- dovecot - dovecot.org

Expunging and deleting old messages - moving from cyrus-imap
by Nick Howitt 07 Nov '24

07 Nov '24

I have just moved from cyrus-imap to dovecot. In cyrus I had an automatic purge of messages marked as deleted with a cron job: /usr/lib/cyrus-imapd/cyr_expire -E 1 -X 7 -D 7 -E = Expire Days -X = Expunge days What is the equivalent in doveadm? doveadm expunge -A DELETED BEFORE 1w Is there any equivalent to expire messages marked as deleted? I can't remember why I have it as I set up Cyrus so long ago. I also delete from deleted (INBOX.trash) anything older than a year. In Cyrus, it is run from an event in the configuration: trashPurge cmd="ipurge -s -X -f -d 365 user/*/Trash" at=0104 I would be happy to run it from cron, so does this work: doveadm expunge -A mailbox INBOX.trash SENTBEFORE 52w Except I get: doveadm(nobody): Error: mkdir(/nonexistent/.Maildir) failed: Permission denied (euid=65534(nobody) egid=65534(nogroup)) I can run it for the individual users but not -A. Nick

4 5

Re: Expunging and deleting old messages - moving from cyrus-imap
by Joseph Tam 07 Nov '24

07 Nov '24

> What is the equivalent in doveadm? > > doveadm expunge -A DELETED BEFORE 1w > > Is there any equivalent to expire messages marked as deleted? I can't > remember why I have it as I set up Cyrus so long ago. If by expire, you mean expunge, this is more or less what I used in a nightly cron script doveadm expunge -A $ mailbox 'Deleted Items' OR mailbox 'Deleted Messages*' OR mailbox Junk OR mailbox Trash OR \( mailbox INBOX Deleted $ \) BEFORE 7d In English, for all users, delete any messages in commonly named trash folders or any messages in INBOX marked as deleted that are older than a week. I recall one quirk: if the mailbox didn't have a cached entry for the message's age, the filter criteria would miss this and it would remain in the mailbox. I'm not sure if this still happens, but I got around this by seeding the cache by doing a doveadm search for that metadata (date.received?). Joseph Tam <jtam.home(a)gmail.com>

3 3

Re: IMAP quota reporting free disk space
by dovecot＠ptld.com 06 Nov '24

06 Nov '24

>> Try moving the quota outside of the protocol block. >> mail_plugins = quota ... >> protocol imap { >> mail_plugins = $mail_plugins imap_quota >> ... >> } >> >> >> Try adding a text label for the client to use. >> plugin { >> quota = maildir:Quota Limit >> ... >> } > > There is a progress, but not complete. > > When I right click at the inbox in Thunderbird and select properties and > quota tab - I get similar information as in case of Gmail account ("Quota / > STORAGE ... used 57% - 57.1 GB / 100 GB") - that information was previously > missing. > > But in case of Gmail inbox I also see a bar on the bottom of the > Thunderbird window displaying 82% (on the main screen, without going into > properties, etc.). In case of my dovecot server that bar is missing. Any > idea what should I change on my server to let MUA display that bar? Gmail advertises QUOTA as an CAPABILITY upon connection before login. Dovecot advertises QUOTA as an CAPABILITY only after login. GPT believes this is why Tbird doesn't show the quota on the status bar, because it's looking for the quota before login and not after. Does anyone know if its possible to get dovecot to advertise QUOTA before login?

1 1

IMAP quota reporting free disk space
by piotr＠connecta.pl 06 Nov '24

06 Nov '24

Hi, Is it possible to make IMAP quota commands report free filesystem space? I don't want to set quota limits to individual users, but it would be nice to have an information on the bottom of Thunderbird window about free disk space (it could be percentage of the total disk size). Anyway I have trouble with quota reporting itself, because I tried to setup a regular quota (100G) first, but somehow Thunderbird doesn't report free quota as it does in case of Gmail accounts. I added to 20-imap.conf: protocol imap { mail_plugins = $mail_plugins quota imap_quota } and to 90-quota.conf: plugin { quota = maildir quota_rule = *:storage=100G } What else should I add to enable reporting? (without warning emails, commands changing quota and all that stuff) P.

2 2

Upgrade Dovecot Cluster 2.2 to 2.3
by Steven Varco 05 Nov '24

05 Nov '24

Hi All I’m planing to upgrade/migrate my dovecot cluster with two dovecot 2.2.36 nodes to 2.3.16. They use Maildir als IMAP backend and will continue to use that in the future. Can I just: - Install a new Server (AlmaLinux 9) - Stop dovecot on the old node-2 - Copy all the data from the old mail directory of node-2 to the new one - Install dovecot 2.3 on the new on with more or less the same config and let it run - Repeat the same with old node-1 ? Or would it be better to start of with an empty mail directory and let the other old node imapsync the data to the new one? - What would the advantage be (over the disadvantage that it may take some time to get everything synced)? I know that Maildir are just static files, so moving them to the new server should not be a problem. I’m thinking more about indexes created by dovecot 2.2.36… Are they read without issues with the newever dovecot 2.3.16 or should I consider a re-index. or something the like? thanks in advance, Steven -- https://steven.varco.ch/ https://www.tech-island.com/

2 1

IRC channel link on the website
by Sebastian Crane 04 Nov '24

04 Nov '24

Dear all, On the Dovecot website, I noticed that the IRC link isn't clickable: https://www.dovecot.org/support/ The Markdown-esque square brackets suggest to me that this should be a hyperlink, but it's just plain text at the moment. The other issue is that there is no hash symbol before the channel name, so even if it were clickable the user's IRC client would start a private message rather than join the channel. Best wishes, Sebastian

2 1

dovecot-lda from www-data - doesnt work
by Sebastian Nielsen 01 Nov '24

01 Nov '24

m trying to deliver email from a webform, but its not working. I then tried manually in the console: WORKS: sudo -u info /usr/lib/dovecot/dovecot-lda -d info DOES NOT WORK: sudo -u www-data /usr/lib/dovecot/dovecot-lda -d info sudo -u postfix /usr/lib/dovecot/dovecot-lda -d info sudo -u dovecot /usr/lib/dovecot/dovecot-lda -d info I need to be able to deliver email from "www-data" to any user on the system (that is a valid dovecot-lda mail user). It seems a security setting blocks it. I have already set authdb to 0777 in dovecot settings (because otherwise it gives an error about lookup rights), and also enabled stats-writer and stats-reader with 0666. so no more error messages in log, but the above commands that does NOT work, terminate immediately, while the working command waits for email from STDIN. No error messages in either log or on STDOUT/STDERR. What can be the problem?

3 7

Namespace configuration
by Scott Q. 31 Oct '24

31 Oct '24

We are having an issue with our namespace configuration, as per the eM Client folks. We present the following namespaces via IMAP, with Dovecot as backend. This is the actual imap conversation 08:37:10.896|03E| 01: A4 ID ("name" "eM Client" "version" "10.1.4393.0" "GUID" "EMCLIENT_V1" "vendor" "eM Client" "contact" "support(a)emclient.com") 08:37:10.961|03E| 01: * ID ("name" "Dovecot") 08:37:10.961|03E| 01: A4 OK ID completed (0.001 + 0.000 secs). 08:37:10.961|03E| 01: A5 NAMESPACE 08:37:11.184|03E| 01: * NAMESPACE (("" ".")("Labels." ".")) (("shared." ".")) NIL 08:37:11.184|03E| 01: A5 OK Namespace completed (0.001 + 0.162 + 0.161 secs). As per them, the problem is the first empty prefix: "The problem is not necessarily in the fact that it is empty but because it is then mixed with another one with a prefix. Logically it means that everything in the empty namespace must be mixed together with the prefixed namespace and that is not really ok." "NAMESPACE (("personal." ".")("Labels." ".")) (("shared." ".")) NIL would make sense as both personal namespaces point to different directory structures." Reading the RFC I'm not understanding this at all, but then again, maybe I'm wrong. Anyone care to shed some light on how multiple namespaces should be defined ? Thank you, Scott

1 0

Crash dovecot-2.3.21.1 on OpenBSD
by Kirill A. Korinsky 31 Oct '24

31 Oct '24

Good day, I just discovered a core file from dovecot's imap. It is running on OpenBSD 7.6 and dovecot is built with https://github.com/dovecot/core/pull/223 Stacktrace: #0 fts_search_merge_scores_or (dest=0x73b552104f38, src=<optimized out>) at fts-search.c:278 src2 = <error reading variable src2 (Cannot access memory at address 0x8)> src_map = 0xc7d7dcb6028 src2_map = 0xc7d6338d5c0 src2i = 3157 srci = 8699 src_count = 6133 src2_count = 5729 #1 fts_search_merge_scores_level (fctx=0xc7df32c4000, args=0xc7dc4e9a110, idx=0x73b552105064, and_args=<optimized out>, scores=0x73b552104f38) at fts-search.c:333 arg_scores = {arr = {buffer = 0xc7e01e35468, element_size = 8}, v = 0xc7e01e35468, v_modifiable = 0xc7e01e35468} level = <optimized out> #2 0x00000c7da13ccabe in fts_search_merge_scores_level (fctx=0xc7df32c4000, args=0xc7dc4e99ca0, idx=0x73b552105064, and_args=<optimized out>, scores=0x73b552104fc8) at fts-search.c:326 arg_scores = {arr = {buffer = 0xc7e01e34860, element_size = 8}, v = 0xc7e01e34860, v_modifiable = 0xc7e01e34860} level = <optimized out> #3 0x00000c7da13ccabe in fts_search_merge_scores_level (fctx=0xc7df32c4000, args=0xc7e24477628, idx=0x73b552105064, and_args=<optimized out>, scores=0xc7daf51ea28) at fts-search.c:326 arg_scores = {arr = {buffer = 0xc7e01e345f8, element_size = 8}, v = 0xc7e01e345f8, v_modifiable = 0xc7e01e345f8} level = <optimized out> #4 0x00000c7da13cbf07 in fts_search_merge_scores (fctx=0xc7df32c4000) at fts-search.c:341 idx = 8 #5 fts_search_try_lookup (fctx=0xc7df32c4000) at fts-search.c:373 last_uid = <optimized out> seq1 = <optimized out> seq2 = 0 #6 fts_search_lookup (fctx=0xc7df32c4000) at fts-search.c:383 reason = <optimized out> #7 0x00000c7da13cefb4 in fts_try_build_init (ctx=0xc7daf52b640, fctx=0xc7df32c4000) at fts-storage.c:147 ret = 8699 #8 fts_mailbox_search_init (t=<optimized out>, args=0xc7dd96dd048, sort_program=<optimized out>, wanted_fields=<optimized out>, wanted_headers=<optimized out>) at fts-storage.c:262 ft = 0xc7df32dec00 fbox = <optimized out> flist = <optimized out> ctx = 0xc7daf52b640 fctx = 0xc7df32c4000 #9 0x00000c7b3879aef3 in imap_search_start (ctx=0xc7df32dfbc8, sargs=0xc7dd96dd048, sort_program=0x0) at imap-search.c:537 cmd = 0xc7df32df848 #10 0x00000c7b38789e6e in cmd_search (cmd=0xc7df32df848) at cmd-search.c:48 args = <optimized out> ctx = 0xc7df32dfbc8 ret = 8699 charset = <optimized out> sargs = 0x0 #11 0x00000c7b38792db3 in command_exec (cmd=0xc7df32df848) at imap-commands.c:201 hook = <optimized out> finished = <optimized out> #12 0x00000c7b387915d8 in client_command_input (cmd=0xc7df32df848) at imap-client.c:1237 client = 0xc7df32bc048 command = <optimized out> tag = <optimized out> ret = <optimized out> name = <optimized out> #13 0x00000c7b38791749 in client_command_input (cmd=0xc7df32df848) at imap-client.c:1305 client = 0xc7df32bc048 command = <optimized out> tag = <optimized out> ret = <optimized out> name = <optimized out> #14 0x00000c7b38791749 in client_command_input (cmd=0xc7df32df848) at imap-client.c:1305 client = 0xc7df32bc048 command = <optimized out> tag = <optimized out> ret = <optimized out> name = <optimized out> #15 0x00000c7b3878ff68 in client_handle_next_command (client=0xc7df32bc048, remove_io_r=<optimized out>) at imap-client.c:1348 No locals. #16 client_handle_input (client=0xc7df32bc048) at imap-client.c:1363 _data_stack_cur_id = <optimized out> handled_commands = <optimized out> ret = <optimized out> remove_io = <optimized out> #17 0x00000c7b3878e569 in client_input (client=0xc7df32bc048) at imap-client.c:1407 output = 0xc7daf5003a0 bytes = 251 cmd = <optimized out> #18 0x00000c7dc9c7ff3f in io_loop_call_io (io=0xc7daf515240) at ioloop.c:737 ioloop = 0xc7daf520460 t_id = 8699 #19 0x00000c7dc9c830a4 in io_loop_handler_run_internal (ioloop=0xc7daf520460) at ioloop-kqueue.c:164 tv = {tv_sec = 4, tv_usec = 790941} ts = {tv_sec = 4, tv_nsec = 790941000} ctx = 0xc7daf503520 msecs = <optimized out> events = <optimized out> events_count = <optimized out> ret = <optimized out> i = 0 io = 0xc7daf515240 event = <optimized out> #20 0x00000c7dc9c806a0 in io_loop_handler_run (ioloop=0xc7daf520460) at ioloop.c:789 No locals. #21 0x00000c7dc9c804a8 in io_loop_run (ioloop=0xc7daf520460) at ioloop.c:762 No locals. #22 0x00000c7dc9bd56b9 in master_service_run (service=0xc7daf52b500, callback=0x0) at master-service.c:878 No locals. #23 0x00000c7b387a19d0 in main (argc=1, argv=<optimized out>) at main.c:575 set_roots = {0xc7dc9ccd480 <smtp_submit_setting_parser_info>, 0xc7b387af1b0 <imap_setting_parser_info>, 0x0} login_set = {auth_socket_path = 0xc7e01e2f550 "\004", postlogin_socket_path = 0x0, postlogin_timeout_secs = 60, callback = 0xc7b387a1bc0 <login_client_connected>, failure_callback = 0xc7b387a1f40 <login_client_failed>, update_proctitle = false, request_auth_token = true} service_flags = <optimized out> storage_service_flags = <optimized out> username = <optimized out> auth_socket_path = <optimized out> c = <optimized out> error = 0xc7e056c4af0 <_dl_dtors> "\363\017\036\372UH\211\345\350s\030" config: # 2.3.21.1 (d492236fa0): /etc/dovecot/dovecot.conf # Pigeonhole version 0.5.21.1 (49005e73) # OS: OpenBSD 7.6 amd64 # Hostname: mx1.catap.net # NOTE: Send doveconf -n output instead when asking for help. auth_anonymous_username = anonymous auth_cache_negative_ttl = 1 hours auth_cache_size = 0 auth_cache_ttl = 1 hours auth_cache_verify_password_with_worker = no auth_debug = no auth_debug_passwords = no auth_default_realm = auth_failure_delay = 2 secs auth_gssapi_hostname = auth_krb5_keytab = auth_master_user_separator = auth_mechanisms = plain auth_policy_check_after_auth = yes auth_policy_check_before_auth = yes auth_policy_hash_mech = sha256 auth_policy_hash_nonce = auth_policy_hash_truncate = 12 auth_policy_log_only = no auth_policy_reject_on_fail = no auth_policy_report_after_auth = yes auth_policy_request_attributes = login=%{requested_username} pwhash=%{hashed_password} remote=%{rip} device_id=%{client_id} protocol=%s session_id=%{session} auth_policy_server_api_header = auth_policy_server_timeout_msecs = 2000 auth_policy_server_url = auth_proxy_self = auth_realms = auth_socket_path = auth-userdb auth_ssl_require_client_cert = no auth_ssl_username_from_cert = no auth_stats = no auth_use_winbind = no auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@ auth_username_format = %Lu auth_username_translation = auth_verbose = no auth_verbose_passwords = no auth_winbind_helper_path = /usr/bin/ntlm_auth auth_worker_max_count = 30 base_dir = /var/dovecot config_cache_size = 1 M debug_log_path = default_client_limit = 1000 default_idle_kill = 1 mins default_internal_group = _dovecot default_internal_user = _dovecot default_login_user = _dovenull default_process_limit = 100 default_vsz_limit = 10 G deliver_log_format = msgid=%m: %$ dict_db_config = director_flush_socket = director_mail_servers = director_max_parallel_kicks = 100 director_max_parallel_moves = 100 director_output_buffer_size = 10 M director_ping_idle_timeout = 30 secs director_ping_max_timeout = 1 mins director_servers = director_user_expire = 15 mins director_user_kick_delay = 2 secs director_username_hash = %Lu disable_plaintext_auth = yes dotlock_use_excl = yes doveadm_allowed_commands = doveadm_api_key = doveadm_http_rawlog_dir = doveadm_password = # hidden, use -P to show it doveadm_port = 12345 doveadm_socket_path = doveadm-server doveadm_ssl = no doveadm_username = doveadm doveadm_worker_count = 0 dsync_alt_char = _ dsync_commit_msgs_interval = 100 dsync_features = dsync_hashed_headers = Date Message-ID dsync_remote_cmd = ssh -l%{login} %{host} doveadm dsync-server -u%u -U first_valid_gid = 1 first_valid_uid = 1000 haproxy_timeout = 3 secs haproxy_trusted_networks = hostname = imap_capability = imap_client_workarounds = imap_fetch_failure = disconnect-immediately imap_hibernate_timeout = 0 imap_id_log = imap_id_retain = no imap_id_send = name * imap_idle_notify_interval = 2 mins imap_literal_minus = no imap_logout_format = in=%i out=%o deleted=%{deleted} expunged=%{expunged} trashed=%{trashed} hdr_count=%{fetch_hdr_count} hdr_bytes=%{fetch_hdr_bytes} body_count=%{fetch_body_count} body_bytes=%{fetch_body_bytes} imap_max_line_length = 64 k imap_metadata = no imap_urlauth_host = imap_urlauth_logout_format = in=%i out=%o imap_urlauth_port = 143 imapc_cmd_timeout = 5 mins imapc_connection_retry_count = 1 imapc_connection_retry_interval = 1 secs imapc_features = imapc_host = imapc_list_prefix = imapc_master_user = imapc_max_idle_time = 29 mins imapc_max_line_length = 0 imapc_password = imapc_port = 143 imapc_rawlog_dir = imapc_sasl_mechanisms = imapc_ssl = no imapc_ssl_verify = yes imapc_user = import_environment = TZ CORE_OUTOFMEM CORE_ERROR info_log_path = instance_name = dovecot last_valid_gid = 0 last_valid_uid = 0 lda_mailbox_autocreate = no lda_mailbox_autosubscribe = no lda_original_recipient_header = libexec_dir = /usr/local/libexec/dovecot listen = *, :: lmtp_add_received_header = no lmtp_client_workarounds = lmtp_hdr_delivery_address = final lmtp_proxy = no lmtp_proxy_rawlog_dir = lmtp_rawlog_dir = lmtp_rcpt_check_quota = no lmtp_save_to_detail_mailbox = no lmtp_user_concurrency_limit = 0 lmtp_verbose_replies = no lock_method = fcntl log_core_filter = log_debug = log_path = syslog log_timestamp = "%b %d %H:%M:%S " login_access_sockets = login_greeting = Dovecot ready. login_log_format = %$: %s login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c session=<%{session}> login_plugin_dir = /usr/local/lib/dovecot/login login_plugins = login_proxy_max_disconnect_delay = 0 login_proxy_max_reconnects = 3 login_proxy_notify_path = proxy-notify login_proxy_rawlog_dir = login_proxy_timeout = 30 secs login_source_ips = login_trusted_networks = mail_access_groups = mail_always_cache_fields = mail_attachment_detection_options = mail_attachment_dir = mail_attachment_fs = sis posix mail_attachment_hash = %{sha1} mail_attachment_min_size = 128 k mail_attribute_dict = file:%h/Maildir/dovecot-attributes mail_cache_fields = flags mail_chroot = mail_debug = no mail_fsync = optimized mail_full_filesystem_access = no mail_gid = vmail mail_home = mail_location = maildir:~/Maildir mail_log_prefix = "%s(%u)<%{pid}><%{session}>: " mail_max_keyword_length = 50 mail_max_lock_timeout = 0 mail_max_userip_connections = 10 mail_never_cache_fields = imap.envelope mail_nfs_index = no mail_nfs_storage = no mail_plugin_dir = /usr/local/lib/dovecot mail_plugins = notify fts fts_flatcurve replication virtual mail_prefetch_count = 0 mail_privileged_group = mail_save_crlf = no mail_server_admin = mail_server_comment = mail_shared_explicit_inbox = no mail_sort_max_read_count = 0 mail_temp_dir = /tmp mail_temp_scan_interval = 1 weeks mail_uid = vmail mail_vsize_bg_after_count = 0 mailbox_idle_check_interval = 30 secs mailbox_list_index = yes mailbox_list_index_include_inbox = no mailbox_list_index_very_dirty_syncs = no maildir_broken_filename_sizes = no maildir_copy_with_hardlinks = yes maildir_empty_new = no maildir_stat_dirs = no maildir_very_dirty_syncs = no managesieve_client_workarounds = managesieve_implementation_string = Dovecot Pigeonhole managesieve_logout_format = bytes=%i/%o managesieve_max_compile_errors = 5 managesieve_max_line_length = 64 k managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext mbox_dirty_syncs = yes mbox_dotlock_change_timeout = 2 mins mbox_lazy_writes = yes mbox_lock_timeout = 5 mins mbox_md5 = apop3d mbox_min_index_size = 0 mbox_read_locks = fcntl mbox_very_dirty_syncs = no mbox_write_locks = fcntl mdbox_preallocate_space = no mdbox_rotate_interval = 0 mdbox_rotate_size = 10 M mmap_disable = yes namespace inbox { disabled = no hidden = no ignore_on_failure = no inbox = yes list = yes location = mailbox Archive { auto = subscribe autoexpunge = 0 autoexpunge_max_mails = 0 comment = driver = special_use = \Archive } mailbox Drafts { auto = subscribe autoexpunge = 0 autoexpunge_max_mails = 0 comment = driver = special_use = \Drafts } mailbox Junk { auto = subscribe autoexpunge = 60 days autoexpunge_max_mails = 0 comment = driver = special_use = \Junk } mailbox Sent { auto = subscribe autoexpunge = 0 autoexpunge_max_mails = 0 comment = driver = special_use = \Sent } mailbox Trash { auto = subscribe autoexpunge = 60 days autoexpunge_max_mails = 0 comment = driver = special_use = \Trash } order = 0 prefix = separator = . subscriptions = yes type = private } namespace virtual { disabled = no hidden = no ignore_on_failure = no inbox = no list = yes location = virtual:/etc/dovecot/virtual:INDEX=~/virtual mailbox All { auto = no autoexpunge = 0 autoexpunge_max_mails = 0 comment = All messages without Trash and Junk driver = special_use = \All } mailbox Flagged { auto = no autoexpunge = 0 autoexpunge_max_mails = 0 comment = All flagged messages without Trash and Junk driver = special_use = \Flagged } order = 0 prefix = virtual. separator = . subscriptions = yes type = private } old_stats_carbon_interval = 30 secs old_stats_carbon_name = old_stats_carbon_server = old_stats_command_min_time = 1 mins old_stats_domain_min_time = 12 hours old_stats_ip_min_time = 12 hours old_stats_memory_limit = 16 M old_stats_session_min_time = 15 mins old_stats_user_min_time = 1 hours passdb { args = username_format=%u /etc/mail/credentials auth_verbose = default default_fields = deny = no driver = passwd-file master = no mechanisms = name = override_fields = pass = no result_failure = continue result_internalfail = continue result_success = return-ok skip = never username_filter = } plugin { fts = flatcurve fts_decoder = decode2text fts_filters = normalizer-icu snowball stopwords fts_filters_en = lowercase snowball english-possessive stopwords fts_flatcurve_substring_search = yes fts_languages = en de ru es fts_tokenizer_generic = algorithm=simple fts_tokenizers = generic email-address mail_replica = tcps:mx2.catap.net replication_sync_timeout = 10 sieve = file:~/sieve;active=~/.dovecot.sieve sieve_before = /etc/dovecot/sieve_before.d/ } pop3_client_workarounds = pop3_delete_type = default pop3_deleted_flag = pop3_enable_last = no pop3_fast_size_lookups = no pop3_lock_session = no pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s pop3_no_flag_updates = no pop3_reuse_xuidl = no pop3_save_uidl = no pop3_uidl_duplicates = allow pop3_uidl_format = %08Xu%08Xv pop3c_features = pop3c_host = pop3c_master_user = pop3c_password = pop3c_port = 110 pop3c_quick_received_date = no pop3c_rawlog_dir = pop3c_ssl = no pop3c_ssl_verify = yes pop3c_user = %u postmaster_address = postmaster@%{if;%d;ne;;%d;%{hostname}} process_shutdown_filter = protocols = imap lmtp sieve quota_full_tempfail = no rawlog_dir = recipient_delimiter = + rejection_reason = Your message to <%t> was automatically rejected:%n%r rejection_subject = Rejected: %s replication_dsync_parameters = -d -l 30 -U -x virtual. replication_full_sync_interval = 5 mins replication_max_conns = 10 replicator_host = replicator replicator_port = 0 sendmail_path = /usr/sbin/sendmail service aggregator { chroot = . client_limit = 0 drop_priv_before_exec = no executable = aggregator extra_groups = fifo_listener replication-notify-fifo { group = vmail mode = 0600 user = vmail } group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener replication-notify { group = vmail mode = 0600 user = vmail } user = $default_internal_user vsz_limit = 18446744073709551615 B } service anvil { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = anvil extra_groups = group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 1 protocol = service_count = 0 type = anvil unix_listener anvil-auth-penalty { group = mode = 0600 user = } unix_listener anvil { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service auth-worker { chroot = client_limit = 1 drop_priv_before_exec = no executable = auth -w extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = worker unix_listener auth-worker { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service auth { chroot = client_limit = 0 drop_priv_before_exec = no executable = auth extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener auth-client { group = mode = 0600 user = $default_internal_user } unix_listener auth-login { group = mode = 0600 user = $default_internal_user } unix_listener auth-master { group = mode = 0600 user = } unix_listener auth-userdb { group = vmail mode = 0660 user = vmail } unix_listener login/login { group = mode = 0666 user = } unix_listener token-login/tokenlogin { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service config { chroot = client_limit = 0 drop_priv_before_exec = no executable = config extra_groups = group = idle_kill = 4294967295 secs privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = config unix_listener config { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service decode2text { chroot = client_limit = 0 drop_priv_before_exec = no executable = script /usr/local/libexec/dovecot/decode2text.sh extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener decode2text { group = mode = 0666 user = } user = vmail vsz_limit = 18446744073709551615 B } service dict-async { chroot = client_limit = 0 drop_priv_before_exec = no executable = dict extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener dict-async { group = $default_internal_group mode = 0660 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service dict { chroot = client_limit = 1 drop_priv_before_exec = no executable = dict extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener dict { group = $default_internal_group mode = 0660 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service director { chroot = . client_limit = 0 drop_priv_before_exec = no executable = director extra_groups = fifo_listener login/proxy-notify { group = mode = 00 user = } group = idle_kill = 4294967295 secs inet_listener { address = haproxy = no port = 0 reuse_port = no ssl = no } privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener director-admin { group = mode = 0600 user = } unix_listener director-userdb { group = mode = 0600 user = } unix_listener login/director { group = mode = 00 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service dns-client { chroot = client_limit = 1 drop_priv_before_exec = no executable = dns-client extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener dns-client { group = mode = 0666 user = } unix_listener login/dns-client { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service doveadm { chroot = client_limit = 1 drop_priv_before_exec = no executable = doveadm-server extra_groups = $default_internal_group group = idle_kill = 0 inet_listener { address = haproxy = no port = 12345 reuse_port = no ssl = yes } privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 1 type = unix_listener doveadm-server { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service health-check { chroot = client_limit = 1 drop_priv_before_exec = yes executable = script -p health-check.sh extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = user = $default_internal_user vsz_limit = 18446744073709551615 B } service imap-hibernate { chroot = client_limit = 0 drop_priv_before_exec = no executable = imap-hibernate extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = imap service_count = 0 type = unix_listener imap-hibernate { group = $default_internal_group mode = 0660 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service imap-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = imap-login extra_groups = group = idle_kill = 0 inet_listener imap { address = haproxy = no port = 143 reuse_port = no ssl = no } inet_listener imaps { address = haproxy = no port = 993 reuse_port = no ssl = yes } privileged_group = process_limit = 0 process_min_avail = 0 protocol = imap service_count = 1 type = login user = $default_login_user vsz_limit = 18446744073709551615 B } service imap-urlauth-login { chroot = token-login client_limit = 0 drop_priv_before_exec = no executable = imap-urlauth-login extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = imap service_count = 1 type = login unix_listener imap-urlauth { group = mode = 0666 user = } user = $default_login_user vsz_limit = 18446744073709551615 B } service imap-urlauth-worker { chroot = client_limit = 1 drop_priv_before_exec = no executable = imap-urlauth-worker extra_groups = $default_internal_group group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = imap service_count = 1 type = unix_listener imap-urlauth-worker { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service imap-urlauth { chroot = client_limit = 1 drop_priv_before_exec = no executable = imap-urlauth extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = imap service_count = 1 type = unix_listener token-login/imap-urlauth { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service imap { chroot = client_limit = 1 drop_priv_before_exec = no executable = imap extra_groups = $default_internal_group group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = imap service_count = 1 type = unix_listener imap-master { group = mode = 0600 user = } unix_listener login/imap { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service indexer-worker { chroot = client_limit = 1 drop_priv_before_exec = no executable = indexer-worker extra_groups = $default_internal_group group = idle_kill = 0 privileged_group = process_limit = 10 process_min_avail = 0 protocol = service_count = 0 type = worker unix_listener indexer-worker { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service indexer { chroot = client_limit = 0 drop_priv_before_exec = no executable = indexer extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener indexer { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service ipc { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = ipc extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener ipc { group = mode = 0600 user = $default_internal_user } unix_listener login/ipc-proxy { group = mode = 0600 user = $default_login_user } user = $default_internal_user vsz_limit = 18446744073709551615 B } service lmtp { chroot = client_limit = 1 drop_priv_before_exec = no executable = lmtp extra_groups = $default_internal_group group = vmail idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = lmtp service_count = 0 type = unix_listener lmtp { group = mode = 0666 user = } user = vmail vsz_limit = 18446744073709551615 B } service log { chroot = client_limit = 0 drop_priv_before_exec = no executable = log extra_groups = group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = log unix_listener log-errors { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service managesieve-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = managesieve-login extra_groups = group = idle_kill = 0 inet_listener sieve { address = haproxy = no port = 4190 reuse_port = no ssl = no } privileged_group = process_limit = 0 process_min_avail = 0 protocol = sieve service_count = 1 type = login user = $default_login_user vsz_limit = 18446744073709551615 B } service managesieve { chroot = client_limit = 1 drop_priv_before_exec = no executable = managesieve extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = sieve service_count = 1 type = unix_listener login/sieve { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service old-stats { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = old-stats extra_groups = fifo_listener old-stats-mail { group = mode = 0600 user = } fifo_listener old-stats-user { group = mode = 0600 user = } group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener old-stats { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service pop3-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = pop3-login extra_groups = group = idle_kill = 0 inet_listener pop3 { address = haproxy = no port = 110 reuse_port = no ssl = no } inet_listener pop3s { address = haproxy = no port = 995 reuse_port = no ssl = yes } privileged_group = process_limit = 0 process_min_avail = 0 protocol = pop3 service_count = 1 type = login user = $default_login_user vsz_limit = 18446744073709551615 B } service pop3 { chroot = client_limit = 1 drop_priv_before_exec = no executable = pop3 extra_groups = $default_internal_group group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = pop3 service_count = 1 type = unix_listener login/pop3 { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service replicator { chroot = client_limit = 0 drop_priv_before_exec = no executable = replicator extra_groups = group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 1 protocol = service_count = 0 type = unix_listener replicator-doveadm { group = vmail mode = 0600 user = vmail } unix_listener replicator { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service stats { chroot = client_limit = 0 drop_priv_before_exec = no executable = stats extra_groups = group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener login/stats-writer { group = mode = 0600 user = $default_login_user } unix_listener stats-reader { group = mode = 0600 user = } unix_listener stats-writer { group = $default_internal_group mode = 0660 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service submission-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = submission-login extra_groups = group = idle_kill = 0 inet_listener submission { address = haproxy = no port = 587 reuse_port = no ssl = no } inet_listener submissions { address = haproxy = no port = 0 reuse_port = no ssl = no } privileged_group = process_limit = 0 process_min_avail = 0 protocol = submission service_count = 1 type = login user = $default_login_user vsz_limit = 18446744073709551615 B } service submission { chroot = client_limit = 1 drop_priv_before_exec = no executable = submission extra_groups = $default_internal_group group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = submission service_count = 1 type = unix_listener login/submission { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } shutdown_clients = yes ssl = yes ssl_alt_cert = ssl_alt_key = ssl_ca = ssl_cert = </etc/ssl/mx.catap.net.crt ssl_cert_username_field = commonName ssl_cipher_list = ALL:!kRSA:!SRP:!kDHd:!DSS:!aNULL:!eNULL:!EXPORT:!DES:!3DES:!MD5:!PSK:!RC4:!ADH:!LOW@STRENGTH ssl_cipher_suites = ssl_client_ca_dir = ssl_client_ca_file = ssl_client_cert = ssl_client_key = ssl_client_require_valid_cert = yes ssl_crypto_device = ssl_curve_list = ssl_dh = # hidden, use -P to show it ssl_key = # hidden, use -P to show it ssl_key_password = ssl_min_protocol = TLSv1.2 ssl_options = ssl_prefer_server_ciphers = no ssl_require_crl = yes ssl_verify_client_cert = no state_dir = /var/dovecot stats_http_rawlog_dir = stats_writer_socket_path = stats-writer submission_client_workarounds = submission_host = submission_logout_format = in=%i out=%o submission_max_mail_size = 0 submission_max_recipients = 0 submission_relay_command_timeout = 5 mins submission_relay_connect_timeout = 30 secs submission_relay_host = submission_relay_master_user = submission_relay_max_idle_time = 29 mins submission_relay_password = submission_relay_port = 25 submission_relay_rawlog_dir = submission_relay_ssl = no submission_relay_ssl_verify = yes submission_relay_trusted = no submission_relay_user = submission_ssl = no submission_timeout = 30 secs syslog_facility = mail userdb { args = username_format=%u /etc/mail/credentials auth_verbose = default default_fields = driver = passwd-file name = override_fields = uid=vmail gid=vmail home=/var/vmail/%u result_failure = continue result_internalfail = continue result_success = return-ok skip = never } valid_chroot_dirs = verbose_proctitle = no verbose_ssl = no version_ignore = no protocol lmtp { mail_plugins = notify fts fts_flatcurve replication virtual sieve } protocol imap { imap_metadata = yes mail_max_userip_connections = 1000 } -- wbr, Kirill

