- dovecot - dovecot.org

Lua Auth
by Mark Moseley 02 Dec '17

02 Dec '17

Just happened to be surfing the docs and saw this. This is beyond awesome: https://wiki2.dovecot.org/AuthDatabase/Lua Any words of wisdom on using it? I'd be putting a bunch of mysql logic in it. Any horrible gotchas there? When it says 'blocking', should I assume that means that a auth worker process will *not* accept any new auth lookups until both auth_passdb_lookup() and auth_userdb_lookup() have completed (in which I'd be doing several mysql calls)? If that's the case, I assume that the number of auth workers should be bumped up. And is a 2.3 release fairly imminent?

3 3

Autoreplies are not sent
by Sergio Belkin 01 Dec '17

01 Dec '17

Hi, Let's say I have 2 domains: - Virtual Mailbox Domain: example.local (internal domain) - Virtual Alias Domain: example.com (public domain) Every mail sent to @example.com is really sent to @example.local. I have a virtual alias that forward mails sent to support-abc(a)example.com is sent finally to: op1(a)example.local Now, I'd want to every mail was sent to support-abc(a)example.com it triggers an autoreply vacation style. So, I've wrote and compiled a sieve filter, something like that and put in op1(a)example.local sieve folder. But it fails complaining like that: nov 29 15:55:39 muteriver.example.local dovecot[12549]: lmtp(12675, op1(a)example.local) CqNdF6sCH1qDMQAAcSFsIQ: sieve: msgid=< ded22f3d-f1e3-157e-0667-ca73d851d1a8(a)example.com>: discarding vacation response for implicitly delivered message; no known (envelope) recipient address found in message headers (recipient=<op1(a)example.local>, and additional `:addresses' are specified) I've tried appending in dovecot configuration: lda_original_recipient_header = X-Original-To But it does not work either. Using: dovecot-pigeonhole-2.2.10-8.el7.centos.x86_64 and postfix-2.10.1-6.el7.x86_64 Please could you help me? Thanks in advance! -- -- Sergio Belkin LPIC-2 Certified - http://www.lpi.org

2 3

Re: iPhone/iPad IMAP connection bursts causes user+IP exceeded
by David.M.Clark 01 Dec '17

01 Dec '17

Thanks for the reply and suggestion Robert. I have now set mail_max_userip_connections to 400 in 20-imap.conf to see if it makes any difference. Late yesterday the customer tested from his office, an older IOS 9 tablet and he had IMAP working in a matter of minutes, so is certainly an newer software version by Apple issue. On 30/11/17 03:03, Robert Giles wrote: > David, > > I'd say that if you set the mail_max_userip_connections value to a > large-ish number (300-400), your users likely won't notice an issue on > their iOS 10.x and iOS 11.x devices. It's more of an annoyance in the > logs, and occasionally the iOS Mail app will show that it is stuck > checking mail for a few minutes (when the new max_userip_connections is > reached again, but with a large number, it happens much less frequently). > > Keep in mind max_userip applies to *authenticated* users, so a true, > malicious DoS situation is less likely. > > And yeah, I'm definitely tired of Apple going off and breaking their > software, because the blame always comes back on IT instead of Apple :( > > Robert > > > > On 2017-11-28 at 22:18, David.M.Clark wrote: >> Robert just got this one today. >> >> A customer has phoned who has replaced or updated their Apple 'stuff' >> (including iPhone 8 just purchased) and the identical settings that >> work on the older Apple based devices, as well as Outlook based PCs, >> work fine with IMAP (internal port 143 and external port 10143), but >> the newer IOS based devices just do not work. iPhone 8 does not let >> you downgrade to earlier OS either, which is something the customer >> was thinking of doing. >> >> Once again either Apple or Microsoft have 'moved the goal posts' >> expecting everyone else in the world to be forced to move with them. >> >> They are reporting issues on-line also with MS server and Office 365 >> so will be hoping we have some kind of good result quickly from Apple >> as this will only get worse as more people update and find their >> e-mail is 'dead in the water'. >> >> On 04/11/17 06:19, Robert Giles wrote: >>> Apologies for bumping Joseph Tam's rather old thread, but I'm >>> wondering if anyone has come up with a workaround/fix for this >>> problem that iOS Mail.app clients (10.3.3, 11.0.3, 11.1?) continue to >>> exhibit? >>> >>> Robert >>> >>> >>> >>> On 10/28/2016 at 03:49 PM, Joseph Tam wrote: >>>> I frequently see this from my iPhone/iPad IMAP users: >>>> >>>> Oct 24 21:30:55 server dovecot: imap-login: Login: user=<user>, >>>> ... >>>> [... repeated 10 times ...] >>>> Oct 24 21:32:54 server dovecot: imap-login: Maximum number of >>>> connections from user+IP exceeded (mail_max_userip_connections=12): >>>> user=<user> >>>> Oct 24 21:32:54 server dovecot: imap(user): Logged out ... >>>> [... repeated 11 times ...] >>>> >>>> These bursts of logins/max/logouts would cycling on for a few minutes. >>>> Googling this problem seems to turn up lots of similar complaints about >>>> iOS mail mail clients. e.g. >>>> >>>> https://discussions.apple.com/thread/2547839?tstart=0 >>>> >>>> iOS mail readers do not limit connections limit as other mailreaders >>>> can. I could increase mail_max_userip_connections, but that just moves >>>> the goal posts. >>>> >>>> Using the new rawlog feature in 2.2.26 (thanks Dovecot team!), I was >>>> able >>>> to see that these connection bursts are caused by clients doing global >>>> searches. The rawlogs show each mailbox being SELECT'd and searched >>>> (e.g. From header string): >>>> >>>> 1477369968.730450 2 ID ("name" "iPad Mail" "version" "13G36" >>>> "os" "iOS" "os-version" "9.3.5 (13G36)") >>>> 1477369968.781932 3 SELECT {mailbox} >>>> 1477369968.961636 4 UID SEARCH RETURN (COUNT) 1:* NOT DELETED >>>> 1477369969.006087 5 UID SEARCH RETURN (ALL) 1:* NOT DELETED >>>> 1477369969.052701 6 UID SEARCH RETURN (ALL) {search-term} NOT >>>> DELETED >>>> 1477369974.624153 7 LOGOUT >>>> >>>> Questions: >>>> >>>> 1) How does this affect the user? I heard from one user that it >>>> makes global searches unusable because his reader just spins its >>>> wheel. I'm not sure whether this is impatience or this results >>>> in failed searches. >>>> >>>> 2) Is there a client-side fix (e.g. connection limiting)? >>>> Apple appears to be intransigent on addressing this. >>>> >>>> 3) Will maintaining search indices (e.g. solr) help with this? >>>> Maybe the searches are taking too long and the connections pile >>>> up waiting for previous searches to finish. >>>> >>>> Thanks, >>>> Joseph Tam <jtam.home(a)gmail.com> >>> >> > -- As always, I remain at your service. Kindest Regards, David.M.Clark (Director - Senior Linux/UNIX Consultant) =--------------------------------------------------------------------------= Davrom Consulting Pty Ltd Mobile: 0418763124 PO Box 1644, Sunnybank Hills, 4109 E-mail (Work): david(a)davrom.com ABN: 81 096 990 804 E-mail (Priv): dmc1961(a)dmc1961.id.au Website: http://davrom.com Skype: dmc1961 Podcast: http://ldup.com.au Google: dmc1961(a)gmail.com =--------------------------------------------------------------------------= Specialising in: Linux (Fedora/RedHat/CentOS), UNIX, SCO, MikroTik, Networking/Internet, E-mail/Web Technologies =--------------------------------------------------------------------------= Please note: Any e-mail communication bearing this signature is for the exclusive purpose of the sender and is not for publication without the expressed permission of the sender or respective sender's organisation. =--------------------------------------------------------------------------=

1 1

My Solr FTS problem
by Gao 01 Dec '17

01 Dec '17

I am testing the solr FTS following the guide here: http://things.m31.ch/?p=379 Now I am having problem when I try to test: # doveadm -v index -u fail2ban(a)mydomain.com Inbox doveadm(fail2ban(a)mydomain.com): Error: fts_solr: Invalid XML input at 1:0: not well-formed (invalid token) (near: { "responseHeader":{ "status":0, "QTime":0, "params":{ "q":"box:8864fa1d51ea1d5a7b12000096a1aaf8 AND user:fa) doveadm(fail2ban(a)mydomain.com): Error: Mailbox INBOX: Status lookup failed: Internal error occurred. Refer to server log for more information. [2017-11-30 13:05:24] My system is CentOS 7, Dovecot 3.2.4 (installed from source with solr support), Java OpenJDK-1.8.0, Solr v7.1.0. Could some one help me on this please? Here is detailed debug out put: [root@mail ~]# doveadm -vD index -u fail2ban(a)mydomain.com Inbox Debug: Loading modules from directory: /usr/lib64/dovecot Debug: Module loaded: /usr/lib64/dovecot/lib10_quota_plugin.so Debug: Module loaded: /usr/lib64/dovecot/lib20_fts_plugin.so Debug: Module loaded: /usr/lib64/dovecot/lib21_fts_solr_plugin.so Debug: Loading modules from directory: /usr/lib64/dovecot/doveadm Debug: Skipping module doveadm_acl_plugin, because dlopen() failed: /usr/lib64/dovecot/doveadm/lib10_doveadm_acl_plugin.so: undefined symbol: acl_user_module (this is usually intentional, so just ignore this message) Debug: Skipping module doveadm_expire_plugin, because dlopen() failed: /usr/lib64/dovecot/doveadm/lib10_doveadm_expire_plugin.so: undefined symbol: expire_set_deinit (this is usually intentional, so just ignore this message) Debug: Module loaded: /usr/lib64/dovecot/doveadm/lib10_doveadm_quota_plugin.so Debug: Module loaded: /usr/lib64/dovecot/doveadm/lib10_doveadm_sieve_plugin.so Debug: Module loaded: /usr/lib64/dovecot/doveadm/lib20_doveadm_fts_plugin.so Debug: Skipping module doveadm_mail_crypt_plugin, because dlopen() failed: /usr/lib64/dovecot/doveadm/libdoveadm_mail_crypt_plugin.so: undefined symbol: mail_crypt_box_get_pvt_digests (this is usually intentional, so just ignore this message) doveadm(fail2ban(a)mydomain.com): Debug: Added userdb setting: mail=maildir:/home/vmail/mydomain.com/fail2ban/ doveadm(fail2ban(a)mydomain.com): Debug: Added userdb setting: plugin/quota_rule=*:bytes=0 doveadm(fail2ban(a)mydomain.com): Debug: Effective uid=5000, gid=5000, home=/home/vmail/mydomain.com/fail2ban/ doveadm(fail2ban(a)mydomain.com): Debug: Quota root: name=User quota backend=maildir args= doveadm(fail2ban(a)mydomain.com): Debug: Quota rule: root=User quota mailbox=* bytes=0 messages=0 doveadm(fail2ban(a)mydomain.com): Debug: Quota rule: root=User quota mailbox=Trash bytes=+104857600 messages=0 doveadm(fail2ban(a)mydomain.com): Debug: Quota warning: bytes=0 (90%) messages=0 reverse=no command=quota-warning 90 fail2ban(a)mydomain.com mydomain.com doveadm(fail2ban(a)mydomain.com): Debug: Quota warning: bytes=0 (80%) messages=0 reverse=no command=quota-warning 80 fail2ban(a)mydomain.com mydomain.com doveadm(fail2ban(a)mydomain.com): Debug: Quota grace: root=User quota bytes=0 (10%) doveadm(fail2ban(a)mydomain.com): Debug: Namespace inbox: type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:/home/vmail/mydomain.com/fail2ban/ doveadm(fail2ban(a)mydomain.com): Debug: maildir++: root=/home/vmail/mydomain.com/fail2ban, index=, indexpvt=, control=, inbox=/home/vmail/mydomain.com/fail2ban, alt= doveadm(fail2ban(a)mydomain.com): Debug: quota: quota_over_flag check: quota_over_script unset - skipping doveadm(fail2ban(a)mydomain.com): Debug: INBOX: Mailbox opened because: index doveadm(fail2ban(a)mydomain.com): Debug: http-client: host 127.0.0.1: Host created doveadm(fail2ban(a)mydomain.com): Debug: http-client: peer 127.0.0.1:8983: Peer created doveadm(fail2ban(a)mydomain.com): Debug: http-client: queue http://127.0.0.1:8983: Setting up connection to 127.0.0.1:8983 (1 requests pending) doveadm(fail2ban(a)mydomain.com): Debug: http-client: peer 127.0.0.1:8983: Linked queue http://127.0.0.1:8983 (1 queues linked) doveadm(fail2ban(a)mydomain.com): Debug: http-client: queue http://127.0.0.1:8983: Started new connection to 127.0.0.1:8983 doveadm(fail2ban(a)mydomain.com): Debug: http-client: request [Req1: GET http://127.0.0.1:8983/solr/dovecot/select?fl=uid&rows=1&sort=uid+desc&q=box…] Submitted doveadm(fail2ban(a)mydomain.com): Debug: http-client: Waiting for 1 requests to finish doveadm(fail2ban(a)mydomain.com): Debug: http-client: peer 127.0.0.1:8983: Creating 1 new connections to handle requests (already 0 usable, connecting to 0, closing 0) doveadm(fail2ban(a)mydomain.com): Debug: http-client: peer 127.0.0.1:8983: Making new connection 1 of 1 doveadm(fail2ban(a)mydomain.com): Debug: http-client: conn 127.0.0.1:8983 [0]: HTTP connection created (1 parallel connections exist) doveadm(fail2ban(a)mydomain.com): Debug: http-client: conn 127.0.0.1:8983 [0]: Connected doveadm(fail2ban(a)mydomain.com): Debug: http-client: conn 127.0.0.1:8983 [0]: Ready for requests doveadm(fail2ban(a)mydomain.com): Debug: http-client: peer 127.0.0.1:8983: Successfully connected (connections=1) doveadm(fail2ban(a)mydomain.com): Debug: http-client: peer 127.0.0.1:8983: Using 1 idle connections to handle 1 requests (1 total connections ready) doveadm(fail2ban(a)mydomain.com): Debug: http-client: queue http://127.0.0.1:8983: Connection to peer 127.0.0.1:8983 claimed request [Req1: GET http://127.0.0.1:8983/solr/dovecot/select?fl=uid&rows=1&sort=uid+desc&q=box…] doveadm(fail2ban(a)mydomain.com): Debug: http-client: conn 127.0.0.1:8983 [0]: Claimed request [Req1: GET http://127.0.0.1:8983/solr/dovecot/select?fl=uid&rows=1&sort=uid+desc&q=box…] doveadm(fail2ban(a)mydomain.com): Debug: http-client: request [Req1: GET http://127.0.0.1:8983/solr/dovecot/select?fl=uid&rows=1&sort=uid+desc&q=box…] Sent header doveadm(fail2ban(a)mydomain.com): Debug: http-client: peer 127.0.0.1:8983: No more requests to service for this peer (1 connections exist) doveadm(fail2ban(a)mydomain.com): Debug: http-client: conn 127.0.0.1:8983 [0]: Got 200 response for request [Req1: GET http://127.0.0.1:8983/solr/dovecot/select?fl=uid&rows=1&sort=uid+desc&q=box…] (took 3 ms + 2 ms in queue) doveadm(fail2ban(a)mydomain.com): Error: fts_solr: Invalid XML input at 1:0: not well-formed (invalid token) (near: { "responseHeader":{ "status":0, "QTime":1, "params":{ "q":"box:8864fa1d51ea1d5a7b12000096a1aaf8 AND user:fa) doveadm(fail2ban(a)mydomain.com): Debug: http-client: conn 127.0.0.1:8983 [0]: Response payload stream destroyed (0 ms after initial response) doveadm(fail2ban(a)mydomain.com): Debug: http-client: request [Req1: GET http://127.0.0.1:8983/solr/dovecot/select?fl=uid&rows=1&sort=uid+desc&q=box…] Finished doveadm(fail2ban(a)mydomain.com): Debug: http-client: queue http://127.0.0.1:8983: Dropping request [Req1: GET http://127.0.0.1:8983/solr/dovecot/select?fl=uid&rows=1&sort=uid+desc&q=box…] doveadm(fail2ban(a)mydomain.com): Debug: http-client: host 127.0.0.1: Host is idle (timeout = 100 msecs) doveadm(fail2ban(a)mydomain.com): Debug: http-client: request [Req1: GET http://127.0.0.1:8983/solr/dovecot/select?fl=uid&rows=1&sort=uid+desc&q=box…] Free (requests left=1) doveadm(fail2ban(a)mydomain.com): Debug: http-client: All requests finished doveadm(fail2ban(a)mydomain.com): Error: Mailbox INBOX: Status lookup failed: Internal error occurred. Refer to server log for more information. [2017-11-30 13:13:57] doveadm(fail2ban(a)mydomain.com): Debug: http-client: peer 127.0.0.1:8983: Peer close doveadm(fail2ban(a)mydomain.com): Debug: http-client: peer 127.0.0.1:8983: Peer disconnect doveadm(fail2ban(a)mydomain.com): Debug: http-client: conn 127.0.0.1:8983 [0]: Peer closed doveadm(fail2ban(a)mydomain.com): Debug: http-client: conn 127.0.0.1:8983 [0]: Connection disconnect doveadm(fail2ban(a)mydomain.com): Debug: http-client: conn 127.0.0.1:8983 [0]: Connection destroy doveadm(fail2ban(a)mydomain.com): Debug: http-client: peer 127.0.0.1:8983: Peer destroy doveadm(fail2ban(a)mydomain.com): Debug: http-client: host 127.0.0.1: Host destroy doveadm(fail2ban(a)mydomain.com): Debug: http-client: queue http://127.0.0.1:8983: Destroy

2 2

Username character disallowed by auth_username_chars: 0x13
by Alex 30 Nov '17

30 Nov '17

Hi, I'm receiving the following messages in my mail logs that I haven't seen before: Nov 28 22:45:31 bwipropemail dovecot: auth: login(?,179.210.41.21): Username character disallowed by auth_username_chars: 0x13 (username: AB?) Nov 28 22:45:31 bwipropemail dovecot: auth: login(?,179.210.41.21): Username character disallowed by auth_username_chars: 0x13 (username: AB?) There's thousands of them, from hundreds of different IP addresses. I suspect it's an exploit attempt, but does anyone know which? I've added a fail2ban entry, but I'd also like to make sure my dovecot is not vulnerable. This is on a fc25 system with all updates.

2 2

Detect port number of SASL AUTH request?
by MRob 30 Nov '17

30 Nov '17

Hi, this is partly Postfix related, but I want to know if there could be way to distinguish port of the SASL AUTH request to segregate user services. Currently I use unix listener for dovecot sasl auth, but could change to inet_listener. Only way I can think is to have different SASL AUTH services for each master.cf entry where its needed. But is it possible for Dovecot to have more than one SASL AUTH services with different configuration setup? It would be nicer if there was a way for Postfix to tell Dovecot about the port the client connected on. Or maybe it can be done with a SASL realm? I'm not sure how? Any help please?

2 1

Plugin 'sieve_imapsieve' not found
by Christopher Satchell 30 Nov '17

30 Nov '17

Hello, when Dovecot launches (and pretty much at any action afterwards) it always throws following error: | managesieve: Fatal: Plugin 'sieve_imapsieve' not found from directory /usr/lib/dovecot/modules/sieve | config: Error: managesieve-login: dump-capability process returned 89 dovecot-sieve and dovecot-managesieved are both installed and the only plugin in the mentioned folder is `lib90_sieve_extprograms_plugin.so`. `doveconf -n` output: # 2.2.22 (fe789d2): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.13 (7b14904) managesieve(username): Fatal: Plugin 'sieve_imapsieve' not found from directory /usr/lib/dovecot/modules/sieve doveconf: Error: managesieve-login: dump-capability process returned 89 # OS: Linux 4.4.0-101-generic x86_64 Ubuntu 16.04.3 LTS auth_mechanisms = plain login mail_gid = vmail mail_home = /var/vmail/mailboxes/%d/%n mail_location = maildir:~/mail:LAYOUT=fs mail_privileged_group = vmail mail_uid = vmail namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Spam { auto = subscribe special_use = \Junk } mailbox Trash { auto = subscribe special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } plugin { imapsieve_mailbox1_before = file:/var/vmail/sieve/global/learn-spam.sieve imapsieve_mailbox1_causes = COPY imapsieve_mailbox1_name = Spam imapsieve_mailbox2_before = file:/var/vmail/sieve/global/learn-ham.sieve imapsieve_mailbox2_causes = COPY imapsieve_mailbox2_from = Spam imapsieve_mailbox2_name = * quota = maildir:User quota quota_exceeded_message = Benutzer %u hat das Speichervolumen überschritten. / User %u has exhausted allowed storage space. sieve = file:/var/vmail/sieve/%d/%n/scripts;active=/var/vmail/sieve/%d/%n/active-script.sieve sieve_before = /var/vmail/sieve/global/spam-global.sieve sieve_global_extensions = +vnd.dovecot.pipe sieve_pipe_bin_dir = /usr/bin sieve_plugins = sieve_imapsieve sieve_extprograms } protocols = imap lmtp sieve service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = vmail mode = 0660 user = vmail } } service imap-login { inet_listener imap { port = 143 } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0660 user = postfix } user = vmail } service managesieve-login { inet_listener sieve { port = 4190 } } ssl = required ssl_cert = </etc/letsencrypt/live/mail.domain.tld/fullchain.pem ssl_cipher_list = EDH+CAMELLIA:EDH+aRSA:EECDH+aRSA+AESGCM:EECDH+aRSA+SHA256:EECDH:+CAMELLIA128:+AES128:+SSLv3:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!DSS:!RC4:!SEED:!IDEA:!ECDSA:kEDH:CAMELLIA128-SHA:AES128-SHA ssl_dh_parameters_length = 2048 ssl_key = </etc/letsencrypt/live/mail.domain.tld/privkey.pem ssl_prefer_server_ciphers = yes ssl_protocols = !SSLv3 userdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } protocol imap { imap_idle_notify_interval = 29 mins mail_max_userip_connections = 20 mail_plugins = " quota imap_quota imap_sieve" } protocol lmtp { mail_plugins = " sieve" postmaster_address = postmaster(a)domain.tld } Thanks in advance. Chris

3 3

dovecot - 2 Faktor Auth
by Hajo Locke 30 Nov '17

30 Nov '17

Hallo Liste, hat sich schon mal jemand mit 2 Faktor Auth für dovecot beschäftigt? Es geht dabei nicht nur um die Absicherung einer Weboberfläche sondern direkt die Absicherung der Standard pop/imap Verbindungen des Clients. Wir machen das auth bisher über MySQL. Rein technisch würde das gehen, da man die Password-Query beliebig anpassen und auch mit allow_nets arbeiten kann. Es wäre eher die Herausforderung für den Client den 2. Faktor zu erfüllen und seine IP freizuschalten. Man müsste dann ja Clients wie Thunderbird veranlassen irgendwie die Challenge des 2. Faktors anzuzeigen und zu erfüllen. Vermutlich kann man das nur mit speziellen Clients z.B. einer eigenen App machen. Hat jemand in dem Bereich Erfahrung und kann diese teilen? Danke, Hajo

2 1

ManageSieve: authenticate "EXTERNAL" not behaving correctly
by Marc Weustink 30 Nov '17

30 Nov '17

Hi, I've enabled client certificate authentication for imap and managesieve. When I use Thunderbird with the sieve plugin it tries to login, but times out. Initially I reported this to the sieve plugin, but we came to the conclusion that it managesieve is misbehaving. https://github.com/thsmi/sieve/issues/94 Thunderbird (win10-64) 52.4.0 (32bit) Sieve 0.2.3k Dovecot (Ubuntu 16.04.3 LTS) 2.2.33.1-1 (sid) What happens is the following (p=plugin sends m=managesieve sends) p:authenticate "EXTERNAL" "" m:"" The response is unexpected. According to RFC 5804 an empty challenge/response is sent as an empty string. So I would expect: p:authenticate "EXTERNAL" "" m:OK "Logged in." With the use of gnutls-cli I could reproduce (c=I send m=managesieve sends) gnutls-cli --starttls --x509keyfile marc_mail.key --x509certfile marc_mail.crt -p sieve 172.17.1.4 ... m:OK "TLS negotiation successful." c:authenticate "EXTERNAL" "" m:"" c:"" m:OK "Logged in." However if I try the "imap" syntax (rfc4959) I get logged in at once ... m:OK "TLS negotiation successful." c:authenticate "EXTERNAL" "=" m:OK "Logged in." Note that this is an imap only extention, "=" is an invalid base64 encoding. Marc

2 4

Re: iPhone/iPad IMAP connection bursts causes user+IP exceeded
by Joseph Tam 30 Nov '17

30 Nov '17

On 30/11/17 03:03, Robert Giles wrote: >> David, >> >> I'd say that if you set the mail_max_userip_connections value to a >> large-ish number (300-400), your users likely won't notice an issue on >> their iOS 10.x and iOS 11.x devices.? It's more of an annoyance in the >> logs, and occasionally the iOS Mail app will show that it is stuck >> checking mail for a few minutes (when the new max_userip_connections is >> reached again, but with a large number, it happens much less frequently). >> >> Keep in mind max_userip applies to *authenticated* users, so a true, >> malicious DoS situation is less likely. Maybe not malicious DoS, but if your running a shared platform, or supports hundreds of users using Apple products, you can do the arithmetic and see that you can run into problems with resource starvation. >> And yeah, I'm definitely tired of Apple going off and breaking their >> software, because the blame always comes back on IT instead of Apple :( Apple, are you listening? Would it kill you to design your software not to treat remote mail servers like personal servers that can serve up connections like candy? (I also see that some iOS clients keeps an open SMTP connection on standby, even though it's not sending mail.) Joseph Tam <jtam.home(a)gmail.com>

1 0

iPhone/iPad IMAP connection bursts causes user+IP exceeded
by Joseph Tam 30 Nov '17

30 Nov '17

I frequently see this from my iPhone/iPad IMAP users: Oct 24 21:30:55 server dovecot: imap-login: Login: user=<user>, ... [... repeated 10 times ...] Oct 24 21:32:54 server dovecot: imap-login: Maximum number of connections from user+IP exceeded (mail_max_userip_connections=12): user=<user> Oct 24 21:32:54 server dovecot: imap(user): Logged out ... [... repeated 11 times ...] These bursts of logins/max/logouts would cycling on for a few minutes. Googling this problem seems to turn up lots of similar complaints about iOS mail mail clients. e.g. https://discussions.apple.com/thread/2547839?tstart=0 iOS mail readers do not limit connections limit as other mailreaders can. I could increase mail_max_userip_connections, but that just moves the goal posts. Using the new rawlog feature in 2.2.26 (thanks Dovecot team!), I was able to see that these connection bursts are caused by clients doing global searches. The rawlogs show each mailbox being SELECT'd and searched (e.g. From header string): 1477369968.730450 2 ID ("name" "iPad Mail" "version" "13G36" "os" "iOS" "os-version" "9.3.5 (13G36)") 1477369968.781932 3 SELECT {mailbox} 1477369968.961636 4 UID SEARCH RETURN (COUNT) 1:* NOT DELETED 1477369969.006087 5 UID SEARCH RETURN (ALL) 1:* NOT DELETED 1477369969.052701 6 UID SEARCH RETURN (ALL) {search-term} NOT DELETED 1477369974.624153 7 LOGOUT Questions: 1) How does this affect the user? I heard from one user that it makes global searches unusable because his reader just spins its wheel. I'm not sure whether this is impatience or this results in failed searches. 2) Is there a client-side fix (e.g. connection limiting)? Apple appears to be intransigent on addressing this. 3) Will maintaining search indices (e.g. solr) help with this? Maybe the searches are taking too long and the connections pile up waiting for previous searches to finish. Thanks, Joseph Tam <jtam.home(a)gmail.com>

3 2

XDOVECOT capability?
by Hogne Vevle 28 Nov '17

28 Nov '17

Hi! Here and there, I'm seeing mentions of a "XDOVECOT" capability - e.g. on https://documentation.open-xchange.com/7.8.2/middleware/components/search/c… . However, I can't seem to find any documentation on what this actually does. We need to add this capability to our servers in order for certain functionality of Open Xchange App Suite to work properly (as seen in the link above), but we don't want to blindly update our entire Dovecot cluster just because their docs tell us to :) Can someone, please, shed some light on what other effects we can expect to see after enabling this capability, if any? Or is it simply a way of telling clients that "Hey, I'm a Dovecot server" - nothing else? Cheers, - Hogne

2 1

How to make dovecot access a MySQL database with a certain domain?
by Spike98 28 Nov '17

28 Nov '17

I am trying to make a mail server with Postfix using the Dovecot software. At the time of wanting to access my server from a mail client, it does not let me access and see the logs of my server with the command: $ service dovecot status with the following error: dovecot: auth-worker(2769): Error: mysql(127.0.0.1): Connect failed to database (postfix): Access denied for user 'postfix'@'localhost' (using password: YES) - waiting for 125 seconds before retry From what I understand of this error is that it is trying to enter 'postfix' @ 'localhost' instead of the domain that I specify when I made the database that is mydomain.com How can you make dovecot go to MySQL with postfix(a)mydomain.com instead of localhost This is my Dovecot configuration /etc/dovecot/dovecot-sql.conf.ext driver=mysql default_pass_scheme=PLAIN-MD5 connect=host=127.0.0.1 dbname=postfix user=postfix password=postfix password_query=SELECT username,domain,password FROM usuarios WHERE username='%n' AND domain='%d' user_query=SELECT 1007 as uid, 1007 as gid, concat("maildir:/var/vmail",domain,'/',username,'/') as mail FROM usuarios WHERE username='%n' AND domain='%d' iterate_query=SELECT username,domain FROM usuarios

3 2

Imapsieve plugin?
by Bruce 28 Nov '17

28 Nov '17

Debian stretch. Dovecot 2.2.27 I was working with a document that references the imapsieve plugin. It references the /etc/dovecot/conf.d/90-imapsieve.conf file. The only reference I've found for it is https://wiki2.dovecot.org/Pigeonhole/Sieve/Plugins/IMAPSieve#Configuration. I've got dovecot-managedsieve and dovecot-sieve already installed. Am I missing something obvious here? Bruce M.

2 2

Re: Server migration
by Joseph Tam 27 Nov '17

27 Nov '17

> I've asked this before, but now it's time to move one server to > another, I can't delay the operation anymore (the older server is > failing) > > Both server are pretty old: 1.2.15 > > Probably, faster way would be to rsync all mailboxes from the older > server to the newer one. I can start migrating everything while > running then, stop the older server and sync only what is changed, > keeping downtime at minimum. > > Any better solution ? It depends on your situation. If you only have a small userbase with modest amount of mail, you can probably take your whole system down, do a one time migration, then cut over to the new system without too much downtime. If you have medium sized operation, then what you propose above would work. If you have a large userbase (or large user mailboxes), or you want to minimize downtime, you can incrementally migrate per user so that any particular user experiences a small window of outage, but the system is online for everybody else. This, of course, requires a lot more setup and planning. Joseph Tam <jtam.home(a)gmail.com>

1 0

lmtp-Eroor
by Jakob Schürz 27 Nov '17

27 Nov '17

Hi There! I can not find anything about this message: dovecot[23202]: lmtp(jakob): Debug: Mailbox <lmtp DATA>: Opened mail UID=1 because: header Message-ID (Cache file is unusable) dovecot[23202]: lmtp(jakob): Debug: Mailbox <lmtp DATA>: Opened mail UID=1 because: virtual size (Cache file is unusable) And the next is: dovecot[23202]: lmtp(jakob): rphlK01SG1qiWgAAk1Mx3g: sieve: msgid=<E1eJ6cv-000624-Je(a)xxx.xxxxxxx.xxx>: stored mail into mailbox 'INBOX/TESTORDNER' It happens when a mail gets delivered through lmtp. My exim-Transport is this: dovecot_lmtp: driver = lmtp socket = /var/run/dovecot/lmtp #maximum number of deliveries per batch, default 1 batch_max = 200 And my dovecot-Conf is this: # dovecot -n # 2.2.27 (c0f36b0): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.16 (fed8554) # OS: Linux 4.13.0-trunk-amd64 x86_64 Debian 9.1 btrfs auth_debug = yes auth_mechanisms = plain login cram-md5 digest-md5 auth_socket_path = /var/run/dovecot/auth-userdb auth_verbose = yes first_valid_uid = 1000 imap_capability = +XDOVECOT imap_client_workarounds = tb-extra-mailbox-sep lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes listen = *, ::1 login_trusted_networks = 127.0.0.1/8 192.168.0.0/24 192.168.1.0/24 172.17.0.0/24 172.18.0.0/24 mail_debug = yes mail_gid = vmail mail_home = /var/mail/%u mail_location = maildir:/var/mail/%u/Maildir:LAYOUT=fs:INDEX=/var/lib/dovecot/db/indexes/Maildir/%u:INDEXPVT=/var/lib/dovecot/db/indexes/Maildir/%u:CONTROL=/var/lib/dovecot/db/control/Maildir/%u mail_plugins = zlib quota acl listescape mail_log notify virtual mail_privileged_group = vmail mail_server_admin = mailto:jakob@xundeenergie.at mail_shared_explicit_inbox = yes mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext mmap_disable = yes namespace { hidden = no inbox = no list = children location = maildir:/var/mail/mailarchiv/%u/:LAYOUT=fs:INDEX=/var/lib/dovecot/db/indexes/mailarchiv/%u:INDEXPVT=/var/lib/dovecot/db/indexes/mailarchiv/%u mailbox incoming { auto = create } mailbox outgoing { auto = create } prefix = Mailarchiv/ separator = / subscriptions = no type = private } namespace { list = children location = maildir:/var/mail/public/:LAYOUT=fs:INDEX=/var/lib/dovecot/db/indexes/public/%u:INDEXPVT=/var/lib/dovecot/db/indexes/public/%u prefix = Roseggergasse/ separator = / subscriptions = no type = public } namespace Geteilt { hidden = no inbox = no list = children location = maildir:/var/mail/%%u/Maildir:LAYOUT=fs:INDEXPVT=/var/lib/dovecot/db/indexes/shared/%u/%%u:INDEX=/var/lib/dovecot/db/indexes/shared/%u/%%u prefix = Geteilt/%%n/ separator = / subscriptions = no type = shared } namespace Real { hidden = yes list = no location = virtual:/var/mail/real:INDEX=/var/lib/dovecot/db/indexes/real/%u prefix = Real/ separator = / subscriptions = no } namespace Synoptic { hidden = no list = children location = virtual:/var/mail/virtual:INDEX=/var/lib/dovecot/db/indexes/virtual/%u mailbox INBOX/Archives { auto = no special_use = \Archive } mailbox INBOX/Drafts { auto = no special_use = \Drafts } mailbox INBOX/Entwürfe { auto = no special_use = \Drafts } mailbox INBOX/Junk { auto = no special_use = \Junk } mailbox INBOX/Spam { auto = no special_use = \Junk } mailbox Sent { auto = no special_use = \Sent } prefix = Synoptic/ separator = / subscriptions = no } namespace inbox { hidden = no inbox = yes location = mailbox Archiv { auto = no special_use = \Archive } mailbox Archive { auto = no special_use = \Archive } mailbox Archives { auto = no special_use = \Archive } mailbox "Deleted Messages" { auto = no special_use = \Trash } mailbox Drafts { auto = no special_use = \Drafts } mailbox Entwürfe { auto = no special_use = \Drafts } mailbox "Gelöschte Elemente" { auto = no special_use = \Trash } mailbox "Gelöschte Objekte" { auto = no special_use = \Trash } mailbox Gesendet { auto = no special_use = \Sent } mailbox "Gesendete Elemente" { auto = no special_use = \Sent } mailbox "Gesendete Objekte" { auto = no special_use = \Sent } mailbox Important { auto = no } mailbox Junk { auto = subscribe autoexpunge = 30 days special_use = \Junk } mailbox Mistkübel { auto = no special_use = \Trash } mailbox Papierkorb { auto = no special_use = \Trash } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { auto = no special_use = \Sent } mailbox Spam { auto = no special_use = \Junk } mailbox Synoptic/Alle { auto = no comment = All my messages special_use = \All } mailbox Trash { auto = no special_use = \Trash } mailbox Wichtig { auto = create } prefix = INBOX/ separator = / subscriptions = no type = private } namespace subscriptions { hidden = yes list = no location = prefix = subscriptions = yes } passdb { args = scheme=CRYPT username_format=%u /etc/dovecot/users driver = passwd-file } plugin { acl = vfile:/etc/dovecot/dovecot-acl:cache_secs=300 acl_shared_dict = file:/var/lib/dovecot/db/shared-mailboxes.db fts = lucene fts_autoindex = yes fts_autoindex_max_recent_msgs = 80 fts_decoder = decode2text.sh fts_index_timeout = 90 fts_lucene = whitespace_chars=@. normalize no_snowball mail_home = /var/mail/%u setting_name = sieve, managedsieve sieve = file:/var/mail/%u/sieve/;active=/var/mail/%u/sieve/%u.sieve } postmaster_address = postmaster@localhost protocols = " imap lmtp sieve pop3 sieve" service anvil { unix_listener anvil-auth-penalty { mode = 00 } } service auth { unix_listener auth-client { group = vmail mode = 0666 user = vmail } unix_listener auth-userdb { group = vmail mode = 0666 user = vmail } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } process_min_avail = 1 service_count = 1 } service imap { executable = imap postlogin process_limit = 1024 vsz_limit = 400 M } service lmtp { user = vmail vsz_limit = 400 M } service postlogin { executable = script-login -d rawlog } ssl = required ssl_cert = </etc/dovecot/dovecot.crt ssl_cipher_list = ALL:!ADH:!LOW:!SSLv2:!SSLv3:!EXP:!aNULL:+HIGH:+MEDIUM ssl_key = # hidden, use -P to show it ssl_protocols = TLSv1.2 TLSv1.1 TLSv1 !SSLv3 userdb { args = username_format=%u /etc/dovecot/users default_fields = home=/var/mail/%u driver = passwd-file } verbose_proctitle = yes protocol lmtp { auth_username_format = %n mail_plugins = zlib quota acl listescape mail_log notify virtual quota sieve acl } protocol lda { mail_plugins = zlib quota acl listescape mail_log notify virtual quota sieve acl } protocol imap { mail_max_userip_connections = 10 mail_plugins = zlib quota acl listescape mail_log notify virtual imap_quota imap_acl }

3 6

doveadm backup or sync Read status
by DurgaPrasad - DatasoftComnet 27 Nov '17

27 Nov '17

Hello All, Sorry for reposting. Earlier I was in digest mode hence could not update the previous post. I am trying to migrate mail from a dovecot-2.0.13-1_129.el5 maildir to dovecot-2.2.10-8.el7.x86_64 centos 7 mdbox. I am using this command doveadm -v -o mail_fsync=never backup -R -u user(a)domain.com imapc: also tried doveadm -v -o mail_fsync=never sync -1 -R -u user(a)domain.com imapc: Both work flawlessly - Timo is great !!! - My issue is the source folders are all marked as read. The target folders of-course have unread OK. POP3 UIDLs are also ok (tested for one user). (1) My question is how can I make the source remain same (unread status etc.) so that I do migrate the various domains in a transparent manner and then switch servers ?. I have multiple virtual domains. (2) One more question do I have to do both imapc_ & also pop3c_ migration since I need the POP UIDLs to work properly for my outlook POP3 users after migration ?. I want to know the possibilities. Thanks DP --- This email has been checked for viruses by Avast antivirus software. https://www.avast.com/antivirus

1 0

Server migration
by Gandalf Corvotempesta 27 Nov '17

27 Nov '17

I've asked this before, but now it's time to move one server to another, I can't delay the operation anymore (the older server is failing) Both server are pretty old: 1.2.15 Probably, faster way would be to rsync all mailboxes from the older server to the newer one. I can start migrating everything while running then, stop the older server and sync only what is changed, keeping downtime at minimum. Any better solution ? No, server upgrade is not possible. Not at this time. It's too time consuming and I have to move asap.

2 1

Dovecot LMTP Proxy + STARTTLS?
by Tobi 27 Nov '17

27 Nov '17

Hi I got dovecot 2.2.26 on a Centos7 with latest updates. Dovecot is configured to act as director and delivers to my two backend servers. I enabled lmtp proxy on director to listen on port 24. Now I see in msg headers that the connection to the lmtp proxy uses STARTTLS but the connection from proxy to backend seems to be unencrypted. Is it possible to enforce the use of STARTTLS in the connection from the director to the backend as well? Regards tobi

5 4

doveadm backup or sync Read status
by DurgaPrasad - DatasoftComnet 26 Nov '17

26 Nov '17

Hello all, I am trying to migrate mail from a dovecot-2.0.13-1_129.el5 maildir to dovecot-2.2.10-8.el7.x86_64 centos 7 mdbox. I am using this command doveadm -v -o mail_fsync=never backup -R -u user(a)domain.com imapc: also tried doveadm -v -o mail_fsync=never sync -1 -R -u user(a)domain.com imapc: Both work flawlessly - Timo is great !!! - My issue is the source folders are all marked as read. The target folders of-course have unread OK. POP3 UIDLs are also ok (tested for one user). (1) My question is how can I make the source remain same (unread status etc.) so that I do migrate the various domains in a transparent manner and then switch servers ?. I have multiple virtual domains. (2) One more question do I have to do both imapc_ & also pop3c_ migration since I need the POP UIDLs to work properly for my outlook POP3 users after migration ?. Thanks DP --- This email has been checked for viruses by Avast antivirus software. https://www.avast.com/antivirus

1 0

Mark message as read when moved to Trash
by Felix Rubio Dalmau 26 Nov '17

26 Nov '17

Hi all, When I send a message to trash, without previously reading it (just with the subject is enough to say I do not want to read it), it remains as "unread". Then, clients (I am using Kmail) report there are unread message, when all of them are in Trash. The question, then is: Is there any way to automatically mark a message as read, when that message is moved to Trash? Thank you! Felix

5 5

Re: Sieve coding question
by Stephan Bosch 25 Nov '17

25 Nov '17

Op 11/25/2017 om 5:33 PM schreef Roger Klorese: > On Sat, Nov 25, 2017 at 4:56 AM Stephan Bosch <stephan(a)rename-it.nl > <mailto:stephan@rename-it.nl>> wrote: > > Op 11/19/2017 om 8:54 AM schreef Roger B.A. Klorese: > > On 11/16/17 11:03 AM, Stephan Bosch wrote: > >> Op 11/16/2017 om 7:42 PM schreef lists.dovecot(a)rogerklorese.com > <mailto:lists.dovecot@rogerklorese.com>: > >>> Is there a more appropriate list on which to ask for assistance in > >>> coding Sieve rules, or may I ask here? > >> I know of no other suitable venue, so go ahead. > >> > >> Regards, > >> > >> Stephan. > > > And I > > > Here is the config. I don't think IMAPsieve is configured... > > Then I don't understand what you mean. Sieve is normally only involved > at initial delivery, not when messages are moved between mailboxes. > > Regards, > > Stephan. > > > Of cpurse, that was my understanding too. Hence the question. Are you sure your mail client doesn't have any rules of its own that may be doing this? Regards, Stephan.

1 0

Sieve coding question
by lists.dovecot＠rogerklorese.com 25 Nov '17

25 Nov '17

Is there a more appropriate list on which to ask for assistance in coding Sieve rules, or may I ask here?

