- dovecot - dovecot.org

Dovecot index compatibility
by Frido Otten 10 Apr '19

10 Apr '19

We're in the process of upgrading Dovecot from version 2.1.17 to 2.2.27 (package Debian Stretch). We have a shared NFS storage in use by multiple servers without Dovecot director. I've tested by connecting to IMAP on the new server to my own mailbox. This isn't a problem. But when the server with the Dovecot version 2.1.17 LDA drops a new message in my mailbox it thinks the index file is corrupted, and the message bounces to it's sender. So there must be a index compatibility issue between both versions. This is still no problem if I upgrade the entire platform in a maintenance window at once. But what I want is a rollback possibility. To which minimal Dovecot version should I upgrade the old platform to create this rollback possibility. I was looking for a table of dovecot index compatibility between the different versions (forward and backward), but couldn't find it. Is there any? Please advice. Best regards, Frido

1 0

dict: Error: Fatal error in defaults handling. Program aborted
by Hugo Manuel Ojendiz Lemus 10 Apr '19

10 Apr '19

Good day to everyone Currently, I'm trying to implement the sieve "vacation" plugin with the sieve "Extdata" plugin to lookup information from a MySQL remote server. I'm following the instructions in the documentation: https://wiki2.dovecot.org/Pigeonhole/Sieve/Plugins/Extdata ===== I have the following error === Apr 09 13:46:51 mail dovecot[5512]: dict: Error: Fatal error in defaults handling. Program aborted Apr 09 13:46:51 mail dovecot[5512]: lmtp(usrx(a)themail.com)<5539><PNwlBJvorFyjFQAAYWwSRA:2>: Warning: sieve: before: line 18: extdata: failed to lookup value `reply_enabled': Connection closed (reply took 0.016 secs (0.017 in dict wait, 0.000 in other ioloops, 0.000 in locks, async-id reply 0.001 secs ago)) Apr 09 13:46:51 mail dovecot[5512]: dict: Fatal: master: service(dict): child 5542 killed with signal 11 (core dumps disabled - https://dovecot.org/bugreport.html#coredumps) Apr 09 13:46:51 mail.halmex.com.mx dovecot[5512]: dict: Error: Fatal error in defaults handling. Program aborted ============================ ====== Dovecot Information ====== 2.3.5.1 (7ec6d0ade): /etc/dovecot/dovecot.conf # Pigeonhole version 0.5.5 (2483b085) # OS: Linux 3.10.0-514.16.1.el7.x86_64 x86_64 CentOS Linux release 7.3.1611 (Core) xfs doveconf: Warning: please set ssl_dh=</etc/dovecot/dh.pem doveconf: Warning: You can generate it with: dd if=/var/lib/dovecot/ssl-parameters.dat bs=1 skip=88 | openssl dhparam -inform der > /etc/dovecot/dh.pem dict { sieve = mysql:/etc/dovecot/pigeonhole-sieve.dict } log_timestamp = "%Y-%m-%d %H:%M:%S " mail_location = maildir:/var/vmail/%d/%Ln managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext namespace inbox { inbox = yes location = prefix = separator = . type = private } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { pop3_migration_mailbox = imapc: sieve_extdata_dict_uri = proxy::sieve sieve_global_extensions = +vnd.dovecot.extdata sieve_plugins = sieve_extdata sieve_vacation_send_from_recipient = yes sieve_before = /var/lib/dovecot/before.sieve } pop3c_host = mail.halmex.com.mx service auth-worker { user = root } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-master { mode = 0600 user = vmail } user = root } service dict { unix_listener dict { group = vmail mode = 0600 user = vmail } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } userdb { args = uid=5000 gid=5000 home=/var/vmail/%d/%Ln allow_all_users=yes driver = static } protocol pop3 { disable_plaintext_auth = no } protocol doveadm { mail_plugins = " pop3_migration" } protocol lmtp { mail_plugins = " sieve" } ============================ An important bit of information it's that the dict service was trying to read the /etc/my.cnf file, but SELinux prevent it, and the sieve script worked fine, once I solved the SELinux access problem, the errors began to appear. This is a postfix server working great for years, with a local MariaDB. The remote MySQL server its in the same LAN and Its reachable by the mail server and other servers, the account has access, and like Ive mention, before I gave access to the local /etc/my.cnf the sieve script worked fine (just the SELinux warnings). Looks like the dict service has problems with the local MariaDB configuration file, but in this scenario its not required Any information or help you can provide me would be greatly appreciated. Hugo Manuel Ojendiz Lemus Desarrollo | Recursos Humanos | HALMEX ((°J°))

2 1

Where to report (potential) Dovecot bugs
by Mark Moseley 10 Apr '19

10 Apr '19

I'm curious if this is still the right place to report potential bugs with Dovecot. Is there a Dovecot bug tracker somewhere?

2 2

LMTP, PAM session and home directory autocreating
by Ivars Strazdins 09 Apr '19

09 Apr '19

Hi, mail is delivered by Dovecot's lmtp locally and I need user's home directory to be created if it doesn't exist yet. There is a setting in Dovecot's configuration, "session=yes", in /etc/Dovecot/conf.d/auth-system.conf.ext, which should do that. passdb { driver = pam args = session=yes dovecot } But I think it does not work in my setup because I do not see any PAM log entry for Dovecot when this error happens: Apr 9 13:01:55 mailhost dovecot: lmtp(2935): Connect from local Apr 9 13:01:55 mailhost dovecot: lmtp(2935, testuser): Error: User initialization failed: Namespace '': mkdir(/home/testuser/Maildir) failed: Permission denied (euid=174000327(testuser) egid=174000327(testuser ) missing +w perm: /home, dir owned by 0:0 mode=0755) Apr 9 13:01:55 mailhost dovecot: lmtp(2935): Disconnect from local: Successful quit The error above seems expected, because it is not lmtp agent's job to create user's home directory but pam_oddjob_mkhomedir.so module should do that. Right? And there are log entries every PAM user session: Apr 9 13:24:42 mailhost auth: pam_sss(dovecot:auth): authentication success; logname= uid=0 euid=0 tty=dovecot ruser=validuser rhost=::1 user= validuser Apr 9 13:24:42 mailhost auth: pam_unix(dovecot:session): session opened for user validuser by (uid=0) Apr 9 13:24:42 mailhost auth: pam_unix(dovecot:session): session closed for user validuser I ask for help how to debug this problem and find out why Dovecot does not open PAM session or - if I am wrong and it does, then what else is going wrong. Home directory autocreation is configured with command "authconfig --enablemkhomedir --update" and it works if user logs into system manually. I tried to enable "mail_debug" in Dovecot's settings, but it did not give me any more information on PAM session. Running on Centos 7.6, with Dovecot 2.2.36. I sort of remember this was working 2 years ago when I enabled "session=yes" but something has changed along the way with all the Centos updates. Thank you very much in advance for your time. Ivars /etc/pam.d/dovecot #%PAM-1.0 auth required pam_nologin.so auth include password-auth account include password-auth session include password-auth /etc/pam.d/password-auth #%PAM-1.0 # This file is auto-generated. # User changes will be destroyed the next time authconfig is run. auth required pam_env.so auth [default=1 success=ok] pam_localuser.so auth [success=done ignore=ignore default=die] pam_unix.so nullok try_first_pass auth requisite pam_succeed_if.so uid >= 1000 quiet_success auth sufficient pam_sss.so forward_pass auth required pam_deny.so account required pam_unix.so account sufficient pam_localuser.so account sufficient pam_succeed_if.so uid < 1000 quiet account [default=bad success=ok user_unknown=ignore] pam_sss.so account required pam_permit.so password requisite pam_pwquality.so try_first_pass local_users_only retry=3 authtok_type= password sufficient pam_unix.so sha512 shadow nullok try_first_pass use_authtok password sufficient pam_sss.so use_authtok password required pam_deny.so session optional pam_keyinit.so revoke session required pam_limits.so -session optional pam_systemd.so session optional pam_oddjob_mkhomedir.so umask=0077 session [success=1 default=ignore] pam_succeed_if.so service in crond quiet use_uid session required pam_unix.so session optional pam_sss.so doveconf -n # 2.2.36 (1f10bfa63): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.24 (124e06aa) # OS: Linux 3.10.0-957.10.1.el7.x86_64 x86_64 CentOS Linux release 7.6.1810 (Core) # Hostname: mailhost.example.com auth_mechanisms = plain login auth_socket_path = /var/run/dovecot/auth-master auth_username_format = %Ln auth_verbose = yes default_client_limit = 3500 default_process_limit = 500 disable_plaintext_auth = no first_valid_uid = 203 imap_client_workarounds = tb-lsub-flags tb-extra-mailbox-sep lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes lmtp_save_to_detail_mailbox = yes mail_location = maildir:~/Maildir:INBOX=~/Maildir:LAYOUT=fs mail_plugins = " fts fts_lucene" mail_privileged_group = mail maildir_very_dirty_syncs = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext imapsieve vnd.dovecot.imapsieve mbox_write_locks = fcntl namespace inbox { inbox = yes list = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { auto = subscribe special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = separator = / type = private } passdb { args = session=yes dovecot driver = pam } plugin { autocreate = Junk autocreate2 = Sent autocreate3 = Drafts autocreate4 = Trash autosubscribe = Junk autosubscribe2 = Sent autosubscribe3 = Drafts autosubscribe4 = Trash fts = lucene fts_lucene = whitespace_chars=@. imapsieve_mailbox1_before = file:/usr/lib64/dovecot/sieve/report-spam.sieve imapsieve_mailbox1_causes = COPY imapsieve_mailbox1_name = Junk imapsieve_mailbox2_before = file:/usr/lib64/dovecot/sieve/report-ham.sieve imapsieve_mailbox2_causes = COPY imapsieve_mailbox2_from = Junk imapsieve_mailbox2_name = * sieve = file:~/sieve;active=~/roundcube.sieve sieve_before = /var/lib/sieve/junk.sieve sieve_global_extensions = +vnd.dovecot.pipe +vnd.dovecot.environment sieve_pipe_bin_dir = /usr/lib64/dovecot/sieve sieve_plugins = sieve_imapsieve sieve_extprograms } pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = %v.%u protocols = imap pop3 lmtp sieve service auth { unix_listener /var/spool/postfix/private/dovecot-auth { group = postfix mode = 0660 user = postfix } unix_listener auth-master { group = user mode = 0660 user = root } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } ssl_cert = </etc/letsencrypt/live/webmail.example.com/fullchain.pem ssl_key = # hidden, use -P to show it syslog_facility = local0 userdb { driver = passwd } valid_chroot_dirs = /var/mail:/home protocol lmtp { mail_fsync = never mail_plugins = " fts fts_lucene sieve" postmaster_address = postmaster(a)example.com } protocol lda { mail_fsync = never mail_plugins = " fts fts_lucene sieve expire" } protocol imap { mail_max_userip_connections = 25 mail_plugins = " fts fts_lucene fts fts_squat expire imap_sieve" } protocol sieve { managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date } protocol pop3 { mail_max_userip_connections = 20 mail_plugins = " fts fts_lucene fts fts_squat expire" }

1 0

Problem with filter forwarded messages when using director proxy
by Ted 09 Apr '19

09 Apr '19

Hey there, I've been able to switch our mailservers over to using director to proxy logins and received email to the backend servers which store email on a shared NFS mount. Before I did this we were having trouble with the indexes running into errors because multiple servers accessing and modifying the dovecot.index files at the same time. I'm still seeing a small amount of this, and tracing it through it appears that when an account uses a filter to forward email to another address within our mail system, it recognises that it is a local email address it is responsible for and saves the message locally despite the fact that it is not the director specified server for the recipient address. As an example, lets say that test1(a)example.com is currently pointed to the 01 backend server by director, and test2(a)example.com to 02. If a filter at test1 forwards email to test2, then when an email for test1 comes in the director porxy will direct it to the 01 backend server, and when the message is saved the filter will run to forward it, and the 01 server will recognise that it is also responsible for test2 and so 01 will save the message for test2 rather than 02, as per director. This is causing a smallish number of clashes which I'd like to get cleaned up. I've tried getting the server to send through a relay but if it recognises the account as local it will not use the relay to send the email. Has anyone run into anything like this or have any ideas about how to approach the problem? Thank you Ted easyDNS Technologies

1 0

Editing fail2ban page?
by Mauricio Tavares 09 Apr '19

09 Apr '19

In https://wiki.dovecot.org/HowTo/Fail2Ban, for a current (I know for a fact in 2.2.36) I believe it should be filter = dovecot instead of filter = dovecot-pop3imap [root@mail ~]# ls -l /etc/fail2ban/filter.d/doveco* -rw-r--r-- 1 root root 1875 May 11 2017 /etc/fail2ban/filter.d/dovecot.conf [root@mail ~]#

2 1

dovecot[30008]: auth-worker: Fatal: master: service(auth-worker): child 31074 killed with signal 11
by Herbert 09 Apr '19

09 Apr '19

Hi Since a recent DNF update, I see many log file entries like the following: Apr 08 16:16:36 udoo.symmetrix.ch audit[31074]: ANOM_ABEND auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 pid=31074 comm="auth" exe="/usr/libexec/dovecot/auth" sig=11 res=1 Apr 08 16:16:36 udoo.symmetrix.ch kernel: traps: auth[31074] general protection fault ip:7ff45b5f98a7 sp:7fff0df96830 error:0 in libmariadb.so.3[7ff45b5d7000+46000] Apr 08 16:16:36 udoo.symmetrix.ch dovecot[30008]: auth-worker: Fatal: master: service(auth-worker): child 31074 killed with signal 11 (core not dumped - https://dovecot.org/bugreport.html#coredumps) Apr 08 16:16:38 udoo.symmetrix.ch abrt-dump-journal-oops[1139]: abrt-dump-journal-oops: Found oopses: 1 Apr 08 16:16:38 udoo.symmetrix.ch abrt-dump-journal-oops[1139]: abrt-dump-journal-oops: Creating problem directories Apr 08 16:16:39 udoo.symmetrix.ch abrt-dump-journal-oops[1139]: Reported 1 kernel oopses to Abrt Apr 08 16:16:39 udoo.symmetrix.ch abrt-server[31104]: Can't find a meaningful backtrace for hashing in '.' Apr 08 16:16:39 udoo.symmetrix.ch abrt-server[31104]: Option 'DropNotReportableOopses' is not configured Apr 08 16:16:39 udoo.symmetrix.ch abrt-server[31104]: Preserving oops '.' because DropNotReportableOopses is 'no' Apr 08 16:16:39 udoo.symmetrix.ch dbus-daemon[1022]: [system] Activating service name='org.freedesktop.problems' requested by ':1.779' (uid=0 pid=31122 comm="/usr/bin/python3 /usr/bin/abrt-action-notify -d /v" label="system_u:system_r:abrt_t:s0-s0:c0.c1023") (using servicehelper) Apr 08 16:16:40 udoo.symmetrix.ch dbus-daemon[1022]: [system] Successfully activated service 'org.freedesktop.problems' Apr 08 16:16:40 udoo.symmetrix.ch abrt-notification[31129]: System encountered a non-fatal error in ??() # uname -a Linux udoo.symmetrix.ch 5.0.5-100.fc28.x86_64 #1 SMP Wed Mar 27 22:16:29 UTC 2019 x86_64 x86_64 x86_64 GNU/Linux # dovecot --version 2.3.5 (513208660) # mysql --version mysql Ver 15.1 Distrib 10.2.22-MariaDB, for Linux (x86_64) using readline 5.1 Unfortunately I didn't manage to get a core dump, sorry. Kind regards, Herbert

2 1

Re: SMTPUTF8 support
by David Bürgin 08 Apr '19

08 Apr '19

André, are you quite sure you have it working? In this thread someone from Open-Xchange stated that no, Dovecot doesn’t have SMTPUTF8 support implemented, and the same response was given by another Dovecot developer last September (it ‘is being considered’ was the answer then, see https://dovecot.org/pipermail/dovecot/2018-September/112887.html) I am using LMTP to deliver mail to Dovecot from Postfix, and delivery fails with Postfix reporting: ‘SMTPUTF8 is required, but was not offered by host mail.my.org[private/dovecot-lmtp]’. I doubt that this can work without a change in Dovecot LMTP. Anyway, I am also interested in SMTPUTF8 support, so +1 from me! -- David

6 10

OpenFTS
by Cerebus 05 Apr '19

05 Apr '19

All the discussion on FTS reminds me, is there any plan to support OpenFTS in dovecot or is there a reason preventing that? -- This is my signature. There are many like it, but this one is mine.

2 1

SMTPUTF8 support
by sylvhem＠lepubdelobservateur.fr 05 Apr '19

05 Apr '19

Hi, I'm currently trying to set up SMTPUTF8 on my mail stack, but I can't find any information on Dovecot's RFC 6531 support. Has it been implemented yet? If so, does anyone know how to activate it? Regards. -- Sylvhem

4 5

Solr connection timeout hardwired to 60s
by Peter Mogensen 05 Apr '19

05 Apr '19

Hi, What's the recommended way to handling timeouts on large mailboxes given the hardwired request timeout of 60s in solr-connection.c: http_set.request_timeout_msecs = 60*1000; /Peter

5 5

doveadm backup + ISO 8859-1 mailbox name
by Michael Goth 04 Apr '19

04 Apr '19

Hi! I'm trying to migrate a mailbox from an old IMAP server (not Dovecot) to a new Dovecot server with 'doveadm backup'. The command fails because of an unexpected character in a mailbox name: doveadm -o imapc_user=ag(a)example.org \ -o imapc_password=XXX \ -o imapc_host=old-mailserver.webflow.de \ -o imapc_port=993 \ -o imapc_ssl=imaps \ -o imapc_ssl_verify=no \ -o imapc_features=rfc822.size,fetch-headers \ -o ssl_client_ca_dir=/etc/ssl \ backup -R -f -x ~* -u migration-ag(a)example.org imapc: dsync(migration-ag(a)example.org): Info: imapc(old-mailserver.webflow.de:993): Connected to 1.1.1.1:993 (local 2.2.2.2:46154) dsync(migration-ag(a)example.org): Error: Failed to access mailbox Entw?rfe: mailbox does not exist The problem is with "Entw?rfe" here. It's actually Entw<0xfc>rfe, which translates to "Entwürfe" in ISO-8859-1. Why can't doveadm find that mailbox? Is the old mailserver misbehaving (I hope not because I have no idea how to change that...), or does this happen on the new server? Can I tell doveadm something that makes this work? Thank you Michael -- Michael Goth .webflow GmbH Geschäftsführer: Andreas Schrei Wasserburger Straße 4 D - 83352 Altenmarkt a. d. Alz Amtsgericht Traunstein HRB 18537 E-Mail: mg(a)webflow.de Tel: +49 (0) 8621 - 99989 - 26 Fax: +49 (0) 8621 - 99989 - 28 Web: www.webflow.de

3 3

Autosubscribe to public folder
by Рустам 04 Apr '19

04 Apr '19

Hello everyone! I am trying to migrate from Dovecot 1.2 to Dovecot 2.2 and I can`t find information how to subscribe all users to public folder. In Dovecot 1.2 I have a few strings kind of "autosubscribeX = Public.Documents" and every users get subscribed to this Public folders and can`t unsubscribe. This is a goal. Is any posibility to make the same in Dovecot 2.2 or each user have to susbscribe to public folders themselves and this is kind of policy of Dovecot 2.2? -- С уважением, Рустам Багов.

2 1

TFA authentication in dovecot, using XMPP and RFC 4226
by André Rodier 03 Apr '19

03 Apr '19

Hello, I would like to implement some kind of two factors authentication, in Dovecot. I am thinking about using the post login script, to check for unusual behaviour, like say, a different country / IP address or an unusual hour. I already wrote a simple shell script that check these factors, but now, I have some options for the following, and I need to know your opinion if this is feasible or not. I want to use google authenticator Debian package (support the HMAC- Based One-time Password (HOTP) algorithm specified in RFC 4226 and the Time-based One-time Password (TOTP)) The challenge would be send via XMPP. This second part is fairly easy to do, I have all the packages on Debian, for instance sendxmpp. The first tests are promising. In case of success, the IP address is added to the list, let's say for one month... My back-end for authentication is OpenLDAP. My questions are: - Do you see any performance issues for other users or login processes, if I implement this? - I am planning to use a timeout, for instance one minute to confirm the connection. Does Dovecot have a timeout on its side, that would abort the connection before? Otherwise: - Is it possible to have multiple authentication back-ends in Dovecot? For instance LDAP and/or OTP? - I think to have seen some TFA options in Dovecot, but AFAICS, they are mandatory. Thanks for your insights, and this fabulous software. -- André Rodier HomeBox: https://github.com/progmaticltd/homebox

2 1

where shall I enforce sieve and quota plugins
by luckydog xf 03 Apr '19

03 Apr '19

Hello, guys, I'm going to using sieve and quota plugins, but I'm not sure where shall I enforce against properly? I see somebody uses them against 20-imap.conf, 15-lda.conf, or 20-lmtp.conf I use LMTP as MDA, so where is the correct location to call these plugins and why? Thanks,

2 1

Trying to track down source of duplicate messages
by Alex 02 Apr '19

02 Apr '19

Hi, I have a fedora28 system with dovecot-2.3.5 and I'm trying to figure out why I'm increasingly receiving duplicate emails. The message IDs are exactly the same. It's always two of the same messages. I don't think it's ever occurred in the inbox. It doesn't happen with every message or seemingly in every folder. I've read about dovecot deduplicate, but of course I want to prevent them from being duplicated in the first place. It's also happening much more frequently now. Could something in my configuration cause this problem? Below is the contents of my doveconf # 2.3.5 (513208660): /etc/dovecot/dovecot.conf # Pigeonhole version 0.5.5 (2483b085) # OS: Linux 4.20.11-100.fc28.x86_64 x86_64 Fedora release 28 (Twenty Eight) # Hostname: orion.inside.guardiandigital.com # NOTE: Send doveconf -n output instead when asking for help. auth_anonymous_username = anonymous auth_cache_negative_ttl = 1 hours auth_cache_size = 0 auth_cache_ttl = 1 hours auth_cache_verify_password_with_worker = no auth_debug = no auth_debug_passwords = no auth_default_realm = auth_failure_delay = 2 secs auth_gssapi_hostname = auth_krb5_keytab = auth_master_user_separator = auth_mechanisms = plain auth_policy_check_after_auth = yes auth_policy_check_before_auth = yes auth_policy_hash_mech = sha256 auth_policy_hash_nonce = auth_policy_hash_truncate = 12 auth_policy_log_only = no auth_policy_reject_on_fail = no auth_policy_report_after_auth = yes auth_policy_request_attributes = login=%{requested_username} pwhash=%{hashed_password} remote=%{rip} device_id=%{client_id} protocol=%s auth_policy_server_api_header = auth_policy_server_timeout_msecs = 2000 auth_policy_server_url = auth_proxy_self = auth_realms = auth_socket_path = auth-userdb auth_ssl_require_client_cert = no auth_ssl_username_from_cert = no auth_stats = no auth_use_winbind = no auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@ auth_username_format = %Lu auth_username_translation = auth_verbose = no auth_verbose_passwords = no auth_winbind_helper_path = /usr/bin/ntlm_auth auth_worker_max_count = 30 base_dir = /var/run/dovecot config_cache_size = 1 M debug_log_path = default_client_limit = 1000 default_idle_kill = 1 mins default_internal_group = dovecot default_internal_user = dovecot default_login_user = dovenull default_process_limit = 100 default_vsz_limit = 256 M deliver_log_format = msgid=%m: %$ dict_db_config = director_flush_socket = director_mail_servers = director_max_parallel_kicks = 100 director_max_parallel_moves = 100 director_output_buffer_size = 10 M director_ping_idle_timeout = 30 secs director_ping_max_timeout = 1 mins director_servers = director_user_expire = 15 mins director_user_kick_delay = 2 secs director_username_hash = %u disable_plaintext_auth = yes dotlock_use_excl = yes doveadm_allowed_commands = doveadm_api_key = doveadm_http_rawlog_dir = doveadm_password = doveadm_port = 0 doveadm_socket_path = doveadm-server doveadm_username = doveadm doveadm_worker_count = 0 dsync_alt_char = _ dsync_commit_msgs_interval = 100 dsync_features = dsync_hashed_headers = Date Message-ID dsync_remote_cmd = ssh -l%{login} %{host} doveadm dsync-server -u%u -U first_valid_gid = 1 first_valid_uid = 500 haproxy_timeout = 3 secs haproxy_trusted_networks = hostname = imap_capability = imap_client_workarounds = imap_fetch_failure = disconnect-immediately imap_hibernate_timeout = 0 imap_id_log = imap_id_retain = no imap_id_send = name * imap_idle_notify_interval = 2 mins imap_literal_minus = no imap_logout_format = in=%i out=%o deleted=%{deleted} expunged=%{expunged} trashed=%{trashed} hdr_count=%{fetch_hdr_count} hdr_bytes=%{fetch_hdr_bytes} body_count=%{fetch_body_count} body_bytes=%{fetch_body_bytes} imap_max_line_length = 64 k imap_metadata = no imap_urlauth_host = imap_urlauth_logout_format = in=%i out=%o imap_urlauth_port = 143 imapc_cmd_timeout = 5 mins imapc_connection_retry_count = 1 imapc_connection_retry_interval = 1 secs imapc_features = imapc_host = imapc_list_prefix = imapc_master_user = imapc_max_idle_time = 29 mins imapc_max_line_length = 0 imapc_password = imapc_port = 143 imapc_rawlog_dir = imapc_sasl_mechanisms = imapc_ssl = no imapc_ssl_verify = yes imapc_user = import_environment = TZ CORE_OUTOFMEM CORE_ERROR LISTEN_PID LISTEN_FDS info_log_path = instance_name = dovecot last_valid_gid = 0 last_valid_uid = 0 lda_mailbox_autocreate = no lda_mailbox_autosubscribe = no lda_original_recipient_header = libexec_dir = /usr/libexec/dovecot listen = *, :: lmtp_hdr_delivery_address = final lmtp_proxy = no lmtp_proxy_rawlog_dir = lmtp_rawlog_dir = lmtp_rcpt_check_quota = no lmtp_save_to_detail_mailbox = no lmtp_user_concurrency_limit = 0 lock_method = fcntl log_core_filter = log_debug = log_path = syslog log_timestamp = "%b %d %H:%M:%S " login_access_sockets = login_greeting = Dovecot ready. login_log_format = %$: %s login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c session=<%{session}> login_plugin_dir = /usr/lib64/dovecot/login login_plugins = login_proxy_max_disconnect_delay = 0 login_proxy_notify_path = proxy-notify login_source_ips = login_trusted_networks = mail_access_groups = mail_always_cache_fields = mail_attachment_detection_options = mail_attachment_dir = mail_attachment_fs = sis posix mail_attachment_hash = %{sha1} mail_attachment_min_size = 128 k mail_attribute_dict = mail_cache_compress_continued_percentage = 200 mail_cache_compress_delete_percentage = 20 mail_cache_compress_header_continue_count = 4 mail_cache_compress_min_size = 32 k mail_cache_fields = flags mail_cache_min_mail_count = 0 mail_cache_record_max_size = 64 k mail_cache_unaccessed_field_drop = 30 days mail_chroot = mail_debug = no mail_fsync = optimized mail_full_filesystem_access = no mail_gid = mail mail_home = mail/ mail_index_log2_max_age = 2 days mail_index_log_rotate_max_size = 1 M mail_index_log_rotate_min_age = 5 mins mail_index_log_rotate_min_size = 32 k mail_index_rewrite_max_log_bytes = 128 k mail_index_rewrite_min_log_bytes = 8 k mail_location = mbox:~/mail:INBOX=/var/spool/mail/%u mail_log_prefix = "%s(%u)<%{pid}><%{session}>: " mail_max_keyword_length = 50 mail_max_lock_timeout = 0 mail_max_userip_connections = 500 mail_never_cache_fields = imap.envelope mail_nfs_index = no mail_nfs_storage = no mail_plugin_dir = /usr/lib64/dovecot mail_plugins = " listescape" mail_prefetch_count = 0 mail_privileged_group = mail mail_save_crlf = no mail_server_admin = mail_server_comment = mail_shared_explicit_inbox = no mail_sort_max_read_count = 0 mail_temp_dir = /tmp mail_temp_scan_interval = 1 weeks mail_uid = mail_vsize_bg_after_count = 0 mailbox_idle_check_interval = 30 secs mailbox_list_index = yes mailbox_list_index_include_inbox = no mailbox_list_index_very_dirty_syncs = no maildir_broken_filename_sizes = no maildir_copy_with_hardlinks = yes maildir_empty_new = no maildir_stat_dirs = no maildir_very_dirty_syncs = no managesieve_client_workarounds = managesieve_implementation_string = Dovecot Pigeonhole managesieve_logout_format = bytes=%i/%o managesieve_max_compile_errors = 5 managesieve_max_line_length = 65536 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext master_user_separator = mbox_dirty_syncs = yes mbox_dotlock_change_timeout = 2 mins mbox_lazy_writes = yes mbox_lock_timeout = 5 mins mbox_md5 = apop3d mbox_min_index_size = 0 mbox_read_locks = fcntl mbox_very_dirty_syncs = no mbox_write_locks = fcntl mdbox_preallocate_space = no mdbox_rotate_interval = 0 mdbox_rotate_size = 10 M mmap_disable = no namespace inbox { disabled = no hidden = no ignore_on_failure = no inbox = yes list = yes location = mailbox Drafts { auto = no autoexpunge = 0 autoexpunge_max_mails = 0 comment = driver = special_use = \Drafts } mailbox Junk { auto = no autoexpunge = 0 autoexpunge_max_mails = 0 comment = driver = special_use = \Junk } mailbox Sent { auto = no autoexpunge = 0 autoexpunge_max_mails = 0 comment = driver = special_use = \Sent } mailbox "Sent Messages" { auto = no autoexpunge = 0 autoexpunge_max_mails = 0 comment = driver = special_use = \Sent } mailbox Trash { auto = no autoexpunge = 0 autoexpunge_max_mails = 0 comment = driver = special_use = \Trash } order = 0 prefix = separator = subscriptions = yes type = private } old_stats_carbon_interval = 30 secs old_stats_carbon_name = old_stats_carbon_server = old_stats_command_min_time = 1 mins old_stats_domain_min_time = 12 hours old_stats_ip_min_time = 12 hours old_stats_memory_limit = 16 M old_stats_session_min_time = 15 mins old_stats_user_min_time = 1 hours passdb { args = auth_verbose = default default_fields = deny = no driver = pam master = no mechanisms = name = override_fields = pass = no result_failure = continue result_internalfail = continue result_success = return-ok skip = never username_filter = } passdb { args = auth_verbose = default default_fields = deny = no driver = pam master = no mechanisms = name = override_fields = pass = no result_failure = continue result_internalfail = continue result_success = return-ok skip = never username_filter = } pop3_client_workarounds = pop3_delete_type = default pop3_deleted_flag = pop3_enable_last = no pop3_fast_size_lookups = no pop3_lock_session = no pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s pop3_no_flag_updates = no pop3_reuse_xuidl = no pop3_save_uidl = no pop3_uidl_duplicates = allow pop3_uidl_format = %08Xu%08Xv pop3c_features = pop3c_host = pop3c_master_user = pop3c_password = pop3c_port = 110 pop3c_quick_received_date = no pop3c_rawlog_dir = pop3c_ssl = no pop3c_ssl_verify = yes pop3c_user = %u postmaster_address = postmaster@%{if;%d;ne;;%d;%{hostname}} protocols = imap pop3 quota_full_tempfail = no rawlog_dir = recipient_delimiter = + rejection_reason = Your message to <%t> was automatically rejected:%n%r rejection_subject = Rejected: %s replication_dsync_parameters = -d -N -l 30 -U replication_full_sync_interval = 1 days replication_max_conns = 10 replicator_host = replicator replicator_port = 0 sendmail_path = /usr/sbin/sendmail service aggregator { chroot = . client_limit = 0 drop_priv_before_exec = no executable = aggregator extra_groups = fifo_listener replication-notify-fifo { group = mode = 0600 user = } group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener replication-notify { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service anvil { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = anvil extra_groups = group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 1 protocol = service_count = 0 type = anvil unix_listener anvil-auth-penalty { group = mode = 0600 user = } unix_listener anvil { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service auth-worker { chroot = client_limit = 1 drop_priv_before_exec = no executable = auth -w extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 1 type = unix_listener auth-worker { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service auth { chroot = client_limit = 0 drop_priv_before_exec = no executable = auth extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-client { group = mode = 0600 user = $default_internal_user } unix_listener auth-login { group = mode = 0600 user = $default_internal_user } unix_listener auth-master { group = mode = 0600 user = } unix_listener auth-userdb { group = mode = 0666 user = $default_internal_user } unix_listener login/login { group = mode = 0666 user = } unix_listener token-login/tokenlogin { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service config { chroot = client_limit = 0 drop_priv_before_exec = no executable = config extra_groups = group = idle_kill = 4294967295 secs privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = config unix_listener config { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service dict-async { chroot = client_limit = 0 drop_priv_before_exec = no executable = dict extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener dict-async { group = $default_internal_group mode = 0660 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service dict { chroot = client_limit = 1 drop_priv_before_exec = no executable = dict extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener dict { group = $default_internal_group mode = 0660 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service director { chroot = . client_limit = 0 drop_priv_before_exec = no executable = director extra_groups = fifo_listener login/proxy-notify { group = mode = 00 user = } group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener director-admin { group = mode = 0600 user = } unix_listener login/director { group = mode = 00 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service dns_client { chroot = client_limit = 1 drop_priv_before_exec = no executable = dns-client extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener dns-client { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service doveadm { chroot = client_limit = 1 drop_priv_before_exec = no executable = doveadm-server extra_groups = $default_internal_group group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 1 type = unix_listener doveadm-server { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service imap-hibernate { chroot = client_limit = 0 drop_priv_before_exec = no executable = imap-hibernate extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = imap service_count = 0 type = unix_listener imap-hibernate { group = $default_internal_group mode = 0660 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service imap-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = imap-login extra_groups = group = idle_kill = 0 inet_listener imap { address = haproxy = no port = 0 reuse_port = no ssl = no } inet_listener imaps { address = haproxy = no port = 993 reuse_port = no ssl = yes } privileged_group = process_limit = 0 process_min_avail = 20 protocol = imap service_count = 0 type = login user = $default_login_user vsz_limit = 18446744073709551615 B } service imap-urlauth-login { chroot = token-login client_limit = 0 drop_priv_before_exec = no executable = imap-urlauth-login extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = imap service_count = 1 type = login unix_listener imap-urlauth { group = mode = 0666 user = } user = $default_login_user vsz_limit = 18446744073709551615 B } service imap-urlauth-worker { chroot = client_limit = 1 drop_priv_before_exec = no executable = imap-urlauth-worker extra_groups = $default_internal_group group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = imap service_count = 1 type = unix_listener imap-urlauth-worker { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service imap-urlauth { chroot = client_limit = 1 drop_priv_before_exec = no executable = imap-urlauth extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = imap service_count = 1 type = unix_listener token-login/imap-urlauth { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service imap { chroot = client_limit = 1 drop_priv_before_exec = no executable = imap extra_groups = $default_internal_group group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = imap service_count = 1 type = unix_listener imap-master { group = mode = 0600 user = } unix_listener login/imap { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service indexer-worker { chroot = client_limit = 1 drop_priv_before_exec = no executable = indexer-worker extra_groups = $default_internal_group group = idle_kill = 0 privileged_group = process_limit = 10 process_min_avail = 0 protocol = service_count = 0 type = unix_listener indexer-worker { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service indexer { chroot = client_limit = 0 drop_priv_before_exec = no executable = indexer extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener indexer { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service ipc { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = ipc extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener ipc { group = mode = 0600 user = $default_internal_user } unix_listener login/ipc-proxy { group = mode = 0600 user = $default_login_user } user = $default_internal_user vsz_limit = 18446744073709551615 B } service lmtp { chroot = client_limit = 1 drop_priv_before_exec = no executable = lmtp extra_groups = $default_internal_group group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = lmtp service_count = 0 type = unix_listener lmtp { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service log { chroot = client_limit = 0 drop_priv_before_exec = no executable = log extra_groups = group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = log unix_listener log-errors { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service managesieve-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = managesieve-login extra_groups = group = idle_kill = 0 inet_listener sieve { address = haproxy = no port = 4190 reuse_port = no ssl = no } privileged_group = process_limit = 0 process_min_avail = 0 protocol = sieve service_count = 1 type = login user = $default_login_user vsz_limit = 18446744073709551615 B } service managesieve { chroot = client_limit = 1 drop_priv_before_exec = no executable = managesieve extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = sieve service_count = 1 type = unix_listener login/sieve { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service old-stats { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = old-stats extra_groups = fifo_listener old-stats-mail { group = mode = 0600 user = } fifo_listener old-stats-user { group = mode = 0600 user = } group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener old-stats { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service pop3-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = pop3-login extra_groups = group = idle_kill = 0 inet_listener pop3 { address = haproxy = no port = 0 reuse_port = no ssl = no } inet_listener pop3s { address = 192.168.1.100 haproxy = no port = 995 reuse_port = no ssl = yes } privileged_group = process_limit = 0 process_min_avail = 0 protocol = pop3 service_count = 1 type = login user = $default_login_user vsz_limit = 18446744073709551615 B } service pop3 { chroot = client_limit = 1 drop_priv_before_exec = no executable = pop3 extra_groups = $default_internal_group group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = pop3 service_count = 1 type = unix_listener login/pop3 { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service replicator { chroot = client_limit = 0 drop_priv_before_exec = no executable = replicator extra_groups = group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener replicator-doveadm { group = mode = 00 user = $default_internal_user } unix_listener replicator { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service stats { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = stats extra_groups = group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener stats-reader { group = mode = 0600 user = } unix_listener stats-writer { group = $default_internal_group mode = 0660 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service submission-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = submission-login extra_groups = group = idle_kill = 0 inet_listener submission { address = haproxy = no port = 587 reuse_port = no ssl = no } privileged_group = process_limit = 0 process_min_avail = 0 protocol = submission service_count = 1 type = login user = $default_login_user vsz_limit = 18446744073709551615 B } service submission { chroot = client_limit = 1 drop_priv_before_exec = no executable = submission extra_groups = $default_internal_group group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = submission service_count = 1 type = unix_listener login/submission { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } shutdown_clients = yes ssl = yes ssl_alt_cert = ssl_alt_key = ssl_ca = ssl_cert = </etc/letsencrypt/fullchain.pem ssl_cert_username_field = commonName ssl_cipher_list = ALL:!LOW:!EXP:!aNULL:!RC4::!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS ssl_client_ca_dir = ssl_client_ca_file = ssl_client_cert = ssl_client_key = ssl_crypto_device = ssl_curve_list = ssl_dh = # hidden, use -P to show it ssl_key = # hidden, use -P to show it ssl_key_password = ssl_min_protocol = TLSv1 ssl_options = ssl_prefer_server_ciphers = yes ssl_require_crl = yes ssl_verify_client_cert = no state_dir = /var/lib/dovecot stats_writer_socket_path = stats-writer submission_client_workarounds = submission_host = submission_logout_format = in=%i out=%o submission_max_mail_size = 40 M submission_max_recipients = 0 submission_relay_command_timeout = 5 mins submission_relay_connect_timeout = 30 secs submission_relay_host = submission_relay_master_user = submission_relay_max_idle_time = 29 mins submission_relay_password = submission_relay_port = 25 submission_relay_rawlog_dir = submission_relay_ssl = no submission_relay_ssl_verify = yes submission_relay_trusted = no submission_relay_user = submission_ssl = no submission_timeout = 30 secs syslog_facility = mail userdb { args = auth_verbose = default default_fields = driver = passwd name = override_fields = result_failure = continue result_internalfail = continue result_success = return-ok skip = never } userdb { args = auth_verbose = default default_fields = driver = passwd name = override_fields = result_failure = continue result_internalfail = continue result_success = return-ok skip = never } valid_chroot_dirs = verbose_proctitle = no verbose_ssl = no version_ignore = no

