm glad to write it up for the list and or a blog entry so it's more accessible. TIA -Greg

3 14

Can't connect to Managesieve Server - what´s wrong?
by Anton Blau 15 May '20

15 May '20

Hi, please excuse my bad english language. But I am not a native speaker. I have installed dovecot including sieve and managesieve on a ubuntu 18.04 lts. When I try to access the filter with roundcube (from another vm) I get the error message "Cannot connect to Managesieve-Server". If I try a "telnet myserver.dynvpn.de 4190" from the roundcube-vm I get Trying 188.194.95.63... Connected to myserver.dynvpn.de. Escape character is '^]'. "IMPLEMENTATION" "Dovecot (Ubuntu) Pigeonhole" "SIEVE" "fileinto reject envelope encoded-character vacation subaddress comparat or-i;ascii-numeric relational regex imap4flags copy include variables body enoti fy environment mailbox date index ihave duplicate mime foreverypart extracttext imapsieve vnd.dovecot.imapsieve" "NOTIFY" "mailto" "SASL" "" "STARTTLS" "VERSION" "1.0" OK "Dovecot (Ubuntu) ready." So I think that dovecot managesieve is running. In /var/log/syslog I get with sieve: ... May 13 23:56:04 firstmail dovecot: imap(debian(a)firstmail.locallan): Debug: Module loaded: /usr/lib/dovecot/modules/lib95_imap_sieve_plugin.so ... When I try with telnet I get: ... May 14 00:00:30 firstmail dovecot: managesieve-login: Debug: SSL: elliptic curve secp384r1 will be used for ECDH and ECDHE key exchanges May 14 00:00:30 firstmail dovecot: managesieve-login: Debug: SSL: elliptic curve secp384r1 will be used for ECDH and ECDHE key exchanges ... What can I do to get connect from Roundcube to dovecot-managemsieve? Thank you! Tony ---> 20-imap.conf protocol imap { mail_plugins = $mail_plugins imap_sieve } ---> 20-lmtp.conf protocol lmtp { postmaster_address = administrator@locallan # required mail_plugins = $mail_plugins sieve } ---> 20-managesieve.conf protocols = $protocols sieve service managesieve-login { inet_listener sieve { port = 4190 } } service managesieve { # Max. number of ManageSieve processes (connections) process_limit = 1024 } protocol sieve { } ---> 90-sieve.conf plugin { sieve_plugins = sieve_imapsieve sieve_extprograms sieve_before = /var/vmail/sieve/global/spam-global.sieve sieve = file:/var/vmail/sieve/%u;active=/var/vmail/sieve/%u/active-script.sieve sieve_default = /var/vmail/sieve/default/default.sieve sieve_global = /var/vmail/sieve/global/ imapsieve_mailbox1_name = Spam imapsieve_mailbox1_causes = COPY imapsieve_mailbox1_before = file:/var/vmail/sieve/global/report-spam.sieve imapsieve_mailbox2_name = * imapsieve_mailbox2_from = Spam imapsieve_mailbox2_causes = COPY imapsieve_mailbox2_before = file:/var/vmail/sieve/global/report-ham.sieve sieve_pipe_bin_dir = /usr/bin sieve_global_extensions = +vnd.dovecot.pipe } ---> 90-sieve-extprograms.conf plugin { }

3 6

[Dovecot v2.3.9.3] HTTP API Endpoint for mailbox cryptokey operations
by Thibault HUTTIN-PASSERON 14 May '20

14 May '20

Hello everyone, I successfully set up the mail_crypt plugin using folder keys, and require user's key to be encrypted with a password using mail_crypt_require_encrypted_user_key = yes. As I'm trying to streamline the process of creating a user, and want to develop an application in PHP to help me in that process, I'm very interested in the doveadm HTTP API. Although the mail_crypt plugin is not referenced in the API, I discovered that it could be accessed all the same, provided some camelCase changes. So far I've been able to generate the following json for the mailbox cryptokey generate command: curl -X POST -H "Authorization: X-Dovecot-API <base64-api-token>" -H "Content-Type: application/json" -d '[["mailboxCryptokeyGenerate",{"user":"<username>","userKeyOnly":true},"tag1"]]' http://localhost:8081/doveadm/v1 which is able to give me the same output as the related command: doveadm mailbox cryptokey generate -u <username> -U. This only works if a keypair has already been generated for the user, which is kind of counter-productive in my use case. I would like to know if there was a way to adapt the following command into a json API call : doveadm -o plugin/mail_crypt_private_password=<password> mailbox cryptokey generate -u <username> -U Especially the -o plugin/mail_crypt_private_password=<password> part, since it seems I've figured out the other part partly tinkering partly looking through the source code. Thanks everyone for your input. Thibault PASSERON PS : excerpts from my configuration : doveconf -n =========== # 2.3.9.3 (9f41b88fa): /etc/dovecot/dovecot.conf # Pigeonhole version 0.5.9 (db4e9a2f) # OS: Linux 5.6.7-300.fc32.x86_64 x86_64 Fedora release 32 (Thirty Two) # Hostname: <hostname> auth_mechanisms = plain login dict { sqldict = mysql:/etc/dovecot/dovecot-sql-dict.conf.ext } doveadm_api_key = # hidden, use -P to show it mail_attribute_dict = proxy:dict:sqldict mail_plugins = quota mail_crypt passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { mail_crypt_curve = secp521r1 mail_crypt_require_encrypted_user_key = yes mail_crypt_save_version = 2 } service dict { unix_listener dict { group = vmail mode = 0600 user = vmail } } service doveadm { inet_listener http { port = 8081 } unix_listener doveadm-server { } } userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lmtp { mail_plugins = quota mail_crypt sieve } dovecot-sql.conf.ext ==================== driver = mysql connect = "host=/var/lib/mysql/mysql.sock user=<user> password=<pass> dbname=<db>" #SQL Query used to fetch the user from the DB user_query = SELECT email as user, \ CONCAT('*:bytes=',quota) AS quota_rule, \ '/var/spool/mail/virtual_mailboxes/%d/%n' as home, \ 5000 AS uid, \ 5000 AS gid, \ crypt AS mail_crypt_save_version \ FROM virtual_users WHERE email='%u'; #SQL Query used to fetch the user's password from the DB password_query = SELECT password, \ crypt AS userdb_mail_crypt_save_version, \ '%w' AS userdb_mail_crypt_private_password \ FROM virtual_users WHERE email='%u'; #SQL Query to iterate over all users iterate_query = SELECT email AS user FROM virtual_users; dovecot-sql-dict.conf.ext ========================= #driver = mysql connect = "host=/var/lib/mysql/mysql.sock user=<user> password=<pass> dbname=<db>" # User's private keys map { pattern = priv/$mailboxid/vendor/vendor.dovecot/pvt/crypt/privkeys/$digest table = virtual_users_cryptokeys_priv_dict username_field = email value_field = key_contents fields { mailbox_id = $mailboxid key_digest = $digest } } map { pattern = priv/$mailboxid/vendor/vendor.dovecot/pvt/server/vendor/vendor.dovecot/pvt/crypt/privkeys/$digest table = virtual_users_cryptokeys_priv_server_dict username_field = email value_field = key_contents fields { mailbox_id = $mailboxid key_digest = $digest } } #User's active private key map { pattern = priv/$mailboxid/vendor/vendor.dovecot/pvt/crypt/active table = virtual_users_cryptokeys_priv_active_dict username_field = email value_field = key_digest fields { mailbox_id = $mailboxid } } map { pattern = priv/$mailboxid/vendor/vendor.dovecot/pvt/server/vendor/vendor.dovecot/pvt/crypt/active table = virtual_users_cryptokeys_priv_active_server_dict username_field = email value_field = key_digest fields { mailbox_id = $mailboxid } } #Public keys map { pattern = shared/$mailboxid/vendor/vendor.dovecot/pvt/crypt/pubkeys/$digest table = virtual_users_cryptokeys_shared_dict value_field = key_contents fields { mailbox_id = $mailboxid key_digest = $digest } } map { pattern = shared/$mailboxid/vendor/vendor.dovecot/pvt/server/vendor/vendor.dovecot/pvt/crypt/pubkeys/$digest table = virtual_users_cryptokeys_shared_server_dict value_field = key_contents fields { mailbox_id = $mailboxid key_digest = $digest } } #Active public keys map { pattern = shared/$mailboxid/vendor/vendor.dovecot/pvt/server/vendor/vendor.dovecot/pvt/crypt/active table = virtual_users_cryptokeys_shared_active_server_dict value_field = key_digest fields { mailbox_id = $mailboxid } } map { pattern = shared/$mailboxid/vendor/vendor.dovecot/pvt/crypt/active table = virtual_users_cryptokeys_shared_active_dict value_field = key_digest fields { mailbox_id = $mailboxid } }

1 0

Support for MULTISEARCH
by Daniel Miller 14 May '20

14 May '20

Does Dovecot presently support the MULTISEARCH command, or are there plans to do so? --- Daniel

6 12

Re: doveadm sync backup from old to new server
by Aki Tuomi 14 May '20

14 May '20

> On 14/05/2020 09:02 Adi Pircalabu <adi(a)ddns.com.au> wrote: > > > On 14-05-2020 15:16, Aki Tuomi wrote: > >> On 14/05/2020 04:09 Gregory Sloop <gregs(a)sloop.net> wrote: > >> > >> > >> So I've done quite a lot of searching on the list and on the web - and > >> perhaps my google-fu is really bad - but I can't find any real recipes > >> on how to sync mail from the old server to the new. > >> > >> As an FYI - the old server is a CPanel/WHM setup on a VPS. > >> The new is mailcow - which uses docker. > >> > >> However, I don't think either of these platforms is what's causing > >> the issue - but I'm certainly not sure of that. > >> > >> --- > >> I've tried several things - but have lost track of all the things > >> I've tried. > >> This seemed like the best of all the things I've tried. > >> > >> This particular mailbox/user+domain is setup on both servers. > >> > >> doveadm backup -D -u mc-user(a)abc.net ssh root(a)abc.net -p2200 doveadm > >> dsync-server -u cp-user(a)abc.net > >> > >> mc-user(a)abc.net is the MC/NEW mailbox/domain > >> cp-user(a)abc.net is the CPanel/OLD user/domain account > >> The SSH server of the remote system is running on port 2200. > >> > >> However when I try this, I get: > >> WARNING: The WATCHDOG_NOTIFY_EMAIL variable is not set. Defaulting to > >> a blank string. > >> dsync-local(user(a)abc.net)<v44NFyRWvF5efgAAb6OASA>: Error: > >> read(remote) failed: EOF (version not received) > >> doveadm(user(a)abc.net): Fatal: execvp(ssh) failed: No such file or > >> directory > >> > >> The process appears to hang, and a Ctrl+C stops it. > >> > >> I'd love to get pointed at a reasonable recipe on how to make this > >> work. > >> > >> I don't really get/understand the docs much at all. > >> [And either everyone else understands it just fine, and never thinks > >> to write a document on how to do it - or, and I think this is a lot > >> more likely - they're using something like imapsync to do it. I found > >> numerous places where others were, essentially, "Dovecot's tool is way > >> too complicated and I can't get it to work right, so I used imapsync." > >> I suppose I should probably just do that too, but it does seem a shame > >> to do that when the dovecot tool is almost certainly the best tool for > >> the job, but I can't figure out how to use it.] > >> > >> If someone can help me grok what's going on, I'm glad to write it up > >> for the list and or a blog entry so it's more accessible. > >> > >> TIA > >> -Greg > >> > > > > Just thought I'd point out that if you want to use ssh, it should be > > installed on both ends: > > > > "doveadm(user(a)abc.net): Fatal: execvp(ssh) failed: No such file or > > directory" > > > > If you don't want to, or can't install ssh, you can also use doveadm > > server: > > > > service doveadm { > > inet_listener { > > port = 12534 > > } > > } > > > > doveadm_port = 12534 > > doveadm_password = secretpass > > > > Then you can use tcp:otherhost:12534 as target/source. > > Hi Aki, > Does this service provide encryption in transit? > > -- > Adi Pircalabu You can use tcps if you enable SSL for doveadm listener. Add ssl=yes after port. Please keep replies on list. Aki