3 5

Re: Upgrade to 2.2.32 from 2.2.15 failed
by Mark Foley 25 Nov '17

25 Nov '17

No, is that something that would make a difference between 2.2.15 and 2.2.32? --Mark On Fri, 24 Nov 2017 21:37:47 -0800 Gary <lists(a)lazygranch.com> wrote: > Out of curiosity, do you do a !SSLv3 in the conf file? > > > Original Message >> From: mfoley(a)ohprs.org >> Sent: November 24, 2017 9:04 PM >> To: dovecot(a)dovecot.org >> Subject: Upgrade to 2.2.32 from 2.2.15 failed >> >> I have a problem. I have been running Dovecot 2.2.15 and I'd like to upgrade. My distro >> (Slackware) has dovecot 2.2.32 available. I downloaded and installed that, but it didn't work. >> No one was able to get messages from the dovecot server on their workstations. The following is >> the entire dovecot log file from startup to the last message generated. No more messages went >> into the logfile after line 76, even with clients trying to connect. The 174.233.134.88 IP is >> from an external user connecting from his iPhone. The normal successful message from this user >> are shown at bottom. >> >> I'm suspecting something to do with line 18 where is says "Auth process broken." If anyone has >> any insight I'd deeply appreciate it as I'd love to upgrade. >> >> THX -- Mark >> >> 1 Nov 24 19:22:24 master: Info: Dovecot v2.2.32 (dfbe293d4) starting up for imap (core dumps disabled) >> 2 Nov 24 19:22:24 ssl-params: Info: Generating SSL parameters >> 3 Nov 24 19:22:26 ssl-params: Info: SSL parameters regeneration completed >> 4 Nov 24 19:23:02 imap-login: Debug: SSL: where=0x10, ret=1: before/accept initialization [174.233.134.88] >> 5 Nov 24 19:23:02 imap-login: Debug: SSL: where=0x2001, ret=1: before/accept initialization [174.233.134.88] >> 6 Nov 24 19:23:02 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read client hello A [174.233.134.88] >> 7 Nov 24 19:23:02 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write server hello A [174.233.134.88] >> 8 Nov 24 19:23:02 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write certificate A [174.233.134.88] >> 9 Nov 24 19:23:02 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write key exchange A [174.233.134.88] >> 10 Nov 24 19:23:02 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write server done A [174.233.134.88] >> 11 Nov 24 19:23:02 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 flush data [174.233.134.88] >> 12 Nov 24 19:23:02 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read client certificate A [174.233.134.88] >> 13 Nov 24 19:23:02 imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3 read client key exchange A [174.233.134.88] >> 14 Nov 24 19:23:02 imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3 read client key exchange A [174.233.134.88] >> 15 Nov 24 19:23:02 auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth >> 16 Nov 24 19:23:02 auth: Debug: Module loaded: /usr/lib64/dovecot/auth/lib20_auth_var_expand_crypt.so >> 17 Nov 24 19:23:02 auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth >> 18 Nov 24 19:23:02 imap-login: Info: Disconnected: Auth process broken (disconnected before auth was ready, waited 0 secs): user=<>, rip=174.233.134.88, lip=98.102.63.107, TLS handshaking, session=<idAcrMNe8xqu6YZY> >> 19 Nov 24 19:23:02 imap-login: Debug: SSL: where=0x10, ret=1: before/accept initialization [174.233.134.88] >> 20 Nov 24 19:23:02 imap-login: Debug: SSL: where=0x2001, ret=1: before/accept initialization [174.233.134.88] >> 21 Nov 24 19:23:02 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read client hello A [174.233.134.88] >> 22 Nov 24 19:23:02 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write server hello A [174.233.134.88] >> 23 Nov 24 19:23:02 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write certificate A [174.233.134.88] >> 24 Nov 24 19:23:02 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write key exchange A [174.233.134.88] >> 25 Nov 24 19:23:02 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write server done A [174.233.134.88] >> 26 Nov 24 19:23:02 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 flush data [174.233.134.88] >> 27 Nov 24 19:23:02 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read client certificate A [174.233.134.88] >> 28 Nov 24 19:23:02 imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3 read client key exchange A [174.233.134.88] >> 29 Nov 24 19:23:02 imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3 read client key exchange A [174.233.134.88] >> 30 Nov 24 19:23:02 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read client key exchange A [174.233.134.88] >> 31 Nov 24 19:23:02 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read certificate verify A [174.233.134.88] >> 32 Nov 24 19:23:02 imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3 read finished A [174.233.134.88] >> 33 Nov 24 19:23:03 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read finished A [174.233.134.88] >> 34 Nov 24 19:23:03 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write change cipher spec A [174.233.134.88] >> 35 Nov 24 19:23:03 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write finished A [174.233.134.88] >> 36 Nov 24 19:23:03 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 flush data [174.233.134.88] >> 37 Nov 24 19:23:03 imap-login: Debug: SSL: where=0x20, ret=1: SSL negotiation finished successfully [174.233.134.88] >> 38 Nov 24 19:23:03 imap-login: Debug: SSL: where=0x2002, ret=1: SSL negotiation finished successfully [174.233.134.88] >> 39 Nov 24 19:23:04 auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth >> 40 Nov 24 19:23:04 auth: Debug: Module loaded: /usr/lib64/dovecot/auth/lib20_auth_var_expand_crypt.so >> 41 Nov 24 19:23:04 auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth >> 42 Nov 24 19:23:04 imap-login: Info: Disconnected: Auth process broken (disconnected before auth was ready, waited 2 secs): user=<>, rip=174.233.134.88, lip=98.102.63.107, TLS, session=<YGw7rMNe+Rqu6YZY> >> 43 Nov 24 19:23:04 imap-login: Debug: SSL alert: close notify [174.233.134.88] >> 44 Nov 24 19:23:05 imap-login: Debug: SSL: where=0x10, ret=1: before/accept initialization [174.233.134.88] >> 45 Nov 24 19:23:05 imap-login: Debug: SSL: where=0x2001, ret=1: before/accept initialization [174.233.134.88] >> 46 Nov 24 19:23:05 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read client hello A [174.233.134.88] >> 47 Nov 24 19:23:05 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write server hello A [174.233.134.88] >> 48 Nov 24 19:23:05 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write certificate A [174.233.134.88] >> 49 Nov 24 19:23:05 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write key exchange A [174.233.134.88] >> 50 Nov 24 19:23:05 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write server done A [174.233.134.88] >> 51 Nov 24 19:23:05 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 flush data [174.233.134.88] >> 52 Nov 24 19:23:05 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read client certificate A [174.233.134.88] >> 53 Nov 24 19:23:05 imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3 read client key exchange A [174.233.134.88] >> 54 Nov 24 19:23:05 imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3 read client key exchange A [174.233.134.88] >> 55 Nov 24 19:23:05 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read client key exchange A [174.233.134.88] >> 56 Nov 24 19:23:05 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read certificate verify A [174.233.134.88] >> 57 Nov 24 19:23:05 imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3 read finished A [174.233.134.88] >> 58 Nov 24 19:23:05 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read finished A [174.233.134.88] >> 59 Nov 24 19:23:05 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write change cipher spec A [174.233.134.88] >> 60 Nov 24 19:23:05 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write finished A [174.233.134.88] >> 61 Nov 24 19:23:05 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 flush data [174.233.134.88] >> 62 Nov 24 19:23:05 imap-login: Debug: SSL: where=0x20, ret=1: SSL negotiation finished successfully [174.233.134.88] >> 63 Nov 24 19:23:05 imap-login: Debug: SSL: where=0x2002, ret=1: SSL negotiation finished successfully [174.233.134.88] >> 64 Nov 24 19:23:08 auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth >> 65 Nov 24 19:23:08 auth: Debug: Module loaded: /usr/lib64/dovecot/auth/lib20_auth_var_expand_crypt.so >> 66 Nov 24 19:23:08 auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth >> 67 Nov 24 19:23:08 imap-login: Info: Disconnected: Auth process broken (disconnected before auth was ready, waited 3 secs): user=<>, rip=174.233.134.88, lip=98.102.63.107, TLS, session=<7ZF4rMNe8hqu6YZY> >> 68 Nov 24 19:23:08 imap-login: Debug: SSL alert: close notify [174.233.134.88] >> 69 Nov 24 19:23:16 auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth >> 70 Nov 24 19:23:16 auth: Debug: Module loaded: /usr/lib64/dovecot/auth/lib20_auth_var_expand_crypt.so >> 71 Nov 24 19:23:16 auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth >> 72 Nov 24 19:23:16 imap-login: Info: Disconnected: Auth process broken (disconnected before auth was ready, waited 0 secs): user=<>, rip=192.168.0.54, lip=192.168.0.2, session=<6bbyrMNeGM/AqAA2> >> 73 Nov 24 19:24:13 auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth >> 74 Nov 24 19:24:13 auth: Debug: Module loaded: /usr/lib64/dovecot/auth/lib20_auth_var_expand_crypt.so >> 75 Nov 24 19:24:13 auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth >> 76 Nov 24 19:24:13 imap-login: Info: Disconnected: Auth process broken (disconnected before auth was ready, waited 0 secs): user=<>, rip=192.168.0.52, lip=192.168.0.2, session=<b75YsMNeb9nAqAA0> >> >> Normal OK messages from dovecot 2.2.15: >> >> Nov 24 23:50:49 imap-login: Debug: SSL: where=0x20, ret=1: SSL negotiation finished successfully [174.233.134.88] >> Nov 24 23:50:49 imap-login: Debug: SSL: where=0x2002, ret=1: SSL negotiation finished successfully [174.233.134.88] >> Nov 24 23:50:49 auth: Debug: client in: AUTH 1 PLAIN service=imap secured session=vQnEacde6QCu6YZY lip=98.102.63.107 rip=174.233.134.88 lport=993 rport=6889 resp=AG0udGhlbQAhbXRfMTAxOQ== (previous base64 data may contain sensitive data) >> Nov 24 23:50:49 auth-worker(17650): Debug: shadow(m.them,174.233.134.88): lookup >> Nov 24 23:50:49 auth: Debug: client passdb out: OK 1 user=m.them >> >> Finally, the 2.2.15 doveconf, which I used the same for 2.2.32: >> >> > doveconf -n >> # 2.2.15: /usr/local/etc/dovecot/dovecot.conf >> # OS: Linux 4.4.88 x86_64 Slackware 14.2 >> auth_debug = yes >> auth_debug_passwords = yes >> auth_gssapi_hostname = $ALL >> auth_krb5_keytab = /etc/dovecot/dovecot.keytab >> auth_mechanisms = plain login gssapi >> auth_use_winbind = yes >> auth_username_format = %n >> auth_verbose = yes >> auth_verbose_passwords = plain >> disable_plaintext_auth = no >> info_log_path = /var/log/dovecot_info >> mail_location = maildir:~/Maildir >> passdb { >> driver = shadow >> } >> protocols = imap >> ssl_cert = </etc/ssl/certs/OHPRS/GoDaddy/Apache/2016-08-10/54e789087d419b6e.crt >> ssl_key = </etc/ssl/certs/OHPRS/GoDaddy/mail.ohprs.org.key >> userdb { >> driver = passwd >> } >> verbose_ssl = yes

1 0

Dovecot proxy
by Federico Bartolucci 24 Nov '17

24 Nov '17

Hello, has someone already tested the dovecot-proxy with more than 10 nodes? or someone knows anyway if is it officially supported up to a certain number? Thanks.

2 1

set parameter per user
by A. Schulze 24 Nov '17

24 Nov '17

Hello, My dovecot server (2.2.33.2) work with "lmtp_save_to_detail_mailbox = no" Now I would like to enable the feature for /some/ users. Is that an option that could be set from an LDAP entry? I tried the following: modify my ldap schema to allow an optional attribute "lmtp-save-to-detail-mailbox" in /etc/dovecot/ldap.conf user_attrs = ... =lmtp_save_to_detail_mailbox=%{ldap:lmtp-save-to-detail-mailbox:no}, =... Now I set an ldapattribute "lmtp-save-to-detail-mailbox" with value "yes" for some users. Unfortunately messages to user+extension@domain are still delivered to INBOX/ while they should be delivered to INBOX/extension. I also tried to make the attribute accessible vi pass_attr and userdb_foo = ... because I use prefetch driver as userdb. I also disabled prefetching at all but no luck :-/ any Ideas? Andreas

3 5

Exclude disabled accounts
by Evgeniy Korneechev 23 Nov '17

23 Nov '17

Hello! We have userdb=passwd. userdb { driver = passwd #server was entered domain Active Directory override_fields = home=/var/vmail/glu_vrem/%u } If I disable in AD user's account, he can not sign in. But he can and will receive letters, which of course is not correct. How can I exclude disabled accounts from 'userdb'? dovecot -n: # 2.2.27 (c0f36b0): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.16 (fed8554) # OS: Linux 4.4.39-std-def-alt0.M80P.1 x86_64 ALT 8.1 Server auth_debug = yes auth_debug_passwords = yes auth_mechanisms = plain login cram-md5 auth_socket_path = /var/run/dovecot/auth-userdb auth_username_chars = auth_verbose = yes auth_verbose_passwords = plain base_dir = /var/run/dovecot/ debug_log_path = /var/log/dovecot disable_plaintext_auth = no first_valid_gid = 502 first_valid_uid = 502 last_valid_gid = 268999999 last_valid_uid = 268999999 log_path = /var/log/dovecot login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c mail_access_groups = vmail mail_debug = yes mail_gid = 502 mail_location = maildir:/%Lh/Maildir/:INDEX=/%Lh/Maildir/ mail_plugins = " quota autocreate" mail_privileged_group = vmail mail_uid = 502 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext imapflags notify mbox_write_locks = fcntl namespace { list = children location = maildir:%%h/Maildir:INDEX=~/Maildir/shared/%%u prefix = shared/%%u/ separator = / subscriptions = yes type = shared } namespace inbox { inbox = yes location = prefix = separator = / type = private } passdb { driver = pam } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { quota_rule = *:storage=5G recipient_delimiter = + sieve = /etc/dovecot/sieves/default.sieve sieve_default = /etc/dovecot/sieves/default.sieve sieve_dir = ~/sieve sieve_extensions = +notify +imapflags sieve_max_redirects = 8 } protocols = imap pop3 lmtp sieve service auth-worker { user = root } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-userdb { group = vmail mode = 0666 user = vmail } } service dict { unix_listener dict { group = vmail mode = 0600 user = vmail } } service imap-login { inet_listener imap { port = 143 } } service imap { process_limit = 1024 vsz_limit = 256 M } service lmtp { unix_listener lmtp { mode = 0666 } } service managesieve-login { inet_listener sieve { port = 4190 } vsz_limit = 64 M } service pop3-login { inet_listener pop3 { port = 110 } } service pop3 { process_limit = 1024 } ssl_ca = </usr/share/ca-certificates/ca-bundle.crt ssl_cert = </etc/dovecot/server.crt ssl_key = # hidden, use -P to show it userdb { driver = passwd override_fields = home=/var/vmail/glu_vrem/%u } userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lmtp { mail_plugins = " quota autocreate sieve" } protocol lda { mail_plugins = " quota autocreate sieve quota" plugin { quota = dict:user::file:/var/vmail/glu_vrem/%n/.quotausage } } protocol imap { mail_plugins = " quota autocreate autocreate imap_quota" plugin { autocreate = INBOX autocreate2 = Sent autocreate3 = Trash autocreate4 = Drafts autocreate5 = Junk autosubscribe = INBOX autosubscribe2 = Sent autosubscribe3 = Trash autosubscribe4 = Drafts autosubscribe5 = Junk quota = dict:user::file:/var/vmail/glu_vrem/%n/.quotausage } } protocol sieve { mail_max_userip_connections = 10 managesieve_implementation_string = Dovecot Pigeonhole managesieve_logout_format = bytes=%i/%o managesieve_max_compile_errors = 5 managesieve_max_line_length = 65536 } protocol pop3 { pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = %08Xu%08Xv } -- WBR, Korneechev Evgeniy BaseALT/ALTLinux Team

2 1

Passing information from passdb to userdb
by Qmail 23 Nov '17

23 Nov '17

I'm trying to hack together a new authentication back-end and I wanted to know if it's possible to pass values from passdb to userdb in the auth_request structure at authentication time. I modified struct auth_request in auth-request.h to contain a new variable and it gets set properly in my passdb, however the value is not there when checking for it userdb. I'm very novice when it comes to Dovecot programming so any help is appreciated. Thanks!

2 3

[Dovecot] Configure replication in backup mode
by japerez 22 Nov '17

22 Nov '17

Dovecot 2.2.27 (c0f36b0) I'm trying to configure dovecot to backup all my email to a secondary server using "dsync". I got it working in "sync" mode or two-way synchonization, that means whatever happens in one server gets replicated in the other. However, documentation also says that a one way synchronization is posible, yet, after spending a good amount of hours searching, I failed to find what do I have to modify in my "30-dsync.conf" to do so. My 30-dsync.conf reads as follows: #This sets globally the port needed to connect #to the doveadm service #doveadm_port = 12345 # Set the password globally to use for connecting to # and requiring for the doveadm service doveadm_password = +++++++++++++ # Set the directory for validating certificates # provided when running with SSL enabled # Should be the standard OpenSSL certificate directory by default ssl_client_ca_dir = /etc/ssl/certs # Configure the doveadm service to listen service doveadm { inet_listener { # port to listen on port = 12345 # enable SSL # ssl = yes } } # Configure the aggregator service for notifications service aggregator { fifo_listener replication-notify-fifo { # Your mail user that's managing files generally is used here user = +++++ mode = 0755 } unix_listener replication-notify { user = +++++ mode = 0755 } } # Configure the replicator service service replicator { user = root process_min_avail = 1 unix_listener replicator-doveadm { user = root mode = 0755 } } replication_dsync_parameters = -d -N -l 30 -U -x nobody # Configure target hosts for replication # tcps can be tcp if you don't want to connect with SSL # :port can be omitted if it's the default set globally for doveadm plugin { mail_replica = tcp:*.*.*.*:12345 } Thanks.

1 0

dovecot initscript
by dovecot＠schoepfer.info 22 Nov '17

22 Nov '17

Hi, about https://wiki.dovecot.org/DovecotInit, i wondered about stop) if test $running = yes; then echo "Stopping Dovecot" kill `cat $pidfile` echo "." else echo "Dovecot is already stopped." fi ;; Is "doveadm stop" technically the same, or better/worse/safer? Does "doveadm stop" wait until all child processes are finished, or would "sleep 1" in the restart-function still be necessary in this case? Is "kill -HUP `cat $pidfile`" technically the same as "doveadm reload"? If it'a all fine to use doveadm in an initscript, i there a reason to not add "doveadm start" to doveadm functionality? Surely this is not that important, but maybe a bit more consistent. Thanks, Johannes

1 0

Log rotation and combining...
by SH Development 22 Nov '17

22 Nov '17

I have recently noticed that my dovecot-deliver.log is huge and wanted to start rotating it. So a couple of questions: 1. Can the dovecot-deliver.log be combined with the maillog, that gets rotated weekly? If it can be done, is it advisable? Since the inception of this particular server, the log file has been located in the /home/vmail directory. Is there a reason it shouldn’t be located in the /var/log directory with the maillog? 2. Separate from above, if I create a new logrotate script example as follows: # dovecot SIGUSR1: Re-opens the log files. /home/vmail/dovecot-deliver.log { missingok notifempty delaycompress sharedscripts postrotate /bin/kill -USR1 `cat /var/run/dovecot/master.pid 2>/dev/null` 2> /dev/null || true endscript } I get the following error only when cron tries to run it: /etc/cron.daily/logrotate: error: stat of /home/vmail/dovecot-deliver.log failed: Permission denied Owner on the log are vmail:vmail. If I manually force logrotate on this particular log, it works fine. Ethon

3 6

Re: Errors installing on Ubuntu 17.04
by Someone 21 Nov '17

21 Nov '17

On Tue, 21/11/17, Jeff Kletsky <dovecot(a)allycomm.com> wrote: > On 11/20/17 1:58 PM, Someone wrote: > > > I've been struggling with this on and off for a while now. Upon > > attempting to install Dovecot on Ubuntu 17.04 I get the following errors [...] > "Hint: Some lines were ellipsized, use -l to show in full." I'm aware of that, yes. Unfortunately I don't know how to tell any of the myriad of package installers to "do the right thing" in such cases, and, as stated, this is happening during installation. > Without seeing the full messages, my guess is that you've got problems with your IPv6 configuration or connectivity. Entirely possible, since I don't have IPv6 and have completely disabled it as a result. Even were I to re-enable it, I don't see it would help if problems with IPv6 connectivity would also be a problem (because I don't have it).

2 1

home folder for virtual users with autoexpunge setting
by felix＠kngnt.org 21 Nov '17

21 Nov '17

Hi all, I have enabled today the autoexpunge setting for Trash folders, and I am getting the following error when Dovecot starts: imap(<USER>): Error: autoexpunge: Couldn't create dovecot.autoexpunge.lock lock: User has no home directory I understand this is correct: as <USER> is a virtual user, it does not have home folder. Is there any way I can set the autoexpunge plugin to store the lock file in the virtual user email home folder? Thank you! Felix

4 4

macros in config support
by Arkadiusz Miśkiewicz 21 Nov '17

21 Nov '17

Hi. Is there any support for macros in dovecot configuration - user defined macros? For example: server-config.conf: %define my_db_name "aaa" %define my_db_host "db.example.com" %define my_db_pass "sdfdsfsdfsdf2313" %define server_id 10 %define something blabla ... dovecot-sql.conf: !include server-config.conf connect = host=%{my_db_host} dbname=%{my_db_name} .... iterate_query = SELECT ... WHERE os.id_pop3_server=%{server_id} ... Basically to be able to use own macros anywhere in config files. -- Arkadiusz Miśkiewicz, arekm / ( maven.pl | pld-linux.org )

1 0

LMTP "Relative home directory paths not supported"
by Jeff Kletsky 21 Nov '17

21 Nov '17

I'm in the process of moving from LDA to LMTP (Postfix upstream) prior to a transition off `nix accounts to virtual accounts and am stumped by LMTP reporting dovecot: lmtp(10019, jeff(a)example.com) Error: Relative home directory paths not supported: 0 LDA does /not /have any problems with PAM or passwd-file passdb/userdb and the ubiquitous definition of mail_location = maildir:~/Maildir:LAYOUT=fs I have yet to be able to get LMTP to deliver mail, nor have I found anything on the Dovecot wiki to describe how to represent that the mail_location is <whatever/userdb/returned/for/home>/Maildir I'd prefer to localize the user-to-file-space mapping localized to Dovecot (rather than split within Postfix and Dovecot) I'd definitely appreciate any pointers to web pages or specific suggestions as to how to resolve this. Excerpts of Dovecot local.conf follow, full doveconf -n output on request. The/users /file is in the same format as FreeBSD /etc/master.passwd with name, password, UID, gid, home_dir, and shell meaningfully populated. The configuration below works with LDA (end-to-end). With LMTP, it identifies <jeff(a)example.com> as a valid destination, but fails on delivery with the "relative home directory paths" error message. passdb { driver = passwd-file args = /path/to/users } userdb { driver = passwd-file args = username_format=%n /path/to/users } # See http://wiki2.dovecot.org/MailLocation/Maildir # https://wiki.dovecot.org/VirtualUsers/Home mail_location = maildir:~/Maildir:LAYOUT=fs # mail_location = maildir:%h/Maildir:LAYOUT=fs Thanks! Jeff

2 4

Errors installing on Ubuntu 17.04
by Someone 21 Nov '17

21 Nov '17

I've been struggling with this on and off for a while now. Upon attempting to install Dovecot on Ubuntu 17.04 I get the following errors Selecting previously unselected package dovecot-imapd. (Reading database ... 243684 files and directories currently installed.) Preparing to unpack .../dovecot-imapd_1%3a2.2.27-2ubuntu2_amd64.deb ... Unpacking dovecot-imapd (1:2.2.27-2ubuntu2) ... Processing triggers for dovecot-core (1:2.2.27-2ubuntu2) ... Processing triggers for ufw (0.35-4) ... Setting up dovecot-imapd (1:2.2.27-2ubuntu2) ... Creating config file /etc/dovecot/conf.d/20-imap.conf with new version Processing triggers for dovecot-core (1:2.2.27-2ubuntu2) ... Job for dovecot.service failed because the control process exited with error code. See "systemctl status dovecot.service" and "journalctl -xe" for details. invoke-rc.d: initscript dovecot, action "restart" failed. dovecot.service - Dovecot IMAP/POP3 email server Loaded: loaded (/lib/systemd/system/dovecot.service; enabled; vendor preset: enabled) Active: failed (Result: exit-code) since Thu 2017-10-05 14:08:56 BST; 17ms ago Docs: man:dovecot(1) http://wiki2.dovecot.org/ Process: 8880 ExecStop=/usr/bin/doveadm stop (code=exited, status=0/SUCCESS) Process: 8885 ExecStart=/usr/sbin/dovecot (code=exited, status=89) Main PID: 8729 (code=exited, status=0/SUCCESS) Oct 05 14:08:56 ash systemd[1]: Starting Dovecot IMAP/POP3 email server... Oct 05 14:08:56 ash dovecot[8885]: Error: socket() failed: Address family n…ocol Oct 05 14:08:56 ash dovecot[8885]: Error: service(imap-login): listen(::, 1…ocol Oct 05 14:08:56 ash dovecot[8885]: master: Error: socket() failed: Address …ocol Oct 05 14:08:56 ash dovecot[8885]: Fatal: Failed to start listeners Oct 05 14:08:56 ash systemd[1]: dovecot.service: Control process exited, co…s=89 Oct 05 14:08:56 ash systemd[1]: Failed to start Dovecot IMAP/POP3 email server. Oct 05 14:08:56 ash systemd[1]: dovecot.service: Unit entered failed state. Oct 05 14:08:56 ash systemd[1]: dovecot.service: Failed with result 'exit-code'. Hint: Some lines were ellipsized, use -l to show in full. dpkg: error processing package dovecot-core (--configure): subprocess installed post-installation script returned error exit status 1 (and more) Apologies for any wrapping due to long lines in the above output.

2 1

Re: dovecot-lda without starting dovecot?
by Aki Tuomi 20 Nov '17

20 Nov '17

you could try setting protocols = in config file to disable (most) listeners. ---Aki TuomiDovecot oy -------- Original message --------From: Stephan von Krawczynski <skraw.ml(a)ithnet.com> Date: 03/11/2017 19:39 (GMT+02:00) To: Dovecot Mailing List <dovecot(a)dovecot.org> Subject: Re: dovecot-lda without starting dovecot? On Fri, 3 Nov 2017 19:30:22 +0200 Sami Ketola <sami.ketola(a)dovecot.fi> wrote: > > On 3 Nov 2017, at 18.23, Stephan von Krawczynski <skraw.ml(a)ithnet.com> > > wrote: Hello Aki, > > > > let me explain this a bit more. We do not intend to use only some copied > > binary. Of course we would do a full installation of dovecot and > > pidgeonhole, only we question if it is necessary to start the dovecot > > init-file bringing up the dovecot imap/imap-login/pop/pop-login/auth and > > other processes. Indeed we have virtual users. > > > While it might be possible to disable all the other services except master I > must ask why? How would the users be accessing their mails then? > > Sami Hello Sami, you did not read my first post. We are talking about a multihost installation where one host does SMTP and LDA, and the other does POP and IMAP (with dovecot). Now we want to use dovecot-lda for the local delivery _on the SMTP host_. So there is no need for open POP or IMAP ports and the corresponding running services. -- Regards, Stephan

7 19

doveadm mailbox list -s Segmentation fault
by Kristjan Eentsalu 20 Nov '17

20 Nov '17

Hey, I'm getting Segmentation fault when doing "doveadm mailbox list -s -u kristjan.eentsalu". doveadm mailbox list -u kristjan.eentsalu works fine. OS: FreeBSD 11.1-RELEASE-p1 Dovecot 2.2.33.2 , pigenhole 0.4.21 Trace and dovecot -n below GNU gdb 6.1.1 [FreeBSD] Copyright 2004 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "amd64-marcel-freebsd"... Core was generated by `doveadm mailbox list -s -u kristjan.eentsalu'. Program terminated with signal 11, Segmentation fault. Reading symbols from /lib/libz.so.6...done. Loaded symbols for /lib/libz.so.6 Reading symbols from /lib/libcrypt.so.5...done. Loaded symbols for /lib/libcrypt.so.5 Reading symbols from /usr/local/lib/dovecot/libdovecot-storage.so.0...done. Loaded symbols for /usr/local/lib/dovecot/libdovecot-storage.so.0 Reading symbols from /usr/local/lib/dovecot/libdovecot.so.0...done. Loaded symbols for /usr/local/lib/dovecot/libdovecot.so.0 Reading symbols from /lib/libc.so.7...done. Loaded symbols for /lib/libc.so.7 Reading symbols from /usr/local/lib/dovecot/lib01_acl_plugin.so...done. Loaded symbols for /usr/local/lib/dovecot/lib01_acl_plugin.so Reading symbols from /usr/local/lib/dovecot/lib10_quota_plugin.so...done. Loaded symbols for /usr/local/lib/dovecot/lib10_quota_plugin.so Reading symbols from /usr/local/lib/dovecot/lib15_notify_plugin.so...done. Loaded symbols for /usr/local/lib/dovecot/lib15_notify_plugin.so Reading symbols from /usr/local/lib/dovecot/lib20_mail_log_plugin.so...done. Loaded symbols for /usr/local/lib/dovecot/lib20_mail_log_plugin.so Reading symbols from /usr/local/lib/dovecot/doveadm/lib10_doveadm_acl_plugin.so...done. Loaded symbols for /usr/local/lib/dovecot/doveadm/lib10_doveadm_acl_plugin.so Reading symbols from /usr/local/lib/dovecot/doveadm/lib10_doveadm_quota_plugin.so...done. Loaded symbols for /usr/local/lib/dovecot/doveadm/lib10_doveadm_quota_plugin.so Reading symbols from /usr/local/lib/dovecot/doveadm/lib10_doveadm_sieve_plugin.so...done. Loaded symbols for /usr/local/lib/dovecot/doveadm/lib10_doveadm_sieve_plugin.so Reading symbols from /usr/local/lib/dovecot-2.2-pigeonhole/libdovecot-sieve.so.0...done. Loaded symbols for /usr/local/lib/dovecot-2.2-pigeonhole/libdovecot-sieve.so.0 Reading symbols from /usr/local/lib/libldap-2.4.so.2...done. Loaded symbols for /usr/local/lib/libldap-2.4.so.2 Reading symbols from /usr/local/lib/liblber-2.4.so.2...done. Loaded symbols for /usr/local/lib/liblber-2.4.so.2 Reading symbols from /usr/local/lib/dovecot/libdovecot-lda.so.0...done. Loaded symbols for /usr/local/lib/dovecot/libdovecot-lda.so.0 Reading symbols from /usr/lib/libssl.so.8...done. Loaded symbols for /usr/lib/libssl.so.8 Reading symbols from /lib/libcrypto.so.8...done. Loaded symbols for /lib/libcrypto.so.8 Reading symbols from /libexec/ld-elf.so.1...done. Loaded symbols for /libexec/ld-elf.so.1 #0 0x0000000800d77e04 in mailbox_tree_traverse (tree=0x0, path=0x801c1a540 "INBOX", create=false, created_r=0x7fffffffe4f7) at mailbox-tree.c:103 103 if (*path != tree->separator && *path != '\0') # 2.2.33.2 (d6601f4ec): /usr/local/etc/dovecot/dovecot.conf # Pigeonhole version 0.4.21 (92477967) # OS: FreeBSD 11.1-RELEASE-p1 amd64 auth_master_user_separator = * auth_verbose_passwords = plain disable_plaintext_auth = no lmtp_save_to_detail_mailbox = yes mail_access_groups = imapmail mail_gid = imapmail mail_plugins = acl quota mail_log notify mail_uid = imapmail mailbox_list_index = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext editheader namespace { hidden = no inbox = no list = no location = prefix = separator = / subscriptions = yes type = private } namespace avalik { hidden = no list = children location = maildir:/mail/imap/ domain.ee/shared:INDEXPVT=%h/public:LAYOUT=fs:DIRNAME=dsfFSFS prefix = shared/ separator = / subscriptions = no type = public } namespace inbox { alias_for = hidden = no inbox = yes list = yes location = mailbox Drafts { special_use = \Drafts } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Spam { special_use = \Junk } mailbox Trash { special_use = \Trash } prefix = INBOX/ separator = / subscriptions = no type = private } namespace user { list = children location = maildir:%%h/Maildir:LAYOUT=fs:DIRNAME=dsfFSFS:INDEXPVT=%h/shared/%%n prefix = user/%%n/ separator = / subscriptions = no type = shared } passdb { args = /usr/local/etc/dovecot/master-users driver = passwd-file master = yes pass = yes } passdb { args = /usr/local/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } passdb { args = username_format=%u /usr/local/etc/dovecot/users driver = passwd-file } plugin { acl = vfile:/mail/dovecot/db/global-acls:cache_secs=300 acl_shared_dict = file:/mail/dovecot/db/shared-mailboxes quota = maildir quota2 = maildir:Public quota:ns=shared/ quota2_rule = *:storage=100G quota_grace = 10%% quota_rule = *:storage=5G quota_rule2 = INBOX/Trash:storage=+100M quota_status_nouser = DUNNO quota_status_overquota = 552 5.2.2 Mailbox is full quota_status_success = DUNNO recipient_delimiter = + sieve = file:~/sieve;active=~/.dovecot.sieve sieve_extensions = +editheader } protocols = imap lmtp sieve service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } service managesieve-login { inet_listener sieve { port = 4190 } inet_listener sieve_deprecated { port = 2000 } service_count = 0 vsz_limit = 64 M } ssl = no ssl_cert = </etc/ssl/servercerts/domain.crt ssl_key = # hidden, use -P to show it userdb { args = /usr/local/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } userdb { args = username_format=%u /usr/local/etc/dovecot/users default_fields = uid=1000 gid=1000 home=/mail/imap/%d/user/%n mail=maildir:~/Maildir:LAYOUT=fs:DIRNAME=dsfFSFS driver = passwd-file } protocol lmtp { mail_plugins = acl quota mail_log notify sieve postmaster_address = postmaster(a)domain.ee } protocol imap { mail_plugins = acl quota mail_log notify imap_acl imap_quota } Kristjan

2 4

how to fix this warnig
by Chandran Manikandan 20 Nov '17

20 Nov '17

Hi Friends, I have noticed below log in dovecot.log on my machine Centos 6.7 32 bit. Warning: Inotify instance limit for user 89 (UID vpopmail) exceeded, disabling. Increase /proc/sys/fs/inotify/max_user_instances I have increased manually but after reboot goto the same existing default value. How do i fix this issue permanently. Advance thanks for your help. -- *Thanks,* *Manikandan.C* *System Administrator*

2 2

Dovecots header files not optimized for external plugins
by Jan Engelhardt 19 Nov '17

19 Nov '17

Making third-party plugins for Dovecot is really hard and frustrating. Using dovecot 2.2.33.2 and the following sources, the compile errors keep coming. The use of g++ is mandated as the underlying backend this plugin will access only has a C++ interface. == Source 1 /* g++-7 -c a.cpp */ #include <byteswap.h> #include <dovecot/lib.h> #include <dovecot/auth-request.h> #include <dovecot/passdb.h> static enum passdb_result authdb_mapi_logon(struct auth_request *rq, const char *password) { int x = dev_null_fd + bswap_16(1); } == Problems 1 /usr/include/dovecot/compat.h:45:4: error: #error uoff_t size not set # error uoff_t size not set == Source 2 /* g++-7 -DHAVE_CONFIG_H -c a.cpp */ #include "config.h" /* generated by my configure */ #include <byteswap.h> #include <dovecot/lib.h> #include <dovecot/auth-request.h> #include <dovecot/passdb.h> static enum passdb_result authdb_mapi_logon(struct auth_request *rq, const char *password) { int x = dev_null_fd + bswap_16(1); } == Problems 2 In file included from /usr/include/bits/byteswap.h:35:0, from /usr/include/byteswap.h:24, from a.cpp:2: /usr/include/dovecot/byteorder.h:32:24: error: expected unqualified-id before ‘__extension__’ static inline uint16_t bswap_16(uint16_t in); == Other problems dovecot headers files are missing 'extern "C"' lines. This means the linkage of symbols like dev_null_fd is not what it should be. I can't use extern "C" { #include <dovecot/...> } either because then the standardy library headers that are included by dovecot headers can easily start acting up too.

2 2

user selection for replication
by Remko Lodder 18 Nov '17

18 Nov '17

Hi, I am running a setup where I have a multitude of users. Usernames are formed in both user-domain.tld and user(a)domain.tld. One to be able to login with the @ account to dovecot / webmail etc and the - account to be able to deliver email to it. Virtualmin does it like that for example. This is fine for logging in to accounts and telling postfix via lmtp which users are valid. But I do not want the - AND @ account to both synchronise. How can I select which users can replicate and then ideally like I can do in ldap ‘uid=*@*’ for example? Thanks Remko

1 0

Re: Plugin virtual, Horde BAD IMAP QRESYNC not enabled
by wertstoffe＠nurfuerspam.de 18 Nov '17