4 4

ssl_min_protocol
by ＠lbutlr 02 Apr '19

02 Apr '19

What are the possible settings for ssl_min_protocol? I only see it on the upgrade page where it mentions the default is TLSv1. Searching on the dovecot page gives me "Your search query "ssl_min_protocol" didn't return any results." -- Up the airy mountains, down the rushy glen... From ghosties and bogles and long-leggity beasties... My mother said I never should... We dare not go a-hunting for fear... And things that go bump... Play with the fairies in the wood... --Lords and Ladies

2 1

sql table definitions
by Richard Hector 02 Apr '19

02 Apr '19

Hi all, Trivial question ... I'm using PostgreSQL for my auth db. I used the example CREATE TABLE statement in the config file, but now I find the fields are too short. I assume dovecot will be fine with 'text' type columns replacing the varchars? Or failing that, I can change the length of the varchar fields? Cheers, Richard

2 1

Issue with dovecot/director
by Nico Stöckigt 01 Apr '19

01 Apr '19

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Hi, are there any known issues with dovecot/director (2.2.13) when receiving e-an mail with multiple receivers? In the given scenario the e-mail contains 3 recipients and is redirected by the director to 3 different mail servers (ox/dovecot @ UCS/univention). In this process the first 2 e-mails are just fine but the third e-mail is truncated somewhere in or after the header. Kind Regards Nico Stöckigt - -- Nico Stöckigt <stoeckigt(a)univention.de> Support Univention -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEoGjDpba412f0rm1CjVdPG/rdoykFAlyiPGoACgkQjVdPG/rd oyl+IRAAp11JHenIkDeonGV+tbj3nFF4RigPp85TiJmD2l/kddP5mMR/Bw+vMAc6 taHjfS4Myf6v+jCrn+FS+C2isZaassnqZF1JcyllT5RSvxzrSKl6ojf9vVl3jyfu gZ7RlVOqBqskSHkVsT4fmzFuGMRaTQBN7CtgQH3MXPcN477060WDiZ11x+w+2+be eI0hQID3X3CBRmhaYyXMsgwUCHF36dVYlzEnUy6yge2FuwgwonZASC9xueVQGN5b KYf66LmubJTERGo3XK7454s3jM6oEiz731Os7g/zHyd8X6fgpCaR1nre8x0xfe1I bz86GJzm3b+1Fme8++yxlGhTEERtNkw0znQG7LOw8fqY5ctD12kdxBgXQOgcLkjh 98zJD44wC8y9lRKfZ3Lydfq768U3D47AjmPY0u9Zp1YKdNS8PEsNk0iHaRn5ZpT0 0V+wfTTkh3jFFuaqqd0hgamwRuwkNfFNyGvNAd5x4nMUIGUZ1pI3ikGP8oGaLDMs iSo1YxXkUojZ9A2xMQ8bDbWLjpyj/YYw+Cs6t1QcP0h2HDATc7QrHMO02ajKXDW+ ZxsI4VvEplv4GhbMuhavRYhZk01fI1hdeV1+PvkcAsqxaljoJDSyqZP78A81f7F4 DWComweyk/k+BzLjiQPKhv7AjaXnjDVeJfVxLl8VYoW4jD/4aFc= =MGL8 -----END PGP SIGNATURE-----

2 3

mail_crypt not working on incoming messages?
by Dave 01 Apr '19

01 Apr '19

[Dovecot v2.2.33.2] I'm testing out mail_crypt on a fresh Dovecot install to get a feel for how it works, but I'm running into something unexpected. The mail_crypt plugin does seem to be working, but NOT on incoming email. What I mean is, if I send a test email to the server that has Dovecot installed, the message correctly arrives in the user's Maildir folder (I'm using Maildir format, not mbox), as I can see the mail message file appear. However, the message file is in plaintext and is not encrypted. But, if, using my Thunderbird email client connected to that account via IMAP, I move that message out of the inbox of that account to a folder on another account, and then move it back in to the original inbox, the file that appears in the Maildir folder structure IS encrypted. I have confirmed that mail_crypt is active in 10-mail.conf, 20-imap.conf, and 20-pop3.conf. The global public and private keys are working because (a) there are no errors and (b) it DOES encrypt -- just not on incoming email. mail_crypt_save_version is set 2, as per the docs for Dovecot 2 instruct. What am I missing? Does anyone have any thoughts as to why JUST incoming messages aren't encrypted, but that messages moved into the IMAP account DO get encrypted? Did I set up something incorrectly? I'm using sendmail as the MTA, if that matters, and messages are routed to the user's Maildir folder structure using a .procmailrc in that user's home folder. -Dave

2 3

dovecot ssl error message from my own connections
by Esteban L 01 Apr '19

01 Apr '19

Hello all, Just a minor thing. Not a big deal, because everything works fine, and I feel secure with my setup. But, I get this error message pretty much throughout the day/night, which appears to come from my own mail clients (desktop or mobile). I would like to resolve it, because it must me something (that is not good--that I may not understand), that may have other ramifications. So, here it is. date time myserver dovecot: imap-login: Debug: SSL error: SSL_read() syscall failed: Connection reset by peer Anyone have a suggestion of what this might hint to, other than obvious SSL. I tried parsing through various logs, but the most I find is just this single line. I can produce it, whenever I close my email client. Thanks in advance.

4 5

Possible bug with last_login plugin and PostgreSQL
by Zhang Huangbin 01 Apr '19

01 Apr '19

Dear all, I'm trying to get last_login plugin working with PostgreSQL, but seems Dovecot doesn't handle duplicate key while updating last login time (note: same setting works fine with MariaDB). I wonder whether it's a bug of Dovecot or i should handle this with PostgreSQL trigger. OS: OpenBSD 6.4 (amd64) Dovecot: 2.2.36 PostgreSQL: 10.5 Error log: ################### Mar 31 11:15:21 ob dovecot: imap-login: Login: user=<postmaster(a)a.io>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=5936, TLS, session=<63/jV2CFhzt/AAAB> Mar 31 11:15:21 ob dovecot: imap(postmaster(a)a.io): Logged out in=300 out=1604 Mar 31 11:15:21 ob dovecot: imap-login: Login: user=<postmaster(a)a.io>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=29797, TLS, session=<lLboV2CFuZ9/AAAB> Mar 31 11:15:21 ob dovecot: dict(9584): Error: sql dict: commit failed: ERROR: duplicate key value violates unique constraint "last_login_pkey" Mar 31 11:15:21 ob dovecot: dict: Error: DETAIL: Key (username)=(postmaster(a)a.io) already exists. Mar 31 11:15:21 ob dovecot: imap(postmaster(a)a.io): Error: dict-client: server returned failure: 1554023721 (reply took 0.012 secs) Mar 31 11:15:21 ob dovecot: imap(postmaster(a)a.io): Error: last_login_dict: Failed to write value for user postmaster(a)a.io Mar 31 11:15:21 ob dovecot: imap(postmaster(a)a.io): Logged out in=70 out=732 ################## My Dovecot config: ################### protocol imap { mail_plugins = ... last_login ... } protocol pop3 { mail_plugins = ... last_login ... } plugin { last_login_dict = proxy::lastlogin #last_login_key = last-login/%u ... } dict { lastlogin = pgsql:/etc/dovecot/dovecot-last-login.conf ... } ################### SQL commands used to create PostgreSQL table: ########### CREATE TABLE last_login ( username VARCHAR(255) NOT NULL, last_login INT DEFAULT NULL, PRIMARY KEY (username) ); ########### File /etc/dovecot/dovecot-last-login.conf: ########### connect = host=127.0.0.1 port=5432 dbname=vmail user=vmailadmin password=<password> map { pattern = shared/last-login/$user table = last_login value_field = last_login value_type = uint fields { username = $user } } ##############

1 1

I have a question.
by 김태용 01 Apr '19

01 Apr '19

Hi. I have a question. Can I limit the maximum number of messages I can sync per mailbox? Even if there are 10000 messages, I want to sync with the specified number of times. Ex)max sync mail count = 5000 (or 1000 or 2000..Outlook view message 5000) Thank you.

2 2

CentOS Repository broken ?
by Günther J. Niederwimmer 01 Apr '19

01 Apr '19

Hello, I have a CentOS 7 server with dovecot Repository enabled. But it is not possible to Update with Yum Update I have this Error? The dovecot package is missing? --> Transaktionsprüfung wird ausgeführt ---> Paket dovecot-imaptest.x86_64 2:2.3.5-1 markiert, um aktualisiert zu werden ---> Paket dovecot-imaptest.x86_64 2:2.3.5.1-1 markiert, um eine Aktualisierung zu werden --> Abhängigkeit dovecot = 2:2.3.5.1-1 wird für Paket 2:dovecot- imaptest-2.3.5.1-1.x86_64 verarbeitet ---> Paket dovecot-lua.x86_64 2:2.3.5-1 markiert, um aktualisiert zu werden ---> Paket dovecot-lua.x86_64 2:2.3.5.1-1 markiert, um eine Aktualisierung zu werden --> Abhängigkeit dovecot = 2:2.3.5.1-1 wird für Paket 2:dovecot- lua-2.3.5.1-1.x86_64 verarbeitet --> Abhängigkeitsauflösung beendet Fehler: Paket: 2:dovecot-imaptest-2.3.5.1-1.x86_64 (dovecot-2.3-latest) Benötigt: dovecot = 2:2.3.5.1-1 Installiert: 2:dovecot-2.3.5-1.x86_64 (installed) dovecot = 2:2.3.5-1 Verfügbar: 1:dovecot-2.2.36-3.el7.i686 (base) dovecot = 1:2.2.36-3.el7 Fehler: Paket: 2:dovecot-lua-2.3.5.1-1.x86_64 (dovecot-2.3-latest) Benötigt: dovecot = 2:2.3.5.1-1 Installiert: 2:dovecot-2.3.5-1.x86_64 (installed) dovecot = 2:2.3.5-1 Verfügbar: 1:dovecot-2.2.36-3.el7.i686 (base) dovecot = 1:2.2.36-3.el7 Thanks for repair. -- mit freundliche Grüßen / best regards, Günther J. Niederwimmer

5 12

Why is 'sent' folder missing in my MUA(email client)
by luckydog xf 31 Mar '19

31 Mar '19

hello, I'm successfully send and receive emails by postfix and dovecot, but folder name 'Sent' is gone, all sent emails are located in Drafts folder. Anything wrong? Guess it has something to do with mailbox and location. Here is `doveconf -n` ------------------ auth_cache_size = 1 M auth_debug_passwords = yes auth_mechanisms = plain login auth_ssl_username_from_cert = yes auth_verbose = yes auth_verbose_passwords = yes import_environment = TZ login_trusted_networks = 172.16.0.0/12 mail_location = maildir:/var/mail/%n/Maildir mail_privileged_group = mail namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocols = imap lmtp service auth-worker { user = $default_internal_user } service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } } service imap-login { inet_listener imap { port = 0 } inet_listener imaps { port = 993 ssl = yes } } service lmtp { unix_listener lmtp { mode = 0666 } } service pop3-login { inet_listener pop3 { port = 110 } } ssl = required ssl_cert = </etc/ssl/certs/dovecot.pem ssl_dh = # hidden, use -P to show it ssl_key = # hidden, use -P to show it userdb { driver = prefetch } userdb { args = uid=mail gid=mail home=/var/mail/%u driver = static } verbose_proctitle = yes ----- I also checked mail dir, it has /var/mail/XXX/Maildir/.send/ So anything wrong? Thanks,

1 1

Attachment indicator
by azurit＠pobox.sk 29 Mar '19

29 Mar '19

Hi, if i use 'doveadm rebuild attachments' command with maildir mailboxes, will anything happen to files with emails? For example, will file name change? Or better, will anything, which could trigger data backup, happen to files containing emails? Thanks. azur

1 0

configuring Dovecot with wforced and auth_policy_server_url with https results in assertion failed
by Robert Kudyba 29 Mar '19

29 Mar '19

dovecot-2.3.3-1.fc29.x86_64 Mar 28 10:04:47 auth: Panic: file http-client-request.c: line 283 (http_client_request_unref): assertion failed: (req->refcount > 0) Mar 28 10:04:47 auth: Error: Raw backtrace: /usr/lib64/dovecot/libdovecot.so.0(+0xe34fb) [0x7fe76e0834fb] -> /usr/lib64/dovecot/libdovecot.so.0(+0xe3597) [0x7fe76e083597] -> /usr/lib64/dovecot/libdovecot.so.0(+0x51207) [0x7fe76dff1207] -> /usr/lib64/dovecot/libdovecot.so.0(+0x4972b) [0x7fe76dfe972b] -> /usr/lib64/dovecot/libdovecot.so.0(http_client_request_destroy+0x107) [0x7fe76e02cf87] -> /usr/lib64/dovecot/libdovecot.so.0(http_client_deinit+0x4c) [0x7fe76e03b9ec] -> dovecot/auth(auth_policy_deinit+0x1e) [0x55facfdb350e] -> dovecot/auth(main+0x3e1) [0x55facfdae3c1] -> /lib64/libc.so.6(__libc_start_main+0xf3) [0x7fe76dd93413] -> dovecot/auth(_start+0x2e) [0x55facfdae57e] Mar 28 10:04:47 auth: Fatal: master: service(auth): child 31162 killed with signal 6 (core not dumped - https://dovecot.org/bugreport.html#coredumps - set /proc/sys/fs/suid_dumpable to 2) Mar 28 10:04:48 master: Info: Dovecot v2.3.3 (dcead646b) starting up for imap, pop3

2 9

Fwd: segfault in libdovecot-storage at unknown circumstances
by sergio 29 Mar '19

29 Mar '19

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=925961 -------- Forwarded Message -------- Subject: segfault in libdovecot-storage at unknown circumstances Date: Fri, 29 Mar 2019 16:34:15 +0300 From: sergio <sergio+it(a)outerface.net> To: Debian Bug Tracking System <submit(a)bugs.debian.org> Package: dovecot-core Version: 1:2.3.4.1-1~bpo9+1 Severity: normal Yes, I know this is not very informative. I've already set ALLOW_COREDUMPS to 1 in /etc/default/dovecot and waiting for the next fault. % grep segfa kern.log* kern.log.1: Mar 17 13:27:09 mail kernel: [118616.482998] imap[31111]: segfault at 8 ip 00007efbff924cbb sp 00007fff0b333890 error 4 in libdovecot-storage.so.0.0.0[7efbff858000+145000] % zgrep segfa kern.log*gz kern.log.2.gz:Mar 15 01:51:07 mail kernel: [1691560.449110] imap[8329]: segfault at 8 ip 00007ff38ae2390e sp 00007ffcd3317640 error 4 kern.log.2.gz:Mar 15 01:51:07 mail kernel: [1691560.449117] imap[8380]: segfault at 8 ip 00007fea0c1c890e sp 00007ffdc7607150 error 4 in libdovecot-storage.so.0.0.0[7fea0c10d000+12c000] kern.log.2.gz:Mar 15 01:51:07 mail kernel: [1691560.449438] imap[8371]: segfault at 8 ip 00007f4775b0490e sp 00007ffce2814cc0 error 4 in libdovecot-storage.so.0.0.0[7f4775a49000+12c000] kern.log.2.gz:Mar 15 01:51:07 mail kernel: [1691560.461685] imap[2435]: segfault at 8 ip 00007fa8cb0ab90e sp 00007ffc4185e130 error 4 in libdovecot-storage.so.0.0.0[7fa8caff0000+12c000] kern.log.3.gz:Mar 13 02:35:33 mail kernel: [1521426.802606] imap[11824]: segfault at 8 ip 00007fa1b95d290e sp 00007ffd935de700 error 4 kern.log.3.gz:Mar 13 02:35:33 mail kernel: [1521426.802614] imap[11827]: segfault at 8 ip 00007f1afe53490e sp 00007fffbeb753d0 error 4 in libdovecot-storage.so.0.0.0[7f1afe479000+12c000] kern.log.3.gz:Mar 13 02:35:33 mail kernel: [1521426.802983] imap[11837]: segfault at 8 ip 00007f70b5c9b90e sp 00007ffd7f80bc80 error 4 in libdovecot-storage.so.0.0.0[7f70b5be0000+12c000] % grep 'signal 11' mail.err* mail.err.1: Mar 17 13:27:09 mail dovecot: imap(sergio)<31111><lLOIej6EEN1Pht53>: Fatal: master: service(imap): child 31111 killed with signal 11 (core dumps disabled - https://dovecot.org/bugreport.html#coredumps) % zgrep 'signal 11' mail.err* mail.err.1:Mar 17 13:27:09 mail dovecot: imap(sergio)<31111><lLOIej6EEN1Pht53>: Fatal: master: service(imap): child 31111 killed with signal 11 (core dumps disabled - https://dovecot.org/bugreport.html#coredumps) mail.err.2.gz:Mar 15 01:51:07 mail dovecot: imap(sergio): Fatal: master: service(imap): child 8371 killed with signal 11 (core dumps disabled) mail.err.2.gz:Mar 15 01:51:07 mail dovecot: imap(sergio): Fatal: master: service(imap): child 8380 killed with signal 11 (core dumps disabled) mail.err.2.gz:Mar 15 01:51:07 mail dovecot: imap(sergio): Fatal: master: service(imap): child 8329 killed with signal 11 (core dumps disabled) mail.err.2.gz:Mar 15 01:51:07 mail dovecot: imap(sergio): Fatal: master: service(imap): child 2435 killed with signal 11 (core dumps disabled) mail.err.3.gz:Mar 13 02:35:33 mail dovecot: imap(sergio): Fatal: master: service(imap): child 11827 killed with signal 11 (core dumps disabled) mail.err.3.gz:Mar 13 02:35:33 mail dovecot: imap(sergio): Fatal: master: service(imap): child 11837 killed with signal 11 (core dumps disabled) mail.err.3.gz:Mar 13 02:35:33 mail dovecot: imap(sergio): Fatal: master: service(imap): child 11824 killed with signal 11 (core dumps disabled) % s dovecot -n # 2.3.4.1 (f79e8e7e4): /etc/dovecot/dovecot.conf # Pigeonhole version 0.5.4 () doveconf: Warning: service auth { client_limit=1000 } is lower than required under max. load (1324) doveconf: Warning: service anvil { client_limit=1000 } is lower than required under max. load (1227) # OS: Linux 4.9.0-8-amd64 x86_64 Debian 9.8 ext4 # Hostname: mail.outerface.net auth_verbose = yes lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes lmtp_rcpt_check_quota = yes lmtp_save_to_detail_mailbox = yes mail_home = /var/mail/%u mail_location = sdbox:/var/mail/%u mail_plugins = quota fts virtual mail_privileged_group = mail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext spamtest spamtestplus namespace { location = virtual:~/mailboxes/virtual prefix = virtual/ separator = / } namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Spam { special_use = \Junk } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { fts_autoindex = yes quota = count:User quota quota_grace = 10%% quota_rule = *:storage=2G quota_vsizes = yes sieve = file:~/sieve;active=~/.dovecot.sieve sieve_extensions = +spamtest +spamtestplus sieve_global = /etc/dovecot/sieve/ sieve_spamtest_max_value = 120 sieve_spamtest_status_header = X-Spam_score_int sieve_spamtest_status_type = score } protocols = " imap lmtp sieve" service auth-worker { user = $default_internal_user } service auth { unix_listener auth-client { mode = 0666 user = mail } } service imap-login { inet_listener imaps { port = 0 } process_limit = 1024 service_count = 1 vsz_limit = 64 M } service imap { process_limit = 1024 } ssl = required ssl_cert = </etc/ssl/localcerts/outerface.net-cert.pem ssl_cipher_list = ECDHE-ECDSA-AES256-GCM-SHA384 ssl_client_ca_dir = /etc/ssl/certs ssl_key = # hidden, use -P to show it ssl_min_protocol = TLSv1.2 userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } protocol lmtp { mail_fsync = optimized mail_plugins = quota fts virtual sieve } protocol lda { mail_fsync = optimized } protocol imap { mail_max_userip_connections = 128 mail_plugins = quota fts virtual imap_zlib quota } -- sergio.

1 0

Purges now happen 5 times faster
by Steve Litt 29 Mar '19

29 Mar '19

Hi all, I use Claws-Mail to look inside my local (same metal) Dovecot server. All incoming mail is dumped into Dovecot folders via procmail. All of a sudden today, mass purges of "marked for delete" happen about 5 times faster. The process used to be a significant productivity destroyer, but now is easy to work with. In other words, it's a good thing, but until I know why this happened, I'll have that little voice inside telling me there's some evil side effect somewhere. Does anybody know any reason this should have happened? I'm using Dovecot 2.3.5 (513208660) and Claws-Mail 3.17.3. Thanks, SteveT

1 0

v2.2.27 Panic: file rfc822-parser.h: line 23 (rfc822_parser_deinit): assertion failed: (ctx->data <= ctx->end)
by Jason Lewis 29 Mar '19