1 0

Compress by zlib only selected Maildir folders
by filbar＠centrum.cz 12 May '20

12 May '20

Hello, is it possible to compress by zlib only selected folders? My e-mail accounts have archive folder and this folder contains old comunications with my customers and this I use very rare, so I want to compress them by zlib to save space. Is this possible? Thanks, Filip Bartmann

2 1

Deleting messages from filesystem with sdbox mail format
by Gionatan Danti 11 May '20

11 May '20

Dear list, I recently had to delete some messages from an sdbox mailbox, for which I used the canonical "doveadm expunge" command without issues. However I got curious and, on a test mailbox, I deleted an unimportant message directly from the filesystem (rm u.650). After removing the file, the webmail continued to show it in the mail list - but no text was retrieved when I selected it. I supposed this was due to dovecot.index.cache and, indeed, deleting the cache got rid of the message in the webmail list. While I understand that it is not recommended (deleting and regenerating the index cache is an expensive operation), I wonder if removing a file from the filesystem, and regenerating the index cache file, is a safe operation when using an sdbox mailstore. Specifically, I would like to know if, after a manual filesystem deletion, the main index file (dovecot.index) is automatically updated by dovecot (reflecting the deletion) or if lingering references are kept in it. Thanks. -- Danti Gionatan Supporto Tecnico Assyoma S.r.l. - www.assyoma.it [1] email: g.danti(a)assyoma.it - info(a)assyoma.it GPG public key ID: FF5F32A8

2 6

Re: [EXT] Support for MULTISEARCH
by Sami Ketola 11 May '20

11 May '20

> On 10. May 2020, at 11.22, Peter <pch(a)myzel.net> wrote: > > Am 10.05.20 um 09:54 schrieb Sami Ketola: >>> On 10. May 2020, at 1.51, Peter <pch(a)myzel.net> wrote: >>> Am 10.05.20 um 00:22 schrieb Daniel Miller: >>>> Thank you - I'm aware of the virtual folder option and do use it. My interest is for a Windows client, EM Client, which I otherwise really enjoy. Unfortunately, they've implemented server-side searching only via MULTISEARCH - for reasons passing my understanding. So I was hoping to hear Dovecot either already had support or there were plans to implement it. >>> >>> Virtual folder does not scale. Thank you for naming a client that does multisearch! >> Virtual folder scales just fine. What makes you think it does not? >> We have customers that have users with thousand folders and millions of emails and still virtual folder scales. > > Hello Sami, I was thinking, that the client then will be overwhelmed with a mailbox of such a size? > > Or does the folder start empty and only gets populated upon search with the resulting mails? virtual folder with contents of all actual folders is usually hidden from imap clients and is used only for searching. Sami

1 0

Directory hashing
by lists＠mlserv.org 11 May '20

11 May '20

Hi, I struggle with directory hashing. I want something like this: /srv/mail/c/cf37a8dff5e360927ba10ab2 The final folder is simpel, as it is: %{sha256;truncate=96:user} But how do I get a first level from sha256? Unfortunately, the truncate option aligns only full 8bit and does not divide into low and high nibbles. How can I express this for sha256? in MD5 this would be %1Mu Many thanks in advance Christian -- Rößner-Network-Solutions Karl-Bröger-Str. 10, 36304 Alsfeld Fax: +49 6631 78823409, Mobil: +49 171 9905345 USt-IdNr.: DE225643613, https://roessner.website PGP fingerprint: 658D 1342 B762 F484 2DDF 1E88 38A5 4346 D727 94E5

3 4

Unable to disable TLSv1.3 or fallback to TLSv1.2 when 1 cipher is disabled
by Steve Egbert 10 May '20

10 May '20

I have an operational need to disable TLSv1.3 due to inadequate support to exclude certain ciphers. Much to my dismay, the `ssl_protocols` had been renamed and re-functionalized into `ssl_min_protocol`. Now, there is no way to exclude a specific group of one or more TLS versions. For a new bug report, I think we need two new settings: * `ssl_tls13_ciphersuite` and * `ssl_tls10_cipher` settings introduced into Dovecot for better granularity. ALong with support for fallback to TLSv1.2 as outlined in https://bugzilla.mozilla.org/show_bug.cgi?id=1250568 I'm still being hammered with the following error with Thunderbird 76.0b3, Dovecot 2.3.4.1-5+deb10u1, Debian 11: May 8 11:15:47 ns1 dovecot: imap-login: Debug: SSL: where=0x10, ret=1: before SSL initialization May 8 11:15:47 ns1 dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: before SSL initialization May 8 11:15:47 ns1 dovecot: imap-login: Debug: SSL: where=0x2002, ret=-1: before SSL initialization May 8 11:15:47 ns1 dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: before SSL initialization May 8 11:15:47 ns1 dovecot: imap-login: Debug: SSL alert: where=0x4008, ret=582: fatal protocol version May 8 11:15:47 ns1 dovecot: imap-login: Debug: SSL: where=0x2002, ret=-1: error May 8 11:15:47 ns1 dovecot: imap-login: Debug: SSL error: SSL_accept() failed: error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol May 8 11:15:47 ns1 dovecot: imap-login: Disconnected (disconnected before auth was ready, waited 0 secs): user=<>, rip=XX.XX.XX.XX, lip=XX.XX.XX.XX, TLS handshaking: SSL_accept() failed: error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol, session=<GN/GeCSlYuhEhl2U> May 8 11:15:47 ns1 dovecot: imap-login: Debug: SSL error: SSL_accept() syscall failed: Invalid argument This occurred when specifying one TLSv1.3 cipher to be excluded in ssl_cipher via an exclamation mark. On a side note of IMAP client, Latest Mozilla Thunderbird had its pref setting security.tls.version.fallback-limit to 4 (TLSv1.3), of which I have adjusted it to 3 (TLSv1.2) and it .... works when Dovecot is set to TLSv1.2. (Details of Thunderbird security.tls.version.fallback-limit is given in http://kb.mozillazine.org/Security.tls.version.* ) Steve

3 3

Marking all emails in "Trash" as opened, and also prohibiting email clients from creating new mails
by Sebastian Nielsen 10 May '20

10 May '20

Dovecot version: 2.3.7.2 (3c910f64b) (pkg shipped by: Ubuntu-Desktop 20.04) I want to accomplish 2 things in dovecot: 1: I want to force all mails inside Trash to have an "opened"/"read" flag and "Non-Recent" flag. Basically Status: RO This regardless how the flag appears, either by copying/moving the mail into trash, creating a new mail in trash, flagging email in Trash or whatever. Basically, no email in Trash should ever be able to have a recent or unread flag. I tried with a static mail filter and sieve filter to add \\seen to the email upon COPY (as mentioned here: https://dovecot.org/pipermail/dovecot/2017-November/110122.html ), but regardless how I do it, it doesn't work when Samsung Email client trashes an unread email, AND/OR also, it causes weird issues like duplicate email in the trash folder sometimes. Best would be some event filter that executes for every mail that somehow end up in Trash, that checks if \\seen is present, if not, then it will add it, on all emails in trash? But how I do to prevent the duplicate copy that appears sometimes? 2: I want to prohibit email clients from ever creating a new mail in Sent folder. If its possible to allow MOVE and/or COPY, it should be allowed, only new mail should be prohibited. (also note that external processes must be able to create new mail in Sent) HOWEVER - this prohibition must be silent - ergo the newly created email is simply discarded. No error message or error codes should be returned to IMAP client. (The reason I want this, is because I have configured my outgoing SMTP server to populate Sent, and some email clients doesn't have the option to "Don't store a copy of the email in Sent folder" resulting in duplicates) Best regards, Sebastian Nielsen

3 5

Dovecot v2.3.4.1 Debian 10.3 mbox format - Error: chdir(/var/spool/mail/domain/user) failed: Not a directory
by vik 10 May '20

10 May '20

Hi colleagues, I am trying to setup dovecot and have a strange problem. I configured it to: #dovecot -n|grep ^mail mail_gid = mail mail_location = mbox:/var/spool/mail/%d/mailboxes/%n:INBOX=/var/spool/mail/%d/%n mail_uid = mail And also setup exim4 to use it. I sent a test message and observe a mailbox file /var/spool/mail/domain/user, containing this message. But when I try to access dovecot with a client (thunderbird), client cannot fetch mail, and I observe error in the dovecot's log: May 09 23:35:51 imap(user@domain)<25179><JNFIDz2ldeOsEAE3>: Error: chdir(/var/spool/mail/domain/user) failed: Not a directory What is it, and how to solve it? Thank you. Kind regards, Viktor

1 0

ot: copy physical mail files ?
by Voytek Eymont 09 May '20

09 May '20

dumb question warning: I have two email accounts, me@tld1 and me@tld2 often, get emails intended (by me) for me@tld2 sent to me@tld1 this is purely for my own preferred record keeping preference, as I run the server, is it 'a really bad things' if I simply copy relevant mail files from /var/vmail/vmail1/tld1..../cur to /var/vmail/vmail1/tld2.../cur ? rather than forward emails as I have been doing? thanks

6 7

What's a Reasonable Inbox Size?
by Asai 09 May '20

09 May '20

Greetings, I have several users who have inboxes that are over 20 GB. Lately I have noticed Dovecot logs say it's taking over 30 seconds to sync their mailboxes. As email admins, how do you handle inboxes that are so large? Do you use mailbox types that have better performance like dbox? We're using maildir. What's a reasonable inbox size? Is 20+ GB reasonable and nothing to worry about? Thanks for any insight here. -- Asai7

7 13

Unable to disable TLSv1.3 or fallback to TLSv1.2 when 1 cipher is disabled
by Steve Egbert 09 May '20

09 May '20

I have an operational need to disable TLSv1.3 due to inadequate support to exclude certain ciphers. Much to my dismay, the `ssl_protocols` had been renamed and re-functionalized into `ssl_min_protocol`. Now, there is no way to exclude a specific group of one or more TLS versions. For a new bug report, I think we need two new settings: * `ssl_tls13_ciphersuite` and * `ssl_tls10_cipher` settings introduced into Dovecot for better granularity. ALong with support for fallback to TLSv1.2 as outlined in https://bugzilla.mozilla.org/show_bug.cgi?id=1250568 I'm still being hammered with the following error with Thunderbird 76.0b3, Dovecot 2.3.4.1-5+deb10u1, Debian 11: May 8 11:15:47 ns1 dovecot: imap-login: Debug: SSL: where=0x10, ret=1: before SSL initialization May 8 11:15:47 ns1 dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: before SSL initialization May 8 11:15:47 ns1 dovecot: imap-login: Debug: SSL: where=0x2002, ret=-1: before SSL initialization May 8 11:15:47 ns1 dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: before SSL initialization May 8 11:15:47 ns1 dovecot: imap-login: Debug: SSL alert: where=0x4008, ret=582: fatal protocol version May 8 11:15:47 ns1 dovecot: imap-login: Debug: SSL: where=0x2002, ret=-1: error May 8 11:15:47 ns1 dovecot: imap-login: Debug: SSL error: SSL_accept() failed: error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol May 8 11:15:47 ns1 dovecot: imap-login: Disconnected (disconnected before auth was ready, waited 0 secs): user=<>, rip=XX.XX.XX.XX, lip=XX.XX.XX.XX, TLS handshaking: SSL_accept() failed: error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol, session=<GN/GeCSlYuhEhl2U> May 8 11:15:47 ns1 dovecot: imap-login: Debug: SSL error: SSL_accept() syscall failed: Invalid argument This occurred when specifying one TLSv1.3 cipher to be excluded in ssl_cipher via an exclamation mark. On a side note of IMAP client, Latest Mozilla Thunderbird had its pref setting security.tls.version.fallback-limit to 4 (TLSv1.3), of which I have adjusted it to 3 (TLSv1.2) and it .... works when Dovecot is set to TLSv1.2. (Details of Thunderbird security.tls.version.fallback-limit is given in http://kb.mozillazine.org/Security.tls.version.* ) Steve