18 Nov '17

Return-path: <xxxxxx-xxxxxxxx-xxxxxxxxx-xxxxxxx-xxxxxxx-xxx(a)xxxxxx.xxxxxxxxx.xx.xxx> Envelope-to: xxxxx@xxxxxxxxx Delivery-date: xxx, xx xxx xxxx xx:xx:xx +xxxx Received: xxxx [xxx.x.x.x] (xxxx=xxxxxxxxx) xx xxxxxxxxx.xxxxxxxxxxxx.xx xxxx xxxxx (xxxx x.xx) (xxxxxxxx-xxxx <xxxxxx-xxxxxxxx-xxxxxxxxx-xxxxxxx-xxxxxxx-xxx(a)xxxxxx.xxxxxxxxx.xx.xxx>) xx xxxxxx-xxxxxx-xx xxx xxxxx@xxxxxxxxx; xxx, xx xxx xxxx xx:xx:xx +xxxx Delivered-To: xxxxxxx.xxxxxxx(a)xxxxx.xxx Received: xxxx xxxxx-xxxx.x.xxxxxx.xxx [xx.xxx.xxx.xxx] xx xxxxxxxxx xxxx xxxx (xxxxxxxxx-x.x.xx) xxx <xxxxx@xxxxxxxxx> (xxxxxx-xxxx); xxx, xx xxx xxxx xx:xx:xx +xxxx (xxxx) Received: xx xx.xxx.xx.xxx xxxx xxxx xx xxxxxxxxxxxxxxxx; xxx, xx xxx xxxx xx:xx:xx -xxxx (xxx) X-Google-Smtp-Source: xxxxxxxxxxxxxxxxxxxxxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx X-Received: xx xx.xxx.xx.xx xxxx xxxx xx xxxxxxxxxxxxxxx.x.xxxxxxxxxxxxx; xxx, xx xxx xxxx xx:xx:xx -xxxx (xxx) ARC-Seal: x=x; x=xxx-xxxxxx; x=xxxxxxxxxx; xx=xxxx; x=xxxxxx.xxx; x=xxx-xxxxxxxx; x=xxxxxxxxxxxxxxx++xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx/xxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxx+xxxxxxxx xxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxx xxxxxxxxx/xxxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxxxxxx/xxxxxxxxxxxxxxxxxx xxxxxxxx+xxxxxxxxxxxxxx/xxxxxxxxxxxx+x/xxxxxxxxxxxxxxxxxxxxxxxxxxxxx xx+x== ARC-Message-Signature: x=x; x=xxx-xxxxxx; x=xxxxxxx/xxxxxxx; x=xxxxxx.xxx; x=xxx-xxxxxxxx; x=xxxxxxxx-xx:xxxxxxx-xx:xxxx-xx:xxxxx-xx:xxxx-xxxxxxx :xxxx-xxxxxxxxxxx:xxxx:xxxxxxx:xx:xxxx:xxx-xxxxxxxxxxxxxx-xxxxxxx; xx=xxxxxxxxxxxxxx+/xxxxxx/xxxxxxxxxxxxxxxxxxxx=; x=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxx+xx+xxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxx xxxxx/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxx== ARC-Authentication-Results: x=x; xx.xxxxxx.xxx; xxx=xxxx (xxxxxx.xxx: xxxxxx xx xxxxxx-xxxxxxxx-xxxxxxxxx-xxxxxxx-xxxxxxx-xxx(a)xxxxxx.xxxxxxxxx.xx.xxx xxxxxxxxxx xxx.xxx.xx.xxx xx xxxxxxxxx xxxxxx) xxxx.xxxxxxxx=xxxxxx-xxxxxxxx-xxxxxxxxx-xxxxxxx-xxxxxxx-xxx(a)xxxxxx.xxxxxxxxx.xx.xxx Received: xxxx xxxx.xxxxxxxxx.xx.xxx (xxxx.xxxxxxxxx.xx.xxx. [xxx.xxx.xx.xxx]) xx xx.xxxxxx.xxx xxxx xxxxxx xx xxxxxxxxxxxxxx.xxx.xxxx.xx.xx.xx.xx.xx xxx <xxxxxxx.xxxxxxx(a)xxxxx.xxx> (xxxxxxx=xxxxxx xxxxxx=xxxxx-xxx-xxxxxx-xxx-xxxxxx xxxx=xxx/xxx); xxx, xx xxx xxxx xx:xx:xx -xxxx (xxx) Received-SPF: xxxx (xxxxxx.xxx: xxxxxx xx xxxxxx-xxxxxxxx-xxxxxxxxx-xxxxxxx-xxxxxxx-xxx(a)xxxxxx.xxxxxxxxx.xx.xxx xxxxxxxxxx xxx.xxx.xx.xxx xx xxxxxxxxx xxxxxx) xxxxxx-xx=xxx.xxx.xx.xxx; Authentication-Results: xx.xxxxxx.xxx; xxx=xxxx (xxxxxx.xxx: xxxxxx xx xxxxxx-xxxxxxxx-xxxxxxxxx-xxxxxxx-xxxxxxx-xxx(a)xxxxxx.xxxxxxxxx.xx.xxx xxxxxxxxxx xxx.xxx.xx.xxx xx xxxxxxxxx xxxxxx) xxxx.xxxxxxxx=xxxxxx-xxxxxxxx-xxxxxxxxx-xxxxxxx-xxxxxxx-xxx(a)xxxxxx.xxxxxxxxx.xx.xxx Received: xx xxxx.xxxxxxxxx.xx.xxx xx xxxxxxxxxxxx xxx <xxxxxxx.xxxxxxx(a)xxxxx.xxx>; xxx, xx xxx xxxx xx:xx:xx -xxxx (xxxxxxxx-xxxx <xxxxxx-xxxxxxxx-xxxxxxxxx-xxxxxxx-xxxxxxx-xxx(a)xxxxxx.xxxxxxxxx.xx.xxx>) From: "xx xxxxxxx" <xxxxxx(a)xxxxxx.xx.xxx> To: <xxxxxxx.xxxxxxx(a)xxxxx.xxx> Date: Fri, 15 Sep 2017 08:55:12 -0600 List-Unsubscribe: <xxxxxx:xxxxx-xxxxxxxxxxxxxxxxxxxx-xxxxxxxxxxxxxxxxxxxxxx-xxxxxxxxxxxxxxxxxx-xxxxxxxxxxxxxxxxxx-xxxxxxxxxx@xxxxx.xxxxxxxxx.xx.xxx> MIME-Version: x.x Reply-To: "xxxxxxxx.xxxxxxx" <xxxxx-xxxxxxxxxxxxxxxxxx-xxxxxxxx-xxxxxxxxx-xxxxxxx-xxx(a)xxxxxxxxxxx.xx.xxx> List-ID: <xxxxxxxxxxxxxxx.xx.xxxxx> X-CSA-Complaints: xxxxxxxxxxxxxxxxxxx(a)xxx.xx x-job: xxxxxxxxxxxxxxx Message-ID: <xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx(a)xxxxxxxxxxx.xx.xxxxx> Feedback-ID: xxxxxxx:xxxxxxx:xxx.xxx.xx.xxx:xxxxxxxxx Content-Type: multipart/alternative; boundary="5leCU61ckUeP=_?:" X-SA-Exim-Connect-IP: xxx.x.x.x X-SA-Exim-Mail-From: xxxxxx-xxxxxxxx-xxxxxxxxx-xxxxxxx-xxxxxxx-xxx(a)xxxxxx.xxxxxxxxx.xx.xxx X-Spam-Checker-Version: xxxxxxxxxxxx x.x.x (xxxx-xx-xx) xx xxxxxxxxx X-Spam-Level: X-Spam-Status: xx, xxxxx=x.x xxxxxxxx=x.x xxxxx=xxxxxxxxxxxx xxxxxxxxx=xxx xxxxxxxxxxxxxxx=xx xxxxxxx=x.x.x Subject: xxxxxxxx xxxxx xxx xxxx xxxxxxx xxx xxxxxxx xxx xxxxxxxx & xxxxxxxxxxxx X-SA-Exim-Version: x.x.x (xxxxx xxx, xx xxx xxxx xx:xx:xx +xxxx) X-SA-Exim-Scanned: xxx (xx xxxxxxxxx.xxxxxxxxxxxx.xx) xxxx xx x xxxxx-xxxx xxxxxxx xx xxxx xxxxxx. --xxxxxxxxxxxx=x?: xxxxxxx-xxxx: xxxx/xxxxx; xxxxxxx="xxx-x" xxxxxxx-xxxxxxxx-xxxxxxxx: xxxx ===================================================================== xxxxxxx xxxxxx ===================================================================== xx xxxxxxxx xxxx://xxxxx.xxxxxxxxx.xx.xxx/?xx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx --------------------------------------------------------------------- xxxxxx xxxxxx xxxx://xxxxx.xxxxxxxxx.xx.xxx/?xx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx --------------------------------------------------------------------- xxxxxxx xxxxxx xxxx://xxxxx.xxxxxxxxx.xx.xxx/?xx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx --------------------------------------------------------------------- xx xxxxxx xxxx://xxxxx.xxxxxxxxx.xx.xxx/?xx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxx xxxxx xxxxxx (xxx xx.x.xx.xx xxxx) xxxxxx xxxxx xxxx: xxxx://xxxxx.xxxxxxxxx.xx.xxx/?xx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxx: xxxxxxxx xxxxxxxx: xx xxxxxxx xxxxxxxx xxx, xx xxxxxxxxx xxxxxxxx xxx, xx xxxxxx xxxxxxxxxxx, xx xxxxxxxx xxx xx: xxxxxxx xxxxxxx xxxx: xxx xx xxxx xxxxxxxxxxx: xxxx xxxxxxx xxxxxxxx xxx xxxxxxxxx xxxxx xxxxxx. xxx xxxxxx xxxxxxxx xxxxxxxx xxxxxxxx xxxx xx xxxxxxxxx, xxxxxxxxxx, xxx xxxxx, xxxxxx-xxx, xxx xxx-xx-xxxxxx. xxxx xxxxxxx xx xxxxxxxx xxx xxxxxxxxx xxxxxxxx xxxxxx xxxxxxx x xxxxxxxxx xxxxxxxxx xxxxxx. xxxxxxxx - xxxxxx xx x xxxxxxxx xxxxx xxx xxxx xx xx xxxxx xx. xxxxx xxxxxxxx xx xxxxxxxxx xxxxxxxxxxx xxxx xx xxxxxxxxx xx xxxxxxx xxx xxxx xx xxxxxxxxxxxxx xxxxxxx xxxx xx xxxx xxxxxxxxxx xx xxxx, xxxxxxxx xxxxxx, xx xxxxxxxxxxxxx xxxxxx xx xxxx. xxx xxxxx xx xx xxxx xx x xxxxxxx xxxxxxxxxxxxx xxxxx xx xxxxxx xx xxx xxxxx. xxxxxxxxxxx - xxxxxx xx xxxxxxxxx xxxxxxx xx xxxxxx xxxxxxxxxxx. xxxxxxxxx xxxxxxxxxxxx xxxxxx xx xxxxxxx xx xxxx xxxxxxxx xxxxxxxxxxx. xxxxx xx xxxxxxxxx xxx xxx-xxxxxxx xxxxxxxxxxx, xxxx-xxx xx xxxxxxxx xxxxxxxxx. xxxx xxxx xxxxxxx xxxx xxxxxx xxxx x xxxxxxx, xxx xxx xxxxxxxxxxxxx xxxxxxx. xxxxxxx - xxxxxx xx xxxxxxxxxxx xxx xxxxxxxxxxxx xxxx xxx xxxx xxx xxxxxx xxxx xxxxxx, xxxx xx xxxxxxxxxxx xxxxxxxx xxx xxxx xxxxxxxxx. xxxxx xxxxxxxxxxxx xxx xx xxxxx xx xxxx xxxxxxxxxx xx xxxx xxxxxxxx xxxx xx xxxxxxx ==================================================================== xx.xxx xxxx://xxxxx.xxxxxxxxx.xx.xxx/?xx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxx xxxx://xxxxx.xxxxxxxxx.xx.xxx/?xx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxx xxxx://xxxxx.xxxxxxxxx.xx.xxx/?xx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxx xxxxxxx xxxx://xxxxx.xxxxxxxxx.xx.xxx/?xx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xx xxxxxxxx xxxx xxxxxxx. xx xxx'x xxxx xx xxxxxxxxxxx xxxxxxxxx x-xxxxx xxxx xx xxxxxxxxx xxxxxxx xxxxxx xxx xxxxxxxxxxx, xxxxxx xxxxx xxxx. xxxx://xxxxx.xxxxxxxxx.xx.xxx/?xx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxx xxxx xxxxxxxxxxx xxxxxxxxx xx'x xxxxxxx xxxxxxxx xxx xxxxxxxxx, xxxxxx xxxxx xxx xxxxxxx xxxxxxxxx. xxxx://xxxxx.xxxxxxxxx.xx.xxx/?xx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xx xxxxxxxx xxxx xxxxxx xx xxxxxx, xxxxxxxxxxxxx, xxxxxxxxxx xx xxxxxxxx, xxxxxx xxx xxx 'xxxxxxx xxxxxxxx xxxx' xxxxxxxxx xxxx xx'x xxxxxxxx xxxx xxxxxx xxxxxx. xxxx://xxxxx.xxxxxxxxx.xx.xxx/?xx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx (x) xxxxxxxxx xxxx xx xxxxxxxxxxx xxxxxxx, x.x. xxx xxxxxxxxxxx xxxxxxxxx xxxxxx xx xxxxxxx xx xxxxxx xxxxxxx xxxxxx. --xxxxxxxxxxxx=x?: xxxxxxx-xxxx: xxxx/xxxx; xxxxxxx="xxx-x" xxxxxxx-xxxxxxxx-xxxxxxxx: xxxx <xxx xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxxx.xxxx?xxxxxx-xxxxxxxxxxxxxxxxxx-xxxxxxxxxxxxxxxxxxxxxx-xxxxxxxxxxxxxxxxxx-xxxxxxxxxx-xxxxxxxxxxxxxxxxxxxxxx-xxxxxxxxxx" xxxxx="x" xxxxxx="x"><xxxx> <xxxx> </xxxx> <xxxx xxxxx="#xxxxxx" xxxxxxx="#xxxxxx" xxxxxxxxxx="x" xxxx="#xxxxxx" xxxxxxxxxxxx="x" xxxxxxxxxxx="x" xxxx="#xxxxxx" xxxxxxxxx="x" xxxxx="#xxxxxx"> <xxxxx xxxxx="xxxxxx" xxxxxx="x" xxxxxxxxxxx="x" xxxxxxxxxxx="x" xxxxx="xxx"> <xx> <xx>     <xxxxx xxxxxx="x" xxxxxxxxxxx="x" xxxxxxxxxxx="x" xxxxx="xxxx" xxxxx="xxx" xxxxx="xxxxxx-xxxxxxxx:xxxxxxxx; xxx-xxxxx-xxxxxx:xxx; xxx-xxxxx-xxxxxx:xxx;"><xx><xx xxxxx="xx" xxxxx="xxxx-xxxxxx"><xxx xxxxxx="x" xxxxx="xxxx-xxxxxx xxxxxxxxx" xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxx.xxx" xxxxx="xxxxxxx:xxxxx;" xxxxx="xx" xxxxxx="xx"/></xx><xx xxxxx="xxx" xxxxx="xxxxxxxxx" xxxxx="xxxx-xxxxxx:xxxxx, xxxxxxxxx, xxxx-xxxxx; xxxx-xxxx:xxxx; xxxxx:#xxxxxx; xxxx-xxxxx:xxxxx;">xxxx xxx xxx xxxx xxxxxx xxxxxx xxx xxx x xxxxxxxx xxx xxx| <x xxxxx="xxxxx: #xxxxxx;xxxx-xxxxxxxxxx: xxxx;" xxxx="xxxx://xxxx.xxxxxxxxx.xx.xxx/?xx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx">xxx xxxx</x></xx></xx><xx><xx xxxxxxx="x" xxxxx="xxxxxx-xxxxx-xxxxxx" xxxxxx="x" xxxxx="xxxxxxxxxx-xxxxx:#xxxxxx; xxxx-xxxxxx:xxx; xxxx-xxxx:xxx;"> <xxx xxxxxx="x" xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxx.xxx" xxxxx="xxxxxxx:xxxxx;" xxxxx="x" xxxxxx="x"/></xx></xx><xx><xx xxxxxxx="x" xxxxx="xxxxxx-xxxxx-xxxxxx" xxxxxx="x" xxxxx="xxxxxxxxxx-xxxxx:#xxxxxx;xxxx-xxxxxx:xxx;xxxx-xxxx:xxx;"><xxx xxxxxx="x" xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxx.xxx" xxxxx="xxxxxxx:xxxxx;" xxxxx="x" xxxxxx="x"/></xx></xx><xx><xx xxxxxxx="x" xxxxx="xxxx" xxxxxx="xxx"><xxxxx xxxxx="xxx" xxxxxx="xxx" xxxxxxxxxxx="x" xxxxxxxxxxx="x" xxxxxx="x" xxxxx="xxxx" xxxxx="xxxx"><xx><xx xxxxx="xx" xxxxx="xxxx-xxxxxx"><xxx xxxxxx="x" xxxxx="xxxx-xxxxxx" xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxx.xxx" xxxxx="xxxxxxx:xxxxx;" xxxxx="xx" xxxxxx="xx"/></xx><xx><xxxxx xxxxxx="x" xxxxxxxxxxx="x" xxxxxxxxxxx="x"><xx><xx xxxxxx="xx" xxxxx="xxxxx-xxxx"> <xxx xxxxxx="x" xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxx.xxx" xxxxx="xxxxxxx:xxxxx;" xxxxx="x" xxxxxx="xx"/></xx></xx><xx><xx xxxxxx="xxxxxx"><x xxxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/?xx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"><xxx xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxxx-xxxxxxxxx.xxx" xxxxx="xx" xxxxxx="xx" xxxxxx="x" xxxxx="xxxx-xxx" xxxxx="xxxxxxx:xxxxx;" /></x></xx></xx><xx><xx xxxxxxx="x" xxxxxx="xx" xxxxx="xxxxx-xxxx"><xxx xxxxxx="x" xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxx.xxx" xxxxx="xxxxxxx:xxxxx;" xxxxx="x" xxxxxx="xx"/></xx></xx></xxxxx></xx></xx></xxxxx><xxxxx xxxxx="xxx" xxxxxxxxxxx="x" xxxxxxxxxxx="x" xxxxxx="x" xxxxx="xxxxxxxx"><xx><xx xxxxxxx="x" xxxxxx="xx" xxxxx="xxxxx-xxxx"> <xxx xxxxxx="x" xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxx.xxx" xxxxx="xxxxxxx:xxxxx;" xxxxx="x" xxxxxx="xx"/></xx></xx><xx><xx xxxxx="xxxx-xxxx:xxxx; xxxx-xxxxxx:xxxx; xxxx-xxxxxx:xxxxx, xxxxxxxxx, xxxx-xxxxx;" xxxxxx="xxxxxx">xxxxxxx xxxxxx</xx></xx><xx><xx xxxxxxx="x" xxxxxx="xx" xxxxx="xxxxx-xxxx"><xxx xxxxxx="x" xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxx.xxx" xxxxx="xxxxxxx:xxxxx;" xxxxx="x" xxxxxx="xx"/></xx></xx></xxxxx><xxxxx xxxxx="xxx" xxxxxxxxxxx="x" xxxxxxxxxxx="x" xxxxxx="x" xxxxx="xxxxxx"><xx><xx xxxxx="xxxx-xxxx:xxxx; xxxx-xxxxxx:xxxx; xxxx-xxxxxx:xxxxx, xxxxxxxxx, xxxx-xxxxx;"><x xxxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/?xx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" xxxxx="xxxx-xxxxxxxxxx:xxxx; xxxxx:#xxxxxx;">xx xxxxxxx</x>&#xxx;&#xxx;&#xxx; <x xxxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/?xx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" xxxxx="xxxx-xxxxxxxxxx:xxxx; xxxxx:#xxxxxx;">xxxxxx xxxxxx</x>&#xxx;&#xxx;&#xxx;<x xxxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/?xx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" xxxxx="xxxx-xxxxxxxxxx:xxxx; xxxxx:#xxxxxx;">xxxxxxx xxxxxx</x>&#xxx;&#xxx;&#xxx;<x xxxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/?xx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" xxxxx="xxxx-xxxxxxxxxx:xxxx; xxxxx:#xxxxxx;">xx xxxxxx</x></xx></xx><xx><xx xxxxxxx="x" xxxxxx="xx" xxxxx="xxxxx-xxxx"><xxx xxxxxx="x" xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxx.xxx" xxxxx="xxxxxxx:xxxxx;" xxxxx="x" xxxxxx="xx"/></xx></xx></xxxxx></xx></xx><xx><xx xxxxxxx="x" xxxxx="xxxxxx-xxxxx-xxxxxx" xxxxxx="x" xxxxx="xxxxxxxxxx-xxxxx:#xxxxxx;xxxx-xxxxxx:xxx;xxxx-xxxx:xxx;"><xxx xxxxxx="x" xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxx.xxx" xxxxx="xxxxxxx:xxxxx;" xxxxx="x" xxxxxx="x"/></xx></xx><xx><xx xxxxxxx="x" xxxxxx="xx" xxxxx="xxxxx-xxxx"><xxx xxxxxx="x" xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxx.xxx" xxxxx="xxxxxxx:xxxxx;" xxxxx="x" xxxxxx="xx"/></xx></xx></xxxxx>  </xx> </xx> <xx> <xx> <xxxxx xxxxxx="x" xxxxxxxxxxx="x" xxxxxxxxxxx="x" xxxxx="xxx"> <xx> <xx xxxxxx="xxx"> <xxxxx xxxxxx="x" xxxxxxxxxxx="x" xxxxxxxxxxx="x" xxxxx="xxx"> <xx> <xx xxxxxx="xxx">  <xxxxx xxxxxx="x" xxxxxxxxxxx="x" xxxxxxxxxxx="x" xxxxx="xxxxxx-xxxxxxxx:xxxxxxxx; xxx-xxxxx-xxxxxx:xxx; xxx-xxxxx-xxxxxx:xxx;"><xx><xx xxxxx="xx" xxxxx="xxxx-xxxxxx"><xxx xxxxxx="x" xxxxx="xxxx-xxxxxx" xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxx.xxx" xxxxx="xxxxxxx:xxxxx;" xxxxx="xx" xxxxxx="x"/></xx><xx><xxxxx xxxxxx="x" xxxxxxxxxxx="x" xxxxxxxxxxx="x"><xx><xx><xxxxx xxxxxx="x" xxxxxxxxxxx="x" xxxxxxxxxxx="x"><xx><xx xxxxx="xx"><xxx xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxxxxxxxxxxxxxx.xxx" xxxxx="xx" xxxxxx="xx" xxxxx="xxxx" xxxxx="xxxxxxx:xxxxx;"/></xx><xx xxxxx="xxxx-xxxxxx:xxxxx,xxxxxxxxx, xxxx-xxxxx; xxxx-xxxx:xxxx;"><x>xxxxxxxx xxxxxx xxxxx -</x> xxx xx xxxx</xx></xx></xxxxx></xx></xx><xx><xx><x></x><xxx xxxxx="xxxxxxx:xxxxx;" xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxx.xxx" xxxxxx="xx"/></xx></xx><xx> <xx xxxxx="xxxx-xxxxxx:xxxxx, xxxxxxxxx, xxxx-xxxxx; xxxx-xxxx:xxxx; xxxx-xxxxxx:xxxx;"><x xxxxx="xxxx-xxxxxx:xxxxx;xxxx-xxxx:xxxx;xxxxx:#xxxxxx;xxxx-xxxxxx:xxxx;xxxx-xxxxxxxxxx:xxxx" xxxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/?xx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" >xxxxxxxxx xxxxx xxxxxx (xxx xx.x.xx.xx xxxx)</x></xx></xx><xx><xx><xxx xxxxx="xxxxxxx:xxxxx;" xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxx.xxx" xxxxxx="xx"/></xx></xx> <xx><xx xxxxx="xxxx-xxxxxx:xxxxx,xxxxxxxxx,xxxx-xxxxx; xxxx-xxxx:xxxx;"><xxxxxx>xxxxxxxx:</xxxxxx> xx xxxxxxx xxxxxxxx xxx, xx xxxxxxxxx xxxxxxxx xxx, xx xxxxxx xxxxxxxxxxx, xx xxxxxxxx xxx</xx></xx><xx><xx xxxxxx="x"><xxx xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxx.xxx" xxxxx="xxxxxxx:xxxxx" xxx="" xxxxxx="x" /></xx></xx> <xx><xx xxxxx="xxxx-xxxxxx:xxxxx,xxxxxxxxx,xxxx-xxxxx; xxxx-xxxx:xxxx;"> <xxxxxx>xx:</xxxxxx> xxxxxxx</xx></xx><xx><xx xxxxxx="x"><xxx xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxx.xxx" xxxxx="xxxxxxx:xxxxx" xxx="" xxxxxx="x" /></xx></xx> <xx><xx xxxxx="xxxx-xxxxxx:xxxxx,xxxxxxxxx,xxxx-xxxxx; xxxx-xxxx:xxxx;"><xxxxxx>xxxxxxxxxxx:</xxxxxx> xxxx xxxxxxx xxxxxxxx xxx xxxxxxxxx xxxxx xxxxxx. xxx xxxxxx xxxxxxxx xxxxxxxx xxxxxxxx xxxx xx xxxxxxxxx, xxxxxxxxxx, xxx xxxxx, xxxxxx-xxx, xxx xxx-xx-xxxxxx. xxxx xxxxxxx xx xxxxxxxx xxx xxxxxxxxx xxxxxxxx xxxxxx xxxxxxx x xxxxxxxxx xxxxxxxxx xxxxxx.</xx></xx><xx><xx><xxx xxxxx="xxxxxxx:xxxxx;" xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxx.xxx" xxxxxx="xx" xxxxx="x"/></xx></xx></xxxxx></xx></xx></xxxxx><xxxxx xxxxxx="x" xxxxxxxxxxx="x" xxxxxxxxxxx="x" xxxxx="xxx%" xxxxx="xxxxxx-xxxxxxxx:xxxxxxxx; xxx-xxxxx-xxxxxx:xxx; xxx-xxxxx-xxxxxx:xxx;"><xx><xx xxxxx="xx" xxxxx="xxxx-xxxxxx xxxx-xxxxxx"> <xxx xxxxxx="x" xxxxx="xxxx-xxxxxx" xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxx.xxx" xxxxx="xxxxxxx:xxxxx;" xxxxx="xx" xxxxxx="x"/></xx><xx xxxxxxx="#xxxxxx" xxxxxx="x" xxxxx="xxxx-xxxxxx:xxx;xxxx-xxxx:xxx;"><xxx xxxxx="xxxxxxx:xxxxx;" xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxx.xxx" xxxxxx="x"/></xx></xx><xx><xx xxxxx="xx" xxxxx="xxxx-xxxxxx"><xxx xxxxxx="x" xxxxx="xxxx-xxxxxx" xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxx.xxx" xxxxx="xxxxxxx:xxxxx;" xxxxx="xx" xxxxxx="x"/></xx><xx><xxx xxxxx="xxxxxxx:xxxxx;" xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxx.xxx" xxxxxx="xx"/></xx></xx></xxxxx>      <xxxxxxxxxxxxxxxxx xxxxxxxxxxxxxx="xxxxxxxxx" xxxxx="xxxxx" xxx="xxxxx"/>     <xxxxxxxxxxxxxxxxx xxxxxxxxxxxxxx="xxxxxxxxx" xxxxx="xxxxx" xxx="xxxxx"/>  </xx> </xx> </xxxxx></xx> <xx xxxxx="xx"><xxx xxx="" xxx="xxxx://xxxxxx.xxxxxxxx.xxx/xxxxxxxxxxx/xxxxx/xxxxxx/x.xxx" xxxxx="xxxxxxx:xxxxx" xxxxx="xx"/></xx> <xx xxxxxxx="#xxxxxx" xxxxx="x"><xxx xxx="xxxx://xxxxxx.xxxxxxxx.xxx/xxxxxxxxxxx/xxxxx/xxxxxx/x.xxx" xxxxx="xxxxxxx:xxxxx" xxxxx="x"/></xx> <xx xxxxxx="xxx"> <xxxxx xxxxxx="x" xxxxxxxxxxx="x" xxxxxxxxxxx="x" xxxxx="xxx"> <xx> <xx xxxxx="xx"><xxx xxx="xxxx://xxxxxx.xxxxxxxx.xxx/xxxxxxxxxxx/xxxxx/xxxxxx/x.xxx" xxxxx="xxxxxxx:xxxxx" xxxxx="xx"/></xx> <xx>      <xxxxx xxxxxx="x" xxxxxxxxxxx="x" xxxxxxxxxxx="x" xxxxx="xxxxxxx-xxxx" xxxxx="xxx"><xx><xx xxxxx="xxxx-xxxxxx" xxxxx="xx"><xxx xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxx.xxx" xxxxx="xxxxxxx:xxxxx" xxxxx="xx"/></xx><xx><xxxxx xxxxxx="x" xxxxxxxxxxx="x" xxxxxxxxxxx="x"><xx><xx xxxxxxx="x"><xxx xxxxxx="xx" xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxx.xxx" xxxxx="xxxxxxx:xxxxx"/></xx></xx><xx><xx xxxxxxx="x" xxxxx="xxxxxxxxxx-xxxxx:#xxxxxx; xxxx-xxxxxx:xxx; xxxx-xxxx:xxx;" xxxxx="xxx"><xxx xxxxxx="x" xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxx.xxx" xxxxx="xxxxxxx:xxxxx" xxxxx="xxx"/></xx></xx><xx><xx xxxxxxx="x"><xxx xxxxxx="xx" xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxx.xxx" xxxxx="xxxxxxx:xxxxx"/></xx></xx><xx><xx xxxxx="xx"> <xxx xxxxx="xxxx" xxx="xxxxxxxx - xxxxxx xx x xxxxxxxx xxxxx xxx xxxx xx xx xxxxx xx. xxxxx xxxxxxxx xx xxxxxxxxx xxxxxxxxxxx xxxx xx xxxxxxxxx xx xxxxxxx xxx xxxx xx xxxxxxxxxxxxx xxxxxxx xxxx xx xxxx xxxxxxxxxx xx xxxx, xxxxxxxx xxxxxx, xx xxxxxxxxxxxxx xxxxxx xx xxxx. xxx xxxxx xx xx xxxx xx x xxxxxxx xxxxxxxxxxxxx xxxxx xx xxxxxx xx xxx xxxxx." xxxxxx="xx" xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxxxxxxxxxxxxxx.xxx" xxxxx="xxxxxxx:xxxxx;" xxxxx="xx"/></xx><xx xxxxx="xxxx-xxxx:xxxx; xxxxx:#xxxxxx; xxxx-xxxxxx:xxxxx, xxxxxxxxx, xxxx-xxxxx;">xxxxxxxx</xx></xx><xx><xx xxxxxxx="x"><xxx xxxxxx="x" xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxx.xxx" xxxxx="xxxxxxx:xxxxx"/></xx></xx><xx><xx xxxxx="xx"> <xxx xxxxx="xxxx" xxx="xxxxxxxxxxx - xxxxxx xx xxxxxxxxx xxxxxxx xx xxxxxx xxxxxxxxxxx. xxxxxxxxx xxxxxxxxxxxx xxxxxx xx xxxxxxx xx xxxx xxxxxxxx xxxxxxxxxxx. xxxxx xx xxxxxxxxx xxx xxx-xxxxxxx xxxxxxxxxxx, xxxx-xxx xx xxxxxxxx xxxxxxxxx. xxxx xxxx xxxxxxx xxxx xxxxxx xxxx x xxxxxxx, xxx xxx xxxxxxxxxxxxx xxxxxxx." xxxxxx="xx" xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxxxxxxxxxxxxxxxxx.xxx" xxxxx="xxxxxxx:xxxxx;" xxxxx="xx"/></xx><xx xxxxx="xxxx-xxxx:xxxx; xxxxx:#xxxxxx; xxxx-xxxxxx:xxxxx, xxxxxxxxx, xxxx-xxxxx;">xxxxxxxxxxx</xx></xx><xx><xx xxxxxxx="x"><xxx xxxxxx="x" xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxx.xxx" xxxxx="xxxxxxx:xxxxx"/></xx></xx><xx><xx xxxxx="xx"> <xxx xxxxx="xxxx" xxx="xxxxxxx - xxxxxx xx xxxxxxxxxxx xxx xxxxxxxxxxxx xxxx xxx xxxx xxx xxxxxx xxxx xxxxxx, xxxx xx xxxxxxxxxxx xxxxxxxx xxx xxxx xxxxxxxxx. xxxxx xxxxxxxxxxxx xxx xx xxxxx xx xxxx xxxxxxxxxx xx xxxx xxxxxxxx xxxx xx xxxxxxx." xxxxxx="xx" xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxxxxxxxxxxxxx.xxx" xxxxx="xxxxxxx:xxxxx;" xxxxx="xx"/></xx><xx xxxxx="xxxx-xxxx:xxxx; xxxxx:#xxxxxx; xxxx-xxxxxx:xxxxx, xxxxxxxxx, xxxx-xxxxx;">xxxxxxx</xx></xx><xx><xx xxxxxxx="x"><xxx xxxxxx="x" xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxx.xxx" xxxxx="xxxxxxx:xxxxx"/></xx></xx><xx><xx xxxxx="xx"><xxx xxxxx="xxxx" xxx="xxxxxx" xxxxxx="xx" xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxxxxxxxxxxxx.xxx" xxxxx="xxxxxxx:xxxxx;" xxxxx="xx"/></xx><xx xxxxx="xxxx-xxxx:xxxx; xxxxx:#xxxxxx; xxxx-xxxxxx:xxxxx, xxxxxxxxx, xxxx-xxxxx;">xxxxxx</xx></xx></xxxxx></xx></xx></xxxxx>  </xx> <xx xxxxx="xx"><xxx xxx="xxxx://xxxxxx.xxxxxxxx.xxx/xxxxxxxxxxx/xxxxx/xxxxxx/x.xxx" xxxxx="xxxxxxx:xxxxx" xxxxx="xx"/></xx> </xx> </xxxxx></xx> </xx> </xxxxx></xx> </xx> <xx> <xx>    <xxxxx xxxxxx="x" xxxxxxxxxxx="x" xxxxxxxxxxx="x" xxxxx="xxxxxx-xxxxxxxx:xxxxxxxx; xxx-xxxxx-xxxxxx:xxx; xxx-xxxxx-xxxxxx:xxx;"><xx><xx xxxxxx="x" xxxxxxx="x" xxxxx="xxxxxxxxxx-xxxxx:#xxxxxx;xxxx-xxxxxx:xxx;xxxx-xxxx:xxx;"><xxx xxxxxx="x" xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxx.xxx" xxxxx="xxxxxxx:xxxxx;" xxxxx="x" xxxxxx="x"/></xx></xx><xx><xx xxxxxxx="x"><xxx xxxxxx="x" xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxx.xxx" xxxxx="xxxxxxx:xxxxx;" xxxxx="x" xxxxxx="xx"/></xx></xx><xx><xx xxxxxxx="x"><xxxxx xxxxxxxxxxx="x" xxxxxxxxxxx="x" xxxxxx="x" xxxxx="xxxxxxx-xxxx" xxxxx="xxxx"><xx><xx xxxxx="xx"><xxx xxxxxx="x" xxxxx="xxxx-xxxxxx" xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxx.xxx" xxxxx="xxxxxxx:xxxxx;" xxxxx="xx" xxxxxx="x"/></xx><xx xxxxx="xxx" xxxxxx="xxx" xxxxx="xxxx-xxxxxx:xxxxx, xxxxxxxxx, xxxx-xxxxx; xxxxx:#xxxxxx; xxxx-xxxx:xxxx;"> <x xxxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/?xx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" xxxxx="xxxxx:#xxxxxx; xxxx-xxxxxxxxxx:xxxx;"><xxxxxx>xx.xxx</xxxxxx></x></xx><xx xxxxx="xxx" xxxxxx="xxx" xxxxx="xxxx-xxxxxx:xxxxx, xxxxxxxxx, xxxx-xxxxx; xxxxx:#xxxxxx; xxxx-xxxx:xxxx;"><x xxxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/?xx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" xxxxx="xxxxx:#xxxxxx; xxxx-xxxxxxxxxx:xxxx;"><xxxxxx>xxxxxxx</xxxxxx></x></xx><xx xxxxx="xxx" xxxxxx="xxx" xxxxx="xxxx-xxxxxx:xxxxx, xxxxxxxxx, xxxx-xxxxx; xxxxx:#xxxxxx; xxxx-xxxx:xxxx;"><x xxxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/?xx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" xxxxx="xxxxx:#xxxxxx; xxxx-xxxxxxxxxx:xxxx;"><xxxxxx>xxxxxxx</xxxxxx></x></xx> <xx xxxxx="xxx" xxxxxx="xxx" xxxxx="xxxx-xxxxxx:xxxxx, xxxxxxxxx, xxxx-xxxxx; xxxxx:#xxxxxx; xxxx-xxxx:xxxx;"><x xxxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/?xx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" xxxxx="xxxxx:#xxxxxx; xxxx-xxxxxxxxxx:xxxx;"><xxxxxx>xxxxxx xxxxxxx</xxxxxx></x></xx></xx></xxxxx></xx></xx><xx><xx xxxxxxx="x"><xxx xxxxxx="x" xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxx.xxx" xxxxx="xxxxxxx:xxxxx;" xxxxx="x" xxxxxx="xx"/></xx></xx> <xx><xx xxxxxxx="x" xxxxxx="x" xxxxx="xxxxxxxxxx-xxxxx:#xxxxxx;xxxx-xxxxxx:xxx;xxxx-xxxx:xxx;"><xxx xxxxxx="x" xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxx.xxx" xxxxx="xxxxxxx:xxxxx;" xxxxx="x" xxxxxx="x"/></xx></xx><xx><xx xxxxxxx="x"><xxx xxxxxx="x" xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxx.xxx" xxxxx="xxxxxxx:xxxxx;" xxxxx="x" xxxxxx="xx"/></xx></xx><xx> <xx xxxxx="xxxx-xxxxxx"><xxx xxxxxx="x" xxxxx="xxxx-xxxxxx" xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxx.xxx" xxxxx="xxxxxxx:xxxxx;" xxxxx="xx" xxxxxx="xx"/></xx><xx xxxxx="xxxx" xxxxx="xxxx-xxxxxx:xxxxx, xxxxxxxxx, xxxx-xxxxx; xxxxx:#xxxxxx; xxxx-xxxx:xxxx; xxxx-xxxxxx:xxxx;">xx xxxxxxxx xxxx xxxxxxx. xx xxx'x xxxx xx xxxxxxxxxxx xxxxxxxxx x-xxxxx xxxx xx xxxxxxxxx xxxxxxx xxxxxx xxx xxxxxxxxxxx, xxxxxx <x><x xxxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/?xx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" xxxxx="xxxxx:#xxxxxx;">xxxxx xxxx</x></x>.<xx> <xx> xxx xxxx xxxxxxxxxxx xxxxxxxxx xx'x xxxxxxx xxxxxxxx xxx xxxxxxxxx, xxxxxx xxxxx xxx <x><x xxxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/?xx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" xxxxx="xxxxx:#xxxxxx;">xxxxxxx xxxxxxxxx</x></x>. <xx/><xx/> xx xxxxxxxx xxxx xxxxxx xx xxxxxx, xxxxxxxxxxxxx, xxxxxxxxxx xx xxxxxxxx, xxxxxx xxx xxx 'xxxxxxx xxxxxxxx xxxx' xxxxxxxxx xxxx <x xxxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/?xx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" xxxxx="xxxxx:#xxxxxx;">xx'x xxxxxxxx xxxx xxxxxx xxxxxx</x>. <xx> <xx> &xxxx; xxxxxxxxx xxxx xx xxxxxxxxxxx xxxxxxx, x.x. xxx xxxxxxxxxxx xxxxxxxxx xxxxxx xx xxxxxxx xx xxxxxx xxxxxxx xxxxxx.</xx><xx xxxxx="xxxx-xxxxxx"><xxx xxxxxx="x" xxxxx="xxxx-xxxxxx" xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxx.xxx" xxxxx="xxxxxxx:xxxxx;" xxxxx="xx" xxxxxx="xx"/></xx></xx></xxxxx>  </xx> </xx> <xx> <xx> </xx> </xx> </xxxxx> </xxxx> </xxxx> --xxxxxxxxxxxx=x?:-- Return-path: <xxxxxxxxxxxx(a)xxxxx.xxxxxxxxx.xxx> Envelope-to: xxxxx@xxxxxxxxx Delivery-date: xxx, xx xxx xxxx xx:xx:xx +xxxx Received: xxxx xxxxxx-xxxx xx xxxxxxxxx xxxx xxxx-xxxxxxx (xxxx x.xx) (xxxxxxxx-xxxx <xxxxxxxxxxxx(a)xxxxx.xxxxxxxxx.xxx>) xx xxxxxx-xxxxxx-xx xxx xxxxx@xxxxxxxxx; xxx, xx xxx xxxx xx:xx:xx +xxxx Received: xxxx [::x] (xxxx=xxxxxxxxx.xxxxxxxxxxx) xx xxxxxxxxx xxxx xxxxx (xxxx x.xx) (xxxxxxxx-xxxx <xxxxxxxxxxxx(a)xxxxx.xxxxxxxxx.xxx>) xx xxxxxx-xxxxxx-xx xxx xxxxx@xxxxxxxxx; xxx, xx xxx xxxx xx:xx:xx +xxxx Delivered-To: xxxxxxxxxxxx(a)xxxxx.xxx Received: xxxx xxxxx-xxx.x.xxxxxx.xxx [xx.xxx.xxx.xxx] xx xxxxxxxxx.xxxxxxxxxxx xxxx xxxx (xxxxxxxxx-x.x.xx) xxx <xxxxx@xxxxxxxxx> (xxxxxx-xxxx); xxx, xx xxx xxxx xx:xx:xx +xxxx (xxx) Received: xx xx.xx.xx.x xxxx xxxx xx xxxxxxxxxxxxxx; xxx, xx xxx xxxx xx:xx:xx -xxxx (xxx) X-Received: xx xx.xxx.xx.xxx xxxx xxxx xx xxxxxxxxxxxxxxxx.xx.xxxxxxxxxxxxx; xxx, xx xxx xxxx xx:xx:xx -xxxx (xxx) Received: xxxx xxxxxxxxxx.xxxxxxxxx.xxx (xxxxxxxxxx.xxxxxxxxx.xxx. [xx.xx.xxx.xx]) xx xx.xxxxxx.xxx xxxx xxxxxx xx xxxxxxxxxxxxxxx.xxx.xxxx.xx.xx.xx.xx.xx (xxxxxxx=xxxxx xxxxxx=xxx-xxx xxxx=xxx/xxx); xxx, xx xxx xxxx xx:xx:xx -xxxx (xxx) Received-SPF: xxxx (xxxxxx.xxx: xxxxxx xx xxxxxxxxxxxx(a)xxxxx.xxxxxxxxx.xxx xxxxxxxxxx xx.xx.xxx.xx xx xxxxxxxxx xxxxxx) xxxxxx-xx=xx.xx.xxx.xx; Authentication-Results: xx.xxxxxx.xxx; xxx=xxxx (xxxxxx.xxx: xxxxxx xx xxxxxxxxxxxx(a)xxxxx.xxxxxxxxx.xxx xxxxxxxxxx xx.xx.xxx.xx xx xxxxxxxxx xxxxxx) xxxx.xxxx=xxxxxxxxxxxx(a)xxxxx.xxxxxxxxx.xxx Received: xxxx [xx.xx.xxx.xx] (xxxx=xxxxx.xxxxxxxxx.xxx) xx xxxxxxxxxx.xxxxxxxxx.xxx xxxx xxxxx (xxxx x.xx) (xxxxxxxx-xxxx <xxxxxxxxxxxx(a)xxxxx.xxxxxxxxx.xxx>) xx xxxxxx-xxxxxx-xx xxx xxxxxxxxxxxx(a)xxxxx.xxx; xxx, xx xxx xxxx xx:xx:xx +xxxx Received: xxxx xxxxx.xxxxxxxxx.xxx (xxxxxxxxx.xxxxxxxxxxx [xxx.x.x.x]) xx xxxxx.xxxxxxxxx.xxx (x.xx.x/x.xx.x) xxxx xxxxx xx xxxxxxxxxxxxxx xxx <xxxxxxxxxxxx(a)xxxxx.xxx>; xxx, xx xxx xxxx xx:xx:xx +xxxx Received: (xxxx xxxxxxxxxxxx@xxxxxxxxx) xx xxxxx.xxxxxxxxx.xxx (x.xx.x/x.xx.x/xxxxxx) xx xxxxxxxxxxxxxx; xxx, xx xxx xxxx xx:xx:xx +xxxx To: xxxxxxxxxxxx(a)xxxxx.xxx Subject: =?xxx-x?x?xxxx=xx=xxxx?= Date: Tue, 26 Feb 2013 12:40:45 +0000 From: xxxxxxx.xxxxxxx(a)xxxxx.xxx Reply-To: xxxxxxx.xxxxxxx(a)xxxxx.xxx Message-ID: <xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx(a)xxx.xxxxxxxxxxxx.xx> X-Priority: x X-Mailer: xxxxxxxxx x.x.x (xxxx://xxxx.xxxxxx.xxx/x/xxxxxx-xxxxxx.xxx/x/xxxxxxxxx/) MIME-Version: x.x Content-Type: multipart/alternative; xxxxxxxx="xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" X-Bogofilterd: xxxx X-Bogosity: xxx, xxxxx=xxxxxxxxxx, xxxxxxxxx=x.xxxxxx, xxxxxxx=x.x.x --xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxx-xxxx: xxxx/xxxxx; xxxxxxx="xxx-x" xxxxxxx-xxxxxxxx-xxxxxxxx: xxxx xx, xxx xxxx x xxx xxxxxxx xxxxxxx xxxx : xxxxxxx.xxxxxxx(a)xxxxx.xxxxxxxx: xxxxxxxxxxxxxxxxxxxx : xxxxöxx xxxxxxx xxxx : xxxöxxxxxxxxxxxxxxxxxxxxxxxxxx: xx=>"xxx xöxxxx xxx xxxxxxxxxxxxxx xxxx.xxxxxx xxxxx" xxxxxxxxxxxx xxxxxxx --xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxx-xxxx: xxxx/xxxx; xxxxxxx="xxx-x" xxxxxxx-xxxxxxxx-xxxxxxxx: xxxx <x>xx,</x> <x>xxx xxxx x xxx xxxxxxx xxxxxxx</x> <x>xxxx : xxxxxxx.xxxxxxx(a)xxxxx.xxx<xx />xxxxx: xxxxxxxxxxxxx<xx />xxxxxxx : xxxxöxx</x> <x><xx xx="xxxxxxxx">xxxxxxx xxxx : xxxöxxxxxxx<xx />xxxxxxxxxxxxxxxxxxx: xx=>"xxx xöxxxx xxx xxxxxxxxxxxxxx xxxx.xxxxxx xxxxx"</xx></x> <x>xxxxxxx<xx />xxxxx xxxxxxx</x> --xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx-- Return-path: <xxxxxxxxxxxx+xxxxxxxx(a)xxxxxxxxxxxx.xxx> Envelope-to: xxxxx@xxxxxxxxx Delivery-date: xxx, xx xxx xxxx xx:xx:xx +xxxx Received: xxxx [xxx.x.x.x] (xxxx=xxxxxxxxx) xx xxxxxxxxx.xxxxxxxxxxxx.xx xxxx xxxxx (xxxx x.xx) (xxxxxxxx-xxxx <xxxxxxxxxxxx+xxxxxxxx(a)xxxxxxxxxxxx.xxx>) xx xxxxxx-xxxxxx-xx xxx xxxxx@xxxxxxxxx; xxx, xx xxx xxxx xx:xx:xx +xxxx Received: xxxx xxx.xxx.xxx [xxx.xxx.xx.xxx] xx xxxxxxxxx xxxx xxxx (xxxxxxxxx-x.x.xx) xxx <xxxxx@xxxxxxxxx> (xxxxxx-xxxx); xxx, xx xxx xxxx xx:xx:xx +xxxx (xxxx) Received: xxxx xx-xxx.xxxxxxxx.xxx ([xx.xxx.xxx.xxx]) xx xx-xx.xxx.xxx (xxxxxxxx [xxx.xxx.xx.x]) xxxx xxxxxx (xxxxxxx) xx xxxxxx-xxxxxxxxxx-xxxxxx xxx <xxxxxxx.xxxxxxx(a)xxx.xx>; xxx, xx xxx xxxx xx:xx:xx +xxxx DKIM-Signature: x=x; x=xxx-xxxxxx; x=xxxxxxx/xxxxxx; x=xxxxxxxxxxxx.xxx; x=xxxxx-xxxx-xx; x=xxxxxxxxxx; xx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxx=; x=xxxx:xx:xxxxxxx:xxxx:xxxx-xxxxxxx:xxxxxxx-xxxx; x=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+x= Received: xxxx xxxxxxxx.xxx (xxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx/xxxxxxxxxxxxxxxxxxxx xx.xxx.xxx.xx) xx xxxxxxxx.xxx xxxx xxxxxx xx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx-xxxxxxxx; xxx, xx xxx xxxx xx:xx:xx -xxxx X-Facebook: xxxx xxxx:xxxx:xx:xxxx:xxxx:x:x:x ([xxxxxxxxxxxx]) xx xxxxx.xxxxxxxxxxxx.xx.xxxx.xxxxxxxx.xxx xxxx xxxx (xxxxxxxx); Date: Thu, 7 Sep 2017 12:43:45 -0700 To: xxxxxx xxxxxxxx <xxxxxxx.xxxxxxx(a)xxx.xx> X-Priority: x X-Mailer: xxxxxxxx [xxxxxxx x.xx] From: "xxxxxxxx" <xxxxxxxxxxxx+xxxxxxxx(a)xxxxxxxxxxxx.xxx> Reply-to: xxxxxxx <xxxxxxx(a)xxxxxxxxxxxx.xxx> Errors-To: xxxxxxxxxxxx+xxxxxxxx(a)xxxxxxxxxxxx.xxx X-Facebook-Notify: xxxxxxxxxxxxxx; xxxxxx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx List-Unsubscribe: <xxxxx://xxx.xxxxxxxx.xxx/x.xxx?x=xxxxxxxxxxxxxxxx&x=xxxxxxxxxx&xxx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx> Feedback-ID: x:xxxxxxxxxxxxxx:xxxxxxxx X-FACEBOOK-PRIORITY: x X-Auto-Response-Suppress: xxx Require-Recipient-Valid-Since: xxxxxxx.xxxxxxx(a)xxx.xx; xxxxxxxxx, x xxx xxxx xx:xx:xx +xxxx Message-ID: <xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx(a)xxxxx.xxxxxxxxxxxx.xx.xxxx.xxxxxxxx.xxx> MIME-Version: x.x Content-Type: multipart/alternative; xxxxxxxx="xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" X-GMX-Antispam: x (xxxx xxx xxx xxxxxxxxxx xx xxxx); xxxxxx=xx; X-UI-Filterresults: xxxxxxx:x;xxx:xx:xxxxxxxxxxx=:xxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx/xxxx/xxxxx+xxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx/x xxxxxxxxxxxxxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxx/xxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxx xxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxx++xxxxxxxxxxxxxxxx+xxxxxxxxxx+xxxxxxxxxxxxxxxxxxxx+xxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx/xxxx+xxxxxxxxxxxxxxxxxxxxxx/xxxxxxxx/ xxxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxx/xxxxxxxxxxxxxxxxx+xx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx/xxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxx+xxxxxxxxxxxxxxxx+xxxxxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+x xxxxxxxxxxxxxxxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxx+x xxxxxxxxxxxxxxxxx/xxxxxxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx== X-SA-Exim-Connect-IP: xxx.x.x.x X-SA-Exim-Mail-From: xxxxxxxxxxxx+xxxxxxxx(a)xxxxxxxxxxxx.xxx X-Spam-Checker-Version: xxxxxxxxxxxx x.x.x (xxxx-xx-xx) xx xxxxxxxxx X-Spam-Level: * X-Spam-Status: xx, xxxxx=x.x xxxxxxxx=x.x xxxxx=xxxxxxxxxxxxxxxxxxxxxx, xxxxxxxxxxxx,xxxxxxxxx,xxxxxxxxxxxxxx,xxxxxxxxxxxxxxxxx xxxxxxxxx=xx xxxxxxxxxxxxxxx=xx xxxxxxx=x.x.x Subject: =?xxx-x?x?xxxxxxxxxxxxxxxxxxxx?