29 Mar '19

Hi, I've been having an issue with the indexer giving me errors on mailbox in dovecot. I managed to narrow it down to a specific email in that mailbox. Various dovecot functions have issues with this email. The email itself is just spam. I can email it to you if you want to analyse it. I did run it through mbox-anonymize but its not clear to me that that would be of any use. Happy to email the suspect email privately to anyone who wants it. /home is mounted nfs4 and is zfs on the nfs server. Dovecot is installed from Debian Jessie. $ /usr/sbin/dovecot --version 2.2.27 (c0f36b0) dovecot-core: Installed: 1:2.2.27-3+deb9u2~bpo8+1 Candidate: 1:2.2.27-3+deb9u2~bpo8+1 Version table: *** 1:2.2.27-3+deb9u2~bpo8+1 0 100 /var/lib/dpkg/status 1:2.2.13-12~deb8u5 0 400 http://security.debian.org/ jessie/updates/main amd64 Packages 1:2.2.13-12~deb8u4 0 400 http://deb.debian.org/debian/ jessie/main amd64 Packages ~# dovecot -n # 2.2.27 (c0f36b0): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.16 (fed8554) # OS: Linux 4.9.0-0.bpo.6-amd64 x86_64 Debian 8.10 imap_hibernate_timeout = 5 secs mail_location = maildir:~/Maildir mail_plugins = fts fts_solr mailbox_list_index = yes namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } plugin { fts = solr fts_autoindex = yes fts_enforced = yes fts_solr = url=http://10.0.2.19:8080/solr/ imapsieve_mailbox1_before = file:/etc/dovecot/train-as-spam.sieve imapsieve_mailbox1_causes = COPY imapsieve_mailbox1_name = Junk imapsieve_mailbox2_before = file:/etc/dovecot/train-as-ham.sieve imapsieve_mailbox2_causes = COPY imapsieve_mailbox2_from = Junk imapsieve_mailbox2_name = * sieve = file:~/sieve;active=~/.dovecot.sieve sieve_global_extensions = +vnd.dovecot.pipe +vnd.dovecot.environment sieve_pipe_bin_dir = /usr/bin sieve_plugins = sieve_imapsieve sieve_extprograms } protocols = " imap" service anvil { client_limit = 1127 } service auth { client_limit = 2200 unix_listener /var/spool/postfix/private/auth { mode = 0666 } } service imap-hibernate { unix_listener imap-hibernate { group = dovecot mode = 0660 } } service imap-login { process_limit = 1024 process_min_avail = 12 service_count = 0 vsz_limit = 1 G } service imap { extra_groups = dovecot unix_listener imap-master { user = dovecot } } ssl_cert = </etc/letsencrypt/live/imap.organictrader.com.au/fullchain.pem ssl_key = # hidden, use -P to show it userdb { driver = passwd } protocol imap { mail_max_userip_connections = 20 mail_plugins = fts fts_solr imap_sieve } jason@debian:~$ doveadm -D -f flow fetch imap.envelope mailbox crm-spam.2008.g Debug: Loading modules from directory: /usr/lib/dovecot/modules Debug: Module loaded: /usr/lib/dovecot/modules/lib20_fts_plugin.so Debug: Module loaded: /usr/lib/dovecot/modules/lib21_fts_solr_plugin.so Debug: Loading modules from directory: /usr/lib/dovecot/modules/doveadm Debug: Skipping module doveadm_acl_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_acl_plugin.so: undefined symbol: acl_user_module (this is usually intentional, so just ignore this message) Debug: Skipping module doveadm_expire_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_expire_plugin.so: undefined symbol: expire_set_deinit (this is usually intentional, so just ignore this message) Debug: Skipping module doveadm_quota_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_quota_plugin.so: undefined symbol: quota_user_module (this is usually intentional, so just ignore this message) Debug: Module loaded: /usr/lib/dovecot/modules/doveadm/lib10_doveadm_sieve_plugin.so Debug: Skipping module doveadm_fts_lucene_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/lib20_doveadm_fts_lucene_plugin.so: undefined symbol: lucene_index_iter_deinit (this is usually intentional, so just ignore this message) Debug: Module loaded: /usr/lib/dovecot/modules/doveadm/lib20_doveadm_fts_plugin.so Debug: Skipping module doveadm_mail_crypt_plugin, because dlopen() failed: /usr/lib/dovecot/modules/doveadm/libdoveadm_mail_crypt_plugin.so: undefined symbol: mail_crypt_box_get_pvt_digests (this is usually intentional, so just ignore this message) doveadm(jason): Debug: Effective uid=1000, gid=1000, home=/home/jason doveadm(jason): Debug: Namespace inbox: type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:~/Maildir doveadm(jason): Debug: maildir++: root=/home/jason/Maildir, index=, indexpvt=, control=, inbox=/home/jason/Maildir, alt= doveadm(jason): Debug: Namespace : Using permissions from /home/jason/Maildir: mode=0700 gid=default doveadm(jason): Debug: Mailbox crm-spam.2008.g: Opened mail UID=38 because: 1/10 headers not cached (first=Sender) (Mail has other cached fields, reset_id=1553472765) doveadm(jason): Panic: file rfc822-parser.h: line 23 (rfc822_parser_deinit): assertion failed: (ctx->data <= ctx->end) doveadm(jason): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x989ae) [0x7f170b1389ae] -> /usr/lib/dovecot/libdovecot.so.0(+0x98a28) [0x7f170b138a28] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7f170b0ce67e] -> /usr/lib/dovecot/libdovecot.so.0(+0x7c97d) [0x7f170b11c97d] -> /usr/lib/dovecot/libdovecot.so.0(message_address_parse+0x55) [0x7f170b11c9e5] -> /usr/lib/dovecot/libdovecot.so.0(imap_envelope_parse_header+0x144) [0x7f170b110374] -> /usr/lib/dovecot/libdovecot-storage.so.0(index_mail_parse_header+0xfe) [0x7f170b47422e] -> /usr/lib/dovecot/libdovecot.so.0(+0x7979f) [0x7f170b11979f] -> /usr/lib/dovecot/libdovecot.so.0(i_stream_read+0x53) [0x7f170b1437e3] -> /usr/lib/dovecot/libdovecot.so.0(i_stream_read_data+0x3d) [0x7f170b14422d] -> /usr/lib/dovecot/libdovecot.so.0(message_parse_header_next+0x72) [0x7f170b11f3d2] -> /usr/lib/dovecot/libdovecot.so.0(message_parse_header+0x4f) [0x7f170b11fd7f] -> /usr/lib/dovecot/libdovecot-storage.so.0(index_mail_headers_get_envelope+0x138) [0x7f170b475448] -> /usr/lib/dovecot/libdovecot-storage.so.0(index_mail_get_special+0x1a1) [0x7f170b4796c1] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0x69dd3) [0x7f170b42fdd3] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_get_special+0xd) [0x7f170b400a8d] -> /usr/bin/doveadm(+0x2dca8) [0x562378dd4ca8] -> /usr/bin/doveadm(+0x2ed7e) [0x562378dd5d7e] -> /usr/bin/doveadm(+0x2a57c) [0x562378dd157c] -> /usr/bin/doveadm(+0x2b0da) [0x562378dd20da] -> /usr/bin/doveadm(doveadm_cmd_ver2_to_mail_cmd_wrapper+0x21f) [0x562378dd2f5f] -> /usr/bin/doveadm(doveadm_cmd_run_ver2+0x560) [0x562378de2390] -> /usr/bin/doveadm(doveadm_cmd_try_run_ver2+0x37) [0x562378de23e7] -> /usr/bin/doveadm(main+0x1e4) [0x562378dc1f44] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf5) [0x7f170ad16b45] -> /usr/bin/doveadm(+0x1b32c) [0x562378dc232c] Aborted (core dumped) jason@debian:~$ gdb /usr/bin/doveadm /home/jason/core GNU gdb (Debian 7.7.1+dfsg-5) 7.7.1 Copyright (C) 2014 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "x86_64-linux-gnu". Type "show configuration" for configuration details. For bug reporting instructions, please see: <http://www.gnu.org/software/gdb/bugs/>. Find the GDB manual and other documentation resources online at: <http://www.gnu.org/software/gdb/documentation/>. For help, type "help". Type "apropos word" to search for commands related to "word"... Reading symbols from /usr/bin/doveadm...(no debugging symbols found)...done. [New LWP 22454] Core was generated by `/usr/bin/doveadm -D -f flow fetch imap.envelope mailbox crm-spam.2008.g'. Program terminated with signal SIGABRT, Aborted. #0 0x00007f170ad2a067 in __GI_raise (sig=sig@entry=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:56 56 ../nptl/sysdeps/unix/sysv/linux/raise.c: No such file or directory. (gdb) bt full #0 0x00007f170ad2a067 in __GI_raise (sig=sig@entry=6) at ../nptl/sysdeps/unix/sysv/linux/raise.c:56 resultvar = 0 pid = 22454 selftid = 22454 #1 0x00007f170ad2b448 in __GI_abort () at abort.c:89 save_stage = 2 act = {__sigaction_handler = {sa_handler = 0x0, sa_sigaction = 0x0}, sa_mask = {__val = {1024, 94710351668199, 94710351535940, 139736942472005, 94710351536940, 0, 94710367714600, 513, 13251895700223756544, 94710367714600, 139736946974659, 94710367714600, 140734907147216, 4294967040, 139736946975017, 94710367714600}}, sa_flags = 185808618, sa_restorer = 0x7fff6625e401} sigs = {__val = {32, 0 <repeats 15 times>}} #2 0x00007f170b1389a6 in ?? () from /usr/lib/dovecot/libdovecot.so.0 No symbol table info available. #3 0x00007f170b138a28 in default_fatal_handler () from /usr/lib/dovecot/libdovecot.so.0 No symbol table info available. #4 0x00007f170b0ce67e in i_panic () from /usr/lib/dovecot/libdovecot.so.0 No symbol table info available. #5 0x00007f170b11c97d in ?? () from /usr/lib/dovecot/libdovecot.so.0 No symbol table info available. #6 0x00007f170b11c9e5 in message_address_parse () from /usr/lib/dovecot/libdovecot.so.0 No symbol table info available. #7 0x00007f170b110374 in imap_envelope_parse_header () from /usr/lib/dovecot/libdovecot.so.0 No symbol table info available. #8 0x00007f170b47422e in index_mail_parse_header () from /usr/lib/dovecot/libdovecot-storage.so.0 No symbol table info available. #9 0x00007f170b11979f in ?? () from /usr/lib/dovecot/libdovecot.so.0 No symbol table info available. #10 0x00007f170b1437e3 in i_stream_read () from /usr/lib/dovecot/libdovecot.so.0 No symbol table info available. #11 0x00007f170b14422d in i_stream_read_data () from /usr/lib/dovecot/libdovecot.so.0 No symbol table info available. #12 0x00007f170b11f3d2 in message_parse_header_next () from /usr/lib/dovecot/libdovecot.so.0 No symbol table info available. #13 0x00007f170b11fd7f in message_parse_header () from /usr/lib/dovecot/libdovecot.so.0 No symbol table info available. #14 0x00007f170b475448 in index_mail_headers_get_envelope () from /usr/lib/dovecot/libdovecot-storage.so.0 No symbol table info available. #15 0x00007f170b4796c1 in index_mail_get_special () from /usr/lib/dovecot/libdovecot-storage.so.0 No symbol table info available. #16 0x00007f170b42fdd3 in ?? () from /usr/lib/dovecot/libdovecot-storage.so.0 No symbol table info available. ---Type <return> to continue, or q <return> to quit--- #17 0x00007f170b400a8d in mail_get_special () from /usr/lib/dovecot/libdovecot-storage.so.0 No symbol table info available. #18 0x0000562378dd4ca8 in ?? () No symbol table info available. #19 0x0000562378dd5d7e in ?? () No symbol table info available. #20 0x0000562378dd157c in ?? () No symbol table info available. #21 0x0000562378dd20da in ?? () No symbol table info available. #22 0x0000562378dd2f5f in doveadm_cmd_ver2_to_mail_cmd_wrapper () No symbol table info available. #23 0x0000562378de2390 in doveadm_cmd_run_ver2 () No symbol table info available. #24 0x0000562378de23e7 in doveadm_cmd_try_run_ver2 () No symbol table info available. #25 0x0000562378dc1f44 in main () No symbol table info available. (gdb) -- Jason Lewis http://emacstragic.net

5 9

Apparmor problem
by Ervin Hegedüs 28 Mar '19

28 Mar '19

Hi there, I know this isn't a Dovecot issue, but hope that somebody can helps me. I've successfully installed and configured Dovecot to a Debian 9 server. Looks like everything works as well, I just see a line in the log when I send a mail: Mar 28 22:21:47 mailng kernel: [3150146.825007] audit: type=1400 audit(1553808107.757:286204): apparmor="DENIED" operation="open" profile="/usr/lib/dovecot/dovecot-lda" name="/usr/share/dovecot/protocols.d/" pid=26197 comm="doveconf" requested_mask="r" denied_mask="r" fsuid=5000 ouid=0 The /usr/share/dovecot/protocols.d/ directory and its content (.../protocols.d/**) set up in usr.lib.dovecot.dovecot-lda apparmor profile with mask "r", but this line every time comes, when I send a mail through webmail - think when the client copies the message to the Sent folder (anyway, the sent messages are in Sent folder after sending, so everything works). Do you have any idea? Thanks, a.

1 0

Hibernation and proxy
by azurit＠pobox.sk 28 Mar '19

28 Mar '19

Hi, does hibernation works well with proxy? Are proxy connections hibernated or not? azur

2 3

Regression ACL & namespace prefix
by Michal Hlavinka 28 Mar '19

28 Mar '19

Hi tl;dr: Seems that for Global ACL directory, namespace prefix is not part of the path, when looking for acl file. Long version: We're planning to update dovecot in next os update to 2.2.36 and while going through regression testing, we found a problem with ACL configuration combined with namespace. Test uses "Global ACL directory" configuration. Relevant configuration part: mail_location = maildir:~/Maildir namespace inbox { hidden = no inbox = yes list = yes location = prefix = separator = / } namespace { hidden = no list = yes location = maildir:/var/mail/pub prefix = pub/ separator = / type = public } mail_plugins = acl protocol imap { mail_plugins = $mail_plugins acl imap_acl } plugin { acl = vfile:/etc/dovecot/global-acls } ACL config file is stored at: /etc/dovecot/global-acls/pub/.DEFAULT when trying to examine "pub", it is denied: fetchmail: IMAP> A0005 EXAMINE "pub" fetchmail: IMAP< A0005 NO Mailbox doesn't exist: pub (0.001 + 0.000 secs). # doveadm acl debug -u d2 pub doveadm(d2): Info: Mailbox '' is in namespace 'pub/' doveadm(d2): Info: Mailbox path: /var/mail/pub doveadm(d2): Info: All message flags are shared across users in mailbox doveadm(d2): Info: User d2 has no rights for mailbox doveadm(d2): Error: User d2 is missing 'lookup' right doveadm(d2): Info: Mailbox pub is NOT visible in LIST because it did not find acl file: imap(d2): Debug: Namespace : type=public, prefix=pub/, sep=/, inbox=no, hidden=no, list=yes, subscriptions=yes location=maildir:/var/mail/pub imap(d2): Debug: maildir++: root=/var/mail/pub, index=, indexpvt=, control=, inbox=, alt= imap(d2): Debug: acl: initializing backend with data: vfile:/etc/dovecot/global-acls imap(d2): Debug: acl: acl username = d2 imap(d2): Debug: acl: owner = 0 imap(d2): Debug: acl vfile: Global ACL legacy directory: /etc/dovecot/global-acls imap(d2): Debug: pub: Mailbox opened because: EXAMINE imap(d2): Debug: acl vfile: file /etc/dovecot/global-acls//.DEFAULT not found imap(d2): Debug: acl vfile: file /var/mail/pub/dovecot-acl not found see it's looking for: /etc/dovecot/global-acls//.DEFAULT instead of /etc/dovecot/global-acls/pub/.DEFAULT Checking with documentation https://wiki.dovecot.org/ACL it seems that prefix should still be part of the path, as it was before: """The filenames must start with namespace prefix (if it has one). For example with namespace prefix=INBOX/ containing mailbox "foo" use /etc/dovecot/acls/INBOX/foo.""" Just for comparison, previous version (2.2.10) would work fine: imap(d2): Debug: Namespace : type=public, prefix=pub/, sep=/, inbox=no, hidden=no, list=yes, subscriptions=yes location=maildir:/var/mail/pub imap(d2): Debug: maildir++: root=/var/mail/pub, index=, indexpvt=, control=, inbox=, alt= imap(d2): Debug: acl: initializing backend with data: vfile:/etc/dovecot/global-acls imap(d2): Debug: acl: acl username = d2 imap(d2): Debug: acl: owner = 0 imap(d2): Debug: acl vfile: Global ACL directory: /etc/dovecot/global-acls imap(d2): Debug: acl vfile: reading file /etc/dovecot/global-acls/pub/.DEFAULT imap(d2): Debug: acl vfile: file /var/mail/pub/dovecot-acl not found I've localized problem to: src/plugins/acl/acl-backend-vfile.c: acl_backend_vfile_object_init(...) and change from: vname = mailbox_list_get_vname(_backend->list, name); to: vname = *name == '\0' ? "" : mailbox_list_get_vname(_backend->list, name); that happened quite time ago during bigger acl changes and I don't know why exactly this line was changed previously. Anyway, reverting this line alone fixes the problem and while testing both per-mailbox ACL vfile and Global ACL file, reverting this did not affect them.

3 7

CVE-2019-7524 backport patch for 2.2.33.2
by Gerald Galster 28 Mar '19

28 Mar '19

Hello Aki, I'm currently stuck with 2.2.33.2 as 2.2.36 still duplicates mails after pop3 deletion on a two node dsync cluster. Therefore I've created a small patch and it seems only these two files are affected: dovecot-2.2.36.3/src/lib-storage/index/index-pop3-uidl.c dovecot-2.2.36.3/src/plugins/fts/fts-api.c Please correct me if I have missed something. Best regards Gerald

2 1

CVE-2019-7524: Buffer overflow when reading extension header from dovecot index files
by Aki Tuomi 28 Mar '19

28 Mar '19

Product: Dovecot Vendor: OX Software GmbH Internal reference: DOV-2964 (Bug ID) Vulnerability type: CWE-120 Vulnerable version: 2.0.14 - 2.3.5 Vulnerable component: fts, pop3-uidl-plugin Report confidence: Confirmed Researcher credits: Found in internal testing Solution status: Fixed by Vendor Fixed version: 2.3.5.1, 2.2.36.3 Vendor notification: 2019-02-05 Solution date: 2019-03-21 Public disclosure: 2019-03-28 CVE reference: CVE-2019-7524 CVSS: 3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:C (8.8) Vulnerability Details: When reading FTS or POP3-UIDL header from dovecot index, the input buffer size is not bound, and data is copied to target structure causing stack overflow. Risk: This can be used for local root privilege escalation or executing arbitrary code in dovecot process context. This requires ability to directly modify dovecot indexes. Steps to reproduce: Produce dovecot.index.log entry that creates an FTS header which has more than 12 bytes of data. Trigger dovecot indexer-worker or run doveadm index. Dovecot will crash. Mitigations: Since 2.3.0 dovecot has been compiled with stack smash protection, ASLR, read-only GOT tables and other techniques that make exploiting this bug much harder. Solution: Operators should update to the latest Patch Release. The only workaround is to disable FTS and pop3-uidl plugin. -- Aki Tuomi Open-Xchange Oy

2 4

v2.2.36.3 released
by Aki Tuomi 28 Mar '19

28 Mar '19

https://dovecot.org/releases/2.3/dovecot-2.2.36.3.tar.gz https://dovecot.org/releases/2.3/dovecot-2.2.36.3.tar.gz.sig * CVE-2019-7524: Missing input buffer size validation leads into arbitrary buffer overflow when reading fts or pop3 uidl header from Dovecot index. Exploiting this requires direct write access to the index files. --- Aki Tuomi Open-Xchange oy