2 3

dovecot-lda quota warning email add BCC
by Admin Beckspaced 08 May '20

08 May '20

Dear dovecot users, I have setup doveot with quota warning. Once a quota wearning is reached a shell script is called which then sends an email to the user via dovecot LDA this is the command in the shell script: /usr/lib/dovecot/dovecot-lda -d $USER -o "plugin/quota=dict:User quota::noenforcing:proxy::quota" I already have looked in the docs: https://wiki.dovecot.org/LDA but can't find an option to add a BCC I would like to receive a copy of the quota warning email so I also get notified and know if user mailboxes get filled up. How could I achieve that? thanks & greetings Becki

1 1

courier-dovecot-migrate.pl and courier-5: UTF-8 flag
by Maxim Nikulin 08 May '20

08 May '20

Hi, Courier to dovecot migration script https://dovecot.org/tools/courier-dovecot-migrate.pl referenced at the https://wiki.dovecot.org/Migration/Courier page has a couple of problems. One of them is that the script could not process courierpop3dsizelist generated by courier-5. File format has been changed a bit to mark UTF-8 messages with an additional attribute. Is it safe to ignore such flag or its value should be stored somewhere for dovecot? Internally courier assumes false value during migration from the previous format version (v2 to v3). --- courier-dovecot-migrate.pl.orig 2012-07-28 17:14:20.000000000 +0000 +++ courier-dovecot-migrate.pl 2020-05-08 09:54:53.249214022 +0000 @@ -170,8 +170,9 @@ my $pop3_fname = "$dir/$courier_pop3_uidfile"; open( $f, $pop3_fname ) || die $!; my $pop3_hdr = <$f>; - if ( $pop3_hdr =~ /^\/2 (\d+) (\d+)$/ ) { + if ( $pop3_hdr =~ /^\/[23] (\d+) (\d+)$/ ) { # /2 <next uid> <uidvalidity> + # /3 <next uid> <uidvalidity> $_ = <$f>; } elsif ( $pop3_hdr =~ /^\/1 (\d+)$/ ) { @@ -193,9 +194,13 @@ chomp $_; $line++; - my ( $full_fname, $fsize, $uid, $uidv ); + my ( $full_fname, $fsize, $uid, $uidv, $_is_utf8 ); - if ( /^([^ ]+) (\d+) (\d+):(\d+)$/ ) { + if ( /^([^ ]+) (\d+) (\d+):(\d+):(\d+)$/ ) { + # v3 + ( $full_fname, $fsize, $uid, $uidv, $_is_utf8 ) = ( $1, $2, $3, $4, $5 ); + } + elsif ( /^([^ ]+) (\d+) (\d+):(\d+)$/ ) { # v2 ( $full_fname, $fsize, $uid, $uidv ) = ( $1, $2, $3, $4 ); }

1 0

Seive + Spamprobe terminates with signal 6
by Mark Constable 08 May '20

08 May '20

Ubuntu 20.04, Dovecot 2.3.7.2, SpamProbe v1.4d. For the past weeks my sieve filters that call spamprobe have been crashing out for some users. I have a dozen similar server setups and this is not happening on any of the other servers and it was working just fine for a year up until recently. This particular server is quite busy. There is plenty of disk space and inode usage is about 2.5%. Permissions look the same as on the other servers. I'm hoping someone might have a suggestion as to the cause of this? Apr 22 10:31:24 mail dovecot: lmtp(xxxx(a)example.com)<33016><oCuzElyQn174gAAA4xLzLg>: Error: program exec:/etc/dovecot/sieve/spamprobe (38010): Terminated abnormally with signal 6 Apr 22 10:31:24 mail dovecot: lmtp(xxxx(a)example.com)<33016><oCuzElyQn174gAAA4xLzLg>: Error: sieve: global: line 6: execute action: failed to execute to program `spamprobe': refer to server log for more information. [2020-04-22 10:31:24] ~ cat /etc/dovecot/sieve/global.sieve require ["vnd.dovecot.execute", "fileinto", "envelope", "variables", "editheader"]; if header :contains "from" ["root@", "daemon@", "postmaster@"] { fileinto "Trash"; } elsif header :contains "to" ["root@", "daemon@", "postmaster@"] { fileinto "Trash"; } if envelope :localpart :matches "to" "*" { set "lhs" "${1}"; } if envelope :domain :matches "to" "*" { set "rhs" "${1}"; } execute :pipe :output "SCORE" "spamprobe" ["-c", "-d", "/home/u/${rhs}/home/${lhs}/.spamprobe", "receive"]; addheader :last "X-Spam" "${SCORE}"; if header :matches "X-Spam" "SPAM*" { fileinto "Junk"; } plugin { imapsieve_mailbox1_before = file:/etc/dovecot/sieve/retrain-as-spam.sieve imapsieve_mailbox1_causes = COPY imapsieve_mailbox1_name = Junk imapsieve_mailbox2_before = file:/etc/dovecot/sieve/retrain-as-good.sieve imapsieve_mailbox2_causes = COPY imapsieve_mailbox2_from = Junk imapsieve_mailbox2_name = * listescape_char = mail_log_cached_only = yes mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size sieve_before = file:/etc/dovecot/sieve/global.sieve sieve_dir = ~/sieve sieve_execute_bin_dir = /etc/dovecot/sieve sieve_extensions = +notify +imapflags +vacation-seconds sieve_global_dir = /etc/dovecot/sieve/ sieve_global_extensions = +vnd.dovecot.debug +editheader +vnd.dovecot.pipe +vnd.dovecot.execute sieve_max_redirects = 30 sieve_max_script_size = 1M sieve_pipe_bin_dir = /etc/dovecot/sieve sieve_plugins = sieve_imapsieve sieve_extprograms sieve_quota_max_scripts = 0 sieve_quota_max_storage = 0 sieve_redirect_envelope_from = recipient sieve_vacation_default_period = 60s sieve_vacation_max_period = 0 sieve_vacation_min_period = 5s sieve_vacation_send_from_recipient = yes } -- Mark Constable 0419 530 037 https://spiderweb.com.au

2 2

auto: mdbox is automatically recognized as sdbox
by 刘莹莹 08 May '20

08 May '20

Hi:   I did a simple test with Dovecot-2.3.9:            First step : A test account uses mdbox format to store emails with 'mail_location = mdbox:%h/%Ld/%Ln:ALT=%h/altstorage/%Ld/%Ln',           Second step: I adjust 'mail_location = auto:'  and dovecot restart           Third step: telnet 127.0.0.1 143  then log in and fetch emails.     When I fetch email data , the log shows that the storage format is automatically recognized as sdbox and index is Rebuild, as the result, all emails is lost： May 08 12:22:15 mail imap(q2(a)a.com)<30883><+nFkVxul5oF/AAAB>: Debug: Mailbox INBOX: Mailbox opened because: SELECT May 08 12:22:15 mail imap(q2(a)a.com)<30883><+nFkVxul5oF/AAAB>: Warning: sdbox /srv/vmail/a.com/q2/mailboxes/INBOX/dbox-Mails: Rebuilding index May 08 12:23:12 mail auth-worker(30882): Debug: conn unix:auth-worker (pid=29526,uid=12348): Disconnected: Connection closed (fd=-1) May 08 12:24:19 mail imap(q2(a)a.com)<30883><+nFkVxul5oF/AAAB>: Info: Logged out in=50 out=881 deleted=0 expunged=0 trashed=0 hdr_count=0 hdr_bytes=0 body_count=0 body_bytes=0          I am confused why mdbox and sdbox cannot be recognized automatically or there are same problem with my test ??   Thanks

1 0

SPECIAL-USE and Outlook folders
by Alessio Cecchi 08 May '20

08 May '20

Hi, in the recent version of Outlook seem impossible to remap the Sent (but also Drafts) folders in order to show as the localized name. I have enabled the "special_use" in 10-mailbox.conf but still is not working: namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Spam { auto = subscribe special_use = \Junk } mailbox Trash { auto = subscribe special_use = \Trash } prefix = separator = / } On Internet someone suggest to add the imap_capability "XLIST" but I haven't understand if it the solutions. Does anyone have any suggestions? Thanks -- Alessio Cecchi Postmaster @ http://www.qboxmail.it https://www.linkedin.com/in/alessice

1 0

Unable to set ssl_min_protocol=TLSv1.3
by Thomas Schneider 07 May '20

07 May '20

Good $daytime, as per the recommendations of Mozilla’s SSL config generator[0], I wanted to set ssl_min_protocol=TLSv1.3 in my dovecot config. This produced the error: imap-login: Error: Failed to initialize SSL server context: Unknown ssl_min_protocol setting 'TLSv1.3' After some digging, I found the function that parses this setting in src/lib-ssl-iostream/iostream-openssl-common.c (openssl_min_protocol_to_options()), which maps strings such as SSL_TXT_TLSV1_2 == "TLSv1.2" (from openssl/ssl.h) to the appropriate version and option defines of OpenSSL. Said openssl/ssl.h does not contain a SSL_TXT_TLSV1_3, so it’s no surprise that dovecot does not know this setting. As a quick fix, I could probably extend struct {…} protocol_versions[] (in iostream-openssl-common.c again) with an appropriate "TLSv1.3" entry (and send a patch), though I would also suggest to OpenSSL to add a SSL_TXT_TLSV1_3 define. Unfortunately, I have not found a config setting in dovecot to set SSL_OP_NO_TLSv1_2, or in fact any way to enforce TLS >=1.3, except maybe via the cipher list string. I think that dovecot should support setting this, and I’d also gladly provide a patch. Thanks, Thomas [0]: https://ssl-config.mozilla.org/#server=dovecot&version=2.3.4.1&config=moder…

3 2

Urgent - Help needed
by Kishore Potnuru 07 May '20

07 May '20

Hi All, I am having dovecot installed on my redhat 7. There was an email came to my "Maildir" directory as per the logs. There is an application reading the emails from the Maildir inbox. I have the log stating the email has been delivered to maildir folder below. But the application team says that they didn't receive the email. The emails is also not there in the Maildir folder. Is there any way/log we can see, from Maildir folder, whether the application picked the email? or where that email went (to any server) from the Maildir folder? any such verification is possible? ============= [root@testserver log]# grep EB6A2206818 temp.log May 5 07:35:20 testserver postfix/smtpd[29839]: EB6A2206818: client=test-server May 5 07:35:20 testserver postfix/cleanup[29842]: EB6A2206818: message-id=<AM0PR01MB42257878E93ED4C6> May 5 07:35:21 testserver postfix/qmgr[29801]: EB6A2206818: from=< tester1(a)testing.com>, size=13614, nrcpt=1 (queue active) May 5 07:35:21 testserver postfix/virtual[29843]: EB6A2206818: to=< selfemail(a)testing2.com>, relay=virtual, delay=0.05, delays=0.05/0/0/0, dsn=2.0.0, status=sent (delivered to maildir) May 5 07:35:21 testserver postfix/qmgr[29801]: EB6A2206818: removed ============== Please help me... Thanks & Regards, Kishore Potnuru