2 2

Inboxes incorrectly become /var/mail/%u
by ma.sao＠msa.hinet.net 29 Oct '24

29 Oct '24

With configuration "mail_location = maildir:~/Maildir", incoming mails are always saved to /var/mail/%u , which are invisible to Thunderbird. How do I configure Dovecot to save incoming mails to ~/Maildir/cur/ and ~/Maildir/new/ ? Thank you in advance! context: I replaced my host recently. Version 2.3.13 running in the old host used to correctly save incoming mails to ~/Maildir. I copied the files in /home/user1/Maildir/ Dovecot 2.3.13 managed to my new host where the new Dovecot 2.3.19.1 runs. Thunderbird now correctly displays files in /home/user1/Maildir/cur/ in the new server as inbox mails, but obviously it can not see file /var/mail/user1 in the new server. ===== Output of "dovecot -n" follows. # 2.3.19.1 (9b53102964): /etc/dovecot/dovecot.conf # Pigeonhole version 0.5.19 (4eae2f79) # OS: Linux 6.1.0-22-amd64 x86_64 Debian 12.7 # Hostname: example auth_mechanisms = plain login disable_plaintext_auth = no mail_location = maildir:~/Maildir mail_privileged_group = mail namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } protocols = " imap" service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } } service imap-login { inet_listener imap { port = 143 } } ssl = required ssl_cert = </etc/letsencrypt/live/example.com/fullchain.pem ssl_dh = # hidden, use -P to show it ssl_key = # hidden, use -P to show it userdb { driver = passwd } ======== Output of "ls -la /home/user1/Maildir/" in my new host follows. total 112 drwx------ 9 user1 user1 4096 Oct 26 23:39 . drwxr-xr-x 4 user1 user1 4096 Oct 26 23:39 .. drwx------ 5 user1 user1 4096 Oct 26 22:18 .Drafts drwx------ 5 user1 user1 4096 Oct 29 00:11 .Sent drwx------ 5 user1 user1 4096 Oct 26 23:39 .Templates drwx------ 5 user1 user1 4096 Oct 29 00:12 .Trash drwx------ 2 user1 user1 4096 Oct 26 21:14 cur -rw------- 1 user1 user1 609 Oct 26 20:15 dovecot-uidlist -rw------- 1 user1 user1 8 Nov 13 2023 dovecot-uidvalidity -r--r--r-- 1 user1 user1 0 Oct 15 2022 dovecot-uidvalidity.634a88ee -rw------- 1 user1 user1 600 Oct 18 16:39 dovecot.index -rw------- 1 user1 user1 13296 Oct 26 21:23 dovecot.index.cache -rw------- 1 user1 user1 26084 Oct 26 21:14 dovecot.index.log -rw------- 1 user1 user1 744 Oct 22 18:32 dovecot.list.index -rw------- 1 user1 user1 7232 Oct 29 00:12 dovecot.list.index.log -rw------- 1 user1 user1 96 Nov 13 2023 dovecot.mailbox.log drwx------ 2 user1 user1 4096 Oct 26 20:15 new -rw------- 1 user1 user1 33 Nov 13 2023 subscriptions drwx------ 2 user1 user1 4096 Oct 25 21:32 tmp ==== Output of "ls -l /var/mail" follows. total 288 -rw------- 1 user1 mail 35086 Oct 29 18:02 user1 -rw------- 1 daemon mail 36244 Oct 28 12:32 daemon -rw------- 1 debian mail 36223 Oct 26 21:32 debian -rw------- 1 dovecot mail 36248 Oct 28 19:18 dovecot -rw------- 1 games mail 36223 Oct 27 12:38 games -rw------- 1 news mail 36237 Oct 27 13:52 news -rw------- 1 nobody mail 36266 Oct 27 15:31 nobody -rw------- 1 sshd mail 36195 Oct 29 12:36 sshd

3 4

Aggregating auth/proxy events
by matus.vlcek＠gmail.com 28 Oct '24

28 Oct '24

Hi, I'm working on aggregating event logs and trying to correlate all related events using session IDs. However, I’m struggling with some events as they're missing the session ID. 1. proxy_session_* events lack a session ID field, making it difficult to pair them with auth_request_* events. 2. when using dovecot as sasl for postfix with a unix listener, both auth_request_* and auth_passdb_request_* events are missing the session ID too. Example of the fields object for auth_request_finished when using smtp. It's missing multiple common fields, but session ID is, imho, the most important one. https://doc.dovecot.org/2.3/admin_manual/list_of_events/#id1 ``` categories: [ "auth", "service:auth" ] "fields": { "translated_user": "alex", "mechanism": "LOGIN", "real_remote_ip": "X.X.X.X", "user": "alex", "transport": "insecure", "local_ip": "X.X.X.X", "remote_ip": "X.X.X.X", "real_local_ip": "X.X.X.X", "policy_result": "ok", "service": "smtp", "duration": 96764, "original_user": "alex" }, ``` Would it be possible to add session ID fields to these logs? Alternatively, is there another method to correlate all the session related logs? Thanks, Matus Dovecot v. 2.3.21

1 0

LMTP rejecting aliased emails
by Nick Howitt 27 Oct '24

27 Oct '24

Hi, I am pretty new to Dovecot and totally new to LMTP. I have normal delivery working but I am struggling with aliases. In my mail queue I am seeing things like: -Queue ID- --Size-- ----Arrival Time---- -Sender/Recipient------- E0F617055DB 720 Sat Oct 26 14:50:24 clamav(a)mydomain.com (host mail.mydomain.com[private/dovecot-lmtp] said: 451 4.3.0 <clamav(a)mydomain.com> Temporary internal error (in reply to end of DATA command)) clamav(a)mydomain.com But in my /etc/aliases, I am aliasing clamav to nick and nick(a)mydomain.com is a valid mail box that can receive normal mail. The corresponding line in the mail log is: 2024-10-26T14:55:56.385500+01:00 mail-www dovecot: lmtp(1371485): Error: lmtp-server: conn unix:pid=1371484,uid=102 [1]: rcpt clamav(a)mydomain.com: Failed to initialize user: Mail access for users with UID 107 not permitted (see first_valid_uid in config file, uid from userdb lookup). How do I get round this issue? I can drop the minimum UID to 0, but then all system users are deemed valid for mail which is not true. None of them are. Thanks, Nick

5 30

sieve crashes when two optional include scripts are missing
by Michal Hlavinka 27 Oct '24

27 Oct '24

Hi, we've found an issue with sieve plugin. When script includes two missing optional scripts, it causes crash. For reproducing the issue, script names must belong to same hash table node, so either two scripts with same name or scripts where 'hash(name) % table->size' results in same value, like missing_a and missing_aa in reproducer below. Reduced reproducer: cat >dovecot.min.conf <<EOF mail_location = maildir:~/Maildir plugin { sieve = file:/tmp;active=/tmp/dovecot.sieve } EOF cat >reproducer.sieve <<EOF require "include"; include :personal :optional "missing_a"; include :personal :optional "missing_aa"; EOF echo -n > empty sieve-test -c dovecot.min.conf reproducer.sieve empty any test mail would do, but empty file is enough for reproducer # return sblock->id causes the crash as sblock is NULL backtrace: (gdb) bt #0 sieve_binary_block_get_id (sblock=0x0) at src/lib-sieve/sieve-binary.c:421 #1 ext_include_execute_include (renv=0x5555555bbed8, include_id=1, flags=EXT_INCLUDE_FLAG_OPTIONAL) at plugins/include/ext-include-common.c:696 #2 opc_include_execute (renv=0x5555555bbed8, address=0x5555555bbf10) at plugins/include/cmd-include.c:399 #3 sieve_interpreter_operation_execute (interp=0x5555555bbe88) at src/lib-sieve/sieve-interpreter.c:901 #4 sieve_interpreter_continue (interp=0x5555555bbe88, interrupted=0x0) at src/lib-sieve/sieve-interpreter.c:959 #5 sieve_interpreter_start (interp=0x5555555bbe88, result=0x5555555b9230, interrupted=0x0) at src/lib-sieve/sieve-interpreter.c:1049 #6 sieve_interpreter_run (interp=0x5555555bbe88, result=0x5555555b9230) at src/lib-sieve/sieve-interpreter.c:1057 #7 sieve_run (sbin=0x55555558ee18, result=0x5555555b9230, eenv=0x7fffffffe890, ehandler=0x55555558c338) at src/lib-sieve/sieve.c:357 #8 sieve_test (sbin=0x55555558ee18, msgdata=0x7fffffffe9f0, senv=0x7fffffffea30, ehandler=0x55555558c338, stream=0x5555555b2cd0, flags=SIEVE_EXECUTE_FLAG_LOG_RESULT) at src/lib-sieve/sieve.c:598 #9 main (argc=5, argv=0x555555567a10) at src/sieve-tools/sieve-test.c:391 issue seems to be caused by lib-sieve/plugins/include/ext-include-common.c: ext_include_generate_include on first pass (script) the check for script already compiled into binary at 529: included = ext_include_binary_script_get_include_info(binctx, script); returns NULL, so code goes through 'else' block where it hits sieve_script_is_open(script) check. It includes script with NULL block, returns 0 so caller cmd_include_generate does not emit anything. On second pass the above 'included' check returns first missing script, it goes through true block where it just checks flags and returns non-zero, so caller this time goes through the emit code block and the previously included NULL sblock gets referenced causing crash later. Note: despite scripts have different name, they pass the "same script" check because sieve_file_script_equals compares 0==0 dev & inode numbers as scripts do not exist. This is why scripts do not have to have same names. Side effect of this is that as missing_a and missing_aa are treated like the same script, only first one is linked in compiled svbin. Which means that if missing_aa reappears later, svbin won't get recompiled. Another manifestation of the issue is when included missing_a script is present when main script is compiled and later missina_a is removed again. During execution, script is not recompiled and it aborts for hash table dupe check: sieve_binary_open->ext_include_binary_script_include->hash_table_insert There are several ways how to solve this. I've tried a few, but there were other corner cases that appeared. One tried way was for example ext_include_generate_include in the 'if (included)' replicate the check sieve_script_is_open(...) from else block, just check flags, no include and set result to 0. Another way to solve this is to return from ext_include_execute_include early if sblock is NULL just before it tries to derefernce it, similarly as it does if it fails 'once' check. Same for dumping in opc_include_dump. Whilst the first approach seems a bit better, it won't stop crashing in existing environments as it won't trigger svbin recompilation and svbin would fail. This means that the second soultion is sort of needed anyway. This still won't solve the problem with different missing scripts as only first one would be able to trigger recompilation when file becomes available. Just including both in the mentioned function won't work either as they would still be evaluated as same and hash table anti-dupe check would trigger abort. So some changes in script comparison seem needed anyway. This is what I've used in my approach. Return early from ext_include_execute_include and opc_include_dump if sblock is NULL and change sieve_file_script_equals to compare also script->location for missing scripts (when inode is 0). Let me know if you need more information. Cheers, Michal Hlavinka

2 1

Ignore specific subfolders within Maildir?
by Ralph Seichter 25 Oct '24

25 Oct '24

Consider Dovecot with "mail_location = maildir:~/.maildir". Is it possible to configure Dovecot to completely ignore directories like ~/.maildir/.foo ? The subdirectory .foo is created by third party software and the name cannot be changed. Because of the leading dot, Dovecot interprets ~/.maildir/.foo as IMAP folder /foo by default, creates the typical subdirectory structure with cur/new/tmp, and exposes ~/.maildir/.foo to IMAP clients. Not being able to change the name or location of .foo, I would like to tell Dovecot to ignore .foo's presence altogether. So far I have not found documentation about how that can be done (or if it can). Helpful pointers are appreciated. -Ralph

3 7

Re: "client_id" in lua script
by Michael Slusarz 25 Oct '24

25 Oct '24

> On 10/25/2024 9:47 AM MDT ecdlguy--- via dovecot <dovecot(a)dovecot.org> wrote: > > Hi, > > I'm trying to block specific MUAs, like e.g. Outlook-App for iOS and Android or Xiaomi Mail / MiMail using a lua script. > While implementing this, I noticed that "client_id" is always nil in the lua script or I am doing something wrong. > This is part of the postfix config: A note that this is explicitly not a supported IMAP ID use-case. Per https://www.rfc-editor.org/rfc/rfc2971.html#section-3: Servers MUST NOT deny access to or refuse service for a client based on information from the ID command. Clients MUST NOT refuse to operate or limit their operation with a server based on the ID response. Client blocking is much better handled via other mechanisms, that may incorporate ID information as a part of the decision making process but does not make a determinative decision based on that string. michael

1 0

"client_id" in lua script
by ecdlguy＠gmail.com 25 Oct '24

25 Oct '24

Hi, I'm trying to block specific MUAs, like e.g. Outlook-App for iOS and Android or Xiaomi Mail / MiMail using a lua script. While implementing this, I noticed that "client_id" is always nil in the lua script or I am doing something wrong. This is part of the postfix config: imap_id_retain = yes imap_id_log = * passdb { driver = lua args = file=/etc/dovecot/lua/badimapid.lua blocking=yes } Logging (imap_id_log = *) works, the dovecot log has entries like: imap(user@domain)<226><pWFZx9siRt+CUwMp>: ID sent: name=Thunderbird, version=115.15.0 Here is the content of the lua-script file: function auth_passdb_lookup(req) req.log_info('badimapid info: user="'..req.user..'", client_id="'..req.client_id..'"') return dovecot.auth.PASSDB_RESULT_NEXT, "" end function script_init() return 0 end function script_deinit() end In principle, "req.client_id" should contain the client id string according to https://doc.dovecot.org/2.3/configuration_manual/authentication/lua_based_a… However, dovecot log reads: auth-worker(163): Error: conn unix:auth-worker (pid=162,uid=401): auth-worker<27>: lua(user@domain): db-lua: lua_pcall(auth_passdb_lookup, 1, 2) failed: /etc/dovecot/lua/badimapid.lua:2: attempt to concatenate a nil value (field 'client_id') Why is client_id nil? Thanks, Thorsten