1 1

dovecot mailing list stopped delivering mail
by Christian Anthon 28 Mar '19

28 Mar '19

Strangest thing. Since some time Marts 25. I'm no longer receiving mails from the dovecot mailing list server. Mails from other sources are behaving fine. Instead I'm just seing Mar 26 08:27:54 dna01 postfix/smtpd[107746]: Anonymous TLS connection established from talvi.dovecot.org[94.237.25.159]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits) Mar 26 08:27:54 dna01 postfix/smtpd[107746]: disconnect from talvi.dovecot.org[94.237.25.159] ehlo=1 starttls=1 quit=1 commands=3 And then no more. I tried turning up the postfix verbosity, but I'm none the wiser. I realize that this is probably not a dovecot issue, but anybody with any ideas? Cheers, Christian (and please send an off-list reply also) Verbose log: Mar 28 10:57:42 dna01 postfix/smtpd[66648]: connection established Mar 28 10:57:42 dna01 postfix/smtpd[66648]: master_notify: status 0 Mar 28 10:57:42 dna01 postfix/smtpd[66648]: name_mask: resource Mar 28 10:57:42 dna01 postfix/smtpd[66648]: name_mask: software Mar 28 10:57:42 dna01 postfix/smtpd[66648]: connect from talvi.dovecot.org[94.237.25.159] Mar 28 10:57:42 dna01 postfix/smtpd[66648]: match_list_match: talvi.dovecot.org: no match Mar 28 10:57:42 dna01 postfix/smtpd[66648]: match_list_match: 94.237.25.159: no match Mar 28 10:57:42 dna01 postfix/smtpd[66648]: match_list_match: talvi.dovecot.org: no match Mar 28 10:57:42 dna01 postfix/smtpd[66648]: match_list_match: 94.237.25.159: no match Mar 28 10:57:42 dna01 postfix/smtpd[66648]: smtp_stream_setup: maxtime=300 enable_deadline=0 Mar 28 10:57:42 dna01 postfix/smtpd[66648]: match_hostname: smtpd_client_event_limit_exceptions: talvi.dovecot.org ~? 192.168.3.0/24 Mar 28 10:57:42 dna01 postfix/smtpd[66648]: match_hostaddr: smtpd_client_event_limit_exceptions: 94.237.25.159 ~? 192.168.3.0/24 Mar 28 10:57:42 dna01 postfix/smtpd[66648]: match_hostname: smtpd_client_event_limit_exceptions: talvi.dovecot.org ~? 127.0.0.0/8 Mar 28 10:57:42 dna01 postfix/smtpd[66648]: match_hostaddr: smtpd_client_event_limit_exceptions: 94.237.25.159 ~? 127.0.0.0/8 Mar 28 10:57:42 dna01 postfix/smtpd[66648]: match_list_match: talvi.dovecot.org: no match Mar 28 10:57:42 dna01 postfix/smtpd[66648]: match_list_match: 94.237.25.159: no match Mar 28 10:57:42 dna01 postfix/smtpd[66648]: send attr request = connect Mar 28 10:57:42 dna01 postfix/smtpd[66648]: send attr ident = smtp:94.237.25.159 Mar 28 10:57:42 dna01 postfix/smtpd[66648]: private/anvil: wanted attribute: status Mar 28 10:57:42 dna01 postfix/smtpd[66648]: input attribute name: status Mar 28 10:57:42 dna01 postfix/smtpd[66648]: input attribute value: 0 Mar 28 10:57:42 dna01 postfix/smtpd[66648]: private/anvil: wanted attribute: count Mar 28 10:57:42 dna01 postfix/smtpd[66648]: input attribute name: count Mar 28 10:57:42 dna01 postfix/smtpd[66648]: input attribute value: 1 Mar 28 10:57:42 dna01 postfix/smtpd[66648]: private/anvil: wanted attribute: rate Mar 28 10:57:42 dna01 postfix/smtpd[66648]: input attribute name: rate Mar 28 10:57:42 dna01 postfix/smtpd[66648]: input attribute value: 1 Mar 28 10:57:42 dna01 postfix/smtpd[66648]: private/anvil: wanted attribute: (list terminator) Mar 28 10:57:42 dna01 postfix/smtpd[66648]: input attribute name: (end) Mar 28 10:57:42 dna01 postfix/smtpd[66648]: report connect to all milters Mar 28 10:57:42 dna01 postfix/smtpd[66648]: milter_macro_lookup: "j" Mar 28 10:57:42 dna01 postfix/smtpd[66648]: milter_macro_lookup: result "genome.ku.dk" Mar 28 10:57:42 dna01 postfix/smtpd[66648]: milter_macro_lookup: "{daemon_name}" Mar 28 10:57:42 dna01 postfix/smtpd[66648]: milter_macro_lookup: result "genome.ku.dk" Mar 28 10:57:42 dna01 postfix/smtpd[66648]: milter_macro_lookup: "{daemon_addr}" Mar 28 10:57:42 dna01 postfix/smtpd[66648]: milter_macro_lookup: result "192.168.3.112" Mar 28 10:57:42 dna01 postfix/smtpd[66648]: milter_macro_lookup: "v" Mar 28 10:57:42 dna01 postfix/smtpd[66648]: milter_macro_lookup: result "Postfix 3.3.3" Mar 28 10:57:42 dna01 postfix/smtpd[66648]: milter8_connect: non-protocol events for protocol version 6: Mar 28 10:57:42 dna01 postfix/smtpd[66648]: milter8_connect: transport=inet endpoint=localhost:11332 Mar 28 10:57:42 dna01 postfix/smtpd[66648]: trying... [127.0.0.1] Mar 28 10:57:42 dna01 postfix/smtpd[66648]: vstream_tweak_tcp: TCP_MAXSEG 32741 Mar 28 10:57:42 dna01 postfix/smtpd[66648]: fd=11: stream buffer size old=0 new=65482 Mar 28 10:57:42 dna01 postfix/smtpd[66648]: milter8_connect: my_version=0x6 Mar 28 10:57:42 dna01 postfix/smtpd[66648]: milter8_connect: my_actions=0x1ff SMFIF_ADDHDRS SMFIF_CHGBODY SMFIF_ADDRCPT SMFIF_DELRCPT SMFIF_CHGHDRS SMFIF_QUARANTINE SMFIF_CHGFROM SMFIF_ADDRCPT_PAR SMFIF_SETSYMLIST Mar 28 10:57:42 dna01 postfix/smtpd[66648]: milter8_connect: my_events=0x1fffff SMFIP_NOCONNECT SMFIP_NOHELO SMFIP_NOMAIL SMFIP_NORCPT SMFIP_NOBODY SMFIP_NOHDRS SMFIP_NOEOH SMFIP_NR_HDR SMFIP_NOUNKNOWN SMFIP_NODATA SMFIP_SKIP SMFIP_RCPT_REJ SMFIP_NR_CONN SMFIP_NR_HELO SMFIP_NR_MAIL SMFIP_NR_RCPT SMFIP_NR_DATA SMFIP_NR_UNKN SMFIP_NR_EOH SMFIP_NR_BODY SMFIP_HDR_LEADSPC Mar 28 10:57:42 dna01 postfix/smtpd[66648]: milter8_connect: milter inet:localhost:11332 version 6 Mar 28 10:57:42 dna01 postfix/smtpd[66648]: milter8_connect: events SMFIP_NR_HDR SMFIP_NR_CONN SMFIP_NR_HELO SMFIP_NR_MAIL SMFIP_NR_RCPT SMFIP_NR_DATA SMFIP_NR_UNKN SMFIP_NR_EOH SMFIP_NR_BODY Mar 28 10:57:42 dna01 postfix/smtpd[66648]: milter8_connect: requests SMFIF_ADDHDRS SMFIF_CHGBODY SMFIF_ADDRCPT SMFIF_DELRCPT SMFIF_CHGHDRS SMFIF_QUARANTINE SMFIF_CHGFROM SMFIF_ADDRCPT_PAR SMFIF_SETSYMLIST Mar 28 10:57:42 dna01 postfix/smtpd[66648]: milter8_conn_event: milter inet:localhost:11332: connect talvi.dovecot.org/94.237.25.159 Mar 28 10:57:42 dna01 postfix/smtpd[66648]: event: SMFIC_CONNECT; macros: j=genome.ku.dk {daemon_name}=genome.ku.dk {daemon_addr}=192.168.3.112 v=Postfix 3.3.3 Mar 28 10:57:42 dna01 postfix/smtpd[66648]: skipping reply for event SMFIC_CONNECT from milter inet:localhost:11332 Mar 28 10:57:42 dna01 postfix/smtpd[66648]: > talvi.dovecot.org[94.237.25.159]: 220 genome.ku.dk ESMTP Postfix Mar 28 10:57:42 dna01 postfix/smtpd[66648]: < talvi.dovecot.org[94.237.25.159]: EHLO talvi.dovecot.org Mar 28 10:57:42 dna01 postfix/smtpd[66648]: report helo to all milters Mar 28 10:57:42 dna01 postfix/smtpd[66648]: milter_macro_lookup: "{tls_version}" Mar 28 10:57:42 dna01 postfix/smtpd[66648]: milter_macro_lookup: "{cipher}" Mar 28 10:57:42 dna01 postfix/smtpd[66648]: milter_macro_lookup: "{cipher_bits}" Mar 28 10:57:42 dna01 postfix/smtpd[66648]: milter_macro_lookup: "{cert_subject}" Mar 28 10:57:42 dna01 postfix/smtpd[66648]: milter_macro_lookup: "{cert_issuer}" Mar 28 10:57:42 dna01 postfix/smtpd[66648]: milter8_helo_event: milter inet:localhost:11332: helo talvi.dovecot.org Mar 28 10:57:42 dna01 postfix/smtpd[66648]: event: SMFIC_HELO; macros: (none) Mar 28 10:57:42 dna01 postfix/smtpd[66648]: skipping reply for event SMFIC_HELO from milter inet:localhost:11332 Mar 28 10:57:42 dna01 postfix/smtpd[66648]: match_list_match: talvi.dovecot.org: no match Mar 28 10:57:42 dna01 postfix/smtpd[66648]: match_list_match: 94.237.25.159: no match Mar 28 10:57:42 dna01 postfix/smtpd[66648]: > talvi.dovecot.org[94.237.25.159]: 250-genome.ku.dk Mar 28 10:57:42 dna01 postfix/smtpd[66648]: > talvi.dovecot.org[94.237.25.159]: 250-PIPELINING Mar 28 10:57:42 dna01 postfix/smtpd[66648]: > talvi.dovecot.org[94.237.25.159]: 250-SIZE 150000000 Mar 28 10:57:42 dna01 postfix/smtpd[66648]: > talvi.dovecot.org[94.237.25.159]: 250-VRFY Mar 28 10:57:42 dna01 postfix/smtpd[66648]: > talvi.dovecot.org[94.237.25.159]: 250-ETRN Mar 28 10:57:42 dna01 postfix/smtpd[66648]: > talvi.dovecot.org[94.237.25.159]: 250-STARTTLS Mar 28 10:57:42 dna01 postfix/smtpd[66648]: > talvi.dovecot.org[94.237.25.159]: 250-ENHANCEDSTATUSCODES Mar 28 10:57:42 dna01 postfix/smtpd[66648]: > talvi.dovecot.org[94.237.25.159]: 250-8BITMIME Mar 28 10:57:42 dna01 postfix/smtpd[66648]: > talvi.dovecot.org[94.237.25.159]: 250 DSN Mar 28 10:57:42 dna01 postfix/smtpd[66648]: < talvi.dovecot.org[94.237.25.159]: STARTTLS Mar 28 10:57:42 dna01 postfix/smtpd[66648]: query milter states for other event Mar 28 10:57:42 dna01 postfix/smtpd[66648]: milter8_other_event: milter inet:localhost:11332 Mar 28 10:57:42 dna01 postfix/smtpd[66648]: > talvi.dovecot.org[94.237.25.159]: 220 2.0.0 Ready to start TLS Mar 28 10:57:42 dna01 postfix/smtpd[66648]: abort all milters Mar 28 10:57:42 dna01 postfix/smtpd[66648]: milter8_abort: abort milter inet:localhost:11332 Mar 28 10:57:42 dna01 postfix/smtpd[66648]: auto_clnt_open: connected to private/tlsmgr Mar 28 10:57:42 dna01 postfix/smtpd[66648]: send attr request = seed Mar 28 10:57:42 dna01 postfix/smtpd[66648]: send attr size = 32 Mar 28 10:57:42 dna01 postfix/smtpd[66648]: private/tlsmgr: wanted attribute: status Mar 28 10:57:42 dna01 postfix/smtpd[66648]: input attribute name: status Mar 28 10:57:42 dna01 postfix/smtpd[66648]: input attribute value: 0 Mar 28 10:57:42 dna01 postfix/smtpd[66648]: private/tlsmgr: wanted attribute: seed Mar 28 10:57:42 dna01 postfix/smtpd[66648]: input attribute name: seed Mar 28 10:57:42 dna01 postfix/smtpd[66648]: input attribute value: HIDDEN_BEFORE_POST Mar 28 10:57:42 dna01 postfix/smtpd[66648]: private/tlsmgr: wanted attribute: (list terminator) Mar 28 10:57:42 dna01 postfix/smtpd[66648]: input attribute name: (end) Mar 28 10:57:42 dna01 postfix/smtpd[66648]: send attr request = tktkey Mar 28 10:57:42 dna01 postfix/smtpd[66648]: send attr keyname = [data 16 bytes] Mar 28 10:57:42 dna01 postfix/smtpd[66648]: private/tlsmgr: wanted attribute: status Mar 28 10:57:42 dna01 postfix/smtpd[66648]: input attribute name: status Mar 28 10:57:42 dna01 postfix/smtpd[66648]: input attribute value: 4294967295 Mar 28 10:57:42 dna01 postfix/smtpd[66648]: private/tlsmgr: wanted attribute: keybuf Mar 28 10:57:42 dna01 postfix/smtpd[66648]: input attribute name: keybuf Mar 28 10:57:42 dna01 postfix/smtpd[66648]: input attribute value: HIDDEN_BEFORE_POST Mar 28 10:57:42 dna01 postfix/smtpd[66648]: private/tlsmgr: wanted attribute: (list terminator) Mar 28 10:57:42 dna01 postfix/smtpd[66648]: input attribute name: (end) Mar 28 10:57:42 dna01 postfix/smtpd[66648]: send attr request = tktkey Mar 28 10:57:42 dna01 postfix/smtpd[66648]: send attr keyname = [data 0 bytes] Mar 28 10:57:42 dna01 postfix/smtpd[66648]: private/tlsmgr: wanted attribute: status Mar 28 10:57:42 dna01 postfix/smtpd[66648]: input attribute name: status Mar 28 10:57:42 dna01 postfix/smtpd[66648]: input attribute value: 0 Mar 28 10:57:42 dna01 postfix/smtpd[66648]: private/tlsmgr: wanted attribute: keybuf Mar 28 10:57:42 dna01 postfix/smtpd[66648]: input attribute name: keybuf Mar 28 10:57:42 dna01 postfix/smtpd[66648]: input attribute value: HIDDEN_BEFORE_POST Mar 28 10:57:42 dna01 postfix/smtpd[66648]: private/tlsmgr: wanted attribute: (list terminator) Mar 28 10:57:42 dna01 postfix/smtpd[66648]: input attribute name: (end) Mar 28 10:57:42 dna01 postfix/smtpd[66648]: Anonymous TLS connection established from talvi.dovecot.org[94.237.25.159]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits) Mar 28 10:57:42 dna01 postfix/smtpd[66648]: xsasl_dovecot_server_create: SASL service=smtp, realm=(null) Mar 28 10:57:42 dna01 postfix/smtpd[66648]: name_mask: noanonymous Mar 28 10:57:42 dna01 postfix/smtpd[66648]: xsasl_dovecot_server_connect: Connecting Mar 28 10:57:42 dna01 postfix/smtpd[66648]: xsasl_dovecot_server_connect: auth reply: VERSION?1?1 Mar 28 10:57:42 dna01 postfix/smtpd[66648]: xsasl_dovecot_server_connect: auth reply: MECH?PLAIN?plaintext Mar 28 10:57:42 dna01 postfix/smtpd[66648]: name_mask: plaintext Mar 28 10:57:42 dna01 postfix/smtpd[66648]: xsasl_dovecot_server_connect: auth reply: MECH?LOGIN?plaintext Mar 28 10:57:42 dna01 postfix/smtpd[66648]: name_mask: plaintext Mar 28 10:57:42 dna01 postfix/smtpd[66648]: xsasl_dovecot_server_connect: auth reply: SPID?62898 Mar 28 10:57:42 dna01 postfix/smtpd[66648]: xsasl_dovecot_server_connect: auth reply: CUID?107 Mar 28 10:57:42 dna01 postfix/smtpd[66648]: xsasl_dovecot_server_connect: auth reply: COOKIE?HIDDEN_BEFORE_POST Mar 28 10:57:42 dna01 postfix/smtpd[66648]: xsasl_dovecot_server_connect: auth reply: DONE Mar 28 10:57:42 dna01 postfix/smtpd[66648]: xsasl_dovecot_server_mech_filter: keep mechanism: PLAIN Mar 28 10:57:42 dna01 postfix/smtpd[66648]: xsasl_dovecot_server_mech_filter: keep mechanism: LOGIN Mar 28 10:57:42 dna01 postfix/smtpd[66648]: < talvi.dovecot.org[94.237.25.159]: QUIT Mar 28 10:57:42 dna01 postfix/smtpd[66648]: > talvi.dovecot.org[94.237.25.159]: 221 2.0.0 Bye Mar 28 10:57:42 dna01 postfix/smtpd[66648]: match_hostname: smtpd_client_event_limit_exceptions: talvi.dovecot.org ~? 192.168.3.0/24 Mar 28 10:57:42 dna01 postfix/smtpd[66648]: match_hostaddr: smtpd_client_event_limit_exceptions: 94.237.25.159 ~? 192.168.3.0/24 Mar 28 10:57:42 dna01 postfix/smtpd[66648]: match_hostname: smtpd_client_event_limit_exceptions: talvi.dovecot.org ~? 127.0.0.0/8 Mar 28 10:57:42 dna01 postfix/smtpd[66648]: match_hostaddr: smtpd_client_event_limit_exceptions: 94.237.25.159 ~? 127.0.0.0/8 Mar 28 10:57:42 dna01 postfix/smtpd[66648]: match_list_match: talvi.dovecot.org: no match Mar 28 10:57:42 dna01 postfix/smtpd[66648]: match_list_match: 94.237.25.159: no match Mar 28 10:57:42 dna01 postfix/smtpd[66648]: send attr request = disconnect Mar 28 10:57:42 dna01 postfix/smtpd[66648]: send attr ident = smtp:94.237.25.159 Mar 28 10:57:42 dna01 postfix/smtpd[66648]: private/anvil: wanted attribute: status Mar 28 10:57:42 dna01 postfix/smtpd[66648]: input attribute name: status Mar 28 10:57:42 dna01 postfix/smtpd[66648]: input attribute value: 0 Mar 28 10:57:42 dna01 postfix/smtpd[66648]: private/anvil: wanted attribute: (list terminator) Mar 28 10:57:42 dna01 postfix/smtpd[66648]: input attribute name: (end) Mar 28 10:57:42 dna01 postfix/smtpd[66648]: disconnect event to all milters Mar 28 10:57:42 dna01 postfix/smtpd[66648]: milter8_disc_event: quit milter inet:localhost:11332 Mar 28 10:57:42 dna01 postfix/smtpd[66648]: disconnect from talvi.dovecot.org[94.237.25.159] ehlo=1 starttls=1 quit=1 commands=3 Mar 28 10:57:42 dna01 postfix/smtpd[66648]: free all milters Mar 28 10:57:42 dna01 postfix/smtpd[66648]: free milter inet:localhost:11332 Mar 28 10:57:42 dna01 postfix/smtpd[66648]: master_notify: status 1 Mar 28 10:57:42 dna01 postfix/smtpd[66648]: connection closed Mar 28 10:57:47 dna01 postfix/smtpd[66648]: auto_clnt_close: disconnect private/tlsmgr stream Mar 28 10:57:55 dna01 postfix/smtpd[66648]: connection established Mar 28 10:57:55 dna01 postfix/smtpd[66648]: master_notify: status 0 Mar 28 10:57:55 dna01 postfix/smtpd[66648]: name_mask: resource Mar 28 10:57:55 dna01 postfix/smtpd[66648]: name_mask: software Mar 28 10:57:55 dna01 postfix/smtpd[66648]: connect from talvi.dovecot.org[94.237.25.159] Mar 28 10:57:55 dna01 postfix/smtpd[66648]: match_list_match: talvi.dovecot.org: no match Mar 28 10:57:55 dna01 postfix/smtpd[66648]: match_list_match: 94.237.25.159: no match Mar 28 10:57:55 dna01 postfix/smtpd[66648]: match_list_match: talvi.dovecot.org: no match Mar 28 10:57:55 dna01 postfix/smtpd[66648]: match_list_match: 94.237.25.159: no match Mar 28 10:57:55 dna01 postfix/smtpd[66648]: smtp_stream_setup: maxtime=300 enable_deadline=0 Mar 28 10:57:55 dna01 postfix/smtpd[66648]: match_hostname: smtpd_client_event_limit_exceptions: talvi.dovecot.org ~? 192.168.3.0/24 Mar 28 10:57:55 dna01 postfix/smtpd[66648]: match_hostaddr: smtpd_client_event_limit_exceptions: 94.237.25.159 ~? 192.168.3.0/24 Mar 28 10:57:55 dna01 postfix/smtpd[66648]: match_hostname: smtpd_client_event_limit_exceptions: talvi.dovecot.org ~? 127.0.0.0/8 Mar 28 10:57:55 dna01 postfix/smtpd[66648]: match_hostaddr: smtpd_client_event_limit_exceptions: 94.237.25.159 ~? 127.0.0.0/8 Mar 28 10:57:55 dna01 postfix/smtpd[66648]: match_list_match: talvi.dovecot.org: no match Mar 28 10:57:55 dna01 postfix/smtpd[66648]: match_list_match: 94.237.25.159: no match Mar 28 10:57:55 dna01 postfix/smtpd[66648]: send attr request = connect Mar 28 10:57:55 dna01 postfix/smtpd[66648]: send attr ident = smtp:94.237.25.159 Mar 28 10:57:55 dna01 postfix/smtpd[66648]: private/anvil: wanted attribute: status Mar 28 10:57:55 dna01 postfix/smtpd[66648]: input attribute name: status Mar 28 10:57:55 dna01 postfix/smtpd[66648]: input attribute value: 0 Mar 28 10:57:55 dna01 postfix/smtpd[66648]: private/anvil: wanted attribute: count Mar 28 10:57:55 dna01 postfix/smtpd[66648]: input attribute name: count Mar 28 10:57:55 dna01 postfix/smtpd[66648]: input attribute value: 1 Mar 28 10:57:55 dna01 postfix/smtpd[66648]: private/anvil: wanted attribute: rate Mar 28 10:57:55 dna01 postfix/smtpd[66648]: input attribute name: rate Mar 28 10:57:55 dna01 postfix/smtpd[66648]: input attribute value: 2 Mar 28 10:57:55 dna01 postfix/smtpd[66648]: private/anvil: wanted attribute: (list terminator) Mar 28 10:57:55 dna01 postfix/smtpd[66648]: input attribute name: (end) Mar 28 10:57:55 dna01 postfix/smtpd[66648]: report connect to all milters Mar 28 10:57:55 dna01 postfix/smtpd[66648]: milter_macro_lookup: "j" Mar 28 10:57:55 dna01 postfix/smtpd[66648]: milter_macro_lookup: result "genome.ku.dk" Mar 28 10:57:55 dna01 postfix/smtpd[66648]: milter_macro_lookup: "{daemon_name}" Mar 28 10:57:55 dna01 postfix/smtpd[66648]: milter_macro_lookup: result "genome.ku.dk" Mar 28 10:57:55 dna01 postfix/smtpd[66648]: milter_macro_lookup: "{daemon_addr}" Mar 28 10:57:55 dna01 postfix/smtpd[66648]: milter_macro_lookup: result "192.168.3.112" Mar 28 10:57:55 dna01 postfix/smtpd[66648]: milter_macro_lookup: "v" Mar 28 10:57:55 dna01 postfix/smtpd[66648]: milter_macro_lookup: result "Postfix 3.3.3" Mar 28 10:57:55 dna01 postfix/smtpd[66648]: milter8_connect: non-protocol events for protocol version 6: Mar 28 10:57:55 dna01 postfix/smtpd[66648]: milter8_connect: transport=inet endpoint=localhost:11332 Mar 28 10:57:55 dna01 postfix/smtpd[66648]: trying... [127.0.0.1] Mar 28 10:57:55 dna01 postfix/smtpd[66648]: vstream_tweak_tcp: TCP_MAXSEG 32741 Mar 28 10:57:55 dna01 postfix/smtpd[66648]: fd=11: stream buffer size old=0 new=65482 Mar 28 10:57:55 dna01 postfix/smtpd[66648]: milter8_connect: my_version=0x6 Mar 28 10:57:55 dna01 postfix/smtpd[66648]: milter8_connect: my_actions=0x1ff SMFIF_ADDHDRS SMFIF_CHGBODY SMFIF_ADDRCPT SMFIF_DELRCPT SMFIF_CHGHDRS SMFIF_QUARANTINE SMFIF_CHGFROM SMFIF_ADDRCPT_PAR SMFIF_SETSYMLIST Mar 28 10:57:55 dna01 postfix/smtpd[66648]: milter8_connect: my_events=0x1fffff SMFIP_NOCONNECT SMFIP_NOHELO SMFIP_NOMAIL SMFIP_NORCPT SMFIP_NOBODY SMFIP_NOHDRS SMFIP_NOEOH SMFIP_NR_HDR SMFIP_NOUNKNOWN SMFIP_NODATA SMFIP_SKIP SMFIP_RCPT_REJ SMFIP_NR_CONN SMFIP_NR_HELO SMFIP_NR_MAIL SMFIP_NR_RCPT SMFIP_NR_DATA SMFIP_NR_UNKN SMFIP_NR_EOH SMFIP_NR_BODY SMFIP_HDR_LEADSPC Mar 28 10:57:55 dna01 postfix/smtpd[66648]: milter8_connect: milter inet:localhost:11332 version 6 Mar 28 10:57:55 dna01 postfix/smtpd[66648]: milter8_connect: events SMFIP_NR_HDR SMFIP_NR_CONN SMFIP_NR_HELO SMFIP_NR_MAIL SMFIP_NR_RCPT SMFIP_NR_DATA SMFIP_NR_UNKN SMFIP_NR_EOH SMFIP_NR_BODY Mar 28 10:57:55 dna01 postfix/smtpd[66648]: milter8_connect: requests SMFIF_ADDHDRS SMFIF_CHGBODY SMFIF_ADDRCPT SMFIF_DELRCPT SMFIF_CHGHDRS SMFIF_QUARANTINE SMFIF_CHGFROM SMFIF_ADDRCPT_PAR SMFIF_SETSYMLIST Mar 28 10:57:55 dna01 postfix/smtpd[66648]: milter8_conn_event: milter inet:localhost:11332: connect talvi.dovecot.org/94.237.25.159 Mar 28 10:57:55 dna01 postfix/smtpd[66648]: event: SMFIC_CONNECT; macros: j=genome.ku.dk {daemon_name}=genome.ku.dk {daemon_addr}=192.168.3.112 v=Postfix 3.3.3 Mar 28 10:57:55 dna01 postfix/smtpd[66648]: skipping reply for event SMFIC_CONNECT from milter inet:localhost:11332 Mar 28 10:57:55 dna01 postfix/smtpd[66648]: > talvi.dovecot.org[94.237.25.159]: 220 genome.ku.dk ESMTP Postfix Mar 28 10:57:55 dna01 postfix/smtpd[66648]: < talvi.dovecot.org[94.237.25.159]: EHLO talvi.dovecot.org Mar 28 10:57:55 dna01 postfix/smtpd[66648]: report helo to all milters Mar 28 10:57:55 dna01 postfix/smtpd[66648]: milter_macro_lookup: "{tls_version}" Mar 28 10:57:55 dna01 postfix/smtpd[66648]: milter_macro_lookup: "{cipher}" Mar 28 10:57:55 dna01 postfix/smtpd[66648]: milter_macro_lookup: "{cipher_bits}" Mar 28 10:57:55 dna01 postfix/smtpd[66648]: milter_macro_lookup: "{cert_subject}" Mar 28 10:57:55 dna01 postfix/smtpd[66648]: milter_macro_lookup: "{cert_issuer}" Mar 28 10:57:55 dna01 postfix/smtpd[66648]: milter8_helo_event: milter inet:localhost:11332: helo talvi.dovecot.org Mar 28 10:57:55 dna01 postfix/smtpd[66648]: event: SMFIC_HELO; macros: (none) Mar 28 10:57:55 dna01 postfix/smtpd[66648]: skipping reply for event SMFIC_HELO from milter inet:localhost:11332 Mar 28 10:57:55 dna01 postfix/smtpd[66648]: match_list_match: talvi.dovecot.org: no match Mar 28 10:57:55 dna01 postfix/smtpd[66648]: match_list_match: 94.237.25.159: no match Mar 28 10:57:55 dna01 postfix/smtpd[66648]: > talvi.dovecot.org[94.237.25.159]: 250-genome.ku.dk Mar 28 10:57:55 dna01 postfix/smtpd[66648]: > talvi.dovecot.org[94.237.25.159]: 250-PIPELINING Mar 28 10:57:55 dna01 postfix/smtpd[66648]: > talvi.dovecot.org[94.237.25.159]: 250-SIZE 150000000 Mar 28 10:57:55 dna01 postfix/smtpd[66648]: > talvi.dovecot.org[94.237.25.159]: 250-VRFY Mar 28 10:57:55 dna01 postfix/smtpd[66648]: > talvi.dovecot.org[94.237.25.159]: 250-ETRN Mar 28 10:57:55 dna01 postfix/smtpd[66648]: > talvi.dovecot.org[94.237.25.159]: 250-STARTTLS Mar 28 10:57:55 dna01 postfix/smtpd[66648]: > talvi.dovecot.org[94.237.25.159]: 250-ENHANCEDSTATUSCODES Mar 28 10:57:55 dna01 postfix/smtpd[66648]: > talvi.dovecot.org[94.237.25.159]: 250-8BITMIME Mar 28 10:57:55 dna01 postfix/smtpd[66648]: > talvi.dovecot.org[94.237.25.159]: 250 DSN Mar 28 10:57:55 dna01 postfix/smtpd[66648]: < talvi.dovecot.org[94.237.25.159]: STARTTLS Mar 28 10:57:55 dna01 postfix/smtpd[66648]: query milter states for other event Mar 28 10:57:55 dna01 postfix/smtpd[66648]: milter8_other_event: milter inet:localhost:11332 Mar 28 10:57:55 dna01 postfix/smtpd[66648]: > talvi.dovecot.org[94.237.25.159]: 220 2.0.0 Ready to start TLS Mar 28 10:57:55 dna01 postfix/smtpd[66648]: abort all milters Mar 28 10:57:55 dna01 postfix/smtpd[66648]: milter8_abort: abort milter inet:localhost:11332 Mar 28 10:57:55 dna01 postfix/smtpd[66648]: auto_clnt_open: connected to private/tlsmgr Mar 28 10:57:55 dna01 postfix/smtpd[66648]: send attr request = seed Mar 28 10:57:55 dna01 postfix/smtpd[66648]: send attr size = 32 Mar 28 10:57:55 dna01 postfix/smtpd[66648]: private/tlsmgr: wanted attribute: status Mar 28 10:57:55 dna01 postfix/smtpd[66648]: input attribute name: status Mar 28 10:57:55 dna01 postfix/smtpd[66648]: input attribute value: 0 Mar 28 10:57:55 dna01 postfix/smtpd[66648]: private/tlsmgr: wanted attribute: seed Mar 28 10:57:55 dna01 postfix/smtpd[66648]: input attribute name: seed Mar 28 10:57:55 dna01 postfix/smtpd[66648]: input attribute value: HIDDEN_BEFORE_POST Mar 28 10:57:55 dna01 postfix/smtpd[66648]: private/tlsmgr: wanted attribute: (list terminator) Mar 28 10:57:55 dna01 postfix/smtpd[66648]: input attribute name: (end) Mar 28 10:57:55 dna01 postfix/smtpd[66648]: Anonymous TLS connection established from talvi.dovecot.org[94.237.25.159]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits) Mar 28 10:57:55 dna01 postfix/smtpd[66648]: xsasl_dovecot_server_create: SASL service=smtp, realm=(null) Mar 28 10:57:55 dna01 postfix/smtpd[66648]: name_mask: noanonymous Mar 28 10:57:55 dna01 postfix/smtpd[66648]: xsasl_dovecot_server_mech_filter: keep mechanism: PLAIN Mar 28 10:57:55 dna01 postfix/smtpd[66648]: xsasl_dovecot_server_mech_filter: keep mechanism: LOGIN Mar 28 10:57:55 dna01 postfix/smtpd[66648]: < talvi.dovecot.org[94.237.25.159]: QUIT Mar 28 10:57:55 dna01 postfix/smtpd[66648]: > talvi.dovecot.org[94.237.25.159]: 221 2.0.0 Bye Mar 28 10:57:55 dna01 postfix/smtpd[66648]: match_hostname: smtpd_client_event_limit_exceptions: talvi.dovecot.org ~? 192.168.3.0/24 Mar 28 10:57:55 dna01 postfix/smtpd[66648]: match_hostaddr: smtpd_client_event_limit_exceptions: 94.237.25.159 ~? 192.168.3.0/24 Mar 28 10:57:55 dna01 postfix/smtpd[66648]: match_hostname: smtpd_client_event_limit_exceptions: talvi.dovecot.org ~? 127.0.0.0/8 Mar 28 10:57:55 dna01 postfix/smtpd[66648]: match_hostaddr: smtpd_client_event_limit_exceptions: 94.237.25.159 ~? 127.0.0.0/8 Mar 28 10:57:55 dna01 postfix/smtpd[66648]: match_list_match: talvi.dovecot.org: no match Mar 28 10:57:55 dna01 postfix/smtpd[66648]: match_list_match: 94.237.25.159: no match Mar 28 10:57:55 dna01 postfix/smtpd[66648]: send attr request = disconnect Mar 28 10:57:55 dna01 postfix/smtpd[66648]: send attr ident = smtp:94.237.25.159 Mar 28 10:57:55 dna01 postfix/smtpd[66648]: private/anvil: wanted attribute: status Mar 28 10:57:55 dna01 postfix/smtpd[66648]: input attribute name: status Mar 28 10:57:55 dna01 postfix/smtpd[66648]: input attribute value: 0 Mar 28 10:57:55 dna01 postfix/smtpd[66648]: private/anvil: wanted attribute: (list terminator) Mar 28 10:57:55 dna01 postfix/smtpd[66648]: input attribute name: (end) Mar 28 10:57:55 dna01 postfix/smtpd[66648]: disconnect event to all milters Mar 28 10:57:55 dna01 postfix/smtpd[66648]: milter8_disc_event: quit milter inet:localhost:11332 Mar 28 10:57:55 dna01 postfix/smtpd[66648]: disconnect from talvi.dovecot.org[94.237.25.159] ehlo=1 starttls=1 quit=1 commands=3 Mar 28 10:57:55 dna01 postfix/smtpd[66648]: free all milters Mar 28 10:57:55 dna01 postfix/smtpd[66648]: free milter inet:localhost:11332 Mar 28 10:57:55 dna01 postfix/smtpd[66648]: master_notify: status 1 Mar 28 10:57:55 dna01 postfix/smtpd[66648]: connection closed Mar 28 10:58:00 dna01 postfix/smtpd[66648]: auto_clnt_close: disconnect private/tlsmgr stream -- Christian Anthon

2 2

v2.3.5.1 released
by Aki Tuomi 28 Mar '19

28 Mar '19

https://dovecot.org/releases/2.3/dovecot-2.3.5.1.tar.gz https://dovecot.org/releases/2.3/dovecot-2.3.5.1.tar.gz.sig Binary packages in https://repo.dovecot.org/ * CVE-2019-7524: Missing input buffer size validation leads into arbitrary buffer overflow when reading fts or pop3 uidl header from Dovecot index. Exploiting this requires direct write access to the index files. --- Aki Tuomi Open-Xchange oy

2 2

Panic: file mail-transaction-log-file.c: line 105 (mail_transaction_log_file_free): assertion failed: (!file->locked)
by Arkadiusz Miśkiewicz 28 Mar '19

28 Mar '19

Hello. I have one account with heavy traffic (big mails) and quite often indexes get corrupted. This is dovecot 2.3.5 on local fs (xfs), Linux kernel 4.19.20, glibc 2.28. When corruption happens lmtp and pop3 segfault on accessing it like: > Mar 27 11:13:50 mbox dovecot[22370]: lmtp(24428): Connect from local [0/0] > Mar 27 11:13:50 mbox dovecot[22370]: lmtp(piast_efaktury): pid=<24428> session=<QLacCN5Mm1xsXwAA9fPEKQ>, Error: Index /var/mail/piast_efaktury/dovecot.index: Lost log for seq=13 offset=25648: Missing middle file seq=13 (between 13..4294967295, we have seqs 14,15): .log.2 contains file_seq=14 (initial_mapped=0, reason=Index mapped) > Mar 27 11:13:50 mbox dovecot[22370]: lmtp(piast_efaktury): pid=<24428> session=<QLacCN5Mm1xsXwAA9fPEKQ>, Warning: fscking index file /var/mail/piast_efaktury/dovecot.index > Mar 27 11:13:50 mbox dovecot[22370]: lmtp(piast_efaktury): pid=<24428> session=<QLacCN5Mm1xsXwAA9fPEKQ>, Error: Fixed index file /var/mail/piast_efaktury/dovecot.index: log_file_seq 13 -> 15 > Mar 27 11:13:50 mbox dovecot[22370]: lmtp(piast_efaktury): pid=<24428> session=<QLacCN5Mm1xsXwAA9fPEKQ>, Panic: file mail-transaction-log-file.c: line 105 (mail_transaction_log_file_free): assertion failed: (!file->locked) > Mar 27 11:13:50 mbox dovecot[22370]: lmtp(piast_efaktury): pid=<24428> session=<QLacCN5Mm1xsXwAA9fPEKQ>, Error: Raw backtrace: /usr/lib64/dovecot/libdovecot.so.0(+0xe011b) [0x7f25fc82b11b] -> /usr/lib64/dovecot/libdovecot.so.0(+0xe01b1) [0x7f25fc82b1b1] -> /usr/lib64/dovecot/libdovecot.so.0(+0x4bf56) [0x7f25fc796f56] -> /usr/lib64/dovecot/libdovecot-storage.so.0(+0x4b17e) [0x7f25fc92f17e] -> /usr/lib64/dovecot/libdovecot-storage.so.0(mail_transaction_logs_clean+0x5c) [0x7f25fc9e6e3c] -> /usr/lib64/dovecot/libdovecot-storage.so.0(mail_transaction_log_close+0x34) [0x7f25fc9e6f04] -> /usr/lib64/dovecot/libdovecot-storage.so.0(mail_transaction_log_move_to_memory+0xed) [0x7f25fc9e709d] -> /usr/lib64/dovecot/libdovecot-storage.so.0(mail_index_move_to_memory+0x60) [0x7f25fc9e10b0] -> /usr/lib64/dovecot/libdovecot-storage.so.0(mail_index_write+0x1e1) [0x7f25fc9df3a1] -> /usr/lib64/dovecot/libdovecot-storage.so.0(mail_index_fsck+0x68a) [0x7f25fc9ca13a] -> /usr/lib64/dovecot/libdovecot-storage.so.0(mail_index_sync_map+0x5b0) [0x7f25fc9d4090] -> /usr/lib64/dovecot/libdovecot-storage.so.0(mail_index_map+0x13b) [0x7f25fc9cc1eb] -> /usr/lib64/dovecot/libdovecot-storage.so.0(+0xfcc96) [0x7f25fc9e0c96] -> /usr/lib64/dovecot/libdovecot-storage.so.0(+0xfd2a7) [0x7f25fc9e12a7] -> /usr/lib64/dovecot/libdovecot-storage.so.0(mail_index_open+0x7a) [0x7f25fc9e13aa] -> /usr/lib64/dovecot/libdovecot-storage.so.0(index_storage_mailbox_open+0xac) [0x7f25fc9bac1c] -> /usr/lib64/dovecot/libdovecot-storage.so.0(+0x84df9) [0x7f25fc968df9] -> /usr/lib64/dovecot/libdovecot-storage.so.0(+0x84ecf) [0x7f25fc968ecf] -> /usr/lib64/dovecot/libdovecot-storage.so.0(+0xbe11c) [0x7f25fc9a211c] -> /usr/lib64/dovecot/plugins/lib20_zlib_plugin.so(+0x46ee) [0x7f25f8ff86ee] -> /usr/lib64/dovecot/libdovecot-storage.so.0(+0x5bd56) [0x7f25fc93fd56] -> /usr/lib64/dovecot/libdovecot-storage.so.0(mailbox_open+0x4a) [0x7f25fc93ff3a] -> /usr/lib64/dovecot/libdovecot-lda.so.0(mail_deliver_save_open+0x63) [0x7f25fca49cc3] -> /usr/lib64/dovecot/libdovecot-lda.so.0(mail_deliver_save+0xc9) [0x7f25fca49f29] -> /usr/lib64/dovecot/libdovecot-lda.so.0(mail_deliver+0x1c6) [0x7f25fca4a586] -> dovecot/lmtp [local DATA](lmtp_local_data+0x6a1) [0x55e3e295a551] -> dovecot/lmtp [local DATA](cmd_data_continue+0x25d) [0x55e3e295920d] -> /usr/lib64/dovecot/libdovecot.so.0(+0x65737) [0x7f25fc7b0737] > Mar 27 11:13:50 mbox dovecot[22370]: lmtp(piast_efaktury): pid=<24428> session=<QLacCN5Mm1xsXwAA9fPEKQ>, Fatal: master: service(lmtp): child 24428 killed with signal 6 (core dumped) > ~ lmtp backtrace: http://ixion.pld-linux.org/~arekm/dovecot/lmtp-gdb.txt log: http://ixion.pld-linux.org/~arekm/dovecot/lmtp.txt pop3 backtrace: http://ixion.pld-linux.org/~arekm/dovecot/pop3-gdb.txt log: http://ixion.pld-linux.org/~arekm/dovecot/pop3.txt deleting dovecot.index* helps until problem starts again like - first entry with problem after deleting indexes: > Mar 26 14:18:12 mbox dovecot[10001]: pop3-login: Login: user=<piast_efaktury>, method=PLAIN, rip=1.1.1.1, lip=2.2.2.2, mpid=5694, session=</YwtJ/+EZPG5sziF> > Mar 26 14:18:12 mbox dovecot[10001]: pop3(piast_efaktury): pid=<5694> session=</YwtJ/+EZPG5sziF>, Error: Index /var/mail/piast_efaktury/dovecot.index: Lost log for seq=13 offset=25648: Missing middle file seq=13 (between 13..4294967295, we have seqs 14,15): .log.2 contains file_seq=14 (initial_mapped=0, reason=Index mapped) > Mar 26 14:18:12 mbox dovecot[10001]: pop3(piast_efaktury): pid=<5694> session=</YwtJ/+EZPG5sziF>, Warning: fscking index file /var/mail/piast_efaktury/dovecot.index > Mar 26 14:18:12 mbox dovecot[10001]: pop3(piast_efaktury): pid=<5694> session=</YwtJ/+EZPG5sziF>, Error: Fixed index file /var/mail/piast_efaktury/dovecot.index: log_file_seq 13 -> 15 > Mar 26 14:18:12 mbox dovecot[10001]: pop3(piast_efaktury): pid=<5694> session=</YwtJ/+EZPG5sziF>, Panic: file mail-transaction-log-file.c: line 105 (mail_transaction_log_file_free): assertion failed: (!file->locked) > Mar 26 14:18:12 mbox dovecot[10001]: pop3(piast_efaktury): pid=<5694> session=</YwtJ/+EZPG5sziF>, Error: Raw backtrace: /usr/lib64/dovecot/libdovecot.so.0(+0xe011b) [0x7f20b6e2911b] -> /usr/lib64/dovecot/libdovecot.so.0(+0xe01b1) [0x7f20b6e291b1] -> /usr/lib64/dovecot/libdovecot.so.0(+0x4bf56) [0x7f20b6d94f56] -> /usr/lib64/dovecot/libdovecot-storage.so.0(+0x4b17e) [0x7f20b6f2d17e] -> /usr/lib64/dovecot/libdovecot-storage.so.0(mail_transaction_logs_clean+0x5c) [0x7f20b6fe4e3c] -> /usr/lib64/dovecot/libdovecot-storage.so.0(mail_transaction_log_close+0x34) [0x7f20b6fe4f04] -> /usr/lib64/dovecot/libdovecot-storage.so.0(mail_transaction_log_move_to_memory+0xed) [0x7f20b6fe509d] -> /usr/lib64/dovecot/libdovecot-storage.so.0(mail_index_move_to_memory+0x60) [0x7f20b6fdf0b0] -> /usr/lib64/dovecot/libdovecot-storage.so.0(mail_index_write+0x1e1) [0x7f20b6fdd3a1] -> /usr/lib64/dovecot/libdovecot-storage.so.0(mail_index_fsck+0x68a) [0x7f20b6fc813a] -> /usr/lib64/dovecot/libdovecot-storage.so.0(mail_index_sync_map+0x5b0) [0x7f20b6fd2090] -> /usr/lib64/dovecot/libdovecot-storage.so.0(mail_index_map+0x13b) [0x7f20b6fca1eb] -> /usr/lib64/dovecot/libdovecot-storage.so.0(+0xfcc96) [0x7f20b6fdec96] -> /usr/lib64/dovecot/libdovecot-storage.so.0(+0xfd2a7) [0x7f20b6fdf2a7] -> /usr/lib64/dovecot/libdovecot-storage.so.0(mail_index_open+0x7a) [0x7f20b6fdf3aa] -> /usr/lib64/dovecot/libdovecot-storage.so.0(index_storage_mailbox_open+0xac) [0x7f20b6fb8c1c] -> /usr/lib64/dovecot/libdovecot-storage.so.0(+0x84df9) [0x7f20b6f66df9] -> /usr/lib64/dovecot/libdovecot-storage.so.0(+0x84ecf) [0x7f20b6f66ecf] -> /usr/lib64/dovecot/libdovecot-storage.so.0(+0xbe11c) [0x7f20b6fa011c] -> /usr/lib64/dovecot/plugins/lib20_zlib_plugin.so(+0x46ee) [0x7f20b36896ee] -> /usr/lib64/dovecot/libdovecot-storage.so.0(+0x5bd56) [0x7f20b6f3dd56] -> /usr/lib64/dovecot/libdovecot-storage.so.0(mailbox_open+0x4a) [0x7f20b6f3df3a] -> dovecot/pop3 [piast_efaktury 1.1.1.1](client_init_mailbox+0x7a) [0x5638a04d1bda] -> dovecot/pop3 [piast_efaktury 1.1.1.1](+0x5645) [0x5638a04d0645] -> dovecot/pop3 [piast_efaktury 1.1.1.1](+0x5882) [0x5638a04d0882] -> /usr/lib64/dovecot/libdovecot.so.0(+0x74021) [0x7f20b6dbd021] -> /usr/lib64/dovecot/libdovecot.so.0(+0x7439b) [0x7f20b6dbd39b] -> /usr/lib64/dovecot/libdovecot.so.0(+0x74d1d) [0x7f20b6dbdd1d] > Mar 26 14:18:12 mbox dovecot[10001]: pop3(piast_efaktury): pid=<5694> session=</YwtJ/+EZPG5sziF>, Fatal: master: service(pop3): child 5694 killed with signal 6 (core dumps disabled - https://dovecot.org/bugreport.html#coredumps) dovecot isn't able to auto fix the indexes and manual deletion is required in all such cases -- Arkadiusz Miśkiewicz, arekm / ( maven.pl | pld-linux.org )

2 5

MailCrypt: Encrypted user keys configuration with LDAP & cryptokey generate
by FELINN 28 Mar '19

28 Mar '19

Hi, I try to use the MailCrypt plugin with Floder encryption and encrypted user keys, using LDAP. I use Dovecot 2.2.27 (c0f36b0) I follow the wiki: https://wiki2.dovecot.org/Plugins/MailCrypt doveconf -n and dovecot-ldap.conf.ext attached to this message. I well configured slapd to let dovecot's dn query the userPassword (hashed password SSHA). I use fusiondirectory-mail plugin: ------------------------------------------------------------------------ $ ldapsearch -D 'cn=dovecot,ou=dsa,dc=foo,dc=bar' -W -LLL '(&(objectClass=gosaMailAccount)(objectClass=posixAccount)(uid=<user>))' 'userPassword' dn: cn=<user>,ou=people,dc=foo,dc=bar userPassword:: XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX ------------------------------------------------------------------------ The problem is that mails still readable and no keys are generated, even if a send a mail to this address, or login through webmail. I wait more than 1h until something happens, Cf: https://dovecot.org/list/dovecot/2018-September/112763.html If I try to generate keys manually I get this error: ------------------------------------------------------------------------ $ doeveadm mailbox cryptokey generate -u <user> doveadm(<user>): Error: mail_crypt_user_generate_keypair(<user>) failed: mail_crypt_require_encrypted_user_key set, cannot generate user keypair without password or key Folder Public ID x ERROR: mail_crypt_require_encrypted_user_key set, cannot generate user keypair without password or key doveadm(<user>): Warning: Timeout leak: 0x7f0c439c0180 (mail-index-alloc-cache.c:240) ------------------------------------------------------------------------ It works with -o plugin/mail_crypt_private_password=<password> of course, but by hand it's not the goal >< I probably miss something, I guess that the part of the wiki about sql and password_query is only for configuration that use SQL for dbuser. Is there similar things to do with LDAP? Thank you very much for your time. -- f00wl FELINN https://felinn.org

1 1

Weird things in the mail queue
by Lionel Elie Mamane 27 Mar '19

27 Mar '19

I noticed a mail stuck in my mail queue. dovecot-lda was returning error 64 Invalid parameter given. (EX_USAGE). Weird, weird, weird. After some sleuthing, I found the sender address was FirstLast(a)domain.tld, with a UTF8-encoded Unicode U+FEFF ZERO WIDTH NO-BREAK SPACE character (AKA byte order mark) between "First" and "Last" :) Since that is passed as the -f parameter to dovecot-lda, it was giving the 64 error.