7 17

Re: Urgent - Help needed
by Kishore Potnuru 05 May '20

05 May '20

Thank you for the reply. Actually there are 7 emails sent by the user. 2 emails are delivered successfully. 5 are missing. All are having the same log with virtual. At present I might not be able to change those settings.... Is there any way to verify they are delivered to them or not? do we have any logs to verify the same? On Tue, May 5, 2020 at 9:16 AM Zhang Huangbin <zhb(a)iredmail.org> wrote: > > > On May 5, 2020, at 4:06 PM, Kishore Potnuru <kishore.reachme(a)gmail.com> > wrote: > > > > May 5 07:35:21 testserver postfix/virtual[29843]: EB6A2206818: to=< > selfemail(a)testing2.com>, relay=virtual, delay=0.05, delays=0.05/0/0/0, > dsn=2.0.0, status=sent (delivered to maildir) > > According to the log, this user is using Postfix builtin transport > "virtual" as LDA, not Dovecot LDA. Fixing this should get your email > delivered correctly. > > ---- > Zhang Huangbin, founder of iRedMail project: https://www.iredmail.org/ > >

1 0

Dovecot LDAP/AD with exim as mta
by Benoît PELISSIER 05 May '20

05 May '20

Hi, I have done configuration dovecot/exim/samba4ad. I use dovecot-lda not exim to deliver mail. And dovecot to authentify users. I have users with mail address on AD. When i sent mail to user mail address, its working. I have distribution group or group with mail address on AD and users as member of this groups. But when i send mail to group mail address, its not working Dovecot-lda can do it ? Or i need do it with exim (or postfix) ? Thanks Benoît

4 4

Dovecot IMAPS : Thunderbird SSL cert issue / Evolution OK
by hanasaki＠gmail.com 05 May '20

05 May '20

Recently thunderbird and Dovecot IMAPS cannot agree on SSL however Evolution, on the exact same system, is working fine with the same accounts. Tried recreating the Dovecot cert and also the thunderbird accounts from scratch. The OpenSSL raw client works fine as well. Would someone also confirm the openssl commands to create a selfsigned cert for dovecot imaps. They cert created does work with evolution; just not thunderbird. Thoughts? Apr 8 18:10:18 hh dovecot: imap-login: Debug: SSL error: SSL_accept() failed: error:14094412:SSL routines:ssl3_read_bytes:sslv3 alert bad certificate: SSL alert number 42 Apr 8 18:10:18 hh dovecot: imap-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=000, lip=0000 TLS handshaking: SSL_accept() failed: error:14094412:SSL routines:ssl3_read_bytes:sslv3 alert bad certificate: SSL alert number 42, session=<--> Apr 8 18:10:19 hh dovecot: imap-login: Debug: SSL: where=0x10, ret=1: before SSL initialization Apr 8 18:10:19 hh dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: before SSL initialization Apr 8 18:10:19 hh dovecot: imap-login: Debug: SSL: where=0x2002, ret=-1: before SSL initialization Apr 8 18:10:19 hh dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: before SSL initialization Apr 8 18:10:19 hh dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS read client hello Apr 8 18:10:19 hh dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write server hello Apr 8 18:10:19 hh dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write change cipher spec Apr 8 18:10:19 hh dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: TLSv1.3 write encrypted extensions Apr 8 18:10:19 hh dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write certificate Apr 8 18:10:19 hh dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: TLSv1.3 write server certificate verify Apr 8 18:10:19 hh dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write finished Apr 8 18:10:19 hh dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: TLSv1.3 early data Apr 8 18:10:19 hh dovecot: imap-login: Debug: SSL: where=0x2002, ret=-1: TLSv1.3 early data Apr 8 18:10:19 hh dovecot: imap-login: Debug: SSL: where=0x2002, ret=-1: TLSv1.3 early data Apr 8 18:10:19 hh dovecot: imap-login: Debug: SSL: where=0x2002, ret=-1: TLSv1.3 early data Apr 8 18:10:19 hh dovecot: imap-login: Debug: SSL: where=0x2002, ret=-1: TLSv1.3 early data Apr 8 18:10:19 hh dovecot: imap-login: Debug: SSL alert: where=0x4004, ret=554: fatal bad certificate Apr 8 18:10:19 hh dovecot: imap-login: Debug: SSL: where=0x2002, ret=-1: error Apr 8 18:10:19 hh dovecot: imap-login: Debug: SSL error: SSL_accept() failed: error:14094412:SSL routines:ssl3_read_bytes:sslv3 alert bad certificate: SSL alert number 42 Apr 8 18:10:19 firewall dovecot: imap-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=000, lip=00, TLS handshaking: SSL_accept() failed: error:14094412:SSL routines:ssl3_read_bytes:sslv3 alert bad certificate: SSL alert number 42, session=<---> reference http://forums.debian.net/viewtopic.php?f=5&t=145849

6 12

Is It possbile to convert to DBox or MDBox on a per user basis?
by Asai 04 May '20

04 May '20

Greetings, Is It possbile to convert to DBox or MDBox on a per user basis? If so, can someone point me to the correct documentation? Thank you, -- Asai

2 1

Issue with doveadm backup
by Asai 02 May '20

02 May '20

Greetings, Lately I've been seeing this error pop up when running a nightly cron to a backup share with doveadm: Error: stat(/vmail/domain.tld/user/.dovecot-box-sync.lock/tmp) failed: Not a directory: 1 Time(s) This is the command: doveadm backup -u user(a)domain.tld maildir:backupshare/daily/domain.tld/user Our main vmail directory is on an NFS share and seems to be working fine. This has only occurred recently. Can anyone offer any insights into what this is and fixing it if need be? -- Asai

1 0

Problems during replication
by Francis Augusto Medeiros-Logeay 02 May '20

02 May '20

Hi, I migrated my dovecot instance to a new server. I moved the mail directories, databases, etc. Replication is on, and I keep having these errors: May 02 16:19:45 dsync-local(francis(a)francisaugusto.com): Error: Couldn't lock /var/mail/vmail/francisaugusto.com/francis//.dovecot-sync.lock: fcntl(/var/mail/vmail/francisaugusto.com/francis//.dovecot-sync.lock, write-lock, F_SETLKW) locking failed: Timed out after 30 seconds (WRITE lock held by pid 178) May 02 16:19:45 doveadm: Error: Couldn't lock /var/mail/vmail/medeiros.co/inis//.dovecot-sync.lock: fcntl(/var/mail/vmail/medeiros.co/inis//.dovecot-sync.lock, write-lock, F_SETLKW) locking failed: Timed out after 30 seconds (WRITE lock held by pid 185) See the errors are both from dsync-local and doveadm. Any tips on how to fix this? Best, Francis

1 0

sender rewriting scheme
by Mathieu Gosset 01 May '20

01 May '20

Hello, I would like to know if dovecot/pigeonhole provide a way to do sieve redirection with sender rewriting scheme (srs)? I apologize in advance if that e-mail address isn't meant for assistance, but I've asked on the official irc channel on freenode and was told to direct my query to dovecot(a)dovecot.org, I hope you won't mind. Thanking you in advance Best Regards Mathieu Gosset

2 2

Shared folder replication - query - can it be replicated?
by Daniel Botting 01 May '20

01 May '20

Hi, Further to my earlier posting to the mailing list this morning regarding replicating of public namespaces is it possible that a shared name space can be replicated: https://wiki.dovecot.org/SharedMailboxes/Shared We use LDAP, the thought being that an LDAP service account is created and the corresponding mailbox is shared to other mail users on the server. Kind regards Daniel

1 0

Public folder replication ( not replicating) - roadmap query
by Daniel Botting 01 May '20

01 May '20

Hi, We have a server pair running Dovecot 2.3.10 (latest stable) version directly from repo.dovecot.org and have mailbox and sieve replication working as required in production. I have setup a test pair with the exact same configuration and on each server setup public name space for a mailbox address such as jobs@ where multiple users would need to subscribe to this to view recruitment emails. This is not replicating as per the advice on the below url: - https://wiki.dovecot.org/Replication Is there an easily maintainable workaround at this time and is this on the roadmap for the developers, if so what time scale is being envisaged? Kind regards Daniel

1 0

trying to authenticate postfix against Dovecot 2.3.4.1 passwd-file, using lmtp
by kelly 29 Apr '20