= =?xxx-x?x?xxxxxxxxxxxxxxxxxxxx?= =?xxx-x?x?xxxxxxxxxxxxxxxxxxxx?= X-SA-Exim-Version: x.x.x (xxxxx xxx, xx xxx xxxx xx:xx:xx +xxxx) X-SA-Exim-Scanned: xxx (xx xxxxxxxxx.xxxxxxxxxxxx.xx) --xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxx-xxxx: xxxx/xxxxx; xxxxxxx="xxx-x" xxxxxxx-xxxxxxxx-xxxxxxxx: xxxxxx-xxxxxxxxx =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx= =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx xxxxxxxx =xx=xxxxxxx xxxxx://xxx.xxxxxxxx.xxx/x/?xxxxx.xxx&xxxx=xxxxxxxxxxxxxxxxxxx&xxx=xxx.xxx= xxxxxxxxx.xxxxxx.xxxxxxxxx&xxxx=xxx&xxxxxx=xxxxxxx&xxx=xxxxxxxxxxxxxxxxxxx= xxxxxxxxxxxxxxxxxxxxxxx&xxxxx=xxx.xxxxxxxxxx.xxxxxxxxxxxxxxxxxxx&xxx=xxxxx= xxxx.xxxxxxx%xxxxx.xx =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx= =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx xxxxx xxxxxx, xxxxxxxxxx xx xxx xxx xxxxx xxxx xxxxxxxx=xx=xxxx xx=xx=xx=xx=xxx, xxx xxxxxxxx-xxxx =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx= =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx xxxxx xxxxxxxxx xxxxx xx xxxxxxx.xxxxxxx(a)xxx.xx xxxxxxxx. xxxxx xx xxxxx = x-xxxxx xx xxxxxxx xxxxx xxx xxxxxxxx xxxxxxxx x=xx=xxxxxxxx, xxxxx xxx = xxxx xxxxx, xx xxx xxxxxxxxxxxxx. xxxxx://xxx.xxxxxxxx.xxx/x.xxx?x=xxxxxxxxxxxxxxxxxx&x=xxxxxxxxxxxx&xxx=xxx= xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxx, xxx., xxxxxxxxx: xxxxxxxxx xxxxxxx, x xxxxxx xxx, xxxxx xxxx, xx = xxxxx --xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxx-xxxx: xxxx/xxxx; xxxxxxx="xxx-x" xxxxxxx-xxxxxxxx-xxxxxxxx: xxxxxx-xxxxxxxxx <!xxxxxxx xxxx xxxxxx "-//xxx//xxx xxxx x.xx xxxxxxxxxxxx = //xx"><xxxx><xxxx><xxxxx>xxxxxxxx</xxxxx><xxxx xxxx-xxxxx=xx"xxxxxxx-xxxx" = xxxxxxx=xx"xxxx/xxxx; xxxxxxx=xxxxx-x" /><xxxxx>@xxxxx xxx xxx (xxx-xxxxx: = xxxxx){*[xxxxx].xxxx{xxx-xxxxx:xxx% = !xxxxxxxxx}*[xxxxx].xxxxxx{xxxxxxx:xxxxx = !xxxxxxxxx}*[xxxxx].xxxxxx{xxxxxxx:xxxxx !xxxxxxxxx;xxxxxxx:xxxx x xxx = x;xxxxxxxx-xxxxx:xxx !xxxxxxxxx;xxxxx:xxx% = !xxxxxxxxx}*[xxxxx].xxxxxx,*[xxxxx].xxxxxx{xxxxxxxx-xxxxx:xxx = !xxxxxxxxx}*[xxxxx].xxxxxx{xxxxxxx:xxxxx = !xxxxxxxxx;xxxxxxx-xxxxxx:xxxx;xxxxx:xxx% = !xxxxxxxxx}*[xxxxx].xxxxxxx{xxxxxxx:xxxx = !xxxxxxxxx}*[xxxxx].xxxxxx{xxxxxxx:xxxxxx !xxxxxxxxx}}.xxxxxxxxx{xxxxxxx:x= xxx}.xxxxxxxxxxxxxxxx{xxxxxxx:xxxxx;xxxxxx:xxxx}@xxxxx xxxx xxxxxx xxx = (xxx-xxxxxx-xxxxx: xxxxx){.xxxxxxxxx{xxxxxxx:xxxx = !xxxxxxxxx}.xxxxxxxxx{xxxxxxx:xxxxx !xxxxxxxxx}}.xxxxxxx xx,.xxxxxxx = xx,.xxxxxxx xx,.xxxxxxx xx,.xxxxxxx xx,.xxxxxxx = xx{xxxx-xxxxxx:xxxxxx}.xxxxxxxxxxxx = xx{xxxx-xxxx:xxxx;xxxx-xxxxxx:xxxxxx;xxxxxx-xxx:xxx}.xxxxxxxxxxxx = xx,.xxxxxxxxxxxx = xx{xxxx-xxxx:xxxx;xxxx-xxxxxx:xxxxxx;xxxxxx-xxx:xxx}.xxxxxxxxxxxx = xx,.xxxxxxxxxxxx xx,.xxxxxxxxxxxx = xx{xxxx-xxxx:xxxx;xxxx-xxxxxx:xxxxxx}.xxxxxxxxxxxx = x{xxxxx:#xxxxxx}.xxxxxxxxxxxx x{xxxxxx-xxx:xxx}</xxxxx></xxxx><xxxx = xxxxx=xx"xxxxxx:x;xxxxxxx:x;" xxx=xx"xxx" xxxxxxx=xx"#xxxxxx"><xxxxx = xxxxxx=xx"x" xxxxx=xx"xxx%;" xxxxxxxxxxx=xx"x" xxxxxxxxxxx=xx"x" = xx=xx"xxxxxxxxxxx" xxxxx=xx"xxxxxx-xxxxxxxx:xxxxxxxx;"><xx><xx = xx=xx"xxxxxxxxxxxxx" xxxxx=xx"xxxx-xxxxxx:xxxxxxxxx xxxx,xxxxxxxxx,xxxxxx = xxxxxx,xxxxxx,xxxxxxx,xxxxx,xxxx-xxxxx;xxxxxxxxxx:#xxxxxx;"><xxxxx = xxxxxx=xx"x" xxxxx=xx"xxx%" xxxxxxxxxxx=xx"x" xxxxxxxxxxx=xx"x" = xxxxx=xx"xxxxxx-xxxxxxxx:xxxxxxxx;"><xx xxxxx=xx""><xx xxxxxx=xx"xx" = xxxxx=xx"xxxx-xxxxxx:xxxx;" xxxxxxx=xx"x">&xxxx;</xx></xx><xx><xx = xxxxxx=xx"x" xxxxxxx=xx"x" xxxxx=xx"xxxx-xxxxxx:xxx;"><xxxx = xxxxx=xx"xxxxx:#xxxxxx;xxxxxxx:xxxx !xxxxxxxxx;xxxx-xxxx:xxx;">=xx=xx = =xx=xx=xx=xx=xx=xx xxxxxxxxxx xx xxx xxx xxxxx xxxx xxxxxxxx=xx=xxxx. x. = xxxxxxxxx xx xx:xx xxxxxxxx =xx=xx xxx=xx=xxxxx=xx=xxxxx xxxxxxxxxxxx = =xx=xx =xx=xx =xx=xx</xxxx></xx></xx><xx><xx xxxxx=xx"xx" = xxxxx=xx"xxxxxxx:xxxxx;xxxxx:xxxx;">&xxxx;&xxxx;&xxxx;</xx><xx = xxxxx=xx""><xxxxx xxxxxx=xx"x" xxxxx=xx"xxx%" xxxxxxxxxxx=xx"x" = xxxxxxxxxxx=xx"x" xxxxx=xx"xxxxxx-xxxxxxxx:xxxxxxxx;"><xx xxxxx=xx""><xx = xxxxxx=xx"xx" xxxxx=xx"xxxx-xxxxxx:xxxx;" = xxxxxxx=xx"x">&xxxx;</xx></xx><xx><xx xxxxx=xx"xx" xxxxx=xx"xxxx" = xxxxxx=xx"xxxxxx" xxxxx=xx"xxxxxx:xx;xxxx-xxxxxx:xxx;"><x = xxxx=xx"xxxxx://xxx.xxxxxxxx.xxx/x/?xxxxx.xxx&xxx;xxxx=xxxxxxxxxxxxxxxxxxx= &xxx;xxx=xxx.xxxxxxxxxxxx.xxxxxx.xxxxxxxxx&xxx;xxxx=xxx&xxx;xxxxxx=xxxxxxx= &xxx;xxx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx&xxx;xxxxx=xxx.xxxxxxxx= xx.xxxxxxxxxxxxxxxxxxx&xxx;xxx=xxxxxxxxx.xxxxxxx%xxxxx.xx" = xxxxx=xx"xxxxx:#xxxxxx;xxxx-xxxxxxxxxx:xxxx;"><xxx = xxx=xx"xxxxx://xxxxxx.xx.xxxxx.xxx/xxxx.xxx/xx/xx/x/xxxxxxxxxxx.xxx" = xxxxx=xx"xx" xxxxxx=xx"xx" xxxxx=xx"xxxxxx:x;" /></x></xx><xx xxxxx=xx"xx" = xxxxx=xx"xxxxxxx:xxxxx;xxxxx:xxxx;">&xxxx;&xxxx;&xxxx;</xx><xx = xxxxx=xx"xxx%" xxxxx=xx""><x xxxx=xx"xxxxx://xxx.xxxxxxxx.xxx/x/?xxxxx.xxx= &xxx;xxxx=xxxxxxxxxxxxxxxxxxx&xxx;xxx=xxx.xxxxxxxxxxxx.xxxxxx.xxxxxxxxx&xx= x;xxxx=xxx&xxx;xxxxxx=xxxxxxx&xxx;xxx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx= xxxxxx&xxx;xxxxx=xxx.xxxxxxxxxx.xxxxxxxxxxxxxxxxxxx&xxx;xxx=xxxxxxxxx.xxxx= xxx%xxxxx.xx" = xxxxx=xx"xxxxx:#xxxxxx;xxxx-xxxxxxxxxx:xxxx;xxxx-xxxxxx:xxxxxxxxx = xxxx,xxxxxxxxx,xxxxxx xxxxxx,xxxxxx,xxxxxxx,xxxxx,xxxx-xxxxx;xxxx-xxxx:xxx= x;xxxx-xxxxxx:xxxx;">xxxxxxxx</x></xx></xx><xx = xxxxx=xx"xxxxxx-xxxxxx:xxxxx xxx #xxxxxx;"><xx xxxxxx=xx"xx" = xxxxx=xx"xxxx-xxxxxx:xxxx;" xxxxxxx=xx"x">&xxxx;</xx></xx></xxxxx></xx><xx = xxxxx=xx"xx" = xxxxx=xx"xxxxxxx:xxxxx;xxxxx:xxxx;">&xxxx;&xxxx;&xxxx;</xx></xx><xx><xx = xxxxx=xx"xx" = xxxxx=xx"xxxxxxx:xxxxx;xxxxx:xxxx;">&xxxx;&xxxx;&xxxx;</xx><xx = xxxxx=xx""><xxxxx xxxxxx=xx"x" xxxxx=xx"xxx%" xxxxxxxxxxx=xx"x" = xxxxxxxxxxx=xx"x" xxxxx=xx"xxxxxx-xxxxxxxx:xxxxxxxx;"><xx xxxxx=xx""><xx = xxxxxx=xx"xx" xxxxx=xx"xxxx-xxxxxx:xxxx;">&xxxx;</xx></xx><xx><xx = xxxxx=xx""><xxxxx xxxxxx=xx"x" xxxxx=xx"xxx%" xxxxxxxxxxx=xx"x" = xxxxxxxxxxx=xx"x" xxxxx=xx"xxxxxx-xxxxxxxx:xxxxxxxx;"><xx><xx = xxxxx=xx"xxxx-xxxx:xxxx;xxxx-xxxxxx:xxxxxxxxxxxx,xxxxxx,xxxxxxx,xxxxx,xxxx= -xxxxx;xxxxxx:xxxxx xxx #xxxxxx;xxxxxx-xxxxxx:xxx xxx x = x;xxxxxxx:xxxx;xxxxxxx:xxxxx;"><xxxxx xxxxxx=xx"x" xxxxxxxxxxx=xx"x" = xxxxxxxxxxx=xx"x" xxxxx=xx"xxxxxx-xxxxxxxx:xxxxxxxx;"><xx><xx = xxxxx=xx""><x xxxx=xx"xxxxx://xxx.xxxxxxxx.xxx/x/?xxxxx.xxx&xxx;xxxxxx=xxx= xxxx&xxx;xxx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx&xxx;xxxxx=xxx.xxxx= xxxxxx.xxxxxxxxxxxxxxxxxxx&xxx;xxx=xxxxxxxxx.xxxxxxx%xxxxx.xx" = xxxxx=xx"xxxxx:#xxxxxx;xxxx-xxxxxxxxxx:xxxx;"><xxx xxx=xx"xxxxx://xxxxxxxx= -xxxx-x.xx.xxxxx.xxx/x/x/xx.x-x/xxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx= xxxxxxxxxxxxxxx.xxx?xxxxxx=xxx-x&xxx;xx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx= &xxx;xx=xxxxxxxxxx" xxxxx=xx"xx" xxxxxx=xx"xx" xxxxx=xx"xxxxxx:x;" = /></x></xx><xx xxxxx=xx"xx" = xxxxx=xx"xxxxxxx:xxxxx;xxxxx:xxxx;">&xxxx;&xxxx;&xxxx;</xx><xx = xxxxx=xx"xxx%" xxxxx=xx""><xxxxx xxxxxx=xx"x" xxxxxxxxxxx=xx"x" = xxxxxxxxxxx=xx"x" xxxxx=xx"xxxxxx-xxxxxxxx:xxxxxxxx;"><xx><xx = xxxxx=xx"xxxx-xxxxxx:xxxxxxxxx xxxx,xxxxxxxxx,xxxxxx xxxxxx,xxxxxx,xxxxxxx= ,xxxxx,xxxx-xxxxx;xxxx-xxxx:xxxx;xxxx-xxxxxx:xxxx;xxxxx:#xxxxxx;"><x = xxxx=xx"xxxxx://xxx.xxxxxxxx.xxx/x/?xxxxx.xxx&xxx;xxxxxx=xxxxxxx&xxx;xxx= =xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx&xxx;xxxxx=xxx.xxxxxxxxxx.xxxxx= xxxxxxxxxxxxxx&xxx;xxx=xxxxxxxxx.xxxxxxx%xxxxx.xx" = xxxxx=xx"xxxxx:#xxxxxx;xxxx-xxxxxxxxxx:xxxx;">xxxxxxxxxx xx</x> xxx xxx = xxxxx <x xxxx=xx"xxxxx://xxx.xxxxxxxx.xxx/x/?xxxxx.xxx&xxx;xxxx=xxxxxxxxxx= xxxxxxxxx&xxx;xxx=xxx.xxxxxxxxxxxx.xxxxxx.xxxxxxxxx&xxx;xxxx=xxx&xxx;xxxxx= x=xxxxxxx&xxx;xxx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx&xxx;xxxxx=xxx= .xxxxxxxxxx.xxxxxxxxxxxxxxxxxxx&xxx;xxx=xxxxxxxxx.xxxxxxx%xxxxx.xx" = xxxxx=xx"xxxxx:#xxxxxx;xxxx-xxxxxxxxxx:xxxx;">xxxx</x> = xxxxxxxx=xx=xxxx.</xx></xx><xx><xx xxxxx=xx""><xxxx xxxxx=xx"xxxxxxx" = xxxxx=xx"xxxx-xxxxxx:xxxxxxxxx xxxx,xxxxxxxxx,xxxxxx xxxxxx,xxxxxx,xxxxxxx= ,xxxxx,xxxx-xxxxx;xxxx-xxxx:xxxx;xxxx-xxxxxx:xxxx;xxxxx:#xxxxxx;">x. = xxxxxxxxx xx xx:xx</xxxx></xx></xx></xxxxx></xx><xx xxxxxx=xx"xxxxxx"><x = xxxx=xx"xxxxx://xxx.xxxxxxxx.xxx/x/?xxxxx.xxx&xxx;xxxx=xxxxxxxxxxxxxxxxxxx= &xxx;xxx=xxx.xxxxxxxxxxxx.xxxxxx.xxxxxxxxx&xxx;xxxx=xxx&xxx;xxxxxx=xxxxxxx= &xxx;xxx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx&xxx;xxxxx=xxx.xxxxxxxx= xx.xxxxxxxxxxxxxxxxxxx&xxx;xxx=xxxxxxxxx.xxxxxxx%xxxxx.xx" = xxxxx=xx"xxxxx:#xxxxxx;xxxx-xxxxxxxxxx:xxxx;"><xxxxx xxxxxx=xx"x" = xxxxx=xx"xxx%" xxxxxxxxxxx=xx"x" xxxxxxxxxxx=xx"x" = xxxxx=xx"xxxxxx-xxxxxxxx:xxxxxxxx;"><xx><xx xxxxx=xx"xxxxxx-xxxxxxxx:xxxxx= xxx;xxxxxx-xxxxxx:xxx;xxxx-xxxxx:xxxxxx;xxxxxxx:xxxxx;xxxxxx:xxxxx xxx = #xxxxxx;xxx-xxxxxx:x xxx x xxxx(x, x, x, = x.xx);xxxxxxxxxx:#xxxxxx;xxxxxxx:xxx xxxx xxxx xxxx;"><x = xxxx=xx"xxxxx://xxx.xxxxxxxx.xxx/x/?xxxxx.xxx&xxx;xxxx=xxxxxxxxxxxxxxxxxxx= &xxx;xxx=xxx.xxxxxxxxxxxx.xxxxxx.xxxxxxxxx&xxx;xxxx=xxx&xxx;xxxxxx=xxxxxxx= &xxx;xxx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx&xxx;xxxxx=xxx.xxxxxxxx= xx.xxxxxxxxxxxxxxxxxxx&xxx;xxx=xxxxxxxxx.xxxxxxx%xxxxx.xx" = xxxxx=xx"xxxxx:#xxxxxx;xxxx-xxxxxxxxxx:xxxx;xxxxxxx:xxxxx;"><xxxxxx><xxxx = xxxx=xx"x"><xxxx xxxxx=xx"xxxx-xxxxxx:xxxxxxxxx xxxx,xxxxxxxxx,xxxxxx = xxxxxx,xxxxxx,xxxxxxx,xxxxx,xxxx-xxxxx;xxxxx-xxxxx:xxxxxx;xxxx-xxxxxx:xxxx= ;xxxxxxxx-xxxxx:xxxxxx;xxxxx:#xxxxxx;xxxx-xxxxxx:x xxx x = #xxxxxx;xxxx-xxxx:xxxx;xxxx-xxxxxx:xxxx;">xxxxxxxx</xxxx></xxxx></xxxxxx><= /x></xx></xx></xxxxx></x></xx></xx></xxxxx></xx></xx><xx><xx = xxxxx=xx"xxxx-xxxx:xxxx;xxxx-xxxxxx:xxxxxxxxxxxx,xxxxxx,xxxxxxx,xxxxx,xxxx= -xxxxx;xxxxxxxxxx:#xxxxxx;xxxxxx:xxxxx xxx = #xxxxxx;xxxxxx-xxx:x;xxxxxx-xxxxxx:x x xxx xxx;xxxxxxx:xxx = xxxx;xxxxxxx:xxxxx;"><xxxxx xxxxxx=xx"x" xxxxx=xx"xxx%" xxxxxxxxxxx=xx"x" = xxxxxxxxxxx=xx"x" xxxxx=xx"xxxxxx-xxxxxxxx:xxxxxxxx;"><xx xxxxx=xx""><xx = xxxxxx=xx"x" xxxxx=xx"xxxx-xxxxxx:xxx;">&xxxx;</xx></xx><xx><xx = xxxxx=xx"xxxxxxx:xxx xxxx;xxxxxx-xxxxx:xxx xxxxx #xxxxxx;"><x = xxxx=xx"xxxxx://xxx.xxxxxxxx.xxx/x/?xxxxx%xxxxx%xxxxxxx&xxx;xxxxxx=xxxxxx&= xxx;xxxxxx=xxxxxxxxxxxxxxxxxxx&xxx;xxxx=xxxxxxxxxxxxxxxxxx&xxx;xxxxxx=xxxx= xxx&xxx;xxx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx&xxx;xxxxx=xxx.xxxxx= xxxxx.xxxxxxxxxxxxxxxxxxx&xxx;xxx=xxxxxxxxx.xxxxxxx%xxxxx.xx&xxx;xxxx=xxxx= xxxxxxxxxxxx&xxx;xxxxx=xxxxxxxxxxxx&xxx;xxx=xxxxxxxxxxxxxxxxxx" = xxxxx=xx"xxxxx:#xxxxxx;xxxx-xxxxxxxxxx:xxxx;"><xxxxx xxxxxx=xx"x" = xxxxxxxxxxx=xx"x" xxxxxxxxxxx=xx"x" = xxxxx=xx"xxxxxx-xxxxxxxx:xxxxxxxx;"><xx><xx xxxxxx=xx"xxxxxx" = xxxxx=xx"xxxxxxx:xxx xxx xxx xxx;"><xxx = xxx=xx"xxxxx://xxxxxx.xx.xxxxx.xxx/xxxx.xxx/xx/xx/x/xxxxxxxxxxx.xxx" = xxxxx=xx"xx" xxxxxx=xx"xx" xxxxx=xx"xxxxxx:x;" /></xx><xx = xxxxxx=xx"xxxxxx" xxxxx=xx"xxxxxxx:xxx xxx;"><x xxxx=xx"xxxxx://xxx.xxxxxx= xx.xxx/x/?xxxxx%xxxxx%xxxxxxx&xxx;xxxxxx=xxxxxx&xxx;xxxxxx=xxxxxxxxxxxxxxx= xxxx&xxx;xxxx=xxxxxxxxxxxxxxxxxx&xxx;xxxxxx=xxxxxxx&xxx;xxx=xxxxxxxxxxxxxx= xxxxxxxxxxxxxxxxxxxxxxxxxxxx&xxx;xxxxx=xxx.xxxxxxxxxx.xxxxxxxxxxxxxxxxxxx&= xxx;xxx=xxxxxxxxx.xxxxxxx%xxxxx.xx&xxx;xxxx=xxxxxxxxxxxxxxxx&xxx;xxxxx=xxx= xxxxxxxxx&xxx;xxx=xxxxxxxxxxxxxxxxxx" = xxxxx=xx"xxxxx:#xxxxxx;xxxx-xxxxxxxxxx:xxxx;xxxx-xxxxxx:xxxxxxxxx = xxxx,xxxxxxxxx,xxxxxx xxxxxx,xxxxxx,xxxxxxx,xxxxx,xxxx-xxxxx;xxxxx-xxxxx:x= xxxxx;xxxx-xxxxxx:xxxx;xxxxxxxx-xxxxx:xxxxxx;xxxx-xxxx:xxxx;xxxx-xxxxxx:xx= xx;xxxx-xxxxxx:x xxx x = #xxxxxx;">xxx=xx=xxxxx&xxxx;xxx</x></xx></xx></xxxxx></x></xx><xx = xxxxx=xx"xxxxxxx:xxx xxxx;"><x xxxx=xx"xxxxx://xxx.xxxxxxxx.xxx/x/?xxxxx%x= xxxx%xxxxxxx&xxx;xxxxxx=xxxxxxxxx&xxx;xxxxxx=xxxxxxxxxxxxxxxxxxx&xxx;xxxx= =xxxxxxxxxxxxxxxxxx&xxx;xxxxxx=xxxxxxx&xxx;xxx=xxxxxxxxxxxxxxxxxxxxxxxxxxx= xxxxxxxxxxxxxxx&xxx;xxxxx=xxx.xxxxxxxxxx.xxxxxxxxxxxxxxxxxxx&xxx;xxx=xxxxx= xxxx.xxxxxxx%xxxxx.xx&xxx;xxxx=xxxxxxxxxxxxxxxxxxx&xxx;xxxxx=xxxxxxxxxxxx&= xxx;xxx=xxxxxxxxxxxxxxxxxx" = xxxxx=xx"xxxxx:#xxxxxx;xxxx-xxxxxxxxxx:xxxx;"><xxxxx xxxxxx=xx"x" = xxxxxxxxxxx=xx"x" xxxxxxxxxxx=xx"x" = xxxxx=xx"xxxxxx-xxxxxxxx:xxxxxxxx;"><xx><xx xxxxxx=xx"xxxxxx" = xxxxx=xx"xxxxxxx:xxx xxx xxx xxx;"><xxx = xxx=xx"xxxxx://xxxxxx.xx.xxxxx.xxx/xxxx.xxx/xx/xx/x/xxxxxxxxxxx.xxx" = xxxxx=xx"xx" xxxxxx=xx"xx" xxxxx=xx"xxxxxx:x;" /></xx><xx = xxxxxx=xx"xxxxxx" xxxxx=xx"xxxxxxx:xxx xxx;"><x xxxx=xx"xxxxx://xxx.xxxxxx= xx.xxx/x/?xxxxx%xxxxx%xxxxxxx&xxx;xxxxxx=xxxxxxxxx&xxx;xxxxxx=xxxxxxxxxxxx= xxxxxxx&xxx;xxxx=xxxxxxxxxxxxxxxxxx&xxx;xxxxxx=xxxxxxx&xxx;xxx=xxxxxxxxxxx= xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx&xxx;xxxxx=xxx.xxxxxxxxxx.xxxxxxxxxxxxxxxxx= xx&xxx;xxx=xxxxxxxxx.xxxxxxx%xxxxx.xx&xxx;xxxx=xxxxxxxxxxxxxxxxxxx&xxx;xxx= xx=xxxxxxxxxxxx&xxx;xxx=xxxxxxxxxxxxxxxxxx" = xxxxx=xx"xxxxx:#xxxxxx;xxxx-xxxxxxxxxx:xxxx;xxxx-xxxxxx:xxxxxxxxx = xxxx,xxxxxxxxx,xxxxxx xxxxxx,xxxxxx,xxxxxxx,xxxxx,xxxx-xxxxx;xxxxx-xxxxx:x= xxxxx;xxxx-xxxxxx:xxxx;xxxxxxxx-xxxxx:xxxxxx;xxxx-xxxx:xxxx;xxxx-xxxxxx:xx= xx;xxxx-xxxxxx:x xxx x = #xxxxxx;">xxxxxxxxxxxx</x></xx></xx></xxxxx></x></xx><xx xxxxx=xx"xxx%" = xxxxx=xx""></xx></xx><xx xxxxx=xx""><xx xxxxxx=xx"x" xxxxx=xx"xxxx-xxxxxx:= xxx;">&xxxx;</xx></xx></xxxxx></xx></xx></xxxxx><xxxxx xxxxxx=xx"x" = xxxxxxxxxxx=xx"x" xxxxxxxxxxx=xx"x" = xxxxx=xx"xxxxxx-xxxxxxxx:xxxxxxxx;"><xx xxxxx=xx""><xx xxxxxx=xx"xx" = xxxxx=xx"xxxx-xxxxxx:xxxx;">&xxxx;</xx></xx></xxxxx></xx></xx><xx = xxxxx=xx""><xx xxxxxx=xx"xx" = xxxxx=xx"xxxx-xxxxxx:xxxx;">&xxxx;</xx></xx></xxxxx></xx><xx xxxxx=xx"xx" = xxxxx=xx"xxxxxxx:xxxxx;xxxxx:xxxx;">&xxxx;&xxxx;&xxxx;</xx></xx><xx><xx = xxxxx=xx"xx" = xxxxx=xx"xxxxxxx:xxxxx;xxxxx:xxxx;">&xxxx;&xxxx;&xxxx;</xx><xx = xxxxx=xx""><xxxxx xxxxxx=xx"x" xxxxx=xx"xxx%" xxxxxxxxxxx=xx"x" = xxxxxxxxxxx=xx"x" xxxxx=xx"xxxxxx-xxxxxxxx:xxxxxxxx;"><xx xxxxx=xx""><xx = xxxxxx=xx"x" xxxxx=xx"xxxx-xxxxxx:xxx;" = xxxxxxx=xx"x">&xxxx;</xx></xx><xx><xx xxxxx=xx"xxxxxx" xxxxx=xx""><x = xxxx=xx"xxxxx://xxx.xxxxxxxx.xxx/x/?xxxxx.xxx&xxx;xxxx=xxxxxxxxxxxxxxxxxxx= &xxx;xxx=xxx.xxxxxxxxxxxx.xxxxxx.xxxxxxxxx&xxx;xxxx=xxx&xxx;xxxxxx=xxxxxxx= &xxx;xxx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx&xxx;xxxxx=xxx.xxxxxxxx= xx.xxxxxxxxxxxxxxxxxxx&xxx;xxx=xxxxxxxxx.xxxxxxx%xxxxx.xx" = xxxxx=xx"xxxxx:#xxxxxx;xxxx-xxxxxxxxxx:xxxx;"><xxxxx xxxxxx=xx"x" = xxxxx=xx"xxx%" xxxxxxxxxxx=xx"x" xxxxxxxxxxx=xx"x" = xxxxx=xx"xxxxxx-xxxxxxxx:xxxxxxxx;"><xx><xx xxxxx=xx"xxxxxx-xxxxxxxx:xxxxx= xxx;xxxxxx-xxxxxx:xxx;xxxx-xxxxx:xxxxxx;xxxxxxx:xxxxx;xxxxxx:xxxxx xxx = #xxxxxx;xxx-xxxxxx:xxxxx x xxx xxx xxxx(xxx, xxx, xxx, x.x),x xxx x = xxxx(x, x, x, x.x);xxxxxxxxxx:#xxxxxx;xxxxxxx:xxx xxxx xxxx xxxx;"><x = xxxx=xx"xxxxx://xxx.xxxxxxxx.xxx/x/?xxxxx.xxx&xxx;xxxx=xxxxxxxxxxxxxxxxxxx= &xxx;xxx=xxx.xxxxxxxxxxxx.xxxxxx.xxxxxxxxx&xxx;xxxx=xxx&xxx;xxxxxx=xxxxxxx= &xxx;xxx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx&xxx;xxxxx=xxx.xxxxxxxx= xx.xxxxxxxxxxxxxxxxxxx&xxx;xxx=xxxxxxxxx.xxxxxxx%xxxxx.xx" = xxxxx=xx"xxxxx:#xxxxxx;xxxx-xxxxxxxxxx:xxxx;xxxxxxx:xxxxx;"><xxxxxx><xxxx = xxxx=xx"x"><xxxx xxxxx=xx"xxxx-xxxxxx:xxxxxxxxx xxxx,xxxxxxxxx,xxxxxx = xxxxxx,xxxxxx,xxxxxxx,xxxxx,xxxx-xxxxx;xxxxx-xxxxx:xxxxxx;xxxx-xxxxxx:xxxx= ;xxxxxxxx-xxxxx:xxxxxx;xxxxx:#xxxxxx;xxxx-xxxxxx:x -xxx x = #xxxxxx;xxxx-xxxx:xxxx;xxxx-xxxxxx:xxxx;">xxxxxxxx&xxxx;=xx=xxxxxxx</xxxx>= </xxxx></xxxxxx></x></xx></xx></xxxxx></x></xx><xx xxxxx=xx"xxx%" = xxxxx=xx"xxxxxxx" xxxxx=xx""></xx></xx><xx xxxxx=xx""><xx xxxxxx=xx"xx" = xxxxx=xx"xxxx-xxxxxx:xxxx;" xxxxxxx=xx"x">&xxxx;</xx></xx></xxxxx></xx><xx = xxxxx=xx"xx" = xxxxx=xx"xxxxxxx:xxxxx;xxxxx:xxxx;">&xxxx;&xxxx;&xxxx;</xx></xx><xx><xx = xxxxx=xx"xx" = xxxxx=xx"xxxxxxx:xxxxx;xxxxx:xxxx;">&xxxx;&xxxx;&xxxx;</xx><xx = xxxxx=xx""><xxxxx xxxxxx=xx"x" xxxxx=xx"xxx%" xxxxxxxxxxx=xx"x" = xxxxxxxxxxx=xx"x" xxxxx=xx"xxxxxx-xxxxxxxx:xxxxxxxx;"><xx = xxxxx=xx"xxxxxx-xxx:xxxxx xxx #xxxxxx;"><xx xxxxxx=xx"xx" = xxxxx=xx"xxxx-xxxxxx:xxxx;">&xxxx;</xx></xx><xx><xx = xxxxx=xx"xxxx-xxxxxx:xxxxxxxxx xxxx,xxxxxxxxx,xxxxxx xxxxxx,xxxxxx,xxxxxxx= ,xxxxx,xxxx-xxxxx;xxxx-xxxx:xxxx;xxxxx:#xxxxxx;xxxx-xxxxxx:xxxx;">xxxxx = xxxxxxxxx xxxxx xx <x xxxx=xx"xxxxxx:xxxxxxx.xxxxxxx&#xxx;xxx.xx" = xxxxx=xx"xxxxx:#xxxxxx;xxxx-xxxxxxxxxx:xxxx;">xxxxxxx.xxxxxxx&#xxx;xxx.xx<= /x> xxxxxxxx. xxxxx xx xxxxx x-xxxxx xx xxxxxxx xxxxx xxx xxxxxxxx = xxxxxxxx x=xx=xxxxxxxx, <x xxxx=xx"xxxxx://xxx.xxxxxxxx.xxx/x.xxx?x=xxxxxx= xxxxxxxxxxxx&xxx;x=xxxxxxxxxxxx&xxx;xxx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx= xxxxxxxx" xxxxx=xx"xxxxx:#xxxxxx;xxxx-xxxxxxxxxx:xxxx;">xxxxxxxx xxx = xx</x>.<xx />xxxxxxxx, xxx., xxxxxxxxx: xxxxxxxxx xxxxxxx, x xxxxxx xxx, = xxxxx xxxx, xx xxxxx</xx></xx></xxxxx></xx><xx xxxxx=xx"xx" = xxxxx=xx"xxxxxxx:xxxxx;xxxxx:xxxx;">&xxxx;&xxxx;&xxxx;</xx></xx><xx = xxxxx=xx""><xx xxxxxx=xx"xx" xxxxx=xx"xxxx-xxxxxx:xxxx;" = xxxxxxx=xx"x">&xxxx;</xx></xx></xxxxx><xxxx xxxxx=xx""><xxx = xxx=xx"xxxxx://xxx.xxxxxxxx.xxx/xxxxxxxxxxxxxxxxxx.xxx?xxx=xxxxxxxxxxxxxxx= xxxxxxxxxxxxxxxxxxxxxxxxxxx" xxxxx=xx"xxxxxx:x;xxxxx:xxx;xxxxxx:xxx;" = /></xxxx></xx></xx></xxxxx></xxxx></xxxx> --xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx-- AF: NF:x PS:xx SRH:x SFN: DSR: MID:<xxxxxxxxxxxxxx.xxxxxxxx(a)xxxxxxxxxxx.xx> CFG: PT:x S:xxxxxxxxxx@xxxxxxxxxxx.xx RQ: SSV: NSV:xxxx.xxxxxx.xx.xx SSH: NG:xx.xxx.xxxxxx NAID:x X-Claws-Privacy-System: X-Claws-Sign:x SCF:#xxxx/xxxx-xxxxxxxxx/xxxxx/xxxx RMID:#xxxx/xxxx.xxxxxx.xx.xx/xx.xxx.xxxxxx xxxxxx xxxxxx.xxx.x(a)xxxx.xxxxxxx.xx X-Claws-End-Special-Headers: x Date: Sun, 19 Apr 2009 14:55:54 +0200 From: xxxxxxx =?xxx-x?x?xxxxxxxxxx==?= <xxxxxxxxxx(a)xxxxxxxxxxx.xx> Newsgroups: xx.xxx.xxxxxx Subject: xx: =?xxx-x?x?xxxxxxxxxxxx?= xxxxxxx xxxxxxx xxxxxxx xx Message-ID: <xxxxxxxxxxxxxx.xxxxxxxx(a)xxxxxxxxxxx.xx> References: <xxxxxxxxxxxxxxx(a)xxx.xxxxxxxxxx.xxx> <xxxxxx.xxx.x(a)xxxx.xxxxxxx.xx> <xxxxxxxxxxxxxxx(a)xxx.xxxxxxxxxx.xxx> <xxxxxx-xxx.xxx(a)xxx.xxxxxxx-xxxxxx.xx> <xxxxxxxxxxxxxxxx(a)xxx.xxxxxxxxxx.xxx> <xxxxxx-xxx.xxx(a)xxx.xxxxxxx-xxxxxx.xx> <xxxxxxxxxxxxxxxx(a)xxx.xxxxxxxxxx.xxx> <xxxxxx-xxx.xxx(a)xxx.xxxxxxx-xxxxxx.xx> <xxxxxx.xxx.x(a)xxxx.xxxxxxx.xx> <xxxxxx-xxx.xxx(a)xxx.xxxxxxx-xxxxxx.xx> <xxxxxx.xxx.x(a)xxxx.xxxxxxx.xx> <xxxxxx.xxx.x(a)xx-xxxx.xxxx.xxxxxx.xx> <xxxxxx.xxx.x(a)xxxx.xxxxxxx.xx> <xxxxxx.xxx.x(a)xx-xxxx.xxxx.xxxxxx.xx> <xxxxxx.xxx.x(a)xxxx.xxxxxxx.xx> X-Newsreader: xxxxx xxxx x.x.x (xxx+ x.xx.xx; xxxxxx-xx-xxxxx-xxx) Mime-Version: x.x Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable xx xxx, xx xxx xxxx xx:xx:xx +xxxx xxxxxxx xxxxxx xxxxxxxxx <xxxxxxxxxxxxxxx(a)xxx.xxx>: > xxxxxxxx x=xx=xxxx (xxxx-xx-xx xxxx): >=xx > >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> xxx: xxxxxxxx x=xx=xxxxx xxx xxxx xxx xxx > >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> xxxx xx xxxxxxxx xxxx xx xxx xx xxx > >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> xxxxxxxxxxxxxx xxx ... > >>>>>>>>>>>>>>>>>>>>>>>>>>>>>> xxxx xxx xxxxxxxx, xxxx xxx xxx > >>>>>>>>>>>>>>>>>>>>>>>>>>>>>> xxxxxxx xxxxxxxxxxx xxx xxxxxx? > >>>>>>>>>>>>>>>>>>>>>>>>>>>>> xxx xxx xx xxxx xxx xxxx xxxxxx? > >>>>>>>>>>>>>>>>>>>>>>>>>>>> xxx "x". > >>>>>>>>>>>>>>>>>>>>>>>>>>> xxxxxxx? > >>>>>>>>>>>>>>>>>>>>>>>>>> xxx xxx, xx "xxxxxx" xxx xxxx "x". > >>>>>>>>>>>>>>>>>>>>>>>>> xxxx; xx xxxxx xx xxx xxxxxx xxxxxxxx. > >>>>>>>>>>>>>>>>>>>>>>>> "xxx xxxxxxx xxx xxxxx, xxx xxxx xxxxxxx xxx > >>>>>>>>>>>>>>>>>>>>>>>> xxxx xxxxx xxxx xxxxxx." - xxxx "x" xx > >>>>>>>>>>>>>>>>>>>>>>>> xxxxxxxxxxxx xxxxxx. > >>>>>>>>>>>>>>>>>>>>>>> "xxx xxxxxxx xxx xxxxxxxxx" xxx xxx xxxxxx > >>>>>>>>>>>>>>>>>>>>>>> xxxxxx. > >>>>>>>>>>>>>>>>>>>>>> xxxx xxxxxxx xxx xxxxxxx!!!!!x > >>>>>>>>>>>>>>>>>>>>> xxxxx? > >>>>>>>>>>>>>>>>>>>> xxx xxxxxxxxx. > >>>>>>>>>>>>>>>>>>> ... xxx xxxx x=xx=xxxxxx xxxx, xxx xxx xx xxx xxxxxxxx > >>>>>>>>>>>>>>>>>>> xxxxxx! > >>>>>>>>>>>>>>>>>> xxx xx xxxxxx, xxxxx xxx 'xxxxxxxxx'. > >>>>>>>>>>>>>>>>> x=xx=xxxxxx xxx xxx xxxxxx? > >>>>>>>>>>>>>>>> xxxx xxx xxxxx xxxxxxxxx x=xx=xxxxxx! > >>>>>>>>>>>>>>> xxxx xxx x=xx=xxxxxx xxxxxxx xxx xxxxxx xxxxx xxx xxxxxx > >>>>>>>>>>>>>>> xxxxx x=xx=xxxxxx xxxxxxxxxxx. > >>>>>>>>>>>>>> xxxx xxxxxx xxxxx, xxxxx xx xxxx xx xxx x=xx=xxxxxxx xxxxx! > >>>>>>>>>>>>> xxx xxxxxx xxxx? xxx xxx xxxx xxxxxx xxxxxxxxxxx. > >>>>>>>>>>>> xx, xx, xxxxxx xxxxxx =xx=xxxxxxxx xxxxx xxx xxxxx. > >>>>>>>>>>>> xx"xxx xxx xxx xxxx=xx=xxxxx, xxx xxxx xx xxxx"xxxxxx > >>>>>>>>>>> xxxxxxxxx? > >>>>>>>>>> xxx /xxx/ xxxxxx? > >>>>>>>>> xxx xxxxxxx xxx xx xxxxxxx xxxxxxxx. > >>>>>>>> xxxx xxxx xxx x=xx=xxxxxxx xxxxxx? > >>>>>>> xx xxx xx xx xxxxxxxxxx > >>>>>> xxx xxxxx x =xx=xx? > >>>>> xxx xxxxxxxxxxxxx x=xx=xxxxx xxx xxxxx x xx. > >>>> xxxx xxxx xxxx xxxxxxxxxxxx. > >>> xxx xxxx xx=xx=xxxxxxxxxxxxxxx xxxx xxx xxxxxxxxxxx xxx xxx. > >> > >> xxxxx xxx xxx xxx xxxxxx xxx xxxxx xxxx. > > > > xxxx xxxxxx xxxxx; xxx xxxxx xxxxx xxx xxxxx ... >=xx > xxxxx xxx, xxx xxxxxxxxx xxxxx! xx xxxxxx xx xxxxx xxxxxx, xxxx xxx xxxxxx xxx xxx xxxxxxx xxx xxxxxx xxxxxx! xxxxx --=xx xxx xxxx xxx xx xxx: xxxxxx-xxxxx-xxxxx-xxxxxx-xxxxx-xxxx-xxxx-xxx-xxxxxx-xxxxx xxxxxx-xxxxx-xxxxx-xxxxxx-xxxxx-xxxx-xxxx-xxx-xxxxxx-xxxxx Return-Path: <xxxxxx-xx.xxxxxxxxxxx.xxxxxxx-xxxxxxxxxx=xxxxxxxxxxx.xx(a)xxxxxx.xxx.xxxx.xxx> Received: xxxx xxxxxxxxx ([xxxx xxxxxx]) xx xxxxx (xxxxx xx.x.xx-xxxxxx-x.x.xx-x) xxxx xxxxx; xxx, xx xxx xxxx xx:xx:xx +xxxx X-Sieve: xxx xxxxx x.x Received: xxxx xxxxxxxxx ([xxx.x.x.x]) xx xxxxxxxxx xxxx xxxxx (xxxx x.xx) (xxxxxxxx-xxxx <xxxxxx-xx.xxxxxxxxxxx.xxxxxxx-xxxxxxxxxx=xxxxxxxxxxx.xx(a)xxxxxx.xxx.xxxx.xxx>) xx xxxxxx-xxxxxx-xx xxx xxxxx@xxxxxxxxx; xxx, xx xxx xxxx xx:xx:xx +xxxx X-Virus-Scanned: xxxxxx xxxxxxx-xxx xx xxxxxxx.xxxxxxxxx.xxx Received: xxxx xxxxxxxxx ([xxx.x.x.x]) xx xxxxxxxxx (xxxxxxxxx [xxx.x.x.x]) (xxxxxxx-xxx, xxxx xxxxx) xxxx xxxxx xx xxxxxxxxxxxx xxx <xxxxx@xxxxxxxxx>; xxx, x xxx xxxx xx:xx:xx +xxxx (xxx) Received: xxxx xxxxxx-xxxx xx xxxxxxxxx xxxx xxxx-xxxxxxx (xxxx x.xx) (xxxxxxxx-xxxx <xxxxxx-xx.xxxxxxxxxxx.xxxxxxx-xxxxxxxxxx=xxxxxxxxxxx.xx(a)xxxxxx.xxx.xxxx.xxx>) xx xxxxxx-xxxxxx-xx xxx xxxxx@xxxxxxxxx; xxx, xx xxx xxxx xx:xx:xx +xxxx Received: xxxx xxxxxxxxx ([xxx.x.x.x]) xx xxxxxxxxx xxxx xxxxx (xxxx x.xx) (xxxxxxxx-xxxx <xxxxxx-xx.xxxxxxxxxxx.xxxxxxx-xxxxxxxxxx=xxxxxxxxxxx.xx(a)xxxxxx.xxx.xxxx.xxx>) xx xxxxxx-xxxxxx-xx xxx xxxxx@xxxxxxxxx; xxx, xx xxx xxxx xx:xx:xx +xxxx Received: xxxx xxx.xxx.xxx [xxx.xxx.xx.xxx] xx xxxxxxxxx xxxx xxxx (xxxxxxxxx-x.x.xx) xxx <xxxxx@xxxxxxxxx> (xxxxxx-xxxx); xxx, xx xxx xxxx xx:xx:xx +xxxx (xxx) Received: xxxx xxxxxx.xxx.xxxx.xxx ([xxx.xxx.xxx.xx]) xx xx-xx.xxx.xxx (xxxxxxxx) xxxx xxxxx (xxxxxxx) xx xxxxxx-xxxxxxxxxx-xxxxxx xxx <xxxxxxxxxx(a)xxxxxxxxxxx.xx>; xxx, xx xxx xxxx xx:xx:xx +xxxx DKIM-Signature: x=x; x=xxx-xxxx; x=xxxxxxx/xxxxxxx; x=xx; x=xxxxxx.xxx.xxxx.xxx; x=xxxxxxx:xxxx:xxxxx-xx:xx:xxxx:xxxxxxx-xx:xxxx-xxxxxxxxxxx:xxxxxx:xxxxxxx-xxxx:xxxx-xxxxxxx; x=xxxxxxxx.xxxxxxx=xxxxxxx.xxx(a)xxxxxx.xxx.xxxx.xxx; xx=xxxxxxxxxxxxxxxxxxxxxxxxxxx=; x=xxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx/xxxxxx xxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxx= DomainKey-Signature: x=xxx-xxxx; x=xxxxx; x=xxx; x=xx; x=xxxxxx.xxx.xxxx.xxx; x=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxx+xxxxx/xx+xxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxx/xxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxx=; Received: xxxx (xxx.x.x.x) xx xxxxxx.xxx.xxxx.xxx (xxxxxxxx(xx) xx.xxxx) xx xxxxxxxxxxxx xxx <xxxxxxxxxx(a)xxxxxxxxxxx.xx>; xxx, xx xxx xxxx xx:xx:xx +xxxx (xxxxxxxx-xxxx <xxxxxx-xx.xxxxxxxxxxx.xxxxxxx-xxxxxxxxxx=xxxxxxxxxxx.xx(a)xxxxxx.xxx.xxxx.xxx>) Subject: =?xxx-x?x?xxxxx=xx=xx=xxxxxxxxxxx=xxxxxx?= From: =?xxx-x?x?xxxxxxxxx=xxx=xxxxxxxxxxx=xx=xx=xxxxxxxxxx=xxxxxxxxxxxxx?= <xxxxxxxx.xxxxxxx(a)xxxxx.xxx> Reply-To: =?xxx-x?x?xxxxxxxxx=xxx=xxxxxxxxxxx=xx=xx=xxxxxxxxxx=xxxxxxxxxxxxx?