3 3

Maildir permissions issue with Postfix
by Randall R. Sargent 27 Mar '19

27 Mar '19

Hi all, We have a Postfix server that serves as an alias MTA to route to other mail systems. I've recently installed Dovecot on it because we have three service accounts that need simple POP3 mailboxes. I have the accounts set up on the system and mail does get delivered to their ~/Maildir/ locations by Postfix, however, every time a message is dropped in the Maildir for the user, the permissions for the message are set to the user's uid:gid and Dovecot can't access the mail message. Doing a chmod fixes it temporarily until the next message drops. The vmail group has access to the user's home folder structure. Any help is appreciated!! Dovecot: 2.2.36 /etc/dovecot/dovecot.conf: auth_debug = yes disable_plaintext_auth = no first_valid_uid = 1002 log_path = /var/log/dovecot.log mail_debug = yes mail_home = /srv/mail/%Lu mail_location = maildir:~/Maildir mbox_very_dirty_syncs = yes namespace { inbox = yes location = prefix = separator = / } passdb { driver = pam } service auth-worker { user = root } userdb { args = blocking=no driver = passwd override_fields = uid=vmail gid=vmail } Thanks, Randy

2 1

doveadm backup doesn't transfer mail from root INBOX
by Francis 27 Mar '19

27 Mar '19

Hi, I'm trying to migrate IMAP mails from dovecot 1.1.20apple0.5 (osx) to dovecot 2.2.33.2 (ubuntu). I'm using "doveadm backup" to migrate my data. It works fine for all subfolders, but the root INBOX stay empty on the new server. I suspect a problem related with hierarchy separator ("." on previous server, "/" on new) or with the namespace prefix (set to "INBOX/" on new server). Any hint? Thanks. show there is no messages in INBOX # doveadm mailbox status -u (myuser) all INBOX INBOX messages=0 recent=0 uidnext=1 uidvalidity=1553630060 unseen=0 highestmodseq=1 vsize=0 guid=d54cd42849739b5cb5790000ed87e144 firstsaved=18446744073709551615 show there is messages in subdirectory # doveadm mailbox status -u (myuser) all INBOX/Sent INBOX/Sent messages=253 recent=0 uidnext=8721 uidvalidity=1263328366 unseen=0 highestmodseq=256 vsize=16335358 guid=bfb2e03fdce327671e82bf173b1ccb8b firstsaved=1553634631 The command I'm runnning on the new server to migrate data: # doveadm -o mail_fsync=never backup -R -u (myuser) imapc: # My config on the new server: # doveadm -n # 2.2.33.2 (d6601f4ec): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.21 (92477967) # OS: Linux 4.15.0-46-generic x86_64 Ubuntu 18.04.2 LTS auth_default_realm = example.com doveadm_password = # hidden, use -P to show it doveadm_port = 53683 first_valid_uid = 200 imapc_features = rfc822.size fetch-headers imapc_host = oldmail.example.com imapc_master_user = (removed) imapc_password = # hidden, use -P to show it imapc_user = %n last_valid_uid = 200 mail_location = mbox:~/mail:INBOX=/var/mail/%u mail_plugins = " notify replication zlib quota" mail_prefetch_count = 20 mail_privileged_group = mail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext mdbox_rotate_size = 10 M namespace inbox { inbox = yes location = mailbox "Éléments envoyés" { special_use = \Sent } mailbox "Éléments supprimés" { special_use = \Trash } mailbox Brouillon { special_use = \Drafts } mailbox "Courrier indésirable" { special_use = \Junk } mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = INBOX/ separator = / } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { mail_replica = tcps:mail2.example.com:53683 quota = count:User quota quota_grace = 10%% quota_rule = *:storage=10G quota_rule2 = INBOX/Trash:storage=+100M quota_vsizes = yes quota_warning = storage=100%% quota-warning 100 %u quota_warning2 = storage=95%% quota-warning 95 %u quota_warning3 = storage=90%% quota-warning 90 %u quota_warning4 = storage=85%% quota-warning 85 %u quota_warning5 = storage=75%% quota-warning 75 %u quota_warning6 = -storage=80%% quota-warning '-80' %u quota_warning7 = -storage=100%% quota-warning '-100' %u sieve = /var/vmail/domains/%Ld/%Ln/.dovecot.sieve sieve_before = /var/vmail/sieve/before.sieve sieve_default = /var/vmail/sieve/default.sieve sieve_global = /var/vmail/sieve/global zlib_save = lz4 } protocols = " imap lmtp sieve" service aggregator { fifo_listener replication-notify-fifo { user = vmail } unix_listener replication-notify { user = vmail } } service auth { inet_listener { address = (removed) port = 55123 } unix_listener /var/spool/postfix/private/auth { mode = 0666 } } service doveadm { inet_listener { port = 53683 ssl = yes } } service imap-login { inet_listener imap { port = 0 } process_min_avail = 10 } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0660 user = postfix } } service quota-warning { executable = script /usr/local/bin/quota-warning.sh unix_listener quota-warning { user = vmail } } service replicator { process_min_avail = 1 unix_listener replicator-doveadm { mode = 0600 user = vmail } } ssl = required ssl_cert = </etc/ssl/example/example.com.crtbundle ssl_client_ca_dir = /etc/ssl/certs ssl_key = # hidden, use -P to show it userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } verbose_proctitle = yes protocol lmtp { mail_plugins = " notify replication zlib quota sieve" postmaster_address = postmaster(a)example.com } protocol imap { mail_plugins = " notify replication zlib quota imap_zlib imap_quota" } # cat /etc/dovecot/dovecot-ldap.conf.ext | grep -v "^#" | grep -v "^$" uris = ldaps://dc1.ad.example.com ldaps://dc2.ad.example.com dn = (removed) dnpass = (removed) auth_bind = yes base = (removed) scope = subtree deref = never user_filter = (&(mail=%u)(memberOf:1.2.840.113556.1.4.1941:=CN=acces_courriels,(removed))(&(|(objectclass=person))(!(UserAccountControl:1.2.840.113556.1.4.803:=2)))) pass_filter = (&(mail=%u)(memberOf:1.2.840.113556.1.4.1941:=CN=acces_courriels,(removed))(&(|(objectclass=person))(!(UserAccountControl:1.2.840.113556.1.4.803:=2)))) iterate_filter = (&(mail=*)(memberOf:1.2.840.113556.1.4.1941:=CN=acces_courriels,(removed))(&(|(objectclass=person))(!(UserAccountControl:1.2.840.113556.1.4.803:=2)))) iterate_attrs = mail=user user_attrs = \ =quota_rule=*:storage=%{ldap:division:10G}, \ =home=/var/vmail/domains/%Ld/%Ln, \ =mail=mdbox:/var/vmail/domains/%Ld/%Ln/mdbox, \ =uid=200, \ =gid=200

1 0

index problems after update
by Hajo Locke 27 Mar '19

27 Mar '19

Hello List, i have a problem with index-files which is separated in 2 subproblems. May be these problems are connected. Currently we use Ubuntu 18.04 LTS which is bundled with dovecot 2.2.33.2 These servers are fresh installed machines and users are added to the system after, there was no upgrade. Sometimes it happens, that dovecot stops showing new mail. There is no error in log, dovecot just seems to do his normal operations but is not delivering new emails from /var/mail/myuser emails are delivered again if i delete index-files from .imap folder. So index is recreated and everything works again. I cant reproduce this problem, but every 2 days i have one user who is reporting this problem. Second problem is similiar. I Upgraded a server from Ubuntu 16.04 to Ubuntu 18.04. This includes an upgrade from dovecot 2.2.22 to 2.2.33.2. After that i installed an self packaged dovecot 2.2.36.1 Now here is same problem, dovecot is not showing new mails, but the difference is we have a Raw backtrace in Log just as expected: Feb 8 08:45:37 hostname dovecot[14882]: imap(myuser): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0xa1ee2) [0x7f78b3b2cee2] -> /usr/lib/dovecot/libdovecot.so.0(+0xa1fda) [0x7f78b3b2cfda] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7f78b3abb8a8] -> /usr/lib/dovecot/libdovecot-storage.so.0(index_mail_parse_header+0x78a) [0x7f78b3e7940a] -> /usr/lib/dovecot/libdovecot.so.0(+0x83592) [0x7f78b3b0e592] -> /usr/lib/dovecot/libdovecot.so.0(i_stream_read+0x74) [0x7f78b3b38814] -> /usr/lib/dovecot/libdovecot.so.0(i_stream_read_data+0x3d) [0x7f78b3b392fd] -> /usr/lib/dovecot/libdovecot-storage.so.0(index_mail_get_header_stream+0x4a) [0x7f78b3e7a2ea] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_get_header_stream+0x4a) [0x7f78b3dfd8da] -> /usr/lib/dovecot/libdovecot-storage.so.0(imap_msgpart_open+0x24a) [0x7f78b3ebb57a] -> dovecot/imap [myuser ip.ip.ip.ip FETCH](+0x2081c) [0x5581ac76d81c] -> dovecot/imap [m038422 ip.ip.ip.ip FETCH](+0x1ea54) [0x5581ac76ba54] -> dovecot/imap [myuser ip.ip.ip.ip FETCH](imap_fetch_more+0x39) [0x5581ac76cd69] -> dovecot/imap [myuser ip.ip.ip.ip FETCH](cmd_fetch+0x31b) [0x5581ac75e1bb] -> dovecot/imap [myuser ip.ip.ip.ip FETCH](command_exec+0x5c) [0x5581ac76a09c] -> dovecot/imap [myuser ip.ip.ip.ip FETCH](+0x1b612) [0x5581ac768612] -> dovecot/imap [myuser ip.ip.ip.ip FETCH](+0x1b6ac) [0x5581ac7686ac] -> dovecot/imap [myuser ip.ip.ip.ip FETCH](client_handle_input+0x18d) [0x5581ac768a6d] -> dovecot/imap [myuser ip.ip.ip.ip FETCH](client_input+0xac) [0x5581ac768fbc] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x52) [0x7f78b3b43482] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0x12e) [0x7f78b3b44b9e] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0x36) [0x7f78b3b43516] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x38) [0x7f78b3b436c8] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f78b3ac6aa3] -> dovecot/imap [myuser ip.ip.ip.ip FETCH](main+0x329) [0x5581ac75b159] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xe7) [0x7f78b36bbb97] -> dovecot/imap [myuser ip.ip.ip.ip FETCH](_start+0x2a) [0x5581ac75b2fa] Feb 8 08:45:37 hostname dovecot[14882]: imap(myuser): Fatal: master: service(imap): child 14135 killed with signal 6 (core dumped) Over all dovecot and OS versions we use same old-fashioned setup. Mails are delivered by procmail to classic mbox file. This is output of doveconf -n # 2.2.36.1 (5d621cf65): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.21 (92477967) # OS: Linux 4.18.0-14-generic x86_64 Ubuntu 18.04.1 LTS # Hostname: myhostname auth_mechanisms = plain login auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@üÜöÖäÄ auth_worker_max_count = 60 disable_plaintext_auth = no imap_capability = +XLIST lock_method = flock login_greeting = mailserver ready. login_log_format_elements = user=<%u> method=%m rip=%r lip=%l %c mail_cache_min_mail_count = 30 mail_location = mbox:~/mail:INBOX=/var/mail/%u mail_max_userip_connections = 30 mbox_read_locks = dotlock mbox_very_dirty_syncs = yes namespace inbox { inbox = yes location = mailbox Archiv { auto = no special_use = } mailbox Drafts { auto = no special_use = } mailbox Junk { auto = no special_use = } mailbox Sent { auto = no special_use = } mailbox Trash { auto = no special_use = } prefix = } passdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } protocols = imap pop3 service auth-worker { idle_kill = 1 mins } service auth { idle_kill = 1 mins unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } user = root } service imap-login { executable = /usr/lib/dovecot/imap-login process_min_avail = 4 service_count = 0 user = dovecot } service imap { process_limit = 1024 } service pop3-login { executable = /usr/lib/dovecot/pop3-login process_min_avail = 4 service_count = 0 user = dovecot } service pop3 { executable = /usr/lib/dovecot/pop3 process_limit = 1024 } shutdown_clients = no ssl_ca = </path/cert.pem ssl_cert = </path/cert.pem ssl_cipher_list = ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAMELLIA:!DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA ssl_dh_parameters_length = 2048 ssl_key = # hidden, use -P to show it ssl_prefer_server_ciphers = yes userdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } verbose_proctitle = yes protocol imap { imap_client_workarounds = delay-newmail mail_plugins = mail_log notify ssl = yes } protocol pop3 { pop3_client_workarounds = oe-ns-eoh outlook-no-nuls pop3_no_flag_updates = no pop3_uidl_format = %08Xu%08Xv ssl = yes } Whats going wrong here? Main problem is first one. dovecot stops showing new mail during service without telling a reason. reason looks like a broken index file. What to do here? Please tell me your opinion. Thanks, Hajo

7 17

Test SASL authentication via telnet (or similar)
by Alessio Cecchi 26 Mar '19

26 Mar '19

Hi, I'm looking for a way to autenticate my email users via Dovecot SASL TCP connections from an external nodejs or python script. Dovecot configuration is fine, if I set in postfix smtpd_sasl_path = inet:127.0.0.1:12345 works fine. But if a try via "telnet 127.0.0.1 12345" to chat with SASL in dovecot log found: dovecot: auth: Error: Authentication client not compatible with this server (mixed old and new binaries?) What is the right way to chat with SASL via TCP port? Thanks -- Alessio Cecchi Postmaster @ http://www.qboxmail.it https://www.linkedin.com/in/alessice

1 0

IMAP coredumps for one user
by Odhiambo Washington 26 Mar '19

26 Mar '19

FreeBSD-12 Dovecot-2.3.5 I am having problems with one use Mar 25 21:30:12 imap(gau.mon(a)crownkenya.com)<91364><U7qCZO+ECfCaRh6E>: Fatal: master: service(imap): child 91364 killed with signal 6 (core dumped) Mar 25 21:30:14 imap(gau.mon(a)crownkenya.com)<2381><moHYZO+EDvCaRh6E>: Fatal: master: service(imap): child 2381 killed with signal 6 (core dumped) Mar 26 06:29:26 imap(gau.mon(a)crownkenya.com)<7644><0aVP7faEI/GaTGQE>: Panic: file mempool-system.c: line 137 (pool_system_realloc): assertion failed: (old_size == (size_t)-1 || mem == NULL || old_size <= malloc_usable_size(mem)) Mar 26 06:29:26 imap(gau.mon(a)crownkenya.com)<8806><valP7faEJPGaTGQE>: Panic: file mempool-system.c: line 137 (pool_system_realloc): assertion failed: (old_size == (size_t)-1 || mem == NULL || old_size <= malloc_usable_size(mem)) Mar 26 06:29:26 imap(gau.mon(a)crownkenya.com)<8493><zKhP7faEIvGaTGQE>: Panic: file mempool-system.c: line 137 (pool_system_realloc): assertion failed: (old_size == (size_t)-1 || mem == NULL || old_size <= malloc_usable_size(mem)) Mar 26 06:29:26 imap(gau.mon(a)crownkenya.com)<9412><2qtP7faEIfGaTGQE>: Panic: file mempool-system.c: line 137 (pool_system_realloc): assertion failed: (old_size == (size_t)-1 || mem == NULL || old_size <= malloc_usable_size(mem)) Mar 26 06:29:28 imap(gau.mon(a)crownkenya.com)<7644><0aVP7faEI/GaTGQE>: Fatal: master: service(imap): child 7644 killed with signal 6 (core dumped) Mar 26 06:29:29 imap(gau.mon(a)crownkenya.com)<10764><7sW+7faEJvGaTGQE>: Panic: file mempool-system.c: line 137 (pool_system_realloc): assertion failed: (old_size == (size_t)-1 || mem == NULL || old_size <= malloc_usable_size(mem)) Mar 26 06:29:31 imap(gau.mon(a)crownkenya.com)<8806><valP7faEJPGaTGQE>: Fatal: master: service(imap): child 8806 killed with signal 6 (core dumped) Mar 26 06:29:33 imap(gau.mon(a)crownkenya.com)<8493><zKhP7faEIvGaTGQE>: Fatal: master: service(imap): child 8493 killed with signal 6 (core dumped) Mar 26 06:29:36 imap(gau.mon(a)crownkenya.com)<9412><2qtP7faEIfGaTGQE>: Fatal: master: service(imap): child 9412 killed with signal 6 (core dumped) Mar 26 06:29:38 imap(gau.mon(a)crownkenya.com)<10764><7sW+7faEJvGaTGQE>: Fatal: master: service(imap): child 10764 killed with signal 6 (core dumped) Mar 26 06:29:57 imap(gau.mon(a)crownkenya.com)<13285><JhMO7vaEKfGaTGQE>: Panic: file mempool-system.c: line 137 (pool_system_realloc): assertion failed: (old_size == (size_t)-1 || mem == NULL || old_size <= malloc_usable_size(mem)) Mar 26 06:29:57 imap(gau.mon(a)crownkenya.com)<19736><UQMD7/aELfGaTGQE>: Panic: file mempool-system.c: line 137 (pool_system_realloc): assertion failed: (old_size == (size_t)-1 || mem == NULL || old_size <= malloc_usable_size(mem)) Mar 26 06:29:57 imap(gau.mon(a)crownkenya.com)<22060><athw7/aEL/GaTGQE>: Panic: file mempool-system.c: line 137 (pool_system_realloc): assertion failed: (old_size == (size_t)-1 || mem == NULL || old_size <= malloc_usable_size(mem)) Mar 26 06:29:57 imap(gau.mon(a)crownkenya.com)<21367><Prhw7/aELvGaTGQE>: Panic: file mempool-system.c: line 137 (pool_system_realloc): assertion failed: (old_size == (size_t)-1 || mem == NULL || old_size <= malloc_usable_size(mem)) Mar 26 06:30:00 imap(gau.mon(a)crownkenya.com)<13285><JhMO7vaEKfGaTGQE>: Fatal: master: service(imap): child 13285 killed with signal 6 (core dumped) Mar 26 06:30:00 imap(gau.mon(a)crownkenya.com)<49026><FCSb7/aEMPGaTGQE>: Panic: file mempool-system.c: line 137 (pool_system_realloc): assertion failed: (old_size == (size_t)-1 || mem == NULL || old_size <= malloc_usable_size(mem)) Mar 26 06:30:02 imap(gau.mon(a)crownkenya.com)<19736><UQMD7/aELfGaTGQE>: Fatal: master: service(imap): child 19736 killed with signal 6 (core dumped) Mar 26 06:30:05 imap(gau.mon(a)crownkenya.com)<22060><athw7/aEL/GaTGQE>: Fatal: master: service(imap): child 22060 killed with signal 6 (core dumped) Mar 26 06:30:07 imap(gau.mon(a)crownkenya.com)<21367><Prhw7/aELvGaTGQE>: Fatal: master: service(imap): child 21367 killed with signal 6 (core dumped) Mar 26 06:30:10 imap(gau.mon(a)crownkenya.com)<49026><FCSb7/aEMPGaTGQE>: Fatal: master: service(imap): child 49026 killed with signal 6 (core dumped) Mar 26 07:59:40 imap(gau.mon(a)crownkenya.com)<27221><06UEMPiESPKaRh6E>: Panic: file mempool-system.c: line 137 (pool_system_realloc): assertion failed: (old_size == (size_t)-1 || mem == NULL || old_size <= malloc_usable_size(mem)) Mar 26 07:59:40 imap(gau.mon(a)crownkenya.com)<28883><fssEMPiESvKaRh6E>: Panic: file mempool-system.c: line 137 (pool_system_realloc): assertion failed: (old_size == (size_t)-1 || mem == NULL || old_size <= malloc_usable_size(mem)) Mar 26 07:59:40 imap(gau.mon(a)crownkenya.com)<29823><28oEMPiESfKaRh6E>: Panic: file mempool-system.c: line 137 (pool_system_realloc): assertion failed: (old_size == (size_t)-1 || mem == NULL || old_size <= malloc_usable_size(mem)) Mar 26 07:59:40 imap(gau.mon(a)crownkenya.com)<27530><04UEMPiER/KaRh6E>: Panic: file mempool-system.c: line 137 (pool_system_realloc): assertion failed: (old_size == (size_t)-1 || mem == NULL || old_size <= malloc_usable_size(mem)) Mar 26 07:59:42 imap(gau.mon(a)crownkenya.com)<27221><06UEMPiESPKaRh6E>: Fatal: master: service(imap): child 27221 killed with signal 6 (core dumped) Mar 26 07:59:42 imap(gau.mon(a)crownkenya.com)<30775><w9tqMPiETPKaRh6E>: Panic: file mempool-system.c: line 137 (pool_system_realloc): assertion failed: (old_size == (size_t)-1 || mem == NULL || old_size <= malloc_usable_size(mem)) Mar 26 07:59:45 imap(gau.mon(a)crownkenya.com)<28883><fssEMPiESvKaRh6E>: Fatal: master: service(imap): child 28883 killed with signal 6 (core dumped) Mar 26 07:59:47 imap(gau.mon(a)crownkenya.com)<29823><28oEMPiESfKaRh6E>: Fatal: master: service(imap): child 29823 killed with signal 6 (core dumped) Mar 26 07:59:50 imap(gau.mon(a)crownkenya.com)<27530><04UEMPiER/KaRh6E>: Fatal: master: service(imap): child 27530 killed with signal 6 (core dumped) Mar 26 07:59:52 imap(gau.mon(a)crownkenya.com)<30775><w9tqMPiETPKaRh6E>: Fatal: master: service(imap): child 30775 killed with signal 6 (core dumped) Mar 26 08:45:40 imap(gau.mon(a)crownkenya.com)<83330><VtGH1PiEr/KaTGQE>: Panic: file mempool-system.c: line 137 (pool_system_realloc): assertion failed: (old_size == (size_t)-1 || mem == NULL || old_size <= malloc_usable_size(mem)) Mar 26 08:45:40 imap(gau.mon(a)crownkenya.com)<84059><lhKI1PiEsPKaTGQE>: Panic: file mempool-system.c: line 137 (pool_system_realloc): assertion failed: (old_size == (size_t)-1 || mem == NULL || old_size <= malloc_usable_size(mem)) Mar 26 08:45:40 imap(gau.mon(a)crownkenya.com)<84406><kRaI1PiEsfKaTGQE>: Panic: file mempool-system.c: line 137 (pool_system_realloc): assertion failed: (old_size == (size_t)-1 || mem == NULL || old_size <= malloc_usable_size(mem)) Mar 26 08:45:40 imap(gau.mon(a)crownkenya.com)<84458><CzKI1PiErvKaTGQE>: Panic: file mempool-system.c: line 137 (pool_system_realloc): assertion failed: (old_size == (size_t)-1 || mem == NULL || old_size <= malloc_usable_size(mem)) Mar 26 08:45:42 imap(gau.mon(a)crownkenya.com)<83330><VtGH1PiEr/KaTGQE>: Fatal: master: service(imap): child 83330 killed with signal 6 (core dumped) Mar 26 08:45:45 imap(gau.mon(a)crownkenya.com)<84059><lhKI1PiEsPKaTGQE>: Fatal: master: service(imap): child 84059 killed with signal 6 (core dumped) Mar 26 08:45:47 imap(gau.mon(a)crownkenya.com)<84406><kRaI1PiEsfKaTGQE>: Fatal: master: service(imap): child 84406 killed with signal 6 (core dumped) Mar 26 08:45:50 imap(gau.mon(a)crownkenya.com)<84458><CzKI1PiErvKaTGQE>: Fatal: master: service(imap): child 84458 killed with signal 6 (core dumped) Mar 26 08:54:55 imap(gau.mon(a)crownkenya.com)<88519><2qiO9fiE0fKaTGQE>: Panic: file mempool-system.c: line 137 (pool_system_realloc): assertion failed: (old_size == (size_t)-1 || mem == NULL || old_size <= malloc_usable_size(mem)) Mar 26 08:54:56 imap(gau.mon(a)crownkenya.com)<90725><ZhDq9fiE0vKaTGQE>: Panic: file mempool-system.c: line 137 (pool_system_realloc): assertion failed: (old_size == (size_t)-1 || mem == NULL || old_size <= malloc_usable_size(mem)) Mar 26 08:54:56 imap(gau.mon(a)crownkenya.com)<91408><oA/q9fiE0/KaTGQE>: Panic: file mempool-system.c: line 137 (pool_system_realloc): assertion failed: (old_size == (size_t)-1 || mem == NULL || old_size <= malloc_usable_size(mem)) Mar 26 08:54:56 imap(gau.mon(a)crownkenya.com)<90661><kc3p9fiE1PKaTGQE>: Panic: file mempool-system.c: line 137 (pool_system_realloc): assertion failed: (old_size == (size_t)-1 || mem == NULL || old_size <= malloc_usable_size(mem)) Mar 26 08:54:58 imap(gau.mon(a)crownkenya.com)<88519><2qiO9fiE0fKaTGQE>: Fatal: master: service(imap): child 88519 killed with signal 6 (core dumped) Mar 26 08:55:01 imap(gau.mon(a)crownkenya.com)<90725><ZhDq9fiE0vKaTGQE>: Fatal: master: service(imap): child 90725 killed with signal 6 (core dumped) Mar 26 08:55:03 imap(gau.mon(a)crownkenya.com)<91408><oA/q9fiE0/KaTGQE>: Fatal: master: service(imap): child 91408 killed with signal 6 (core dumped) Mar 26 08:55:06 imap(gau.mon(a)crownkenya.com)<90661><kc3p9fiE1PKaTGQE>: Fatal: master: service(imap): child 90661 killed with signal 6 (core dumped) Mar 26 09:26:06 imap(gau.mon(a)crownkenya.com)<45868><K+R8ZPmEJfMpOWd5>: Panic: file mempool-system.c: line 137 (pool_system_realloc): assertion failed: (old_size == (size_t)-1 || mem == NULL || old_size <= malloc_usable_size(mem)) Mar 26 09:26:06 imap(gau.mon(a)crownkenya.com)<46114><WfR8ZPmEJPMpOWd5>: Panic: file mempool-system.c: line 137 (pool_system_realloc): assertion failed: (old_size == (size_t)-1 || mem == NULL || old_size <= malloc_usable_size(mem)) Mar 26 09:26:06 imap(gau.mon(a)crownkenya.com)<47667><lCR9ZPmEJ/MpOWd5>: Panic: file mempool-system.c: line 137 (pool_system_realloc): assertion failed: (old_size == (size_t)-1 || mem == NULL || old_size <= malloc_usable_size(mem)) Mar 26 09:26:06 imap(gau.mon(a)crownkenya.com)<46900><fAx9ZPmEJvMpOWd5>: Panic: file mempool-system.c: line 137 (pool_system_realloc): assertion failed: (old_size == (size_t)-1 || mem == NULL || old_size <= malloc_usable_size(mem)) Mar 26 09:26:08 imap(gau.mon(a)crownkenya.com)<45868><K+R8ZPmEJfMpOWd5>: Fatal: master: service(imap): child 45868 killed with signal 6 (core dumped) Mar 26 09:26:08 imap(gau.mon(a)crownkenya.com)<50503><zz+LZfmEKPMpOWd5>: Panic: file mempool-system.c: line 137 (pool_system_realloc): assertion failed: (old_size == (size_t)-1 || mem == NULL || old_size <= malloc_usable_size(mem)) Mar 26 09:26:11 imap(gau.mon(a)crownkenya.com)<46114><WfR8ZPmEJPMpOWd5>: Fatal: master: service(imap): child 46114 killed with signal 6 (core dumped) Mar 26 09:26:15 imap(gau.mon(a)crownkenya.com)<47667><lCR9ZPmEJ/MpOWd5>: Fatal: master: service(imap): child 47667 killed with signal 6 (core dumped) Mar 26 09:26:17 imap(gau.mon(a)crownkenya.com)<46900><fAx9ZPmEJvMpOWd5>: Fatal: master: service(imap): child 46900 killed with signal 6 (core dumped) Mar 26 09:26:20 imap(gau.mon(a)crownkenya.com)<50503><zz+LZfmEKPMpOWd5>: Fatal: master: service(imap): child 50503 killed with signal 6 (core dumped) Mar 26 09:42:18 imap(andrew.oyugi(a)crownkenya.com)<52237><7dJjnfmEJtPFt2RO>: Error: Mailbox Sent: Saving mail: read(<imap client>) failed: read(size=7224) failed: Connection reset by peer (read reason=) Mar 26 10:13:18 imap(gau.mon(a)crownkenya.com)<81127><JxMuDvqEd/MpOWd5>: Panic: file mempool-system.c: line 137 (pool_system_realloc): assertion failed: (old_size == (size_t)-1 || mem == NULL || old_size <= malloc_usable_size(mem)) Mar 26 10:13:18 imap(gau.mon(a)crownkenya.com)<81432><QRMuDvqEePMpOWd5>: Panic: file mempool-system.c: line 137 (pool_system_realloc): assertion failed: (old_size == (size_t)-1 || mem == NULL || old_size <= malloc_usable_size(mem)) Mar 26 10:13:18 imap(gau.mon(a)crownkenya.com)<79708><LBMuDvqEdvMpOWd5>: Panic: file mempool-system.c: line 137 (pool_system_realloc): assertion failed: (old_size == (size_t)-1 || mem == NULL || old_size <= malloc_usable_size(mem)) Mar 26 10:13:18 imap(gau.mon(a)crownkenya.com)<78811><IxMuDvqEefMpOWd5>: Panic: file mempool-system.c: line 137 (pool_system_realloc): assertion failed: (old_size == (size_t)-1 || mem == NULL || old_size <= malloc_usable_size(mem)) Mar 26 10:13:20 imap(gau.mon(a)crownkenya.com)<81127><JxMuDvqEd/MpOWd5>: Fatal: master: service(imap): child 81127 killed with signal 6 (core dumped) Mar 26 10:13:21 imap(gau.mon(a)crownkenya.com)<84406><wIVfDvqEevMpOWd5>: Panic: file mempool-system.c: line 137 (pool_system_realloc): assertion failed: (old_size == (size_t)-1 || mem == NULL || old_size <= malloc_usable_size(mem)) Mar 26 10:13:23 imap(gau.mon(a)crownkenya.com)<81432><QRMuDvqEePMpOWd5>: Fatal: master: service(imap): child 81432 killed with signal 6 (core dumped) Mar 26 10:13:25 imap(gau.mon(a)crownkenya.com)<79708><LBMuDvqEdvMpOWd5>: Fatal: master: service(imap): child 79708 killed with signal 6 (core dumped) Mar 26 10:13:28 imap(gau.mon(a)crownkenya.com)<78811><IxMuDvqEefMpOWd5>: Fatal: master: service(imap): child 78811 killed with signal 6 (core dumped) Mar 26 10:13:30 imap(gau.mon(a)crownkenya.com)<84406><wIVfDvqEevMpOWd5>: Fatal: master: service(imap): child 84406 killed with signal 6 (core dumped) I have a coredump, but I don't see any relation so far: root@gw:/tmp/corefiles # gdb /usr/local/libexec/dovecot/imap imap.core GNU gdb (GDB) 8.2.1 [GDB v8.2.1 for FreeBSD] Copyright (C) 2018 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html > This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "x86_64-portbld-freebsd12.0". Type "show configuration" for configuration details. For bug reporting instructions, please see: <http://www.gnu.org/software/gdb/bugs/>. Find the GDB manual and other documentation resources online at: <http://www.gnu.org/software/gdb/documentation/>. For help, type "help". Type "apropos word" to search for commands related to "word"... Reading symbols from /usr/local/libexec/dovecot/imap...(no debugging symbols found)...done. [New LWP 101447] Core was generated by `dovecot/imap'. Program terminated with signal SIGABRT, Aborted. #0 0x000000008153145a in thr_kill () from /lib/libc.so.7 (gdb) bt full #0 0x000000008153145a in thr_kill () from /lib/libc.so.7 No symbol table info available. #1 0x000000008152f844 in raise () from /lib/libc.so.7 No symbol table info available. #2 0x00000000814a2079 in abort () from /lib/libc.so.7 No symbol table info available. #3 0x00000000813257f7 in ?? () from /usr/local/lib/dovecot/libdovecot.so.0 No symbol table info available. #4 0x0000000081324000 in ?? () from /usr/local/lib/dovecot/libdovecot.so.0 No symbol table info available. #5 0x0000000081324d81 in ?? () from /usr/local/lib/dovecot/libdovecot.so.0 No symbol table info available. #6 0x0000000081324200 in i_panic () from /usr/local/lib/dovecot/libdovecot.so.0 No symbol table info available. #7 0x0000000081349fcf in ?? () from /usr/local/lib/dovecot/libdovecot.so.0 No symbol table info available. #8 0x0000000081ec2fc2 in XQuerySet::add_term (this=0x7fffffffe3e0, s=0x817892e0 "maureen.xxxxx(a)xxxx.co.ke") at ./fts-backend-xapian-functions.cpp:151 l = <optimized out> i = <optimized out> pos = <optimized out> #9 0x0000000081ec2c22 in XQuerySet::add (this=0x7fffffffe3e0, t=<optimized out>, s=<optimized out>) at ./fts-backend-xapian-functions.cpp:254 tmp1 = "body" tmp2 = "maureen.xxxx(a)xxxx.co.ke" t2 = <optimized out> s2 = 0x817892e0 "maureen.xxxx(a)xxxx.co.ke" i = <optimized out> #10 0x0000000081ec24fb in XQuerySet::add (this=0x7fffffffe3e0, type=<optimized out>, s=<optimized out>) at ./fts-backend-xapian-functions.cpp:182 sp = {<icu::UMemory> = {<No data fields>}, ptr_ = 0x81eb8591 "body", length_ = 4, static npos = 2147483647} t = {<icu::Replaceable> = {<icu::UObject> = {<icu::UMemory> = {<No data fields>}, _vptr$UObject = 0x822c3bc0 <vtable for icu::UnicodeString+16>}, <No data fields>}, fUnion = {fStackFields = {fLengthAndFlags = 130, fBuffer = u<error reading variable>}, fFields = {fLengthAndFlags = 130, fLength = 6553711, fCapacity = 121, fArray = 0x7fffffffe270 u<error reading variable>}}} s2 = <optimized out> sp2 = <optimized out> #11 0x0000000081ec0667 in fts_backend_xapian_lookup (_backend=<optimized out>, box=<optimized out>, args=0x81e35110, flags=<optimized out>, result=0x7fffffffe550) at fts-backend-xapian.cpp:470 a = <optimized out> backend = <optimized out> tp = {tv_sec = 1553584401, tv_usec = 717885} is_and = <error reading variable is_and (Cannot access memory at address 0x1)> hdr = <optimized out> i = <optimized out> r = <optimized out> n = <optimized out> uid = <optimized out> dt = <optimized out> qs = <optimized out> #12 0x0000000081ea5bf4 in fts_backend_lookup () from /usr/local/lib/dovecot/lib20_fts_plugin.so No symbol table info available. #13 0x0000000081eaa782 in ?? () from /usr/local/lib/dovecot/lib20_fts_plugin.so No symbol table info available. #14 0x0000000081eaa5d0 in fts_search_lookup () from /usr/local/lib/dovecot/lib20_fts_plugin.so No symbol table info available. #15 0x0000000081eace94 in ?? () from /usr/local/lib/dovecot/lib20_fts_plugin.so No symbol table info available. #16 0x000000000104fa47 in imap_search_start () No symbol table info available. #17 0x0000000001040441 in cmd_search () No symbol table info available. #18 0x00000000010486bd in command_exec () No symbol table info available. #19 0x000000000104730a in ?? () No symbol table info available. #20 0x0000000001045ed7 in client_handle_input () No symbol table info available. #21 0x00000000010446c8 in client_input () No symbol table info available. #22 0x000000008133ebbf in io_loop_call_io () from /usr/local/lib/dovecot/libdovecot.so.0 No symbol table info available. #23 0x00000000813411ed in io_loop_handler_run_internal () from /usr/local/lib/dovecot/libdovecot.so.0 No symbol table info available. #24 0x000000008133f22e in io_loop_handler_run () from /usr/local/lib/dovecot/libdovecot.so.0 No symbol table info available. --Type <RET> for more, q to quit, c to continue without paging-- #25 0x000000008133ef98 in io_loop_run () from /usr/local/lib/dovecot/libdovecot.so.0 No symbol table info available. #26 0x00000000812b2e08 in master_service_run () from /usr/local/lib/dovecot/libdovecot.so.0 No symbol table info available. #27 0x00000000010558a7 in main () No symbol table info available. (gdb) -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft.", grep ^[^#] :-)