29 Apr '20

Sorry for all the notes; I'm trying to have postfix 3.4.8, trying to authenticate postfix against Dovecot 2.3.4.1 passwd-file, using lmtp. Not sure if I'm failing because of a smtp failure or I'm not getting authenticated by dovecot. main.cf virtual_transport=lmtp:unix:private/dovecot-lmtp _*postfix log*_ connect from unknown[192.168.212.227] Apr 28 13:42:14 mail3 postfix/smtpd[21859]: lost connection after EHLO from unknown[192.168.212.227] Apr 28 13:42:14 mail3 postfix/smtpd[21859]: disconnect from unknown[192.168.212.227] ehlo=2 starttls=1 commands=3 I keep getting smtp timed out, it takes a while, but does time out. _*Using openssl s_client -connect 192.168.0.242:25 -starttls smtp*_ subject=/C=US/ST=CA/L=Fullerton/O=xxxx Law Group/CN=mail.xxxxlawgroup.com/emailAddress=postmaster@xxxxlawgroup.com issuer=/C=US/ST=CA/L=Fullerton/O=xxxx Law Group/CN=mail.xxxxlawgroup.com/emailAddress=postmaster@xxxxlawgroup.com --- No client certificate CA names sent Peer signing digest: SHA512 Server Temp Key: ECDH, P-256, 256 bits --- SSL handshake has read 2717 bytes and written 468 bytes --- New, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES256-GCM-SHA384 Server public key is 4096 bit Secure Renegotiation IS supported Compression: NONE Expansion: NONE No ALPN negotiated SSL-Session: Protocol : TLSv1.2 Cipher : ECDHE-RSA-AES256-GCM-SHA384 Session-ID: 2F32869DCC5511285AA7D99ABAAD34C1E42EB04A7AA704C5EBC801C2625ECB7A Session-ID-ctx: Master-Key: F8D92A918AC14D31B252D981228A0AA3C0BCA379B9D12DD6E795092C8390382DA09D640B2F24AD8F279C13E71DF86434 Key-Arg : None PSK identity: None PSK identity hint: None SRP username: None TLS session ticket lifetime hint: 7200 (seconds) TLS session ticket: 0000 - 89 e1 b7 19 14 7b d6 85-88 cc 8d f0 e0 45 6f 23 .....{.......Eo# 0010 - 34 b7 30 ec 99 39 d9 98-3f 5d 70 b3 f3 fe 0a 13 4.0..9..?]p..... 0020 - 77 3c 2c 20 22 b4 62 71-ec 02 b4 ee 4e 35 78 ef w<, ".bq....N5x. 0030 - f2 2c 7d 01 e3 51 7c 2e-c4 78 65 37 d6 ef 60 32 .,}..Q|..xe7..`2 0040 - f6 62 bc e5 ba fc 82 1b-37 0a de c9 b1 82 99 f5 .b......7....... 0050 - de 6c d5 c1 56 25 5a 2a-27 8d a3 6a 8a bd 37 d8 .l..V%Z*'..j..7. 0060 - 11 65 0d fd 89 c3 e2 86-43 89 9e b9 c2 b7 a4 44 .e......C......D 0070 - dc f3 8b 94 8e 41 37 d3-32 ca 2c 4e 65 6b 1c f9 .....A7.2.,Nek.. 0080 - 04 d0 45 32 8a 2d 67 8d-36 05 23 4a 58 c2 d8 b7 ..E2.-g.6.#JX... 0090 - 65 ba e0 8d 8b 85 9c c2-45 31 78 33 86 d1 bf 1f e.......E1x3.... Start Time: 1588106358 Timeout : 300 (sec) Verify return code: 18 (self signed certificate) --- 250 CHUNKING helo 401 Syntax: HELO hostname helo mail3.xxxxlawgroup.com 250 mail3.xxxxlawgroup.com _*Dovecot Log during client login attempt*_ Apr 28 13:33:17 auth: Debug: Loading modules from directory: /usr/lib/dovecot/modules/auth Apr 28 13:33:17 auth: Debug: Module loaded: /usr/lib/dovecot/modules/auth/lib20_auth_var_expand_crypt.so Apr 28 13:33:17 auth: Debug: Module loaded: /usr/lib/dovecot/modules/auth/libdriver_mysql.so Apr 28 13:33:17 auth: Debug: Module loaded: /usr/lib/dovecot/modules/auth/libdriver_pgsql.so Apr 28 13:33:17 auth: Debug: Read auth token secret from /var/run/dovecot/auth-token-secret.dat Apr 28 13:33:17 auth: Debug: passwd-file /etc/dovecot/users: Read 3 users in 0 secs Apr 28 13:33:17 auth: Debug: auth client connected (pid=21786) Apr 28 13:33:19 auth: Debug: client in: AUTH 1 PLAIN service=imap secured=tls session=w8T7vV+keNHAqNTj lip=192.168.0.242 rip=192.168.212.227 lport=993 rport=53624 ssl_cipher=ECDHE-RSA-AES256-GCM-SHA384 ssl_cipher_bits=256 ssl_pfs=KxECDHE ssl_protocol=TLSv1.2 resp=<hidden> Apr 28 13:33:19 auth-worker(21788): Debug: Loading modules from directory: /usr/lib/dovecot/modules/auth Apr 28 13:33:19 auth-worker(21788): Debug: Module loaded: /usr/lib/dovecot/modules/auth/lib20_auth_var_expand_crypt.so Apr 28 13:33:19 auth-worker(21788): Debug: Module loaded: /usr/lib/dovecot/modules/auth/libdriver_mysql.so Apr 28 13:33:19 auth-worker(21788): Debug: Module loaded: /usr/lib/dovecot/modules/auth/libdriver_pgsql.so Apr 28 13:33:19 auth-worker(21788): Debug: passwd-file /etc/dovecot/users: Read 3 users in 0 secs Apr 28 13:33:19 auth-worker(21788): Debug: pam(user1(a)xxxxlawgroup.com,192.168.212.227,<w8T7vV+keNHAqNTj>): lookup service=dovecot Apr 28 13:33:19 auth-worker(21788): Debug: pam(user1(a)xxxxlawgroup.com,192.168.212.227,<w8T7vV+keNHAqNTj>): #1/1 style=1 msg=Password: Apr 28 13:33:21 auth-worker(21788): Info: pam(user1(a)xxxxlawgroup.com,192.168.212.227,<w8T7vV+keNHAqNTj>): pam_authenticate() failed: Authentication failure (Password mismatch?) Apr 28 13:33:21 auth: Debug: passwd-file(user1(a)xxxxlawgroup.com,192.168.212.227,<w8T7vV+keNHAqNTj>): lookup: user=user1(a)xxxxlawgroup.com file=/etc/dovecot/users Apr 28 13:33:21 auth: Debug: client passdb out: OK 1 user=user1(a)xxxxlawgroup.com Apr 28 13:33:21 auth: Debug: master in: REQUEST 570163201 21786 1 83383e6a14e2c97c394478e56e4e7fd9 session_pid=21789 request_auth_token Apr 28 13:33:21 auth-worker(21788): Debug: passwd(user1(a)xxxxlawgroup.com,192.168.212.227,<w8T7vV+keNHAqNTj>): lookup Apr 28 13:33:21 auth-worker(21788): Info: passwd(user1(a)xxxxlawgroup.com,192.168.212.227,<w8T7vV+keNHAqNTj>): unknown user Apr 28 13:33:21 auth: Debug: passwd-file(user1(a)xxxxlawgroup.com,192.168.212.227,<w8T7vV+keNHAqNTj>): lookup: user=user1(a)xxxxlawgroup.com file=/etc/dovecot/users Apr 28 13:33:21 auth: Debug: master userdb out: USER 570163201 user1(a)xxxxlawgroup.com auth_token=918dceaf840599ad8132ae793a11ab5b9d17bb8c Apr 28 13:33:21 imap-login: Info: Login: user=<user1(a)xxxxlawgroup.com>, method=PLAIN, rip=192.168.212.227, lip=192.168.0.242, mpid=21789, TLS, session=<w8T7vV+keNHAqNTj> Apr 28 13:33:21 imap(user1(a)xxxxlawgroup.com)<21789><w8T7vV+keNHAqNTj>: Debug: Added userdb setting: plugin/=yes Apr 28 13:33:21 imap(user1(a)xxxxlawgroup.com)<21789><w8T7vV+keNHAqNTj>: Debug: Effective uid=1001, gid=1001, home=/srv/vmail/user1(a)xxxxlawgroup.com Apr 28 13:33:21 imap(user1(a)xxxxlawgroup.com)<21789><w8T7vV+keNHAqNTj>: Debug: Home dir not found: /srv/vmail/user1(a)xxxxlawgroup.com Apr 28 13:33:21 imap(user1(a)xxxxlawgroup.com)<21789><w8T7vV+keNHAqNTj>: Debug: Namespace inbox: type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=mbox:~/mail Apr 28 13:33:21 imap(user1(a)xxxxlawgroup.com)<21789><w8T7vV+keNHAqNTj>: Debug: mbox: INBOX defaulted to /srv/vmail/user1(a)xxxxlawgroup.com/mail/inbox Apr 28 13:33:21 imap(user1(a)xxxxlawgroup.com)<21789><w8T7vV+keNHAqNTj>: Debug: fs: root=/srv/vmail/user1(a)xxxxlawgroup.com/mail, index=, indexpvt=, control=, inbox=/srv/vmail/user1(a)xxxxlawgroup.com/mail/inbox, alt= Apr 28 13:33:21 imap(user1(a)xxxxlawgroup.com)<21789><w8T7vV+keNHAqNTj>: Info: Connection closed (IDLE running for 0.001 + waiting input for 0.001 secs, 2 B in + 10+10 B out, state=wait-input) in=11 out=387 deleted=0 expunged=0 trashed=0 hdr_count=0 hdr_bytes=0 body_count=0 body_bytes=0 _*The imap client logon looks to be fine;*_ Apr 27 16:57:02 auth-worker(17516): Debug: pam(user1(a)xxxxlawgroup.com,192.168.212.227,<5oeueE6k4uvAqNTj>): lookup service=dovecot Apr 27 16:57:02 auth-worker(17516): Debug: pam(user1(a)xxxxlawgroup.com,192.168.212.227,<5oeueE6k4uvAqNTj>): #1/1 style=1 msg=Password: Apr 27 16:57:04 auth-worker(17516): Info: pam(user1(a)xxxxlawgroup.com,192.168.212.227,<5oeueE6k4uvAqNTj>): pam_authenticate() failed: Authentication failure (Password mismatch?) Apr 27 16:57:04 auth: Debug: passwd-file(user1(a)xxxxlawgroup.com,192.168.212.227,<5oeueE6k4uvAqNTj>): lookup: user=user1(a)xxxxlawgroup.com file=/etc/dovecot/users Apr 27 16:57:04 auth: Debug: client passdb out: OK 1 user=user1(a)xxxxlawgroup.com Apr 27 16:57:04 auth: Debug: master in: REQUEST 3141009409 17512 1 ee216d7c96d9d2faeb794c94747d479a session_pid=17517 request_auth_token Apr 27 16:57:04 auth-worker(17516): Debug: passwd(user1(a)xxxxlawgroup.com,192.168.212.227,<5oeueE6k4uvAqNTj>): lookup Apr 27 16:57:04 auth-worker(17516): Info: passwd(user1(a)xxxxlawgroup.com,192.168.212.227,<5oeueE6k4uvAqNTj>): unknown user Apr 27 16:57:04 auth: Debug: passwd-file(user1(a)xxxxlawgroup.com,192.168.212.227,<5oeueE6k4uvAqNTj>): lookup: user=user1(a)xxxxlawgroup.com file=/etc/dovecot/users Apr 27 16:57:04 auth: Debug: master userdb out: USER 3141009409 user1(a)xxxxlawgroup.com auth_token=3866c7fac33f25e817f9d95c494a13343942f60d Apr 27 16:57:04 imap-login: Info: Login: user=<user1(a)xxxxlawgroup.com>, method=PLAIN, rip=192.168.212.227, lip=192.168.0.242, mpid=17517, TLS, session=<5oeueE6k4uvAqNTj> Apr 27 16:57:04 imap(user1(a)xxxxlawgroup.com)<17517><5oeueE6k4uvAqNTj>: Debug: Added userdb setting: plugin/=yes Apr 27 16:57:04 imap(user1(a)xxxxlawgroup.com)<17517><5oeueE6k4uvAqNTj>: Debug: Effective uid=1001, gid=1001, home=/srv/vmail/user1(a)xxxxlawgroup.com Apr 27 16:57:04 imap(user1(a)xxxxlawgroup.com)<17517><5oeueE6k4uvAqNTj>: Debug: Home dir not found: /srv/vmail/user1(a)xxxxlawgroup.com Apr 27 16:57:04 imap(user1(a)xxxxlawgroup.com)<17517><5oeueE6k4uvAqNTj>: Debug: Namespace inbox: type=private, prefix=, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=mbox:~/mail Apr 27 16:57:04 imap(user1(a)xxxxlawgroup.com)<17517><5oeueE6k4uvAqNTj>: Debug: mbox: INBOX defaulted to /srv/vmail/user1(a)xxxxlawgroup.com/mail/inbox Apr 27 16:57:04 imap(user1(a)xxxxlawgroup.com)<17517><5oeueE6k4uvAqNTj>: Debug: fs: root=/srv/vmail/user1(a)xxxxlawgroup.com/mail, index=, indexpvt=, control=, inbox=/srv/vmail/user1(a)xxxxlawgroup.com/mail/inbox, alt= _*User test on dovecot*_ _*root@mail3:/etc/dovecot# doveadm user user1(a)xxxxlawgroup.com*_ field value uid vmail gid vmail home /srv/vmail/user1(a)xxxxlawgroup.com mail mbox:~/mail _*root@mail3:/etc/dovecot# doveadm user user2(a)xxxxlawgroup.com*_ field value uid vmail gid vmail home /srv/vmail/user2(a)xxxxlawgroup.com mail mbox:~/mail _*log of test*_ r 28 12:37:53 auth-worker(21333): Debug: passwd(user1(a)xxxxlawgroup.com): lookup Apr 28 12:37:53 auth-worker(21333): Info: passwd(user1(a)xxxxlawgroup.com): unknown user Apr 28 12:37:53 auth: Debug: passwd-file(user1(a)xxxxlawgroup.com): lookup: user=user1(a)xxxxlawgroup.com file=/etc/dovecot/users Apr 28 12:37:53 auth: Debug: userdb out: USER 1 user1(a)xxxxlawgroup.com Apr 28 12:38:04 auth: Debug: master in: USER 1 user2(a)xxxxlawgroup.com service=doveadm debug Apr 28 12:38:04 auth-worker(21333): Debug: passwd(user2(a)xxxxlawgroup.com): lookup Apr 28 12:38:04 auth-worker(21333): Info: passwd(user2(a)xxxxlawgroup.com): unknown user Apr 28 12:38:04 auth: Debug: passwd-file(user2(a)xxxxlawgroup.com): lookup: user=user2(a)xxxxlawgroup.com file=/etc/dovecot/users Apr 28 12:38:04 auth: Debug: userdb out: USER 1 user2(a)xxxxlawgroup.com _*Debian 10.2 Buster*_ _*Dovecot 2.3.4.1 (installed using apt)*_ # 2.3.4.1 (f79e8e7e4): /etc/dovecot/dovecot.conf # Pigeonhole version 0.5.4 () # OS: Linux 4.19.0-6-amd64 x86_64 Debian 10.3 # Hostname: mail3.xxxxlawgroup.com auth_debug = yes auth_mechanisms = plain login auth_verbose = yes debug_log_path = /var/log/dovecot.log disable_plaintext_auth = no info_log_path = /var/log/dovecot.log log_path = /var/log/dovecot.log login_greeting = xxxx xxxxx Dovecot ready. mail_debug = yes mail_gid = vmail mail_home = /srv/vmail/%u mail_location = mbox:~/mail mail_privileged_group = vmail mail_uid = vmail namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = / } passdb { driver = pam } passdb { args = username_format=%u /etc/dovecot/users driver = passwd-file } plugin { sieve = file:~/sieve;active=~/.dovecot.sieve } protocols = " imap lmtp pop3" service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } } service lmtp { unix_listener lmtp { group = postfix mode = 0666 user = postfix } } ssl_cert = </etc/ssl/certs/mail.xxxxlawgroup.com.pem ssl_dh = # hidden, use -P to show it ssl_key = # hidden, use -P to show it userdb { driver = passwd } userdb { args = username_format=%u /etc/dovecot/users driver = passwd-file } verbose_proctitle = yes protocol lmtp { postmaster_address = postmaster(a)xxxxlawgroup.com } _*On the postfix side:*_ *main.cf* *ver 3.4.8* smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU) biff = no append_dot_mydomain = no readme_directory = no compatibility_level = 2 smtpd_tls_cert_file=/etc/ssl/certs/mail.xxxxlawgroup.com.pem smtpd_tls_key_file=/etc/ssl/private/mail.xxxxlawgroup.com.key smtpd_use_tls=yes smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache smtpd_relay_restrictions = permit_mynetworks permit_sasl_authenticated defer_unauth_destination myhostname = mail3.xxxxlawgroup.com myorigin = /etc/mailname mailbox_size_limit = 0 recipient_delimiter = + inet_protocols = all inet_interfaces = 127.0.0.1, 192.168.0.242 mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128 23.120.233.17 192.168.0.0/24 192.168.39.0/24 192.168.14.0/24 192.168.212.0/24 mydestination = localhost smtpd_recipient_restrictions = permit_sasl_autheticated permit_mynetworks reject_unauth_destination relayhost = [192.168.0.253]:587 soft_bounce=yes *virtual_transport=lmtp:unix:private/dovecot-lmtp* *virtual_mailbox_domains = xxxxlawgroup.com* *virtual_mailbox_maps=hash:/etc/postfix/vmail_maps* *virtual_alias_maps=hash:/etc/postfix/virtual* *relay_domains=hash:/etc/postfix/relay_domains* *smtp_sasl_auth_enable=yes* *smtpd_sasl_type=dovecot* *smtpd_sasl_path=private/auth* *queue_directory=/var/spool/postfix* *broken_sasl_auth_clients=yes* *smtp_sasl_password_maps = hash:/etc/postfix/sasl_passwd* debug_peer_level=4 debug_peer_list=192.168.0.242 _*/etc/postfix/sasl_passwd*_ xxxxlawgroup.com username:password _*/etc/postfix/vmail_maps*_ user1(a)xxxxlawgroup.com user1(a)xxxxlawgroup.com user2(a)xxxxlawgroup.com user2(a)xxxxlawgroup.com user3(a)xxxxlawgroup.com user3(a)xxxxlawgroup.com <mailto:user3@xxxxlawgroup.com> _*master.cf*_ smtp inet n - y - - smtpd submission inet n - y - - smtpd -o syslog_name=postfix/submission -o smtpd_tls_security_level=encrypt -o smtpd_sasl_auth_enable=yes -o smtpd_recipient_restrictions=permit_sasl_authenticated,reject -o smtpd_relay_restrictions=permit_sasl_authenticated,reject -o smtpd_sasl_type=dovecot -o smtpd_sasl_path=private/auth -o smtpd_sasl_security_options=noanonymous -o smtpd_sasl_local_domain=$myhostname -o smtpd_client_restrictions=permit_sasl_authenticated,reject -o smtpd_sender_login_maps=/etc/postfix/virtual pickup unix n - y 60 1 pickup cleanup unix n - y - 0 cleanup qmgr unix n - n 300 1 qmgr tlsmgr unix - - y 1000? 1 tlsmgr rewrite unix - - y - - trivial-rewrite bounce unix - - y - 0 bounce defer unix - - y - 0 bounce trace unix - - y - 0 bounce verify unix - - y - 1 verify flush unix n - y 1000? 0 flush proxymap unix - - n - - proxymap proxywrite unix - - n - 1 proxymap smtp unix - - y - - smtp relay unix - - y - - smtp -o syslog_name=postfix/$service_name showq unix n - y - - showq error unix - - y - - error retry unix - - y - - error discard unix - - y - - discard local unix - n n - - local virtual unix - n n - - virtual lmtp unix - - y - - lmtp anvil unix - - y - 1 anvil scache unix - - y - 1 scache postlog unix-dgram n - n - 1 postlogd maildrop unix - n n - - pipe flags=DRhu user=vmail argv=/usr/bin/maildrop -d ${recipient} uucp unix - n n - - pipe flags=Fqhu user=uucp argv=uux -r -n -z -a$sender - $nexthop!rmail ($recipient) ifmail unix - n n - - pipe flags=F user=ftn argv=/usr/lib/ifmail/ifmail -r $nexthop ($recipient) bsmtp unix - n n - - pipe flags=Fq. user=bsmtp argv=/usr/lib/bsmtp/bsmtp -t$nexthop -f$sender $recipient scalemail-backend unix - n n - 2 pipe flags=R user=scalemail argv=/usr/lib/scalemail/bin/scalemail-store ${nexthop} ${user} ${extension} mailman unix - n n - - pipe flags=FR user=list argv=/usr/lib/mailman/bin/postfix-to-mailman.py ${nexthop} ${user} -- Jon Kelly CNE kelly(a)kel-tek.com p 714.894.0130 For service calls, please email service(a)kel-tek.com