= <xxxxxxxx.xxxxxxx(a)xxxxx.xxx> To: <xxxxxxxxxx(a)xxxxxxxxxxx.xx> Date: Sat, 29 Dec 2012 22:06:39 +0000 Message-ID: <xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.xxxxxxxxxxxxxx(a)xxxxxx.xxx.xxxx.xxx> X-Mailer: xxxxxxxxx xxxxxx - **xxxxxxxxxxxxxxxxxxxxxxx** X-Campaign: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.xxxxxxxxxx X-campaignid: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.xxxxxxxxxx X-Report-Abuse: xxxxxx xxxxxx xxxxx xxx xxxx xxxxxxxx xxxx: xxxx://xxx.xxxxxxxxx.xxx/xxxxx/xxxxx.xxxxx?x=xxxxxxxxxxxxxxxxxxxxxxxxx&xx=xxxxxxxxxx&x=xxxxxxxxxx x-accounttype: xx List-Unsubscribe: <xxxxxx:xxxxxxxxxxx-xxxxxxxxxxxxxxxxxxxxxxxxx-xxxxxxxxxx-xxxxxxxxxx@xxxxxxx.xxx.xxxx.xxx?xxxxxxx=xxxxxxxxxxx>, <xxxx://xxxxxxxx.xxx.xxxx-xxxxxxx.xxx/xxxxxxxxxxx?x=xxxxxxxxxxxxxxxxxxxxxxxxx&xx=xxxxxxxxxx&x=xxxxxxxxxx&x=xxxxxxxxxx> Sender: "xxxxxxxxx x xxxxxxxxx - xxxxxxxx xxxxxxxxxxx" <xxxxxxxx.xxxxxxx=xxxxx.xxx(a)xxxxxx.xxx.xxxx.xxx> x-mcda: xxxxx Content-Type: multipart/alternative; boundary="_----------=_MCPart_2024482880" MIME-Version: x.x X-GMX-Antispam: x (xxxx xxx xxx xxxxxxxxxx xx xxxx); xxxxxx=xx; X-GMX-Antivirus: x (xx xxxxx xxxxx) X-UI-Filterresults: ;xxx:xx:xxxxxxxxxxx=:xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxx+x+xxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxx+xxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxx/ xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxx/xxxxxxxxx+xxxxxx/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxx+x xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx/xxxxxxxxxxxxx/xxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx/xxxxxxx//x xxxx/xxxxxxxxxxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx/xxx xxxxxxxxxxxxxxxxxxxxx+xxx+xxxxxxxxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxxxxx/x xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxx/xxxxx/xxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx/xxxxxxxxxxxxxxxxxx/xxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxx+xxxxx/xxxx+xx xxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxx/xxxxx+xxx+xxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxx= X-Bogofiltered: xxxx X-Bogosity: xxxxxx, xxxxx=xxxxxxxxxx, xxxxxxxxx=x.xxxxxx, xxxxxxx=x.x.x xxxx xx x xxxxx-xxxx xxxxxxx xx xxxx xxxxxx --x----------=xxxxxxxxxxxxxxxxxx xxxxxxx-xxxx: xxxx/xxxxx; xxxxxxx="xxx-x"; xxxxxx="xxxxx" xxxxxxx-xxxxxxxx-xxxxxxxx: xxxxxx-xxxxxxxxx xxxxx xxxxxxxxx x xxxxxxxxx xxxxxx - xxxxx xxx xxxxxx xxxxx xxxxxx xxxxxx xxxxxxx (xxxxxxx xxxx xxxx xxxxx xxx xxxxxxx) xxx xxxxxxxxx x=xx=xxxxxxxxxxx, xxx-xxxxxxx x=xx=xxx xxxx x=xx=xxxx xxx xxxxxxx xx xxxxxx xxx xxxxxxxx xx= =xx=xx=xxxx,- xxxxx =xx=xx=xxxx,- xx xxxxxxxx!!! xxx xxxxxxxx xxxxxx xxx xxxxxxxxxx xxxxx xxx xxxxxxxxxxxxxxxx!! xxxxxxxxxx xxxxx xxxxxxxx(a)xxxxxxxx.xxx - xxx xxxxxxxx xxx xxxxxxxxxx xxxxx xxxx, xxx xxx xxx xxx xxxxxxx xxxx xxxxxxxxxx xxxxxxx xxx xxxxxxx. xx xxxxxx xxxxx ... xxxxx xxx xx... xxx xxxxxxxxx x xxxxxxxxx xxxx xx xxx=xx=xxxxxx xxxxxx xxxxxxxxxx, xx xx xxxx xxx xxxxx xxxxxxx xxxxxx, xxxx xxx xxx.xxxxxxxx.xxx, xxx. xxx.xxxxx.xxx xxxxxxxxxxx xxxx. [x]xxxxxxxxxxx xxxx xxxx xxxx | [x]xxxxxx xxxxxxxxxxxx xxxxxxxxxxx xxxxx: x. xxxx://xxxxxxxx.xxx.xxxx-xxxxxxx.xxx/xxxxxxxxxxx?x=xxxxxxxxxxxxxxxx= xxxxxxxxxxx&xx=xxxxxxxxxxxx&x=xxxxxxxxxxxx&x=xxxxxxxxxxxx x. xxxx://xxxxxxxx.xxx.xxxx-xxxxxxx.xxx/xxxxxxx?x=xxxxxxxxxxxxxxxxxxxx= xxxxxxx&xx=xxxxxxxxxxxx&x=xxxxxxxxxxxx --x----------=xxxxxxxxxxxxxxxxxx xxxxxxx-xxxx: xxxx/xxxx; xxxxxxx="xxx-x" xxxxxxx-xxxxxxxx-xxxxxxxx: xxxxxx-xxxxxxxxx <!xxxxxxx xxxx xxxxxx "-//xxx//xxx xxxxx x.x xxxxxxxxxxxx//xx" "xxxx://xxx= =xxxx.xxx/xx/xxxxxx/xxx/xxxxxx-xxxxxxxxxxxx.xxx"> <xxxx> <xxxx> <xxxx xxxx-xxxxx=xx"xxxxxxx-xxxx" xxxxxxx=xx"xxxx/xxxx; xxxxxxx=xx= xxx-x">  <xxxx xxxxxxxx=xx"xx:xxxxx" xxxxxxx=xx"xxxxx - xxxxxxxxx xxxx"> <xxxxx>xxxxx - xxxxxxxxx xxxx</xxxxx> =xx=xx =xx<xxxxx xxxx=xx"xxxx/xxx"> =xx=xx#xxxxxxx x{ =xx=xx=xxxxxxxxx:x; =xx=xx} =xx=xxxxxx{ =xx=xx=xxxxxxx:xxx% !xxxxxxxxx; =xx=xx} =xx=xx.xxxxxxxxxxx{ =xx=xx=xxxxxxx:xxx%; =xx=xx} =xx=xx.xxxxxxxxxxxxx{ =xx=xx=xxxxxxx:xxx%; =xx=xx} =xx=xxxxxx{ =xx=xx=xx-xxxxxx-xxxx-xxxx-xxxxxx:xxxx; =xx=xx} =xx=xxxxxx{ =xx=xx=xxxxxxxx:x; =xx=xx=xxxxxxxxx:x; =xx=xx} =xx=xxxxx{ =xx=xx=xxxxxxxx:x; =xx=xx=xxxxxxxx:xxxx; =xx=xx=xxxxxx-xxxxxx:xxx%; =xx=xx=xxxxxxxxx:xxxx; =xx=xx=xxxxxx-xxxxxxxxxx:xxxx; =xx=xx} =xx=xxxxxxx xx{ =xx=xx=xxxxxxxx-xxxxxxxx:xxxxxxxx; =xx=xx} =xx=xx#xxxxxxxxxxxxxxx{ =xx=xx=xxxxxxxx:xxx% !xxxxxxxxx; =xx=xx=xxxxxxxx:x; =xx=xx=xxxxxxxxx:x; =xx=xx=xxxxxxx:xxx% !xxxxxxxxx; =xx=xx} =xx=xxxxxx,#xxxxxxxxxxxxxxx{ =xx=xx=xxxxxxxxxxxx-xxxxx:#xxxxxx; =xx=xx} =xx=xx#xxxxxxxxxxxxxxxxx{ =xx=xx=xxxxxxxx:xxx xxxxx #xxxxxx; =xx=xx} =xx=xxxx,.xx{ =xx=xx=xxxxxxx:#xxxxxx; =xx=xx=xxxxxxxxx:xxxxx; =xx=xx=xxxxxx-xxxxxx:xxxxx; =xx=xx=xxxxxx-xxxx:xxxx; =xx=xx=xxxxxx-xxxxxx:xxxx; =xx=xx=xxxxxx-xxxxxx:xxx%; =xx=xx=xxxxxxxx-xxx:x; =xx=xx=xxxxxxxx-xxxxx:x; =xx=xx=xxxxxxxx-xxxxxx:xxxx; =xx=xx=xxxxxxxx-xxxx:x; =xx=xx=xxxxxx-xxxxx:xxxx; =xx=xx} =xx=xxxx,.xx{ =xx=xx=xxxxxxx:#xxxxxx; =xx=xx=xxxxxxxxx:xxxxx; =xx=xx=xxxxxx-xxxxxx:xxxxx; =xx=xx=xxxxxx-xxxx:xxxx; =xx=xx=xxxxxx-xxxxxx:xxxx; =xx=xx=xxxxxx-xxxxxx:xxx%; =xx=xx=xxxxxxxx-xxx:x; =xx=xx=xxxxxxxx-xxxxx:x; =xx=xx=xxxxxxxx-xxxxxx:xxxx; =xx=xx=xxxxxxxx-xxxx:x; =xx=xx=xxxxxx-xxxxx:xxxx; =xx=xx} =xx=xxxx,.xx{ =xx=xx=xxxxxxx:#xxxxxx; =xx=xx=xxxxxxxxx:xxxxx; =xx=xx=xxxxxx-xxxxxx:xxxxx; =xx=xx=xxxxxx-xxxx:xxxx; =xx=xx=xxxxxx-xxxxxx:xxxx; =xx=xx=xxxxxx-xxxxxx:xxx%; =xx=xx=xxxxxxxx-xxx:x; =xx=xx=xxxxxxxx-xxxxx:x; =xx=xx=xxxxxxxx-xxxxxx:xxxx; =xx=xx=xxxxxxxx-xxxx:x; =xx=xx=xxxxxx-xxxxx:xxxx; =xx=xx} =xx=xxxx,.xx{ =xx=xx=xxxxxxx:#xxxxxx; =xx=xx=xxxxxxxxx:xxxxx; =xx=xx=xxxxxx-xxxxxx:xxxxx; =xx=xx=xxxxxx-xxxx:xxxx; =xx=xx=xxxxxx-xxxxxx:xxxx; =xx=xx=xxxxxx-xxxxxx:xxx%; =xx=xx=xxxxxxxx-xxx:x; =xx=xx=xxxxxxxx-xxxxx:x; =xx=xx=xxxxxxxx-xxxxxx:xxxx; =xx=xx=xxxxxxxx-xxxx:x; =xx=xx=xxxxxx-xxxxx:xxxx; =xx=xx} =xx=xx#xxxxxxxxxxxxxxxxx{ =xx=xx=xxxxxxxxxxxx-xxxxx:#xxxxxx; =xx=xx} =xx=xx.xxxxxxxxxxxxxxxx xxx{ =xx=xx=xxxxxxx:#xxxxxx; =xx=xx=xxxxxx-xxxxxx:xxxxx; =xx=xx=xxxxxx-xxxx:xxxx; =xx=xx=xxxxxx-xxxxxx:xxx%; =xx=xx=xxxxxx-xxxxx:xxxx; =xx=xx} =xx=xx.xxxxxxxxxxxxxxxx xxx x:xxxx,.xxxxxxxxxxxxxxxx xxx x:xxxxxxx,.xxxxxx= xxxxxxxxxx xxx x .xxxxxxxxxx { =xx=xx=xxxxxxx:#xxxxxx; =xx=xx=xxxxxx-xxxxxx:xxxxxx; =xx=xx=xxxxxx-xxxxxxxxxx:xxxxxxxxx; =xx=xx} =xx=xx#xxxxxxxxxxxxxx{ =xx=xx=xxxxxxxxxxxx-xxxxx:#xxxxxx; =xx=xx=xxxxxxxx-xxxxxx:x; =xx=xx} =xx=xx.xxxxxxxxxxxxx{ =xx=xx=xxxxxxx:#xxxxxx; =xx=xx=xxxxxx-xxxxxx:xxxxx; =xx=xx=xxxxxx-xxxx:xxxx; =xx=xx=xxxxxx-xxxxxx:xxxx; =xx=xx=xxxxxx-xxxxxx:xxx%; =xx=xx=xxxxxxxxx:x; =xx=xx=xxxxxx-xxxxx:xxxxxx; =xx=xx=xxxxxxxxxx-xxxxx:xxxxxx; =xx=xx} =xx=xx.xxxxxxxxxxxxx x:xxxx,.xxxxxxxxxxxxx x:xxxxxxx,.xxxxxxxxxxxxx x .xxx= xxxxxxx { =xx=xx=xxxxxxx:#xxxxxx; =xx=xx=xxxxxx-xxxxxx:xxxxxx; =xx=xx=xxxxxx-xxxxxxxxxx:xxxxxxxxx; =xx=xx} =xx=xx#xxxxxxxxxxx{ =xx=xx=xxxxxxxx:xxxx; =xx=xx=xxxxx-xxxxx:xxxxx; =xx=xx} =xx=xx#xxxxxxxxxxxxxxxxx,.xxxxxxxxxxx{ =xx=xx=xxxxxxxxxxxx-xxxxx:#xxxxxx; =xx=xx} =xx=xx.xxxxxxxxxxx xxx{ =xx=xx=xxxxxxx:#xxxxxx; =xx=xx=xxxxxx-xxxxxx:xxxxx; =xx=xx=xxxxxx-xxxx:xxxx; =xx=xx=xxxxxx-xxxxxx:xxx%; =xx=xx=xxxxxx-xxxxx:xxxx; =xx=xx} =xx=xx.xxxxxxxxxxx xxx x:xxxx,.xxxxxxxxxxx xxx x:xxxxxxx,.xxxxxxxxxxx xxx= x .xxxxxxxxxx { =xx=xx=xxxxxxx:#xxxxxx; =xx=xx=xxxxxx-xxxxxx:xxxxxx; =xx=xx=xxxxxx-xxxxxxxxxx:xxxxxxxxx; =xx=xx} =xx=xx.xxxxxxxxxxx xxx{ =xx=xx=xxxxxxxxx:xxxxxx; =xx=xx=xxxxxxxx:xxxx; =xx=xx} =xx=xx.xxxxxxxxxxxxxxxxx{ =xx=xx=xxxxxxxxxxxx-xxxxx:#xxxxxx; =xx=xx} =xx=xx.xxxxxxxxxxxxxxxxx xxx{ =xx=xx=xxxxxxx:#xxxxxx; =xx=xx=xxxxxx-xxxxxx:xxxxx; =xx=xx=xxxxxx-xxxx:xxxx; =xx=xx=xxxxxx-xxxxxx:xxx%; =xx=xx=xxxxxx-xxxxx:xxxx; =xx=xx} =xx=xx.xxxxxxxxxxxxxxxxx xxx x:xxxx,.xxxxxxxxxxxxxxxxx xxx x:xxxxxxx,.xxxx= xxxxxxxxxxxxx xxx x .xxxxxxxxxx { =xx=xx=xxxxxxx:#xxxxxx; =xx=xx=xxxxxx-xxxxxx:xxxxxx; =xx=xx=xxxxxx-xxxxxxxxxx:xxxxxxxxx; =xx=xx} =xx=xx.xxxxxxxxxxxxxxxxx xxx{ =xx=xx=xxxxxxxxx:xxxxxx; =xx=xx=xxxxxxxx:xxxx; =xx=xx} =xx=xx.xxxxxxxxxxxxxxxxxx{ =xx=xx=xxxxxxxxxxxx-xxxxx:#xxxxxx; =xx=xx} =xx=xx.xxxxxxxxxxxxxxxxxx xxx{ =xx=xx=xxxxxxx:#xxxxxx; =xx=xx=xxxxxx-xxxxxx:xxxxx; =xx=xx=xxxxxx-xxxx:xxxx; =xx=xx=xxxxxx-xxxxxx:xxx%; =xx=xx=xxxxxx-xxxxx:xxxx; =xx=xx} =xx=xx.xxxxxxxxxxxxxxxxxx xxx x:xxxx,.xxxxxxxxxxxxxxxxxx xxx x:xxxxxxx,.xx= xxxxxxxxxxxxxxxx xxx x .xxxxxxxxxx { =xx=xx=xxxxxxx:#xxxxxx; =xx=xx=xxxxxx-xxxxxx:xxxxxx; =xx=xx=xxxxxx-xxxxxxxxxx:xxxxxxxxx; =xx=xx} =xx=xx.xxxxxxxxxxxxxxxxxx xxx{ =xx=xx=xxxxxxxxx:xxxxxx; =xx=xx=xxxxxxxx:xxxx; =xx=xx} =xx=xx#xxxxxxxxxxxxxx{ =xx=xx=xxxxxxxxxxxx-xxxxx:#xxxxxx; =xx=xx=xxxxxxxx-xxx:x; =xx=xx} =xx=xx.xxxxxxxxxxxxx xxx{ =xx=xx=xxxxxxx:#xxxxxx; =xx=xx=xxxxxx-xxxxxx:xxxxx; =xx=xx=xxxxxx-xxxx:xxxx; =xx=xx=xxxxxx-xxxxxx:xxx%; =xx=xx=xxxxxx-xxxxx:xxxx; =xx=xx} =xx=xx.xxxxxxxxxxxxx xxx x:xxxx,.xxxxxxxxxxxxx xxx x:xxxxxxx,.xxxxxxxxxxxx= x xxx x .xxxxxxxxxx { =xx=xx=xxxxxxx:#xxxxxx; =xx=xx=xxxxxx-xxxxxx:xxxxxx; =xx=xx=xxxxxx-xxxxxxxxxx:xxxxxxxxx; =xx=xx} =xx=xx.xxxxxxxxxxxxx xxx{ =xx=xx=xxxxxxxxx:xxxxxx; =xx=xx} =xx=xx#xxxxxx{ =xx=xx=xxxxxxxxxxxx-xxxxx:#xxxxxx; =xx=xx=xxxxxxxx:x; =xx=xx} =xx=xx#xxxxxx xxx{ =xx=xx=xxxxxx-xxxxx:xxxxxx; =xx=xx} =xx=xx#xxxxxxx{ =xx=xx=xxxxxxxxxxxx-xxxxx:#xxxxxx; =xx=xx=xxxxxxxx:x; =xx=xx} =xx=xx#xxxxxxx xxx{ =xx=xx=xxxxxx-xxxxx:xxxxxx; =xx=xx} =xx=xx#xxxxxxxxxxxxx xxx{ =xx=xx=xxxxx-xxxxx:xxxxx; =xx=xx} =xx=xx.xxxxxxxxxxxxx x{ =xx=xx=xxxxxxx:#xxxxxx; =xx=xx=xxxxxx-xxxxxxxxxx:xxxx; =xx=xx} </xxxxx></xxxx> <xxxx xxxxxxxxxx=xx"x" xxxxxxxxxxx=xx"x" xxxxxxxxx=xx"x" xxxxxxxxxxxx= =xx"x" xxxxxx=xx"x" xxxxx=xx"-xxxxxx-xxxx-xxxx-xxxxxx: xxxx;xxxxxx: x;xxxx= xxx: x;xxxxxxxxxx-xxxxx: #xxxxxx;xxxxx: xxx% !xxxxxxxxx;"> =xx<xxxxxx> =xx<xxxxx xxxxxx=xx"x" xxxxxxxxxxx=xx"x" xxxxxxxxxxx=xx"x" xxxxxx= =xx"xxx%" xxxxx=xx"xxx%" xx=xx"xxxxxxxxxxxxxxx" xxxxx=xx"xxxxxx: x;xxxxxxx= : x;xxxxxxxxxx-xxxxx: #xxxxxx;xxxxxx: xxx% !xxxxxxxxx;xxxxx: xxx% !xxxxxxx= xx;"> =xx<xx> =xx<xx xxxxx=xx"xxxxxx" xxxxxx=xx"xxx" xxxxx=xx"xxxxxx-xxx= xxxxx: xxxxxxxx;">  <xxxxx xxxxxx=xx"x" xxxxxxxxxxx=xx"xx" xxxxxxxxxxx= =xx"x" xxxxx=xx"xxx" xx=xx"xxxxxxxxxxxxxxxxx" xxxxx=xx"xxxxxxxxxx-xxxxx: #= xxxxxx;"> <xx> <xx xxxxxx=xx"xxx" xxxxx=xx"xxxxxxxxxxxxxx= xx" xxxxx=xx"xxxxxx-xxxxxxxx: xxxxxxxx;"> =xx <xxxxx xxxxxx=xx"x" xxxxxxxxxxx=xx"xx"= xxxxxxxxxxx=xx"x" xxxxx=xx"xxx%"> =xx<xx> =xx<xx xxxxxx=xx"xxx" xxxxx=xx"xxx= xxx-xxxxxxxx: xxxxxxxx;"> =xx<xxx xxxxx=xx"xxxxx: #xxxxx= x;xxxx-xxxxxx: xxxxx;xxxx-xxxx: xxxx;xxxx-xxxxxx: xxx%;xxxx-xxxxx: xxxx;">= </xxx> </xx>  =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx<xx xxxxxx=xx"xxx" xxxxx=xx"xxx" xxxxx=xx= "xxxxxx-xxxxxxxx: xxxxxxxx;"> =xx<xxx xxxxx=xx"xxxxx: #xxxxx= x;xxxx-xxxxxx: xxxxx;xxxx-xxxx: xxxx;xxxx-xxxxxx: xxx%;xxxx-xxxxx: xxxx;">= </xxx> </xx> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx </xx> </xxxxx> =xx </xx> </xx> </xxxxx>  =xx<xxxxx xxxxxx=xx"x" xxxxxxxxxxx=xx"x" xxxxxxxxxxx= =xx"x" xxxxx=xx"xxx" xx=xx"xxxxxxxxxxxxxxxxx" xxxxx=xx"xxxxxx: xxx xxxxx #= xxxxxx;xxxxxxxxxx-xxxxx: #xxxxxx;"> =xx<xx> =xx<xx xxxxx=xx"xxxxxx" xxxxxx=xx"xxx" xxxxx= =xx"xxxxxx-xxxxxxxx: xxxxxxxx;">  =xx<xxxxx xxxxxx=xx"x" xxxxxxxxxxx=xx"x" x= xxxxxxxxxx=xx"x" xxxxx=xx"xxx" xx=xx"xxxxxxxxxxxxxx" xxxxx=xx"xxxxxxxxxx-x= xxxx: #xxxxxx;xxxxxx-xxxxxx: x;"> <xx> <xx xxxxx=xx"xxxxxxxxxxxxx" xx= xxx=xx"xxxxxx-xxxxxxxx: xxxxxxxx;xxxxx: #xxxxxx;xxxx-xxxxxx: xxxxx;xxxx-xx= xx: xxxx;xxxx-xxxxxx: xxxx;xxxx-xxxxxx: xxx%;xxxxxxx: x;xxxx-xxxxx: xxxxxx= ;xxxxxxxx-xxxxx: xxxxxx;"> =xx =xx<xxx xxxxx=xx"xxxx" xxxxxx= =xx"xxx" xxx=xx"xxxx://xxxxxxx.xxxxxxxxx.xxx/xxxxxxxxxxxxxxxxxxxxxxxxx/xxx= xxx/xxxxxxxxxxxxxxxxx.xxx" xxxxx=xx"xxxxx: xxxxx;xxxxxx: xxxxx;xxxxxx: x;x= xxx-xxxxxx: xxx%;xxxxxxx: xxxx;xxxx-xxxxxxxxxx: xxxx;" xxxxx=xx"xxx"><xx> =xx </xx> </xx> </xxxxx>  </xx> </xx> =xx<xx> =xx<xx xxxxx=xx"xxxxxx" xxxxxx=xx"xxx" xxxxx= =xx"xxxxxx-xxxxxxxx: xxxxxxxx;">  =xx<xxxxx xxxxxx=xx"x" xxxxxxxxxxx=xx"x" x= xxxxxxxxxx=xx"x" xxxxx=xx"xxx" xx=xx"xxxxxxxxxxxx"> =xx<xx> =xx<xx xxxxxxx=xx"x" xxxxxx=xx"xxx= " xxxxx=xx"xxxxxxxxxxx" xxxxx=xx"xxxxxx-xxxxxxxx: xxxxxxxx;xxxxxxxxxx-xxxx= x: #xxxxxx;">  <xxxxx xxxxxx=xx"x" xxxxxx= xxxxx=xx"xx" xxxxxxxxxxx=xx"x" xxxxx=xx"xxx%"> <xx> <xx xxxxxx=xx"xxx"= xxxxx=xx"xxxxxx-xxxxxxxx: xxxxxxxx;"> <xxx xxxxx=xx"= xxxxx: #xxxxxx;xxxx-xxxxxx: xxxxx;xxxx-xxxx: xxxx;xxxx-xxxxxx: xxx%;xxxx-x= xxxx: xxxx;"><xxx xxxxx=xx"xxxx-xxxxx: xxxxxx;xxxxx: #xxxxxx;xxxx-xxxxxx:= xxxxx;xxxx-xxxx: xxxx;xxxx-xxxxxx: xxx%;"> =xx<xx> =xx<xxxx xxxxx=xx"xxxx-xxxxxx:xxxxx xxx xxxxx,xxxxx,xxxxx;"><xxxx xxxxx=xx= "xxxxx:#xxxxxx;"><xxxx xxxxx=xx"xxxx-xxxx:xxxx;">xxxxxxxxx x xxxxxxxxx xxx= xxxxxxxxxx<xx> =xx<xx> =xx<xxxx xxxxx=xx"xxxx-xxxx:xxxx;"><xxxx xxxxx=xx"xxxx-xxxx:xxxx;">xxxxx x= xxxx - xxxxx xxx- xxxxxx!<xx> =xxxxxx xxx xxxxxxxxxxxx xxx xxxxxxxx x&xxxx;x xxxxxxxxx:</xxxx><xx> =xx<xx> =xx<x xxxx=xx"xxxx://xxxxxxxx.xxx.xxxx-xxxxxxx.xxx/xxxxx/xxxxx?x=xxxxxxxxx= xxxxxxxxxxxxxxxxxx&xx=xxxxxxxxxxxx&x=xxxxxxxxxxxx" xxxxxx=xx"xxxxxx" xxxx= x=xx"xxxxx: #xxxxxx;xxxx-xxxxxx: xxxxxx;xxxx-xxxxxxxxxx: xxxxxxxxx;"><xxx= xxxxx=xx"xxxx" xxxxxx=xx"xxx" xxx=xx"xxxx://xxxxxxx.xxxxxxxxx.xxx/xxxxxxx= xxxxxxxxxxxxxxxxxx/xxxxxx/xxxxxxxxxxx.xxx" xxxxx=xx"xxxxx: xxxxx;xxxxxx: x= xxxx;xxxxxx: x;xxxx-xxxxxx: xxx%;xxxxxxx: xxxx;xxxx-xxxxxxxxxx: xxxx;xxxxx= xx: xxxxxx;" xxxxx=xx"xxx"></x><xx> =xx<xx> =xx<xxxx xxxxx=xx"xxxx-xxxx:xxxx;"><xxxx xxxxx=xx"xxxx-xxxx:xxxx;">xxxxxxx= xxxx</xxxx></xxxx><xx> =xx<xx> =xxxxxxxx xxxxxxxx x&xxxx;x xxxx xxxxx xxxxxx xx x xxx<xx> =xxxxxx xxxxxxxxx xxx xxxxxxxxxxxxx<xx> =xxxxxxxxxxxxxxxxx: xxxxxxxxxxx xxxx x,x xxx xxxxx xxx xxxxxxxxxxx xxxxxxx= x</xxxx><xx> =xx<xxxx xxxxx=xx"xxxx-xxxx:xxxx;">xxxxxxxxxxxxxxxxx xxxxx <x xxxx=xx"xxxx= ://xxxxxxxx.xxx.xxxx-xxxxxx.xxx/xxxxx/xxxxx?x=xxxxxxxxxxxxxxxxxxxxxxxxxxx&= xx=xxxxxxxxxxxx&x=xxxxxxxxxxxx" xxxxxx=xx"xxxxxx" xxxxx=xx"xxxxx: #xxxxxx= ;xxxx-xxxxxx: xxxxxx;xxxx-xxxxxxxxxx: xxxxxxxxx;">xxx.xxxxxxxxxx.xx</x></x= xxx><xx> =xx<xx> =xx<x xxxx=xx"xxxx://xxxxxxxx.xxx.xxxx-xxxxxxx.xxx/xxxxx/xxxxx?x=xxxxxxxxx= xxxxxxxxxxxxxxxxxx&xx=xxxxxxxxxxxx&x=xxxxxxxxxxxx" xxxxxx=xx"xxxxxx" xxxx= x=xx"xxxxx: #xxxxxx;xxxx-xxxxxx: xxxxxx;xxxx-xxxxxxxxxx: xxxxxxxxx;"><xxx= xxxxx=xx"xxxx" xxxxxx=xx"xxx" xxx=xx"xxxx://xxxxxxx.xxxxxxxxx.xxx/xxxxxxx= xxxxxxxxxxxxxxxxxx/xxxxxx/xxxxxxxx.xxx" xxxxx=xx"xxxxx: xxxxx;xxxxxx: xxxx= x;xxxxxx: x;xxxx-xxxxxx: xxx%;xxxxxxx: xxxx;xxxx-xxxxxxxxxx: xxxx;xxxxxxx:= xxxxxx;" xxxxx=xx"xxx"></x><xx> =xx<xx> =xxxxxxxxxxxx<xx> =xx<xx> =xx<xxxx xxxxx=xx"xxxx-xxxx:xxxx;"><xxxx xxxxx=xx"xxx"><x>xxxxxxxx xxxxxx= xxx xxxxxxxxxx-xxxx xx xxxxxxxxxxxxxx xxx xxxxxxx xxxxxxxxx<xx> =xxxxx xxxx xxx xxxx xxxx! xx xxx xxxxx xxxxxxxxxxxxxx xx xxxxx xxx xxxxx= xxxx xx xxxxx&xxxxx;xx,<xx> =xxxxxxx xxx xxxxxx xxxxxxxx x&xxxx;x xxxx xxxxxxxxxxx!</x></xxxx><xx> =xx<xx> =xx<x><xxxx xxxxx=xx"xxx">xxxxxx xxx xx xx xxx</xxxx><xx> =xx<xxxx xxxxx=xx"xxx">xxx xx xxx xx xxx xxxxxxx xxxxx xxxx xxxxx xxxxxx x= xxxxxx-xxxx</xxxx><xx> =xx<xxxx xxxxx=xx"xxx">xxx xx xxx xx xxx xxxxxxxx xx xxxx xxxxxx xxxxxxxxx= xx &xxxx; x,xx</xxxx><xx> =xx<xxxx xxxxx=xx"xxx">xx xx xxx xxxxx xxx xxxx xxx x&xxxx;x xxxx</xxxx><x= x> =xx<xx> =xx<xxxx xxxxx=xx"xxx">xxxxxxx-xxxxx:</xxxx><xx> =xx<xxxx xxxxx=xx"xxx">xx. xxxxx &xxxx; xx,-</xxxx><xx> =xx<xxxx xxxxx=xx"xxx">xx. xxxx &xxxx; xx,-</xxxx><xx> =xx<xxxx xxxxx=xx"xxx">xx. xxxxxxxxxx &xxxx; xx,-</xxxx></x></xxxx><xx> =xx<xx> =xx<xxxx xxxxx=xx"xxxx-xxxx:xxxx;">x&xxxx;x xxxx xxxxx xxxxxx xxxx xx x&xx= xx;xxxxxxx xxxxxxxxx xxxxxxx xx xxxxx</xxxx></xxxx></xxxx></xxxx><xx> =xx<xx> =xx<xx> =xx<xxxx xxxxx=xx"xxxxx-xxxxx-xxxx" xxxxx=xx"#xxxxxx" xxxx=xx"xxxxx, xxxx-= xxxxx">&xxxx; &xxxx; &xxxx; &xxxx; &xxxx;&xxxx;</xxxx> =xx<xxxxx xxxxxx=xx"x" xxxxxxxxxxx=xx"x" xxxxx=xx"xxxxxxxxxxxxxx" xxxxx=xx= "xxxxx: xxx.xxxx; xxxxxxxxxx-xxxxx: xxxxxxx; xxxxxxxxxx-xxxxxxxxxx: xxxxxx= x; xxxxxxxxxx-xxxxxx: xxxxxxx; xxxxxxxxxx-xxxx: xxxxxxx; xxxxxxxxxx-xxxxx:= xxxxx; xxxxx: xxx(x, x, x); xxxx-xxxxxx: xxxxx; xxxx-xxxxxx: xxxxxx; -xxx= xxx-xxxx-xxxx-xxxxxx: xxxx; xxxx-xxxx: xxxxxx; " xxxxx=xx"xxx"> =xx=xx<xxxxx> =xx=xx=xx<xx> =xx=xx=xx=xx<xx xxxxxxx=xx"#xxxxxx" xxxxx=xx"xxxxx: x.xxxx;xxxxxxxxxx-xxxx= x: xxxxxxx;xxxxxxxxxx-xxxxxxxxxx: xxxxxxx;xxxxxxxxxx-xxxxxx: xxxxxxx;xxxxx= xxxxx-xxxx: xxxxxxx;xxxxxxxxxx-xxxxx: xxx(xxx, xxx, xx);xxxxxxx-xxx: x.xxx= x;xxxxxxx-xxxxx: x.xxxx;xxxxxxx-xxxxxx: x.xxxx;xxxxxxx-xxxx: x.xxxx;xxxxxx= xxxx-xxxxxxxx: xxxxxxx xxxxxxx;xxxxxxxxxx-xxxxxx: xxxxxxx xxxxxxx;xxxxxx-x= xxxxxxx: xxxxxxxx;" xxxxx=xx"x"> =xx=xx=xx=xx=xx<x xxxxx=xx"xxxxxxxxx" xxxxx=xx"xxxxxx-xxx: xxx; xxxxxx-xxx= xx: xxx; xxxxxx-xxxx: xxx; xxxxxx-xxxxxx: x.xxxxxx; xxxx-xxxx: xxxx; xxxx-= xxxxxx: 'xxxxx xxx xxxxx', xxxxx; xxxx-xxxxx: xxxxxxx; "> =xx=xx=xx=xx=xx=xx<xxxx xxxxx=xx"xxxx-xxxx: x.xxx; xxxx-xxxxxx: xxxxx, xxx= x-xxxxx; xxxxx: xxxxx; ">&xxxx;</xxxx></x> =xx=xx=xx=xx</xx> =xx=xx=xx=xx<xx xxxxx=xx"xxxxx: xxxxx;xxxxxxx-xxx: x.xxxx;xxxxxxx-xxxxx: x= =xxxxxx;xxxxxxx-xxxxxx: x.xxxx;xxxxxxx-xxxx: x.xxxx;xxxxxx-xxxxxxxx: xxxxxxx= x;" xxxxx=xx"xxx"> =xx=xx=xx=xx=xx<x> =xx=xx=xx=xx=xx=xx<xxxx xxxxx=xx"xxxx-xxxx: x.xxx; xxxx-xxxxxx: xxxxx, xxx= x-xxxxx; xxxxx: xxxxx; "><xxx xxxxxx=xx"xxx" xxx=xx"xxxx://xxx.xxxxxxxxx.x= x/xxxxxxxxxx/xxx/xxxxxxxxxxxx.xxx" xxxxx=xx"xxxxx: xxxx;xxxxxx: x;xxxxxx:= xxxx;xxxx-xxxxxx: xxx%;xxxxxxx: xxxx;xxxx-xxxxxxxxxx: xxxx;xxxxxxx: xxxxx= x;" xxxxx=xx"xxx"></xxxx></x> =xx=xx=xx=xx</xx> =xx=xx=xx</xx> =xx=xx=xx<xx> =xx=xx=xx=xx<xx xxxxx=xx"xxxxxxxxxx-xxxxx: xxxxxxx;xxxxxxxxxx-xxxxxxxxxx:= xxxxxxx;xxxxxxxxxx-xxxxxx: xxxxxxx;xxxxxxxxxx-xxxx: xxxxxxx;xxxxxxxxxx-xx= xxx: xxx(xxx, xxx, xx);xxxxxxx-xxx: x.xxxx;xxxxxxx-xxxxx: x.xxxx;xxxxxxx-x= xxxxx: x.xxxx;xxxxxxx-xxxx: x.xxxx;xxxxxxxxxx-xxxxxxxx: xxxxxxx xxxxxxx;xx= xxxxxxxx-xxxxxx: xxxxxxx xxxxxxx;xxxxxx-xxxxxxxx: xxxxxxxx;"> =xx=xx=xx=xx=xx<x xxxxx=xx"xxxxxxxxx" xxxxx=xx"xxxxxx-xxx: xxx; xxxxxx-xxx= xx: xxx; xxxxxx-xxxx: xxx; xxxxxx-xxxxxx: x.xxxxxx; xxxx-xxxx: xxxx; xxxx-= xxxxxx: 'xxxxx xxx xxxxx', xxxxx; xxxx-xxxxx: xxxxxxx; "> =xx=xx=xx=xx=xx=xx<xxxx xxxxx=xx"xxxx-xxxx: x.xxx; xxxx-xxxxxx: xxxxx, xxx= x-xxxxx; xxxxx: xxxxx; ">&xxxx;</xxxx></x> =xx=xx=xx=xx</xx> =xx=xx=xx=xx<xx xxxxx=xx"xxxxxxx-xxx: x.xxxx;xxxxxxx-xxxxx: x.xxxx;xxxxxxx= -xxxxxx: x.xxxx;xxxxxxx-xxxx: x.xxxx;xxxxxx-xxxxxxxx: xxxxxxxx;"> =xx=xx=xx=xx=xx<xxx xxxxx=xx"xxxxxx" xxxxx=xx"xxxxx: #xxxxxx;xxxx-xxxxxx:= xxxxx;xxxx-xxxx: xxxx;xxxx-xxxxxx: xxx%;xxxx-xxxxx: xxxx;"> =xx=xx=xx=xx=xx=xx<xxxxx xxxxxx=xx"x" xxxxxxxxxxx=xx"x" xxxxx=xx"xxxxxxxxx= xxxxx" xxxxx=xx"xxxxx: xxxxx; " xxxxx=xx"xx%"> =xx=xx=xx=xx=xx=xx=xx<xxxxx> =xx=xx=xx=xx=xx=xx=xx=xx<xx xxxxx=xx"xxxxxx: x.xxx; "> =xx=xx=xx=xx=xx=xx=xx=xx=xx<xx xxxxx=xx"xxxxxxxxxx-xxxxx: xxxxxxx;xxxxxxxx= xx-xxxxxxxxxx: xxxxxxx;xxxxxxxxxx-xxxxxx: xxxxxxx;xxxxxxxxxx-xxxx: xxxxxxx= ;xxxxxxxxxx-xxxxx: xxxxx;xxxxxxx-xxx: x.xxxx;xxxxxxx-xxxxx: x.xxxx;xxxxxxx= -xxxxxx: x.xxxx;xxxxxxx-xxxx: x.xxxx;xxxxxx: x.xxx;xxxxxxxxxx-xxxxxxxx: xx= xxxxx xxxxxxx;xxxxxxxxxx-xxxxxx: xxxxxxx xxxxxxx;xxxxxx-xxxxxxxx: xxxxxxxx= ;"> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx<xxx xxxxx=xx"xxxxxx" xxxxx=xx"xxxxxxxxx" xx= xxx=xx"xxxxxx-xxx: xxx;xxxxxx-xxxxx: xxx;xxxxxx-xxxx: xxx;xxxxxx-xxxxxx: x= =xxxxxxxx;xxxx-xxxx: xxxx;xxxx-xxxxxx: 'xxxxx xxx xxxxx', xxxxx;xxxx-xxxxx:= xxxxxx;xxxxx: #xxxxxx;xxxx-xxxxxx: xxx%;"> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx<xx xxxxx=xx"xxxxxx" xxxxxxx=xx"xxxxxxx"= xxxx=xx"x" xxxxx=xx"xxxxx: xxx(xxx, xxx, xxx); " xxxxx=xx"xx%"> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx</xxx> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx<x xxxxx=xx"xxxxxx" xxxxx=xx"xxxxxxxxx" xxxx= x=xx"xxxxxx-xxx: xxx; xxxxxx-xxxxx: xxx; xxxxxx-xxxx: xxx; xxxxxx-xxxxxx:= x.xxxxxx; xxxx-xxxx: xxxx; xxxx-xxxxxx: 'xxxxx xxx xxxxx', xxxxx; xxxx-xx= xxx: xxxxxx; "> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx<xxxx xxxxx=xx"xxxxxx" xxxxx=xx"xxxx-xxxx= xx: xxxxx, xxxx-xxxxx; "><xxxx xxxxx=xx"xxxx-xxxx: xxx; xxxxx: xxxxx; "><x= xxxxx=xx"xxxxx: #xxxxxx;xxxx-xxxxxx: xxxxxx;xxxx-xxxxxxxxxx: xxxxxxxxx;">= <xxxx xxxxx=xx"xxxx-xxxxxx: xxxxx, xxxx-xxxxx; "><xxxxxx>xxxxxxxxxxxxxxxxx= xx</xxxxxx></xxxx></x><xxxxxx>&xxxx;-&xxxx;<x xxxxx=xx"xxxxx: #xxxxxx;xxxx= -xxxxxx: xxxxxx;xxxx-xxxxxxxxxx: xxxxxxxxx;">xxxxxxxxxx</x>&xxxx;-&xxxx;<x= xxxxx=xx"xxxxx: #xxxxxx;xxxx-xxxxxx: xxxxxx;xxxx-xxxxxxxxxx: xxxxxxxxx;">= xxxxx</x>&xxxx;||&xxxx;<x xxxx=xx"xxxx://xxxxxxxx.xxx.xxxx-xxxxxxx.xxx/xxx= xx/xxxxx?x=xxxxxxxxxxxxxxxxxxxxxxxxxxx&xx=xxxxxxxxxxxx&x=xxxxxxxxxxxx" xx= xxxx=xx"xxxxxx" xxxxx=xx"xxxxx: #xxxxxx;xxxx-xxxxxx: xxxxxx;xxxx-xxxxxxxxx= x: xxxxxxxxx;">xxxxxxxxx</x></xxxxxx></xxxx></xxxx></x> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx<xxx xxxxx=xx"xxxxxx" xxxxx=xx"xxxxxxxxx" xx= xxx=xx"xxxxxx-xxx: xxx;xxxxxx-xxxxx: xxx;xxxxxx-xxxx: xxx;xxxxxx-xxxxxx: x= =xxxxxxxx;xxxx-xxxx: xxxx;xxxx-xxxxxx: 'xxxxx xxx xxxxx', xxxxx;xxxx-xxxxx:= xxxxxx;xxxxx: #xxxxxx;xxxx-xxxxxx: xxx%;"> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx<xx xxxxx=xx"xxxxxx" xxxxxxx=xx"xxxxxxx"= xxxx=xx"x" xxxxx=xx"xxxxx: xxx(xxx, xxx, xxx); " xxxxx=xx"xx%"> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx</xxx> =xx=xx=xx=xx=xx=xx=xx=xx=xx</xx> =xx=xx=xx=xx=xx=xx=xx=xx</xx> =xx=xx=xx=xx=xx=xx=xx</xxxxx> =xx=xx=xx=xx=xx=xx</xxxxx> =xx=xx=xx=xx=xx</xxx> =xx=xx=xx=xx=xx<x xxxxx=xx"xxxxxxxxx" xxxxx=xx"xxxxxx-xxx: xxx; xxxxxx-xxx= xx: xxx; xxxxxx-xxxx: xxx; xxxxxx-xxxxxx: x.xxxxxx; xxxx-xxxx: xxxx; xxxx-= xxxxxx: 'xxxxx xxx xxxxx', xxxxx; xxxx-xxxxx: xxxxxxx; "> =xx=xx=xx=xx=xx=xx&xxxx;</x> =xx=xx=xx=xx=xx<xxxxx xxxxxx=xx"x" xxxxxxxxxxx=xx"x" xxxxx=xx"xxxxxxxxxxxx= xx" xxxxx=xx"xxxxx: xxxxx; " xxxxx=xx"xx%"> =xx=xx=xx=xx=xx=xx<xxxxx> =xx=xx=xx=xx=xx=xx=xx<xx> =xx=xx=xx=xx=xx=xx=xx=xx<xx xxxxx=xx"xxxxxxx-xxx: x.xxxx;xxxxxxx-xxxxx: x.= xxxx;xxxxxxx-xxxxxx: x.xxxx;xxxxxxx-xxxx: x.xxxx;xxxxxx-xxxxxxxx: xxxxxxxx= ;"> =xx=xx=xx=xx=xx=xx=xx=xx=xx<x xxxxx=xx"xxxxxx" xxxxx=xx"xxxxxx" xxxxx=xx"x= xxxxx-xxxxx: xxx; xxxxxx-xxxx: xxx; xxxx-xxxx: xxxx; xxxx-xxxxxx: 'xxxxx x= xx xxxxx', xxxxx; xxxx-xxxxxx: xxxx; xxxx-xxxxx: xxxxxx; "> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx<xxxx xxxxx=xx"xxxx-xxxxxx: xxxxx, xxxx-xxxx= x; xxxxx: xxxxx; ">xxx xxxxx xxx xxxxxxxx xx xxxxxx xxxxxxxxx</xxxx></x> =xx=xx=xx=xx=xx=xx=xx=xx=xx<x xxxxx=xx"xxxxxx" xxxxx=xx"xxxxx" xxxxx=xx"xx= xx-xxxxxx: xxxxxxx, xxxxx, xxxxxxxxx, xxxx-xxxxx; xxxx-xxxx: xxxx; xxxx-xx= xxx: xxxxxx; "> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xxxxx xxxxxxxxxxx xxx xx&xxxx;&xxxxx;xx&xxxx;<= xxxxxx>xxxxxxxxxxxxxxxxx</xxxxxx>&xxxx;xxx xxxxx xxx xxx&xxxx;xx! xxx xxxx= xxxx xxx xxxxxx xxxx xx&xxxx;xxxxxxxx xxx xxxxxxxxx xxx&xxxx;<xxxxxx>xxxxx= xxx xxxxxx</xxxxxx>&xxxx;xx xxxx&xxxx;xxx&xxxx;<xxxxxx>xxxxxx xxxxxxxxx</= xxxxxx>.</x> =xx=xx=xx=xx=xx=xx=xx=xx</xx> =xx=xx=xx=xx=xx=xx=xx</xx> =xx=xx=xx=xx=xx=xx</xxxxx> =xx=xx=xx=xx=xx</xxxxx> =xx=xx=xx=xx=xx<xxx xxxxx=xx"xxxxxx" xxxxx=xx"xxxxxxxxx" xxxxx=xx"xxxxxx-x= xx: xxx;xxxxxx-xxxxx: xxx;xxxxxx-xxxx: xxx;xxxxxx-xxxxxx: x.xxxxxx;xxxx-xx= xx: xxxx;xxxx-xxxxxx: 'xxxxx xxx xxxxx', xxxxx;xxxx-xxxxx: xxxxxx;xxxxx: #= xxxxxx;xxxx-xxxxxx: xxx%;"> =xx=xx=xx=xx=xx=xx<xx xxxxx=xx"xxxxxx" xxxxxxx=xx"xxxxxxx" xxxx=xx"x" xxxx= x=xx"xxxxx: xxx(xxx, xxx, xxx); " xxxxx=xx"xx%"> =xx=xx=xx=xx=xx</xxx> =xx=xx=xx=xx=xx<xxxxx xxxxxx=xx"x" xxxxxxxxxxx=xx"x" xxxxx=xx"xxxxxxxxxxxx= xx" xxxxx=xx"xxxxx: xxxxx; " xxxxx=xx"xxx%"> =xx=xx=xx=xx=xx=xx<xxxxx> =xx=xx=xx=xx=xx=xx=xx<xx xxxxx=xx"xxxxxx: xx.xxx; "> =xx=xx=xx=xx=xx=xx=xx=xx<xx xxxxx=xx"xxxxxxx-xxx: x.xxxx;xxxxxxx-xxxxx: x.= xxxx;xxxxxxx-xxxxxx: x.xxxx;xxxxxxx-xxxx: x.xxxx;xxxxxx: xx.xxx;xxxxxx-xxx= xxxxx: xxxxxxxx;"> =xx=xx=xx=xx=xx=xx=xx=xx=xx<x xxxxx=xx"xxxxxxxxx" xxxxx=xx"xxxxxx-xxx: xxx= ; xxxxxx-xxxxx: xxx; xxxxxx-xxxx: xxx; xxxxxx-xxxxxx: x.xxxxxx; xxxx-xxxx:= xxxx; xxxx-xxxxxx: 'xxxxx xxx xxxxx', xxxxx; xxxx-xxxxx: xxxxxxx; "> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx<xxxx xxxxx=xx"xxxx-xxxx: x.xxx; xxxx-xxxxxx= : xxxxx, xxxx-xxxxx; xxxxx: xxxxx; "><xxxx xxxxx=xx"xxxxxxxxx" xxxxx=xx"xx= xx-xxxxx: xxxxxxx; "><xxx xxxxxx=xx"x" xxxxxx=xx"xxx" xx=xx"xxxxxxxxxxxx"= xxxx=xx"xxxxxxxxxxxx" xxx=xx"xxxx://xxx.xxxxxxxxx.xx/xxxxxxxxxx/xxx/xxxxx= xxxxxx.xxx" xxxxx=xx"xxx" xxxxx=xx"xxxxxx: x;xxxxxx: xxxx;xxxx-xxxxxx: xxx= %;xxxxxxx: xxxx;xxxx-xxxxxxxxxx: xxxx;xxxxxxx: xxxxxx;"></xxxx></xxxx></x> =xx=xx=xx=xx=xx=xx=xx=xx=xx<xxx xxxxx=xx"xxxxxx" xxxxx=xx"xxxxxxxxx" xxxxx= =xx"xxxxxx-xxx: xxx;xxxxxx-xxxxx: xxx;xxxxxx-xxxx: xxx;xxxxxx-xxxxxx: x.xx= xxxx;xxxx-xxxx: xxxx;xxxx-xxxxxx: 'xxxxx xxx xxxxx', xxxxx;xxxx-xxxxx: xxx= xxx;xxxxx: #xxxxxx;xxxx-xxxxxx: xxx%;"> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx<xx xxxxx=xx"xxxxxx" xxxxxxx=xx"xxxxxxx" xxx= x=xx"x" xxxxx=xx"xxxxx: xxx(xxx, xxx, xxx); " xxxxx=xx"xx%"> =xx=xx=xx=xx=xx=xx=xx=xx=xx</xxx> =xx=xx=xx=xx=xx=xx=xx=xx</xx> =xx=xx=xx=xx=xx=xx=xx</xx> =xx=xx=xx=xx=xx=xx=xx<xx xxxxx=xx"xxxxxx: xxx.xxxx; "> =xx=xx=xx=xx=xx=xx=xx=xx<xx xxxxx=xx"xxxxxxx-xxx: x.xxxx;xxxxxxx-xxxxx: x.= xxxx;xxxxxxx-xxxxxx: x.xxxx;xxxxxxx-xxxx: x.xxxx;xxxxxx: xxxx;xxxxxx-xxxxx= xxx: xxxxxxxx;"> =xx=xx=xx=xx=xx=xx=xx=xx=xx<x xxxxx=xx"xxxxxxx" xxxxx=xx"xxxxx" xxxxx=xx"x= xxx-xxxxxx: xxxxxxx, xxxxx, xxxxxxxxx, xxxx-xxxxx; xxxx-xxxx: xxxx; "> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xxxxxx xxxxxx xxxxxxxxxxxx xxx xxxxxxxxx xxx x= x&xxxx;&xxxxx;xx xxx xxxxxxxxxxx xxxxxxxxx-xxxxxxxx xxxxx. xxx xxxxxx xxxx= xxxxx xxxx xx xx. xxxxxxxx xxxx xxxxxxxxxx xxx xx&xxxx;&xxxxx;xxx xxxxxxxx= xx xxx xxxxxx xxxx: xxx xxxxxxxx xxxxxx&xxxx;xx xx xxx xxxxx xxxxxx xxxxxx= xxx xxxxxxxx xxxxxxxx xx xxx xxxx xxxxxxxx xxxxxxxxxx xx xxxxxx.</x> =xx=xx=xx=xx=xx=xx=xx=xx=xx<x xxxxx=xx"xxxxxxx" xxxxx=xx"xxxxx" xxxxx=xx"x= xxx-xxxxxx: xxxxxxx, xxxxx, xxxxxxxxx, xxxx-xxxxx; xxxx-xxxx: xxxx; "> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xxxx xxx xx xxx xxxxxxx xxxxxx xxxx xxx xxxxxx= xxx xxx xxxxxx&xxxx;xxxxx x&xxxx;xxx &xxxx;xxx xxxx xx&xxxxx;x xxxxxxxxxxx= xxxxx xxx xx xxxxxx xxxxxxxxx x&xxxx;x xxxx xxxxxxxxxxxxxx xxxxx xxx x&xxx= x;xxxx xxxxxx.</x> =xx=xx=xx=xx=xx=xx=xx=xx=xx<x xxxxx=xx"xxxxxxx" xxxxx=xx"xxxxx" xxxxx=xx"x= xxx-xxxxxx: xxxxxxx, xxxxx, xxxxxxxxx, xxxx-xxxxx; xxxx-xxxx: xxxx; "> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xxxx&xxxx;<xxxxxx>xxxxxxxxx</xxxxxx>&xxxx;xxxx= xx&xxxx;<xxxxxx>xx xxx</xxxxxx>&xxxx;xxx xxxx xxxxx&xxxx;xxxxx. xxx xxxxxx= x xxx x&xxxx;x xxxxxxxxxxxxxx xx&xxxx;&xxxxx;xx xxx: xxxx xxxx, xxxxxxxxx,= xxxx, xxx xxxx xxx. xxx xx xxxxxxx xxxxxxx xxxxxxxx, xxxx xx xxxxx xxx xx= xxxxxx xxxx&xxxx;x xxx xxx xxxxxxxxx xx- xxxxxx xxxxxxx xxx xxxx xxxxxxxxx= x xxx xxx xxxxxxxxxxxxx xxxxx xxx xxxx xxxx xxxxxxxxx.</x> =xx=xx=xx=xx=xx=xx=xx=xx=xx<xxx xxxxx=xx"xxxxxxx" xxxxx=xx"xxxxx: #xxxxxx;= xxxx-xxxxxx: xxxxx;xxxx-xxxx: xxxx;xxxx-xxxxxx: xxx%;xxxx-xxxxx: xxxx;"> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx<xxxx xxxxx=xx"xxxxx" xxxxx=xx"xxxx-xxxxxx:= xxxxxxx, xxxxx, xxxxxxxxx, xxxx-xxxxx; xxxx-xxxx: xxxx; ">xxx&xxxx;<xxxxx= x>xxxxx xxxxx</xxxxxx>&xxxx;xxxx xxxx xxxxxx xxxx xxxxxx&xxxx;<xxxxxx>xx x= xx</xxxxxx>&xxxx;xxxxxxxxx. xxx xxxxxxxxxx xx xxxxxxxx xxxxxxx xx xxxx xxx= xxx xxxxxxx xx xxxxxxxxxxxxx xxxxxxxxxxxx xxx xxxx xxxx xxx xxxxx xxxxxxxx= xxxxxxx xxx xxxx xxxx xxxxxx xxxx&xxxx;xxxx.</xxxx></xxx> =xx=xx=xx=xx=xx=xx=xx=xx</xx> =xx=xx=xx=xx=xx=xx=xx</xx> =xx=xx=xx=xx=xx=xx=xx<xx xxxxx=xx"xxxxxx: xxx.xxx; "> =xx=xx=xx=xx=xx=xx=xx=xx<xx xxxxxx=xx"xxx" xxxxx=xx"xxxxxxx-xxx: x.xxxx;xx= xxxxx-xxxxx: x.xxxx;xxxxxxx-xxxxxx: x.xxxx;xxxxxxx-xxxx: x.xxxx;xxxxxx: xx= x.xxx;xxxxxx-xxxxxxxx: xxxxxxxx;"> =xx=xx=xx=xx=xx=xx=xx=xx=xx<x xxxxx=xx"xxxxxxxxx" xxxxx=xx"xxxxxx-xxx: xxx= ; xxxxxx-xxxxx: xxx; xxxxxx-xxxx: xxx; xxxxxx-xxxxxx: x.xxxxxx; xxxx-xxxx:= xxxx; xxxx-xxxxxx: 'xxxxx xxx xxxxx', xxxxx; xxxx-xxxxx: xxxxxxx; "> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx<xxx xxxxxx=xx"xxx" xxx=xx"xxxx://xxx.xxxxxx= xxx.xx/xxxxxxxxxx/xxx/xxxxxxxxxxxx.xxx" xxxxx=xx"xxx" xxxxx=xx"xxxxxx: x;x= xxxxx: xxxx;xxxx-xxxxxx: xxx%;xxxxxxx: xxxx;xxxx-xxxxxxxxxx: xxxx;xxxxxxx:= xxxxxx;"></x> =xx=xx=xx=xx=xx=xx=xx=xx</xx> =xx=xx=xx=xx=xx=xx=xx</xx> =xx=xx=xx=xx=xx=xx</xxxxx> =xx=xx=xx=xx=xx</xxxxx> =xx=xx=xx=xx=xx<x xxxxx=xx"xxxxxxxxx" xxxxx=xx"xxxxxx-xxx: xxx; xxxxxx-xxx= xx: xxx; xxxxxx-xxxx: xxx; xxxxxx-xxxxxx: x.xxxxxx; xxxx-xxxx: xxxx; xxxx-= xxxxxx: 'xxxxx xxx xxxxx', xxxxx; xxxx-xxxxx: xxxxxxx; "> =xx=xx=xx=xx=xx=xx&xxxx;</x> =xx=xx=xx=xx=xx<xxxxx xxxxxx=xx"x" xxxxxxxxxxx=xx"x" xxxxx=xx"xxxxxxxxxxxx= xx" xxxxx=xx"xxxxx: xxxxx; " xxxxx=xx"xx%"> =xx=xx=xx=xx=xx=xx<xxxxx> =xx=xx=xx=xx=xx=xx=xx<xx> =xx=xx=xx=xx=xx=xx=xx=xx<xx xxxxx=xx"xxxxxxx-xxx: x.xxxx;xxxxxxx-xxxxx: x.= xxxx;xxxxxxx-xxxxxx: x.xxxx;xxxxxxx-xxxx: x.xxxx;xxxxxx-xxxxxxxx: xxxxxxxx= ;"> =xx=xx=xx=xx=xx=xx=xx=xx=xx<x xxxxx=xx"xxxxxxx" xxxxx=xx"xxxx-xxxxx: xxxxx= xx; "> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx<xxxx xxxxx=xx"xxxx-xxxx: x.xxx; xxxx-xxxxxx= : xxxxx, xxxx-xxxxx; xxxxx: xxxxx; "><x xx=xx"xxx" xxxx=xx"xxx" xxxxx=xx"x= xxxx: #xxxxxx;xxxx-xxxxxx: xxxxxx;xxxx-xxxxxxxxxx: xxxxxxxxx;"></x><xxx xx= xxxx=xx"x" xxxxxx=xx"xx" xx=xx"xxxxxxxxxxxx" xxxx=xx"xxxxxxxxxxxx" xxx=xx"= xxxx://xxx.xxxxxxxxx.xx/xxxxxxxxxx/xxx/xxxxxxxxxxxxx.xxx" xxxxx=xx"xxx" xx= xxx=xx"xxxxxx: x;xxxxxx: xxxx;xxxx-xxxxxx: xxx%;xxxxxxx: xxxx;xxxx-xxxxxxx= xxx: xxxx;xxxxxxx: xxxxxx;"></xxxx><xx> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx<xxxx xxxxx=xx"xxxxx" xxxxx=xx"xxxx-xxxxxx:= xxxxxxx, xxxxx, xxxxxxxxx, xxxx-xxxxx; xxxx-xxxx: xxxx; xxxxx: xxxxx; ">x= xxxxxxxxxxxxxxxx (xx xxxx xxxx. xxx&xxxx;xxxx xxxxx&xxxx;xx xxxx&xxxx;xx x= xx xxxxxxxxxx) x&xxxx;x xxx xxxx xxxxxxxx xxxx xx xxxxxx &xxxx;xxx&xxxx;<x= xxxx=xx"xxxx://xxxxxxxx.xxx.xxxx-xxxxxx.xxx/xxxxx/xxxxx?x=xxxxxxxxxxxxxxx= xxxxxxxxxxxx&xx=xxxxxxxxxxxx&x=xxxxxxxxxxxx" xxxxxx=xx"xxxxxx" xxxxx=xx"x= xxxx: #xxxxxx;xxxx-xxxxxx: xxxxxx;xxxx-xxxxxxxxxx: xxxxxxxxx;">xxxxxxxx.xx= x</x>&xxxx;xxx xx xxxxx xxxxxxxx xxx xxxxxxxxx xxx&xxxx;xxxxxx!</xxxx><x x= x=xx"xxxxxx" xxxx=xx"xxxxxx" xxxxx=xx"xxxxx: #xxxxxx;xxxx-xxxxxx: xxxxxx;x= xxx-xxxxxxxxxx: xxxxxxxxx;"></x><xxxx xxxxx=xx"xxxx-xxxx: xxxx; xxxx-xxxxx= x: xxxxx, xxxx-xxxxx; xxxxx: xxxxx; "><xxx xxxxxx=xx"x" xxxxxx=xx"xx" xx= =xx"xxxxxxxxxxxx" xxxx=xx"xxxxxxxxxxxx" xxx=xx"xxxx://xxx.xxxxxxxxx.xx/xxx= xxxxxxx/xxx/xxxxxxxx.xxx" xxxxx=xx"xxx" xxxxx=xx"xxxxxx: x;xxxxxx: xxxx;xx= xx-xxxxxx: xxx%;xxxxxxx: xxxx;xxxx-xxxxxxxxxx: xxxx;xxxxxxx: xxxxxx;"></xx= xx></x> =xx=xx=xx=xx=xx=xx=xx=xx=xx<x xxxxx=xx"xxxxxxx" xxxxx=xx"xxxxx" xxxxx=xx"x= xxx-xxxxxx: xxxxxxx, xxxxx, xxxxxxxxx, xxxx-xxxxx; xxxx-xxxx: xxxx; xxxxx:= xxxxx; "> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xxxxxx xxxxxx xxxx x&xxxx;xxxx xxxxxx xxxxxxxx= xx xxxxxx. xxxxx xxxxxxxxxxx xxx xxxx xx&xxxxx;xxxxxxxxxxxxx xxxxxx x&xxxx= ;x xx&xxxx;&xxxxx;xxx xxxxxxx.&xxxx;<xx> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xxx&xxxx;x xxxxxxxxxxxxxx xxx x&xxxx;xxxxxxxx= xxxxxxxxx xxx xxx xxxxx&xxxx;<x xxxx=xx"xxxxxx:xxxxxxxxx@xxxxxxxxx.xxx?xx= xxxxx=xxxxxxxxxxxxxxxxxxx%xxx%xx%xxx%xxxxxxxxxxx%xxxx%xxxxxxxx%xxxxxxxxxxx= " xxxxx=xx"xxxxx: #xxxxxx;xxxx-xxxxxx: xxxxxx;xxxx-xxxxxxxxxx: xxxxxxxxx;"= >xxxxxxxxx(a)xxxxxxxxx.xxx</x>&xxxx;xxx.<xx> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xxxxx.: +xx (x) xxxxx (xxxxxx xxx xxxxxxx x:xx= xxx xx:xx xxx)</x> =xx=xx=xx=xx=xx=xx=xx=xx=xx<x xxxxx=xx"xxxx-xxxxx: xxxxxxx; "> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx<xxxx xxxxx=xx"xxxx-xxxx: x.xxx; xxxx-xxxxxx= : xxxxx, xxxx-xxxxx; xxxxx: xxxxx; "><xxx xxxxxx=xx"x" xxxxxx=xx"xxx" xx= =xx"xxxxxxxxxxxx" xxxx=xx"xxxxxxxxxxxx" xxx=xx"xxxx://xxx.xxxxxxxxx.xx/xxx= xxxxxxx/xxx/x-xxxxxxxxxx.xxx" xxxxx=xx"xxx" xxxxx=xx"xxxxxx: x;xxxxxx: xxx= x;xxxx-xxxxxx: xxx%;xxxxxxx: xxxx;xxxx-xxxxxxxxxx: xxxx;xxxxxxx: xxxxxx;">= </xxxx></x> =xx=xx=xx=xx=xx=xx=xx=xx=xx<x xxxxx=xx"xxxxx" xxxxx=xx"xxxx-xxxxxx: xxxxxx= x, xxxxx, xxxxxxxxx, xxxx-xxxxx; xxxx-xxxx: xxxx; xxxxx: xxxxx; xxxx-xxxxx= : xxxxxxx; "> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xxxxxxx, xxx xxxxxx xxxxx xxxxxx x&xxxx;xxxx,= x&xxxx;xxxxxx xxx xxxxxxx xxxxx xxxxx xxxxxxxxxxx xxx xxxxx xxxxxxxxxx xx= xxxx xx xxx xxxxxxxxxxxxx xxxx xxxx.</x> =xx=xx=xx=xx=xx=xx=xx=xx=xx<x xxxxx=xx"xxxxx" xxxxx=xx"xxxx-xxxxxx: xxxxxx= x, xxxxx, xxxxxxxxx, xxxx-xxxxx; xxxx-xxxx: xxxx; xxxxx: xxxxx; xxxx-xxxxx= : xxxxxxx; "> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xxxxx xxxxxxxxx-xxxx!