2 1

dovecot 2.3.5 - tests fail: http payload echo (ssl)
by Helmut K. C. Tessarek 26 Mar '19

26 Mar '19

Hi, I was womdering, if anyone has experienced the same issues. When I run the tests after compiling 2.3.5, the following 4 tests fail: http payload echo (ssl): sequential .................................. : ok http payload echo (ssl): pipeline .................................... : ok http payload echo (ssl): parallel .................................... : FAILED: Test is hanging http payload echo (ssl) .............................................. : FAILED http payload echo (ssl; unknown size): sequential .................... : ok http payload echo (ssl; unknown size): pipeline ...................... : ok http payload echo (ssl; unknown size): parallel ...................... : FAILED: Test is hanging http payload echo (ssl; unknown size) ................................ : FAILED 4 / 114 tests failed Failed to run: ./test-http-payload The tests ran fine for 2.3.4.1. Is there any way, to debug the issue any further? Do the tests write log files? It just doesn't make amy sense. Nothing has changed on the OS since I compiled and tested 2.3.4.1. Cheers, K. C. -- regards Helmut K. C. Tessarek KeyID 0x172380A011EF4944 Key fingerprint = 8A55 70C1 BD85 D34E ADBC 386C 1723 80A0 11EF 4944 /* Thou shalt not follow the NULL pointer for chaos and madness await thee at its end. */

4 11

Panic
by Odhiambo Washington 25 Mar '19

25 Mar '19

Dovecot-2.3.5, FreeBSD-12 (amd64), I will wait to see coredumps after setting up things to allow it. Mar 24 20:56:08 imap(john.doe(a)crownkenya.com)<82746><wg80zdqEy+eaTXHr>: Panic: file mempool-system.c: line 137 (pool_system_realloc): assertion failed: (old_size == (size_t)-1 || mem == NULL || old_size <= malloc_usable_size(mem)) Mar 24 20:56:08 imap(john.doe(a)crownkenya.com)<82746><wg80zdqEy+eaTXHr>: Fatal: master: service(imap): child 82746 killed with signal 6 (core not dumped - https://dovecot.org/bugreport.html#coredumps - set service imap { drop_priv_before_ exec=yes }) Mar 24 20:56:08 imap(john.doe(a)crownkenya.com)<81688><pdUzzdqEyueaTXHr>: Panic: file mempool-system.c: line 137 (pool_system_realloc): assertion failed: (old_size == (size_t)-1 || mem == NULL || old_size <= malloc_usable_size(mem)) Mar 24 20:56:08 imap(john.doe(a)crownkenya.com)<81688><pdUzzdqEyueaTXHr>: Fatal: master: service(imap): child 81688 killed with signal 6 (core not dumped - https://dovecot.org/bugreport.html#coredumps - set service imap { drop_priv_before_ exec=yes }) Mar 24 20:56:08 imap(john.doe(a)crownkenya.com)<82020><qO8zzdqEyeeaTXHr>: Panic: file mempool-system.c: line 137 (pool_system_realloc): assertion failed: (old_size == (size_t)-1 || mem == NULL || old_size <= malloc_usable_size(mem)) Mar 24 20:56:08 imap(john.doe(a)crownkenya.com)<82020><qO8zzdqEyeeaTXHr>: Fatal: master: service(imap): child 82020 killed with signal 6 (core not dumped - https://dovecot.org/bugreport.html#coredumps - set service imap { drop_priv_before_ exec=yes }) Mar 24 20:56:08 imap(john.doe(a)crownkenya.com)<83452><Bw80zdqEzOeaTXHr>: Panic: file mempool-system.c: line 137 (pool_system_realloc): assertion failed: (old_size == (size_t)-1 || mem == NULL || old_size <= malloc_usable_size(mem)) Mar 24 20:56:08 imap(john.doe(a)crownkenya.com)<83452><Bw80zdqEzOeaTXHr>: Fatal: master: service(imap): child 83452 killed with signal 6 (core not dumped - https://dovecot.org/bugreport.html#coredumps - set service imap { drop_priv_before_ exec=yes }) Mar 24 20:56:08 imap(john.doe(a)crownkenya.com)<84305><9vV0zdqEzueaTXHr>: Panic: file mempool-system.c: line 137 (pool_system_realloc): assertion failed: (old_size == (size_t)-1 || mem == NULL || old_size <= malloc_usable_size(mem)) Mar 24 20:56:08 imap(john.doe(a)crownkenya.com)<84305><9vV0zdqEzueaTXHr>: Fatal: master: service(imap): child 84305 killed with signal 6 (core not dumped - https://dovecot.org/bugreport.html#coredumps - set service imap { drop_priv_before_ exec=yes }) -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft.", grep ^[^#] :-)

1 0

imapsieve: script not triggered
by Andreas Krischer 25 Mar '19

25 Mar '19

Hi, folks! My problem: I set up dovecot with imapsieve to execute a script whenever a user copies a mail to his Spam folder (spam autolearning). Unfortunately this script is never executed regardless what I’m configuring for imapsieve. It looks like dovecot doesn’t really load the plugin… The "dovecot -n" output is attached. I already tried setting imapsieve_mailbox1_name to *, but even this does not execute the script… Also I tried a mailbox without mail_crypt enabled, no success as well. In the attached mail.log (mail_debug=yes) you can see, that imap_sieve_plugin is loaded, but it isn’t really executed. The normal (LMTP) sieve is working - if a mail is incoming the sieve module shows it work in mail.log: May 7 17:54:04 dovecot dovecot: lmtp(postmaster(a)myhost.name): Debug: YEm9ILyS8FqSaAAAujt/SA: sieve: file storage: Storage path `/var/vmail/myhost.name/postmaster/sieve' not found May 7 17:54:04 dovecot dovecot: lmtp(postmaster(a)myhost.name): Debug: YEm9ILyS8FqSaAAAujt/SA: sieve: file storage: Storage path `/var/vmail/myhost.name/postmaster/.dovecot.sieve' not found May 7 17:54:04 dovecot dovecot: lmtp(postmaster(a)myhost.name): Debug: YEm9ILyS8FqSaAAAujt/SA: sieve: storage: No default script location configured May 7 17:54:04 dovecot dovecot: lmtp(postmaster(a)myhost.name): Debug: YEm9ILyS8FqSaAAAujt/SA: sieve: User has no personal script May 7 17:54:04 dovecot dovecot: lmtp(postmaster(a)myhost.name): Debug: YEm9ILyS8FqSaAAAujt/SA: sieve: file storage: Using script storage path: /etc/dovecot/sieve/after/ May 7 17:54:04 dovecot dovecot: lmtp(postmaster(a)myhost.name): Debug: YEm9ILyS8FqSaAAAujt/SA: sieve: file script: Opened script `spam' from `/etc/dovecot/sieve/after/spam.sieve' May 7 17:54:04 dovecot dovecot: lmtp(postmaster(a)myhost.name): Debug: YEm9ILyS8FqSaAAAujt/SA: sieve: executed after user's Sieve script(1): /etc/dovecot/sieve/after/spam.sieve May 7 17:54:04 dovecot dovecot: lmtp(postmaster(a)myhost.name): Debug: Mailbox <lmtp DATA>: Opened mail UID=1 because: header Message-ID (Cache file is unusable) May 7 17:54:04 dovecot dovecot: lmtp(postmaster(a)myhost.name): Debug: YEm9ILyS8FqSaAAAujt/SA: sieve: Opening script 1 of 1 from `/etc/dovecot/sieve/after/spam.sieve' May 7 17:54:04 dovecot dovecot: lmtp(postmaster(a)myhost.name): Debug: YEm9ILyS8FqSaAAAujt/SA: sieve: Loading script /etc/dovecot/sieve/after/spam.sieve May 7 17:54:04 dovecot dovecot: lmtp(postmaster(a)myhost.name): Debug: YEm9ILyS8FqSaAAAujt/SA: sieve: Script binary /etc/dovecot/sieve/after/spam.svbin successfully loaded May 7 17:54:04 dovecot dovecot: lmtp(postmaster(a)myhost.name): Debug: YEm9ILyS8FqSaAAAujt/SA: sieve: binary save: not saving binary /etc/dovecot/sieve/after/spam.svbin, because it is already stored May 7 17:54:04 dovecot dovecot: lmtp(postmaster(a)myhost.name): Debug: YEm9ILyS8FqSaAAAujt/SA: sieve: Executing script from `/etc/dovecot/sieve/after/spam.svbin' I already spent hours on this problem so please let me know if you have any idea what the problem could be… :( Thanks in advance! Andreas

3 4

Sieve matching "size" with user variable?
by Ed W 25 Mar '19

25 Mar '19

Hi, I am trying to create a sieve filter which does something similar to the following: if size :over ${extdata.max_size} { # do something } This doesn't seem supported in recent dovecot and size only appears to accept a literal number? I'm not sure I could extra size into a variable either (to use variable matching). My understanding of sieve filters is that one needs to use something like a match, then use something like SET to put the match into a variable? This syntax doesn't seem to be compatible with the size test here either, so I don't see that I can do this? My goal is that users can set a user configurable setting (in an external front end) and if the email size is greater than this size then we will do some processing on it. This particular filter is actually in a global sieve filter. I guess I could use an external executable program, but is there another way to do this? Thanks for ideas Ed W

2 3

dovecot sasl support
by Wojciech Puchar 24 Mar '19

24 Mar '19

i've tried to replace saslauthd with dovecot sasl service stopped saslauthd daemon and added service auth { unix_listener /var/run/saslauthd/mux { mode = 0660 user = root group = mail } } so it will listen on the same socket. the effect with sendmail is as below Mar 23 21:23:29 <2.3> puchar dovecot: auth: Error: Authentication client not compatible with this server (mixed old and new binaries?) do i need to specify something while compiling sendmail to make it compatible?

3 6

Cannot get sieve script replication to work
by Marcel Menzel 24 Mar '19

24 Mar '19

Hello, I've set up dsync replication on 2 nodes and mail replication is working flawlessly, however it seems that replicating the sieve scripts won't work. Managesieve and sieve filter in gerneral seems to work on both nodes, however in order to have a synchronized state, I have to log onto both nodes with managesieve and save & activate the script. What's funny about this is that only deactivating the active sieve script (which removes the symlink) replicates from one node to the other (it's gone on both nodes then), but saving a new sieve script and activating it does not work. I cannot find anything on the internet about this problem (only old threads where an old commit should've fixed it), so I am asking here. Enabling mail_debug = yes and sieve_trace_debug = yes does not print anything useful here, the only thing I spotted was after creating and deleting the script afterwards, the other node complained about not being able to find the script: dovecot[15942]: doveadm: Debug: sieve: file script: File `/var/vmail/mcl.gg/mail/sieve/unnamed.sieve' not found dovecot[15942]: doveadm: Debug: doveadm-sieve: Value missing for key `vendor/vendor.dovecot/pvt/server/sieve/files/unnamed' (last change: 2019-03-24 15:24:27) All the messages about "Debug: sieve: file storage:" are correct. I am using Dovecot 2.3.5 (513208660) with Pigeonhole version 0.5.4 (60b0f48d) on Arch Linux 4.20.16.a-1-hardened. I've attached both node's doveconf -n. Kind regards, Marcel Menzel

1 0

Is this assumption correct?
by Tobi 24 Mar '19

24 Mar '19

Hello list we encounter a weird SSL issue with one of our dovecot (2.2.24 on Centos6) which we can only explain if our assumtion is correct Symptoms are that imaps connections (on port 993) suddenly get veeeery slow. Up to 180s for one connection with openssl s_client The thing we do not understand is that in the same time imap connections with starttls are just 1s. We can see that entropy on the affected system is not so high cat /proc/sys/kernel/random/entropy_avail 138 So our current theory is: we're running short of entropy but imaps connections are much more affected because they are encrypted from first bit. Whereas a starttls connection has an unencrypted part which generates some entropy it does not use. So I can add entropy to the system that other connections can use. We're open for any other theory but for the moment we believe (tm) that this is the reason that starttls is far more less affected than SSL Cheers tobi

3 2

Re: Dovecot quota and Postfix smtpd_recipient_restrictions?
by Davide Marchi 24 Mar '19

24 Mar '19

>> Well, >> >> so the right syntax (in my case) would be: >> >> -o smtpd_recipient_restrictions = >> reject_non_fqdn_recipient,reject_unknown_recipient_domain,permit_sasl_authenticated,reject,check_policy_service >> inet:mailstore.example.com:12340 >> >> right?? > I configured it before the "permit_sasl_authenticated" and the "reject" > statement. > I've a doubt (again): Is it correct the the space between "[..]service" and "inet[..]"? As suggested here: https://blog.sys4.de/postfix-dovecot-mailbox-quota-en.html I've run: postconf smtpd_recipient_restrictions=check_policy_service inet:mailstore.example.com:12340 but obtain the error: postconf: fatal: missing '=' after attribute name: "inet:mailstore.example.com:12340" Please, which is the correct syntax? :-) Thanks again! Davide

2 1

is it possible - username aliases
by Wojciech Puchar 23 Mar '19

23 Mar '19

i already have quite large dovecot installation with multiple domains but with users handled via unix passwd. Domain name mapping in both directions is done by sendmail, and mail delivery by procmail to Maildir format - one account per user. this accounts are often used for more than mail. So for example john smith have email john(a)foo.pl and unix username foo-john. His imap client and smtp client is configured to use login foo-john and email address john(a)foo.pl Everything works flawlessly. But i will have few new users that insist of being able to login as someone(a)somewhere.pl Can i have something similar to sendmail method in dovecot - an alias table like someone(a)somewhere.pl some-unix-account For this few users and have everything like it is now?

2 3

quota-service with Director - A workaround
by Tom Sommer 23 Mar '19

23 Mar '19

I realize quota-service on Director is not supported, which is a shame. As a workaround I'm thinking of setting up quota-service on one of my backend nodes, and have all my Postfix services ask this one node for the quota status. This sort of defeats the purpose of the Director (having per-user assigned hot nodes), since now this one node running the quota-service will access all mailboxes to check the status of all inbound mail. Is this a problem though? In terms of NFS locking etc. etc.? -- Tom

3 5

Send folder disappeared
by Esteban L 23 Mar '19

23 Mar '19

Hello, Dovecot 2.2.27 I have a strange issue, where my "Send" folder was absent in my mailbox. It had been there before, fully functioning. Then, it was gone. I went into: vi /etc/dovecot/conf.d/15-mailboxes.conf And, noticed that my mailbox for Sent was no longer automatically subscribed, so I changed it, and restarted dovecot. > # For \Sent mailboxes there are two widely used names. We'll mark > both of > # them as \Sent. User typically deletes one of them if duplicates > are created. > mailbox Sent { > special_use = \Sent > auto = subscribe > } > mailbox "Sent Messages" { > special_use = \Sent > } > } Now, Sent shows up again, but email I send, doesn't show up in the sent file?? The sent file is, and remains, empty. >

2 2

Is this assumption correct?
by Tobi 23 Mar '19

23 Mar '19

Hello list we encounter a weird SSL issue with one of our dovecot (2.2.24 on Centos6) which we can only explain if our assumtion is correct :-) Symptoms are that imaps connections (on port 993) suddenly get veeeery slow. Up to 180s for one connection with openssl s_client The thing we do not understand is that in the same time imap connections with starttls are just 1s. We can see that entropy on the affected system is not so high cat /proc/sys/kernel/random/entropy_avail 138 So our current theory is: we're running short of entropy but imaps connections are much more affected because they are encrypted from first bit. Whereas a starttls connection has an unencrypted part which generates some entropy it does not use. So I can add entropy to the system that other connections can use. We're open for any other theory but for the moment we believe (tm) that this is the reason that starttls is far more less affected than SSL Cheers tobi

1 0

Messages not saved to my "Sent" folder
by Esteban L 23 Mar '19

23 Mar '19

Hello, Using Dovecot 2.2.27 1. Had an issue where my Sent box, "disappeared." I used to be present, but then it was just gone. I went in and changed the /etc/dovecot/conf.d/15-mailboxes.conf the auto=subscribe feature had disappeared, even though I had added that line at setup. Below is the new changes. # For \Sent mailboxes there are two widely used names. We'll mark both of # them as \Sent. User typically deletes one of them if duplicates are created. mailbox Sent { special_use = \Sent auto = subscribe } mailbox "Sent Messages" { special_use = \Sent } } 2. But, mail is STILL not sent to SENT folder. 3. I have reload both postfix and dovecot, and also systemctl restart postfix && systemctl restart dovecot. The Sent folder is present, but no mail is stored to it. 4. Before sending this email, I checked my mobile client, and the Sent file was full from previously sent email. When I "updated it"/repolled it, it is now empty. Any able to lend a helping hand? Thanks.

1 0

Maildirs on AWS EFS
by Rodolfo Gonzalez 22 Mar '19

22 Mar '19

Hello, AWS released one month ago a EFS system with administered life cycle, which means that files not accessed in the last 30 days are moved to a lower cost storage tier. Currently I hold my e-mail, delivered to Maildir++ folders by postfix and retrieved with Dovecot, in standard EBS volumes. This has the disadvantage that I need to allocate more than enough space to ensure that the volume won't get filled too soon. And this costs. Changing to standard EFS wasn't an option, since it's way more expensive than EBS. But, with the new system, costs are lower. I just have a doubt in the technical side: is it safe to have the email in EFS? I've read experiences about storing in S3 and using a driver to mount the bucket, and it seems that it's not a very good option. But EFS works like NFS4. Does anyone have experience mounting an EFS to store maildirs? Thanks in advanced, Rodolfo.

4 3

Can't remove a folder created with doveadm import from IMAP client
by Francis 22 Mar '19

22 Mar '19

Hi, I imported mails with the doveadm import command. It worked great, but now, I'm unable to remove the folder backup-2019-03-22? In Thunderbird, the folder is displayed with grey italic font. The command I ran: doveadm import -u user(a)example.com mdbox:/var/vmail/domains/ example.com/user/mdbox-backup INBOX/backup-2019-03-22 all I found this help page from Mozilla: http://kb.mozillazine.org/Grey_italic_folders. It says Thunderbird display the folder in grey italic when the folder have the \Noselect flag. Is it the case with the problem I'm having? If yes, how to remove that flag on the folder? Thanks. -- Francis

1 0

dovecot.sieve shows up as a mailbox
by Esteban L 22 Mar '19

22 Mar '19

Hello, Config infos below. Short version, I am getting this weird anomaly on my main email account. Such that, "dovecot.sieve" is showing up as a mailbox in my various email clients (e.g. k-9 (mobile), and Evolution). I have tried deleting the "rogue folder" with doveadm, but it just returns. Anyone have any suggestions where I can track this down. dovecot --version 2.2.27 dovecot -n # 2.2.27 (c0f36b0): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.16 (fed8554) # OS: Linux 4.9.0-6-amd64 x86_64 Debian 9.8 ext4 auth_debug = yes auth_debug_passwords = yes auth_mechanisms = plain login auth_verbose = yes auth_verbose_passwords = yes mail_debug = yes mail_location = maildir:/var/mail/vmail/%d/%n mail_plugins = " quota" mail_privileged_group = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded- character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext namespace inbox { inbox = yes location = mailbox Archive { auto = subscribe special_use = \Archive } mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { quota = maildir:User quota quota_grace = 10%% quota_rule = *:storage=10G quota_rule2 = Trash:storage=+1G quota_status_overquota = 552 5.2.2 Mailbox is full quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u sieve = ~/.dovecot.sieve sieve_after = /etc/dovecot/sieve/spamfilter.sieve sieve_dir = ~/sieve } protocols = " imap lmtp sieve" service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } } service imap-login { inet_listener imaps { port = 993 ssl = yes } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } ssl = required ssl_cert = </etc/letsencrypt/live/little-beak.com/fullchain.pem ssl_key = # hidden, use -P to show it userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } verbose_ssl = yes protocol lmtp { mail_plugins = " quota sieve" postmaster_address = esteban(a)little-beak.com } protocol lda { mail_plugins = " quota sieve" } protocol imap { mail_plugins = " quota imap_quota" }

5 7

Re: imap ---- LIST "" * The returned mailbox does not display quotes
by lty 21 Mar '19

21 Mar '19

Yes, Foxmail for mac client, after dovecot upgrade from 2.1.17 to new version, imap can't receive any email, I perform packet capture test, foxmail will not have next step after sending {LIST "" *} command action. Foxmail for mac client, dovecot version 2.1.17 can receive imap mail normally, because we need to add quota_max_mail_size configuration, we must upgrade to a higher version (https://wiki2.dovecot.org/Quota/Configuration# Maximum_saved_mail_size) After comparison, the new version of dovecot returned without quotes. I hope that the quotes can be changed in the configuration, can I? Can I change the configuration to add quotes now? Or add this setting in the next version. > On 21 Mar 2019, at 6.22, lty via dovecot <dovecot(a)dovecot.org> wrote: > >> dovecot version >> >> v2.2.29 >> >> v2.2.36 >> >> v2.3.5 >> >> LIST "" * The returned mailbox does not display quotes >> v2.1.17 >> >> LIST "" * The returned mailbox shows quotation marks >> >> Why is the quotation mark removed in the new version? > > Because they were unnecessary. The code was changed to use more generic IMAP token writer, which adds quotes only as necessary. > >> Is there any configuration option in the new version to add quotes? > > No. Does it break some client?

4 3

Re: Dovecot quota and Postfix smtpd_recipient_restrictions?
by Davide Marchi 21 Mar '19

21 Mar '19

> From: Urban Loesch <bind(a)enas.net> > Hi, > >> Well, >> >> so the right syntax (in my case) would be: >> >> -o smtpd_recipient_restrictions = >> reject_non_fqdn_recipient,reject_unknown_recipient_domain,permit_sasl_authenticated,reject,check_policy_service >> inet:mailstore.example.com:12340 >> >> right?? > I configured it before the "permit_sasl_authenticated" and the "reject" > statement. > >> >> And eventually, should you suggest me how made some functional >> verification test? > According to: http://www.postfix.org/SMTPD_POLICY_README.html try on > your postfix: > > telnet mailstore.example.com 12340 > > and insert the following lines: > > sender=somesender(a)somedomain.com > recipient=your(a)recipient.com > size=12345 > [empty line] > > > Set a size= in bytes which is greater that your configured quota. > In theory the policy service should respond with your configured error > message "552 5.2.2 Mailbox is full". > > Example on my server: > > ... > sender=postmaster(a)somedomain.com > recipient=my(a)recipient.com > size=123450000000 > > action=552 5.2.2 Mailbox is full > ... > > > For a livetest reduce the quota of your testaccount to ex. 100KB and > the send a mail > 100BK from outside to it. You should see the "552" > error > message in your logs and you should get back a bouncemail from the > sending server. > > Hope I explained it correct. > > Best > Urban WAW! Very very clear your example! Thanks again Urban, you are a friend ;-) I will try... Thanks again to all! Davide -- cosmogoniA n o p r o v a r e n o f a r e o n o n f a r e n o n c e p r o v a r e

1 0

imap ---- LIST "" * The returned mailbox does not display quotes
by lty 21 Mar '19

21 Mar '19

dovecot version v2.2.29 v2.2.36 v2.3.5 LIST "" * The returned mailbox does not display quotes dovecot version v2.1.17 LIST "" * The returned mailbox shows quotation marks Why is the quotation mark removed in the new version? Is there any configuration option in the new version to add quotes? Because I see a lot of big public mailboxes with quotation marks.