2 1

problem with a public folder
by David Mehler 28 Apr '20

28 Apr '20

Hello, I'm trying to set up a public folder called TestFolder. I'm getting this error: #doveadm acl get -A "Public/TestFolder" doveadm(username(a)example.com): Error: Can't open mailbox Public/TestFolder: Mailbox doesn't exist: Public/TestFolder Username ID Global Rights # ls -ld /var/vmail/public drwx------ 4 vmail vmail 512 Apr 15 23:17 public/ # ls -ld public/.TestFolder drwx------ 5 vmail vmail 512 Apr 15 23:20 .TestFolder/ My goal is a public namespace under which I have several folders for internal communications that users can access, TestFolder being an example. Suggestions welcome. Thanks. Dave. #doveconf -n # 2.3.10 (0da0eff44): /usr/local/etc/dovecot/dovecot.conf # Pigeonhole version 0.5.10 (bf8ef1c2) # OS: FreeBSD 12.1-RELEASE-p3 amd64 # Hostname: mail.example.com auth_cache_size = 10 M auth_default_realm = example.com auth_mechanisms = plain login auth_realms = example.com dict { lastlogin = mysql:/usr/local/etc/dovecot/dovecot-last-login.conf } first_valid_gid = 2100 first_valid_uid = 2100 hostname = mail.example.com imap_client_workarounds = delay-newmail tb-extra-mailbox-sep tb-lsub-flags imap_idle_notify_interval = 1 mins last_valid_gid = 2100 last_valid_uid = 2100 lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes lda_original_recipient_header = X-Original-To listen = xxx.xxx.xxx.xxx lmtp_rcpt_check_quota = yes log_timestamp = "%Y-%m-%d %H:%M:%S " mail_access_groups = vmail mail_fsync = never mail_gid = vmail mail_home = /var/vmail/mailboxes/%d/%n mail_location = dbox:~/mail mail_plugins = acl fts fts_lucene mail_log notify quota trash virtual welcome zlib mail_crypt mail_privileged_group = vmail mail_server_admin = mailto:postmaster@example.com mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext spamtest spamtestplus virustest editheader imapflags notify imapsieve vnd.dovecot.imapsieve namespace { location = sdbox:/var/vmail/public/:CONTROL=~/mail/public:INDEX=~/mail/public:INDEXPVT=~/mail/public prefix = Public/ separator = / subscriptions = yes type = public } namespace { hidden = no list = yes location = maildir:/var/vmail/shared/office/.Maildir:CONTROL=~/.Maildir/control/office:INDEX=~/.Maildir/index/office prefix = shared/%%u/ separator = / subscriptions = yes type = shared } namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Spam { auto = subscribe autoexpunge = 30 days special_use = \Junk } mailbox Trash { auto = subscribe autoexpunge = 30 days special_use = \Trash } prefix = separator = / type = private } passdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { acl = vfile:/usr/local/etc/dovecot/global-acls:cache_secs=300 acl_anyone = allow fts = lucene fts_autoindex = yes fts_autoindex_exclude = \Junk fts_autoindex_exclude2 = \Trash fts_autoindex_exclude3 = \Spam fts_autoindex_max_recent_msgs = 80 fts_index_timeout = 90 fts_lucene = whitespace_chars=@. normalize no_snowball imapsieve_mailbox1_before = file:/usr/local/lib/dovecot/sieve/report-spam.sieve imapsieve_mailbox1_causes = COPY imapsieve_mailbox1_name = Spam imapsieve_mailbox2_before = file:/usr/local/lib/dovecot/sieve/report-ham.sieve imapsieve_mailbox2_causes = COPY imapsieve_mailbox2_from = Spam imapsieve_mailbox2_name = * last_login_dict = proxy::lastlogin last_login_key = # hidden, use -P to show it mail_crypt_curve = prime256v1 mail_crypt_global_private_key = # hidden, use -P to show it mail_crypt_global_public_key = # hidden, use -P to show it mail_crypt_save_version = 2 mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size quota = count:User quota quota_exceeded_message = Storage quota for this account has been exceeded, please try again later. quota_grace = 10%% quota_rule2 = Trash:ignore quota_status_nouser = DUNNO quota_status_overquota = 552 5.2.2 Mailbox is full quota_status_success = DUNNO quota_vsizes = true quota_warning = storage=100%% quota-exceeded 100 %u quota_warning2 = storage=95%% quota-warning 95 %u quota_warning3 = storage=90%% quota-warning 90 %u quota_warning4 = storage=85%% quota-warning 85 %u quota_warning5 = storage=75%% quota-warning 75 %u sieve = file:/var/vmail/sieve/%d/%n/scripts;active=/var/vmail/sieve/%d/%n/active-script.sieve sieve_before = /var/vmail/sieve/global/spam-global.sieve sieve_extensions = +notify +imapflags +spamtest +spamtestplus +virustest +editheader sieve_global_extensions = +vnd.dovecot.pipe +vnd.dovecot.execute +vnd.dovecot.environment sieve_max_redirects = 30 sieve_max_script_size = 1M sieve_pipe_bin_dir = /usr/local/lib/dovecot/sieve sieve_plugins = sieve_imapsieve sieve_extprograms sieve_spamtest_max_header = X-Spamd-Result: default: [[:alnum:]]+ \[-?[[:digit:]]+\.[[:digit:]]+ / (-?[[:digit:]]+\.[[:digit:]]+)\] sieve_spamtest_status_header = X-Spamd-Result: default: [[:alnum:]]+ \[(-?[[:digit:]]+\.[[:digit:]]+) / -?[[:digit:]]+\.[[:digit:]]+\] sieve_spamtest_status_type = score sieve_user_log = /var/vmail/sieve/sieve_error.log sieve_virustest_status_header = X-Virus-Scan: Found to be (.+)\. sieve_virustest_status_type = text sieve_virustest_text_value1 = clean sieve_virustest_text_value5 = infected trash = /usr/local/etc/dovecot/trash.conf welcome_script = welcome %n postmaster@%d welcome_wait = yes } postmaster_address = postmaster(a)example.com protocols = imap lmtp sieve sendmail_path = /usr/local/sbin/sendmail service auth-worker { user = vmail } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = vmail mode = 0666 user = vmail } } service dict { unix_listener dict { mode = 0600 user = vmail } user = root } service imap-login { inet_listener imap { port = 143 } process_min_avail = 1 } service imap { executable = imap } service lmtp { executable = lmtp unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0660 user = postfix } } service managesieve-login { inet_listener sieve { address = 172.16.21.3 port = 4190 } } service quota-status { client_limit = 1 executable = quota-status -p postfix unix_listener /var/spool/postfix/private/dovecot-quota { group = postfix mode = 0660 user = postfix } } service quota-warning { executable = script /usr/local/etc/dovecot/quota-warning.sh unix_listener quota-warning { group = vmail mode = 0660 user = vmail } user = vmail } service stats { unix_listener stats-reader { group = vmail mode = 0660 user = vmail } unix_listener stats-writer { group = vmail mode = 0660 user = vmail } } service welcome { executable = script /usr/local/etc/dovecot/welcome.sh unix_listener welcome { user = vmail } user = vmail } ssl = required ssl_cert = </usr/local/etc/ssl/acme.sh/example.com/fullchain.crt ssl_cipher_list = EECDH+AESGCM:EDH+AESGCM ssl_curve_list = P-256 ssl_dh = # hidden, use -P to show it ssl_key = # hidden, use -P to show it ssl_min_protocol = TLSv1.2 ssl_options = no_ticket ssl_prefer_server_ciphers = yes userdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lmtp { mail_fsync = optimized mail_plugins = acl fts fts_lucene mail_log notify quota trash virtual welcome zlib mail_crypt sieve } protocol lda { mail_fsync = optimized mail_plugins = acl fts fts_lucene mail_log notify quota trash virtual welcome zlib mail_crypt sieve } protocol imap { mail_max_userip_connections = 20 mail_plugins = acl fts fts_lucene mail_log notify quota trash virtual welcome zlib mail_crypt imap_acl imap_quota imap_sieve imap_zlib last_login quota welcome } protocol sieve { info_log_path = /var/log/dovecot/dovecot-sieve.log log_path = /var/log/dovecot/dovecot-sieve-errors.log } mail_home = /var/vmail/mailboxes/%d/%n mail_location = dbox:~/mail