</x> =xx=xx=xx=xx=xx=xx=xx=xx</xx> =xx=xx=xx=xx=xx=xx=xx</xx> =xx=xx=xx=xx=xx=xx</xxxxx> =xx=xx=xx=xx=xx</xxxxx> =xx=xx=xx=xx=xx<xxx xxxxx=xx"xxxxxx" xxxxx=xx"xxxxxxxxx" xxxxx=xx"xxxxxx-x= xx: xxx;xxxxxx-xxxxx: xxx;xxxxxx-xxxx: xxx;xxxxxx-xxxxxx: x.xxxxxx;xxxx-xx= xx: xxxx;xxxx-xxxxxx: 'xxxxx xxx xxxxx', xxxxx;xxxx-xxxxx: xxxxxx;xxxxx: #= xxxxxx;xxxx-xxxxxx: xxx%;"> =xx=xx=xx=xx=xx=xx<xx xxxxx=xx"xxxxxx" xxxxxxx=xx"xxxxxxx" xxxx=xx"x" xxxx= x=xx"xxxxx: xxx(xxx, xxx, xxx); " xxxxx=xx"xxx%"> =xx=xx=xx=xx=xx</xxx> =xx=xx=xx=xx=xx<xxxxx xxxxxx=xx"x" xxxxxxxxxxx=xx"x" xxxxx=xx"xxxxxxxxxxxx= xx" xxxxx=xx"xxxxx: xxxxx; " xxxxx=xx"xxx%"> =xx=xx=xx=xx=xx=xx<xxxxx> =xx=xx=xx=xx=xx=xx=xx<xx> =xx=xx=xx=xx=xx=xx=xx=xx<xx xxxxx=xx"xxxxx: xxxxx;xxxxxxx-xxx: x.xxxx;xxxx= xxx-xxxxx: x.xxxx;xxxxxxx-xxxxxx: x.xxxx;xxxxxxx-xxxx: x.xxxx;xxxxxx-xxxxx= xxx: xxxxxxxx;" xxxxx=xx"xx%"> =xx=xx=xx=xx=xx=xx=xx=xx=xx<x xxxxx=xx"xxxx-xxxxx: xxxxxxx; "> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx<x xx=xx"xxxxx" xxxx=xx"xxxxx" xxxxx=xx"xxxx= x: #xxxxxx;xxxx-xxxxxx: xxxxxx;xxxx-xxxxxxxxxx: xxxxxxxxx;"></x><xxxxxx><x= xxx xxxxx=xx"xxxx-xxxx: xxx; xxxx-xxxxxx: xxxxx, xxxx-xxxxx; xxxxx: xxxxx;= ">xxxxx:</xxxx></xxxxxx><xx> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx<xx> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx<xxxx xxxxx=xx"xxxx-xxxx: xxx; xxxx-xxxxxx:= xxxxx, xxxx-xxxxx; xxxxx: xxxxx; "><xx><xxxx xxxxx=xx"xxxx-xxxxxx: xxxxx,= xxxx-xxxxx; ">xxx xxxxx xxx xxxxxxxx xx xxxxxx xxxxxxxxx</xxxx></xx><xx> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx<xx> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx<x><xxxxxx><xxxx xxxxx=xx"xxxx-xxxxxx: xxxxx= , xxxx-xxxxx; ">xx.xx.xxxx</xxxx></xxxxxx><xx> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx<xxxxxx><xxxx xxxxx=xx"xxxx-xxxxxx: xxxxx, x= xxx-xxxxx; ">xxxxx: xx:xx xxx</xxxx></xxxxxx></x><xx> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx<xx> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx<xxxx xxxxx=xx"xxxxxx">xxxxxx xxxxxxxxx</xxx= x><xx> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx<xxxx xxxxx=xx"xxxxxx">xxxxxxxxxxxxx&xxxxx;x= x, xxxx xxxx</xxxx></xxxx></x> =xx=xx=xx=xx=xx=xx=xx=xx=xx<x xxxxx=xx"xxxxx" xxxxx=xx"xxxxxx-xxxxx: xxx;= xxxxxx-xxxx: xxx; xxxx-xxxx: xxx; xxxx-xxxxxx: 'xxxxx xxx xxxxx', xxxxx;= xxxx-xxxxx: xxxxxxx; "> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx<xxxx xxxxx=xx"xxxx-xxxxxx: xxxxx, xxxx-xxxx= x; xxxxx: xxxxx; ">xx/xx xxxxxxxxxxxx</xxxx></x> =xx=xx=xx=xx=xx=xx=xx=xx=xx<x xxxxx=xx"xxxxx" xxxxx=xx"xxxxxx-xxxxx: xxx;= xxxxxx-xxxx: xxx; xxxx-xxxx: xxx; xxxx-xxxxxx: 'xxxxx xxx xxxxx', xxxxx;= xxxx-xxxxx: xxxxxxx; "> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx<x><xxxx xxxxx=xx"xxxx-xxxxxx: xxxxx, xxxx-x= xxxx; xxxxx: xxxxx; ">xxxxxx:</xxxx></x><xx> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx<xxxx xxxxx=xx"xxxx-xxxxxx: xxxxx, xxxx-xxxx= x; xxxxx: xxxxx; ">xxxx xxxxx: xx xxx (xxxxxxx xx xxx xxx xxxx, xxxx, xxxx= xxxx, xxxxxxxxx xxx xxxx xxxx)<xx> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xxxxxxx xxxxx: xx xxx (xx xxxxxxxx)<xx> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xxxxxxxxxx xxxxx&xxxx;</xxxx></x> =xx=xx=xx=xx=xx=xx=xx=xx=xx<x xxxxx=xx"xxxxx" xxxxx=xx"xxxxxx-xxxxx: xxx;= xxxxxx-xxxx: xxx; xxxx-xxxx: xxx; xxxx-xxxxxx: 'xxxxx xxx xxxxx', xxxxx;= xxxx-xxxxx: xxxxxxx; "> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx<x><xxxx xxxxx=xx"xxxx-xxxxxx: xxxxx, xxxx-x= xxxx; xxxxx: xxxxx; ">xxxxxxx:</xxxx></x><xx> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx<xxxx xxxxx=xx"xxxx-xxxxxx: xxxxx, xxxx-xxxx= x; xxxxx: xxxxx; ">xxxxxxxxxx:&xxxx;xx &xxxx;<xx> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xxxxxxxxxxxx: xx &xxxx; xxxx. xxx-xxx&xxxx;xxx= x (xxxxxxxxxxx xxxxxxx!)</xxxx></x> =xx=xx=xx=xx=xx=xx=xx=xx=xx<x xxxxx=xx"xxxx-xxxxx: xxxxxxx; "> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx<xxxx xxxxx=xx"xxxx-xxxx: xxx; xxxx-xxxxxx:= xxxxx, xxxx-xxxxx; xxxxx: xxxxx; "><xxxxxx><xxxx xxxxx=xx"xxxx-xxxxxx: xx= xxx, xxxx-xxxxx; ">xxxxxxxxxx:&xxxx;</xxxx></xxxxxx><xxxx xxxxx=xx"xxxxxx"= >&xxxx;xxx&xxxx;<x xxxx=xx"xxxx://xxxxxxxx.xxx.xxxx-xxxxxxx.xxx/xxxxx/xxxx= x?x=xxxxxxxxxxxxxxxxxxxxxxxxxxx&xx=xxxxxxxxxxxx&x=xxxxxxxxxxxx" xxxxxx=xx= "xxxxxx" xxxxx=xx"xxxxx: #xxxxxx;xxxx-xxxxxx: xxxxxx;xxxx-xxxxxxxxxx: xxxx= xxxxx;">xxxxxxxx.xxx</x>, xxx &xxxx;xxxxxx-xxxxxxxxxxxxxxxxxx xxx xx xxxxx= xxxxxxxx xxx xxxxxxxxx.</xxxx></xxxx></x> =xx=xx=xx=xx=xx=xx=xx=xx</xx> =xx=xx=xx=xx=xx=xx=xx=xx<xx xxxxx=xx"xxxxx: xxxxx;xxxxxxx-xxx: x.xxxx;xxxx= xxx-xxxxx: x.xxxx;xxxxxxx-xxxxxx: x.xxxx;xxxxxxx-xxxx: x.xxxx;xxxxxx-xxxxx= xxx: xxxxxxxx;" xxxxx=xx"xx%"> =xx=xx=xx=xx=xx=xx=xx=xx=xx<x xxxxx=xx"xxxxxx" xxxxx=xx"xxxx-xxxxx: xxxxxx= ; "> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx<xx> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx<xxxx xxxxx=xx"xxxxxx"><x><xxxx xxxxx=xx"xxx= x-xxxx: xxx; xxxx-xxxxxx: xxxxx, xxxx-xxxxx; xxxxx: xxxxx; ">xxx xxxxxxxxx= xxx xxxxxxx&xxxx;xxxxx xxx</xxxx></x></xxxx></x> =xx=xx=xx=xx=xx=xx=xx=xx=xx<x xxxxx=xx"xxxxxx" xxxxx=xx"xxxx-xxxxx: xxxxxx= ; "> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx<xxxx xxxxx=xx"xxxx-xxxx: x.xxx; xxxx-xxxxxx= : xxxxx, xxxx-xxxxx; xxxxx: xxxxx; "><xxx xxxxxx=xx"x" xxxxxx=xx"xxx" xxx= =xx"xxxx://xxx.xxxxxxxxx.xx/xxxxxxxxxx/xxx/xxxxxxxxxxxxxxxx.xxx" xxxxxx=xx= "#xxx" xxxxx=xx"xxx" xxxxx=xx"xxxxxx: x;xxxxxx: xxxx;xxxx-xxxxxx: xxx%;xxx= xxxx: xxxx;xxxx-xxxxxxxxxx: xxxx;xxxxxxx: xxxxxx;">&xxxx;</xxxx></x> =xx=xx=xx=xx=xx=xx=xx=xx=xx<x xxxxx=xx"xxxxxx" xxxxx=xx"xxxx-xxxxx: xxxxxx= ; "> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx&xxxx;</x> =xx=xx=xx=xx=xx=xx=xx=xx</xx> =xx=xx=xx=xx=xx=xx=xx=xx<xx xxxxx=xx"xxxxx: xxx;xxxxxxx-xxx: x.xxxx;xxxxxx= x-xxxxx: x.xxxx;xxxxxxx-xxxxxx: x.xxxx;xxxxxxx-xxxx: x.xxxx;xxxxxx-xxxxxxx= x: xxxxxxxx;" xxxxx=xx"x%"> =xx=xx=xx=xx=xx=xx=xx=xx=xx<x xxxxx=xx"xxxxxxxxx" xxxxx=xx"xxxxxx-xxx: xxx= ; xxxxxx-xxxxx: xxx; xxxxxx-xxxx: xxx; xxxxxx-xxxxxx: x.xxxxxx; xxxx-xxxx:= xxxx; xxxx-xxxxxx: 'xxxxx xxx xxxxx', xxxxx; xxxx-xxxxx: xxxxxxx; "> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx<xxxx xxxxx=xx"xxxx-xxxx: x.xxx; xxxx-xxxxxx= : xxxxx, xxxx-xxxxx; xxxxx: xxxxx; ">&xxxx;</xxxx></x> =xx=xx=xx=xx=xx=xx=xx=xx</xx> =xx=xx=xx=xx=xx=xx=xx</xx> =xx=xx=xx=xx=xx=xx</xxxxx> =xx=xx=xx=xx=xx</xxxxx> =xx=xx=xx=xx=xx<xxx xxxxx=xx"xxxxxx" xxxxx=xx"xxxxxxxxx" xxxxx=xx"xxxxxx-x= xx: xxx;xxxxxx-xxxxx: xxx;xxxxxx-xxxx: xxx;xxxxxx-xxxxxx: x.xxxxxx;xxxx-xx= xx: xxxx;xxxx-xxxxxx: 'xxxxx xxx xxxxx', xxxxx;xxxx-xxxxx: xxxxxx;xxxxx: #= xxxxxx;xxxx-xxxxxx: xxx%;"> =xx=xx=xx=xx=xx=xx<xx xxxxx=xx"xxxxxx" xxxxxxx=xx"xxxxxxx" xxxx=xx"x" xxxx= x=xx"xxxxx: xxx(xxx, xxx, xxx); " xxxxx=xx"xxx%"> =xx=xx=xx=xx=xx</xxx> =xx=xx=xx=xx=xx<x xxxxx=xx"xxxxxx" xxxxx=xx"xxxxxxxxx" xxxxx=xx"xxxxxx-xxx= : xxx; xxxxxx-xxxxx: xxx; xxxxxx-xxxx: xxx; xxxxxx-xxxxxx: x.xxxxxx; xxxx-= xxxx: xxxx; xxxx-xxxxxx: 'xxxxx xxx xxxxx', xxxxx; xxxx-xxxxx: xxxxxx; "> =xx=xx=xx=xx=xx=xx&xxxx;</x> =xx=xx=xx=xx=xx<x xxxxx=xx"xxxxxx" xxxxx=xx"xxxxxxxxx" xxxxx=xx"xxxxxx-xxx= : xxx; xxxxxx-xxxxx: xxx; xxxxxx-xxxx: xxx; xxxxxx-xxxxxx: x.xxxxxx; xxxx-= xxxx: xxxx; xxxx-xxxxxx: 'xxxxx xxx xxxxx', xxxxx; xxxx-xxxxx: xxxxxx; "> =xx=xx=xx=xx=xx=xx<xxxx xxxxx=xx"xxxx-xxxx: xxxx; xxxx-xxxxxx: xxxxxx, xxx= x-xxxxx; xxxxx: xxxxx; ">xxxxxxxxx</xxxx><xx> =xx=xx=xx=xx=xx=xx<xxxx xxxxx=xx"xxxxx" xxxxx=xx"xxxxx: xxx(x, x, x); "><x= xxx xxxx=xx"xxxxxxx, xxxxx, xxxxxxxxx, xxxx-xxxxx" xxxx=xx"x">xxxxxxxxx: x= xxxx xxxxxxxxxxxxxxxxxxxxx xxxx, xxxx xxxx, xxxxxxxxxxxxxxx x/x, xxxxxx /= @ / xxxxx.xx.xx</xxxx></xxxx></x> =xx=xx=xx=xx=xx<x xxxxx=xx"xxxxxx" xxxxx=xx"xxxxxxxxx" xxxxx=xx"xxxxxx-xxx= : xxx; xxxxxx-xxxxx: xxx; xxxxxx-xxxx: xxx; xxxxxx-xxxxxx: x.xxxxxx; xxxx-= xxxx: xxxx; xxxx-xxxxxx: 'xxxxx xxx xxxxx', xxxxx; xxxx-xxxxx: xxxxxx; "> =xx=xx=xx=xx=xx=xx&xxxx;</x> =xx=xx=xx=xx</xx> =xx=xx=xx</xx> =xx=xx</xxxxx> =xx</xxxxx> =xx<xx> =xx<xxxx xxxxx=xx"xxxx-xxxx:xxxx;"><xxxx xxxxx=xx"xxxx-xxxxxx:xxxxx xxx xx= xxx,xxxxx,xxxxx;"><xxxx xxxxx=xx"xxxxx:#xxxxxx;">xxxxxx xxxxxxxxx<xx> =xx<xx> =xx<xxxx xxxxx=xx"xxxx-xxxx:xxxx;">xxxxxxxxx x&xxxx;x xxxx xxxxx xxxxxxx x= xxxx xxxxxxxx.xxxxxxx(a)xxxxx.xxx</xxxx></xxxx><xx> =xx<xx> =xx<xxxx xxxxx=xx"xxxx-xxxx:xxxx;"><xxxx xxxxx=xx"xxxxx:#xxxxxx;">xxxxx xx= xxxx xxx xxx xxxxxx xxxxx xxxx...xx xxx xxxxx... xxx xxxxx xxxx</xxxx></xx= xx></xxxx></xxxx></xxx> <xx> </xxx> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx</xx> </xx> </xxxxx>  </xx> </xx> =xx<xx> =xx<xx xxxxxx=xx"xxx" xxxxx=xx"xxx= " xxxxx=xx"xxxxxxxxxxxxxxxxx" xxxxx=xx"xxxxxx-xxxxxxxx: xxxxxxxx;xxxxxxxxx= x-xxxxx: #xxxxxx;">  <xxxxx xxxxxx=xx"x" xxxxxx= xxxxx=xx"xx" xxxxxxxxxxx=xx"x" xxxxx=xx"xxx%"> <xx xx:xxxxxxxxxx=xx"x= xxxxxxx" xx:xxxxxxxxxxx=xx"x" xx:xxxxxxxx=xx"xxxxxxxxxxxxxxxxxxx" xxxxxxxx= xx=xx"xxxxxxxxxxxxxxxxxxx"> <xx xxxxxx=xx"xxx"= xxxxx=xx"xxxxxx-xxxxxxxx: xxxxxxxx;"> <xxx xxx=xx"xx= xx://xxxxxxx.xxxxxxxxx.xxx/xxxxxxxxxxxxxxxxxxxxxxxxx/xxxxxx/xxxxxxxxxxx.xx= x" xxx=xx"" xxxxxx=xx"x" xxxxx=xx"xxxxxx: x;xxxxxxx: x;xxxxxx: x;xxxxxx: x= xxx;xxxx-xxxxxx: xxx%;xxxxxxx: xxxx;xxxx-xxxxxxxxxx: xxxx;xxxxxxx: xxxxxx;= "> <xxx xxxxx=xx"= xxxxx: #xxxxxx;xxxx-xxxxxx: xxxxx;xxxx-xxxx: xxxx;xxxx-xxxxxx: xxx%;xxxx-x= xxxx: xxxx;"></xxx> </xx> </xx> </xxxxx>  </xx> =xx<xx xxxxxx=xx"xxx" xxxxx=xx"xxx= " xxxxx=xx"xxxxxxxxxxxxxxxxxx" xxxxx=xx"xxxxxx-xxxxxxxx: xxxxxxxx;xxxxxxxx= xx-xxxxx: #xxxxxx;">  <xxxxx xxxxxx=xx"x" xxxxxx= xxxxx=xx"xx" xxxxxxxxxxx=xx"x" xxxxx=xx"xxx%"> </xxxxx>  </xx> </xx> </xxxxx>  </xx> </xx> =xx<xx> =xx<xx xxxxx=xx"xxxxxx" xxxxxx=xx"xxx" xxxxx= =xx"xxxxxx-xxxxxxxx: xxxxxxxx;">  =xx<xxxxx xxxxxx=xx"x" xxxxxxxxxxx=xx"xx"= xxxxxxxxxxx=xx"x" xxxxx=xx"xxx" xx=xx"xxxxxxxxxxxxxx" xxxxx=xx"xxxxxxxxxx= -xxxxx: #xxxxxx;xxxxxx-xxx: x;"> =xx<xx> =xx<xx xxxxxx=xx"xxx" xxxxx=xx"xxx= xxxxxxxxxx" xxxxx=xx"xxxxxx-xxxxxxxx: xxxxxxxx;">  <xxxxx xxxxxx=xx"x" xxxxxx= xxxxx=xx"xx" xxxxxxxxxxx=xx"x" xxxxx=xx"xxx%"> <xx> <xx xxxxxxx=xx"x"= xxxxxx=xx"xxxxxx" xx=xx"xxxxxx" xxxxx=xx"xxxxxx-xxxxxxxx: xxxxxxxx;xxxxxx= xxxx-xxxxx: #xxxxxx;xxxxxx: x;"> <xxx xxxxx=xx"= xxxxx: #xxxxxx;xxxx-xxxxxx: xxxxx;xxxx-xxxx: xxxx;xxxx-xxxxxx: xxx%;xxxx-x= xxxx: xxxxxx;"></xxx> </xx> </xx> <xx> <xx xxxxxx=xx"xxx"= xxxxx=xx"xxx" xxxxx=xx"xxxxxx-xxxxxxxx: xxxxxxxx;"> <xxx xxxxx=xx"= xxxxx: #xxxxxx;xxxx-xxxxxx: xxxxx;xxxx-xxxx: xxxx;xxxx-xxxxxx: xxx%;xxxx-x= xxxx: xxxx;"><x>xx xxx&xxxx;xxxx xxxxxx xxxxxxxxxx, xx xx xxxx xxx xxxxx x= xxxxxx<xx> xxxxxx, xxxx xxx xxx.xxxxxxxx.xxx, xxx. xxx.xxxxx.xxx<xx> xxxxxxxxxxx xxxx.</x></xxx> </xx> <xx xxxxxx=xx"xxx"= xxxxx=xx"xxx" xx=xx"xxxxxxxxxxxxx" xxxxx=xx"xxxxxx-xxxxxxxx: xxxxxxxx;"> <xxx xxxxx=xx"= xxxxx: #xxxxxx;xxxx-xxxxxx: xxxxx;xxxx-xxxx: xxxx;xxxx-xxxxxx: xxx%;xxxx-x= xxxx: xxxx;"></xxx> </xx> </xx> <xx> <xx xxxxxxx=xx"x"= xxxxxx=xx"xxxxxx" xx=xx"xxxxxxx" xxxxx=xx"xxxxxx-xxxxxxxx: xxxxxxxx;xxxxx= xxxxx-xxxxx: #xxxxxx;xxxxxx: x;"> <xxx xxxxx=xx"= xxxxx: #xxxxxx;xxxx-xxxxxx: xxxxx;xxxx-xxxx: xxxx;xxxx-xxxxxx: xxx%;xxxx-x= xxxx: xxxxxx;"> &xxxx;<x x= xxx=xx"xxxx://xxxxxxxx.xxx.xxxx-xxxxxxx.xxx/xxxxxxxxxxx?x=xxxxxxxxxxxxxxxx= xxxxxxxxxxx&xx=xxxxxxxxxxxx&x=xxxxxxxxxxxx&x=xxxxxxxxxxxx" xxxxx=xx"xxxxx: #= xxxxxx;xxxx-xxxxxx: xxxxxx;xxxx-xxxxxxxxxx: xxxxxxxxx;">xxxxxxxxxxx xxxx x= xxx xxxx</x> | <x xxxx=xx"xxxx://xxxxxxxx.xxx.xxxx-xxxxxxx.xxx/xxxxxxx?x= =xxxxxxxxxxxxxxxxxxxxxxxxxxx&xx=xxxxxxxxxxxx&x=xxxxxxxxxxxx" xxxxx=xx"xxxxx:= #xxxxxx;xxxx-xxxxxx: xxxxxx;xxxx-xxxxxxxxxx: xxxxxxxxx;">xxxxxx xxxxxxxxx= xxx xxxxxxxxxxx</x>&xxxx; </xxx> </xx> </xx> </xxxxx>  </xx> </xx> </xxxxx>  </xx> </xx> </xxxxx> <xx> </xx> </xx> </xxxxx> </xxxxxx> <xxx xxx=xx"xxxx://xxxxxxxx.xxx.xxxx-xxxxxx.xxx/xxxxx/xxxx.xxx?x=xxxxx= xxxxxxxxxxxxxxxxxxxxxx&xx=xxxxxxxxxxxx&x=xxxxxxxxxxxx" xxxxxx=xx"x" xxxxx= =xx"x"></xxxx> </xxxx> --x----------=xxxxxxxxxxxxxxxxxx-- Return-Path: <xxxxxxx.xxxxxxx(a)xxxxx.xxx> Received: xxxx xxxxxxxxx ([xxxx xxxxxx]) xx xxxxx (xxxxx xx.x.xx-xxxxxx-x.x.xx-x) xxxx xxxxx; xxx, xx xxx xxxx xx:xx:xx +xxxx X-Sieve: xxx xxxxx x.x Received: xxxx xxxxxxxxx ([xxx.x.x.x]) xx xxxxxxxxx xxxx xxxxx (xxxx x.xx) (xxxxxxxx-xxxx <xxxxxxx.xxxxxxx(a)xxxxx.xxx>) xx xxxxxx-xxxxxx-xx xxx xxxxx@xxxxxxxxx; xxx, xx xxx xxxx xx:xx:xx +xxxx X-Virus-Scanned: xxxxxx xxxxxxx-xxx xx xxxxxxx.xxxxxxxxx.xxx X-Amavis-Alert: xxx xxxxxx xxxxxxx, xxxxxx xxxxx xxxxxx xxxx xxxx xxxx: "xxxx" xxxxxx x xxxxx Received: xxxx xxxxxxxxx ([xxx.x.x.x]) xx xxxxxxxxx (xxxxxxxxx [xxx.x.x.x]) (xxxxxxx-xxx, xxxx xxxxx) xxxx xxxxx xx xxxxxxxxxxxx xxx <xxxxx@xxxxxxxxx>; xxx, xx xxx xxxx xx:xx:xx +xxxx (xxx) Received: xxxx xxxxxx-xxxx xx xxxxxxxxx xxxx xxxx-xxxxxxx (xxxx x.xx) (xxxxxxxx-xxxx <xxxxxxx.xxxxxxx(a)xxxxx.xxx>) xx xxxxxx-xxxxxx-xx xxx xxxxx@xxxxxxxxx; xxx, xx xxx xxxx xx:xx:xx +xxxx Received: xxxx xxxxxxxxx ([xxx.x.x.x]) xx xxxxxxxxx xxxx xxxxx (xxxx x.xx) (xxxxxxxx-xxxx <xxxxxxx.xxxxxxx(a)xxxxx.xxx>) xx xxxxxx-xxxxxx-xx xxx xxxxx@xxxxxxxxx; xxx, xx xxx xxxx xx:xx:xx +xxxx Received: xxxx xxxxxxxxxx-xxx.x.xxxxxx.xxx [xxx.xxx.xx.xx] xx xxxxxxxxx xxxx xxxx (xxxxxxxxx-x.x.xx) xxx <xxxxx@xxxxxxxxx> (xxxxxx-xxxx); xxx, xx xxx xxxx xx:xx:xx +xxxx (xxx) Subject: xx: ***xxxxxxx xxxx*** xxxxxxxxxxx xx xx.xx.xxxx xx xx xxx ***xxxxxx-xxxx*** Subject: xx: ***xxxxxxx xxxx*** xxxxxxxxxxx xx xx.xx.xxxx xx xx xxx ***xxxxxx-xxxx*** From: =?xxx-xxxx-x?x?xxxxxxxxxxx=xxxx?= <xxxxxxx.xxxxxxx(a)xxxxx.xxx> Subject: xx: ***xxxxxxx xxxx*** xxxxxxxxxxx xx xx.xx.xxxx xx xx xxx ***xxxxxx-xxxx*** From: =?xxx-xxxx-x?x?xxxxxxxxxxx=xxxx?= <xxxxxxx.xxxxxxx(a)xxxxx.xxx> Date: Wed, 16 Jan 2013 18:23:26 +0100 Subject: xx: ***xxxxxxx xxxx*** xxxxxxxxxxx xx xx.xx.xxxx xx xx xxx ***xxxxxx-xxxx*** From: =?xxx-xxxx-x?x?xxxxxxxxxxx=xxxx?= <xxxxxxx.xxxxxxx(a)xxxxx.xxx> Date: Wed, 16 Jan 2013 18:23:26 +0100 To: xxxxxx.xxxx(a)xxxxxx.xx Subject: xx: ***xxxxxxx xxxx*** xxxxxxxxxxx xx xx.xx.xxxx xx xx xxx ***xxxxxx-xxxx*** From: =?xxx-xxxx-x?x?xxxxxxxxxxx=xxxx?= <xxxxxxx.xxxxxxx(a)xxxxx.xxx> Date: Wed, 16 Jan 2013 18:23:26 +0100 To: xxxxxx.xxxx(a)xxxxxx.xx Message-ID: <xxxxxxxxxxxxxxxxxxxxxxxx.xxxxxxxxxxxxx(a)xxxxx.xxxxxxx.xxx> Subject: xx: ***xxxxxxx xxxx*** xxxxxxxxxxx xx xx.xx.xxxx xx xx xxx ***xxxxxx-xxxx*** From: =?xxx-xxxx-x?x?xxxxxxxxxxx=xxxx?= <xxxxxxx.xxxxxxx(a)xxxxx.xxx> Date: Wed, 16 Jan 2013 18:23:26 +0100 To: xxxxxx.xxxx(a)xxxxxx.xx Message-ID: <xxxxxxxxxxxxxxxxxxxxxxxx.xxxxxxxxxxxxx(a)xxxxx.xxxxxxx.xxx> Content-Type: multipart/mixed; boundary="----NWRIVE76QRJKEC1767KE5YSLJDH1MB" Subject: xx: ***xxxxxxx xxxx*** xxxxxxxxxxx xx xx.xx.xxxx xx xx xxx ***xxxxxx-xxxx*** From: =?xxx-xxxx-x?x?xxxxxxxxxxx=xxxx?= <xxxxxxx.xxxxxxx(a)xxxxx.xxx> Date: Wed, 16 Jan 2013 18:23:26 +0100 To: xxxxxx.xxxx(a)xxxxxx.xx Message-ID: <xxxxxxxxxxxxxxxxxxxxxxxx.xxxxxxxxxxxxx(a)xxxxx.xxxxxxx.xxx> Content-Type: multipart/mixed; boundary="----NWRIVE76QRJKEC1767KE5YSLJDH1MB" MIME-Version: x.x X-Bogofiltered: xxxx X-Bogosity: xxx, xxxxx=xxxxxxxxxx, xxxxxxxxx=x.xxxxxx, xxxxxxx=x.x.x ------xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxx-xxxx: xxxx/xxxx; xxxxxxx=xxx-x xxxxxxx-xxxx: xxxx/xxxx; xxxxxxx=xxx-x xxxxxxx-xxxxxxxx-xxxxxxxx: xxxxxx xxxxxxx+xxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+ ------xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxx-xxxx: xxxx/xxxxx; xxxxxxx=xxx-x xxxxxxx-xxxx: xxxx/xxxxx; xxxxxxx=xxx-x xxxxxxx-xxxxxxxx-xxxxxxxx: xxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx ------xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxx-xxxx: xxxx/xxxxx; xxxxxxx=xxx-x xxxxxxx-xxxx: xxxx/xxxxx; xxxxxxx=xxx-x xxxxxxx-xxxxxxxx-xxxxxxxx: xxxxxx xxxxxxx-xxxx: xxxx/xxxxx; xxxxxxx=xxx-x xxxxxxx-xxxxxxxx-xxxxxxxx: xxxxxx x-xxxxxxx-xxxx-xxxxxx-xxxx: xxxxxx-xxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxx ------xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxx-xxxx: xxxx/xxxx; xxxxxxx=xxx-x xxxxxxx-xxxx: xxxx/xxxx; xxxxxxx=xxx-x xxxxxxx-xxxxxxxx-xxxxxxxx: xxxxxx xxxxxxx-xxxx: xxxx/xxxx; xxxxxxx=xxx-x xxxxxxx-xxxxxxxx-xxxxxxxx: xxxxxx x-xxxxxxx-xxxx-xxxxxx-xxxx: xxxxxx-xxxxxxx xxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxx+xxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxx+ xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+ xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxx xxx+xxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxx+xxxxxxx+xxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxx xxx+xxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxx xxxxxxxxxxx+xxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxx+xxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+ xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+ xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+ xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+ xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxx+xxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxx xxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+ xxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxx+xxxxxxx+xxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxx xxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxx+xxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxx xxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxx+xxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxx+xxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxx+xxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxx xxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxx xxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+ ------xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxx-xxxx: xxxx/xxxxx; xxxxxxx=xxx-x xxxxxxx-xxxx: xxxx/xxxxx; xxxxxxx=xxx-x xxxxxxx-xxxxxxxx-xxxxxxxx: xxxxxx xxxxxxx-xxxx: xxxx/xxxxx; xxxxxxx=xxx-x xxxxxxx-xxxxxxxx-xxxxxxxx: xxxxxx x-xxxxxxx-xxxx-xxxxxx-xxxx: xxxxxx-xxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx== ------xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxx-xxxx: xxxxx/xxxx; xxxx="xxxxxxxx.xxx" xxxxxxx-xxxxxxxx-xxxxxxxx: xxxxxx xxxxxxx-xxxxxxxxxxx: xxxxxxxxxx; xxxxxxxx="xxxxxxxx.xxx"; xxxx=xxxx xxxxxxx-xx: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx(a)xxx.xxxxxxxxx /xx/xxxxxxxxxxxxxxxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxx/xxx/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx/xxxxxxxxxxxxxxxx xxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxx+xxx/xxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxx/xxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxx/xxxxxx/xxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xx xxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxx/xxxxxxxxxxxxxxxxxxxx+xxxxxxxxx+xxxxxxx xxxxxxxxxxxxxxxx/xxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxx/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx/xx xxxxxxxxxxxxxxxxxxxxxxxxxxxx/xx/xxxx/xxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxx/xxxxxxxxxxxxxxxxxxxxx/xx/xxx xxxxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxx/xxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxx/xxxxxxxxxxxxxxxxxxxxxx+xxxxx/xxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx/xxxxxxx+xxxxxxxxx+xxxxxxxxxxx xxxxxxxxxxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx/xx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx/xxxxxxxxxxxx xxxxxx/xx+xxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxx xxxx+xxxxxxxxxxxxxxxxxxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxx+xx+xxxxxxxxxxxxx/xxxx /xxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx/xxxxx+xxxxxxx+xx xxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+x/xxxxxxxxxxxxxxxxxxx+xxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx/xxx/xxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+ xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx +xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx// xx== ------xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx-- ------xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx-- Return-Path: <xxx-xxxx(a)xxxx.xxxxxxxx.xxx> Received: xxxx xxxxxxxxx ([xxxx xxxxxx]) xx xxxxx (xxxxx xx.x.xx-xxxxxx-x.x.xx-x+xxxxxx) xxxx xxxxx; xxx, xx xxx xxxx xx:xx:xx +xxxx X-Sieve: xxx xxxxx x.x Received: xxxx xxxxxxxxx ([xxx.x.x.x]) xx xxxxxxxxx xxxx xxxxx (xxxx x.xx) (xxxxxxxx-xxxx <xxx-xxxx(a)xxxx.xxxxxxxx.xxx>) xx xxxxxx-xxxxxx-xx xxx xxxxx@xxxxxxxxx; xxx, xx xxx xxxx xx:xx:xx +xxxx X-Virus-Scanned: xxxxxx xxxxxxx-xxx xx xxxxxxxxx X-Spam-Flag: xx X-Spam-Score: x.xxx X-Spam-Level: **** X-Spam-Status: xx, xxxxx=x.xxx xxxxxxxxxxxx=-xx xxxxxxxx=x.xx xxxxx=[xxxxxxxxxxxxxxxxxxxxxxx=x.xxx, xxxxxxxxxxxx=x.xxx, xxxxxxxxxxxxxxxxxxxxx=x.xxx, xxxxxxxxxxxxxx=x.xxx, xxxxxxxxxxxxxxxxx=-x.xx] xxxxxxxxx=xx Received: xxxx xxxxxxxxx ([xxx.x.x.x]) xx xxxxxxxxx (xxxxxxxxx [xxx.x.x.x]) (xxxxxxx-xxx, xxxx xxxxx) xxxx xxxxx xx xxxxxxxxxxxx xxx <xxxxx@xxxxxxxxx>; xxx, xx xxx xxxx xx:xx:xx +xxxx (xxxx) Received: xxxx xxxxxx-xxxx xx xxxxxxxxx xxxx xxxx-xxxxxxx (xxxx x.xx) (xxxxxxxx-xxxx <xxx-xxxx(a)xxxx.xxxxxxxx.xxx>) xx xxxxxx-xxxxxx-xx xxx xxxxx@xxxxxxxxx; xxx, xx xxx xxxx xx:xx:xx +xxxx Received: xxxx xxxxxxxxx ([xxx.x.x.x]) xx xxxxxxxxx xxxx xxxxx (xxxx x.xx) (xxxxxxxx-xxxx <xxx-xxxx(a)xxxx.xxxxxxxx.xxx>) xx xxxxxx-xxxxxx-xx xxx xxxxx@xxxxxxxxx; xxx, xx xxx xxxx xx:xx:xx +xxxx Delivered-To: xxxxxxx.xxxxxxx(a)xxxxx.xxx Received: xxxx xxxxx-xxx.x.xxxxxx.xxx [xx.xxx.xxx.xxx] xx xxxxxxxxx xxxx xxxx (xxxxxxxxx-x.x.xx) xxx <xxxxx@xxxxxxxxx> (xxxxxx-xxxx); xxx, xx xxx xxxx xx:xx:xx +xxxx (xxxx) Received: xx xx.xxx.xxx.xx xxxx xxxx xx xxxxxxxxxxxxxx; xxx, x xxx xxxx xx:xx:xx -xxxx (xxx) X-Received: xx xx.xxx.x.xxx xxxx xxxx xx xxxxxxxxxxxxxxx.x.xxxxxxxxxxxxx; xxx, xx xxx xxxx xx:xx:xx -xxxx (xxx) Received: xxxx xxxx.xxxxxxxx.xxx (xxxx.xxxxxxxx.xxx. [xx.xx.xxx.x]) xx xx.xxxxxx.xxx xxxx xxxxx xx xxxxxxxxxxxxxxxx.xx.xxxx.xx.xx.xx.xx.xx xxx <xxxxxxx.xxxxxxx(a)xxxxx.xxx>; xxx, xx xxx xxxx xx:xx:xx -xxxx (xxx) Received-SPF: xxxx (xxxxxx.xxx: xxx-xxxx(a)xxxx.xxxxxxxx.xxx xxxx xxx xxxxxxxxx xxxxxxxxx xxxxxx xxxxx) xxxxxx-xx=xx.xx.xxx.x; Authentication-Results: xx.xxxxxx.xxx; xxx=xxxxxxx (xxxxxx.xxx: xxx-xxxx(a)xxxx.xxxxxxxx.xxx xxxx xxx xxxxxxxxx xxxxxxxxx xxxxxx xxxxx) xxxx.xxxx=xxx-xxxx(a)xxxx.xxxxxxxx.xxx Received: xx xxxx.xxxxxxxx.xxx (xxxxxxx, xxxx xxxxxx xx) xx xxxxxxxxx; xxx, x xxx xxxx xx:xx:xx +xxxx (xxxx) To: =?xxx-x?x?xxxxxxxxxxx=xx=xxxx?= <xxxxxxx.xxxxxxx(a)xxxxx.xxx> Subject: =?xxx-x?x?xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx,xxxxxxxxxx,xxxxxxxxxxxxxxxxxx?= =?xxx-x?x?xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx=xx=xxxxxx-xxxxxxxxxxxxxxxxxxx?= =?xxx-x?x?xxxxxxxxxxxxxxxxxxxx?= X-PHP-Originating-Script: xxxx:xxxxx.xxxxxxxxx.xxx Date: Thu, 5 Jun 2014 14:59:36 +0200 From: =?xxx-x?x?xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx=xxxxxxxxxxxx=xxxxxxxxxxxxxxxx?= =?xxx-x?x?xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx=xx=xxxxx?= <xxxxxx(a)xxxxxxx.xx> Reply-To: xxxxxxxxxxxxxx(a)xxxxxxx.xxx Message-ID: <xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx(a)xxx.xxxxxxx.xx> X-Priority: x X-Mailer: xxxxxxxxx x.x.x (xxxx://xxxx.xxxxxx.xxx/x/xxxxxx-xxxxxx.xxx/x/xxxxxxxxx/) MIME-Version: x.x Content-Transfer-Encoding: 8bit Content-Type: text/html; charset="utf-8" X-Bogofiltered: xxxx X-Bogosity: xxx, xxxxx=xxxxxxxxxx, xxxxxxxxx=x.xxxxxx, xxxxxxx=x.x.x <x>xxxxx xxxxxxx xxxüxx!</x> <x>xxxxx xxxxxxxxxxxx (xxxxxxxxxxxxxx(a)xxxxxxx.xxx, ) xxx xxxxx xxxx xxxxxxxxx xx xxxxx xxxxxxx xxxxxxxxxxxxxxxx xxxxxxxxxxx:</x> <x>xxxx xxxxxxxx xxxx xxxüxx,<xx /> <xx /> xxx xxx xxxx xxx xxx xxxxx xxxx xxxxx Üxxxxxxxxxxx xxx xxx xxx xxxxxx xxxxxxxxx üxxx xxx xxxxxxx xxxxxxxxxx. xxx xxxx xxxxxxx xx xxxxxx xxxxxx xxäxxxxxxxxxxxx xüx xxxxx xxx xxxxxx xxxxxxxxxxx xxx xxxx xxxäxxxx xx xx-xxxxxxxxx xüx xxxxx xxxxxxxäxxxxxxxx xxxxxxxxxxxxxxxxx. xxxx xxx xxxx xxxxxäxxxxx xüx xxx xxxx xxxxxx, xxxx xüxxx xxx xxxx üxxx xxx xxxxöxxxxxxx xxxxxäxx xxxxxx!<xx /> <xx /> xxx xxxxxxxxxxxx xxüßxx,<xx /> <xx /> xxxxx xxxxxxxxxxxx</x> <x>xxx xxxxxxxxxxxx xxüßxx,</x> <x>xxxxxxxxxxxxxxx xxxxxx xxxxxxxxxx, xxxxxxxx, xxxxxxxxx xxxxxxxxxxxxxxx xxxxxxxxx xx xxxxxx xxxxöxxx</x> <x><xx />---<xx />xxx xxxxxxxxxxxxx?<xx />xxxxxxxx xxx xxxx xxxx xxxxx <xxxxxx>xxxxxx xxxxxxxxxxxxxxxxxxxxxx</xxxxxx> xxxxx</x> <x><xxxxxx>xxxx://xxx.xxxxxxxx.xx</xxxxxx></x> X-Account-Key: xxxxxxxx X-UIDL: 1135872122.184 X-Mozilla-Status: xxxx X-Mozilla-Status2: xxxxxxxx X-Mozilla-Keys: Return-Path: <xxxxxx.xxxxxxxxx(a)xxxxxxxxxxxx.xx> Received: xxxx xxxxxxx.xxxxxx.xx (xxxxxxxxx.xxxxxxxxxxx [xxx.x.x.x]) xx xxxxxxx (xxxxx xx.x.xx-xxxx-xxxxxx-x.x.xx-x) xxxx xxxx; xxx, xx xxx xxxx xx:xx:xx +xxxx X-Sieve: xxx xxxxx x.x Received: xxxx xx.xxxxxx.xx (xx.xxxxxx.xx [xx.xxx.xx.xx]) (xxxxx xxxxx xxxx xxxxxx xxx-xxx-xxxxxx-xxx (xxx/xxx xxxx)) (xx xxxxxx xxxxxxxxxxx xxxxxxxxx) xx xxxxxxx.xxxxxx.xx (xxxxxxx) xxxx xxxxx xx xxxxxxxxxxxxx xxx <xxxxxxx.xxxxxxx(a)xxxxxx.xx>; xxx, xx xxx xxxx xx:xx:xx +xxxx (xxx) Received: xxxx xxxxxxxxx (xxxxxxxxx [xxx.x.x.x]) xx xx.xxxxxx.xx (xxxxxxx) xxxx xxxxx xx xxxxxxxxxx xxx <xxxxxxx.xxxxxxx(a)xxxxxx.xx>; xxx, xx xxx xxxx xx:xx:xx +xxxx (xxx) Received: xxxx xxxxxxx.xxxxx.xx (xxxxxxx.xxxxx.xx [xxx.xxx.xxx.xx]) xx xx.xxxxxx.xx (xxxxxxx) xxxx xxxxx xx xxxxxxxxxx xxx <xxxxxxx.xxxxxxx(a)xxxxxx.xx>; xxx, xx xxx xxxx xx:xx:xx +xxxx (xxx) Received: (xxxxx xxxxx xxxxxxx xx xxx x); xx xxx xxxx xx:xx:xx -xxxx Received: xxxx xxxxxxx (xxxx xxxxxxxxx) (xxx.xxx.xxx.xx) xx xxxxxxx.xxxxx.xx xxxx xxxx; xx xxx xxxx xx:xx:xx -xxxx Received: (xxxxx xxxxx xxxxxxx xx xxx x); xx xxx xxxx xx:xx:xx -xxxx X-DNS-Error: xxxx (xxxxxx-xx.xxx) xxxx xxx xxxxxxx xx xxx.xxx.xxx.xx - xxxxxx? Received: xxxx xxxxxxx (xxxx xxxxxx-xx.xxx) (xxx.xxx.xxx.xx) xx xxxxxxx.xxxxx.xx xxxx xxxx; xx xxx xxxx xx:xx:xx -xxxx Received: xxxx xxxxxx.xxxxxx-xx.xxx (xxxxxxxxx [xxx.x.x.x]) xx xxxxxx-xx.xxx (x.xx.xx/x.xx.xx/xxxxxxx) xxxx xxxxx xx xxxxxxxxxxxxxx xxx <xxxxxxx.xxxxxxx(a)xxxxxx.xx>; xxx, xx xxx xxxx xx:xx:xx +xxxx (xxx) Received: xxxx xxxxxxx.xxxx.xxxxxx-xx.xxx (xxxxxxxx.xxxx.xxxxxx-xx.xxx [xx.xxx.x.xx]) xx xxxxxx.xxxxxx-xx.xxx (x.xx.xx/x.xx.xx/xxxxxxx) xxxx xxxxx xx xxxxxxxxxxxxxx xxx <xxxxxxx.xxxxxxx(a)xxxxxx.xx>; xxx, xx xxx xxxx xx:xx:xx +xxxx (xxx) Received: xxxx xxxxxxxx.xxxx.xxxxxx-xx.xxx ([xx.xxx.x.xx]) xx xxxxxxx.xxxx.xxxxxx-xx.xxx xxxx xxxxxxxxx xxxxxxx(x.x.xxxx.xxx); xxx, xx xxx xxxx xx:xx:xx +xxxx X-MimeOLE: xxxxxxxx xx xxxxxxxxx xxxxxxxx xx.x.xxxx.x Content-class: urn:content-classes:message Return-Receipt-To: "xxxxxxxxx xxxxxx" <xxxxxx.xxxxxxxxx(a)xxxxxxxxxxxx.xx> MIME-Version: x.x Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Disposition-Notification-To: "xxxxxxxxx xxxxxx" <xxxxxx.xxxxxxxxx(a)xxxxxxxxxxxx.xx> Subject: xxxxxxxxxxxxxxxx Date: Thu, 26 Jan 2006 15:28:52 +0100 Message-ID: <xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx(a)xxxxxxxx.xxxx.xxxxxx-xx.xxx> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: xxxxxxxxxxxxxxxx Thread-Index: xxxxxxxxxx+xxxxxxxxxxxxxxxxxxx== From: "xxxxxxxxx xxxxxx" <xxxxxx.xxxxxxxxx(a)xxxxxxxxxxxx.xx> To: "xx.xxx-x" <xxx-x(a)xxxxxxxxxxxx.xx>, "xx.xxx-x" <xxx-x(a)xxxxxxxxxxxx.xx>, "xx.xxx-x" <xxx-x(a)xxxxxxxxxxxx.xx> Cc: "xxxxxxxxxxx xxxxxxx" <xxxxxxx.xxxxxxxxxxx(a)xxxxxxxxxxxx.xx> X-OriginalArrivalTime: xx xxx xxxx xx:xx:xx.xxxx (xxx) xxxxxxxx=[xxxxxxxx:xxxxxxxx] X-Virus-Scanned: xx xxxxx xxxxxxxxxxx xxx xxxxxx. X-Virus-Scanned: xx xxxxxxx-xxx-xxxxxxxx-xxx (xxxxxx) xx xxxxxx.xx X-Bayesian-Result: xxxxx (x) X-Bayesian-Words: xxx x xxx x xxx x xxxxx x xxxxxx-xx x xxxxxxxx x xxxxxxx x xxx x xxxx x xxxxxx x xxx x xxxxxxxx x xxxx x xxxxxxxxx x xxxx x X-SpamPal: xxxx x-xxxxx xxxxx X-Wlist-Pattern: xxxxxx.xxxxxxxxx(a)xxxxxxxxxxxx.xx X-Evolution: xxxxxxxx-xxxx xxxx xxxxxxx xxxxx xxx xxxxxx! xxx xxxxxxx xx xxxxxxxxxx, xx xxx xxx xxx xxxxxxxxxxxxxx=xx xx xxx xxxxx xxxxx xxxxxxxx xxxxx=xxxx xxxxxxxxxxx xxxx, xx xx xxxxxx?=xx xxxx xx xxxxx xxxxxxxxx xx xxx xxxxx xxxx xxxxxxxx xxxxxxxxx xxxx. xxxxxxxx xxxx xxxxxxxxxxxxx xxx xxxxxxxx xxx xxxxxxxxxx xx xxx xxxxx. xx. xxxxxxxx xx. xxxxxxxxxxx xx. xxxxxxxxxxx xxxxxxxxx xx=xx=xxx xxxxxx xxxxxxxxx --=xx xxxxxx xxxxxx xxxx & xx xx xxxxxxxxxxxxxx xxx xxx xxxxxxxxxxxxxxxxx xxxxxxxxx xxxxxxx xx. xxxxx. xxxxxx xxxxxxxxx xxx.: ++xx x xxxx xxxxx xxx : ++xx x xxxx xxxxx =xx xxxx://xxx.xxxxxxxxxxxx.xx xxxxxxx xxxxxxxxxxxxx xxx xxxxxx: xxxx://xxxxxxxxxx.xxxxxx.xx.xx/xxx/xxxxxx.xxxx -- xxxx xx xxxxx xxxxxxx. xx xxxxxx xxxxxx xxx xxx xxxx xxxxxxx xxxxxx! = -- -- xx xxxxxxx xx xxx xxxxxx, xx xxxx xxxx xxxx x xxxxxx xxxxxxxx! = -- -- Return-path: <xxxxx(a)xxxxxxxxxxxx.xx> Envelope-to: xxxxx(a)xxxxxxxxx.xxxxxxxxxxxx.xx Delivery-date: xxx, xx xxx xxxx xx:xx:xx +xxxx Received: xxxx xxx.xxx.xxx.xxx.xxxxxxxx.xxx.xxxx.xxx ([xxx.xxx.xxx.xxx] xxxx=xxxxxxxxxxx) xx xxxxxxxxx.xxxxxxxxxxxx.xx xxxx xxxxxxx (xxxx.x:xxxxxxxxxxxxxxxxxxxxxxxxxxxx:xxx) (xxxx x.xx) (xxxxxxxx-xxxx <xxxxx(a)xxxxxxxxxxxx.xx>) xx xxxxxx-xxxxxx-xx xxx xxxxx(a)xxxxxxxxx.xxxxxxxxxxxx.xx; xxx, xx xxx xxxx xx:xx:xx +xxxx From: xxxxxxxxx xxxxxxx <xxxxx(a)xxxxxxxxxxxx.xx> To: =?xxx-x?x?xxxxxxxxxxxxxxxxxxxx?= <xxxxx(a)xxxxxxxxx.xxxxxxxxxxxx.xx> MIME-Version: x.x Content-Type: text/html; xxxxxxx="xxx-x" Content-Transfer-Encoding: 8bit Message-Id: <xxxxxxx-xxxxxx-xx(a)xxxxxxxxx.xxxxxxxxxxxx.xx> Date: Mon, 13 Nov 2017 09:52:46 +0100 X-SA-Exim-Connect-IP: xxx.xxx.xxx.xxx X-SA-Exim-Mail-From: xxxxx(a)xxxxxxxxxxxx.xx X-Spam-Checker-Version: xxxxxxxxxxxx x.x.x (xxxx-xx-xx) xx xxxxxxxxx X-Spam-Level: X-Spam-Status: xx, xxxxx=x.x xxxxxxxx=x.x xxxxx=xxxxxxxxxxx,xxxxxxxxxxxx, xxxxxxxxxxxxxxxxxxxxx,xxxxxxxxxxxxxx,xxxxxxxxxxx xxxxxxxxx=xx xxxxxxxxxxxxxxx=xx xxxxxxx=x.x.x Subject: =?xxx-x?x?xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx==?= X-SA-Exim-Version: x.x.x (xxxxx xxx, xx xxx xxxx xx:xx:xx +xxxx) X-SA-Exim-Scanned: xxx (xx xxxxxxxxx.xxxxxxxxxxxx.xx) xxxxx x-xxxx-xxxxxxxxx xxxxx xxx xxxxxxxxx xxxxxxx xxxxxxxxxxx xäxxxxx xxx xxxxxxx xxx xxxxxxxxxxxxxxxxxx xxxxxxxx.