2 1

Dovecot crashing when attempting to search in virtual folder with fts_squat activated
by benjamin＠godbersen.info 20 Mar '19

20 Mar '19

Hi everyone, I am running into a problem when trying to use fts_squat in a virtual folder. Without fts_squat plugin the search (from, subject...) works in all folders. With activated fts the search on the inbox folders works expectedly well but any attempt to search anything in any virtual folder leads to the following error. Similarly when attempting "doveadm fts lookup". I also noticed that no search index for the virtual folders gets build - is this expected behaviour? Mar 14 23:14:58 *** dovecot: service=imap, user=***, ip=[::1]. Panic: file mail-storage.c: line 1913 (mailbox_get_open_status): assertion failed: (box->opened) Mar 14 23:14:58 *** dovecot: service=imap, user=***, ip=[::1]. Error: Raw backtrace: /usr/lib/x86_64-linux-gnu/dovecot/libdovecot.so.0(+0xba731) [0x7f553a7ff731] -> /usr/lib/x86_64-linux-gnu/dovecot/libdovecot.so.0(+0xba7fa) [0x7f553a7ff7fa] -> /usr/lib/x86_64-linux-gnu/dovecot/libdovecot.so.0(i_fatal+0) [0x7f553a771638] -> /usr/lib/x86_64-linux-gnu/dovecot/libdovecot-storage.so.0(mailbox_get_open_status+0x68) [0x7f553aae4a78] -> /usr/lib/dovecot/modules/lib21_fts_squat_plugin.so(+0x3684) [0x7f553677a684] -> /usr/lib/dovecot/modules/lib21_fts_squat_plugin.so(+0x3820) [0x7f553677a820] -> /usr/lib/dovecot/modules/lib20_fts_plugin.so(fts_backend_lookup_multi+0x163) [0x7f5539b016a3] -> /usr/lib/dovecot/modules/lib20_fts_plugin.so(+0xd728) [0x7f5539b06728] -> /usr/lib/dovecot/modules/lib20_fts_plugin.so(fts_search_lookup+0xeb) [0x7f5539b06bbb] -> /usr/lib/dovecot/modules/lib20_fts_plugin.so(+0xf8b8) [0x7f5539b088b8] -> dovecot/imap(imap_search_start+0x6a) [0x5654cb5a0d6a] -> dovecot/imap(cmd_sort+0x293) [0x5654cb593553] -> dovecot/imap(command_exec+0x64) [0x5654cb599874] -> dovecot/imap(+0x1bd22) [0x5654cb597d22] -> dovecot/imap(+0x1bdbc) [0x5654cb597dbc] -> dovecot/imap(client_handle_input+0x1b5) [0x5654cb5981c5] -> dovecot/imap(client_input+0xa4) [0x5654cb5987e4] -> /usr/lib/x86_64-linux-gnu/dovecot/libdovecot.so.0(io_loop_call_io+0x69) [0x7f553a8174a9] -> /usr/lib/x86_64-linux-gnu/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0x12e) [0x7f553a818d1e] -> /usr/lib/x86_64-linux-gnu/dovecot/libdovecot.so.0(io_loop_handler_run+0x4c) [0x7f553a8175ac] -> /usr/lib/x86_64-linux-gnu/dovecot/libdovecot.so.0(io_loop_run+0x38) [0x7f553a8177b8] -> /usr/lib/x86_64-linux-gnu/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f553a7940a3] -> dovecot/imap(main+0x339) [0x5654cb58a539] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xe7) [0x7f553a375b97] -> dovecot/imap(_start+0x2a) [0x5654cb58a71a] Mar 14 23:14:58 *** dovecot: service=imap, user=***, ip=[::1]. Fatal: master: service(imap): child 6436 killed with signal 6 (core dumps disabled) This is my config: # 2.3.0.1 (ffd8a29): /etc/dovecot/dovecot.conf # Pigeonhole version 0.5.0.1 (d33dca20) # OS: Linux 4.15.0-46-generic x86_64 Ubuntu 18.04.2 LTS ext4 auth_mechanisms = plain login digest-md5 cram-md5 apop auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890&.-_@' default_vsz_limit = 8096 M disable_plaintext_auth = no first_valid_uid = 30 imap_client_workarounds = delay-newmail imap_logout_format = rcvd=%i, sent=%o mail_home = /var/qmail/mailnames/%Ld/%Ln mail_location = maildir:/var/qmail/mailnames/%Ld/%Ln/Maildir mail_log_prefix = "service=%s, user=%u, ip=[%r]. " mail_max_userip_connections = 100 mail_plugins = quota fts fts_squat virtual managesieve_logout_format = rcvd=%i, sent=%o managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeri$ namespace inbox { inbox = yes location = prefix = INBOX. separator = . } namespace virtual { hidden = no inbox = no list = yes location = virtual:/var/qmail/mailnames/%Ld/%Ln/virtual/:INDEX=/var/qmail/mailnames/%Ld/%Ln/virtual/ prefix = separator = . } passdb { driver = plesk } plugin { fts = squat fts_squat = partial=4 full=10 quota = maildir:User quota quota_grace = 0 sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_extensions = +notify +imapflags } pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_logout_format = rcvd=%i, sent=%o, top=%t/%p, retr=%r/%b, del=%d/%m, size=%s protocols = imap pop3 sieve service auth-worker { group = user = } service auth { group = unix_listener auth-userdb { group = popuser mode = 0600 user = popuser } user = } service imap-login { process_limit = 2048 service_count = 1 } service imap { process_limit = 2048 service_count = 1 } service pop3-login { process_limit = 2048 service_count = 1 } service pop3 { process_limit = 2048 service_count = 1 } ssl_cert = </etc/dovecot/private/dovecot.pem ssl_cipher_list = HIGH:!aNULL:!MD5 ssl_dh = # hidden, use -P to show it ssl_key = # hidden, use -P to show it ssl_prefer_server_ciphers = yes userdb { args = uid=popuser gid=popuser driver = static } protocol imap { mail_plugins = quota fts fts_squat virtual imap_quota } protocol pop3 { pop3_uidl_format = UID%u-%v } protocol sieve { mail_plugins = quota fts fts_squat virtual } protocol lda { mail_plugins = quota fts fts_squat virtual sieve } dovecot --version -> 2.3.0.1 (ffd8a29) I will be greatful for any tips hinting me on how to resolve this behaviour. Thank you very much in advance Benjamin

4 5

Dovecot Wiki: Please disable edit on double click
by Michael Goth 20 Mar '19

20 Mar '19

Hi Aki, could you maybe disable the 'edit on doubleclick' feature on wiki2.dovecot.org? Everytime I try to select a word by double clicking on it, I end up in editing mode. It's just a minor thing, but maybe I'm not the only one who's annoyed by this ;) Thanks! Michael

6 6

Checkpassword.
by Niamh Holding 20 Mar '19

20 Mar '19

Hello, I've run into the issue detailed at https://wiki2.dovecot.org/AuthDatabase/CheckPassword#Security Understandably I don't have the skills to modify checkpassword so if I do the suggested will it work? If you can't change the script, you can make Dovecot's checkpassword-reply binary setuid or setgid (e.g. chgrp dovecot /usr/libexec/dovecot/checkpassword-reply; chmod g+s /usr/libexec/dovecot/checkpassword-reply) -- Best regards, Niamh mailto:niamh@fullbore.co.uk

1 1

Re: Dovecot quota and Postfix smtpd_recipient_restrictions?
by Davide Marchi 20 Mar '19

20 Mar '19

> From: Urban Loesch > > Hi, > >> I would like to enable (the same) quota (count) for all >> (virtual)users, >> on Debian Stretch, Postfix 3.1.8, Dovecot 2.2.27, >> and is not clear for me if I need to tell Postfix to communicate with >> the service in /etc/postfix/main.cf as here: >> >> >> smtpd_recipient_restrictions = >> ... >> check_policy_service inet:mailstore.example.com:12340 > I configured it like your example above and it works for me. > > Best > Urban Well, so the right syntax (in my case) would be: -o smtpd_recipient_restrictions = reject_non_fqdn_recipient,reject_unknown_recipient_domain,permit_sasl_authenticated,reject,check_policy_service inet:mailstore.example.com:12340 right? :-) And eventually, should you suggest me how made some functional verification test? Many many many thanks Urban!! ;-) Davide

2 1

Dovecot quota and Postfix smtpd_recipient_restrictions?
by Davide Marchi 20 Mar '19

20 Mar '19

Hi Friends, a doubt: I would like to enable (the same) quota (count) for all (virtual)users, on Debian Stretch, Postfix 3.1.8, Dovecot 2.2.27, and is not clear for me if I need to tell Postfix to communicate with the service in /etc/postfix/main.cf as here: smtpd_recipient_restrictions = ... check_policy_service inet:mailstore.example.com:12340 My current Postfix "smtpd_recipient_restrictions": -o smtpd_recipient_restrictions=reject_non_fqdn_recipient,reject_unknown_recipient_domain,permit_sasl_authenticated,reject Currently I've edited: conf.d/10-mail.conf: # Space separated list of plugins to load for all services. Plugins specific to # IMAP, LDA, etc. are added to this list in their own .conf files. mail_plugins = $mail_plugins quota conf.d/20-imap.conf: protocol imap { # Space separated list of plugins to load (default is global mail_plugins). mail_plugins = $mail_plugins imap_quota } conf.d/90-quota.conf: (for use with the quota-status service) plugin { quota_grace = 10%% # 10% is the default quota_status_success = DUNNO quota_status_nouser = DUNNO quota_status_overquota = "552 5.2.2 Mailbox is full" } /etc/dovecot/conf.d/90-quota.conf: plugin { quota = maildir quota_rule = *:storage=3G quota_rule2 = Trash:storage=+100M # LDA/LMTP allows saving the last mail to bring user from under quota to # over quota, if the quota doesn't grow too high. Default is to allow as # long as quota will stay under 10% above the limit. Also allowed e.g. 10M. #quota_grace = 10%% # 10% is the default quota_status_success = DUNNO quota_status_nouser = DUNNO quota_status_overquota = "552 5.2.2 Mailbox is full" } plugin { quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u } plugin { #quota = dirsize:User quota #quota = maildir:User quota #quota = dict:User quota::proxy::quota #quota = fs:User quota quota = count:User quota # This is required - it uses "virtual sizes" rather than "physical sizes" for quota counting: quota_vsizes = yes } plugin { #quota = dict:user::proxy::quota #quota2 = dict:domain:%d:proxy::quota_domain #quota_rule = *:storage=102400 #quota2_rule = *:storage=1048576 } service quota-warning { executable = script /usr/local/bin/quota-warning.sh user = dovecot unix_listener quota-warning { user = vmail } } service quota-status { executable = quota-status -p postfix inet_listener { port = 12340 # You can choose any port you want } client_limit = 1 } Many many thanks!! Davide

3 2

4sec latency when using director
by Erik de Waard 19 Mar '19

19 Mar '19

Hi, I've been running dovecot for many years, but now i've hit a strange problem. when retrieving imap there is sometimes in 1 of 4 imap requests a 4sec latency. * notes: - connected directly to the backends this latency disappears - removing a director from the loadbalancer(lvs) so i'm the only connected to the director this latency disappears too I would appreciate some feedback of where to look because i tried various options. (client_limit,process_limit) perhaps its just as simple as to add more directors but any feedback would be welcome. Thank you. This is the setup: -- Internet -> LVS -> 3 Directors -> 9 Backends. doveadm director status mail server ip tag vhosts state state changed users 10.0.10.110 100 up - 3309 10.0.10.111 100 up - 3412 10.0.10.112 100 up - 3458 10.0.10.113 100 up - 3437 10.0.10.115 100 up - 3368 10.0.10.116 100 up - 3320 10.0.10.117 100 up - 3305 10.0.10.118 100 up - 3291 10.0.10.223 100 up - 3280 #Director doveconf -n # Pigeonhole version 0.4.22 (22940fb7) # OS: Linux 4.9.0-6-amd64 x86_64 Debian 9.4 # Hostname: server312.company.com auth_cache_negative_ttl = 0 auth_cache_size = 10 M auth_cache_ttl = 1 days auth_username_chars = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@#" default_client_limit = 3000 director_mail_servers = 10.0.10.223 10.0.10.110 10.0.10.111 10.0.10.112 10.0.10.113 10.0.10.115 10.0.10.116 10.0.10.117 10.0.10.118 director_servers = 10.0.10.114 10.0.10.181 10.0.10.182 director_user_expire = 1 days disable_plaintext_auth = no info_log_path = /dev/null lmtp_proxy = yes login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e encryption=%k secured=%c mail_max_userip_connections = 100 passdb { args = proxy=y nopassword=y driver = static } protocols = imap lmtp service director { fifo_listener login/proxy-notify { mode = 0600 user = $default_login_user } inet_listener { port = 9090 } unix_listener director-userdb { mode = 0600 } unix_listener login/director { mode = 0666 } } service imap-login { client_limit = 6000 executable = imap-login director process_limit = 4 process_min_avail = 4 service_count = 0 vsz_limit = 600 M } service ipc { unix_listener ipc { user = dovecot } } service lmtp { inet_listener lmtp { port = 24 } } ssl_cert = </etc/ssl-certificates/MDC_company_com.crt ssl_cipher_list = ALL:!LOW:!SSLv2:!EXP:!aNULL:!RC4:!SEED@STRENGTH ssl_key = # hidden, use -P to show it ssl_prefer_server_ciphers = yes protocol lmtp { auth_socket_path = director-userdb } #backend doveconf -n # 2.2.34 (874deae): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.22 (22940fb7) # OS: Linux 4.9.0-6-amd64 x86_64 Debian 9.4 # Hostname: server250.company.com auth_cache_negative_ttl = 0 auth_cache_size = 10 M auth_cache_ttl = 1 days auth_username_chars = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@#" default_client_limit = 1500 default_vsz_limit = 600 M disable_plaintext_auth = no info_log_path = /dev/null listen = * log_timestamp = "%Y-%m-%d %H:%M:%S " mail_max_userip_connections = 100 mail_privileged_group = mail mmap_disable = yes namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = INBOX. separator = . type = private } passdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } plugin { sieve_execute_bin_dir = /etc/dovecot/sieve-executables sieve_global_extensions = +vnd.dovecot.execute sieve_plugins = sieve_extprograms } protocols = imap lmtp service anvil { unix_listener anvil-auth-penalty { mode = 0600 } } service auth { user = root } service imap-login { client_limit = 6000 process_limit = 4 process_min_avail = 4 service_count = 0 vsz_limit = 600 M } service imap { client_limit = 1 process_limit = 1024 service_count = 50 } service lmtp { inet_listener lmtp { port = 24 } } ssl = no ssl_cert = </etc/dovecot/dovecot.crt ssl_key = # hidden, use -P to show it userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } verbose_proctitle = yes protocol lmtp { mail_plugins = " sieve" plugin { sieve = ~/filters.sieve sieve_after = /etc/dovecot/sieve/after.sieve sieve_before = /etc/dovecot/sieve/before.sieve } userdb { args = /etc/dovecot/dovecot-sql-lmtp.conf driver = sql name = } }

1 1

Way to remove FTS indexes
by Peter Mogensen 19 Mar '19

19 Mar '19

Hi, I was wondering if there was anyway to remove FTS indexes in other to have them rebuild on the next BODY search? All the doveadm commands I can find seem to result in fully build indexes. (which is nice if that's what you want). /Peter

2 1

Re: Upgrade from 2.1.17 2.2.36
by lty 19 Mar '19

19 Mar '19

I use the MAC Foxmail client, v2.2.36 can't receive mail, but v2.1.17 can receive mail. I grabbed the network package and found that Foxmail was not processing the next step after sending the D LIST "" * command. I suspect that because of the time of return, Foxmail is not recognized, so I want to remove this time. 在 2019-03-18 18:03，Aki Tuomi 写道： > On 18.3.2019 12.00, lty via dovecot wrote: > >> v2.1.1 >> >> v2.2.36 >> >> The screenshot is the result returned by imap. >> >> I don't want to want dovecot to return time, can I close it? > > Why do you want this? > > Aki

2 3

AD ldap, filter to exclude various kinds of expired, disabled etc etc users
by mj 19 Mar '19

19 Mar '19

Hi, I was revising our AD ldap user_filter and pass_filter to exclude more types of expired / disabled accounts. I started adding things like: > (&(objectclass=person)(sAMAccountName=%n)(!useraccountcontrol=514)(!(useraccountcontrol=546))(!(useraccountcontrol=66050))(!(useraccountcontrol=8388608))) but then I thought, why not simply do: > (&(objectclass=person)(sAMAccountName=%n)(userAccountControl=512)) as 512 would your regular active user accounts only, excluding all other account types. Looking here (https://support.microsoft.com/en-gb/help/305144/how-to-use-useraccountcontr…) there are some many different userAccountControl to check, that it might be smarter to only allow userAccountControl=512, or....? Any ideas on this..? (or examples of how you do it?) MJ

2 1

Dovecot logrotation - old journal files are still in use
by Denis V Razumovskiy 19 Mar '19

19 Mar '19

2 2

dovecot-openssl-common.c and [-Wincompatible-pointer-types]
by Rupert Gallagher 18 Mar '19

18 Mar '19

Warnings from clang 7.0 when compiling dovecot-openssl-common.c from dovecot 2.3.5 with openssl 1.1.1a. This is dovecot's configuration: > config_options="--prefix=$prefix \ > --sysconfdir=$prefix/etc \ > --datarootdir=$prefix/share \ > --mandir=$man \ > --docdir=$doc \ > --with-docs \ > --with-ssl=openssl --with-ssldir=$prefix/etc \ > --with-sodium \ > --with-libiconv-prefix=/opt/libiconv \ > \ > --with-bzlib=no \ > --with-gssapi=no \ > --with-ldap=no \ > --with-lucene=no \ > --with-lz4=no \ > --with-lzma=no \ > --with-pam=no \ > --with-solr=no \ > --with-sql=no \ > --with-vpopmail=no \ > --with-zlib=no \ > \ > --enable-dependency-tracking"; Note on passing: --with-ssldir=$prefix/etc is ignored by the configurator, as it forces $prefix/etc/dovecot.

1 0

Dovecot logrotation - old journal files are still in use (second attempt)
by Denis V Razumovskiy 18 Mar '19

18 Mar '19

Hi all Sorry, it is the second attempt due to wrong format of the first message. In my Dovecot there are 3 files of logging (debug, info and .log) While executing logrotation, the new files are created, but the previos ones, namely dovecot.*.1 are still in use by the process Here is the logger process in memory: root 19140 0.0 0.0 4140 1576 ? S Mar12 0:06 dovecot/log Here the files it uses after the daily logrotation had happened: # lsof -p19140 |grep log ... log 19140 root 33w REG 9,3 811 417675 /var/log/dovecot.log.1 log 19140 root 34w REG 9,3 2842123 417681 /var/log/dovecot.info.1 log 19140 root 35w REG 9,3 14853918 417683 /var/log/dovecot.debug.1 ... After the manual issue 'doveadm log reopen` command the files are changed to # lsof -p19140 |grep dovecot\\\. ... log 19140 root 33w REG 9,3 0 417651 /var/log/dovecot.log log 19140 root 34w REG 9,3 121374 417690 /var/log/dovecot.info log 19140 root 35w REG 9,3 916153 417691 /var/log/dovecot.debug as it is expected to be. I use the logrotate config for dovecot instance: /var/log/dovecot.log /var/log/dovecot.info /var/log/dovecot.debug { daily rotate 14 missingok notifempty compress delaycompress sharedscripts postrotate doveadm log reopen chmod 666 /var/log/dovecot.log chmod 666 /var/log/dovecot.info chmod 666 /var/log/dovecot.debug endscript } At the same time, dovecot itself still uses previous logs: # lsof |grep var\/log\/dovecot\. dovecot 19138 root 8w REG 9,3 12962 417613 /var/log/dovecot.log.1 (deleted) dovecot 19138 root 9w REG 9,3 4097250 416836 /var/log/dovecot.info.1 (deleted) dovecot 19138 root 10w REG 9,3 23816347 417603 /var/log/dovecot.debug.1 (deleted) What can be the root of the issue? I use Dovecot as LDA for Postfix with system users, mbox mail format. System Slackware 12.0 x86, Postfix 2.4.5, Dovecot 2.2.36. Interconnect Postfix-Dovecot has been made via `mailbox_command = ...' Dovecot was compiled from sources Logging configuration (file conf.d/10-logging.conf) contains the following: log_path = /var/log/dovecot.log info_log_path = /var/log/dovecot.info debug_log_path = /var/log/dovecot.debug auth_verbose = yes auth_verbose_passwords = yes auth_debug = yes mail_debug = yes verbose_ssl = yes plugin { } Could the fact, that Postfix require Dovecot logs to be accessible someway, result in such a weird behavior? To allow other processes to access Dovecot logs I had to chmod 0666 all the current logs while integrating Dovecot into Postfix delivery (please see `chmod' commands in the logrotate config above) Please ignore my previos post https://dovecot.org/pipermail/dovecot/2019-March/115075.html Thank you Denis Razoumovskiy

2 1

child-wait.c and [-Wnull-pointer-arithmetic]
by Rupert Gallagher 18 Mar '19

18 Mar '19

Attached warnings from clang 7.0 when compiling child-wait.c from dovecot 2.3.5: "arithmetic on a null pointer treated as a cast from integer to pointer is a GNU extension [-Wnull-pointer-arithmetic]".

2 2

LDAP users issue
by Anushka Bandara 18 Mar '19

18 Mar '19

Hi Team, I have enabled LDAP authentication with webmail client and it works successfully. But I found an error with LDAP user's mail. Email is not loaded when I log with an LDAP user. Login phase is successful and mail box is the issue. I created a mail user without including LDAP and that user works fine. Issue comes only with LDAP users. *Anushka Bandara* Research Engineer Lanka Software Foundation +94715846018

3 4

Upgrade from 2.1.17 2.2.36
by lty 18 Mar '19

18 Mar '19

v2.1.1 v2.2.36 The screenshot is the result returned by imap. I don't want to want dovecot to return time, can I close it?

2 1

`Spam' folder creation for multiple users
by Marek Kozlowski 17 Mar '19

17 Mar '19

:-) I've just added pigeonhole and a simple sieve script: ------------------------------------------------- require "fileinto"; if header :contains "X-Spam-Flag" "YES" { fileinto "Spam"; } ------------------------------------------------- If a user has this folder (`Spam') it works fine. If they haven't it results in an error. 1. Can I modify the script to create this folder if the need arise? 2. If not - what's the most recommended way of adding this folder for all users (~1000)? Thanks! Best regards, Marek

3 2

MikroTik Users Contact List
by Kathleen Brown 17 Mar '19

17 Mar '19

Hello, Hope you're having a great day! I just wanted to know if you're looking to acquire MikroTik Users Contact List for your marketing efforts? Information Field: Names, Title, Email, Phone, Company Name, Company URL, Company physical address, SIC Code, Industry and Company Size (Revenue and Employee). Kindly review and let me know of your target interest so that I can get back to you with the exact counts and sample file. Do let me know if you have any questions for me. Regards, Kathleen Brown Database Executive If you do not wish to receive these emails. Please respond Exit.

2 1

lda: Unknown mail storage driver maildir
by Rob De Langhe 17 Mar '19

17 Mar '19

hi all, I have a successful (self-compiled from source code) Dovecot v2.2.16 setup active on my Solaris-10 server, with mails stored in user's $HOME/Maildir The mails are fetched from the ISP with "fetchmail", using a "cron" job fetchmail -f $HOME/etc/pop3.myisp where the file "$HOME/etc/pop3.myisp" contains set logfile fetchmail.log poll pop.myisp.be with proto POP3 user myIspmailLogin there with password myIspPwd is rob here nokeep mda "/programs-3.2/amd64/64/libexec/dovecot/deliver" Now I want to get it also running on a Debian server, with the same Dovecot version, and exactly the same config files, but here I get the following messages in "/var/log/mail.log" when launching a "fetchmail" attempt : Mar 17 14:36:20 apps_b dovecot: lda(rob): Debug: Effective uid=1000, gid=1000, home=/home/rob Mar 17 14:36:20 apps_b dovecot: lda(rob): Debug: Namespace inbox: type=private, prefix=, sep=, inbox=no, hidden=no, list=yes, subscriptions=yes location=maildir:~/Maildir Mar 17 14:36:20 apps_b dovecot: lda(rob): Error: User initialization failed: Namespace '': Unknown mail storage driver maildir Mar 17 14:36:20 apps_b dovecot: lda(rob): Fatal: Invalid user settings. Refer to server log for more information. So it seems to be complaining about "maildir" storage driver ?! My config is: # /programs/3.4/x86_64/64/sbin/dovecot -n -c /usr/local/dovecot/dovecot.conf # 2.2.16: /usr/local/dovecot/dovecot.conf # OS: Linux 3.16.0-4-amd64 x86_64 Debian 8.4 disable_plaintext_auth = no first_valid_gid = 1000 first_valid_uid = 1000 last_valid_gid = 1500 last_valid_uid = 2000 mail_debug = yes mail_location = maildir:~/Maildir namespace inbox { location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = * driver = pam } postmaster_address = rob(a)mydomain.be ssl_cert = </etc/ssl/certs/dovecot.pem ssl_key = </etc/ssl/private/dovecot.pem userdb { driver = passwd }

2 1

LMTP Proxy failure using master login via destuser field
by Dirk 17 Mar '19

17 Mar '19

Hi list, I set up dovecot as IMAP proxy using a master user to login into the backend and it works beautifully. 👍🏻 Next I set out to do LMTP proxying and I struggled (initially). I got the log message: Mar 17 11:23:44 mail postfix/lmtp[2665]: 99A3F219C8: to=<johnny(a)doe.com>, relay=10.15.1.2[10.15.1.2]:24, delay=5.1, delays=4.9/0.05/0.01/0.07, dsn=5.1.1, status=bounced (host 10.15.1.2[10.15.1.2] said: 550 5.1.1 <"johnny(a)doe.com*director"@mail.server.com> User doesn't exist: "johnny(a)doe.com*director"@mail.server.com (in reply to RCPT TO command)) My director's passdb setting looked like this: passdb { driver = sql args = /etc/dovecot/sql/my-passdb.conf result_success = continue-ok result_failure = return-fail result_internalfail = return-fail } # Add director master user credentials if above succeeded passdb { driver = static args = proxy=y starttls=any-cert \ destuser=%u*director(a)example.com \ pass=correcthorsebatterystaple \ nopassword=y skip = unauthenticated } In the end I found that setting the `master` field instead of `destuser` solves the issue. It looks like LMTP does not know how to handle the master user separator although set. I this known/wanted behavior? Maybe this is something to mention on the wiki page, it took a while to figure this out... Kind regards, Dirk Mit freundlichen Grüßen Dirk Weise DevOps Engineer -- bitloft GmbH | Schulstraße 2 | D-42551 Velbert www.bitloft.de | weise(a)bitloft.de Telefon: +49 2051 40514-32 Geschäftsführer: Robin Clemens, Franz-Josef Wieneke Amtsgericht Wuppertal HRB 17297 | USt-IDNr. DE121540053

1 0

testing dovecot LMTP with postfix/spamassassin
by Marek Kozlowski 17 Mar '19

17 Mar '19

:-) My postfix configuration is quite complex with a lot of special cases and rules. However I'd like to make an anti-spam configuration as simple and lightweight as possible (KISS). /etc/postfix/master.cf ------------------------------------------------------------------------ smtp inet n - n - - smtpd -o content_filter=spamassassin spamassassin unix - n n - - pipe user=nobody argv=/usr/bin/vendor_perl/spamc -e /usr/sbin/sendmail -oi -f ${sender} ${recipient} ------------------------------------------------------------------------ then the simplest sieve rule I can think of: ------------------------------------------------------------------------ require "fileinto"; if header :contains "X-Spam-Flag" "YES" { fileinto "Spam"; } ------------------------------------------------------------------------ I'd like to make this rule active for only local deliveries via dovecot LMTP with sieve plugin and setting postfix `mailbox_transport' to dovecot LMTP. I believe it is so simple it should work (am I wrong?). But... It would be more convenient to do some tests before applying changes to a production environment config. The problem is: I have no separate testing environment with my strange configuration I'm able to test a spamassassin score for an e-mail manually. How about dovecot LMTP? Can I test local mail delivery by dovecot LMTP manually? I mean: to simulate "I'm the Postfix" and produce for some testing e-mail the same effect as postfix granting it via `local_transport' to dovecot? Best regards, Marek

4 6

LMTP: Undelivered Mail Returned to Sender: User doesn't exist! :-(
by Marek Kozlowski 17 Mar '19

17 Mar '19

:-) I'm using postfix for mail delivery and dovecot for mailbox access imaps pop3s. Postfix resolves, verifies and overwrites users' addresses by numerous subtle LDAP queries. However users are visible as local ones (openldap, pam, nss) in the sense I can run `id' or `finger' queries and receive replies. Dovecot handles all mailboxes over imap/pop correctly with no additional configuration for LDAP. Just (10-mail.conf): mail_location = maildir:/mailboxes/%u and it works fine. Because I'd like to use pigeonhole I'm trying to make local delivery via dovecot LMTP (https://wiki2.dovecot.org/HowTo/PostfixDovecotLMTP) I've configured the socket and added to `/etc/postfix/main.cf' the line: mailbox_transport = lmtp:unix:/var/spool/postfix/private/dovecot-lmtp I think that id dovecot handles mailboxes correctly over imap/pop it can easily find the users and their mailboxes so it doesn't need any additional configuration for LDAP. Unfortunately it doesn't work and results in: Undelivered Mail Returned to Sender: User doesn't exist! :-( What's the thing I've missed? Best regards, Marek

2 2

How to create sent items, drafts and so on
by Sakuma, Koshiro 17 Mar '19

17 Mar '19

Hello, I've setup Dovecot and Postfix mailing systems. The protocol is imap. Now, I've realized that there are no "sent items, drafts" boxed under Maildir for each users. I would like to take back up Inbox, sent items, draft boxes. For sent items box, it seems to be stored in outlook client file which is "ost". The configuration parameters and version is as follows. I can see that "namespace" has been configured. How can I setup to see these folders? Thank you for your support! 1. Dovecot version ->2.2.36 2. dovecot -n ----------------------------------------------------------------------------------------------------------- #2.2.36 (1f10bfa63): /etc/dovecot/dovecot.conf # OS: Linux 3.10.0-957.5.1.el7.x86_64 x86_64 CentOS Linux release 7.6.1810 (Core) # Hostname: mail.corp-associe.com auth_mechanisms = plain login auth_verbose = yes disable_plaintext_auth = no first_valid_uid = 1000 listen = * log_path = /var/log/dovecot.log mail_debug = yes mail_location = maildir:~/Maildir mbox_write_locks = fcntl namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = } passdb { args = scheme=CRAM-MD5 username_format=%u /etc/dovecot/users driver = passwd-file } protocols = imap service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } } service imap-login { inet_listener imap { port = 0 } inet_listener imaps { port = 993 ssl = yes } } service pop3-login { inet_listener pop3 { port = 0 } inet_listener pop3s { port = 995 ssl = yes } } ssl_cert = </etc/letsencrypt/fullchain1.pem ssl_key = # hidden, use -P to show it userdb { args = username_format=%u /etc/dovecot/users driver = passwd-file } userdb { args = uid=vmail gid=vmail home=/var/spool/virtual/%d/%n driver = static }

4 9

Re: Unable to set quota-fs plugin
by Eric Grammatico 17 Mar '19

17 Mar '19

Hi there, Well.. I didn't find a way to strace imap. If I well understood, the faulty IMAP is launched by dovecot from or after a succesfull imap-login process. I have executed manually '/usr/libexec/dovecot/imap -u eric' and typed getquotaroot "INBOX" which didn't reproduce the error seen in the dovecot logs and reported the correct quota. Any idea how to find the imap command generating the error imap(eric)<3085></M5VXfCBwJejrKVa>: Error: Failed to get quota resource STORAGE: quota-fs: quotactl(Q_GETQUOTA, /dev/vda1) failed: No such file or directory Thanks and regards, - Eric Grammatico _/) 14 mars 2019 11:46 "Eric Grammatico" <e.grammatico(a)gmail.com> a écrit: > I use sendmail and quota-status is not running in background. > > Fully aligned with you about focusing on imap... will try to get other strace and report there. > > thanks and regards, > > - > Eric Grammatico _/) > > 14 mars 2019 11:37 "Yassine Chaouche via dovecot" <dovecot(a)dovecot.org> a écrit: > >> On 3/14/19 9:53 AM, Yassine Chaouche via dovecot wrote: >> >>> On 3/13/19 2:10 PM, Eric Grammatico via dovecot wrote: >>>> Thanks Aki, >>>> >>>> Please find attached strace for imap and quota-status which report an >> error at the end. >>>> >>>> Regards, >>> >>> write(2, "/usr/libexec/dovecot/quota-statu"..., > 57/usr/libexec/dovecot/quota-status: invalid >>> option -- 'u' >>> >>> Please retry with the good options (-u is invalid) >>> >>> Yassine. >> >> Ah, that seems to be the service that is called by the MTA before delivering the mail to the LDA, >> in case the user is over quota, so that the MTA may bounce the e-mail right away instead of >> accepting it first then bouncing afterwards (after the LDA refuses the message). >> >> But according to the error message you posted on your first e-mail, the error happens with imap, I >> don't know if quota-status is involved here (might be) ? >> >> In any case, I would concentrate on imap and not quota-status. Nothing in the imap strace shows any >> trace of errors. Particulary, I was looking for a quotactl line in the strace, but I couldn't find >> it. >> >> In the other hand, it is present in the doveadm quota strace, and has completed successfully >> >> dovecot.strace:quotactl(QCMD(Q_GETQUOTA, USRQUOTA), "/dev/vda1", 1000, {dqb_bhardlimit=4194304, >> dqb_bsoftlimit=3170304, dqb_curspace=638853120, dqb_ihardlimit=0, dqb_isoftlimit=0, >> dqb_curinodes=12784, ...}) = 0 >> >> Someone has to tell us under what conditions will the imap daemon check for quota (at login ? at >> delivery or any other action involving moving mail around like copying or expunging ?) >> >> For the quota-status libexec, I have set it to run with quota-status -f postfix but your setup may >> vary (if it's every configured). If it is running, you can just grep it's pid with pgrep >> quota-status then strace -p $PID and see how it behaves (wait until a quota operation is needed). >> >> Yassine.

2 6

ssl_dh
by sergio 16 Mar '19

16 Mar '19

https://wiki.dovecot.org/SSL/DovecotConfiguration says: "Since v2.3.3+ Diffie-Hellman parameters have been made optional, and you are encouraged to disable non-ECC DH algorithms completely." and a bit later: "From version 2.3, you must specify path to DH parameters file using ssl_dh=</path/to/dh.pem" So. 1. Is ssl_dh an optional or a must? 2. I've disabled ssl_dh in my config. Dovecot works fine except it shows warnings: doveconf: Warning: please set ssl_dh=</etc/dovecot/dh.pem doveconf: Warning: You can generate it with: dd ... I'm using dovecot version 2.3.4.1-1~bpo9+1 from debian stretch-backports -- sergio.