5 9

Header search on Dovecot with SOLR
by Ricardo Machini Barbosa 28 Apr '20

28 Apr '20

Hello, I am using dovecot 2.3.0 with FTS Solr 7.7.2. I started having problems where the solr stopped working, I came to the conclusion that when a specific user is accessing his email, the queries made on SOLR are dropping this service. Apr 28 11:03:59 Error: imap(tullio(a)dominio.com.br)<125772><fdHRQlqkupe6zZkj>: fts_solr: Lookup failed: Request timed out (Request queued 180.186 secs ago, 2 times retried, 3 send attempts in 180.185 secs, 60.062 in last attempt, 60.063 in http ioloop, 0.000 in other ioloops, connected 60.062 secs ago) Analyzing the solr logs, we got an example query: http://127.0.0.1:8983/solr/dovecot/select?wt=xml&fl=uid,score&rows=15824&sor t=uid+asc&q=%7b!lucene+q.op%3dAND%7dhdr:%3ceyJlX21faWQiOjE1ODUxMiwidF9pZCI6O DUxMCwiZV9jX2lkIjoxLCJjX3BfdF9pZCI6MywiY19pZCI6MzQ4MzIzMDUsImVfaWQiOjg3NjYwL CJlX3RfaWQiOjYsInRzIjoiMjAyMC0wNC0yNCAxOTozMjoxMS4wIn0%3d(a)edrone.me%3e&fq=%2 Bbox:8ba9c7227a37835cbaf20100b047fe86+%2Buser:tullio@dominio.com.br What I could see is that this query in question was a search in the headers and not in the body. Should this query type go through FTS Solr? Reading the documentation I understand that the standard behavior is that header searches are made by dovecot and only bodies searches are made by Solr. I saw about a recent option called fts_enforced, where it is possible to forward header searches to FTS, but I am not using this option. I would like to know if my understanding is incorrect or if there is some kind of problem with dovecot? Regards, Ricardo

1 0

Dovecot LDAP/AD with exim as mta
by Benoît PELISSIER 28 Apr '20

28 Apr '20

Hi, I have done configuration dovecot/exim/samba4ad. I use dovecot-lda not exim to deliver mail. And dovecot to authentify users. I have users with mail address on AD. When i sent mail to user mail address, its working. I have distribution group or group with mail address on AD and users as member of this groups. But when i send mail to group mail address, its not working Dovecot-lda can do it ? Or i need do it with exim (or postfix) ? Thanks Benoît

1 0

Quota calculation with MySQL backend and replication.
by Reio Remma 27 Apr '20

27 Apr '20

Hello! Over the weekend I converted our Dovecot server from Maildir quota to MySQL backed quota and then provisioned a fresh replica server and seeded it via Dovecot replication. This morning most mailboxes were over quota, reporting twice the actual usage. I'm fairly certain it's the effect of having sql backed quota with both Dovecot servers using the same database. Can anyone tell me if this is a one-off problem stemming from replicating the 2nd server from scratch or should I be aware of other quirks concerning sql backed quota and replication? Thanks a bunch! Reio

2 4

Hierarchy separator recommendation?
by Admin Beckspaced 27 Apr '20

27 Apr '20

Dear dovecot list, I'm using Maildir as mailbox format. Is there any recommendation for the namespace hierarchy separator? Currently I didn't set any. So it is the default of dot '.' I'm switiching from a rather unknown IMAP Server called DBMail (http://www.dbmail.org/) Planning to synchronize the mailboxes via imapsync (https://github.com/imapsync/imapsync) Is there anything I should be thinking / planning about? Or can i always change this namespace hierarchy separator later on? Any hints or insights are more than welcome ;) thanks & greetings Becki

7 14

User's mail encryption with mail-crypt-plugin
by André Rodier 26 Apr '20

26 Apr '20

Hello, I have a question about the "mail-crypt-plugin". If each user is having its own mail encryption key, is there a way to encrypt the key with the user password, and to decrypt it when the user logs in? I want to, if this is possible, to prevent any user, even root, to access another user's emails. Thanks, André

1 1

Creating folders
by Andrei Petru Mura 25 Apr '20

25 Apr '20

Hi, I managed to install dovecot 2.2.36 along postfix, with virtual users. When I send mails from my thunderbird client a Sent folder is created, which is mirrored on server by Maildir/cur/.Sent. If I try to create other directories the same thing happenes, adding to the created folder name . prefix. For example, created a_folder would be found on server under Maildir/cur/.b_dir. If I remove the client from thunderbird (with cached data) and reconfigure it, this folders are no longer available. How can I make them be available? Indication for right documentation pages is much appreciated. Thanks, Mura Andrei

2 5

error service quota-status
by Admin Beckspaced 25 Apr '20

25 Apr '20

dear dovecot users, trying to setup this quota-status thingy in dovecot so postfix can query the quota on the mailbox via following in main.cf smtpd_recipient_restrictions = ... check_policy_service inet:127.0.0.1:12340 I got this in my dovecot config service quota-status { client_limit = 1 executable = quota-status -p postfix inet_listener { port = 12340 } } plugin { ... quota_status_nouser = DUNNO quota_status_overquota = 552 5.2.2 Mailbox is over quota / Mailbox ist voll quota_status_success = DUNNO ... } but whenever I try I get this error: Apr 24 20:04:32 cx20 dovecot[7236]: quota-status(beckidouche(a)domain.com)<7290><qQpiJzAqo156HAAAct2Jzg>: Error: quota check failed: Failed to get quota resource STORAGE_BYTES for INBOX: quota-dict: dict_lookup(priv/quota/storage) failed: net_connect_unix(/var/run/dovecot/dict) failed: Permission denied (euid=303(vmail) egid=303(vmail) missing +r perm: /var/run/dovecot/dict, we're not in group 489(dovecot), dir owned by 0:0 mode=0755) (reply took 0.000 secs (0.000 in dict wait, 0.000 in other ioloops, 0.000 in locks)) what am I missing here? perhaps too many hours in front of the screen today already ;) thanks a lot for your time & help greetings Becki /* ==================================================================================================================================== */ cx20: # doveconf -n # 2.3.3 (dcead646b): /etc/dovecot/dovecot.conf # Pigeonhole version 0.5.3 (f018bbab) # OS: Linux 4.12.14-lp151.28.48-default x86_64 ext4 # Hostname: cx20.domain.com auth_debug = yes auth_debug_passwords = yes auth_mechanisms = plain login cram-md5 apop auth_verbose = yes auth_verbose_passwords = yes dict { quota = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext } first_valid_uid = 300 mail_debug = yes mail_gid = vmail mail_home = /srv/maildirs/%d/%n mail_location = maildir:/srv/maildirs/%d/%n mail_plugins = " quota" mail_privileged_group = vmail mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = separator = / type = private } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { quota = dict:User quota::proxy::quota quota_grace = 10%% quota_rule = *:bytes=102400000 quota_rule2 = Trash:storage=+100M quota_status_nouser = DUNNO quota_status_overquota = 552 5.2.2 Mailbox is over quota / Mailbox ist voll quota_status_success = DUNNO quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u sieve = file:~/sieve;active=~/.dovecot.sieve } protocols = imap pop3 lmtp sieve service auth { unix_listener auth-userdb { mode = 0777 } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0666 user = postfix } } service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 ssl = yes } } service quota-status { client_limit = 1 executable = quota-status -p postfix inet_listener { port = 10042 } } service quota-warning { executable = script /usr/local/bin/quota-warning.sh unix_listener quota-warning { group = vmail mode = 0660 user = vmail } user = vmail } ssl_cert = </etc/dehydrated/certs/webmail.domain.com/fullchain.pem ssl_cipher_list = ALL:!aNULL:!eNULL:!EXPORT:!DES:!3DES:!MD5:!PSK:!RC4:!ADH:!LOW@STRENGTH ssl_dh = # hidden, use -P to show it ssl_key = # hidden, use -P to show it ssl_options = no_compression ssl_prefer_server_ciphers = yes userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } verbose_proctitle = yes protocol imap { mail_plugins = " quota imap_quota" } /* ==================================================================================================================================== */

2 2

replication newbie: some beginner questions
by Stefan G. Weichinger 25 Apr '20

25 Apr '20

At a customer we run dovecot-2.3.10 along with postfix and mariadb, using postfixadmin as GUI. Now I plan to migrate to a new hardware (bigger machine) and in the same step to migrate from Gentoo Linux to Debian Linux. So I think about how to get the mailboxes from A to B. We use one UID afaik: mail_home = /home/vmail/%d/%u mail_location = maildir:~ I read about dsync and wonder: * does it make sense in this case to set up replication and let the servers replicate at first while still running on the old server? * do I have advantages over doing some rsync-jobs? * I somewhere read about not being able to sync sieve-scripts below the maildirs? We have: plugin { sieve = /home/vmail/%d/%u/sieve/.dovecot.sieve sieve_before = /etc/dovecot/sieve/global/default.sieve sieve_dir = /home/vmail/%d/%u/sieve/scripts/ sieve_extensions = +imapflags } * would the replication sync over all the existing mails/mailboxes or only the ones created *after* starting the replication? Stupid question maybe, but I just want to be sure before I screw up the installation. - sure, backups backups all the way ;-) thanks for any feedback on this! Stefan