1 0

BUG: logging bug creeped back in pop3-login
by Laura Steynes 25 Oct '24

25 Oct '24

Oct 20 14:23:29 pop3-login: Info: Disconnected: Disconnected: Too many bad commands (no auth attempts in 0 secs): use....... Double logging of Disconnected

2 2

fixing sieve (?)
by Stefan G. Weichinger 24 Oct '24

24 Oct '24

Yesterday I was told that at a customer the vacation scripts don't work anymore. Looking closer it seems the whole sieve-funtionality is missing (eg. filtering mails into folders). I am in the process of analysing, and don't have a clue yet. Editing scripts via managesieved works (for example from roundcube). The scripts are in the right place, afai understand. I compare this with another setup where things work and don't see the difference. All this worked perfectly until maybe summer. This is Debian 12.7 bookworm, the dovecot repo still points to bullseye. # cat /etc/apt/sources.list.d/dovecot.list deb [arch=amd64 signed-by=/usr/share/keyrings/dovecot.gpg] https://repo.dovecot.org/ce-2.3-latest/debian/bullseye bullseye main There is rspamd in place with postfix if that is somehow relevant. The installation is on premise and has maybe 60-100 mailboxes in now 2 domains. That was the largest change this year: add a so-called "alias domain" in postfixadmin: mailbox(a)new.domain points to mailbox(a)old.domain I assume the sieve scripts should simply be executed as before. The basics of mailing etc work fine! I'd appreciate any pointers. trying to enable debug logs etc, for example I don't get anything into "sieve_user_log" --- # 2.3.21.1 (d492236fa0): /etc/dovecot/dovecot.conf # Pigeonhole version 0.5.21.1 (49005e73) # OS: Linux 6.1.0-26-amd64 x86_64 Debian 12.7 # Hostname: mail2.my.tld auth_cache_size = 4 M default_process_limit = 300 listen = * mail_home = /mnt/mailboxes/%d/%u mail_location = maildir:~ mail_plugins = " notify quota acl" managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext imapflags imapsieve vnd.dovecot.imapsieve namespace { inbox = yes location = prefix = separator = / type = private } namespace { location = maildir:/home/vmail/oeffentlich prefix = Oeffentlich/ separator = / subscriptions = yes type = public } passdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } plugin { acl = vfile:/etc/dovecot/dovecot-acl:cache_secs=300 acl_shared_dict = file:/var/lib/dovecot/shared-mailboxes imapsieve_mailbox1_before = file:/etc/dovecot/sieve/global/learn-spam.sieve imapsieve_mailbox1_causes = COPY imapsieve_mailbox1_name = Spam imapsieve_mailbox2_before = file:/etc/dovecot/sieve/global/learn-ham.sieve imapsieve_mailbox2_causes = COPY imapsieve_mailbox2_from = Spam imapsieve_mailbox2_name = * sieve = /home/vmail/%d/%u/sieve/.dovecot.sieve sieve_before = /etc/dovecot/sieve/global/spam-global.sieve sieve_dir = /home/vmail/%d/%u/sieve/scripts/ sieve_extensions = +imapflags sieve_global_extensions = +vnd.dovecot.pipe sieve_pipe_bin_dir = /usr/bin sieve_plugins = sieve_imapsieve sieve_extprograms sieve_trace_dir = /tmp/sieve_trace/ sieve_trace_level = commands sieve_user_log = /home/vmail/%d/%u/sieve/sieve_user.log } protocols = imap sieve lmtp service auth { client_limit = 1200 unix_listener auth-client { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { mode = 0777 } user = root } service imap-login { process_min_avail = 10 } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0660 user = postfix } user = vmail } service managesieve-login { inet_listener sieve { port = 4190 } } ssl = required ssl_ca = </etc/letsencrypt/pfsense/cloud_imap_mail_smtp_LE_cert.ca ssl_cert = </etc/letsencrypt/pfsense/cloud_imap_mail_smtp_LE_cert.fullchain ssl_cipher_list = ALL:HIGH:!SSLv2:!MEDIUM:!LOW:!EXP:!RC4:!MD5:!aNULL:@STRENGTH ssl_key = # hidden, use -P to show it ssl_key_password = # hidden, use -P to show it userdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } protocol lmtp { mail_debug = yes mail_plugins = sieve postmaster_address = logs(a)my.tld } protocol imap { mail_max_userip_connections = 20 mail_plugins = " notify quota acl imap_sieve imap_acl" } protocol sieve { managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave imapflags }

4 14

Issue with logrotate and dovecot
by jim＠themailshack.com 24 Oct '24

24 Oct '24

Something new here has cropped up, no changes to configs for some time. I've had my dovecot using the default /var/log/dovecot.log location for logging, logrotate used to back this up weekly and logging would continue using this same file. Now when logrotate runs, it correctly backs up the log but then creates a new dovecot.log-yyyymmdd file and dovecot starts logging to that. I'm at a loss as to why this is happening. My postfix and other processes are still using their correct log files, so it seems related only to dovecot. From dovecot/conf.d/10-logging.conf: # Log file to use for error messages. "syslog" logs to syslog, # /dev/stderr logs to stderr. #log_path = syslog log_path = /var/log/dovecot.log From /etc/logrotate.d/dovecot /var/log/dovecot.log { weekly rotate 4 missingok notifempty compress delaycompress sharedscripts postrotate doveadm log reopen endscript } Looks like something happened mid last month but other than periodic software updates nothing has changed for a while here. If I reboot the system, dovecot resumes logging to /var/log/dovecot.log, but as soon as logrotate runs (I did a --force to test) it logs to the new file again. Hoping this may sound familiar to someone on the list.

1 1

Struggling to get sieve running
by nick＠howitts.co.uk 23 Oct '24

23 Oct '24

Hi, I am new to Dovecot and Debian, but I seem to have got Dovecot up and running with local delivery and then switched to LMTP. I am running Debian 12.7 and Webmin 2.202 to try and get things running, but I've had to tweak files. Also Webmin did not install dovecot-lmtpd, dovecot-sieve or dovecot-managesieved, so I did that manually. I have tried following the configuration guide from Dovecot (but there seems to be little there) and other sources I've found on the internet, but there is nothing I have found to get sieve listening on port 4190 when checked with ss. My Dovecot config from `dovecot -n` is: ``` # 2.3.19.1 (9b53102964): /etc/dovecot/dovecot.conf # Pigeonhole version 0.5.19 (4eae2f79) # OS: Linux 6.1.0-26-amd64 x86_64 Debian 12.7 # Hostname: my.fqdn auth_username_format = %Ln disable_plaintext_auth = no first_valid_uid = 1000 mail_location = maildir:~/Maildir mail_privileged_group = mail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } plugin { sieve = file:~/sieve;active=~/.dovecot.sieve } protocols = imap lmtp service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } service managesieve-login { inet_listener sieve { port = 4190 } } ssl_cert = </etc/letsencrypt/live/mydomain.com/fullchain.pem ssl_client_ca_dir = /etc/ssl/certs ssl_dh = # hidden, use -P to show it ssl_key = # hidden, use -P to show it userdb { driver = passwd } protocol lmtp { mail_plugins = " sieve" postmaster_address = nick(a)mydomain.com } protocol lda { mail_plugins = " sieve" } ``` Dovecot packages installed from the Debian repos are: ``` dovecot-core/stable,stable-security,now 1:2.3.19.1+dfsg1-2.1+deb12u1 amd64 [installed] dovecot-imapd/stable,stable-security,now 1:2.3.19.1+dfsg1-2.1+deb12u1 amd64 [installed] dovecot-lmtpd/stable,stable-security,now 1:2.3.19.1+dfsg1-2.1+deb12u1 amd64 [installed] dovecot-managesieved/stable,stable-security,now 1:2.3.19.1+dfsg1-2.1+deb12u1 amd64 [installed] dovecot-pop3d/stable,stable-security,now 1:2.3.19.1+dfsg1-2.1+deb12u1 amd64 [installed] dovecot-sieve/stable,stable-security,now 1:2.3.19.1+dfsg1-2.1+deb12u1 amd64 [installed] ``` Ultimately I intend to run manage sieve from Roundcube which I have already got running, or I may try a Thunderbird addon. Can anyone give me some pointers, please?

3 2

Missing IMAP folders after upgrading from 2.3.17 to 2.3.21.1
by Frank Kirschner 23 Oct '24

23 Oct '24

Hi, I have upgraded from 2.3.17 to 2.3.21.1. mail_location = maildir Now in some mailboxes are IMAP folder in subdir of INBOX missing. When I do a 'ls -la' in filesystem, I see the subfolder like other folder with identical owner an permissions. But when I do doveadm mailbox list -u [user] the IMAP folder is not displayed. So I have deleted all files in /opt/dovecot/[hash]/[user] because I use INDEX=/opt/dovecot/%2.256Nu/%u:ITERINDEX The restart dovecot and re-login the Imap client. All IMAP folders are rebuilt but the same folders like before are still missing. Any ideas please? thanks, Frank doveconf -n # 2.3.21.1 (d492236fa0): /etc/dovecot/dovecot.conf # Pigeonhole version 0.5.21.1 (49005e73) # OS: Linux 5.15.149-1-pve x86_64 AlmaLinux release 8.10 (Cerulean Leopard) # Hostname: *** auth_verbose = yes disable_plaintext_auth = no doveadm_password = # hidden, use -P to show it first_valid_uid = 1000 imap_id_send = lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes lmtp_save_to_detail_mailbox = yes log_path = /var/log/dovecot.log login_greeting = IMAP ready. mail_fsync = always mail_full_filesystem_access = yes mail_gid = 1000 mail_home = /srv/mail/mail_storage2/%d/%n mail_location = maildir:~/mail:VOLATILEDIR=/dev/shm/dovecot/%2.256Nu/%u:INDEX=/opt/dovecot/%2.256Nu/%u:ITERINDEX mail_plugins = " notify replication" mail_privileged_group = vpostfix mail_uid = 1000 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext vacation-seconds mbox_write_locks = fcntl mmap_disable = yes namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Spam { auto = subscribe special_use = \Junk } mailbox Trash { special_use = \Trash } prefix = } passdb { args = scheme=CRYPT username_format=%u /etc/dovecot/users driver = passwd-file } plugin { recipient_delimiter = + replication_full_sync_interval = 1 hour sieve = file:~/sieve;active=~/.dovecot.sieve sieve_before = /etc/dovecot/spam-global.sieve sieve_extensions = +vacation-seconds sieve_vacation_default_period = 1d sieve_vacation_max_period = 30d sieve_vacation_min_period = 0 sieve_vacation_use_original_recipient = yes } postmaster_address = ***** protocols = imap pop3 lmtp sieve service aggregator { fifo_listener replication-notify-fifo { mode = 0666 user = vpostfix } unix_listener replication-notify { mode = 0666 user = vpostfix } } service auth { inet_listener { address = 192.168.130.192 port = 3659 } unix_listener /var/spool/postfix/private/auth { group = vpostfix mode = 0666 user = vpostfix } unix_listener auth-userdb { group = vpostfix mode = 0600 user = vpostfix } } service config { unix_listener config { user = vpostfix } } service doveadm { inet_listener { port = 4711 } user = vpostfix } service imap-login { process_min_avail = 1 service_count = 1 } service lmtp { inet_listener lmtp { address = 192.168.130.192 port = 24 } } service managesieve-login { inet_listener sieve { port = 4190 } } service replicator { process_min_avail = 1 unix_listener replicator-doveadm { mode = 0666 user = vpostfix } } ssl_alt_cert = </etc/alt/fullchain.pem ssl_alt_key = # hidden, use -P to show it ssl_cert = </etc/fullchain.pem ssl_cipher_list = PROFILE=SYSTEM ssl_dh = # hidden, use -P to show it ssl_key = # hidden, use -P to show it userdb { args = username_format=%u /etc/dovecot/users driver = passwd-file } protocol lmtp { mail_plugins = " notify replication sieve" } protocol lda { mail_plugins = " notify replication sieve" } protocol imap { mail_max_userip_connections = 10 mail_plugins = " notify replication quota imap_quota" }

3 5

disable sieve header
by Marc 22 Oct '24

22 Oct '24

Is it possible to disable emitting the sieve header? X-Sieve: Pigeonhole Sieve

1 0

Uppercase username emails are rejected
by lua8ds＠proton.me 20 Oct '24

20 Oct '24

When a sender writes my email address with my username uppercase, e.g. USERNAME(a)name.com, in the to: field of their MUA, my mail server rejects that email. /var/log/mail.log prints: <USERNAME(a)redacted.com>: host mail.redacted.com[private/dovecot-lmtp] said: 550 5.1.1 > <USERNAME(a)redacted.com> User doesn't exist: USERNAME(a)redacted.com (in reply to RCPT TO > command) In the manual, I found that: auth_username_format Default: %Lu Formatting applied to username before querying the auth database. You can use the standard variables here. Examples: %Lu Lowercases the username [...] My current setting was not the default; I had: auth_username_format = %n So I updated that setting to: auth_username_format = %Lu expecting that %Lu would lowercase the username - and that my problem would be fixed. It does not though. Updating this setting not only prompts my email server to still reject USERNAME(a)redacted.com, but now also rejects (lowercase username) username(a)redacted.com (which my server had no issue receiving beforehand). So I reverted auth_username_format to: auth_username_format = %n Emails sent to username(a)redacted.com land in my mailbox again - but emails sent to USERNAME(a)redacted.com still don't. What can I try to troubleshoot? Which config file shall I share with you?

10 22

vsz_limit status
by Joan Moreau 19 Oct '24

19 Oct '24

Hi How to get (programatically, c++) the current usage of memory, under the limit of vsz_limit ? https://doc.dovecot.org/2.3/configuration_manual/service_configuration/#ser… Thank you

2 15

replication Error with wrong file lock
by Frank Kirschner 18 Oct '24

18 Oct '24

Hi there, I have setup a replication between two dovecot servers. It seems working: # doveadm replicator status '*' && doveadm replicator dsync-status && doveadm replicator status username priority fast sync full sync success sync failed ******************** none 00:59:22 18:50:17 18:21:25 - ********************low 01:54:26 18:57:58 - y ********************none 21:42:55 21:47:55 21:36:24 - ******************** none 21:14:57 21:51:07 21:33:13 - ********************none 21:13:52 21:51:04 21:17:57 - ********************none 00:04:23 01:29:24 - y ********************none 02:34:15 21:56:23 02:34:15 - ******************** none 00:03:56 18:55:17 - y ********************none 01:18:42 01:18:42 19:18:46 - ********************none 21:20:04 21:24:46 21:43:49 - ********************none 00:05:13 00:09:36 21:47:55 - ********************none 00:16:50 18:55:17 18:45:57 - ********************none 00:04:23 18:55:17 38:07:24 y username type status - Not connected - Not connected - Not connected ********************normal Waiting for dsync to finish - Not connected Queued 'sync' requests 0 Queued 'high' requests 0 Queued 'low' requests 1 Queued 'failed' requests 0 Queued 'full resync' requests 0 Waiting 'failed' requests 3 Total number of known users 13 But on the one server, I found this errors repeating and this users are at the list above marked as failed: Oct 18 09:41:08 dsync-local(1(a)tld.de): Error: Couldn't lock /srv/mail/mail_storage/tld.de/1/.dovecot-sync.lock: fcntl(/srv/mail/mail_storage/tld.de/1/.dovecot-sync.lock, write-lock, F_SETLKW) locking failed: Timed out after 30 seconds (WRITE lock held by pid 71613) The directory shows: # ls -la /srv/mail/mail_storage/celebrate.de/1/ | grep '\.dove' drwxrwxrwx 5 vpostfix vpostfix 4096 Oct 18 08:55 .dovecot -rw------- 2 vpostfix vpostfix 0 Oct 18 09:37 .dovecot-sync.lock -rwxrwxrwx 1 vpostfix vpostfix 912 Mar 20 2023 .dovecot.sieve.log -rwxrwxrwx 1 vpostfix vpostfix 275 Oct 11 00:00 .dovecot.svbin So it seems, that there are more processes want accessing same locking file. But normally this and other files should not exist there: # ls -la /srv/mail/mail_storage/celebrate.de/fk/ | grep '\.index' -rw-rw-rw- 1 vpostfix vpostfix 194008 Oct 17 12:26 dovecot.index -rwxrwxrwx 1 vpostfix vpostfix 16890796 Oct 17 14:20 dovecot.index.cache -rw-rw-rw- 1 vpostfix vpostfix 7420 Oct 17 14:04 dovecot.index.log -rwxrwxrwx 1 vpostfix vpostfix 32824 Oct 17 11:46 dovecot.index.log.2 -rwxrwxrwx 1 vpostfix vpostfix 5752 Oct 9 05:14 dovecot.list.index -rwxrwxrwx 1 vpostfix vpostfix 7556 Oct 9 09:32 dovecot.list.index.log In my config, I have set: mail_location = maildir:~:VOLATILEDIR=/dev/shm/dovecot/%2.256Nu/%u:INDEX=/opt/dovecot/%2.256Nu/%u:ITERINDEX But below /dev/shm/dovecot and /opt/dovecot, directories and files are generated too Following my config and hoping for some useful hints: # dovecot -n # 2.2.36 (1f10bfa63): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.24 (124e06aa) # OS: Linux 5.15.149-1-pve x86_64 CentOS Linux release 7.9.2009 (Core) # Hostname: host.tld.de disable_plaintext_auth = no doveadm_password = # hidden, use -P to show it first_valid_uid = 1000 imap_id_send = lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes lmtp_save_to_detail_mailbox = yes log_path = /var/log/dovecot.log mail_fsync = always mail_full_filesystem_access = yes mail_gid = 1000 mail_home = /srv/mail/mail_storage/%d/%n mail_location = maildir:~:VOLATILEDIR=/dev/shm/dovecot/%2.256Nu/%u:INDEX=/opt/dovecot/%2.256Nu/%u:ITERINDEX mail_plugins = " notify replication" mail_privileged_group = vpostfix mail_uid = 1000 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext vacation-seconds mbox_write_locks = fcntl mmap_disable = yes namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Spam { auto = subscribe special_use = \Junk } mailbox Trash { special_use = \Trash } prefix = } passdb { args = scheme=CRYPT username_format=%u /etc/dovecot/users driver = passwd-file } plugin { mail_replica = tcp:192.168.130.192:4711 recipient_delimiter = + replication_full_sync_interval = 1 hour replication_sync_timeout = 10 sieve = file:~/sieve;active=~/.dovecot.sieve sieve_before = /etc/dovecot/spam-global.sieve sieve_extensions = +vacation-seconds sieve_vacation_default_period = 1d sieve_vacation_max_period = 30d sieve_vacation_min_period = 0 sieve_vacation_use_original_recipient = yes } protocols = imap pop3 lmtp sieve service aggregator { fifo_listener replication-notify-fifo { mode = 0666 user = vpostfix } unix_listener replication-notify { mode = 0666 user = vpostfix } } service auth { inet_listener { address = 192.168.130.191 port = 3659 } unix_listener /var/spool/postfix/private/auth { group = vpostfix mode = 0666 user = vpostfix } unix_listener auth-userdb { group = vpostfix mode = 0600 user = vpostfix } } service config { unix_listener config { user = vpostfix } } service doveadm { inet_listener { port = 4711 } user = vpostfix } service imap-login { process_min_avail = 1 service_count = 1 } service lmtp { inet_listener lmtp { address = 192.168.130.191 port = 24 } } service managesieve-login { inet_listener sieve { port = 4190 } } service replicator { process_min_avail = 1 unix_listener replicator-doveadm { mode = 0666 user = vpostfix } } ssl_cert = </opt/fullchain.pem ssl_cipher_list = ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA:!AES256-SHA:AES:CAMELLIA:!CAMELLIA128-SHA:!DHE-RSA-CAMELLIA128-SHA:!CAMELLIA256-SHA:!DHE-RSA-CAMELLIA256-SHA ssl_key = # hidden, use -P to show it ssl_prefer_server_ciphers = yes userdb { args = username_format=%u /etc/dovecot/users driver = passwd-file } protocol lmtp { mail_plugins = " notify replication sieve" } protocol lda { mail_plugins = " notify replication sieve" } protocol imap { mail_max_userip_connections = 10 mail_plugins = " notify replication quota imap_quota" }

2 2

Sieve script error when quota is full
by Kosti 18 Oct '24

18 Oct '24

Hello. My sieve script gives an error; "failed with unsuccessful implicit keep". Here is maillog file output; (Yes my user does has quota exceeded, but is this the issue for the sieve script and is it normal for the script give such output?) postfix dovecot: lda(me(a)mydomain.com)<50709><iEd4O9YLDGcVxgAA/dJgOw>: sieve: msgid=<x(a)jol.mysite.com>: failed to store into mailbox 'INBOX': Quota exceeded (mailbox for user is full) postfix dovecot: lda(me(a)mydomain.com)<50709><iEd4O9YLDGcVxgAA/dJgOw>: sieve: Execution of script /etc/dovecot/sieve/default.sieve failed with unsuccessful implicit keep postfix dovecot: lda(me(a)mydomain.com)<50709><iEd4O9YLDGcVxgAA/dJgOw>: msgid=<x(a)jol.mysite.com>: rejected: Quota exceeded (mailbox for user is full) And /etc/dovecot/sieve/default.sieve file contains: require ["fileinto"]; if header :contains "X-Spam" "Yes" { fileinto "Junk"; stop; } Any idea would be much appreciated. Best regards.