4 3

[Mailbox aliases] Sponsoring of bug fixing
by azurit＠pobox.sk 18 Nov '17

18 Nov '17

Hi, how much would it cost to sponsor a complete* fix of mailbox aliases? https://www.dovecot.org/list/dovecot/2015-June/101176.html https://dovecot.org/list/dovecot/2016-September/105459.html * i.e. without any workarounds like disabling mailbox_list_index Thank you for info. azur

2 3

Auto-subscribe but not auto-create
by azurit＠pobox.sk 17 Nov '17

17 Nov '17

Hi, is it, somehow, possible to auto-subscribe a folder IF it exists but NOT auto-create it if it doesn't exists? We have folder 'Spam' which we are using to store messages marked as spam but users are not subscribing to it (most of them simply don't know what it means to subscribe a folder) and are complaining about missing e-mails (which are in 'Spam' folder but they don't see them). Even more, some users don't want from us to move spams into Spam folder so our sieve scripts are set to move spams into INBOX if 'Spam' folder doesn't exists (such users simply remove 'Spam' folder - this is why we don't want to auto-create it). Thanks.

2 2

Dovecot lmtp doesn't log
by Tomislav Perisic 17 Nov '17

17 Nov '17

Hi, We have 2 servers, server A and server B. Server A has: Postfix dovecot-2.2.33.2-1.el6.x86_64 Server B has: dovecot-2.2.33.2-1.el6.x86_64 dovecot-pigeonhole-2.2.33.2-1.el6.x86_64 Server A receives email on postfix, dovecot then takes that email from postfix and proxies it to Server B Dovecot. Dovecot on Server B takes the proxied email and delivers it with lmtp to the user inboxes. The problem is that the dovecot on server B Doesn't log anything regarding the emails that are being delivered to the mailbox via lmtp. Dovecot on server A logs everything perfectly regarding the proxy, so my assumption is that there is an issue with Dovecot lmtp logging. We changed the logging from syslog directly to a file and we noticed the same problem, missing log entries. We also tried turning on verbose logging and it didn't help. Server B: Red Hat 6.7 x86_64 rpm -qa | grep dove dovecot-2.2.33.2-1.el6.x86_64 dovecot-pigeonhole-2.2.33.2-1.el6.x86_64 doveconf -n # 2.2.33.2: /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.21 auth_cache_negative_ttl = 0 auth_debug = yes auth_debug_passwords = yes auth_verbose = yes listen = * mail_debug = yes mail_gid = mail mail_location = maildir:~/Maildir mail_plugins = " quota zlib" mail_uid = vmail managesieve_notify_capability = mailto namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Spam { auto = subscribe special_use = \Junk } mailbox Trash { auto = subscribe special_use = \Trash } mailbox Virus { auto = subscribe } plugin { quota = maildir:User quota sieve_extensions = +editheader sieve_max_actions = 32 sieve_max_redirects = 4 sieve_max_script_size = 1M sieve_quota_max_scripts = 0 sieve_trace_debug = yes sieve_trace_level = matching sieve_vacation_dont_check_recipient = yes sieve_vacation_send_from_recipient = yes sieve_vacation_use_original_recipient = yes zlib_save = gz zlib_save_level = 6 } protocols = imap pop3 lmtp sieve service auth { unix_listener auth-userdb { group = mail mode = 0666 user = vmail } } service lmtp { inet_listener lmtp { port = xx } } service managesieve-login { inet_listener sieve { port = xx } service_count = 1 } protocol lmtp { mail_plugins = " quota zlib sieve mail_log notify" } protocol imap { mail_plugins = " quota zlib imap_quota imap_zlib" } protocol sieve { managesieve_implementation_string = dovecot managesieve_logout_format = bytes ( in=%i : out=%o ) managesieve_max_line_length = 65536 managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave }

1 0

Re: Postlogin script
by Joseph Tam 16 Nov '17

16 Nov '17

"j.emerlik" <j.emerlik(a)gmail.com> writes: > I would like to prepare postlogin a script that allow imap connection to > roundcube for all but restrict imap access for selected users. "from" roundcube? > Is possible in condition IF use IP addresses as range or with mask (because > I've more than one web servers) ? Of course -- many ways to skin this cat. If you have only a handful of IPs case "$IP" in 12.34.56.78) exec "$@";; 23.45.67.89) exec "$@";; ... esac If you have CIDR that align neatly on octet boundaries case "$IP" in 12.34.56.*) exec "$@";; 23.45.67.*) exec "$@";; ... esac The toughest situation (using script techniques) is for CIDR ranges just shy of a full octet boundary e.g. /25. You can use "cut -d .", "IFS=." or "expr" to break the IP into octets, then test the components. e.g. 12.34.56.0/25 # Example 1 PART1=`echo $IP | cut -d. -f1,2,3` PART2=`echo $IP | cut -d. -f4` [ "$PART1" = "12.34.56" -a "$PART2" -ge 0 -a "$PART2" -le 127 ] && exec "$@" # Example 2 PART2=`expr "$IP" : '.*\.$[0-9]*$' expr "$IP" : "12.34.56." && [ "$PART2" -ge 0 -a "$PART2" -le 127 ] && exec "$@" # Example 3 (dodgy, I haven't fully thought this through) `echo "$IP" | { IFS=. read a b c PART2; [ "$a.$b.$c" = "12.34.56" -a "$PART2" -ge 0 -a "$PART2" -le 127 ] && echo "exec $@"; }` If you have a busy IMAP server, you'll probably want to use Aki's passdb solution instead, rather than incurring the execution overhead for each and every authentication. Joseph Tam <jtam.home(a)gmail.com>

4 5

Plugin virtual, Horde BAD IMAP QRESYNC not enabled
by Jakob Schürz 15 Nov '17

15 Nov '17

Hi there! I'm new on this list, so hello to all! First i want say, that dovecot is a really great mailserver. I use it since many years for my private usecase. I'm planning to setup a new Mailserver, so i'm fiddeling around to understand dovecot better and get a "perfect" Mailserver. (Linux and Win10) Outlook, k9mail and the gmail-app on android. I want to leave google behind me, so i'm searching for a good server for cloudbased and selfhosted calendar- and addressbook-server. On some discussion in debianforum.de i got the hint, to use horde. So i installed horde from pear. Got ActiveSync working with the Android and Outlook. Mails, Calendar and Addressbook... very fine. But then i run into a gotcha. There is a problem with some mails in dovecots virtual mailboxes. I tried a lot to find out, how to debug this. First i thought, it's a problem from horde, because the problem is only with horde-client. Some Emails are not shown in horde. Exactly, they are not shown in horde on dovecots virtual mailboxes (plugin virtual in a separate virtual namespace) If i try to open this email in its original directory, it gets opened without any problem. So, when i try to open it from within the virtual mailbox, i get this error: ---8<------ Nov 14 23:29:52 aldebaran dovecot[2495]: imap(jakob): Panic: file index-mail-binary.c: line 586 (index_mail_get_binary_stream): assertion failed: (mail->data.stream != NULL) Nov 14 23:29:52 aldebaran dovecot[2495]: imap(jakob): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x95272) [0x7f671137e272] -> /usr/lib/dovecot/libdovecot.so.0(+0x9536d) [0x7f671137e36d] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7f6711314951] -> /usr/lib/dovecot/libdovecot-storage.so.0(index_mail_get_binary_stream+0x238) [0x7f67116b3de8] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_get_binary_stream+0x60) [0x7f6711640fa0] -> /usr/lib/dovecot/libdovecot-storage.so.0(imap_msgpart_open+0x139) [0x7f67116f40f9] -> dovecot/imap [jakob 192.168.0.14 UID FETCH](+0x1ebbc) [0x55bef3095bbc] -> dovecot/imap [jakob 192.168.0.14 UID FETCH](+0x1cfb6) [0x55bef3093fb6] -> dovecot/imap [jakob 192.168.0.14 UID FETCH](imap_fetch_more+0x39) [0x55bef30950e9] -> dovecot/imap [jakob 192.168.0.14 UID FETCH](cmd_fetch+0x33b) [0x55bef3086d9b] -> dovecot/imap [jakob 192.168.0.14 UID FETCH](command_exec+0xa5) [0x55bef3092735] -> dovecot/imap [jakob 192.168.0.14 UID FETCH](+0x199c2) [0x55bef30909c2] -> dovecot/imap [jakob 192.168.0.14 UID FETCH](+0x19a4c) [0x55bef3090a4c] -> dovecot/imap [jakob 192.168.0.14 UID FETCH](client_handle_input+0x1b5) [0x55bef3090e55] -> dovecot/imap [jakob 192.168.0.14 UID FETCH](client_input+0x86) [0x55bef30913c6] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x52) [0x7f6711392dd2] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0x109) [0x7f6711394409] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0x3c) [0x7f6711392e6c] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x38) [0x7f6711393018] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f671131ae93] -> dovecot/imap [jakob 192.168.0.14 UID FETCH](main+0x328) [0x55bef3083e68] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf1) [0x7f6710f6a2b1] -> dovecot/imap [jakob 192.168.0.14 UID FETCH](_start+0x2a) [0x55bef3083fea] Nov 14 23:29:52 aldebaran dovecot[2495]: imap(jakob): Fatal: master: service(imap): child 2704 killed with signal 6 (core dumps disabled) ---8<------ So i activated rawlog as after-login executeable. The IMAP-dialog when opening this email is: ---8<------ 9 OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDSUBJECT MULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS BINARY MOVE XDOVECOT SPECIAL-USE QUOTA ACL RIGHTS=texk] Logged in 10 BAD Error in IMAP command SELECT: QRESYNC not enabled (0.000 + 0.000 secs). 11 OK No quota (0.000 + 0.000 secs). ---8<------ If found only one Report for this problem, but on regular imap-folders, and there was not really a solution. This report is from 2015. On regular folders, i have no problem with this emails, only on virtual folders. So i think, it is a problem of the virtual-plugin. Here is one of this failing emails: ---8<------ Return-path: <jakob(a)mydomain.example> Envelope-to: jakob(a)mydomain.example Delivery-date: Mon, 13 Nov 2017 09:23:52 +0100 Received: from 1.2.3.4.wireless.dyn.drei.com ([1.2.3.4] helo=marketingnh) by mydomain.example with esmtpsa (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.89) (envelope-from <jakob(a)mydomain2.example>) id 1eEA24-0002AR-IW for jakob(a)mydomain.example; Mon, 13 Nov 2017 09:23:52 +0100 From: Microsoft Outlook <jakob(a)mydomain.example> To: =?utf-8?B?SmFrb2J1cyBTY2jDvHJ6?= <jakob(a)mydomain.example> MIME-Version: 1.0 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: 8bit Message-Id: <E1eEA24-0002AR-IW(a)mydomain.example> Date: Mon, 13 Nov 2017 09:23:52 +0100 X-SA-Exim-Connect-IP: 178.114.188.235 X-SA-Exim-Mail-From: jakob(a)mydomain.example X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on aldebaran X-Spam-Level: X-Spam-Status: No, score=0.7 required=5.0 tests=ALL_TRUSTED,HTML_MESSAGE, HTML_MIME_NO_HTML_TAG,MIME_HTML_ONLY,TVD_RCVD_IP autolearn=no autolearn_force=no version=3.4.1 Subject: =?utf-8?B?TWljcm9zb2Z0IE91dGxvb2stVGVzdG5hY2hyaWNodA==?= X-SA-Exim-Version: 4.2.1 (built Tue, 02 Aug 2016 21:08:31 +0000) X-SA-Exim-Scanned: Yes (on aldebaran.mydomain.example) Diese E-Mail-Nachricht wurde von Microsoft Outlook automatisch wÃ¤hrend des Testens der Kontoeinstellungen gesendet. ---8<------ my dovecot-config is: ---8<------ # dovecot -n # 2.2.27 (c0f36b0): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.16 (fed8554) # OS: Linux 4.13.0-trunk-amd64 x86_64 Debian 9.1 btrfs auth_mechanisms = plain login cram-md5 digest-md5 auth_socket_path = /var/run/dovecot/auth-userdb first_valid_uid = 1000 imap_capability = +XDOVECOT imap_client_workarounds = tb-extra-mailbox-sep lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes listen = *, ::1 login_trusted_networks = 127.0.0.1/8 192.168.0.0/24 192.168.1.0/24 172.17.0.0/24 172.18.0.0/24 mail_debug = yes mail_gid = vmail mail_home = /var/mail/%u mail_location = maildir:/var/mail/%u/Maildir:LAYOUT=fs:INDEX=/var/lib/dovecot/db/indexes/Maildir/%u:CONTROL=/var/lib/dovecot/db/control/Maildir/%u mail_plugins = zlib quota acl listescape mail_log notify virtual mail_privileged_group = vmail mail_server_admin = mailto:jakob@xundeenergie.at mail_shared_explicit_inbox = yes mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext mmap_disable = yes namespace { hidden = no ignore_on_failure = no inbox = no list = children location = maildir:/var/mail/%%u/Maildir:LAYOUT=fs:INDEX=/var/lib/dovecot/db/indexes/%u/shared/%%u:INDEXPVT=/var/lib/dovecot/db/indexes/%u/shared/%%u prefix = shared$%%u$ separator = $ subscriptions = no type = shared } namespace { hidden = no inbox = no list = children location = maildir:/var/mail/mailarchiv/%u/:LAYOUT=fs:INDEX=/var/lib/dovecot/db/indexes/%u/mailarchiv:INDEXPVT=/var/lib/dovecot/db/indexes/%u/mailarchiv mailbox incoming { auto = create } mailbox outgoing { auto = create } prefix = Mailarchiv$ separator = $ subscriptions = no type = public } namespace { list = children location = maildir:/var/mail/public/:LAYOUT=fs:INDEX=/var/lib/dovecot/db/indexes/public/%u:INDEXPVT=/var/lib/dovecot/db/indexes/public/%u prefix = Roseggergasse$ separator = $ subscriptions = no type = public } namespace Virtual { hidden = no list = children location = virtual:/var/mail/virtual:INDEX=/var/lib/dovecot/db/indexes/virtual/%u:INDEXPVT=/var/lib/dovecot/db/indexes/virtual/%u mailbox "Deleted Messages" { auto = no special_use = \Trash } mailbox Drafts { auto = no special_use = \Drafts } mailbox Entwürfe { auto = no special_use = \Drafts } mailbox "Gelöschte Elemente" { auto = no special_use = \Trash } mailbox "Gelöschte Objekte" { auto = no special_use = \Trash } mailbox Gesendet { auto = no special_use = \Sent } mailbox "Gesendete Elemente" { auto = no special_use = \Sent } mailbox "Gesendete Objekte" { auto = no special_use = \Sent } mailbox Mistkübel { auto = no special_use = \Trash } mailbox Papierkorb { auto = no special_use = \Trash } mailbox Sent { auto = no special_use = \Sent } mailbox "Sent Messages" { auto = no special_use = \Sent } mailbox Trash { auto = no special_use = \Trash } mailbox Virtual$Alle { comment = All my messages } mailbox Virtual$Markierte { comment = All my unread messages } mailbox "Virtual$Neue Mails" { comment = All my unread messages } mailbox "Virtual$Ungelesene Mails" { comment = All my unread messages } prefix = Virtual$ separator = $ subscriptions = no } namespace inbox { hidden = no inbox = yes location = mailbox Archiv { auto = no special_use = \Archive } mailbox Archive { auto = no special_use = \Archive } mailbox Archives { auto = no special_use = \Archive } mailbox "Deleted Messages" { auto = no special_use = \Trash } mailbox Drafts { auto = no special_use = \Drafts } mailbox Entwürfe { auto = no special_use = \Drafts } mailbox "Gelöschte Elemente" { auto = no special_use = \Trash } mailbox "Gelöschte Objekte" { auto = no special_use = \Trash } mailbox Gesendet { auto = no special_use = \Sent } mailbox "Gesendete Elemente" { auto = no special_use = \Sent } mailbox "Gesendete Objekte" { auto = no special_use = \Sent } mailbox Important { auto = no } mailbox Junk { auto = subscribe autoexpunge = 30 days special_use = \Junk } mailbox Mistkübel { auto = no special_use = \Trash } mailbox Papierkorb { auto = no special_use = \Trash } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { auto = no special_use = \Sent } mailbox Spam { auto = no special_use = \Junk } mailbox Trash { auto = no special_use = \Trash } mailbox Wichtig { auto = create } prefix = INBOX$ separator = $ subscriptions = no } namespace subscriptions { hidden = yes list = no location = prefix = subscriptions = yes } passdb { args = scheme=CRYPT username_format=%u /etc/dovecot/users driver = passwd-file } plugin { acl = vfile:/etc/dovecot/dovecot-acl:cache_secs=300 acl_anyone = allow acl_shared_dict = file:/var/lib/dovecot/db/shared-mailboxes.db fts = lucene fts_autoindex = yes fts_autoindex_max_recent_msgs = 80 fts_decoder = decode2text.sh fts_index_timeout = 90 fts_lucene = whitespace_chars=@. normalize no_snowball mail_home = /var/mail/%u setting_name = sieve, managedsieve sieve = file:/var/spool/dovecot/sieve/%n;active=/var/spool/dovecot/sieve/%n/%n.sieve } postmaster_address = postmaster@localhost protocols = " imap lmtp sieve sieve" service anvil { unix_listener anvil-auth-penalty { mode = 00 } } service auth { unix_listener auth-client { group = vmail mode = 0666 user = vmail } unix_listener auth-userdb { group = vmail mode = 0666 user = vmail } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } process_min_avail = 1 } service imap { executable = imap postlogin process_limit = 1024 } service postlogin { executable = script-login -d rawlog } ssl = required ssl_cert = </etc/dovecot/dovecot.crt ssl_cipher_list = ALL:!ADH:!LOW:!SSLv2:!SSLv3:!EXP:!aNULL:+HIGH:+MEDIUM ssl_key = # hidden, use -P to show it ssl_protocols = TLSv1.2 TLSv1.1 TLSv1 !SSLv3 userdb { args = username_format=%u /etc/dovecot/users default_fields = home=/var/mail/%u driver = passwd-file } verbose_proctitle = yes protocol lmtp { mail_plugins = zlib quota acl listescape mail_log notify virtual quota sieve acl } protocol lda { mail_plugins = zlib quota acl listescape mail_log notify virtual quota sieve acl } protocol imap { mail_max_userip_connections = 10 mail_plugins = zlib quota acl listescape mail_log notify virtual imap_quota imap_acl } ---8<------ Hope you can help me. It's a certain showstopper for me... Greetings Jakob

3 7

Authenticate Postfix through Dovecot with slightly different LDAP settings
by Jakob Lenfers 15 Nov '17

15 Nov '17

Hi, I'm setting up a server with Dovecot (2.2.2) and Postfix (3.1.0). Dovecot authenticates against LDAP and Postfix uses Dovecots SASL. That already works fine. But I would like to have slightly different LDAP settings for Dovecot and Postfix. Current setup: passdb { driver = ldap args = /etc/dovecot/dovecot-ldap.conf.ext } userdb { driver = ldap args = /etc/dovecot/dovecot-ldap.conf.ext } Excerpt from dovecot-ldap.conf.ext: user_filter = (& \ (objectClass=gosaMailAccount) \ (allowedServices=*I*) \ (uid=%u) \ ) I wanted to have sparate LDAP filters (allowedServices=*I* for Dovecot and allowedServices=*S* for Postfix), to be able to disable SMTP and IMAP independently. Does anybody know a way to separate those settings? Thanks in advance, Jakob

2 2

dict host param and fqdn
by Stéphane Cottin 15 Nov '17

15 Nov '17

Hi, I would like to use a fqdn instead of an IP address as redis host quota_clone_dict = redis:host=redis.host.name:port=6379 But only ip adresses are supported Error: quota_clone_dict: Failed to initialize 'redis:host=redis.host.name:port=6379': dict redis: Invalid IP: redis.host.name Why is name resolution not implemented here ? Is it for performance considerations ? Stéphane

1 0

Building dovecot 2.2.33.2 is broken with uclibc-ng
by Bernd Kuhls 14 Nov '17

14 Nov '17

Hi, this commit https://github.com/dovecot/core/commit/c9d76e2baf653fa5504d6849e5c1aae32eff… added code which can not be compiled with uclibc-ng 1.0.26 using buildroot: make[3]: Entering directory '/home/bernd/buildroot/br4/output/build/dovecot-2.2.33.2/src/lib-test' /bin/bash ../../libtool --tag=CC --mode=compile /home/bernd/buildroot/br4/output/host/bin/i586-buildroot-linux-uclibc-gcc -DHAVE_CONFIG_H -I. -I../.. -I../../src/lib -I../../src/lib-charset -D_LARGEFILE_SOURCE -D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64 -std=gnu99 -D_LARGEFILE_SOURCE -D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64 -Os -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime -Wstrict-aliasing=2 -I/home/bernd/buildroot/br4/output/host/i586-buildroot-linux-uclibc/sysroot/usr/include -c -o test-common.lo test-common.c libtool: compile: /home/bernd/buildroot/br4/output/host/bin/i586-buildroot-linux-uclibc-gcc -DHAVE_CONFIG_H -I. -I../.. -I../../src/lib -I../../src/lib-charset -D_LARGEFILE_SOURCE -D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64 -std=gnu99 -D_LARGEFILE_SOURCE -D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64 -Os -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime -Wstrict-aliasing=2 -I/home/bernd/buildroot/br4/output/host/i586-buildroot-linux-uclibc/sysroot/usr/include -c test-common.c -fPIC -DPIC -o .libs/test-common.o In file included from /home/bernd/buildroot/br4/output/host/i586-buildroot-linux-uclibc/sysroot/usr/include/bits/byteswap-common.h:34:0, from /home/bernd/buildroot/br4/output/host/i586-buildroot-linux-uclibc/sysroot/usr/include/bits/byteswap.h:55, from /home/bernd/buildroot/br4/output/host/i586-buildroot-linux-uclibc/sysroot/usr/include/byteswap.h:22, from /home/bernd/buildroot/br4/output/host/i586-buildroot-linux-uclibc/sysroot/usr/include/endian.h:59, from /home/bernd/buildroot/br4/output/host/i586-buildroot-linux-uclibc/sysroot/usr/include/bits/waitstatus.h:72, from /home/bernd/buildroot/br4/output/host/i586-buildroot-linux-uclibc/sysroot/usr/include/stdlib.h:41, from ../../src/lib/lib.h:11, from test-common.c:3: ../../src/lib/byteorder.h:32:24: error: expected identifier or '(' before '__extension__' static inline uint16_t bswap_16(uint16_t in); ^ In file included from /home/bernd/buildroot/br4/output/host/i586-buildroot-linux-uclibc/sysroot/usr/include/endian.h:59:0, from /home/bernd/buildroot/br4/output/host/i586-buildroot-linux-uclibc/sysroot/usr/include/bits/waitstatus.h:72, from /home/bernd/buildroot/br4/output/host/i586-buildroot-linux-uclibc/sysroot/usr/include/stdlib.h:41, from ../../src/lib/lib.h:11, from test-common.c:3: ../../src/lib/byteorder.h:92:24: error: redefinition of '__bswap_64' static inline uint64_t bswap_64(uint64_t in) ^ In file included from /home/bernd/buildroot/br4/output/host/i586-buildroot-linux-uclibc/sysroot/usr/include/bits/byteswap.h:55:0, from /home/bernd/buildroot/br4/output/host/i586-buildroot-linux-uclibc/sysroot/usr/include/byteswap.h:22, from /home/bernd/buildroot/br4/output/host/i586-buildroot-linux-uclibc/sysroot/usr/include/endian.h:59, from /home/bernd/buildroot/br4/output/host/i586-buildroot-linux-uclibc/sysroot/usr/include/bits/waitstatus.h:72, from /home/bernd/buildroot/br4/output/host/i586-buildroot-linux-uclibc/sysroot/usr/include/stdlib.h:41, from ../../src/lib/lib.h:11, from test-common.c:3: /home/bernd/buildroot/br4/output/host/i586-buildroot-linux-uclibc/sysroot/usr/include/bits/byteswap-common.h:75:1: note: previous definition of '__bswap_64' was here __bswap_64 (__uint64_t __bsx) ^~~~~~~~~~ In file included from /home/bernd/buildroot/br4/output/host/i586-buildroot-linux-uclibc/sysroot/usr/include/endian.h:59:0, from /home/bernd/buildroot/br4/output/host/i586-buildroot-linux-uclibc/sysroot/usr/include/bits/waitstatus.h:72, from /home/bernd/buildroot/br4/output/host/i586-buildroot-linux-uclibc/sysroot/usr/include/stdlib.h:41, from ../../src/lib/lib.h:11, from test-common.c:3: ../../src/lib/byteorder.h:104:24: error: redefinition of '__bswap_32' static inline uint32_t bswap_32(uint32_t in) ^ In file included from /home/bernd/buildroot/br4/output/host/i586-buildroot-linux-uclibc/sysroot/usr/include/bits/byteswap.h:55:0, from /home/bernd/buildroot/br4/output/host/i586-buildroot-linux-uclibc/sysroot/usr/include/byteswap.h:22, from /home/bernd/buildroot/br4/output/host/i586-buildroot-linux-uclibc/sysroot/usr/include/endian.h:59, from /home/bernd/buildroot/br4/output/host/i586-buildroot-linux-uclibc/sysroot/usr/include/bits/waitstatus.h:72, from /home/bernd/buildroot/br4/output/host/i586-buildroot-linux-uclibc/sysroot/usr/include/stdlib.h:41, from ../../src/lib/lib.h:11, from test-common.c:3: /home/bernd/buildroot/br4/output/host/i586-buildroot-linux-uclibc/sysroot/usr/include/bits/byteswap-common.h:44:1: note: previous definition of '__bswap_32' was here __bswap_32 (unsigned int __bsx) ^~~~~~~~~~ In file included from /home/bernd/buildroot/br4/output/host/i586-buildroot-linux-uclibc/sysroot/usr/include/bits/byteswap-common.h:34:0, from /home/bernd/buildroot/br4/output/host/i586-buildroot-linux-uclibc/sysroot/usr/include/bits/byteswap.h:55, from /home/bernd/buildroot/br4/output/host/i586-buildroot-linux-uclibc/sysroot/usr/include/byteswap.h:22, from /home/bernd/buildroot/br4/output/host/i586-buildroot-linux-uclibc/sysroot/usr/include/endian.h:59, from /home/bernd/buildroot/br4/output/host/i586-buildroot-linux-uclibc/sysroot/usr/include/bits/waitstatus.h:72, from /home/bernd/buildroot/br4/output/host/i586-buildroot-linux-uclibc/sysroot/usr/include/stdlib.h:41, from ../../src/lib/lib.h:11, from test-common.c:3: ../../src/lib/byteorder.h:112:24: error: expected identifier or '(' before '__extension__' static inline uint16_t bswap_16(uint16_t in) ^ Makefile:491: recipe for target 'test-common.lo' failed To reproduce try something like this: $ git clone git://git.buildroot.net/buildroot $ cd buildroot $ echo "BR2_PACKAGE_DOVECOT=y" > dovecot.defconfig $ make defconfig BR2_DEFCONFIG=dovecot.defconfig Patch buildroot: diff --git a/package/dovecot/dovecot.hash b/package/dovecot/dovecot.hash index 184745b394..3dbc50739c 100644 --- a/package/dovecot/dovecot.hash +++ b/package/dovecot/dovecot.hash @@ -1,2 +1,2 @@ # Locally computed after checking signature -sha256 034be40907748128d65088a4f59789b2f99ae7b33a88974eae0b6a68ece376a1 dovecot-2.2.31.tar.gz +sha256 fe1e3b78609a56ee22fc209077e4b75348fa1bbd54c46f52bde2472a4c4cee84 dovecot-2.2.33.2.tar.gz diff --git a/package/dovecot/dovecot.mk b/package/dovecot/dovecot.mk index 4cc6ae4de7..25a78b9f78 100644 --- a/package/dovecot/dovecot.mk +++ b/package/dovecot/dovecot.mk @@ -5,7 +5,7 @@ ################################################################################ DOVECOT_VERSION_MAJOR = 2.2 -DOVECOT_VERSION = $(DOVECOT_VERSION_MAJOR).31 +DOVECOT_VERSION = $(DOVECOT_VERSION_MAJOR).33.2 DOVECOT_SITE = http://www.dovecot.org/releases/$(DOVECOT_VERSION_MAJOR) DOVECOT_INSTALL_STAGING = YES DOVECOT_LICENSE = LGPL-2.1 Start the build using "make dovecot" and get some coffee/tee ;) Regards, Bernd

2 3

Doubt about replacing alt storage disks
by Amol Kulkarni 14 Nov '17

14 Nov '17

Hello, I have a working setup of dovecot 2.2.19 on centos 6. The mailbox format is mdbox. I've configured primary and alt storage. Now I want to replace the disk of the alt storage only. Broadly my plan to change it is as follows : 1. Mount the new disk on a temporary server. 2. Rsync data only from alt storage to the new disk - while the original server is live. This may take a few days. In between altmove will happen on the live disk. 3. Once the basic rsync is complete, stop all services on the live server 4. Mount the new disk on live server, in addition to live disk 5. Do final rsync - with the delete option 6. Unmount the live disk and mount new disk in its place 7. Start services I've 2 doubts abt this plan : 1. I've tried the first part until step 2. After the first rsync, I found unexpected differences between the m.* files on the live and new disk. The new disk has some additional files for some users, which are not present on the live disk. Since the rsync was run without delete option, these files were not deleted from the new disk. Does altmove delete some m.* files to reorganize mail ? Can end user mail deletion cause deletion of m.* files ? 2. I'm worried about commonly occuring problems with such movement : duplicate mail download in pop / resync in imap / index corruption. Is there any way to check integrity of data before switching to the new disk ? Thanks in advance, Amol.