5 13

IMAP ghost login
by Jos Chrispijn 25 Apr '20

25 Apr '20

Would it be possible to generate a user list that Dovecot permits to fetch mail from? Thanks, Joz

1 0

Dovecot Load balancing - Please Please Please help me
by Kishore Potnuru 24 Apr '20

24 Apr '20

I need your help on my issue very badly. I have the dovecot version 2.0.9 installed on RHEL linux 6.10 version. It's a single Live server. I need to add a load balancer by adding another server for resilience. I cannot upgrade the dovecot version at this time as it is a single live server. If something goes wrong, I will be in trouble. Basically the requirement/issue is: a) it's a single live dovecot POP3/IMAP server b) people are accessing their emails from microsoft outlook (by giving the same server name as IMAP and SMTP server). But more than 100000 emails will be travelled/routed. c) This server is not rebooted from couple of years. d) Now they are worried about, just in case if the server is having any issues during the reboot or if something goes wrong with the server in any case, there will be huge issues. e) They would like to create resilience by adding another server and emails will be travelled from both the servers. If one server is having any issues due to any technical issue and if it doesn't come back easily, then the emails will be travelled through the other server and there will no disturbance to the emails. atleast it travels from the other server. I have very less knowledge on this. Could you please help me providing the best solution for this. I will wait for your reply. Please please please help me. Thanks, Kishore Potnuru

4 8

Batching quota clone updates
by micah anderson 23 Apr '20

23 Apr '20

Hi, I like the quota count+clone configuration. However, I'm wondering if the cloning process could batch its updates into chunks, or spread them out over time? The clone updates happen whenever the quota is updated, typically this is fine, but when a tsunami of spam comes resulting in delivery to every user on the system, then can be quite overwhelming for a sql server to do an update for every user. Thanks! -- micah

1 0

Help with Shared Mailboxes
by Alan Stevens 23 Apr '20

23 Apr '20

dovecot version = 2.2..27 I have a running debian server ( jessie-backports ) supporting email for three different domains. It is working fine. My boss has asked me to look into using Shared folders/mailboxes - for instance, he wants selected users of Domain-A to be able to see the shared Inbox of the user "support" who is also in Domain-A. Sorry if my questions are basic, but here goes:- 1. Can I simply change the relevant dovecot configuration files and introduce Shared mailboxes into an already running system? Very basically, add the imap-acl plugin, the shared namespace, the dict file and restart dovecot? 2. If I can do this, would it wipe out the tens of thousands of existing emails I have on the system now? i.e. Does Sharing have to be introduced when new email server is being brought up? Can it be added on-the-fly to my working server? Would the emails in /var/mail/vmail/Domain-A/alan/mail seemlessly populate /var/mail/vmail/Domain-A/Shared/alan/mail after making such changes? 3. If adding the Sharing to my running system is possible, can I add it on only one of my three domains? I have a test domain with one user. My principle domain ( Domain-A ) has many users, and as I stated previously, very very many stored emails. Emails I absolutely cannot afford to lose. Any insights are appreciated. Alan Stevens ---||--- alanrstevens(a)yahoo.com https://www.linkedin.com/in/alanrstevens

1 0

Testing COI
by lists＠mlserv.org 23 Apr '20

23 Apr '20

Hi, I am playing around with the COI plugin and try to get things working. I followed the Dovecot docs and also got the source from Github (dovecot/coi). I have compiled and installed coi successfully. IMAP seems to be fine, but LMTP has some errors in the logs, so I removed imap_coi for the moment: Apr 23 17:05:16 mx dovecot: lmtp(10752): Fatal: Couldn't load required plugin /usr/lib64/dovecot/lib11_imap_coi_plugin.so: dlopen() failed: /usr/lib64/dovecot/lib11_imap_coi_plugin.so: undefined symbol: client_add_capability I am running Dovecot 2.3.10 and coi at the same version. Am I missing something here? Thanks in advance Christian -- Rößner-Network-Solutions Karl-Bröger-Str. 10, 36304 Alsfeld Fax: +49 6631 78823409, Mobil: +49 171 9905345 USt-IdNr.: DE225643613, https://roessner.website PGP fingerprint: 658D 1342 B762 F484 2DDF 1E88 38A5 4346 D727 94E5

2 2

Re-to-archived-thread: Dict issue with PostgreSQL for last_login plugin (duplicate key)
by lists＠mlserv.org 23 Apr '20

23 Apr '20

Hi, I have tried to implement last_login with PostgreSQL and I found an old thread from June 2019. I have found a simple solution that I want to share with you: I followed the instructions on how to set up a last_login on the official documentation. Therefor I creates a very simple table having userid and last_login fields. Added plugin and dict information. I received the duplicate key errors and I did this trick for now, which seems to solve this issue: CREATE OR REPLACE RULE insert_to_update AS ON INSERT TO users WHERE EXISTS (SELECT userid FROM users WHERE userid = NEW.userid) DO INSTEAD UPDATE users SET last_login = NEW.last_login WHERE userid = NEW.userid With this rule in place, INSERTs are changed to UPDATEs, if a userid entry already exists. No ned to patch code. Feel free to comment :-) Christian Thread online: https://www.dovecot.org/list/dovecot/2019-May/115921.html -- Rößner-Network-Solutions Karl-Bröger-Str. 10, 36304 Alsfeld Fax: +49 6631 78823409, Mobil: +49 171 9905345 USt-IdNr.: DE225643613, https://roessner.website PGP fingerprint: 658D 1342 B762 F484 2DDF 1E88 38A5 4346 D727 94E5

1 0

Recommendations on intrusion prevention/detection?
by Johannes Rohr 23 Apr '20

23 Apr '20

Dear all, what are the key strategies for intrusion prevention and detection with dovecot, apart from installing fail2ban? It is a pity that the IMAP protocol does not support 2 factor authentication, which seems to stop 90% of intrusion attempts in their tracks. Without it, if someone has obtained your password and reads your mail without modifying it, you will hardly ever notice. Is there a reasonable way of detecting and preventing logins from unusual IP ranges? Or are there other strategies you would recommend? Cheers, Johannes

10 13

Dovecot and thunderbird authentication issue?
by David Mehler 23 Apr '20

23 Apr '20

Hello, I'm using Dovecot 2.2, Postfix 3.5, and am atempting to get the latest version of Thunderbird to work. I tried account autoconfig which did not work, so I had to manually enter information and correct other information. On my server dovecot supports plane and login authentication methods but only over starttls i've got a letsencrypt certificate. My thunderbird configuration looks good, right hosts for incoming and outgoing mail, right ports, 143 starttls, and 587 smtp submission, and thunderbird has the authentication method set for normal password. This I interpreted to mean thunderbird is going to starttls then send the username and password. Thunderbird is giving me this error: imap server does not support the selected authentication method I realize this is vague, any suggestions? Thanks. Dave.

2 2

sieve question
by mj 23 Apr '20

23 Apr '20

Hi, We are trying to auto-reply to emails that still use one of our old domains. To do this, I have setup a catch-all mailbox for anything sent to that old domain using postfix virtual: @old.domain.com catch-all(a)new.domain.com Then I defined a sieve script for catch-all(a)new.domain.com, like: > require ["vacation"]; > if allof ( not exists ["list-help", "list-unsubscribe", "list-subscribe", "list-owner", "list-post", "list-archive", "list-id", "Mailing-List"] ) > > { vacation text: > This message is sent automatically, and your message has NOT been read nor forwarded. > > Please update your addressbooks! > > All the best! :-) > . > ; > } However, sieve never sends any auto-reply, because it logs: > discarding vacation response for implicitly delivered message; no > known (envelope) recipient address found in message headers > (recipient=<catch-all(a)new.domain.com>, and no additional `:addresses' > are specified) I have googled this, but adding :addresses in this case will not work, as we are trying to answer (basically) emails sent to any email addresses sent to that domain, and thus I cannot define specific :addresses Can anyone suggest what to do here? Thanks and stay healthy! MJ

5 11

Still interested in SMTPUTF8 support
by David Bürgin 22 Apr '20

22 Apr '20

I haven’t seen this term on the mailing list for a while. I don’t know if you’re tracking this somewhere, in any case I’m curious if you are still planning to add support for SMTPUTF8. Cheers,

2 1

Dovecot 2.3.10 fails to start due to missing dependency
by Jacob Shea 21 Apr '20

21 Apr '20

Greetings, I installed Dovecot 2.3.10 on my Centos 7.7.1908 server, however it fails startup. This is a fresh/default install, meaning all the configs are default, downloaded from the dovecot.repo. Here is my PasteBin: https://pastebin.com/376UQFLs ### Error Log, copied from Journalctl print out ### Apr 20 21:10:01 server101 systemd[1]: Started Session 955 of user root. Apr 20 21:10:01 server101 CROND[8057]: (root) CMD (/usr/lib64/sa/sa1 1 1) Apr 20 21:10:18 server101 polkitd[1293]: Registered Authentication Agent for unix-process:8065:44125203 (system bus name :1.2058 [/usr/bin/pkttyagent --notify-fd 5 --fallback], object path /org/freedesktop/Polic Apr 20 21:10:18 server101 systemd[1]: Starting One-time Dovecot init service... Apr 20 21:10:18 server101 systemd[1]: dovecot-init.service: main process exited, code=exited, status=2/INVALIDARGUMENT Apr 20 21:10:18 server101 systemd[1]: Failed to start One-time Dovecot init service. Apr 20 21:10:18 server101 systemd[1]: Dependency failed for Dovecot IMAP/POP3 email server. Apr 20 21:10:18 server101 systemd[1]: Job dovecot.service/start failed with result 'dependency'. Apr 20 21:10:18 server101 systemd[1]: Unit dovecot-init.service entered failed state. Apr 20 21:10:18 server101 systemd[1]: dovecot-init.service failed. Apr 20 21:10:18 server101 polkitd[1293]: Unregistered Authentication Agent for unix-process:8065:44125203 (system bus name :1.2058, object path /org/freedesktop/PolicyKit1/AuthenticationAgent, locale en_US.UTF-8 lines 6106-6158/6158 (END) ### Linux Server Version ### [root@server101 log]# cat /etc/centos-release CentOS Linux release 7.7.1908 (Core) ### Dovecot Version ### Installed Packages Name : dovecot Arch : x86_64 Epoch : 2 Version : 2.3.10 Release : 2 Size : 15 M Repo : installed From repo : dovecot-2.3-latest Summary : Secure imap and pop3 server URL : http://www.dovecot.org/ License : MIT and LGPLv2 Description : Dovecot is an IMAP server for Linux/UNIX-like systems, written with security : primarily in mind. It also contains a small POP3 server. It supports mail : in either of maildir or mbox formats. : : The SQL drivers and authentication plug-ins are in their subpackages. ---- Any help or suggestions are appreciated. Sincerely, Jacob S.

2 4

Unicode in mail addresses
by Jasper Michalke 21 Apr '20

21 Apr '20

Dear Dovecot people, I have a question concering Unicode support: Does Dovecot support Unicode characters in both parts of the mail address? E.g. dфҿ@.tld Thank you for any reply, The one with the braid | Der mit dem Zopf

1 0

Doc pointer request
by David Favor 18 Apr '20

18 Apr '20

At one point seems like I found a write up in the Dovecot docs about having Dovecot directly listen on port 25 using Opportunistic TLS along with port 587 authentication, so only Dovecot was required to handle incoming email. Said another way, no requirement for Sendmail, or Postfix or EXIM. Just straight up Dovecot. If I'm remembering correctly, someone point me to the correct docs for this setup. Thanks!

4 4