1 0

Piegeonhole and PATH variable
by Julien Salort 18 Oct '24

18 Oct '24

Hello, I have a dovecot-sieve rule that has been working fine for years which calls sa-learn whenever a message is moved from or to the Junk folder. Recently, but I don't know when it started exactly, this no longer works. I get the following error message in mail.log: dovecot: imap: Error: Use of uninitialized value $ENV{"PATH"} in split at /usr/lib/x86_64-linux-gnu/perl-base/File/Spec/Unix.pm line 136. Error: program exec:/usr/lib/dovecot/sieve-pipe/sa-learn-spam.sh (2526990): Forcibly terminated with signal 15 Error: sieve: failed to pipe message to program `sa-learn-spam.sh': refer to server log for more information. [2024-10-16 10:16:51] Error: sieve: Execution of script /usr/lib/dovecot/sieve-pipe/report-spam.sieve failed The content of report-spam.sieve is require ["vnd.dovecot.pipe", "copy", "imapsieve", "environment", "variables"]; if environment :matches "imap.user" "*" { set "username" "${1}"; } pipe :copy "sa-learn-spam.sh" [ "${username}" ]; So my guess is that one of the require on the first line triggers this Unix.pm, and it fails because somehow the PATH variable is not set in this context. However, I am at a complete loss to determine how to change the environment variable in the context of dovecot-sieve. And also, I am not sure why this would be required. Does somebody know how to fix this problem, or alternatively point me to the relevant part in the documentation? Thanks, Julien

2 2

log: msgid= followed by space
by A. Schulze 18 Oct '24

18 Oct '24

Hello, I noted today unexpected spaces after 'msgid=' in the logs, dovecot-2.3.21.1 produce. First time a message from outlook was under inspection but I found also other sources. there was one (unanswered) question in the list archive, that may be related: https://dovecot.org/mailman3/archives/list/dovecot@dovecot.org/thread/JU3S2… here are some samples: lmtp(user@example)<22995><RtRIK/YvEWfTWQAAf9UaAw>: Info: save: box=INBOX/ietf/folder1/, uid=14143, msgid= <172917948321.1404061.2617721779338535905@dt-datatracker-78dc5ccf94-w8wgc>, size=7904 lmtp(user2(a)example.org)<23156><0cjVE809EWd0WgAAf9UaAw>: Info: save: box=INBOX/foo, uid=2632, msgid= <AM0PR06MB4100D06FAD74B7B33BFFDAA395472(a)AM0PR06MB4100.eurprd06.prod.outlook...., size=16755 But there are also "good" logs without the space for messages to other folders but same source (IETF in this case) lmtp(user@example)<23143><bhcjK288EWdnWgAAf9UaAw>: Info: save: box=INBOX/ietf/folder2/, uid=567, msgid=<62424081-d68e-4334-b9a2-a62d0759cea3(a)gulbrandsen.priv.no>, size=11394 I've no older logs to check if that happened also before updating to 2.3.21.1 Andreas

2 2

replicator: Panic: data stack: Out of memory when allocating 275GB
by Sergej Pupykin 15 Oct '24

15 Oct '24

Hello, I found similar reports in this ML with values less than mine but was not able to find the solution. I checked size of all dovecot.* files in /var/mail and it is less than 10Gb. Whole /var/mail dir is 1.8Tb. With vsz_limit it crashes much earlier, this log with 275GB produced by setting vsz_limit = 0 Server has 192GB of RAM, can it be some bug? Oct 14 15:51:59 mailserver dovecot[826177]: replicator: Panic: data stack: Out of memory when allocating 274877906984 bytes Oct 14 15:51:59 mailserver dovecot[826177]: replicator: Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(backtrace_append+0x48) [0x76ac1505e188] -> /usr/lib/dovecot/libdovecot.so.0(backtrace_get+0x25) [0x76ac1505e305] -> /usr/lib/dovecot/libdovecot.so.0(+0x106312) [0x76ac1506c312] -> /usr/lib/dovecot/libdovecot.so.0(+0x1063b5) [0x76ac1506c3b5] -> /usr/lib/dovecot/libdovecot.so.0(+0x4c571) [0x76ac14fb2571] -> /usr/lib/dovecot/libdovecot.so.0(+0x4bbc4) [0x76ac14fb1bc4] -> /usr/lib/dovecot/libdovecot.so.0(+0xfee30) [0x76ac15064e30] -> /usr/lib/dovecot/libdovecot.so.0(+0x1288c1) [0x76ac1508e8c1] -> /usr/lib/dovecot/libdovecot.so.0(+0xfa870) [0x76ac15060870] -> /usr/lib/dovecot/libdovecot.so.0(+0xfa8f1) [0x76ac150608f1] -> /usr/lib/dovecot/libdovecot.so.0(buffer_append+0x60) [0x76ac15060c00] -> dovecot/replicator(replicator_queue_push+0x163) [0x58a11fac0a53] -> dovecot/replicator(+0x4e9d) [0x58a11fabfe9d] -> dovecot/replicator(+0x4ed8) [0x58a11fabfed8] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handle_timeouts+0x15f) [0x76ac1508381f] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0xd6) [0x76ac15085296] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0x58) [0x76ac15083ae8] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x49) [0x76ac15083ce9] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x20) [0x76ac14fed6a0] -> dovecot/replicator(main+0x1a5) [0x58a11fabe865] -> /usr/lib/libc.so.6(+0x25e08) [0x76ac14d90e08] -> /usr/lib/libc.so.6(__libc_start_main+0x8c) [0x76ac14d90ecc] -> dovecot/replicator(_start+0x25) [0x58a11fabe925]

3 3

How to deactivate "!include conf.d/auth-system.conf.ext" without touching "/etc/dovecot/conf.d/10-auth.conf"?
by postfix_dovecot＠gmx.de 14 Oct '24

14 Oct '24

Hello, I want to deactivate the auth-system.conf.ext because it slows down the system and makes no sense because I utilize passwdfile.conf.ext. I have put all my configurations into the local.conf file, and all the original configuration files remain untouched. I want to stay on this path because that way I know where I made changes, and updates won't cause me any hassle. But how can I deactivate an option that was activated in the original configuration files?" Jens

3 8

Error working with IMAP . Error code: 9 Server response: Logged In
by bdn＠hettich.ru 14 Oct '24

14 Oct '24

my program sends messages via Dovecot + Postfix . Sometimes it can try to send more than 300 messages at one time. The result is a message: Error working with IMAP . Error code: 9 Server response: Logged In What could it be? a limitation? what? and I don't see any specifics in the logs

2 2

LMTP error reading configuration
by DaLynX 12 Oct '24

12 Oct '24

Hello, I am getting the following error on my dovecot LMTP server, upon delivery from my postfix mailserver: Oct 6 03:31:09 m dovecot[36551]: lmtp: Fatal: Error reading configuration: read(/var/run/dovecot/config) failed: read(size=8192) failed: Interrupted system call - Also failed to read config by executing doveconf: /var/run/dovecot/config is a UNIX socket (path is from CONFIG_FILE environment) This results in mail being deferred by postfix (different host), and successfully delivered at the next try: Oct 6 03:31:10 mailer postfix/lmtp[44835]: 46F0BA329: to=<d(a)l.ynx.fr>, orig_to=<root>, relay=192.168.1.101[192.168.1.101]:24, delay=17, delays=0.2/0.01/16/0, dsn=4.4.2, status=deferred (lost connection with 192.168.1.101[192.168.1.101] while receiving the initial server greeting) Any idea where it comes from? I am running dovecot 2.3.21.1 (d492236fa0) on FreeBSD 14.1-RELEASE-p5. Here is my configuration: # 2.3.21.1 (d492236fa0): /usr/local/etc/dovecot/dovecot.conf # Pigeonhole version 0.5.21.1 (49005e73) # OS: FreeBSD 14.1-RELEASE-p3 amd64 # Hostname: m.ynx.fr mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { auto = create special_use = \Trash } prefix = } passdb { args = scheme=CRYPT username_format=%u /usr/local/etc/dovecot/users driver = passwd-file } protocols = imap lmtp sieve service auth { inet_listener { port = 144 } } service lmtp { inet_listener lmtp { port = 24 } user = vmail } service managesieve-login { inet_listener sieve { port = 4190 } } ssl = no userdb { args = uid=vmail gid=vmail home=/home/vmail/%u driver = static } protocol lmtp { mail_plugins = " sieve" } protocol imap { mail_max_userip_connections = 100 } Kind regards, D

3 2

last_login plugin does not update IP
by Maciej Polewczyński 11 Oct '24

11 Oct '24

When using the last_login plugin I noticed that the IP address information is not updated. If there is no entry in the sql database for a given user, the first time the login date and time information and the IP address will be saved. Each subsequent login only updates the date and time. The IP address remains unchanged. Example configuration for pop3 service: map { pattern = shared/last-login/pop3/$user/$rip table = last_login value_field = last_pop3_access value_type = uint fields { userid = $user last_pop3_ip = $rip } } This is translated into the following sql command: INSERT INTO last_login (last_pop3_access,userid,last_pop3_ip) VALUES (1727691183673,'test','1.2.3.4') ON DUPLICATE KEY UPDATE last_pop3_access=1727691183673 You can see that after "ON DUPLICATE KEY" only the time is updated. Is there any way to influence the behavior of the plugin and the sql query so that the IP address is also updated? I'm using Dovecot v2.3.4 -- Best regards, Maciej Polewczyński Do or do not. There is no try.

3 3

Bug Report: Missing parent folders will cause some clients to not retrieve messages
by Brendon Meyer 09 Oct '24

09 Oct '24

Morning/Evening All, This is a general bug report but it applies to most versions of Dovecot that I have tested to date. I tried to find a previous case where something like this has been reported and for the life of me, I can't find one so if I am duplicating an existing bug report - please let me know. The server platform I am using is FreeBSD 14.1-STABLE (custom build) but that really doesn't have much of a bearing as I was able to recreate the problem on Linux as well as different FreeBSD versions and on different architectures going back as FreeBSD 12 under SPARC). Dovecot version is dovecot-2.3.21_6, but I have tried earlier versions as well and the behaviour is pretty consistent. Apple mail versions are multiple, but in the example I put forward below, I am specifically talking about v12.4 which came with OSX 10.14.6 (last release of Mojave). You get the same behaviour out of later versions of Apple mail that come with later relesaes of OSX/MacOS Thunderbird versions are multiple, but in the example I put forward I am using 115.15.0 (64-bit) under Linux. The behaviour is consistent with earlier versions as well as different platforms (such as Thunderbird on OSX, and Windows). Description of problem: When creating subfolders with tools such as imapfilter, if the parent of the subfolder does not exist, Dovecot will allow that folder to be created, and the tool will allow you to populate that folder with messages. The issue then rears it ugly head when you say use Thunderbird and the messages in this subfolder are not visible. This behaviour is not limited to Thunderbird (e.g. Outlook) but I am using Thunderbird as an example here. Oddly enough, the Apple mail client is *not* impacted in quite the same way (though it is impacted but the behaviour is very subtly different). Allow me to explain with a practical example as to what is happening, and I will parts of my *actual* config here to highlight the issue. I have a imapfilter task that routinely archives messages from the likes of "Sent". Easy enough. It takes each message and drops it in an Archives/sent-mail folder with the year as a parent and then inside that is the subfolders of YYYY-MM with the individual months. So looking at it, it looks something like this: Archives/sent-mail/YYYY/YYYY-MM The generated imapfilter rule that is used looks something like this: sent_202312_bgm = bgm['Sent']:sent_since('01-Dec-2023') * bgm['Sent']:sent_before('01-Jan-2024') sent_202312_bgm:move_messages(bgm['Archives/sent-mail/2023/2023-12']) This is all pretty simple - if the folder "Archives/sent-mail/2023/2023-12" does not exist it will create it and when done, it will then populate the folder with messages from "Sent". The issue is that if the "2023" parent folder does not exist, then some mail clients (as identified above - Thunderbird is an example) will never sync that mail. The workaround is to manually create the YYYY parent folders so that when imapfilter runs and creates the YYYY-MM subfolders then they are visible. I said that Apple mail is a weird edge case example. Its behaviour is not exactly simple or consistent either when missing parent folders, but you at least get some visual idea that something is wrong. Screenshots are probably doing going to come across very well in a forum group but allow me to describe what you see in Apple mail. In Apple mail, if the parent folder exists (for example say I use the year 2019), then see the subfolder in a "grey" colour with the name next to it and all is good. This folder *is* visible to Thunderbird and all the Apple mail functionality works. If the parent folder does *NOT* exist, this is where it gets a little weird. In my example, I have a year of 2023. That parent folder does *NOT* exist. That means that if you look at the Thunderbird view of the Archives/send-mail, you don't see a 2023 parent folder. Apple Mail *DOES* see the parent *BUT* two things are a bit off about it. #1. When you look at the folder in Apple mail, instead of being grey, it appears as a white colour. You can drill into the folder and see the YYYY-MM subfolders inside, but generally it doesn't appear to "work consistently". #2. Searches don't work correctly. Manually renaming the subfolders in Apple mail, then manually creating a parent folder and then moving everything back restores full functionality and also means that other mail clients such as Thunderbird for example will then see all the 2023 subfolders (e.g. 2023-01, 2023-02, etc). So ... is this a bug in Dovecot? If so ... has it been previously reported and if not, do I get a bug named after me? :P /BGM

4 4

aliases
by Сергей Сергей 09 Oct '24

09 Oct '24

Hello. Tell me how to set up mail aliases so that mail from one mailbox is forwarded to another mailbox. What configs need to be edited and what to enter. Thank you

3 3

LAYOUT=index requires mailbox_list _index=yes
by Marc 07 Oct '24

07 Oct '24

I am adding a namespace with LAYOUT=index to an existing configuration, and get this notification: LAYOUT=index requires mailbox_list_index=yes Maybe better to just not risk it and add LAYOUT=fs to my existing mail_location=mdbox: lines?

1 0

Namespace for seperate Storage of Archive
by Christian Großegger 05 Oct '24

05 Oct '24

Hi everyone, I found the Solution myself. The key was to simply create an unnamed mailbox directive so that the namespace prefix directly results into an mailbox that Thunderbirds shows as the Archive. Thanks everbody on the dovecot team for making such a brilliant Software! Greetings! Christian namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = separator = / } namespace archivns { prefix = Archive/ <--- this is the Name which now appears at the same Level then Sent/Draft/... location = maildir:/mnt/mails2/%u separator = / mailbox { <--- here a name is omitted auto = subscribe special_use = \Archive } }

2 2

dovecot/Pigeonhole sieve sets seen flag
by Hadmut Danisch 05 Oct '24

05 Oct '24

Hi, I'm using dovecot, running Ubuntu 24.04 with dovecot 1:2.3.21+dfsg1-2ubuntu6 and postfix. Since Ubuntu dropped mailfilter for 24.04, I am replacing mailfilter with the sieve filter. Problem/Question: I am using something like if header :matches "Subject" "htest" { addflag "$label1"; fileinto :create "Test.${year}.${month}"; stop; } following https://doc.dovecot.org/2.3/configuration_manual/sieve/examples/ which works, but not as expected: When having the addflag, the mail is delivered as seen, i.e. put in the /cur directory of the Maildir folder. Without the addflag, it is put into /new , where it belongs to (as unseen). Why does addflag "$label1"; mark the Mail as seen? regards Hadmut (please respond directly, I am not on this list)

2 1

Helping doveadm sync detect moves between Maildir mailboxes? (reproducible example of bad behaviour)
by falsifian＠falsifian.org 02 Oct '24

02 Oct '24

Hi, Moving mail files between Maildir mailboxes often confuses doveadm sync: I end up with copies in both the original and new maildir. Exact details and script to reproduce follow. I can work around this by running doveadm move, but it does not fit well with my workflow, which is based on paths to mail files (using mblaze as my mail client). Two questions: 1. Is there anything I can do to help dovecot notice the moves, other than using doveadm move instead of just mv? I have tried liberal use of force-resync but the problem is still there. 2. Is this a bug? Details: OS: OpenBSD current $ dovecot --version 2.3.21.1 (d492236fa0) config: My repro script below uses a one-line config, only setting mail_location. (An OpenBSD 7.5 server running Dovecot 2.3.21 is involved in my real setup, but I was able to reproduce it locally without the server involved.) To reproduce: (shell script follows) - Make two maildirs "a" and "b", each with a subfolder ".Archive". - Manually write a mail file to a/cur. - doveadm sync - force-resync everything - manually move the file to a/.Archive/cur - force-resync everything again - doveadm sync - Now the mail file appears four times: in a, a/.Archive, b, and b/.Archive. Script to do the above follows my signature. -- James #!/bin/sh set -e # Run in a new directory with two maildirs named a and b and a simple config. mkdir bug; cd bug mkdir -p {a,b}/{,.Archive/}{cur,new,tmp} cat > dovecot.conf <<EOF mail_location=maildir:$PWD/a EOF # Deliver an email and sync. EXAMPLE_ID=12345.R67890.example.com cat > a/cur/$EXAMPLE_ID:2, <<EOF some email EOF doveadm -c dovecot.conf sync maildir:b # Move the email and sync again. Run force-resync between steps in case it helps. doveadm -c dovecot.conf force-resync INBOX doveadm -c dovecot.conf force-resync Archive doveadm -c dovecot.conf -o mail_location=maildir:$PWD/b force-resync INBOX doveadm -c dovecot.conf -o mail_location=maildir:$PWD/b force-resync Archive mv a/cur/$EXAMPLE_ID* a/.Archive/cur doveadm -c dovecot.conf force-resync INBOX doveadm -c dovecot.conf force-resync Archive doveadm -c dovecot.conf -o mail_location=maildir:$PWD/b force-resync INBOX doveadm -c dovecot.conf -o mail_location=maildir:$PWD/b force-resync Archive doveadm -c dovecot.conf sync maildir:b echo in a: doveadm -c dovecot.conf -fflow fetch 'mailbox guid' all echo echo in b: doveadm -c dovecot.conf -fflow -o mail_location=maildir:$PWD/b fetch 'mailbox guid' all

2 4

Namespace for seperate Storage of Archive
by Christian Großegger 30 Sep '24

30 Sep '24

Hi everyone, I would like to move the "Archives" Folder for every user from my default storage to another storage in the backend, while maintaining the current frontend view of the IMAP Mailboxstructure. Because I didn't manage to get it to work properly on my production server, I made a separate Testserver. My problem is, that I don't know what to put in the "prefix" section of the Namespace, so that the Archive Folder is on the same folder/mailbox hierarchy level as the ones in the default namespace (Sent Messages, Drafts ...). I have read the Namespace RFC (rfc2342) and there is one example which uses the Tilde ~ Character as the Namespace prefix - put the rfc doesn't address the tilde, it only has it in one of the examples (Example 5.4). Because ~ often means 'base folder' I thought this would work. But it doesn't. The Thunderbird client shows: Rootdir/Sent but Rootdir/~/Archive I am aware I can solve this with symlinks, but I would like to do it properly with namespaces. Could you please tell me what I am missing? In case this is an Thunderbird Issue, could you please point out, what I don't understand? Thank you! Kind Regards Christian dovecot --version 2.3.19.1 (9b53102964) dovecot -n # 2.3.19.1 (9b53102964): /etc/dovecot/dovecot.conf # Pigeonhole version 0.5.19 (4eae2f79) # OS: Linux 6.1.0-25-amd64 x86_64 Debian 12.7 # Hostname: mailserver.lan auth_debug = yes auth_mechanisms = plain login auth_verbose = yes debug_log_path = /var/log/dovecot/debug.log disable_plaintext_auth = no info_log_path = /var/log/dovecot/info.log log_path = /var/log/dovecot/error_or_warn.log mail_gid = user mail_home = /mnt/mails/%u mail_location = maildir:~/Maildir mail_uid = user namespace archivns { inbox = no location = maildir:/mnt/mails2/%u mailbox Archive { auto = subscribe special_use = \Archive } prefix = ~/ separator = / } namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = separator = / } passdb { args = /etc/dovecot/passwd driver = passwd-file } protocols = imap service imap-login { inet_listener imap { port = 143 } } ssl = no userdb { args = /etc/dovecot/passwd driver = passwd-file }

2 1

Remove hard-coded paths in doc/solr-config-9.xml
by Saman Ghannadzadeh 30 Sep '24

30 Sep '24

Hi, Dovecote includes a config file for use with Solr 9, at 'doc/solr-config-9.xml'. However, this file has two problems: - it hard codes the path to the Solr installation - it hard codes version numbers of Icu/Lucene packages This issue can be be easily fixed by using the '${solr.install.dir}' variable in that config file. The attached patch will fix both issues. Best wishes, Saman Ghannadzaded diff -crB a/doc/solr-config-9.xml b/doc/solr-config-9.xml *** a/doc/solr-config-9.xml 2024-09-29 20:50:42.873229769 +0100 --- b/doc/solr-config-9.xml 2024-09-29 20:58:53.507638810 +0100 *************** *** 75,82 ****   ! <lib dir="/opt/solr/modules/analysis-extras/lib" regex="icu4j-70.1.jar"/> ! <lib dir="/opt/solr/modules/analysis-extras/lib" regex="lucene-analysis-icu-9.8.0.jar"/>   ! <lib dir="${solr.install.dir}/modules/analysis-extras/lib" regex="icu4j-.*\.jar"/> ! <lib dir="${solr.install.dir}/modules/analysis-extras/lib" regex="lucene-analysis-icu-.*\.jar"/> <!-- an exact 'path' can be used instead of a 'dir' to specify a specific jar file. This will cause a serious error to be logged if it can't be loaded.

1 0

Dovecot trying to fetch a directory that contains a typo, couldn't figure out where to fix it
by Yassine Chaouche 29 Sep '24