3 5

regarding ssl certificates
by mick crane 15 Mar '19

15 Mar '19

Excuse dopey question. I'm not exactly clear about certificates. Apache2 default install has this snake oil certificate Can make a new one for apache Can make one for dovecot Can make one for ssl Is there supposed to be the one (self signed ) certificate pair in one place for the machine that each process hands out ? Can they be moved to another machine ? mick -- Key ID C7D6E24C

12 16

lua policy for Weakforce and web mail failed login attempts
by Robert Kudyba 15 Mar '19

15 Mar '19

The good news is I believe I got Weakforce running 1) curl -X GET http://127.0.0.1:8084/?command=ping -u wforce:ourpassword {"status":"ok"}[ 2) after running the sample for loop: for a in {1..101}; do curl -X POST -H "Content-Type: application/json" --data '{"login":"ahu", "remote": "127.0.0.1", "pwhash":"1234'$a'", "success":"false"}' http://127.0.0.1:8084/?command=report -u wforce:ourpassword; done The result is: {"status":"ok"}{"status":"ok"}{"status":"ok"}{ 3) So checking the stats: curl -X POST -H "Content-Type: application/json" --data '{"ip":"127.0.0.1"}' http://127.0.0.1:8084/?command=getDBStats -u wforce:ourpassword {"bl_expire": "", "bl_reason": "", "blacklisted": false, "ip": "127.0.0.1", "stats": {"OneHourDB": {"diffFailedPasswords": 93}}} Notice the 93. 4) the reset works but I believe there's a bug in Getdbstats v2.0.0 where "blacklisted" is always shown: curl -X POST -H "Content-Type: application/json" --data '{"ip":"127.0.0.1"}' http://127.0.0.1:8084/?command=getDBStats -u wforce:ourpassword {"bl_expire": "", "bl_reason": "", "blacklisted": false, "ip": "127.0.0.1", "stats": {"OneHourDB": {"diffFailedPasswords": 0}}}[ 5) wforce -c Read configuration from '/usr/local/etc/wforce.conf' Connecting to 127.0.0.1:4004 > stats() 101 reports, 0 allow-queries (0 denies) The 3 big questions I have: a: how do I know IP's are being banned/rejected? Is there an alert creation or a way to see in the logs that the rules are in affect? b: since I installed via Git and ran "make" how to I get wforce --daemon to start on reboot? Is there a systemd file available? c: How do I create a lua policy that would catch these web dovecot login attempts? Feb 27 08:19:53 ourserver auth[15085]: pam_unix(dovecot:auth): check pass; user unknown Feb 27 08:19:53 ourserver auth[15085]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser= user(a)ourserver.ourdomain.edu rhost=177.72.0.158 Feb 27 08:20:35 ourserver auth[15085]: pam_unix(dovecot:auth): check pass; user unknown Feb 27 08:20:35 ourserver auth[15085]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=user rhost=213.156.111.236 Feb 27 08:27:07 ourserver auth[16831]: pam_unix(dovecot:auth): check pass; user unknown Feb 27 08:27:07 ourserver auth[16831]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser= nobody(a)ourserver.ourdomain.edu rhost=79.106.35.59 Feb 27 08:27:27 ourserver auth[16831]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=nobody rhost=95.38.212.65 user=nobody Feb 27 08:27:27 ourserver auth[16831]: pam_succeed_if(dovecot:auth): requirement "uid >= 1000" not met by user "nobody" Feb 27 08:31:12 ourserver auth[17875]: pam_unix(dovecot:auth): check pass; user unknown Feb 27 08:31:12 ourserver auth[17875]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser= ouruser(a)ourserver.ourdomain.edu rhost=80.78.70.1 Feb 27 08:31:33 ourserver auth[17875]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=ouruser rhost=45.225.236.198 user=ouruser Feb 27 09:32:22 ourserver auth[32689]: pam_unix(dovecot:auth): check pass; user unknown Feb 27 09:32:22 ourserver auth[32689]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser= nobody(a)ourserver.ourdomain.edu rhost=37.205.81.41 Feb 27 09:32:42 ourserver auth[32689]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=nobody rhost=201.148.100.198 user=nobody Feb 27 09:32:42 ourserver auth[32689]: pam_succeed_if(dovecot:auth): requirement "uid >= 1000" not met by user "nobody" Feb 27 09:44:09 ourserver auth[3271]: pam_unix(dovecot:auth): check pass; user unknown Feb 27 09:44:09 ourserver auth[3271]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser= otheruser(a)ourserver.ourdomain.edu rhost=177.69.145.193 Feb 27 09:44:35 ourserver auth[3271]: pam_unix(dovecot:auth): check pass; user unknown Feb 27 09:44:35 ourserver auth[3271]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=otheruser rhost=175.143.51.221 Feb 27 09:47:32 ourserver auth[4048]: pam_unix(dovecot:auth): check pass; user unknown Feb 27 09:47:32 ourserver auth[4048]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser= yetanotheruser(a)ourserver.ourdomain.edu rhost=162.245.81.231 Feb 27 09:47:56 ourserver auth[4048]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=yetanotheruser rhost=83.243.88.236 user=yetanotheruser Feb 27 20:44:41 ourserver auth[5828]: pam_unix(dovecot:auth): authentication failure; logname= uid=0 euid=0 tty=dovecot ruser=ouruser rhost=166.171.184.200 user=ouruser

1 0

Re: ACL Folders are open but not being displayed ? [2.3.3]
by Aki Tuomi 15 Mar '19

15 Mar '19

It's a file, `touch subscriptions` Aki On 15.3.2019 11.36, Kunal A. wrote: > Oh okay. How do correct this? Create the file/folder for this? ie > mkdir suscriptions ? > > > On Fri, Mar 15, 2019 at 5:29 AM Aki Tuomi <aki.tuomi(a)open-xchange.com > <mailto:aki.tuomi@open-xchange.com>> wrote: > > Nevertheless, the subscriptions file needs to be there. > > Aki > > On 15.3.201911.28, Kunal A. wrote: >> Dear Aki, >> Got it corrected. Many thanks for pointing it out. There is >> another error about suscriptions. I don't have any folder with >> subscriptions. See the error below :- >> >> Mar 15 05:22:10 machine dovecot[4804]: imap(email1(a)example.com >> <mailto:email1@example.com>)<4970><XjWwkh6EBsAAAAAAAAAAAAAAAAAAAAAB>: >> Error: stat(/mnt/computer/Email/fastmail/subscriptions) failed: >> Permission denied >> >> dr-xr-xr-x root root / >> drwxr-xr-x root root mnt >> drwxr-xr-x vmail vmail computer >> drwxrwxr-x vmail vmail Email >> drwxrwxr-x vmail vmail fastmail >> subscriptions - No such file or directory >> >> Best Regards >> >> >> On Fri, Mar 15, 2019 at 3:02 AM Aki Tuomi >> <aki.tuomi(a)open-xchange.com <mailto:aki.tuomi@open-xchange.com>> >> wrote: >> >> >> On 15.3.2019 8.40, Kunal A. via dovecot wrote: >>> Hey, >>> Could someone help figure out whats wrong with my config >>> based on the debug below? >>> >>> What I am trying to achieve is to get email1(a)example.com >>> <mailto:email1@example.com> to read emails in the Public >>> directory that is stored on >>> /run/media/computer/Storage/Email/fastmail/Archive with the >>> preface Public/Archive . >>> >>> The ACL has been set for anyone with permissions to >>> lookup,read,write as shown below:- >>> >>> doveadm acl get -u email1(a)example.com >>> <mailto:email1@example.com> Public/Archive >>> ID Global >>> Rights >>> anyone lookup read write >>> >>> But when I try to access the emails for email1(a)example.com >>> <mailto:email1@example.com> , there are no folders. >>> Could someone here help review my debug log and advise what >>> could be causing this (dovecot -n output is provided below >>> the debug message) >>> >>> Many thanks for assistance. >>> Thanks >>> >> >>> Mar 15 01:29:28 machine dovecot[2100]: >>> imap(email1(a)example.com >>> <mailto:email1@example.com>)<5167><i8fdSBuE8uMAAAAAAAAAAAAAAAAAAAAB>: >>> Error: >>> open(/run/media/computer/Storage/Email/fastmail/dovecot-acl-list) >>> failed: Permission denied >> >>> Mar 15 01:29:28 machine dovecot[2100]: >>> imap(email1(a)example.com >>> <mailto:email1@example.com>)<5167><i8fdSBuE8uMAAAAAAAAAAAAAAAAAAAAB>: >>> Error: stat(/run/media/computer/Storage/Email/fastmail) >>> failed: Permission denied (euid=5000(vmail) egid=5000(vmail) >>> missing +w perm: /run/media/computer/Storage/Email/fastmail >>> stat(/run/media/computer/Storage/Email/fastmail) failed: >>> Permission denied, dir owned by 0:0 mode=0775) >> >>> Mar 15 01:29:28 machine dovecot[2100]: >>> imap(email1(a)example.com >>> <mailto:email1@example.com>)<5167><i8fdSBuE8uMAAAAAAAAAAAAAAAAAAAAB>: >>> Error: >>> stat(/run/media/computer/Storage/Email/fastmail/.temp.e480machine.5167.a6506e27bd37a68a) >>> failed: Permission denied >> >>> Mar 15 01:30:14 machine dovecot[2100]: >>> imap(email1(a)example.com >>> <mailto:email1@example.com>)<5167><i8fdSBuE8uMAAAAAAAAAAAAAAAAAAAAB>: >>> Error: mkdir(/run/media/computer/Storage/Email/fastmail) >>> failed: Permission denied (euid=5000(vmail) egid=5000(vmail) >>> missing +w perm: /run/media/computer, we're not in group >>> 0(root), dir owned by 0:0 mode=0775) >>> >> >> Maybe try fix these? >> >> >> Aki >>

2 1

Double quota calulation when special folder is present
by Bernd Wurst 15 Mar '19

15 Mar '19

Hello, we're operating dovecot on a small server. Some years ago, we migrated from courier IMAP to dovecot. Therefore, we defined our default Namespace "inbox" with prefix "INBOX." to have this compatible. I found this in some migration docs those days. Generally, everything worked as expected. Our only namespace is configured like this: namespace inbox { separator = . prefix = INBOX. inbox = yes } Regularly, there is no folder named INBOX or .INBOX in the file system, I suppose this is correct. But I found a special corner case today when it comes to quota calculation. When - for whatever reason - a folder .INBOX.foo (for arbitrary values of foo) exists, the whole mailbox is counted twice in quota recalculation. Just creating .INBOX does nothing but a subfolder triggers the problem. This is my shell view (replaced username and file path and deleted unnecessary debug output) $ cat maildirsize 268435456S 14697 17 $ maildirmake .INBOX.foo $ sudo doveadm -D quota recalc -u <user> [...] doveadm(<user>): Debug: Namespace inbox: type=private, prefix=INBOX., sep=., inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:/home/.../test doveadm(<user>): Debug: maildir++: root=/home/.../test, index=, indexpvt=, control=, inbox=/home/.../test, alt= doveadm(<user>): Debug: Namespace : type=private, prefix=, sep=, inbox=no, hidden=yes, list=no, subscriptions=no location=fail::LAYOUT=none doveadm(<user>): Debug: none: root=, index=, indexpvt=, control=, inbox=, alt= doveadm(<user>): Debug: quota: quota_over_flag check: quota_over_script unset - skipping doveadm(<user>): Debug: Quota root User quota: Recalculated relative rules with bytes=268435456 count=0. Now grace=26843545 doveadm(<user>): Debug: Namespace INBOX.: Using permissions from /home/.../test: mode=0700 gid=default $ cat maildirsize 268435456S 29394 34 So the used quota has exactly been doubled by just creating an empty subfolder. Do you have any pointers for fixing my configuration or is this a bug in dovecot? regards, Bernd

2 1

Upgrading to 2.3
by ＠lbutlr 15 Mar '19

15 Mar '19

I haven't upgraded to dovecot 2.3 yet, but am looking into doing it. I thought there was a link to some of the issues and changes you needed to make to your configuration to go from 2.2 to 2.3, but now I cannot find it. -- Science is the foot that kicks magic square in the nuts.

4 4

Re: ACL Folders are open but not being displayed ? [2.3.3]
by Aki Tuomi 15 Mar '19

15 Mar '19

Nevertheless, the subscriptions file needs to be there. Aki On 15.3.201911.28, Kunal A. wrote: > Dear Aki, > Got it corrected. Many thanks for pointing it out. There is another > error about suscriptions. I don't have any folder with subscriptions. > See the error below :- > > Mar 15 05:22:10 machine dovecot[4804]: imap(email1(a)example.com > <mailto:email1@example.com>)<4970><XjWwkh6EBsAAAAAAAAAAAAAAAAAAAAAB>: > Error: stat(/mnt/computer/Email/fastmail/subscriptions) failed: > Permission denied > > dr-xr-xr-x root root / > drwxr-xr-x root root mnt > drwxr-xr-x vmail vmail computer > drwxrwxr-x vmail vmail Email > drwxrwxr-x vmail vmail fastmail > subscriptions - No such file or directory > > Best Regards > > > On Fri, Mar 15, 2019 at 3:02 AM Aki Tuomi <aki.tuomi(a)open-xchange.com > <mailto:aki.tuomi@open-xchange.com>> wrote: > > > On 15.3.2019 8.40, Kunal A. via dovecot wrote: >> Hey, >> Could someone help figure out whats wrong with my config based on >> the debug below? >> >> What I am trying to achieve is to get email1(a)example.com >> <mailto:email1@example.com> to read emails in the Public >> directory that is stored on >> /run/media/computer/Storage/Email/fastmail/Archive with the >> preface Public/Archive . >> >> The ACL has been set for anyone with permissions to >> lookup,read,write as shown below:- >> >> doveadm acl get -u email1(a)example.com <mailto:email1@example.com> >> Public/Archive >> ID Global Rights >> anyone lookup read write >> >> But when I try to access the emails for email1(a)example.com >> <mailto:email1@example.com> , there are no folders. >> Could someone here help review my debug log and advise what could >> be causing this (dovecot -n output is provided below the debug >> message) >> >> Many thanks for assistance. >> Thanks >> > >> Mar 15 01:29:28 machine dovecot[2100]: imap(email1(a)example.com >> <mailto:email1@example.com>)<5167><i8fdSBuE8uMAAAAAAAAAAAAAAAAAAAAB>: >> Error: >> open(/run/media/computer/Storage/Email/fastmail/dovecot-acl-list) >> failed: Permission denied > >> Mar 15 01:29:28 machine dovecot[2100]: imap(email1(a)example.com >> <mailto:email1@example.com>)<5167><i8fdSBuE8uMAAAAAAAAAAAAAAAAAAAAB>: >> Error: stat(/run/media/computer/Storage/Email/fastmail) failed: >> Permission denied (euid=5000(vmail) egid=5000(vmail) missing +w >> perm: /run/media/computer/Storage/Email/fastmail >> stat(/run/media/computer/Storage/Email/fastmail) failed: >> Permission denied, dir owned by 0:0 mode=0775) > >> Mar 15 01:29:28 machine dovecot[2100]: imap(email1(a)example.com >> <mailto:email1@example.com>)<5167><i8fdSBuE8uMAAAAAAAAAAAAAAAAAAAAB>: >> Error: >> stat(/run/media/computer/Storage/Email/fastmail/.temp.e480machine.5167.a6506e27bd37a68a) >> failed: Permission denied > >> Mar 15 01:30:14 machine dovecot[2100]: imap(email1(a)example.com >> <mailto:email1@example.com>)<5167><i8fdSBuE8uMAAAAAAAAAAAAAAAAAAAAB>: >> Error: mkdir(/run/media/computer/Storage/Email/fastmail) failed: >> Permission denied (euid=5000(vmail) egid=5000(vmail) missing +w >> perm: /run/media/computer, we're not in group 0(root), dir owned >> by 0:0 mode=0775) >> > > Maybe try fix these? > > > Aki >

1 0

ACL Folders are open but not being displayed ? [2.3.3]
by Kunal A. 15 Mar '19

15 Mar '19

Hey, Could someone help figure out whats wrong with my config based on the debug below? What I am trying to achieve is to get email1(a)example.com to read emails in the Public directory that is stored on /run/media/computer/Storage/Email/fastmail/Archive with the preface Public/Archive . The ACL has been set for anyone with permissions to lookup,read,write as shown below:- doveadm acl get -u email1(a)example.com Public/Archive ID Global Rights anyone lookup read write But when I try to access the emails for email1(a)example.com , there are no folders. Could someone here help review my debug log and advise what could be causing this (dovecot -n output is provided below the debug message) Many thanks for assistance. Thanks Debug Message: Mar 15 01:26:47 machine dovecot[2100]: imap-login: Login: user=< email1(a)example.com>, method=PLAIN, rip=::1, lip=::1, mpid=5167, secured, session=<i8fdSBuE8uMAAAAAAAAAAAAAAAAAAAAB> Mar 15 01:26:47 machine dovecot[2100]: imap(email1(a)example.com)<5167><i8fdSBuE8uMAAAAAAAAAAAAAAAAAAAAB>: Debug: Loading modules from directory: /usr/lib64/dovecot Mar 15 01:26:47 machine dovecot[2100]: imap(email1(a)example.com)<5167><i8fdSBuE8uMAAAAAAAAAAAAAAAAAAAAB>: Debug: Module loaded: /usr/lib64/dovecot/lib01_acl_plugin.so Mar 15 01:26:47 machine dovecot[2100]: imap(email1(a)example.com)<5167><i8fdSBuE8uMAAAAAAAAAAAAAAAAAAAAB>: Debug: Module loaded: /usr/lib64/dovecot/lib02_imap_acl_plugin.so Mar 15 01:26:47 machine dovecot[2100]: imap(email1(a)example.com)<5167><i8fdSBuE8uMAAAAAAAAAAAAAAAAAAAAB>: Debug: Module loaded: /usr/lib64/dovecot/lib10_quota_plugin.so Mar 15 01:26:47 machine dovecot[2100]: imap(email1(a)example.com)<5167><i8fdSBuE8uMAAAAAAAAAAAAAAAAAAAAB>: Debug: Module loaded: /usr/lib64/dovecot/lib11_imap_quota_plugin.so Mar 15 01:26:47 machine dovecot[2100]: imap(email1(a)example.com)<5167><i8fdSBuE8uMAAAAAAAAAAAAAAAAAAAAB>: Debug: Effective uid=5000, gid=5000, home=/var/mail/vhosts/ example.com/email1 Mar 15 01:26:47 machine dovecot[2100]: imap(email1(a)example.com)<5167><i8fdSBuE8uMAAAAAAAAAAAAAAAAAAAAB>: Debug: quota: No quota setting - plugin disabled Mar 15 01:26:47 machine dovecot[2100]: imap(email1(a)example.com)<5167><i8fdSBuE8uMAAAAAAAAAAAAAAAAAAAAB>: Debug: Namespace inbox: type=private, prefix=INBOX/, sep=/, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:~/Maildir Mar 15 01:26:47 machine dovecot[2100]: imap(email1(a)example.com)<5167><i8fdSBuE8uMAAAAAAAAAAAAAAAAAAAAB>: Debug: maildir++: root=/var/mail/vhosts/example.com/email1/Maildir, index=, indexpvt=, control=, inbox=/var/mail/vhosts/example.com/email1/Maildir, alt= Mar 15 01:26:47 machine dovecot[2100]: imap(email1(a)example.com)<5167><i8fdSBuE8uMAAAAAAAAAAAAAAAAAAAAB>: Debug: acl: initializing backend with data: vfile Mar 15 01:26:47 machine dovecot[2100]: imap(email1(a)example.com)<5167><i8fdSBuE8uMAAAAAAAAAAAAAAAAAAAAB>: Debug: acl: acl username = email1(a)example.com Mar 15 01:26:47 machine dovecot[2100]: imap(email1(a)example.com)<5167><i8fdSBuE8uMAAAAAAAAAAAAAAAAAAAAB>: Debug: acl: owner = 1 Mar 15 01:26:47 machine dovecot[2100]: imap(email1(a)example.com)<5167><i8fdSBuE8uMAAAAAAAAAAAAAAAAAAAAB>: Debug: acl vfile: Global ACLs disabled Mar 15 01:26:47 machine dovecot[2100]: imap(email1(a)example.com)<5167><i8fdSBuE8uMAAAAAAAAAAAAAAAAAAAAB>: Debug: Namespace : type=public, prefix=Public/, sep=/, inbox=no, hidden=no, list=children, subscriptions=yes location=maildir:/run/media/computer/Storage/Email/fastmail:LAYOUT=fs Mar 15 01:26:47 machine dovecot[2100]: imap(email1(a)example.com)<5167><i8fdSBuE8uMAAAAAAAAAAAAAAAAAAAAB>: Debug: fs: root=/run/media/computer/Storage/Email/fastmail, index=, indexpvt=, control=, inbox=, alt= Mar 15 01:26:47 machine dovecot[2100]: imap(email1(a)example.com)<5167><i8fdSBuE8uMAAAAAAAAAAAAAAAAAAAAB>: Debug: acl: initializing backend with data: vfile Mar 15 01:26:47 machine dovecot[2100]: imap(email1(a)example.com)<5167><i8fdSBuE8uMAAAAAAAAAAAAAAAAAAAAB>: Debug: acl: acl username = email1(a)example.com Mar 15 01:26:47 machine dovecot[2100]: imap(email1(a)example.com)<5167><i8fdSBuE8uMAAAAAAAAAAAAAAAAAAAAB>: Debug: acl: owner = 0 Mar 15 01:26:47 machine dovecot[2100]: imap(email1(a)example.com)<5167><i8fdSBuE8uMAAAAAAAAAAAAAAAAAAAAB>: Debug: acl vfile: Global ACLs disabled Mar 15 01:26:47 machine dovecot[2100]: imap(email1(a)example.com)<5167><i8fdSBuE8uMAAAAAAAAAAAAAAAAAAAAB>: Debug: Namespace : type=private, prefix=, sep=, inbox=no, hidden=yes, list=no, subscriptions=no location=fail::LAYOUT=none Mar 15 01:26:47 machine dovecot[2100]: imap(email1(a)example.com)<5167><i8fdSBuE8uMAAAAAAAAAAAAAAAAAAAAB>: Debug: none: root=, index=, indexpvt=, control=, inbox=, alt= Mar 15 01:28:37 machine dovecot[2100]: imap(email1(a)example.com)<5167><i8fdSBuE8uMAAAAAAAAAAAAAAAAAAAAB>: Debug: Mailbox INBOX: Mailbox opened because: SELECT Mar 15 01:28:37 machine dovecot[2100]: imap(email1(a)example.com)<5167><i8fdSBuE8uMAAAAAAAAAAAAAAAAAAAAB>: Debug: acl vfile: file /var/mail/vhosts/ example.com/email1/Maildir/dovecot-acl not found Mar 15 01:29:28 machine dovecot[2100]: imap(email1(a)example.com)<5167><i8fdSBuE8uMAAAAAAAAAAAAAAAAAAAAB>: Debug: Mailbox Public/Archive: Mailbox opened because: SELECT Mar 15 01:29:28 machine dovecot[2100]: imap(email1(a)example.com)<5167><i8fdSBuE8uMAAAAAAAAAAAAAAAAAAAAB>: Debug: acl vfile: no access to file /run/media/computer/Storage/Email/fastmail/Archive/dovecot-acl Mar 15 01:29:28 machine dovecot[2100]: imap(email1(a)example.com)<5167><i8fdSBuE8uMAAAAAAAAAAAAAAAAAAAAB>: Error: open(/run/media/computer/Storage/Email/fastmail/dovecot-acl-list) failed: Permission denied Mar 15 01:29:28 machine dovecot[2100]: imap(email1(a)example.com)<5167><i8fdSBuE8uMAAAAAAAAAAAAAAAAAAAAB>: Error: stat(/run/media/computer/Storage/Email/fastmail) failed: Permission denied (euid=5000(vmail) egid=5000(vmail) missing +w perm: /run/media/computer/Storage/Email/fastmail stat(/run/media/computer/Storage/Email/fastmail) failed: Permission denied, dir owned by 0:0 mode=0775) Mar 15 01:29:28 machine dovecot[2100]: imap(email1(a)example.com)<5167><i8fdSBuE8uMAAAAAAAAAAAAAAAAAAAAB>: Debug: Namespace Public/: Using permissions from /run/media/computer/Storage/Email/fastmail: mode=0700 gid=default Mar 15 01:29:28 machine dovecot[2100]: imap(email1(a)example.com)<5167><i8fdSBuE8uMAAAAAAAAAAAAAAAAAAAAB>: Error: stat(/run/media/computer/Storage/Email/fastmail/.temp.e480machine.5167.a6506e27bd37a68a) failed: Permission denied Mar 15 01:29:35 machine dovecot[2100]: imap(email1(a)example.com)<5167><i8fdSBuE8uMAAAAAAAAAAAAAAAAAAAAB>: Debug: Mailbox INBOX/Public/Archive: Mailbox opened because: SELECT Mar 15 01:29:35 machine dovecot[2100]: imap(email1(a)example.com)<5167><i8fdSBuE8uMAAAAAAAAAAAAAAAAAAAAB>: Debug: acl vfile: file /var/mail/vhosts/ example.com/email1/Maildir/.Public.Archive/dovecot-acl not found Mar 15 01:30:14 machine dovecot[2100]: imap(email1(a)example.com)<5167><i8fdSBuE8uMAAAAAAAAAAAAAAAAAAAAB>: Debug: acl vfile: file /var/mail/vhosts/ example.com/email1/Maildir/.Trash/dovecot-acl not found Mar 15 01:30:14 machine dovecot[2100]: imap(email1(a)example.com)<5167><i8fdSBuE8uMAAAAAAAAAAAAAAAAAAAAB>: Error: mkdir(/run/media/computer/Storage/Email/fastmail) failed: Permission denied (euid=5000(vmail) egid=5000(vmail) missing +w perm: /run/media/computer, we're not in group 0(root), dir owned by 0:0 mode=0775) Mar 15 02:00:14 machine dovecot[2100]: imap(email1(a)example.com)<5167><i8fdSBuE8uMAAAAAAAAAAAAAAAAAAAAB>: Disconnected for inactivity in=155 out=1494 deleted=0 expunged=0 trashed=0 hdr_count=0 hdr_bytes=0 body_count=0 body_bytes=0 dovecot -n Output : # 2.3.3 (dcead646b): /etc/dovecot/dovecot.conf # OS: Linux 4.20.14-200.fc29.x86_64 x86_64 Fedora release 29 (Twenty Nine) # Hostname: machine auth_mechanisms = plain login mail_debug = yes mail_gid = vmail mail_location = maildir:~/Maildir mail_plugins = acl quota mail_privileged_group = mail mail_uid = vmail mbox_write_locks = fcntl namespace { list = children location = maildir:/run/media/computer/Storage/Email/fastmail:LAYOUT=fs prefix = Public/ separator = / subscriptions = yes type = public } namespace inbox { inbox = yes list = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = INBOX/ separator = / } passdb { driver = pam } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { acl = vfile acl_shared_dict = file:/var/mail/vhosts/example.com/Sharedbox } postmaster_address = postmaster at example.com protocols = imap pop3 service auth-worker { user = vmail } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-userdb { mode = 0600 user = vmail } user = dovecot } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } service pop3-login { inet_listener pop3 { port = 0 } inet_listener pop3s { port = 995 ssl = yes } } ssl = required ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_cipher_list = PROFILE=SYSTEM ssl_key = # hidden, use -P to show it userdb { driver = passwd } userdb { args = uid=vmail gid=vmail home=/var/mail/vhosts/%d/%n driver = static } protocol lmtp { mail_plugins = quota acl sieve quota } protocol lda { mail_plugins = quota acl sieve } protocol imap { mail_plugins = acl quota imap_acl quota acl imap_quota }

2 1

dovecot.conf "local hostname" uses only one resolved value
by James 14 Mar '19

14 Mar '19

https://wiki.dovecot.org/SSL/DovecotConfiguration#Different_certificates_pe… says: local 192.0.2.10 { # instead of IP you can also use hostname, which will be resolved However if the name resolves to multiple values only one is used. Test. Choose any name with multiple values, I created a local name: $ nslookup multi.lan Server: 127.0.0.1 Address: 127.0.0.1#53 Name: multi.lan Address: 192.168.1.2 Name: multi.lan Address: 192.168.1.3 Name: multi.lan Address: 192.168.1.1 Minimal dovecot.conf: local multi.lan { protocol imap { ssl_cert = </path/to/certs/multi.lan.crt ssl_key = </path/to/certs/multi.lan.key } } $ dovecot -n -c dovecot.conf # 2.3.5 (513208660): dovecot.conf ... local 192.168.1.2 { protocol imap { ssl_cert = </path/to/certs/multi.crt ssl_key = # hidden, use -P to show it } } Only 192.168.1.2 appears. In my real case with A and AAAA records, only the AAAA record is used. Testing with "openssl s_client -starttls imap ..." gives me the wrong certificate for the IPv4 address. Workaround: specify all addresses and do not use lookup. James.

1 0

dovecot/config processes one more time - which are safe to kill?
by Arkadiusz Miśkiewicz 14 Mar '19

14 Mar '19

Hello. The problem with dovecot/config processes never ending and spawning new one on each reload (https://www.dovecot.org/list/dovecot/2016-November/106058.html) is becoming a problem here: # ps aux|grep dovecot/config|wc -l 206 That's a lot of wasted memory - dovecot/config processes ate over 30GB of ram on 64GB box. Before killing dovecot/config processes: # free -m total used free shared buff/cache available Mem: 64437 61656 483 0 2297 after: # free -m total used free shared buff/cache available Mem: 64437 23676 37822 0 2939 Currently on dovecot 2.3.3. I guess it's very low priority to handle that, so: how can I figure out which dovecot/config processes are safe to be killed by external script? Does "all beside 2 newest ones" rule look sane? Thanks, -- Arkadiusz Miśkiewicz, arekm / ( maven.pl | pld-linux.org )

3 5

Quota questions
by Peter Hudec 14 Mar '19

14 Mar '19

Hi all, I’m a little bit confused about the quota plugin in dovecot and fighting the the issues the people had years ago. I spent readingg the old archives and the mailing list for 3 days and not able to get work some features. Single user quota is fine and simple, the group quota /for example domain based/ makes me unhappy. Setup: CentOS7, dovecot comunity repo, dovecot 2.3.5 1) domain quota recalc domain quota recalc do not work properly. The domain qouta usage is worknig well, hwhen receiving/deleting mail, generaly if the operations are incremental. But if I run domain quota recalc, the doveadm is setting the domain quota after each user calculation, that means the domain quota is set to the last user. 2) multiple quota roots and rules According the documentation, there could be possible, from the sample configuration file # Multiple quota roots are also possible, for example this gives each user # their own 100MB quota and one shared 1GB quota within the domain plugin { quota = dict:User quota::proxy::quota quota2 = dict:Group quota:%d:proxy::quota_domain quota_rule = *:storage=1024M quota2_rule = *:storage=2048M } But If I run [TEST] root(a)mail-store01.test.host.sk: /etc/dovecot # doveadm quota get -u '*' Username Quota name Type Value Limit % test01(a)test.host.sk User quota STORAGE 1 1024 0 test01(a)test.host.sk User quota MESSAGE 1 - 0 test01(a)test.host.sk Group quota STORAGE 7 - 0 test01(a)test.host.sk Group quota MESSAGE 3 - 0 test03(a)test.host.sk User quota STORAGE 7 1024 0 test03(a)test.host.sk User quota MESSAGE 3 - 0 test03(a)test.host.sk Group quota STORAGE 7 - 0 test03(a)test.host.sk Group quota MESSAGE 3 - 0 The idea is to have overall domain quota, but for user able to set it’s personal quota. regards Peter

2 3

dovecot-keywords are not preserved any more when moving mails between folders
by Piper Andreas 14 Mar '19

14 Mar '19

Hello, after an upgrade of dovecot-2.2.5 to dovecot-2.3.4 the dovecot-keywords, which in my case are set by thunderbird, are not preserved any more when moving a mail between folders. Are there any ideas, what may be the reason. Thanks for any hints on that, Andreas 'doveconf -n' gives: # 2.3.4 (0ecbaf23d): /etc/opt/csw/dovecot/dovecot.conf # Pigeonhole version 0.5.4 (60b0f48d) # OS: SunOS 5.11 i86pc # Hostname: xxxxx.hrz.uni-marburg.de auth_cache_negative_ttl = 0 auth_cache_size = 10 M auth_master_user_separator = * auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_ auth_username_format = %u auth_worker_max_count = 1024 base_dir = /var/run/dovecot/ default_vsz_limit = 1 G first_valid_gid = 30000 first_valid_uid = 30000 imap_max_line_length = 640 k mail_debug = yes mail_location = maildir:%h/.maildir mail_plugins = " mail_log notify" mail_privileged_group = mail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext namespace { hidden = no inbox = yes list = yes location = maildir:%h/.maildir prefix = separator = / subscriptions = yes type = private } namespace inbox { hidden = yes inbox = no list = no location = maildir:%h/.maildir prefix = mail/ separator = / subscriptions = no type = private } passdb { args = /etc/dovecot.deny deny = yes driver = passwd-file } passdb { args = /etc/opt/csw/dovecot/private/passwd.masterusers driver = passwd-file master = yes } passdb { args = /etc/opt/csw/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { sieve = file:~/sieve;active=~/.dovecot.sieve sieve_default = /var/lib/dovecot/default.sieve } pop3_uidl_format = %08Xv%08Xu postmaster_address = postmaster(a)hrz.uni-marburg.de protocols = imap pop3 lmtp sieve service auth-worker { user = $default_internal_user } service auth { client_limit = 6000 } service imap-login { process_min_avail = 64 service_count = 0 } service imap { process_limit = 4096 } service lmtp { inet_listener lmtp { port = 24 } } service managesieve-login { inet_listener sieve { port = 4190 } } ssl_cert = </etc/opt/csw/ssl/certs/imap+pop.hrz.uni-marburg.de.pem ssl_dh = # hidden, use -P to show it ssl_key = # hidden, use -P to show it userdb { args = /etc/opt/csw/dovecot/dovecot-ldap-userdb.conf.ext driver = ldap } protocol imap { mail_max_userip_connections = 25 ssl_cert = </etc/opt/csw/ssl/certs/imap+pop.hrz.uni-marburg.de.pem ssl_key = # hidden, use -P to show it } protocol lmtp { mail_plugins = " mail_log notify sieve" } protocol pop3 { ssl_cert = </etc/opt/csw/ssl/certs/imap+pop.hrz.uni-marburg.de.pem ssl_key = # hidden, use -P to show it }

5 8