29 Sep '24

Dear list, I am encountering an unusual issue where Thunderbird is incorrectly accessing my "Messagerie" folder. While there are no visible errors within Thunderbird, Dovecot logs reveal several permission-denied messages linked to the folder structure. Sep 29 16:45:20 imap(a.chaouche(a)domain.tld): Debug: acl vfile: file /var/vmail/domain.tld/a.chaouche/dovecot/../.Messagerie/dovecot-acl not found Sep 29 16:45:20 imap(a.chaouche(a)domain.tld): Error: open(/var/vmail/domain.tld/a.chaouche/dovecot/../.Messagerie/cur/-Tlevel=matching) failed: Permission denied (euid=1001(vmail) egid=1001(vmail) missing +r perm: /var/vmail/a lgerian-radio.dz/a.chaouche/dovecot/../.Messagerie/cur/-Tlevel=matching) Sep 29 16:45:20 imap(a.chaouche(a)domain.tld): Error: open(/var/vmail/domain.tld/a.chaouche/dovecot/../.Messagerie/cur/-Tlevel=matching) failed: Permission denied (euid=1001(vmail) egid=1001(vmail) missing +r perm: /var/vmail/a lgerian-radio.dz/a.chaouche/dovecot/../.Messagerie/cur/-Tlevel=matching) Sep 29 16:45:20 imap(a.chaouche(a)domain.tld): Info: Disconnected: Internal error occurred. Refer to server log for more information. [2024-09-29 16:45:20] in=1215 out=278901 Sep 29 16:45:20 imap(a.chaouche(a)domain.tld): Debug: acl vfile: file /var/vmail/domain.tld/a.chaouche/dovecot/../.Drafts/dovecot-acl not found Notably, the path includes a suspicious "-Tlevel=matching" string, which seems to have originated from a typo during the use of a sieve-test command I recently used, something like this: $ sieve-test -Tlevel=matching ../../dovecot/sieve/perso.sieve ./1727184793.M761376P16269.messagerie-prep\,S=4871\,W=5001\:2\,Sb -t - Despite a thorough search on all the Dovecot configuration directory, no such entry for "matching" exists. root(a)messagerie-prep[10.10.10.19] /var/vmail/algerian-radio.dz/a.chaouche # grep matching -r dovecot/ root(a)messagerie-prep[10.10.10.19] /var/vmail/algerian-radio.dz/a.chaouche # This issue appears exclusive to Thunderbird, as the webmail client Roundcube functions normally, indicating a client-specific error. Any insights on resolving this discrepancy would be greatly appreciated. Config below: doveconf -n root(a)messagerie-prep[10.10.10.19] /var/vmail/algerian-radio.dz/a.chaouche # doveconf -n # 2.2.13: /etc/dovecot/dovecot.conf # OS: Linux 3.16.0-6-amd64 x86_64 Debian 8.11 auth_mechanisms = plain login auth_verbose = yes deliver_log_format = <%f>:%s %$ disable_plaintext_auth = no log_path = /var/log/dovecot.log login_log_format_elements = user=<%u> method=%m rip=%r lip=%l lport=%a service=%s ssl=%k mail_debug = yes mail_location = Maildir:~/../ mail_plugins = " quota acl notify mail_log" managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave editheader namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = INBOX. separator = . } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { acl = vfile mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename append mail_log_fields = uid box msgid from subject quota = maildir:User quota quota_status_nouser = DUNNO quota_status_overquota = 552 5.2.2 Mailbox is full quota_status_success = DUNNO quota_warning = storage=95%% quota-socket 95 %u quota_warning2 = storage=80%% quota-socket 80 %u sieve = ~/.dovecot.sieve sieve_before = /var/vmail/mailfilters/spam.sieve sieve_before2 = ~/backup.sieve sieve_dir = ~/sieve sieve_extensions = +editheader sieve_global_dir = /var/vmail/mailfilters/ sieve_max_redirects = 0 } postmaster_address = root(a)algerian-radio.dz protocols = " imap lmtp sieve pop3" service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } } service imap-postlogin { executable = script-login /var/vmail/mailfilters/postlogin user = root } service imap { executable = imap } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } service quota-script { executable = script /root/SCRIPTS/MAIL/quotawarning.sh unix_listener quota-socket { user = vmail } user = root } service quota-status { client_limit = 1 executable = quota-status -p postfix unix_listener /var/spool/postfix/private/quota-status-socket { group = postfix mode = 0600 user = postfix } } ssl_cert = </etc/ssl/certs/algerian-radio.dz.pub ssl_key = </etc/ssl/private/algerian-radio.dz.priv userdb { args = uid=vmail gid=vmail home=/var/vmail/%d/%n/dovecot default_fields = plain_pass=%w driver = static } protocol lmtp { mail_plugins = " quota acl notify mail_log sieve quota" } protocol imap { mail_plugins = " quota acl notify mail_log imap_quota imap_acl" } local_name mail.radioalgerie.dz { ssl_cert = </etc/ssl/radioalgerie.pub ssl_key = </etc/ssl/private/radioalgerie.priv } doveconf # 2.2.13: /etc/dovecot/dovecot.conf # OS: Linux 3.16.0-6-amd64 x86_64 Debian 8.11 # NOTE: Send doveconf -n output instead when asking for help. auth_anonymous_username = anonymous auth_cache_negative_ttl = 1 hours auth_cache_size = 0 auth_cache_ttl = 1 hours auth_debug = no auth_debug_passwords = no auth_default_realm = auth_failure_delay = 2 secs auth_gssapi_hostname = auth_krb5_keytab = auth_master_user_separator = auth_mechanisms = plain login auth_proxy_self = auth_realms = auth_socket_path = auth-userdb auth_ssl_require_client_cert = no auth_ssl_username_from_cert = no auth_use_winbind = no auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@ auth_username_format = %Lu auth_username_translation = auth_verbose = yes auth_verbose_passwords = no auth_winbind_helper_path = /usr/bin/ntlm_auth auth_worker_max_count = 30 base_dir = /var/run/dovecot config_cache_size = 1 M debug_log_path = default_client_limit = 1000 default_idle_kill = 1 mins default_internal_user = dovecot default_login_user = dovenull default_process_limit = 100 default_vsz_limit = 256 M deliver_log_format = <%f>:%s %$ dict_db_config = director_doveadm_port = 0 director_mail_servers = director_servers = director_user_expire = 15 mins director_username_hash = %u disable_plaintext_auth = no dotlock_use_excl = yes doveadm_allowed_commands = doveadm_password = doveadm_port = 0 doveadm_socket_path = doveadm-server doveadm_worker_count = 0 dsync_alt_char = _ dsync_remote_cmd = ssh -l%{login} %{host} doveadm dsync-server -u%u -U first_valid_gid = 1 first_valid_uid = 500 hostname = imap_capability = imap_client_workarounds = imap_id_log = imap_id_send = name * imap_idle_notify_interval = 2 mins imap_logout_format = in=%i out=%o imap_max_line_length = 64 k imap_metadata = no imap_urlauth_host = imap_urlauth_logout_format = in=%i out=%o imap_urlauth_port = 143 imapc_features = imapc_host = imapc_list_prefix = imapc_master_user = imapc_max_idle_time = 29 mins imapc_password = imapc_port = 143 imapc_rawlog_dir = imapc_ssl = no imapc_ssl_verify = yes imapc_user = import_environment = TZ CORE_OUTOFMEM CORE_ERROR LISTEN_PID LISTEN_FDS info_log_path = instance_name = dovecot last_valid_gid = 0 last_valid_uid = 0 lda_mailbox_autocreate = no lda_mailbox_autosubscribe = no lda_original_recipient_header = libexec_dir = /usr/lib/dovecot listen = *, :: lmtp_address_translate = lmtp_proxy = no lmtp_rcpt_check_quota = no lmtp_save_to_detail_mailbox = no lock_method = fcntl log_path = /var/log/dovecot.log log_timestamp = "%b %d %H:%M:%S " login_access_sockets = login_greeting = Dovecot ready. login_log_format = %$: %s login_log_format_elements = user=<%u> method=%m rip=%r lip=%l lport=%a service=%s ssl=%k login_trusted_networks = mail_access_groups = mail_always_cache_fields = mail_attachment_dir = mail_attachment_fs = sis posix mail_attachment_hash = %{sha1} mail_attachment_min_size = 128 k mail_attribute_dict = mail_cache_fields = flags mail_cache_min_mail_count = 0 mail_chroot = mail_debug = yes mail_fsync = optimized mail_full_filesystem_access = no mail_gid = mail_home = mail_location = Maildir:~/../ mail_log_prefix = "%s(%u): " mail_max_keyword_length = 50 mail_max_lock_timeout = 0 mail_max_userip_connections = 10 mail_never_cache_fields = imap.envelope mail_nfs_index = no mail_nfs_storage = no mail_plugin_dir = /usr/lib/dovecot/modules mail_plugins = " quota acl notify mail_log" mail_prefetch_count = 0 mail_privileged_group = mail_save_crlf = no mail_shared_explicit_inbox = no mail_temp_dir = /tmp mail_temp_scan_interval = 1 weeks mail_uid = mailbox_idle_check_interval = 30 secs mailbox_list_index = no maildir_broken_filename_sizes = no maildir_copy_with_hardlinks = yes maildir_empty_new = no maildir_stat_dirs = no maildir_very_dirty_syncs = no managesieve_client_workarounds = managesieve_implementation_string = Dovecot Pigeonhole managesieve_logout_format = bytes=%i/%o managesieve_max_compile_errors = 5 managesieve_max_line_length = 65536 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave editheader master_user_separator = mbox_dirty_syncs = yes mbox_dotlock_change_timeout = 2 mins mbox_lazy_writes = yes mbox_lock_timeout = 5 mins mbox_md5 = apop3d mbox_min_index_size = 0 mbox_read_locks = fcntl mbox_very_dirty_syncs = no mbox_write_locks = fcntl dotlock mdbox_preallocate_space = no mdbox_purge_preserve_alt = no mdbox_rotate_interval = 0 mdbox_rotate_size = 2 M mmap_disable = no namespace inbox { disabled = no hidden = no ignore_on_failure = no inbox = yes list = yes location = mailbox Drafts { auto = no driver = special_use = \Drafts } mailbox Junk { auto = no driver = special_use = \Junk } mailbox Sent { auto = no driver = special_use = \Sent } mailbox "Sent Messages" { auto = no driver = special_use = \Sent } mailbox Trash { auto = no driver = special_use = \Trash } prefix = INBOX. separator = . subscriptions = yes type = private } passdb { args = /etc/dovecot/dovecot-sql.conf.ext default_fields = deny = no driver = sql master = no name = override_fields = pass = no result_failure = continue result_internalfail = continue result_success = return-ok skip = never } plugin { acl = vfile mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename append mail_log_fields = uid box msgid from subject quota = maildir:User quota quota_status_nouser = DUNNO quota_status_overquota = 552 5.2.2 Mailbox is full quota_status_success = DUNNO quota_warning = storage=95%% quota-socket 95 %u quota_warning2 = storage=80%% quota-socket 80 %u sieve = ~/.dovecot.sieve sieve_before = /var/vmail/mailfilters/spam.sieve sieve_before2 = ~/backup.sieve sieve_dir = ~/sieve sieve_extensions = +editheader sieve_global_dir = /var/vmail/mailfilters/ sieve_max_redirects = 0 } pop3_client_workarounds = pop3_deleted_flag = pop3_enable_last = no pop3_fast_size_lookups = no pop3_lock_session = no pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s pop3_no_flag_updates = no pop3_reuse_xuidl = no pop3_save_uidl = no pop3_uidl_duplicates = allow pop3_uidl_format = %08Xu%08Xv pop3c_host = pop3c_master_user = pop3c_password = pop3c_port = 110 pop3c_quick_received_date = no pop3c_rawlog_dir = pop3c_ssl = no pop3c_ssl_verify = yes pop3c_user = %u postmaster_address = root(a)algerian-radio.dz protocols = " imap lmtp sieve pop3" quota_full_tempfail = no recipient_delimiter = + rejection_reason = Your message to <%t> was automatically rejected:%n%r rejection_subject = Rejected: %s replication_dsync_parameters = -d -N -l 30 -U replication_full_sync_interval = 1 days replication_max_conns = 10 replicator_host = replicator replicator_port = 0 sendmail_path = /usr/sbin/sendmail service aggregator { chroot = . client_limit = 0 drop_priv_before_exec = no executable = aggregator extra_groups = fifo_listener replication-notify-fifo { group = mode = 0600 user = } group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener replication-notify { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service anvil { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = anvil extra_groups = group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 1 protocol = service_count = 0 type = anvil unix_listener anvil-auth-penalty { group = mode = 0600 user = } unix_listener anvil { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service auth-worker { chroot = client_limit = 1 drop_priv_before_exec = no executable = auth -w extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 1 type = unix_listener auth-worker { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service auth { chroot = client_limit = 0 drop_priv_before_exec = no executable = auth extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener /var/spool/postfix/private/auth { group = mode = 0666 user = } unix_listener auth-client { group = mode = 0600 user = $default_internal_user } unix_listener auth-login { group = mode = 0600 user = $default_internal_user } unix_listener auth-master { group = mode = 0600 user = } unix_listener auth-userdb { group = mode = 0666 user = $default_internal_user } unix_listener login/login { group = mode = 0666 user = } unix_listener token-login/tokenlogin { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service config { chroot = client_limit = 0 drop_priv_before_exec = no executable = config extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = config unix_listener config { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service dict { chroot = client_limit = 1 drop_priv_before_exec = no executable = dict extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener dict { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service director { chroot = . client_limit = 0 drop_priv_before_exec = no executable = director extra_groups = fifo_listener login/proxy-notify { group = mode = 00 user = } group = idle_kill = 4294967295 secs inet_listener { address = port = 0 reuse_port = no ssl = no } privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener director-admin { group = mode = 0600 user = } unix_listener director-userdb { group = mode = 0600 user = } unix_listener login/director { group = mode = 00 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service dns_client { chroot = client_limit = 1 drop_priv_before_exec = no executable = dns-client extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener dns-client { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service doveadm { chroot = client_limit = 1 drop_priv_before_exec = no executable = doveadm-server extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 1 type = unix_listener doveadm-server { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service imap-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = imap-login extra_groups = group = idle_kill = 0 inet_listener imap { address = port = 143 reuse_port = no ssl = no } inet_listener imaps { address = port = 993 reuse_port = no ssl = yes } privileged_group = process_limit = 0 process_min_avail = 0 protocol = imap service_count = 1 type = login user = $default_login_user vsz_limit = 18446744073709551615 B } service imap-postlogin { chroot = client_limit = 0 drop_priv_before_exec = no executable = script-login /var/vmail/mailfilters/postlogin extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener imap-postlogin { group = mode = 0600 user = } user = root vsz_limit = 18446744073709551615 B } service imap-urlauth-login { chroot = token-login client_limit = 0 drop_priv_before_exec = no executable = imap-urlauth-login extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = imap service_count = 1 type = login unix_listener imap-urlauth { group = mode = 0666 user = } user = $default_login_user vsz_limit = 18446744073709551615 B } service imap-urlauth-worker { chroot = client_limit = 1 drop_priv_before_exec = no executable = imap-urlauth-worker extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = imap service_count = 1 type = unix_listener imap-urlauth-worker { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service imap-urlauth { chroot = client_limit = 1 drop_priv_before_exec = no executable = imap-urlauth extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = imap service_count = 1 type = unix_listener token-login/imap-urlauth { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service imap { chroot = client_limit = 1 drop_priv_before_exec = no executable = imap extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = imap service_count = 1 type = unix_listener login/imap { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service indexer-worker { chroot = client_limit = 1 drop_priv_before_exec = no executable = indexer-worker extra_groups = group = idle_kill = 0 privileged_group = process_limit = 10 process_min_avail = 0 protocol = service_count = 0 type = unix_listener indexer-worker { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service indexer { chroot = client_limit = 0 drop_priv_before_exec = no executable = indexer extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener indexer { group = mode = 0666 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service ipc { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = ipc extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener ipc { group = mode = 0600 user = } unix_listener login/ipc-proxy { group = mode = 0600 user = $default_login_user } user = $default_internal_user vsz_limit = 18446744073709551615 B } service lmtp { chroot = client_limit = 1 drop_priv_before_exec = no executable = lmtp extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = lmtp service_count = 0 type = unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } unix_listener lmtp { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service log { chroot = client_limit = 0 drop_priv_before_exec = no executable = log extra_groups = group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = log unix_listener log-errors { group = mode = 0600 user = } user = vsz_limit = 18446744073709551615 B } service managesieve-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = managesieve-login extra_groups = group = idle_kill = 0 inet_listener sieve { address = port = 4190 reuse_port = no ssl = no } privileged_group = process_limit = 0 process_min_avail = 0 protocol = sieve service_count = 1 type = login user = $default_login_user vsz_limit = 18446744073709551615 B } service managesieve { chroot = client_limit = 1 drop_priv_before_exec = no executable = managesieve extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = sieve service_count = 1 type = unix_listener login/sieve { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service pop3-login { chroot = login client_limit = 0 drop_priv_before_exec = no executable = pop3-login extra_groups = group = idle_kill = 0 inet_listener pop3 { address = port = 110 reuse_port = no ssl = no } inet_listener pop3s { address = port = 995 reuse_port = no ssl = yes } privileged_group = process_limit = 0 process_min_avail = 0 protocol = pop3 service_count = 1 type = login user = $default_login_user vsz_limit = 18446744073709551615 B } service pop3 { chroot = client_limit = 1 drop_priv_before_exec = no executable = pop3 extra_groups = group = idle_kill = 0 privileged_group = process_limit = 1024 process_min_avail = 0 protocol = pop3 service_count = 1 type = unix_listener login/pop3 { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service quota-script { chroot = client_limit = 0 drop_priv_before_exec = no executable = script /root/SCRIPTS/MAIL/quotawarning.sh extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener quota-socket { group = mode = 0600 user = vmail } user = root vsz_limit = 18446744073709551615 B } service quota-status { chroot = client_limit = 1 drop_priv_before_exec = no executable = quota-status -p postfix extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = unix_listener /var/spool/postfix/private/quota-status-socket { group = postfix mode = 0600 user = postfix } user = vsz_limit = 18446744073709551615 B } service replicator { chroot = client_limit = 0 drop_priv_before_exec = no executable = replicator extra_groups = group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener replicator-doveadm { group = mode = 00 user = $default_internal_user } unix_listener replicator { group = mode = 0600 user = $default_internal_user } user = vsz_limit = 18446744073709551615 B } service ssl-params { chroot = client_limit = 0 drop_priv_before_exec = no executable = ssl-params extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = startup unix_listener login/ssl-params { group = mode = 0666 user = } unix_listener ssl-params { group = mode = 0666 user = } user = vsz_limit = 18446744073709551615 B } service stats { chroot = empty client_limit = 0 drop_priv_before_exec = no executable = stats extra_groups = fifo_listener stats-mail { group = mode = 0600 user = } group = idle_kill = 4294967295 secs privileged_group = process_limit = 1 process_min_avail = 0 protocol = service_count = 0 type = unix_listener stats { group = mode = 0600 user = } user = $default_internal_user vsz_limit = 18446744073709551615 B } service tcpwrap { chroot = client_limit = 1 drop_priv_before_exec = no executable = tcpwrap extra_groups = group = idle_kill = 0 privileged_group = process_limit = 0 process_min_avail = 0 protocol = service_count = 0 type = user = $default_internal_user vsz_limit = 18446744073709551615 B } shutdown_clients = yes ssl = yes ssl_ca = ssl_cert = </etc/ssl/certs/algerian-radio.dz.pub ssl_cert_username_field = commonName ssl_cipher_list = ALL:!LOW:!SSLv2:!EXP:!aNULL ssl_client_ca_dir = ssl_client_ca_file = ssl_client_cert = ssl_client_key = ssl_crypto_device = ssl_dh_parameters_length = 1024 ssl_key = </etc/ssl/private/algerian-radio.dz.priv ssl_key_password = ssl_parameters_regenerate = 0 ssl_prefer_server_ciphers = no ssl_protocols = !SSLv2 ssl_require_crl = yes ssl_verify_client_cert = no state_dir = /var/lib/dovecot stats_command_min_time = 1 mins stats_domain_min_time = 12 hours stats_ip_min_time = 12 hours stats_memory_limit = 16 M stats_session_min_time = 15 mins stats_user_min_time = 1 hours submission_host = syslog_facility = mail userdb { args = uid=vmail gid=vmail home=/var/vmail/%d/%n/dovecot default_fields = plain_pass=%w driver = static name = override_fields = result_failure = continue result_internalfail = continue result_success = return-ok skip = never } valid_chroot_dirs = verbose_proctitle = no verbose_ssl = no version_ignore = no protocol lmtp { mail_plugins = " quota acl notify mail_log sieve quota" } protocol imap { mail_plugins = " quota acl notify mail_log imap_quota imap_acl" } local_name mail.radioalgerie.dz { ssl_cert = </etc/ssl/radioalgerie.pub ssl_key = </etc/ssl/private/radioalgerie.priv } -- yassine -- sysadm +213-779 06 06 23 http://about.me/ychaouche Looking for side gigs.

2 1

TLS certificates SQL driver ?
by Andrew Mason 28 Sep '24

28 Sep '24

Hi folks, I was curious if it was possible to configure Dovecot to lookup the TLS certificate it should present in a similar way that the passdb lookups can use a driver. I have a few domains that share the same IP and I'm currently using SNI with both Dovecot and Postfix. I have pretty much all the configuration stored for each domain in a relational database , including the TLS cert that Postfix presents. If I add a new domain, I still have to add an entry to config file for dovecot i.e local_name imap.example.org { ssl_cert = </etc/ssl/certs/imap.example.org.crt ssl_key = </etc/ssl/private/imap.example.org.key } local_name imap.example2.org { ssl_cert = </etc/ssl/certs/imap.example2.org.crt ssl_key = </etc/ssl/private/imap.example2.org.key } I was hoping it was possible to use the same records in the database that I currently use for Postfix. Kind regards Andrew

1 0

Dovecot undeleteable folder?
by Benoît Panizzon 27 Sep '24

27 Sep '24

Hi Liste We are and ISP and use Dovecot. From time to time, we have customer reporting not being able to delete IMAP folder they have created. This often seems to happen when some email client is creating temporary folder on some move or copy operations. Permissions look right. I can't figure out, what goes wrong, but I can reproduce via telnet by manually issuing IMAP commands. To me it looks like Dovecot forgets about what folders exist. Is there some caching of the folder information? Is there a way to enable some debug logging of folder creation and deletion? Example: Customer has a Folder named: ARCHIV.AdministrationXXX Folder file exists and permissions look right: ./ARCHIV/AdministrationXXX d delete ARCHIV.AdministrationXXX d OK Delete completed (0.001 + 0.000 secs). Folder file is still present and can not be deleted again. Re-Connecting with a client lists the folder as present despite having been deleted. It's sort of a Schrödinger Folder. It is there but it's also not there. c create ARCHIV.AdministrationXXX c OK Create completed (0.007 + 0.000 + 0.006 secs). d delete ARCHIV.AdministrationXXX d OK Delete completed (0.006 + 0.000 + 0.005 secs). Now the Folder File is gone, showing the permissions were correct. I can do this corrective action via telnet. But most mail clients will refuse to create a Folder with the same name as an existing one. What could cause that issue and how I could try to further debug the issue? No errors, no hints in the logs. -- Mit freundlichen Grüssen -Benoît Panizzon- @ HomeOffice und normal erreichbar -- I m p r o W a r e A G - Leiter Commerce Kunden ______________________________________________________ Zurlindenstrasse 29 Tel +41 61 826 93 00 CH-4133 Pratteln Fax +41 61 826 93 01 Schweiz Web http://www.imp.ch ______________________________________________________

2 3

(无主题)
by wbw78281234 26 Sep '24

26 Sep '24

hello I encountered the following issue while compiling Dovecot on a Linux system with the Shenwei architecture in China using RPM: During the build phase, it shows: Copy Code checking whether fd passing works... no configure: error: fd passing is required for Dovecot to work The version of Dovecot I am compiling is 2.3.16, and the version of the GCC tool is 8.5.0. My spec file's build section is as follows: Copy Code %build # required for fdpass.c line 125,190: dereferencing type-punned pointer will break strict-aliasing rules %global _hardened_build 1 export CFLAGS="%{__global_cflags} -fno-strict-aliasing -fstack-reuse=none" export LDFLAGS="-Wl,-z,now -Wl,-z,relro %{?__global_ldflags}" # el6 autoconf too old to regen; use packaged files (#1082384) mkdir -p m4 autoreconf -I . -fiv # required for aarch64 support %configure \ INSTALL_DATA="install -c -p -m644" \ --with-rundir=%{_rundir}/%{name} \ --with-systemd \ --docdir=%{_docdir}/%{name} \ --disable-static \ --disable-rpath \ --with-nss \ --with-shadow \ --with-pam \ --with-gssapi=plugin \ --with-ldap=plugin \ --with-sql=plugin \ --with-pgsql \ --with-mysql \ --with-sqlite \ --with-zlib \ --with-libcap \ --with-lucene \ --with-ssl=openssl \ --with-ssldir=%{ssldir} \ --with-solr \ --with-systemdsystemunitdir=%{_unitdir} \ --with-docs \ sed -i 's|/etc/ssl|/etc/pki/dovecot|' doc/mkcert.sh doc/example-config/conf.d/10-ssl.conf make %{?_smp_mflags} # pigeonhole pushd dovecot-2*3-pigeonhole-%{pigeonholever} # required for snapshot [ -f configure ] || autoreconf -fiv [ -f ChangeLog ] || echo "Pigeonhole ChangeLog is not available, yet" >ChangeLog %configure \ INSTALL_DATA="install -c -p -m644" \ --disable-static \ --with-dovecot=../ \ --without-unfinished-features make %{?_smp_mflags} popd

3 3

dsync with vurtial folder leads to mess of msg ID
by Kirill A. Korinsky 25 Sep '24

25 Sep '24

Greetings, I have a setup with two dovecot servers and dsync replication between them. On both of them I have a virtual folders, forexample All with config: mx1# cat /etc/dovecot/virtual/All/dovecot-virtual * -Trash -Trash/* -Junk -Junk/* all All virtual folders are excluded from replication because it leads to broken replication with errors like: virtual.All can't be created. So, I have. replication_dsync_parameters = -d -l 30 -U -x virtual. Unfortently, after a couple of weeks I've noticed that msg id for the same message on the different servers aren't match. For example: mx1# doveadm fetch -u kirill(a)korins.ky 'uid' mailbox virtual.All header Message-ID 'macports/macports-ports/pull/22284/c1901369454(a)github.com' uid: 157786 mx1# doveadm fetch -u kirill(a)korins.ky 'uid' mailbox INBOX header Message-ID 'macports/macports-ports/pull/22284/c1901369454(a)github.com' uid: 5561 mx1# vs mx2# doveadm fetch -u kirill(a)korins.ky 'uid' mailbox virtual.All header Message-ID 'macports/macports-ports/pull/22284/c1901369454(a)github.com' uid: 157766 mx2# doveadm fetch -u kirill(a)korins.ky 'uid' mailbox INBOX header Message-ID 'macports/macports-ports/pull/22284/c1901369454(a)github.com' uid: 5561 mx2# as you may see msgid at INBOX are matched, but it isn't true for virtual.All, here 157786 vs 157766 So, here the question: how can I sync msg id inside virtual folder on this setup? -- wbr, Kirill

2 18

Outllok on iPhone not copying sent mesages to a Sent Items folder
by The Doctor 25 Sep '24

25 Sep '24

Anyone knows why Outlook on an iPhone will not move Sent Message to a Sent Items folder? -- Member - Liberal International This is doctor(a)nk.ca Ici doctor(a)nk.ca Yahweh, King & country!Never Satan President Republic!Beware AntiChrist rising! Look at Psalms 14 and 53 on Atheism ;

6 8

trigger/event on mailbox create / acl create possible?
by Marc 24 Sep '24

24 Sep '24

I was wondering if it is possible to execute some trigger after a mailbox is being shared so the user is automatically subscribed to it?

1 1

0000002e: 5: filter action: program indicated false result
by Marc 24 Sep '24

24 Sep '24

I am trying to modify the body of message with a global sieve script. It looks like that sieve-test does not generate this error, however I am not really able to verify the output. There does not seem to be an option to catch the output (new message) trace log 00000008: 3: finishing match with result: matched 00000029: 3: jump if result is false 00000029: 3: not jumping 0000002e: 5: filter action 0000002e: 5: execute program `sieve-command' 0000002e: 5: filter action: program indicated false result 0000005f: ## Finished executing script 'commands' require ["vnd.dovecot.execute","vnd.dovecot.filter","vnd.dovecot.debug"]; #if true if header :contains "Subject" "xxxx" { filter "sieve-command" ["-task","xxxx"]; } dovecot log (1166226): Terminated with non-zero exit code 2

2 2

empty %d value leading to wrong path to Maildir
by isb＠forscotland.com 23 Sep '24

23 Sep '24

Running i dovecot-core 1:2.3.16+dfsg1-3ubuntu2.4 arm64 secure POP3/IMAP server - core files ii dovecot-imapd 1:2.3.16+dfsg1-3ubuntu2.4 arm64 secure POP3/IMAP server - IMAP daemon ii dovecot-lmtpd 1:2.3.16+dfsg1-3ubuntu2.4 arm64 secure POP3/IMAP server - LMTP server my /etc/dovecot/users admin@TESTdomain:{PLAIN}xxxxxxxxxx:::::: My virtual mail is delivered by postfix to /home/virtualmailboxes/TESTdomain/admin/Maildir/{cur,new,tmp} BUT when I login to dovecot I see (look at >>>> below) Sep 23 03:43:17 imap-login: Info: Login: user=<admin>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, mpid=164750, TLS, session=<ze54MMEiWqZ/AAAB> Sep 23 03:43:17 imap(admin)<164750><ze54MMEiWqZ/AAAB>: Debug: Effective uid=1002, gid=118, home=/home/admin >>>Sep 23 03:43:17 imap(admin)<164750><ze54MMEiWqZ/AAAB>: Debug: Namespace inbox: type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes, subscriptions=yes location=mbox:/home/virtualmailboxes//admin >>>>Sep 23 03:43:17 imap(admin)<164750><ze54MMEiWqZ/AAAB>: Debug: mbox: INBOX defaulted to /home/virtualmailboxes//admin/inbox >>>>Sep 23 03:43:17 imap(admin)<164750><ze54MMEiWqZ/AAAB>: Debug: fs: root=/home/virtualmailboxes//admin, index=, indexpvt=, control=, inbox=/home/virtualmailboxes//admin/inbox, alt= Sep 23 03:43:17 imap(admin)<164750><ze54MMEiWqZ/AAAB>: Debug: Mailbox INBOX: Mailbox opened because: STATUS Sep 23 03:43:17 imap(admin)<164750><ze54MMEiWqZ/AAAB>: Debug: Mailbox INBOX: Mailbox opened because: SELECT Sep 23 03:43:17 imap(admin)<164750><ze54MMEiWqZ/AAAB>: Info: Disconnected: Logged out in=105 out=955 deleted=0 expunged=0 trashed=0 hdr_count=0 hdr_bytes=0 body_count=0 body_bytes=0 Sep 23 03:43:17 imap-login: Debug: SSL alert: close notify Sep 23 03:44:17 auth-worker(164599): Debug: conn unix:auth-worker (pid=164598,uid=122): Disconnected: Connection closed (fd=-1) WHERE HAS TESTdomain gone in lined flagged >>>>? Thanks Ivan

2 4

bug dir copy group permissions?
by Marc 23 Sep '24

23 Sep '24

I am not sure if this page is correct, looks at least like this g+s not ok https://doc.dovecot.org/2.3/admin_manual/filesystem_permission/ work-around is to manually create dirs mdbox mdbox/storage mdbox/mailboxes. I would think this is a bug as files seem to be created correctly. group rights are not copied on directories, resulting in getfacl #effective:--- for the acl groups just testing with rm -R -f everything below usertest6 [@ shared]# ls -ln total 4 drwxr-xr-x 4 0 0 34 Sep 23 11:50 bak drwxrwx---+ 4 10001 10001 34 Sep 23 12:18 usertest drwxrwx---+ 3 10002 10002 19 Sep 23 11:51 usertest2 drwxrwx---+ 3 10006 10006 19 Sep 23 12:37 usertest6 -rw-r--r-- 1 0 0 121 Sep 23 11:46 README where are the group rights on mdbox? [usertest6]# ls -lartn total 0 drwxr-xr-x+ 6 0 0 84 Sep 23 11:50 .. drwxrwx---+ 3 10006 10006 19 Sep 23 12:37 . drwx------+ 2 10006 10006 30 Sep 23 12:37 mdbox now group rights are back? [usertest6]# ls -lartn mdbox/ total 0 drwxrwx---+ 3 10006 10006 19 Sep 23 12:37 .. -rw-rw----+ 1 10006 10006 0 Sep 23 12:37 dovecot-acl-list drwx------+ 2 10006 10006 30 Sep 23 12:37 . trying again with g+s usertest6 [usertest6]# ls -arltn total 0 drwxr-xr-x+ 6 0 0 84 Sep 23 11:50 .. drwx--S---+ 2 10006 10006 30 Sep 23 12:48 mdbox drwxrws---+ 3 10006 10006 19 Sep 23 12:48 .

1 1

why am getting these foldertest17270834637853 / foldertest
by Marc 23 Sep '24

23 Sep '24

I am testing with sharing folders and constantly changing namespaces configs. But quite regulary I am seeing these mailboxes popup foldertest17270834637853 with sub mailbox foldertest

1 0

problems with testing shared mailbox availability
by Marc 23 Sep '24

23 Sep '24

this seems to show doveadm mailbox list -u usertest6 Trash Sent NotSpam Drafts Junk Shared UserShares UserShares/usertest UserShares/usertest/sharedtest3 UserShares/usertest/sharedtest1 UserShares/usertest/sharedtest2 INBOX But thunderbird / roundcube show nothing. Any idea's why?

2 3

Mail Backup from IMAP to POP3
by Reprobus 23 Sep '24

23 Sep '24

Hi, I'm in a situation whereas I need to backup my email from an IMAP server to a POP3 email client of my choosing. I'm hoping Dovecot can do such a task and is there a container to which I can run to set this up from ? My IMAP email server is maxed and I need to dump all the emails off the IMAP to POP3 as to clear it up. Thank You

7 11

shared mailbox not visible, acl_shared_dict stays empty
by Marc 22 Sep '24

22 Sep '24

I am creating the mailbox like this: doveadm -o mail_gid=testgroup2 mailbox create -u usertest shared/sharedtest1 I can set acl's (I think), at least the acl get produces the same. doveadm acl set -u usertest shared/sharedtest1 user=usertest6 lookup read write write-seen insert post doveadm acl get -u usertest shared/sharedtest1 However this file stays empty, I have read somewhere it should automatically be updated? acl_shared_dict = file:/tmp/shared-mailboxes.db How should I add entries manually there with: doveadm dict set file:/tmp/shared-mailboxes.db shared/sharedtest2 kempotest6 or with this syntax still???? https://www.dovecot.org/list/dovecot/2009-April/038922.html

1 1

dovecot supports filesystem acls?
by Marc 22 Sep '24

22 Sep '24

doveadm -o mail_gid=testgroup2 mailbox create -u usertest public/publictest1 public/mdbox/mailboxes) failed: Operation not permitted [@public]# getfacl mdbox/ # file: mdbox/ # owner: root # group: root user::rwx group::rwx group:testgroup2:rwx group:testgroup3:rwx mask::rwx other::---

1 0

public mailbox filesystem layout + permission best practice
by Marc 22 Sep '24

22 Sep '24

I have some issues testing public mailboxes with linux users and groups creating mailboxes for users for the first group is not really a problem: doveadm -o mail_gid=testgroup2 mailbox create -u usertest public/publictest1 doveadm -o mail_gid=testgroup2 mailbox create -u usertest6 public/publictest2 doveadm -o mail_gid=testgroup2 mailbox create -u usertest2 public/publictest3 If I remove usertest6 from testgroup2 roundcube instantly stops showing these mailboxes. However when I try to make a new public mailbox with a different group. I am getting errors. doveadm -o mail_gid=testgroup3 mailbox create -u usertest6 public/publictest4 missing +r perm: public/mdbox/storage/dovecot.map.index.log public/mdbox/storage/dovecot.map.index.log, we're not in group I have the impression I am doing something wrong here, maybe configure the namespace with different filesystem layout? I assume it is possible to work with multiple groups in one public namespace? public/ └── mdbox ├── dovecot.list.index.log ├── dovecot-uidvalidity ├── dovecot-uidvalidity.66f00cc7 ├── mailboxes │ ├── publictest1 │ │ └── dbox-Mails │ │ ├── dovecot.index.cache │ │ └── dovecot.index.log │ ├── publictest2 │ │ └── dbox-Mails │ │ ├── dovecot.index.cache │ │ └── dovecot.index.log │ ├── publictest3 │ │ └── dbox-Mails │ │ └── dovecot.index.log │ └── testthunderbird │ └── dbox-Mails │ ├── dovecot.index.cache │ └── dovecot.index.log └── storage └── dovecot.map.index.log namespace public { disabled = no type = public separator = / prefix = public/ location = mdbox:/home/popusers/public/mdbox list = yes subscriptions = no }

1 1

sieve combine or not to be combine ?
by Marc 21 Sep '24

21 Sep '24

I am cleaning a bit my sieve scripts and wondered if I should stick to this solution sieve_before = sieve_before2 = sieve_before3 = or just one sieve_before = and put all scripts in this one. What are the advantages / disadvantages of doing this?

1 0

indexer: Error: conn unix:indexer (pid=562491,uid=10003): didn't reply with a valid VERSION line
by phren＠ist-einmalig.de 20 Sep '24

20 Sep '24

Hi, A few weeks ago we moved our mailserver to a new location. On the new location we use now dovecot v2.3.19.1 insteadof v2.3.4.1. We moved the mailboxes by zipping all mailbox on the old location and unzip on the new location. Now we see an indexer error quite often: > indexer: Error: conn unix:indexer (pid=563158,uid=10005): didn't reply with a valid VERSION line: 1 0 indexer indexer Sometimes when we try to use the index for searching we just get no results. We can't really find a cause for this error on the internet. As solution we found "Just do a re-indexing." Ok, but what may cause this error? And how can we prevent this error in the future? As indexer we use lucene. Any hint is appreciated. -- Phren

1 0

dovecot lmtp delivery fails with compression enabled and mailbox stored under different os users
by jonas＠mc2.dev 20 Sep '24

20 Sep '24

# dovecot --version 2.3.21.1 (d492236fa0) Error itself(I've replaced some data like original domains/and usernames): Sep 20 14:24:08 lmtp(lxc(a)forwardusr.org)<486449><+IvZKVhb7WYxbAcAZOUKzw>: Debug: auth-master: userdb lookup(lxc(a)forwardusr.org): Started userdb lookup Sep 20 14:24:08 lmtp(lxc(a)forwardusr.org)<486449><+IvZKVhb7WYxbAcAZOUKzw>: Debug: auth-master: userdb lookup(lxc(a)forwardusr.org): auth USER input: lxc(a)forwardusr.org uid=1006 gid=12 home=/home/forwardusr/imap/forwardusr.org/lxc quota_rule=*:bytes=50M Sep 20 14:24:08 lmtp(lxc(a)forwardusr.org)<486449><+IvZKVhb7WYxbAcAZOUKzw>: Debug: auth-master: userdb lookup(lxc(a)forwardusr.org): Finished userdb lookup (username=lxc(a)forwardusr.org uid=1006 gid=12 home=/home/forwardusr/imap/forwardusr.org/lxc quota_rule=*:bytes=50M) Sep 20 14:24:08 lmtp(lxc(a)forwardusr.org)<486449><+IvZKVhb7WYxbAcAZOUKzw>: Debug: lmtp-server: conn unix:pid=492384,uid=8 [4]: rcpt lxc(a)forwardusr.org: Added userdb setting: plugin/quota_rule=*:bytes=50M Sep 20 14:24:08 lmtp(lxc(a)forwardusr.org)<486449><+IvZKVhb7WYxbAcAZOUKzw>: Debug: Effective uid=1006, gid=12, home=/home/forwardusr/imap/forwardusr.org/lxc Sep 20 14:24:08 lmtp(lxc(a)forwardusr.org)<486449><+IvZKVhb7WYxbAcAZOUKzw>: Debug: Quota root: name= backend=maildir args= Sep 20 14:24:08 lmtp(lxc(a)forwardusr.org)<486449><+IvZKVhb7WYxbAcAZOUKzw>: Debug: Quota rule: root= mailbox=* bytes=52428800 messages=0 Sep 20 14:24:08 lmtp(lxc(a)forwardusr.org)<486449><+IvZKVhb7WYxbAcAZOUKzw>: Debug: Quota grace: root= bytes=5242880 (10%) Sep 20 14:24:08 lmtp(lxc(a)forwardusr.org)<486449><+IvZKVhb7WYxbAcAZOUKzw>: Debug: Namespace inbox: type=private, prefix=, sep=., inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:~/Maildir Sep 20 14:24:08 lmtp(lxc(a)forwardusr.org)<486449><+IvZKVhb7WYxbAcAZOUKzw>: Debug: maildir++: root=/home/forwardusr/imap/forwardusr.org/lxc/Maildir, index=, indexpvt=, control=, inbox=/home/forwardusr/imap/forwardusr.org/lxc/Maildir, alt= Sep 20 14:24:08 lmtp(lxc(a)forwardusr.org)<486449><+IvZKVhb7WYxbAcAZOUKzw>: Debug: quota: quota_over_flag check: quota_over_script unset - skipping Sep 20 14:24:08 lmtp(lxc(a)forwardusr.org)<486449><+IvZKVhb7WYxbAcAZOUKzw>: Debug: User session is finished Sep 20 14:24:08 lmtp(lxc(a)site.edu)<486449><+IvZKVhb7WYxbAcAZOUKzw:R2>: Debug: auth-master: userdb lookup(lxc(a)site.edu): Started userdb lookup Sep 20 14:24:08 lmtp(lxc(a)site.edu)<486449><+IvZKVhb7WYxbAcAZOUKzw:R2>: Debug: auth-master: userdb lookup(lxc(a)site.edu): auth USER input: lxc(a)site.edu uid=1002 gid=12 home=/home/siteowner/imap/site.edu/lxc quota_rule=*:bytes=50M Sep 20 14:24:08 lmtp(lxc(a)site.edu)<486449><+IvZKVhb7WYxbAcAZOUKzw:R2>: Debug: auth-master: userdb lookup(lxc(a)site.edu): Finished userdb lookup (username=lxc(a)site.edu uid=1002 gid=12 home=/home/siteowner/imap/site.edu/lxc quota_rule=*:bytes=50M) Sep 20 14:24:08 lmtp(lxc(a)site.edu)<486449><+IvZKVhb7WYxbAcAZOUKzw:R2>: Debug: lmtp-server: conn unix:pid=492384,uid=8 [4]: rcpt lxc(a)site.edu: Added userdb setting: plugin/quota_rule=*:bytes=50M Sep 20 14:24:08 lmtp(lxc(a)site.edu)<486449><+IvZKVhb7WYxbAcAZOUKzw:R2>: Debug: Effective uid=1002, gid=12, home=/home/siteowner/imap/site.edu/lxc Sep 20 14:24:08 lmtp(lxc(a)site.edu)<486449><+IvZKVhb7WYxbAcAZOUKzw:R2>: Debug: Quota root: name= backend=maildir args= Sep 20 14:24:08 lmtp(lxc(a)site.edu)<486449><+IvZKVhb7WYxbAcAZOUKzw:R2>: Debug: Quota rule: root= mailbox=* bytes=52428800 messages=0 Sep 20 14:24:08 lmtp(lxc(a)site.edu)<486449><+IvZKVhb7WYxbAcAZOUKzw:R2>: Debug: Quota grace: root= bytes=5242880 (10%) Sep 20 14:24:08 lmtp(lxc(a)site.edu)<486449><+IvZKVhb7WYxbAcAZOUKzw:R2>: Debug: Namespace inbox: type=private, prefix=, sep=., inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:~/Maildir Sep 20 14:24:08 lmtp(lxc(a)site.edu)<486449><+IvZKVhb7WYxbAcAZOUKzw:R2>: Debug: maildir++: root=/home/siteowner/imap/site.edu/lxc/Maildir, index=, indexpvt=, control=, inbox=/home/siteowner/imap/site.edu/lxc/Maildir, alt= Sep 20 14:24:08 lmtp(lxc(a)site.edu)<486449><+IvZKVhb7WYxbAcAZOUKzw:R2>: Debug: quota: quota_over_flag check: quota_over_script unset - skipping Sep 20 14:24:08 lmtp(lxc(a)site.edu)<486449><+IvZKVhb7WYxbAcAZOUKzw:R2>: Debug: User session is finished Sep 20 14:24:08 lmtp(lxc(a)forwardusr.org)<486449><+IvZKVhb7WYxbAcAZOUKzw>: Debug: Effective uid=1006, gid=12, home=/home/forwardusr/imap/forwardusr.org/lxc Sep 20 14:24:08 lmtp(lxc(a)forwardusr.org)<486449><+IvZKVhb7WYxbAcAZOUKzw>: Debug: Quota root: name= backend=maildir args= Sep 20 14:24:08 lmtp(lxc(a)forwardusr.org)<486449><+IvZKVhb7WYxbAcAZOUKzw>: Debug: Quota rule: root= mailbox=* bytes=52428800 messages=0 Sep 20 14:24:08 lmtp(lxc(a)forwardusr.org)<486449><+IvZKVhb7WYxbAcAZOUKzw>: Debug: Quota grace: root= bytes=5242880 (10%) Sep 20 14:24:08 lmtp(lxc(a)forwardusr.org)<486449><+IvZKVhb7WYxbAcAZOUKzw>: Debug: Namespace inbox: type=private, prefix=, sep=., inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:~/Maildir Sep 20 14:24:08 lmtp(lxc(a)forwardusr.org)<486449><+IvZKVhb7WYxbAcAZOUKzw>: Debug: maildir++: root=/home/forwardusr/imap/forwardusr.org/lxc/Maildir, index=, indexpvt=, control=, inbox=/home/forwardusr/imap/forwardusr.org/lxc/Maildir, alt= Sep 20 14:24:08 lmtp(lxc(a)forwardusr.org)<486449><+IvZKVhb7WYxbAcAZOUKzw>: Debug: quota: quota_over_flag check: quota_over_script unset - skipping Sep 20 14:24:08 lmtp(lxc(a)forwardusr.org)<486449><+IvZKVhb7WYxbAcAZOUKzw>: Debug: duplicate db: Initialize Sep 20 14:24:08 lmtp(lxc(a)forwardusr.org)<486449><+IvZKVhb7WYxbAcAZOUKzw>: Debug: sieve: Pigeonhole version 0.5.21.1 (49005e73) initializing Sep 20 14:24:08 lmtp(lxc(a)forwardusr.org)<486449><+IvZKVhb7WYxbAcAZOUKzw>: Debug: sieve: include: sieve_global is not set; it is currently not possible to include `:global' scripts. Sep 20 14:24:08 lmtp(lxc(a)forwardusr.org)<486449><+IvZKVhb7WYxbAcAZOUKzw>: Debug: sieve: file storage: Storage path `/home/forwardusr/imap/forwardusr.org/lxc/sieve' not found Sep 20 14:24:08 lmtp(lxc(a)forwardusr.org)<486449><+IvZKVhb7WYxbAcAZOUKzw>: Debug: sieve: file storage: Storage path `/home/forwardusr/imap/forwardusr.org/lxc/.dovecot.sieve' not found Sep 20 14:24:08 lmtp(lxc(a)forwardusr.org)<486449><+IvZKVhb7WYxbAcAZOUKzw>: Debug: sieve: storage: No default script location configured Sep 20 14:24:08 lmtp(lxc(a)forwardusr.org)<486449><+IvZKVhb7WYxbAcAZOUKzw>: Debug: sieve: User has no personal script Sep 20 14:24:08 lmtp(lxc(a)forwardusr.org)<486449><+IvZKVhb7WYxbAcAZOUKzw>: Debug: sieve: No scripts to execute: reverting to default delivery. Sep 20 14:24:08 lmtp(lxc(a)forwardusr.org)<486449><+IvZKVhb7WYxbAcAZOUKzw>: Debug: duplicate db: Cleanup Sep 20 14:24:08 lmtp(lxc(a)forwardusr.org)<486449><+IvZKVhb7WYxbAcAZOUKzw>: Debug: Mailbox INBOX: Mailbox opened Sep 20 14:24:08 lmtp(lxc(a)forwardusr.org)<486449><+IvZKVhb7WYxbAcAZOUKzw>: Debug: Mailbox INBOX: UID 10: Opened mail because: access Sep 20 14:24:08 lmtp(lxc(a)forwardusr.org)<486449><+IvZKVhb7WYxbAcAZOUKzw>: Info: msgid=<F386DD43-FE57-4CDE-A48B-3D0945ACC98C(a)sender.domain>: saved mail to INBOX Sep 20 14:24:08 lmtp(lxc(a)site.edu)<486449><+IvZKVhb7WYxbAcAZOUKzw:R2>: Debug: Effective uid=1002, gid=12, home=/home/siteowner/imap/site.edu/lxc Sep 20 14:24:08 lmtp(lxc(a)site.edu)<486449><+IvZKVhb7WYxbAcAZOUKzw:R2>: Debug: Quota root: name= backend=maildir args= Sep 20 14:24:08 lmtp(lxc(a)site.edu)<486449><+IvZKVhb7WYxbAcAZOUKzw:R2>: Debug: Quota rule: root= mailbox=* bytes=52428800 messages=0 Sep 20 14:24:08 lmtp(lxc(a)site.edu)<486449><+IvZKVhb7WYxbAcAZOUKzw:R2>: Debug: Quota grace: root= bytes=5242880 (10%) Sep 20 14:24:08 lmtp(lxc(a)site.edu)<486449><+IvZKVhb7WYxbAcAZOUKzw:R2>: Debug: Namespace inbox: type=private, prefix=, sep=., inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:~/Maildir Sep 20 14:24:08 lmtp(lxc(a)site.edu)<486449><+IvZKVhb7WYxbAcAZOUKzw:R2>: Debug: maildir++: root=/home/siteowner/imap/site.edu/lxc/Maildir, index=, indexpvt=, control=, inbox=/home/siteowner/imap/site.edu/lxc/Maildir, alt= Sep 20 14:24:08 lmtp(lxc(a)site.edu)<486449><+IvZKVhb7WYxbAcAZOUKzw:R2>: Debug: quota: quota_over_flag check: quota_over_script unset - skipping Sep 20 14:24:08 lmtp(lxc(a)site.edu)<486449><+IvZKVhb7WYxbAcAZOUKzw:R2>: Debug: duplicate db: Initialize Sep 20 14:24:08 lmtp(lxc(a)site.edu)<486449><+IvZKVhb7WYxbAcAZOUKzw:R2>: Debug: sieve: Pigeonhole version 0.5.21.1 (49005e73) initializing Sep 20 14:24:08 lmtp(lxc(a)site.edu)<486449><+IvZKVhb7WYxbAcAZOUKzw:R2>: Debug: sieve: include: sieve_global is not set; it is currently not possible to include `:global' scripts. Sep 20 14:24:08 lmtp(lxc(a)site.edu)<486449><+IvZKVhb7WYxbAcAZOUKzw:R2>: Debug: sieve: file storage: Storage path `/home/siteowner/imap/site.edu/lxc/sieve' not found Sep 20 14:24:08 lmtp(lxc(a)site.edu)<486449><+IvZKVhb7WYxbAcAZOUKzw:R2>: Debug: sieve: file storage: Storage path `/home/siteowner/imap/site.edu/lxc/.dovecot.sieve' not found Sep 20 14:24:08 lmtp(lxc(a)site.edu)<486449><+IvZKVhb7WYxbAcAZOUKzw:R2>: Debug: sieve: storage: No default script location configured Sep 20 14:24:08 lmtp(lxc(a)site.edu)<486449><+IvZKVhb7WYxbAcAZOUKzw:R2>: Debug: sieve: User has no personal script Sep 20 14:24:08 lmtp(lxc(a)site.edu)<486449><+IvZKVhb7WYxbAcAZOUKzw:R2>: Debug: sieve: No scripts to execute: reverting to default delivery. Sep 20 14:24:08 lmtp(lxc(a)site.edu)<486449><+IvZKVhb7WYxbAcAZOUKzw:R2>: Debug: duplicate db: Cleanup Sep 20 14:24:08 lmtp(lxc(a)site.edu)<486449><+IvZKVhb7WYxbAcAZOUKzw:R2>: Debug: Mailbox INBOX: Mailbox opened Sep 20 14:24:08 lmtp(lxc(a)site.edu)<486449><+IvZKVhb7WYxbAcAZOUKzw:R2>: Info: msgid=<F386DD43-FE57-4CDE-A48B-3D0945ACC98C(a)sender.domain>: save failed to INBOX: Internal error occurred. Refer to server log for more information. [2024-09-20 14:24:08] (received-date) Sep 20 14:24:08 lmtp(lxc(a)site.edu)<486449><+IvZKVhb7WYxbAcAZOUKzw:R2>: Debug: User session is finished Sep 20 14:24:08 lmtp(lxc(a)forwardusr.org)<486449><+IvZKVhb7WYxbAcAZOUKzw>: Debug: User session is finished With error itself. Sep 20 14:24:08 lmtp(lxc(a)forwardusr.org)<486449><+IvZKVhb7WYxbAcAZOUKzw>: Error: Mailbox INBOX: stat(/home/forwardusr/imap/forwardusr.org/lxc/Maildir/new/1726831448.M70920… failed: Permission denied (euid=1002(quakeowner) egid=12(mail) missing +x perm: /home/forwardusr, dir owned by 1006:1003 mode=0710) Basically there's etc. domainA and domainB stored under different OS users. In case etc. there's alias from domainA to domainB which results in lmtp delivery with both recipients submitted in the same "lmtp session" as "batch", it seems that only one delivery happens, as by the time zlib plugin kicks in - effective user id for the process is already set to second delivery user which fails zlib(at least disabling that/removing it from mail plugins delivery/save is successful). I know that it can mitigate by modifying (in this case exim's) conf and setting batch_max to 1, which results in single submit(single RCPT TO), though still curious if that's by design? What I guess is asynchronous compression ? Or that would be considered a bug? Best Regards

1 0

Free ecards
by Amelia Marie 20 Sep '24

20 Sep '24

Free ecards from Sendwishonline.com are designed to create memorable and engaging experiences. Many cards feature interactive elements, such as animations and music, that enhance the recipient's experience. This level of creativity and engagement sets Sendwishonline.com apart, making their free ecards not just a message but a delightful experience. Visit To:- https://sendwishonline.com/en/ecards

5 5

Free ecards
by Amelia Marie 20 Sep '24

20 Sep '24

Free ecards from Sendwishonline.com are designed to create memorable and engaging experiences. Many cards feature interactive elements, such as animations and music, that enhance the recipient's experience. This level of creativity and engagement sets Sendwishonline.com apart, making their free ecards not just a message but a delightful experience. Visit To:- https://sendwishonline.com/en/ecards

1 0

User is missing UID
by Marc 19 Sep '24

19 Sep '24

sieve-test(1164123): Fatal: Couldn't drop privileges: User is missing UID (see mail_uid setting) I don't get what this is about. Users are not missing an UID and how is it related with testing sieve scripts?

2 1

sieve: Terminated with non-zero exit code 2
by Marc 18 Sep '24

18 Sep '24

What could this be, I am not even having an exit code 2 in my sieve plugin. If I cat a message via cli I am getting exit code 0. ps where are stderr messages logged of the plugin?

1 1

Re: Dovecot v2.3.21.1 released
by Aleksandr Mezin 17 Sep '24

17 Sep '24

Hello. https://www.dovecot.org/download/ still points to v2.3.21 as the latest stable release (not 2.3.21.1)

2 1

Correct permissions for global sieve scripts
by Richard 16 Sep '24

16 Sep '24

Hi there, I've set up dovecot via global sieve scripts to send mails that a user manually moved to their junk directory to rspamd to learn them as spam (and learn messages as ham if they are moved out of it). I thought I had it all properly set up, but I'm now again seeing log messages like this: Sep 15 13:01:00 dovecot[523226]: imap(username)<823661><4+8RXyYi2L9/AAAB>: Error: sieve: failed to execute to program `rspamd-learn-spam.sh': refer to server log for more information. [2024-09-15 13:01:00] Sep 15 13:01:00 dovecot[523226]: imap(username)<823661><4+8RXyYi2L9/AAAB>: Error: sieve: Execution of script /etc/dovecot/sieve/global/learn-spam.sieve failed The content of learn-spam.sieve is this: require ["vnd.dovecot.pipe", "copy", "imapsieve"]; pipe :copy "rspamd-learn-spam.sh"; And the content of rspamd-learn-spam.sh is this: #!/bin/sh exec /usr/bin/rspamc learn_spam All the necessary files are located in /etc/dovecot/sieve/global and are owned by dovecot:dovecot with rw, r, r permissions. Also, I have compiled the .sieve files with sievec, the resulting .svbin files have the same permissions and ownership. What am I doing wrong? I don't see any further "server log" that will tell me more information. I'm using dovecot 2.3.19.1 (9b53102964) on Debian 12.7 Best Richard

4 11

Allowing parallel read-only requests via doveadm http api
by Kevin Kelker 16 Sep '24

16 Sep '24

Hi, is there any chance to open the doveadm http api to handle more than one client at a time if the requests are read-only commands that have no risk of breaking something when they run simultaneously? We have a scenario of using it only for getQuota to visualize a live-status of the mailbox usage but every once in a while, there are more than one parallel requests for that that are then getting tcp connection resets. As far as I've seen it in https://dovecot.org/mailman3/archives/list/dovecot@dovecot.org/thread/PYMMJ… spawning another doveadm http api service with another port wouldn't do the trick. If that's not possible, wouldn't be a failure code as a response a more clean approach than just refusing the connection at all? Right now, it's getting logged on the dovecot backend as "doveadm server can handle only a single client" but the requesting client gets a connection reset instead of a json-type response with a failure code. Best Kevin

2 1

Selectively query folders for new emails
by Habakuk Tibatong 12 Sep '24

12 Sep '24

Hi folks, I have two questions: - Is it possible to exclude folders from being queried for new emails? I have many folders in my maildir, each of which has many sub-folders, with many sub-sub-folders. My Thunderbird logs in and then queries one folder after the other and this takes a very long time. However, there are only 5 folders into which I automatically sort emails with sieve, and I would like to query only these 5 folders. The other folders are folders into which I sort emails manually. It makes no sense to query them. How could I achieve this? - How can I exclude folders from being displayed in the subscribe window, i.e. that these folders exist, e.g. they are available but cannot be subscribed to, and therefore cannot be displayed in the email client? I plan to introduce a all-times "non-deletable" spam folder, which contains a copy of all spam emails that this user received and which I use to teach spamassassin, without the user being able to see, empty or delete this folder, and without him being able to infect himself with potentially infected emails.

3 3

Dovecot v2.3.21.1 released
by Aki Tuomi 07 Sep '24

07 Sep '24

Hi all, we are releasing a CVE patch release 2.3.21.1. https://dovecot.org/releases/2.3/dovecot-2.3.21.1.tar.gz https://dovecot.org/releases/2.3/dovecot-2.3.21.1.tar.gz.sig Binary packages in https://repo.dovecot.org/ Docker images in https://hub.docker.com/r/dovecot/dovecot Kind regards, Aki Tuomi Open-Xchange oy --- - CVE-2024-23184: A large number of address headers in email resulted in excessive CPU usage. - CVE-2024-23185: Abnormally large email headers are now truncated or discarded, with a limit of 10MB on a single header and 50MB for all the headers of all the parts of an email. - oauth2: Dovecot would send client_id and client_secret as POST parameters to introspection server. These need to be optionally in Basic auth instead as required by OIDC specification. - oauth2: JWT key type check was too strict. - oauth2: JWT token audience was not validated against client_id as required by OIDC specification. - oauth2: XOAUTH2 and OAUTHBEARER mechanisms were not giving out protocol specific error message on all errors. This broke OIDC discovery. - oauth2: JWT aud validation was not performed if aud was missing from token, but was configured on Dovecot.

5 9

~/mail/.imap
by graeme.dovecot＠vetterlein.com 05 Sep '24

05 Sep '24

the box that runs my mailsever just reported disk > 80% full , so looking to tidy up. I note: sudo du -d2 -k -x /home/graeme/mail | sort -n ... ... 66788 /home/graeme/mail/.imap/spam 198328 /home/graeme/mail/.imap 1564680 /home/graeme/mail/2023 4009336 /home/graeme/mail Now in .imap I have directories dating back to 2013 .... the corresponding mail folders have long since moved to backup. What would be the effect of deleting EVERYTHING in .imap.... will it just get recreated as needed? or do I need to take care and only remove stuff I know is no longer used?

1 0

Can I delete duplicate messages under Maildir on the server?
by MI 05 Sep '24

05 Sep '24

After a client misconfiguration, many messages have been deleted. I restored them from backups, but now there are many duplicates. I can identify them on the server, and delete them. But do I need to also delete the dovecot.index files and/or other dovecot* files in the affected folders, or will these be automatically updated? (My Dovecot version is 2.3.13, so I guess I should not use doveadm deduplicate which would risk deleting non-duplicate messages, according to the "doveadm-deduplicate deletes non-duplicates" thread here?)

1 0

Re: Dovecot authentication hangs when ldap_start_tls_s() fails for invalid certificate
by Aki Tuomi 04 Sep '24

04 Sep '24

> On 19/11/2020 12:55 sebastiano degan <sebastiano.degan(a)frigoveneta.it> wrote: > > > On a Debian10 I've installed postfix 3.4.14 and dovecot 2.3.4.1. > I've configured multiple passdb sources and I expect that if one fails > the other ones are tested. > This is usually the case, except when the failure is due to an invalid > certificate from the ldap server. > In that case all authentication attempts from that moment on will fail. Hi! Can you try with latest CE release from https://repo.dovecot.org/ Regards, Aki

2 1

allow_nets check failure still performs LDAP bind authentication
by Florian Wunderlich 04 Sep '24

04 Sep '24

Postfix authentication via Dovecot. Dovecot performs the allow_nets check, which fails. It then still attempts to authenticate the user via LDAP bind, thus allowing DoS attacks where the entry in the directory will be locked after a few failed attempts. dovecot --version: 2.3.19.1 (9b53102964) Debian GNU/Linux 12 (bookworm), x86, no NFS Sep 04 07:26:05 postfix/smtpd[48225]: connect from unknown[182.176.211.10] Sep 04 07:26:17 dovecot[33863]: auth: *ldap(XXX,182.176.211.10): allow_nets check failed: IP 182.176.211.10 not in allowed networks* Sep 04 07:26:17 dovecot[33863]: auth: *ldap(XXX,182.176.211.10): Password mismatch (for LDAP bind)* Sep 04 07:26:27 postfix/smtpd[48225]: warning: unknown[182.176.211.10]: SASL LOGIN authentication failed: Connection lost to authentication server, sasl_username=(unavailable) Sep 04 07:26:27 postfix/smtpd[48225]: lost connection after AUTH from unknown[182.176.211.10] Sep 04 07:26:27 postfix/smtpd[48225]: disconnect from unknown[182.176.211.10] ehlo=2 starttls=1 auth=0/1 commands=3/4 The allow_nets extra field comes from LDAP. This works as a pass_filter query is performed first, which returns the allow_nets. /DN is looked up by sending a pass_filter LDAP request and getting the DN from the reply. This is very similar to doing a password lookup. The only difference is that userPassword attribute isn’t returned. Just as with password lookups, the pass_attrs may contain special extra fields./ https://doc.dovecot.org/2.3/configuration_manual/authentication/ldap_bind/#… After this, Dovecot should immediately fail the authentication. /If the user tries to log in from elsewhere, the authentication will fail the same way as if a wrong password was given./ https://doc.dovecot.org/2.3/configuration_manual/authentication/allow_nets/ There is no need to perform the bind authentication. According to the log (and the locked user accounts), it is still performed. Configuration is irrelevant, for completeness’s sake: auth_bind = yes pass_filter = (&(|(objectClass=simpleSecurityObject)(objectClass=posixAccount))(cn=%n)) pass_attrs = \ cn=user, \ allowNets=allow_nets

1 0

What are all the /var/spool/smtpd/offline/1689525601.XXXXlJ85yQ
by Steve Litt 03 Sep '24

03 Sep '24

Hi all, I just filled up my whole /var with zillions of files /var/spool/smtpd/offline , dating back to 2018. What are these files and is it safe for me to delete the ones more than a week old? Thanks, SteveT Steve Litt http://444domains.com

5 7

Inconsistency in map index with dovecot v2.3.21
by Nikolaos Pyrgiotis 02 Sep '24

02 Sep '24

Hello, We have been running dovecot version 2.3.21 since July on debian bookworm system. After upgrading we have seen in the logs similar messages to the following: 2024-08-29T19:33:27.755399+03:00 server1 dovecot: lmtp(user1(a)modulus.gr)<481240><7TMeHNei0GYpeTkA1g8ogQ:P1>: Warning: mdbox /path/user1/mdbox/storage: Inconsistency in map index (2213,40 != 2213,56). 2024-08-29T19:33:27.755399+03:00 server1 dovecot: lmtp(user1(a)modulus.gr)<481240><7TMeHNei0GYpeTkA1g8ogQ:P1>: Warning: mdbox /path/user1/mdbox/storage: Inconsistency in map index (2213,40 != 2213,56) 2024-08-29T19:33:27.838990+03:00 server1 dovecot: lmtp(user1(a)modulus.gr)<481240><7TMeHNei0GYpeTkA1g8ogQ:P1>: sieve: msgid=<39f9c444-0c08-4bda-bfc9-512c34584470(a)modulus.gr>: fileinto action: stored mail into mailbox 'Replies' 2024-08-29T19:33:27.840222+03:00 server1 dovecot: lmtp(user1(a)modulus.gr)<481240><7TMeHNei0GYpeTkA1g8ogQ:P1>: Warning: fscking index file /path/user1/mdbox/storage/dovecot.map.index 2024-08-29T19:33:27.953281+03:00 server1 dovecot: lmtp(user1(a)modulus.gr)<481240><7TMeHNei0GYpeTkA1g8ogQ:P1>: Warning: mdbox /path/user1/mdbox/storage: rebuilding indexes 2024-08-29T19:37:27.989792+03:00 server1 dovecot: lmtp(user1(a)modulus.gr)<481249><vhzsLROj0GYQVgcAfAk26A:P1>: Error: Timeout (180s)while waiting for lock for transaction log file /path/user1/mdbox/storage/dovecot.map.index.log (WRITE lock held by pid 481240) 2024-08-29T19:37:27.995913+03:00 server1 dovecot: lmtp(user1(a)modulus.gr)<481249><vhzsLROj0GYQVgcAfAk26A:P1>: Error: sieve: msgid=<39f9c444-0c08-4bda-bfc9-512c34584470(a)modulus.gr>: fileinto action: failed to store into mailbox 'Mailbox': Timeout (180s) while waiting for lock for transaction log file /path/user1/mdbox/storage/dovecot.map.index.log (WRITE lock held by pid 481240) This has happened a few times since we upgraded always by a lmtp process. It seems to be happening randomly and we have not been able to reproduce it. The mailboxes are stored in a glusterfs server, and we use the dovecot director with shared mailboxes architecture. Usually this was mitigated automatically by dovecot index rebuilding, but last time it happened on a mailbox with a lot of giga byte of mail data the following logs were produced for more than an hour: 2024-08-29T19:45:30.506694+03:00 server1 dovecot: lmtp(user1(a)modulus.gr)<481240><7TMeHNei0GYpeTkA1g8ogQ:P1>: Error: mmap_anon(/path/user/mdbox/mailboxes/Mailbox/dbox-Mails/dovecot.index.cache, 74076160) failed: Cannot allocate memory During that period segfaults starting being generated for the imap processes accessing that mailbox probably caused by timeouts from imap processes attempting to fetch emails from the affected mailbox: [3912187.557029] imap[481783]: segfault at 38 ip 00007fb03248abf8 sp 00007ffc88b264f0 error 4 in libdovecot-storage.so.0.0.0[7fb0323c7000+d8000] likely on CPU 6 (core 3, socket 0) What might be the reason that inconsistency of the map index is introduced on random users? We have seen some other users had similar issues and have mentioned them on this mailing list(dovecot Digest, Vol 249, Issue 4, dovecot Digest, Vol 250, Issue 8)? Is there any update for a mitigation or bug confirmation for dovecot version 2.3.21 that might be responsible? Thank you, Nikos Pyrgiotis

4 6

Fwd: maintainer-feedback requested: [Bug 280929] mail/dovecot move bogus warning "Time moved forwards" to debug
by Larry Rosenman 01 Sep '24

01 Sep '24

Comments from the dovecot community? Aug 19, 2024 11:07:30 AM bugzilla-noreply(a)freebsd.org: Bugzilla Automation <bugzilla(a)FreeBSD.org> has asked Larry Rosenman <ler(a)FreeBSD.org> for maintainer-feedback: Bug 280929: mail/dovecot move bogus warning "Time moved forwards" to debug https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=280929 --- Description --- Dovecot complains about time moving forward, which seems to be due to a broken mechanism (on FreeBSD) used to measure timeouts. This warning spams the maillog up to several hundred times per day. There's an ongoing thread about this issue in the freebsd forums: https://forums.freebsd.org/threads/dovecot-time-moved-forwards.82886 In post #33 RypPn points out the offending line in main.c and in post #34 msplsh suggests instead of completely removing/commenting out the line, it would be more sensible to move it from 'warning' to 'debug'. This is what this patch does: change the log facility to 'debug' to mute that bogus message for standard configurations, but keep it in 'debug' for anyone who might want to debug that issue in the future. I tested the patch as a local patch in poudriere and it builds fine on 13.3-RELEASE with the quarterly and latest branch.

7 12

Debug: open(/proc/self/io) failed: Permission denied
by Alex 31 Aug '24

31 Aug '24

Hi, I've seen a few emails over the years related to this error message, but they are typically associated with doveadm. In my case, it's related to dovecot itself. I've just set up dovecot-2.3.20-1.fc37.x86_64 on fedora37 and unable to receive mail. The main config was copied over from another dovecot system on fedora37 with virtually identical settings, including the same SSL cert. I've also tried to just migrate the important stuff and otherwise leave the defaults, but I'm having the same problem. imap(bcc-user)<2977522><rappeBf6vLZEw8Eq>: Debug: Loading modules from directory: /usr/lib64/dovecot imap(bcc-user)<2977522><rappeBf6vLZEw8Eq>: Debug: Module loaded: /usr/lib64/dovecot/lib20_listescape_plugin.so imap(bcc-user)<2977522><rappeBf6vLZEw8Eq>: Debug: Effective uid=1001, gid=1001, home=/home/bcc-user imap(bcc-user)<2977522><rappeBf6vLZEw8Eq>: Debug: open(/proc/self/io) failed: Permission denied imap(bcc-user)<2977522><rappeBf6vLZEw8Eq>: Debug: Namespace inbox: type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes, subscriptions=yes location=mbox:~/mail:INBOX=/var/spool/mail/bcc-user imap(bcc-user)<2977522><rappeBf6vLZEw8Eq>: Debug: fs: root=/home/bcc-user/mail, index=, indexpvt=, control=, inbox=/var/spool/mail/bcc-user, alt= imap(bcc-user)<2977522><rappeBf6vLZEw8Eq>: Debug: Mailbox Trash: Mailbox opened I've set the /var/spool/mail/bcc-user permissions to 600, bcc-user:mail. The /home/bcc-user directory is 611, bcc-user:bcc-user. Here is my doveconf -n: # 2.3.20 (80a5ac675d): /etc/dovecot/dovecot.conf # Pigeonhole version 0.5.20 (149edcf2) # OS: Linux 6.1.15-200.fc37.x86_64 x86_64 Fedora release 37 (Thirty Seven) auth_debug = yes auth_verbose = yes mail_debug = yes mail_gid = mail mail_home = mail/ mail_location = mbox:~/mail:INBOX=/var/spool/mail/%u mail_max_userip_connections = 500 mail_plugins = " listescape" mail_privileged_group = mail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext mbox_write_locks = fcntl namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } protocols = imap service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } } service imap-login { inet_listener imap { port = 0 } inet_listener imaps { port = 993 } process_min_avail = 6 service_count = 0 vsz_limit = 512 M } ssl_cert = </etc/letsencrypt/fullchain.cer ssl_cipher_list = ALL:!LOW:!EXP:!aNULL:!RC4::!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS ssl_dh = # hidden, use -P to show it ssl_key = # hidden, use -P to show it ssl_prefer_server_ciphers = yes userdb { driver = passwd } verbose_ssl = yes Any ideas greatly appreciated. I was very surprised to be having problems after having done this so many times before.

3 5

Connection closed (user disabled)
by Roberto J. Bolivar Plenge 28 Aug '24

28 Aug '24

Hello everyone Thank you in advance for your help. Why do I get the following error: Aug 23 10:37:51 cp-cl02 dovecot[2337577]: pop3-login: Disconnected: Connection closed (user disabled): user=<loliva(a)romaseguro.pe>, method=PLAIN, rip=x.x.x.x, lip=x.x.x.x, TLS: Connection closed, session=<8na4jlsg3HK1Q1LE>. I never observed this before: Connection closed (user disabled): I wish to know what is causing it and how can I fix it. Thank you.

2 4

Dovecot with LDAP and Solr: Force Solr user key
by Michele Giacomoli 27 Aug '24

27 Aug '24

Good morning everyone. I am configuring dovecot with ldap and solr as fts plugins. The LDAP configuration works correctly and users can log in both via the userPrincipalName attribute and via mail. In this configuration the LDAP realm and the email domain differ, and on the server the LDAP realm domain is privileged. This means that the mail dir is located in ./ldap_realm/username and in the same way postfix delivers the emails to dovecot using username@ldap_realm as envelope recipient. Consequently the emails are indexed on solr using "username@ldap_realm" as user key. However if I log in in imap using the email address as username and try to do some searches dovecot sends a select to solr using the email address as key and not the ldap user, and consequently I do not get any results from the search. So my question is: is it possible to configure dovecot to force queries to solr so that "username@ldap_realm" is always used as the key even when logging in via email? Dovecot version is: 2.3.7.2 Solr version: 7.2.1 Ldap configuration: [...] user_filter = (&(|(userPrincipalName=%u)(mail=%u))(objectClass=person)(!(userAccountControl=514))(memberOf=cn=Mail,ou=Groups,dc=example,dc=org)) pass_filter = (&(|(userPrincipalName=%u)(mail=%u))(objectClass=person)(!(userAccountControl=514))(memberOf=cn=Mail,ou=Groups,dc=example,dc=org)) pass_attrs = userPassword=password user_attrs = =home=/data/mail/%Ld/%Ln/Maildir/,=mail=maildir:/data/mail/%Ld/%Ln/Maildir/ Solr configuration: plugin { fts = solr fts_solr = url=http://solr_host:8983/solr/dovecot/ fts_autoindex=yes } Best regards -- Logo Mynet *Michele Giacomoli* Reparto IT 32.000 km di fibra ottica nel nord Italia al servizio delle aziende *www.mynet.it* <https://www.mynet.it/> - *www.vogliadifibra.it* <https://www.vogliadifibra.it/>

1 1

2.3.21(.1) build error on aarch64 (using slackware ARM -current)
by shawn.kubik＠shaw.ca 22 Aug '24

22 Aug '24

I've spent the last week trying to rebuild Dovecot on my Raspberry Pi 3 (aarch64; running Slackware ARM -current) and am running into the following build error. I suspected it may be my recent update to Slackware but I've been able to build the same source tarball on an x86 system running slackware64-current without any problems, so it *seems* specific to aarch64. I've tried both building from the 2.3.21 (and 2.3.21.1) tarball(s) as well as pulling the latest code from github and they all fail similarly, though in different spots it appears. I am building from source instead of using the available Slackware packages bc those packages don't have support for postgresql built in, but has mysql/mariadb support, which I am not using and is not installed on my systems. While it does run, when I try to connect to it, it fails citing a missing mariadb.so file. gcc -v output: Reading specs from /usr/lib64/gcc/aarch64-slackware-linux-gnu/14.2.0/specs COLLECT_GCC=gcc COLLECT_LTO_WRAPPER=/usr/libexec/gcc/aarch64-slackware-linux-gnu/14.2.0/lto-wrapper Target: aarch64-slackware-linux-gnu Configured with: ../configure --with-arch=armv8-a --verbose --prefix=/usr --mandir=/usr/man --infodir=/usr/info --libdir=/usr/lib64 --enable-bootstrap --enable-checking=release --enable-libstdcxx-dual-abi --enable-shared --enable-languages=ada,c,c++,d,fortran,go,lto,m2,objc,obj-c++,rust --enable-objc-gc --enable-threads=posix --enable-__cxa_atexit --enable-gnu-unique-object --enable-clocale=gnu --enable-plugin --enable-lto --with-arch-directory= --with-system-zlib --with-gnu-ld --with-isl --with-default-libstdcxx-abi=new --disable-libunwind-exceptions --disable-libstdcxx-pch --disable-libssp --disable-werror --disable-gtktest --disable-install-libiberty --host=aarch64-slackware-linux-gnu --build=aarch64-slackware-linux-gnu --target=aarch64-slackware-linux-gnu Thread model: posix Supported LTO compression algorithms: zlib zstd gcc version 14.2.0 (GCC) ldd --version output: ldd (GNU libc) 2.40 Copyright (C) 2024 Free Software Foundation, Inc. This is free software; see the source for copying conditions. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. Written by Roland McGrath and Ulrich Drepper. Configure is: ./configure \ --with-pgsql \ --localstatedir=/var \ --with-lucene \ --with-libcap \ --with-inotify=inotify \ --disable-static \ --build=$ARCH-slackware-linux || exit 1 And the output at the point of failure is: libtool: compile: gcc -DHAVE_CONFIG_H -I. -I../../../.. -I../../../../src/lib -I../../../../src/lib-test -I../../../../src/lib-settings -I../../../../src/lib-mail -I../../../../src/lib-imap -I../../../../src/lib-imap-client -I../../../../src/lib-index -I../../../../src/lib-storage -I../../../../src/lib-storage/list -I../../../../src/lib-storage/index -I../../../../src/lib-ssl-iostream -std=gnu99 -g -O2 -fstack-protector-strong -U_FORTIFY_SOURCE -D_FORTIFY_SOURCE=2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime -Wstrict-aliasing=2 -MT imapc-sync.lo -MD -MP -MF .deps/imapc-sync.Tpo -c imapc-sync.c -fPIC -DPIC -o .libs/imapc-sync.o free(): double free detected in tcache 2 during GIMPLE pass: slp imapc-sync.c: In function ‘imapc_initial_sync_check’: imapc-sync.c:294:1: internal compiler error: Aborted 294 | imapc_initial_sync_check(struct imapc_sync_context *ctx, bool nooped) | ^~~~~~~~~~~~~~~~~~~~~~~~ 0x1b4a3df internal_error(char const*, ...) ???:0 0x7f80a139fc pthread_kill@@GLIBC_2.34 ???:0 0x7f809c419b gsignal ???:0 0x7f809abfa7 abort ???:0 0x7f80a06943 __libc_message_impl ???:0 0x7f80a1e2c7 malloc_printerr ???:0 0x7f80a2053b _int_free ???:0 0x7f80a22b7f __free ???:0 0xfa35d7 _slp_tree::~_slp_tree() ???:0 0xfa3aa7 vect_free_slp_instance(_slp_instance*) ???:0 0xfb9a7f vect_slp_analyze_operations(vec_info*) ???:0 0xfc06a7 vect_slp_function(function*) ???:0 Please submit a full bug report, with preprocessed source (by using -freport-bug). Please include the complete backtrace with any bug report. See <https://gcc.gnu.org/bugs/> for instructions. make[5]: *** [Makefile:597: imapc-sync.lo] Error 1 make[5]: Leaving directory '/data/local/src/Dovecot/dovecot-2.3.21/src/lib-storage/index/imapc' make[4]: *** [Makefile:733: all-recursive] Error 1 make[4]: Leaving directory '/data/local/src/Dovecot/dovecot-2.3.21/src/lib-storage/index' make[3]: *** [Makefile:1107: all-recursive] Error 1 make[3]: Leaving directory '/data/local/src/Dovecot/dovecot-2.3.21/src/lib-storage' make[2]: *** [Makefile:573: all-recursive] Error 1 make[2]: Leaving directory '/data/local/src/Dovecot/dovecot-2.3.21/src' make[1]: *** [Makefile:704: all-recursive] Error 1 make[1]: Leaving directory '/data/local/src/Dovecot/dovecot-2.3.21' make: *** [Makefile:548: all] Error 2 Can someone please help me figure this out? If more output is required let me know and I can provide it. Thank You!

2 2

limits to auth of submission
by horizon＠secubox.org 21 Aug '24

21 Aug '24

Hello I am using a plaintext db as the auth db. The db content is like this line: user@mail.com:{CRYPT}$****::::::userdb_quota_rule=*:bytes=1G How can I limit some people can auth with postfix submission (port 587), and some others can't? Thank you.

1 0

Seeking Suggestions for Optimizing Dovecot Performance
by leoniemeeyr＠gmail.com 21 Aug '24

21 Aug '24

Hi everyone, I hope you’re all doing well! I’ve been working with Dovecot for a while now and I’m looking to optimize its performance on my server. I’d love to hear any tips or suggestions you might have to help me get the best performance out of it. Specifically, I’m interested in: 1. Configuration Tweaks: Any key settings that you’ve found to be particularly beneficial for performance? 2. Best Practices: Are there any common practices or tools that help in monitoring and improving performance? 3. Resource Management: How do you handle resource allocation to ensure smooth operation under heavy loads? Any advice or experiences you can share would be greatly appreciated! Thanks in advance for your help. Best Regards https://www.igmguru.com/blog/msbi-vs-power-bi

1 0

dovecot-indexer writting as root
by Joan Moreau 20 Aug '24

20 Aug '24

Hi I have that issue times to times Full case described properly here : https://github.com/grosjo/fts-xapian/issues/168 Can you help understand the root cause of that ? THank you

3 6

SQL Multiple passwords
by Aubry 19 Aug '24

19 Aug '24

Hi, From what I understood from the archive and from my tests, we cannot have multiple passwords for a given account. (I get the error: Password query returned multiple matches) But it looks like it can be done via a PAM module. Does anyone succeeded setup multiple password with PAM or any other method with a SQL backend ? Regards, Aubry

6 7

Re: Frequency Control for IMAP connection
by Joseph Tam 16 Aug '24

16 Aug '24

From: Corey H <coreyh(a)alwaysdata.net> > $ sudo tail -10000 /var/log/mail.log|grep **(a)**mail.com|wc -l > 3544 > > logs like this: > > Aug 15 19:54:10 mx dovecot: imap-login: Login: user=<**(a)**mail.com>, > method=PLAIN, rip=**, lip=**, mpid=4151830, TLS, > session=<UPotgLcfTOjYUzTN> > > How can I implement a Frequency Control on client connections to slow > down his requests? Is this a MacOSX client? I think they have a habit of doing this when doing global mailbox searches. Instead of doing a sane serial march through mailboxes, it opens up as many mailboxes as it can, then closes them when the IMAP server denies then when they hit the max. If Aki doesn't can't offer a solution, neither can I, but maybe you can play around with mail_max_userip_connections to stop them from swamping all your connections. You might have to resort to firewall or other general network controls to actually rate limit connections. Joseph Tam <jtam.home(a)gmail.com>

2 1

dovecot-2.3.2.1 and dovecot-pigeonhole-0.5.2 bug?
by Jan Nowak 16 Aug '24

16 Aug '24

Hello, we have a problem after updating the software with the operation of sieve scripts sending a copy of the e-mails, e-mails are not transferred. Configuration: dovecot-2.3.2.1 + dovecot-pigeonhole-0.5.2 + FreeBSD 11.2 log: Sep 06 13:28:17 lda(XXX@XXX)<38615><XXX+XXX>: Info: sieve: msgid=<XXX-XXX-XXX-7788-XXX@XXXXnet>: stored mail into mailbox 'INBOX' Sep 06 13:28:17 lda(XXX@XXX)<38615><XXX+XXX>: Info: sieve: Execution of script /usr/home/XXX/mail/XXX(a)XXX/.dovecot.sieve failed, but implicit keep was successful (user logfile /usr/home/XXX/mail/XXX(a)XXX/.dovecot.sieve.log may reveal additional details) .dovecot.sieve.log: error: msgid=<XXX-XXX-XXX-7788-XXX@XXXXnet>: failed to redirect message to <XXXXX(a)XXXXXX.com>: smtp(127.0.0.1:25): DATA failed: 552 Message header not CRLF terminated (permanent failure). On old configuration: dovecot 2.2 + dovecot-pigeonhole- 0.4 + FreeBSD 11.2 we don't have problem. Has anyone had a similar problem, knows the solution?

5 12

The future of SIS
by Sebastian Marsching 16 Aug '24

16 Aug '24

Hi, I am currently in the process of planning a new deployment of Dovecot. I was planning to use mdbox or sdbox with “mail_attachment_fs = sis posix”, but I stumbled across the following notice in the documentation for Dovecot 3.0 (https://doc.dovecot.org/3.0/settings/core/#core_setting-mail_attachment_fs) > Changed in version 2.4.0 (CE): SIS is deprecated and writing of SIS files is disabled. Reading is supported for now, any missing SIS attachments are replaced with files filled with spaces. > > Changed in version 3.0.0 (Pro): SIS is deprecated and writing of SIS files is disabled. Reading is supported for now, any missing SIS attachments are replaced with files filled with spaces. And https://doc.dovecot.org/3.0/installation_guide/upgrading/from-2.3-to-3.0/ says: > Saving new mails’ attachments via fs-sis is disabled, but reading SIS attachments is still supported. Missing SIS attachments are replaced with files filled with spaces. What is not entirely clear from this comment is whether this only applied to “sis posix” or also to “sis-queue posix”. Does anybody whether sis-queue is also affected by this? I saw that the notice was added to the dovecot/documentation Git repository in April 2023, but I couldn’t find any further information there or the main branch of the dovecot/core repository. Maybe, the code for 2.4 / 3.0 has not made it into that branch or repository yet. SIS sounds like a neat concept and I would like to use it, but obviously I do not want to use a soon-to-be-deprecated feature in a completely new deployment. So, does anybody know an alternative solution for attachment deduplication (except file-system level deduplication)? Thanks, Sebastian

19 43

vacation is not using from in envelope
by Marc 16 Aug '24

16 Aug '24

How to get dovecot use the from in sieve in the envelope?

3 5

Frequency Control for IMAP connection
by Corey H 15 Aug '24

15 Aug '24

Hello one of our users makes too quick IMAP connections to the server. $ sudo tail -10000 /var/log/mail.log|grep **(a)**mail.com|wc -l 3544 logs like this: Aug 15 19:54:10 mx dovecot: imap-login: Login: user=<**(a)**mail.com>, method=PLAIN, rip=**, lip=**, mpid=4151830, TLS, session=<UPotgLcfTOjYUzTN> How can I implement a Frequency Control on client connections to slow down his requests? Thank you.

2 1

2.3.21.1 build failure on MacOS X 14.6.1
by Daniel J. Luke 15 Aug '24

15 Aug '24

Hi - I get a build failure from dbox-storage.c because the stat struct doesn't have st_atim/st_ctim This simple patch fixes it (and should also work on linux/glibc hosts, but I haven't tested it there). --- src/lib-storage/index/dbox-common/dbox-storage.c.orig 2024-08-14 14:59:57 +++ src/lib-storage/index/dbox-common/dbox-storage.c 2024-08-14 15:01:23 @@ -293,8 +293,8 @@ if the directory exists. In case, get also the ctime */ struct stat stats; if (stat(path, &stats) == 0) { - last_temp_file_scan = stats.st_atim.tv_sec; - change_time = stats.st_ctim.tv_sec; + last_temp_file_scan = stats.st_atime; + change_time = stats.st_ctime; } else { if (errno != ENOENT) e_error(user->event, "stat(%s) failed: %m", path); -- Daniel J. Luke

2 1

v2.3.21 compile error
by Goetz Schultz 14 Aug '24

14 Aug '24

Hi, I am trying to compile said version above under FreeBSD 14.1 . Config setting is: ./configure --with-pgsql --with-sql However, during compile the process halts with below errors: <quote> test-mail-index-transaction-update.c:648:17: error: incompatible pointer to integer conversion assigning to 'uint32_t' (aka 'unsigned int') from 'char *(*)(int, int)' [-Wint-conversion] 648 | hdr.day_stamp = tests[i].old_day_stamp + timezone; | ^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ test-mail-index-transaction-update.c:650:49: warning: arithmetic on a pointer to the function type 'char *(int, int)' is a GNU extension [-Wgnu-pointer-arith] 650 | mail_index_update_day_headers(t, tests[i].now + timezone); | ^ ~~~~~~~~ test-mail-index-transaction-update.c:650:36: error: incompatible pointer to integer conversion passing 'char *(*)(int, int)' to parameter of type 'time_t' (aka 'long') [-Wint-conversion] 650 | mail_index_update_day_headers(t, tests[i].now + timezone); | ^~~~~~~~~~~~~~~~~~~~~~~ </quote> Other info: gcc -v FreeBSD clang version 18.1.5 (https://github.com/llvm/llvm-project.git llvmorg-18.1.5-0-g617a15a9eac9) Target: x86_64-unknown-freebsd14.1 Thread model: posix InstalledDir: /usr/bin Any clue or pointer (no pun intended) what's going wrong and how to fix it? -- Thanks and regards Goetz R Schultz Quis custodiet ipsos custodes? ---------------------------->8------------------------------ /"\ \ / ASCII Ribbon Campaign X against HTML e-mail / \ ---------------------------->8------------------------------ ---------------------------->8------------------------------ /"\ \ / ASCII Ribbon Campaign X against HTML e-mail / \ This message is transmitted on 100% recycled electrons. ---------------------------->8------------------------------ Unsigned message - no responsibillity that content is not altered

3 5

[bug?] doveadm -f json who output
by Jasper Spaans 14 Aug '24

14 Aug '24

Hi, I'm trying to parse the output of `doveadm -f json who`[0] and am running into a small issue when it returns data about multiple users: the stream that is emitted in that case is not valid json. dovecot -version tells me dovecot 2.3.21 (47349e2482), more specifically, this is the version shipped in ubuntu 24.04, 1:2.3.21+dfsg1-2ubuntu5 doveadm -f json who [{"username":"<REDACTED>","connections":"4","service":"imap","pids":"(272307 270876 270872 270869)","ips":"(2001:<REDACTED>:7488)"}],{"username":"<REDACTED>","connections":"2","service":"imap","pids":"(271469 271465)","ips":"(2a02:<REDACTED>:9c28)"} When trying to pretty print this with jq, it complains about invalid json: doveadm -f json who|jq [ { "username": "<REDACTED>", "connections": "4", "service": "imap", "pids": "(272307 270876 270872 270869)", "ips": "(2001:<REDACTED>0:7488)" } ] jq: parse error: Expected value before ',' at line 1, column 167 Is this expected behaviour? I would have expected a list of user objects, and then it seems like the list-closing bracket that is currently at the end of the first user object should have been at the end of the last user object. I can code around this in my parser, but would rather not. Best, Jasper [0] actually I'm parsing the output of the doveadm http api, but that just seems to copy the data from the json format in there verbatim

2 1

Dovecot refuses to install/run on machine without IPv6
by Kurt Fitzner 14 Aug '24

14 Aug '24

Hi, I just tried to install Dovecot (version 2.3.19.1 9b53102964) on a Debian 12 server I'm building. It failed because Dovecot's default listen address is explicitly "*, ::" and it appears to have no logic to determine if there actually is an IPv6-enabled interface or that IPv6 is enabled on the target machine before it tries to listen on it. If dovecot wants to listen on IPv6 by default, that's neither here nor there, but if this is default behaviour it should check first. I'm curious if it's the same behaviour for machines without IPv4. Kurt Fitzner

5 5

CVE-2024-23184: Having a large number of address headers (From, To, Cc, Bcc, etc.) becomes excessively CPU intensive
by Aki Tuomi 14 Aug '24

14 Aug '24

Affected product: Dovecot IMAP Server Internal reference: DOV-6464 Vulnerability type: CWE-770 (Allocation of Resources Without Limits or Throttling) Vulnerable version: 2.2, 2.3 Vulnerable component: lib-mail Report confidence: Confirmed Solution status: Fixed in 2.3.21.1 Researcher credits: Vendor internal discovery Vendor notification: 2024-01-30 CVE reference: CVE-2024-23184 CVSS: 5.0 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N) Vulnerability Details: Having a large number of address headers (From, To, Cc, Bcc, etc.) becomes excessively CPU intensive. With 100k header lines CPU usage is already 12 seconds, and in a production environment we observed 500k header lines taking 18 minutes to parse. Since this can be triggered by external actors sending emails to a victim, this is a security issue. The main problem is that each header line's address is added to the end of a linked list. This is done by walking the whole linked list, which becomes more inefficient the more addresses there are. Workaround: One can implement restrictions on address headers on MTA component preceding Dovecot. Fix: Install non-vulnerable version of Dovecot. Patch can be found at https://github.com/dovecot/core/compare/8e4c42d%5E...1481c04.patch

2 1

Dovecot CVE-2024-23185: Very large headers can cause resource exhaustion when parsing message
by Aki Tuomi 14 Aug '24

14 Aug '24

Affected product: Dovecot IMAP Server Internal reference: DOV-6601 Vulnerability type: CWE-770 (Allocation of Resources Without Limits or Throttling) Vulnerable version: 2.2, 2.3 Vulnerable component: lib-mail Report confidence: Confirmed Solution status: Fixed in 2.3.21.1 Researcher credits: Vendor internal discovery Vendor notification: 2024-01-31 CVE reference: CVE-2024-23185 CVSS: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vulnerability Details: Very large headers can cause resource exhaustion when parsing message. The message-parser normally reads reasonably sized chunks of the message. However, when it feeds them to message-header-parser, it starts building up "full_value" buffer out of the smaller chunks. The full_value buffer has no size limit, so large headers can cause large memory usage. It doesn't matter whether it's a single long header line, or a single header split into multiple lines. This bug exists in all Dovecot versions. Incoming mails typically have some size limits set by MTA, so even largest possible header size may still fit into Dovecot's vsz_limit. So attackers probably can't DoS a victim user this way. A user could APPEND larger mails though, allowing them to DoS themselves (although maybe cause some memory issues for the backend in general). Workaround: One can implement restrictions on headers on MTA component preceding Dovecot. Fix: Install non-vulnerable version of Dovecot. Patch can be found at https://github.com/dovecot/core/compare/f020e13%5E...ce88c33.patch

1 0

Pigeonhole v0.5.21.1 released
by Aki Tuomi 14 Aug '24

14 Aug '24

Hi all, we are releasing new version of Pigeonhole. https://pigeonhole.dovecot.org/releases/2.3/dovecot-2.3-pigeonhole-0.5.21.1… https://pigeonhole.dovecot.org/releases/2.3/dovecot-2.3-pigeonhole-0.5.21.1… Binary packages in https://repo.dovecot.org/ Docker images in https://hub.docker.com/r/dovecot/dovecot Kind regards, Aki Tuomi Open-Xchange oy --- - sieve: When saving to local storage failed after a successful action in sieve (e.g. redirect, vacation), the mail was reported as successfully delivered, although it was lost locally.

1 0

Extra listener for client cert ?
by Laura Smith 13 Aug '24

13 Aug '24

Is it possible to, and (if yes) has anyone had experience with setting up an extra listener that requires client certs. The problem I've got is I still need to support Outlook clients. Fortunately these are located in fixed locations on desktop computers. Meanwhile, I would like to harden the configuration for road warriors who are all using devices and OSs that play nicer with client certs than Outlook does (well, Outlook doesn't play at all !). So I was thinking of opening 993 on a seperate IP address with that listener requiring client certificates. The alternative is, of course a VPN, which is still under consideration as an option. But even then, with the security onion, I'd still rather have both .... :)

1 0

Synchronize email folders
by Odhiambo Washington 13 Aug '24

13 Aug '24

I moved services to a new server (VPS) when I had issues with my hardware. Now I have copied data from the disk of the old server into the VPS. On the VPS, mail is delivered to /var/spool/virtual/DOMAIN/USER/Maildir/ I have the old emails in /root/DOMAIN/USER/Maildir. What is the easiest way to import the old emails into the current active folders without causing chaos with MuAs?? -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 In an Internet failure case, the #1 suspect is a constant: DNS. "Oh, the cruft.", egrep -v '^$|^.*#' ¯\_(ツ)_/¯ :-) [How to ask smart questions: http://www.catb.org/~esr/faqs/smart-questions.html]

3 3

Contents of folder symlinked not showing up
by Curt.Blank＠curtronics.com 10 Aug '24

10 Aug '24

I have the directory structure below. I was using uw-imap with Thunderbird. Due to cert issues with Thunderbird which have yet to be resolved at the moment I am using dovecot (2.3-6.11) with Apple's MacOS Mail app. dovecot server is running openSuSE Tumbleweed. With uw-imap & Thunderbird the directory structure and all the mbox's shown below showed up and were accessible in Thunderbird. With dovecot & Apple's MacOS Mail app I see the Archive directory but nothing underneath it. I do not see the In and Out directory nor any of the Year directories. At this point I do not know if the problem lies with dovecot not providing them via IMAP or if Apple's MacOS Mail is just not displaying them. So I am looking for information as to where the problem lies and what the solution is. dovecot -n is included below. /home/<user>/mail/Archive -> /Archive (soft symlink to different mount point) /Archive <directory> | +-> In <directory> | | | +-> 2018 <directory> | | | | | +-> 0118 <mbox> | | +-> 0218 <mbox> | | +-> 0318 <mbox> | | +-> 0418 <mbox> | | +-> 0518 <mbox> | | +-> 0618 <mbox> | | +-> 0718 <mbox> | | +-> 0818 <mbox> | | +-> 0918 <mbox> | | +-> 1018 <mbox> | | +-> 1118 <mbox> | | +-> 1218 <mbox> | | | +-> 2019 <directory> | | | | | +-> 0119 <mbox> | | +-> 0219 <mbox> | | +-> 0319 <mbox> | | +-> 0419 <mbox> | | +-> 0519 <mbox> | | +-> 0619 <mbox> | | +-> 0719 <mbox> | | +-> 0819 <mbox> | | +-> 0919 <mbox> | | +-> 1019 <mbox> | | +-> 1119 <mbox> | | +-> 1219 <mbox> | | | +-> etc. | | | +-> Out <directory> | +-> 2018 <directory> | | | +-> 0118 <mbox> | +-> 0218 <mbox> | +-> 0318 <mbox> | +-> 0418 <mbox> | +-> 0518 <mbox> | +-> 0618 <mbox> | +-> 0718 <mbox> | +-> 0818 <mbox> | +-> 0918 <mbox> | +-> 1018 <mbox> | +-> 1118 <mbox> | +-> 1218 <mbox> | +-> 2019 <directory> | | | +-> 0119 <mbox> | +-> 0219 <mbox> | +-> 0319 <mbox> | +-> 0419 <mbox> | +-> 0519 <mbox> | +-> 0619 <mbox> | +-> 0719 <mbox> | +-> 0819 <mbox> | +-> 0919 <mbox> | +-> 1019 <mbox> | +-> 1119 <mbox> | +-> 1219 <mbox> | +-> etc. | # 2.3.21 (47349e2482): /etc/dovecot/dovecot.conf # Pigeonhole version 0.5.21 (f6cd4b8e) # OS: Linux 6.9.7-1-default x86_64 # Hostname: cjbnew.curtronics.com <http://cjbnew.curtronics.com/> mail_location = mbox:~/mail:INBOX=/var/spool/mail/%u managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } plugin { sieve = file:~/sieve;active=~/.dovecot.sieve } protocols = imap ssl_cert = </etc/ssl/certs/imapd.crt ssl_cipher_list = ALL:!aNULL:!eNULL:!EXPORT:!DES:!3DES:!MD5:!PSK:!RC4:!ADH:!LOW@STRENGTH ssl_dh = # hidden, use -P to show it ssl_key = # hidden, use -P to show it ssl_options = no_compression ssl_prefer_server_ciphers = yes userdb { driver = passwd }

1 0

Event Export (auth_request_finished)
by Serhii 10 Aug '24

10 Aug '24

I am trying to implement logging of all failed authentication attempts to catch bruteforce automatically. Currently, I have the following configuration: > event_exporter log { > format = json > format_args = time-rfc3339 > transport = log > } > > metric auth_fail { > filter = event=auth_request_finished and not success=yes > exporter = log > } However, in logs I only see events similar to this: > { > "event": "auth_request_finished", > "hostname": "cheems", > "start_time": "2024-08-04T00:00:04.079723Z", > "end_time": "2024-08-04T00:00:12.224906Z", > "categories": [ > "service:auth", > "auth" > ], > "fields": { > "duration": 8145091, > "policy_result": "ok", > "mechanism": "LOGIN", > "transport": "trusted", > "service": "smtp", > "local_ip": "195.201.247.11", > "real_local_ip": "195.201.247.11", > "remote_ip": "185.29.xx.xx", > "real_remote_ip": "185.29.xx.xx", > "original_user": "example(a)example.com", > "user": "example(a)example.com", > "translated_user": "example(a)example.com" > } > } But for me it doesn't look like what is specified in docs[1]: > Field | Description > --- > error | Set when error happens > success | yes, when authentication succeeded > policy_penalty | Time of penalty added by policy server > policy_result | Values: ok, delayed, refused Why I don't see neither "success" and "error" field in logs? Also, why policy_result is ok despite I am logging only failed authentication attempts? From postfix I can see that those attempts were actually failed: > Aug 04 00:00:14 cheems postfix/smtpd[2362656]: warning: unknown[185.29.xx.xx]:54330: SASL LOGIN authentication failed: (reason unavailable), sasl_username=example(a)example.com [1]: https://doc.dovecot.org/admin_manual/list_of_events/#auth-request-finished -- Send unsolicited bulk mail to carle34(a)at.encryp.ch

2 2