1 0

Re: IMAP connections with ".eml" in the username - bot attack.
by Joseph Tam 14 Nov '17

14 Nov '17

James Brown writes: > We are seeing lots of IMAP login attempts like this: > > dovecot[363]: imap-login: Disconnected (auth failed, 1 attempts in 6 secs): user=<xcentrex5fxnewx5fxyorkx5fxquotex5fxisx5fxreadyx2dxx2dx426453.eml>, method=PLAIN, rip=197.255.60.118, > dovecot[363]: imap-login: Disconnected (auth failed, 1 attempts in 6 secs): user=<xmatchingx5fxyourx5fxrecentx5fxvisitx5fxonx5fxx2dxx2dx121584.eml(a)bordo.com.au>, method=PLAIN, rip=37.235.28.229, > > etc. > Is anyone else experiencing this? How is such an attack is supposed to > ever succeed? What are they trying to accomplish? Haven't seen it. I agree with another poster -- probably a spammer screwed up their spamware configuration. > Any ideas on how to mitigate it? Mitigate what? Even by your account, this won't get them anywhere, unless it's so fast and heavy, it's DoS'ing your system. Other than that, they're just bloating your logs, nothing more. If you want to pre-empt this via firewall, you'll need to get extremely lucky to characterise these IPs (a sample of 2 is not enough) in such a way as to able to formulate a firewall rule. Mostly likely, this is a rented botnet. If you somehow figure out an oracular rule to discern bot from some user road-warrior *before* they connect, give me a call. Sean Greenslade <sean(a)seangreenslade.com> writes: > Here's a fun laugh I found in one of my webserver logs: > >> 1446098745 218.249.219.2 "GET http://www.sciencedirect.com/science/book/9780123525512" 400 425 "" "Mozilla/4.0 (compatible; MSIE 4.01; Windows 95)" > > Not my website, nothing even close to that url is hosted on that server. Common proxy target. They're testing whether your web server will support anonymous web proxying. Almost exclusively from China. Joseph Tam <jtam.home(a)gmail.com>

1 0

SMTP and IMAP authentication critically fails out of the blue
by Felix Plapper 14 Nov '17

14 Nov '17

Hello Community and first things First: dovecot --version2.2.9dovecot -n# 2.2.9: /etc/dovecot/dovecot.conf# OS: Linux 3.13.0-042stab125.5 x86_64 Ubuntu 14.04.5 LTSauth_mechanisms = plain logindict { sqlquota = mysql:/etc/dovecot/dovecot-dict-sql.conf}listen = *,[::]log_timestamp = "%Y-%m-%d %H:%M:%S "login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c %kmail_fsync = alwaysmail_home = /var/vmail/%d/%nmail_location = maildir:~/mail_nfs_index = yesmail_nfs_storage = yesmail_plugins = quota aclmanagesieve_notify_capability = mailtomanagesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihavemmap_disable = yesnamespace { list = yes location = maildir:%%h/:INDEXPVT=~/Shared/%%u prefix = Shared/%%u/ separator = / subscriptions = yes type = shared}namespace inbox { inbox = yes location = mailbox Archiv { special_use = \Archive } mailbox Archive { auto = subscribe special_use = \Archive } mailbox Archives { special_use = \Archive } mailbox "Deleted Messages" { special_use = \Trash } mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Entwürfe { special_use = \Drafts } mailbox "Gelöschte Objekte" { special_use = \Trash } mailbox Gesendet { special_use = \Sent } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Papierkorb { special_use = \Trash } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = separator = /}passdb { args = /etc/dovecot/dovecot-mysql.conf driver = sql}plugin { acl = vfile acl_anyone = allow acl_shared_dict = file:/var/vmail/shared-mailboxes.db quota = dict:User quota::proxy::sqlquota quota_rule2 = Trash:storage=+100%% sieve = /var/vmail/sieve/%u.sieve sieve_after = /var/vmail/sieve/global.sieve sieve_max_script_size = 1M sieve_quota_max_scripts = 0 sieve_quota_max_storage = 0}protocols = imap sieve lmtp pop3service auth { unix_listener /var/spool/postfix/private/auth_dovecot { group = postfix mode = 0660 user = postfix } unix_listener auth-master { mode = 0600 user = vmail } unix_listener auth-userdb { mode = 0600 user = vmail } user = root}service dict { unix_listener dict { group = vmail mode = 0660 user = vmail }}service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } user = vmail}service managesieve-login { inet_listener sieve { port = 4190 } process_min_avail = 2 service_count = 1 vsz_limit = 128 M}service managesieve { process_limit = 256}ssl_cert = </etc/ssl/mail/mail.crtssl_cipher_list = EDH+CAMELLIA:EDH+aRSA:EECDH+aRSA+AESGCM:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH:+CAMELLIA256:+AES256:+CAMELLIA128:+AES128:+SSLv3:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!DSS:!RC4:!SEED:!ECDSA:CAMELLIA256-SHA:AES256-SHA:CAMELLIA128-SHA:AES128-SHAssl_dh_parameters_length = 2048ssl_key = </etc/ssl/mail/mail.keyssl_protocols = !SSLv3 !SSLv2userdb { args = /etc/dovecot/dovecot-mysql.conf driver = sql}protocol imap { mail_plugins = quota imap_quota imap_acl acl}protocol lmtp { auth_socket_path = /var/run/dovecot/auth-master mail_plugins = quota sieve acl postmaster_address = postmaster(a)domain1.com}protocol sieve { managesieve_logout_format = bytes=%i/%o}remote 127.0.0.1 { disable_plaintext_auth = no}########################################### Mail.errNov 13 23:59:06 webdev dovecot: auth: Error: PLAIN(account(a)domain2.com, XXX.XXX.XXX.XXX,<y869CoDETEST4dHk>): Request 29154.1 timed out after 150 secs, state=1########################################### Mail.logNov 13 23:27:54 webdev dovecot: auth: Error: LOGIN(account(a)domain1.com,IP.IP.IP.IP,<oN4ly+TestDZ6dHk>): Request 28118.1 timed out after 150 secs, state=1Nov 13 23:27:57 webdev dovecot: auth: Error: PLAIN( account(a)domain2.com,XXX.XXX.XXX.XXX,<FAxKe+JaatES7tHk>): Request 28120.1 timed out after 150 secs, state=1Nov 13 23:28:24 webdev dovecot: imap-login: Disconnected: Inactivity during authentication (disconnected while authenticating, waited 180 secs): user=<>, method=LOGIN, rip=ClientIP, lip=ServerIP, TLS: Disconnected, TLSv1.2 with cipher DHE-RSA-AES128-GCM-SHA256 (128/128 bits) [...]Nov 13 23:47:15 webdev dovecot: imap-login: Aborted login (no auth attempts in 0 secs): user=<>, rip=84.119.151.17, lip=62.75.185.32########################################### I did not change anything on my client nor serverside setup and i suddenly could not reach the Mailserver anymore. Obviously I can reach the Server using SSH or HTTP. I hope I provided all infos you need to help me in this situation. And am grateful for every hint to solve this Note: Older mailinglist threads did not help because a link which solved a similar case is not available anymore.plus I tried to make the given pieces of information structured using styles. Maybe it gets delivered,displayed and enhances the ease of reading.

2 1

Carbon_name path hardcoded
by Giordano Fechio (Giu) 13 Nov '17

13 Nov '17

Hello, I am setting up the imap_stats for dovecot and stumb up on a problem with carbon_name setup. const char *prefix = t_strdup_printf("dovecot.%s.global”, But I need to setup the path myself so my index cam be compliant to the index I already have. Wonder if changing it to something like the following so other users have a way to configure their own path or use the default in case they don’t want to worry about that. string_t *str = t_str_new(256); - const char *prefix = t_strdup_printf("dovecot.%s.global", + if ( strstr(carbon_name , "." != NULL) { + const char *prefix = t_strdup_printf("", stats_settings->carbon_name); + } else { + const char *prefix = t_strdup_printf("dovecot.%s.global", + stats_settings->carbon_name); + } If that is not the goal or if I am not using it right , let me know. Bests, G Fechio

1 0

ACL on shared folder
by T.Robers＠smtp.tutech.de 13 Nov '17

13 Nov '17

Hello everybody, we're using shared mailboxes as an archive to which everyone has full rights, set with doveadm. The rights look like this: doveadm acl get -u bob(a)example.com shared/archive(a)example.com ID Global Rights user=bob(a)example.com admin create delete expunge insert lookup \ post read write write-deleted write-seen Looking at this i would this i would think i should be able to move an existing folder to shared/archive(a)example.com. But i get a "permission denied". A rawlog session from trying to copy looks like this: 1 OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDSUBJECT MULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS BINARY MOVE NOTIFY ACL RIGHTS=texk] Logged in * ID ("name" "Dovecot") 2 OK ID completed (0.001 + 0.000 secs). * FLAGS (\Answered \Flagged \Deleted \Seen \Draft) * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft \*)] Flags permitted. * 0 EXISTS * 0 RECENT * OK [UIDVALIDITY 1510573115] UIDs valid * OK [UIDNEXT 1] Predicted next UID 3 OK [READ-WRITE] Select completed (0.005 + 0.000 + 0.004 secs). * MYRIGHTS shared/archive(a)example.com/IT-Sachen/blablub lrwstipekxacd 4 OK Myrights completed (0.001 + 0.000 secs). + idling * OK Still here 5 OK Idle completed (4.007 + 4.006 + 4.006 secs). 6 OK NOOP completed (0.001 + 0.000 secs). + idling 7 OK Idle completed (42.014 + 42.013 + 42.013 secs). 8 OK List completed (0.015 + 0.000 + 0.014 secs). 9 OK Close completed (0.001 + 0.000 secs). 10 NO [NOPERM] Permission denied (0.005 + 0.000 + 0.004 secs). I don't understand why there's a permission denied because doveadm tells something else. The shared mailbox folder ist the inbox of the account archive(a)example.com What has to be changed that it's possible to save messages or to create folders in resp. under a shared inbox, or is this not possible? Any suggestion is welcome. Tia Thomas My configuration: # 2.2.33.2 (d6601f4ec): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.21 (92477967) # OS: Linux 2.6.32-696.13.2.el6.x86_64 x86_64 CentOS release 6.9 (Final) ext4 auth_debug = yes auth_debug_passwords = yes auth_master_user_separator = * auth_mechanisms = plain login auth_verbose = yes disable_plaintext_auth = no doveadm_password = # hidden, use -P to show it doveadm_port = 12345 imap_max_line_length = 2 M mail_debug = yes mail_location = maildir:/export/home/imap/%Lu/Maildir mail_plugins = acl mail_log notify mailbox_idle_check_interval = 10 secs mailbox_list_index = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext namespace { hidden = no ignore_on_failure = no inbox = no list = children location = maildir:%%h/Maildir:INDEXPVT=%h/shared/%%u prefix = shared/%%u/ separator = / subscriptions = yes type = shared } namespace inbox { hidden = no inbox = yes list = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = INBOX/ separator = / type = private } passdb { args = /etc/dovecot/master-users driver = passwd-file master = yes } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { acl = vfile:/etc/dovecot/global-acls:cache_secs=300 acl_shared_dict = file:/export/home/shared-db/shared-mailboxes mail_log_events = append delete undelete expunge copy mailbox_delete mailbox_rename flag_change mail_log_fields = uid box msgid size from flags mail_replica = tcp:mail2.example.com sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_global = /var/lib/dovecot/sieve/global/ sieve_user_log = ~/.dovecot.sieve.log } protocols = imap pop3 lmtp sieve service aggregator { fifo_listener replication-notify-fifo { mode = 0666 user = vmail } unix_listener replication-notify { mode = 0666 user = vmail } } service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } unix_listener auth-userdb { group = vmail mode = 0660 user = vmail } } service config { unix_listener config { user = vmail } } service doveadm { inet_listener { port = 12345 } user = vmail } service imap-login { inet_listener imaps { port = 993 ssl = yes } process_limit = 500 process_min_avail = 20 } service imap { executable = imap postlogin } service lmtp { inet_listener lmtp { address = 127.0.0.1 port = 24 } } service managesieve-login { inet_listener sieve { port = 4190 } inet_listener sieve_deprecated { port = 2000 } } } service pop3-login { inet_listener pop3s { port = 995 ssl = yes } } service pop3 { executable = pop3 postlogin } service postlogin { executable = script-login -d rawlog } service replicator { unix_listener replicator-doveadm { mode = 0666 } } ssl = required ssl_cert = </etc/pki/dovecot/certs/mail2.example.com.crt_chain ssl_cipher_list = ALL:!LOW:!SSLv2:!EXP:!aNULL:!EXPORT ssl_key = # hidden, use -P to show it ssl_protocols = !SSLv3 !SSLv2 syslog_facility = local6 userdb { args = /etc/dovecot/dovecot-ldap-userdb.conf.ext driver = ldap } protocol lmtp { mail_plugins = acl mail_log notify sieve } protocol imap { mail_max_userip_connections = 100 mail_plugins = acl mail_log notify imap_acl rawlog_dir = /tmp/rawlog/%u }

1 0

rawlog segfaults (error 4 in libdovecot.so.0.0.0)
by T. Robers 13 Nov '17

13 Nov '17

Hello everybody, i tried to debug imap sessions with the rawlog feature and rawlog creates files but when i try to dump them doveadm tells me [...] Error: zlib.read((file)): unexpected EOF at [...]. I looked at syslog files and i see, that rawlog gets terminated with a segfault, e.g.: segfault at 10 ip 00007ff6da362596 sp 00007fffe725a080 error 4 in libdovecot.so.0.0.0[7ff6da2a4000+122000] Is there a way to debug why rawlog ist terminated? I haven't found anything.I would be very thankful, if somebody could give a hint. My system is: # 2.2.33.2 (d6601f4ec): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.21 (92477967) # OS: Linux 2.6.32-696.3.1.el6.x86_64 x86_64 CentOS release 6.9 (Final) ext4 auth_debug = yes auth_debug_passwords = yes auth_master_user_separator = * auth_mechanisms = plain login auth_verbose = yes disable_plaintext_auth = no imap_max_line_length = 2 M mail_debug = yes mail_location = maildir:/export/home/imap/%Lu/Maildir mail_plugins = acl zlib mail_log notify mailbox_idle_check_interval = 10 secs mailbox_list_index = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext namespace { hidden = no ignore_on_failure = no inbox = no list = children location = maildir:%%h/Maildir:INDEXPVT=%h/shared/%%u prefix = shared/%%u/ separator = / subscriptions = yes type = shared } namespace inbox { hidden = no inbox = yes list = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = INBOX/ separator = / type = private } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { acl = vfile:/etc/dovecot/global-acls:cache_secs=300 acl_shared_dict = file:/export/home/shared-db/shared-mailboxes mail_log_events = append delete undelete expunge copy mailbox_delete mailbox_rename flag_change mail_log_fields = uid box msgid size from flags sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_global = /var/lib/dovecot/sieve/global/ sieve_user_log = ~/.dovecot.sieve.log zlib_save = gz zlib_save_level = 6 } protocols = imap pop3 lmtp sieve service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } unix_listener auth-userdb { group = vmail mode = 0660 user = vmail } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } process_limit = 500 process_min_avail = 20 } service imap { executable = imap postlogin } service lmtp { inet_listener lmtp { address = 127.0.0.1 port = 24 } } service managesieve-login { inet_listener sieve { port = 4190 } inet_listener sieve_deprecated { port = 2000 } } service pop3-login { inet_listener pop3s { port = 995 ssl = yes } } service pop3 { executable = pop3 postlogin } service postlogin { executable = script-login -d rawlog -f in } ssl = required ssl_cert = </etc/pki/dovecot/certs/mail.tutech.de.crt_chain ssl_cipher_list = ALL:!LOW:!SSLv2:!EXP:!aNULL:!EXPORT ssl_key = # hidden, use -P to show it ssl_protocols = !SSLv3 !SSLv2 syslog_facility = local6 userdb { args = /etc/dovecot/dovecot-ldap-userdb.conf.ext driver = ldap } protocol lmtp { mail_plugins = acl zlib mail_log notify sieve } protocol imap { mail_max_userip_connections = 100 mail_plugins = acl zlib mail_log notify imap_zlib imap_acl rawlog_dir = /tmp/rawlog/%u } Tia Thomas

4 3

imap coredump after doveadm altmove
by Frank Koch 13 Nov '17

13 Nov '17

Hello, i tried to move mails to an alt storage with the following command: doveadm altmove -u user(a)domain.de mailbox Inbox After that, the imap process produces a core dump (files has not been moved): Maillog: dovecot: imap-login: Login: user=<user(a)domain.de>, method=PLAIN, rip=X.X.X.X, lip=X.X.X.X, mpid=5393, TLS, session=<83JiHqNdTwCsEAIf> dovecot: imap(user(a)domain.de): Fatal: master: service(imap): child 5393 killed with signal 11 (core dumped) Version: Dovecot 2.2.18.2 OS: CenotOS6 2.6.32-696.10.2.el6.x86_64 local storage (ext4) #gdb --args /usr/libexec/dovecot/imap -u user(a)domain.de A1 STATUS INBOX (MESSAGES) Program received signal SIGSEGV, Segmentation fault. 0x00007ffff74b3c9a in __strrchr_sse2 () from /lib64/libc.so.6 (gdb) bt full #0 0x00007ffff74b3c9a in __strrchr_sse2 () from /lib64/libc.so.6 No symbol table info available. #1 0x00007ffff7b148cd in sdbox_file_move () from /usr/lib64/dovecot/libdovecot-storage.so.0 No symbol table info available. #2 0x00007ffff7b18284 in sdbox_sync_begin () from /usr/lib64/dovecot/libdovecot-storage.so.0 No symbol table info available. #3 0x00007ffff7b18382 in sdbox_sync () from /usr/lib64/dovecot/libdovecot-storage.so.0 No symbol table info available. #4 0x00007ffff7b18437 in sdbox_storage_sync_init () from /usr/lib64/dovecot/libdovecot-storage.so.0 No symbol table info available. #5 0x00007ffff7af64b3 in mailbox_sync_init () from /usr/lib64/dovecot/libdovecot-storage.so.0 No symbol table info available. #6 0x00007ffff7af7d27 in mailbox_sync () from /usr/lib64/dovecot/libdovecot-storage.so.0 No symbol table info available. #7 0x00007ffff7b62af2 in index_storage_get_status () from /usr/lib64/dovecot/libdovecot-storage.so.0 No symbol table info available. #8 0x00007ffff67eb32c in ?? () from /usr/lib64/dovecot/lib10_quota_plugin.so No symbol table info available. #9 0x00007ffff6c021e4 in ?? () from /usr/lib64/dovecot/lib01_acl_plugin.so No symbol table info available. #10 0x00007ffff7af8931 in mailbox_get_status () from /usr/lib64/dovecot/libdovecot-storage.so.0 No symbol table info available. #11 0x000000000041e07a in imap_status_get () No symbol table info available. #12 0x0000000000413629 in cmd_status () No symbol table info available. #13 0x00000000004178ed in command_exec () No symbol table info available. #14 0x00000000004168d0 in ?? () No symbol table info available. #15 0x0000000000416966 in ?? () No symbol table info available. #16 0x0000000000416c5d in client_handle_input () No symbol table info available. #17 0x0000000000416fdf in client_input () No symbol table info available. #18 0x00007ffff7852fbb in io_loop_call_io () from /usr/lib64/dovecot/libdovecot.so.0 No symbol table info available. #19 0x00007ffff785418f in io_loop_handler_run_internal () from /usr/lib64/dovecot/libdovecot.so.0 No symbol table info available. #20 0x00007ffff7853049 in io_loop_handler_run () from /usr/lib64/dovecot/libdovecot.so.0 No symbol table info available. #21 0x00007ffff78530c8 in io_loop_run () from /usr/lib64/dovecot/libdovecot.so.0 No symbol table info available. #22 0x00007ffff77f2043 in master_service_run () from /usr/lib64/dovecot/libdovecot.so.0 No symbol table info available. #23 0x00000000004206c1 in main () No symbol table info available. This is only on folders i have tried to move. best regards, Frank Koch --

1 0

IMAP connections with ".eml" in the username - bot attack.
by James Brown 13 Nov '17

13 Nov '17

We are seeing lots of IMAP login attempts like this: dovecot[363]: imap-login: Disconnected (auth failed, 1 attempts in 6 secs): user=<xcentrex5fxnewx5fxyorkx5fxquotex5fxisx5fxreadyx2dxx2dx426453.eml>, method=PLAIN, rip=197.255.60.118, or dovecot[363]: imap-login: Disconnected (auth failed, 1 attempts in 6 secs): user=<xmatchingx5fxyourx5fxrecentx5fxvisitx5fxonx5fxx2dxx2dx121584.eml(a)bordo.com.au>, method=PLAIN, rip=37.235.28.229, etc. We are running fail2ban, but as each login attempt is from a different IP it is not able to stop them. We are running Sophos UTM firewall but that has no IMAP Proxy and never will. Is anyone else experiencing this? How is such an attack is supposed to ever succeed? What are they trying to accomplish? Any ideas on how to mitigate it? Thanks, James.

3 3

Doveadm: Skipping module doveadm_mail_crypt_plugin loading
by vkosharskiy＠gmail.com 10 Nov '17

10 Nov '17

# dovecot --version Doveadm unable to load plugin bacause plugin doveadm_mail_crypt_plugin.so not compiled with function mail_crypt_box_get_pvt_digests, who defned in mail-crypt-key.c Fix for these problem: dovecot_doveadm_mail_crypt_fix.diff: --- src/plugins/mail-crypt/Makefile.am.old 2017-11-10 19:51:18.155088706 +0200 +++ src/plugins/mail-crypt/Makefile.am 2017-11-10 20:06:30.557814167 +0200 @@ -70,7 +70,8 @@ libfs_mail_crypt_la_LDFLAGS = -module -avoid-version libdoveadm_mail_crypt_plugin_la_SOURCES = \ - doveadm-mail-crypt.c + doveadm-mail-crypt.c \ + mail-crypt-key.c libdoveadm_mail_crypt_plugin_la_LIBADD = $(LIBDOVECOT) libdoveadm_mail_crypt_plugin_la_DEPENDENCIES = $(LIBDOVECOT_DEPS) libdoveadm_mail_crypt_plugin_la_LDFLAGS = -module -avoid-version # doveadm -D sis _*Debug: Skipping module doveadm_mail_crypt_plugin, because dlopen() failed: /usr/lib64/dovecot/doveadm/libdoveadm_mail_crypt_plugin.so: undefined symbol: mail_crypt_box_get_pvt_digests (this is usually intentional, so just ignore this message) *_ After compile: # doveadm -D sis

1 0

Replication oddities - different sizes between replicated nodes
by Remko Lodder 10 Nov '17

10 Nov '17

Dear Dovecot community, As discussing on IRC with Aki, I have the following thing happening: I got an alert from my mailservice last night that I was running over quota. My quota reached almost 91% (coming from 30%) in one day. I do not recall receiving so much email (we talk about multiple gb’s additional space usage), so something was acting up. When I logged into my mailservers (I’ll describe my setup later on), it mentioned that my FreeBSD mailbox was reaching 12gb of space usage. While the seeming replicated machine (named A) only had 100mb of space in use (which, with the amount of messages in the various mailboxes is consistent with what I would expect). I found out that the “Junk” mailbox was the ‘major' issue. I vaporized the replicated (12GB) mailbox and issued a ‘doveadm sync -u $user -N -U tcps:hostB` so that I would expect the hostB to reach around 100mb-ish of email. I let it go for a little and saw that the mail was done. When I issued a simple ‘df -h’ on the directory, it was already multiple 100mb’s large and growing. It grew back to multiple GB in little time. Again the Junk mailbox was the culprit. In the mean time I noticed my mailclient downloading 44k mails in that mailbox (where there were only a few in the Junk mailbox normally). I again vaporized the entire mailbox on hostB and cleaned out Junk and issued a manual synchronisation. It again grew quickly. Aki did an investigation with me and noticed that my rspamc script was not very well written. I rewrote it as suggested (As written on the site). This morning I continued with the investigation and it was again large on hostB where it was still 100mb-ish on hostA. I vaporized host B again and issued the manual sync with -Dv included per request of Aki. After letting it run for a little hostA grew to 300mb and hostB restarted to reach 1.2GB and remained static there. After half an hour or so the mailbox on hostA grew to 900mb and stayed there. I investigated the mailboxes and saw 8 times the same email. Cleaning them up with doveadm deduplicate -u $user mailbox ‘*’ made sure a lot of email was cut from both hosts. I am now in the state where: hostA: 268MB hostB: 579MB Both are for the same mailbox (I suspect that other mailboxes have similiar issues). When I look at the amount of messages counted by Apple Mail in the particular mailbox I see 1399 emails. The amount of ‘u’ files is 14722 on hostA and 23590 on hostB. I do not understand the difference from my mail client and the amount of u files. from mutt: Mutt: =mailbox [Msgs:1415 New:1 Flag:1 24M]-, which is roughly the same as Apple mail reports. I am a bit lost on where to look next, I would suspect that the synchronised mailboxes would be similar in size, but not the one 2 as large, or before that it grew and grew and grew. My personal feeling is that the sync takes place, but somehow it is not registering that a message had been synchronised and does that again, and again, and again till the message gets synchronised right and the acknowledge is received and it stays the same. That would at least support the 8times the same email that I saw at first and might also support the roughly double as big size of the other host (one sync goes wrong, the next sync went right and got acked). At the bottom I also referenced two previous emails of mine which report similar oddities. Messages that were removed on hostA got back within seconds as “new message” . My feeling there is that the hostB has the ‘failed sync copy with a different uid/guid’ and tells hostA that there is a new message and sends it over. My doveconf -n for hostA (hostB follows), I did sanitize a bit wrt. IP addresses and hostnames: 2.2.33.2 (d6601f4ec): /usr/local/etc/dovecot/dovecot.conf # Pigeonhole version 0.4.21 (92477967) # OS: FreeBSD 11.1-RELEASE amd64 auth_mechanisms = plain login disable_plaintext_auth = no doveadm_password = # hidden, use -P to show it lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes lmtp_save_to_detail_mailbox = yes login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c %k mail_debug = yes mail_fsync = always mail_location = sdbox:~/sdbox mail_plugins = " quota notify replication" managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext imapsieve vnd.dovecot.imapsieve namespace { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Spam { auto = subscribe special_use = \Junk } mailbox Trash { auto = subscribe special_use = \Trash } prefix = separator = . } passdb { driver = pam } plugin { imapsieve_mailbox1_before = file:/usr/local/lib/dovecot/sieve/report-spam.sieve imapsieve_mailbox1_causes = COPY imapsieve_mailbox1_name = Spam imapsieve_mailbox2_before = file:/usr/local/lib/dovecot/sieve/report-ham.sieve imapsieve_mailbox2_causes = COPY imapsieve_mailbox2_from = Spam imapsieve_mailbox2_name = * mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size mail_replica = tcps:hostB:12346 sieve = ~/.dovecot.sieve sieve_after = /usr/local/etc/dovecot/sieve/after/ sieve_before = /usr/local/etc/dovecot/sieve/global/ sieve_dir = ~/sieve sieve_execute_bin_dir = /usr/local/lib/dovecot/sieve sieve_global = /usr/local/etc/dovecot/sieve/global/ sieve_global_extensions = +vnd.dovecot.pipe +vnd.dovecot.execute sieve_global_path = /usr/local/etc/dovecot/sieve/global/dovecot.sieve sieve_pipe_bin_dir = /usr/local/lib/dovecot/sieve sieve_plugins = sieve_imapsieve sieve_extprograms sieve_vacation_dont_check_recipient = yes } postmaster_address = postmaster@isp protocols = imap pop3 lmtp sieve service aggregator { fifo_listener replication-notify-fifo { mode = 0666 } unix_listener replication-notify { mode = 0666 } } service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } } service doveadm { inet_listener { port = 12346 ssl = yes } } service imap-login { service_count = 1 } service imap { process_limit = 1024 } service lmtp { inet_listener lmtp { address = external ipv4 and ipv6 127.0.0.1 ::1 port = 24 } unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } service pop3 { process_limit = 1024 } service replicator { process_min_avail = 1 unix_listener replicator-doveadm { mode = 0666 } } ssl_ca = </usr/local/etc/dehydrated/certs/hostA/fullchain.pem ssl_cert = </usr/local/etc/dehydrated/certs/hostA/cert.pem ssl_client_ca_file = /usr/local/certificates/letsencrypt-ca.pem ssl_dh_parameters_length = 2048 ssl_key = # hidden, use -P to show it ssl_protocols = !SSLv2 !SSLv3 TLSv1 TLSv1.1 TLSv1.2 userdb { driver = passwd } verbose_proctitle = yes protocol lmtp { auth_username_format = %n mail_fsync = optimized mail_plugins = " quota notify replication sieve" postmaster_address = postmaster@isp } protocol lda { mail_plugins = " quota notify replication sieve" } protocol imap { imap_client_workarounds = delay-newmail mail_max_userip_connections = 50 mail_plugins = " quota notify replication imap_quota imap_sieve" } for hostB: # 2.2.33.2 (d6601f4ec): /usr/local/etc/dovecot/dovecot.conf # Pigeonhole version 0.4.21 (92477967) # OS: FreeBSD 11.1-RELEASE-p1 amd64 auth_mechanisms = plain login disable_plaintext_auth = no doveadm_password = # hidden, use -P to show it lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes lmtp_save_to_detail_mailbox = yes login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c %k mail_debug = yes mail_fsync = always mail_location = sdbox:~/sdbox mail_plugins = " quota notify replication" managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext imapsieve vnd.dovecot.imapsieve namespace { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Spam { auto = subscribe special_use = \Junk } mailbox Trash { auto = subscribe special_use = \Trash } prefix = separator = . } passdb { driver = pam } plugin { imapsieve_mailbox1_before = file:/usr/local/lib/dovecot/sieve/report-spam.sieve imapsieve_mailbox1_causes = COPY imapsieve_mailbox1_name = Spam imapsieve_mailbox2_before = file:/usr/local/lib/dovecot/sieve/report-ham.sieve imapsieve_mailbox2_causes = COPY imapsieve_mailbox2_from = Spam imapsieve_mailbox2_name = * mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size mail_replica = tcps:hostA:12346 sieve = ~/.dovecot.sieve sieve_after = /usr/local/etc/dovecot/sieve/after/ sieve_before = /usr/local/etc/dovecot/sieve/global/ sieve_dir = ~/sieve sieve_execute_bin_dir = /usr/local/lib/dovecot/sieve sieve_global = /usr/local/etc/dovecot/sieve/global/ sieve_global_extensions = +vnd.dovecot.pipe +vnd.dovecot.execute sieve_global_path = /usr/local/etc/dovecot/sieve/global/dovecot.sieve sieve_pipe_bin_dir = /usr/local/lib/dovecot/sieve sieve_plugins = sieve_imapsieve sieve_extprograms sieve_vacation_dont_check_recipient = yes } postmaster_address = postmaster@isp protocols = imap pop3 lmtp sieve service aggregator { fifo_listener replication-notify-fifo { mode = 0666 } unix_listener replication-notify { mode = 0666 } } service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } } service doveadm { inet_listener { port = 12346 ssl = yes } } service imap-login { service_count = 1 } service imap { process_limit = 1024 } service lmtp { inet_listener lmtp { address = ipv4 and ipv6 address 127.0.0.1 ::1 port = 24 } unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } service pop3 { process_limit = 1024 } service replicator { process_min_avail = 1 unix_listener replicator-doveadm { mode = 0666 } } ssl_ca = </usr/local/etc/dehydrated/certs/hostA/fullchain.pem ssl_cert = </usr/local/etc/dehydrated/certs/hostA/cert.pem ssl_client_ca_file = /usr/local/certificates/letsencrypt-ca.pem ssl_dh_parameters_length = 2048 ssl_key = # hidden, use -P to show it ssl_protocols = !SSLv2 !SSLv3 TLSv1 TLSv1.1 TLSv1.2 userdb { driver = passwd } verbose_proctitle = yes protocol lmtp { auth_username_format = %n mail_fsync = optimized mail_plugins = " quota notify replication sieve" postmaster_address = postmaster@isp } protocol lda { mail_plugins = " quota notify replication sieve" } protocol imap { imap_client_workarounds = delay-newmail mail_max_userip_connections = 50 mail_plugins = " quota notify replication imap_quota imap_sieve” } Both machines run FreeBSD, with a ZFS backend. HostB has quota’s on the zfs shares but none of them are full or almost full and have plenty of space left on their directories (so there is no quota or disk full issue there) Mail is arriving on both hosts by upstream MX’es. Most of my users use hostB as their main host. I use hostA as my primary host. Both machines are located at Hetzner in Germany. HostA is in DC6 and HostB is in DC12. Not situated next to eachother but low latency links between them. Both machines are connected to gbit uplinks and are not very highly loaded. The machines consist of 2x2TB disk (mirrored with ZFS) and 8cores, 32GB RAM. There were warnings when manually doing the sync that the mailbox changed in between and should be reissued, after which the mailboxes kept growing. Previously I reported two messages here which might be the foundation of the same issue: https://dovecot.org/list/dovecot/2016-July/104873.html and https://www.dovecot.org/list/dovecot/2017-March/107459.html

1 0

Sieve global path?
by Gao 10 Nov '17

10 Nov '17

Hello, I am building a new server on CentOS 7 and the global sieve filter can not be loaded. The debug shows: Nov 9 15:23:09 mail dovecot: lmtp(11182, gao(a)mydomain.com) Debug: sieve: Pigeonhole version 0.4.2 initializing Nov 9 15:23:09 mail dovecot: lmtp(11182, gao(a)mydomain.com) Debug: sieve: include: sieve_global_dir is not set; it is currently not possible to include `:global' scripts. The pigeonhole version: # yum list dovecot-pigeonhole dovecot-pigeonhole.x86_64 1:2.2.10-8.el7 I googled and got confused on how to make sieve point to the correct global filter (which I want auto deliver spams to Junk folder). So what is the correct setting? Thanks in advance. Gao Here is my doveconf -n output: ----------------------------------------------------------- [root@mail ~]# doveconf -n # 2.2.10: /etc/dovecot/dovecot.conf # OS: Linux 3.10.0-693.5.2.el7.x86_64 x86_64 CentOS Linux release 7.4.1708 (Core) xfs auth_mechanisms = plain login cram-md5 first_valid_gid = 5000 first_valid_uid = 5000 last_valid_gid = 5000 last_valid_uid = 5000 listen = * mail_debug = yes mail_gid = 5000 mail_location = maildir:/home/vmail/%d/%n/:INDEX=/home/vmail/%d/%n/indexes mail_plugins = " quota" mail_uid = 5000 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave mbox_write_locks = fcntl namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = } passdb { args = /etc/dovecot/conf.d/dovecot-mysql.conf.ext driver = sql } plugin { quota = maildir:User quota quota_exceeded_message = ERROR:422 - Mailbox full, sorry. quota_rule = Junk:ignore quota_rule2 = Trash:storage=+100M quota_warning = storage=90%% quota-warning 90 %u %d quota_warning2 = storage=80%% quota-warning 80 %u %d sieve = ~/sieve/.dovecot.sieve sieve_dir = ~/sieve sieve_global_path = /home/vmail/sieve/globalfilter.sieve sieve_max_script_size = 1M sievedir = ~/sieve } protocols = imap pop3 lmtp sieve service auth { unix_listener /var/spool/postfix/private/auth { group = vmail mode = 0666 user = vmail } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } service managesieve-login { inet_listener sieve { port = 4190 } process_min_avail = 0 service_count = 1 vsz_limit = 64 M } service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 ssl = yes } } service quota-warning { executable = script /usr/local/bin/overquota.sh group = vmail unix_listener quota-warning { group = vmail user = vmail } user = vmail } ssl = required ssl_cert = </etc/letsencrypt/live/mydomain.com/fullchain.pem ssl_cipher_list = EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH+aRSA+RC4:EECDH:EDH+aRSA:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS:!RC4 ssl_key = </etc/letsencrypt/live/mydomain.com/privkey.pem ssl_prefer_server_ciphers = yes ssl_protocols = !SSLv2 !SSLv3 userdb { args = /etc/dovecot/conf.d/dovecot-mysql.conf.ext driver = sql } protocol lmtp { mail_plugins = " quota sieve" postmaster_address = postmaster(a)mydomain.com } protocol imap { mail_plugins = " quota imap_quota" } protocol sieve { managesieve_implementation_string = Dovecot Pigeonhole managesieve_max_compile_errors = 5 managesieve_max_line_length = 65536 }

5 8

Postlogin script
by j.emerlik 10 Nov '17

10 Nov '17

Hi, I would like to prepare postlogin a script that allow imap connection to roundcube for all but restrict imap access for selected users. My question is that: Is possible in condition IF use IP addresses as range or with mask (because I've more than one web servers) ? My script: #!/bin/sh if [ "$IP" = "172.11.0.28" ] ; then printf "* [ALERT] Access allowed from that IP\r\n" exec "$@" fi CHECK_USER=`PGPASSWORD="somepass" /usr/local/pg950/bin/psql -q -t -U someuser -d maildb -c "select imap_allowed from __users where name = '$USER' LIMIT 1"` if [ $CHECK_USER == "f" ] ; then exit 0 fi if [ $CHECK_USER == "t" ] ; then exec "$@" fi Regards, Jack

3 3

doveadm -A backup
by DurgaPrasad - DatasoftComnet 10 Nov '17

10 Nov '17

Hello, I am trying to backup all users mails using doveadm -Dv backup -A mdbox:/nasdrive/mailbackupfolder However the script is not doing the backup into individual folders but is trying to overwrite the data in /nasdrive/mailbackupfolder for every user. Logically it should write into /nasdrive/mailbackupfolder/user1 , /nasdrive/mailbackupfolder/user2 etc. I know we can run a shell script by listing all users into a file but I feel that will be far slower and it will spawn multiple doveadm commands in parallel and is prone to delays. Can someone suggest something on how to backup using -A in a single command? Regards DP --- This email has been checked for viruses by Avast antivirus software. https://www.avast.com/antivirus

2 1

Migrating from Dovecot 1 to Dovecot 2
by Dovecot list 10 Nov '17

10 Nov '17

Hello. I try to migrate about 200G of mails from one server to another. On the old i have Dovecot1 with Maildirs (without master pass etc.), on the new one i setup dovecot2 with mdbox. I need now to migrate (partialy, not all at once) mails from one to another. I can't find any solution that i can use? I dont have master password, and i want to mikgrate all mailaccont each other. Can anyone use me a working config for this ? Best will be that migratet dont want to be downloaded by mail client one more time. Thanks for any help. Best regards.

2 2

Dovecot auth error
by Mathieu R. 08 Nov '17

08 Nov '17

I just tried to configure a new dovecot/postfix server, and i end up with a dovecot auth error at startup. I can't find a solution by myself. Below are details, thanks in advance for your precious help, and excuse my poor english : dovecot --version 2.2.27 (c0f36b0) (Debian) Dovecot -n : https://400iso.net/public/dov.txt grep -v '^ *$#.*$\?$' /etc/dovecot/dovecot-sql.conf driver = mysql connect = host=127.0.0.1 dbname=postfix user=postfix password=password default_pass_scheme = MD5-CRYPT user_query = SELECT '/srv/vmail/%d/%n' AS home, 3000 AS uid, 3000 AS gid, CONCAT('*:bytes=', CAST(quota AS CHAR)) AS quota_rule FROM mailbox WHERE username = '%u' AND active='1' password_query = SELECT password FROM mailbox WHERE username = '%u' Here is part of the server's log : Nov 4 20:57:49 vps81550 postfix/postscreen[21578]: CONNECT from [209.85.215.51]:47485 to [149.56.x.x]:25 Nov 4 20:57:49 vps81550 postfix/dnsblog[21583]: addr 209.85.215.51 listed by domain dnsbl.sorbs.net as 127.0.0.6 Nov 4 20:57:55 vps81550 postfix/postscreen[21578]: PASS OLD [209.85.215.51]:47485 Nov 4 20:57:55 vps81550 postfix/smtpd[21585]: connect from mail-lf0-f51.google.com[209.85.215.51] Nov 4 20:57:55 vps81550 postfix/smtpd[21585]: Untrusted TLS connection established from mail-lf0-f51.google.com[209.85.215.51] TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits) Nov 4 20:57:55 vps81550 dovecot: auth: Fatal: sql: driver not set in configuration file /etc/dovecot/dovecot-sql.conf.ext Nov 4 20:57:55 vps81550 dovecot: master: Error: service(auth): command startup failed, throttling for 2 secs Nov 4 20:57:55 vps81550 postfix/smtpd[21585]: fatal: no SASL authentication mechanisms Nov 4 20:57:56 vps81550 postfix/master[21528]: warning: process /usr/lib/postfix/sbin/smtpd pid 21585 exit status 1 Nov 4 20:57:56 vps81550 postfix/master[21528]: warning: /usr/lib/postfix/sbin/smtpd: bad command startup -- throttling -- Mathieu R.

3 4

'doveadm replicator remove' only temporary?
by Robert Giles 07 Nov '17

07 Nov '17

Hi folks, Wondering if this is expected behavior; we'd like to be able to pause replication for a particular account on our 2.2.32 active-active cluster, but delivering a message (LMTP) to the account seems to turn replication back on again: (replication on) server1:~# doveadm replicator status rgiles username priority fast sync full sync success sync failed rgiles none 00:00:30 23:45:01 00:00:30 - (remove manually) server:~# doveadm replicator remove rgiles (confirm replication is off) server:~# doveadm replicator remove rgiles Error: Replicator failed: User not found (confirm again that replication is still off) server1:~# doveadm replicator status rgiles username priority fast sync full sync success sync failed (and one more time, still off) server1:~# doveadm replicator status rgiles username priority fast sync full sync success sync failed (send an e-mail, and voila, replication is running again) server1:~# doveadm replicator status rgiles username priority fast sync full sync success sync failed rgiles none 00:00:01 00:00:03 00:00:01 - I've tried quickly disabling replication on both systems, and they inevitably override the 'doveadm replicator remove' command and begin dsync'ing again with each other. Thanks for any ideas out there - Robert

1 1

Re: Dovecot auth error
by Aki Tuomi 07 Nov '17

07 Nov '17

apparently my reply got lost.. have you installed dovecot-mysql package? ---Aki TuomiDovecot oy -------- Original message --------From: "Mathieu R." <mathieu(a)400iso.net> Date: 07/11/2017 16:18 (GMT+02:00) To: dovecot(a)dovecot.org Subject: Re: Dovecot auth error Maybe i got no answer because there is an error which seem obvious in my logs : Nov 4 20:57:55 vps81550 dovecot: auth: Fatal: sql: driver not set in configuration file /etc/dovecot/dovecot-sql.conf.ext I've obviously seen that, and tried to configure driver in that file, but it had no positive outcome, sous i reversed my config to the previous state. Considering what i've read, dovecot's MySQL configuration should be OK, but i still have that fatal error Le sam. 4 nov. 2017 à 21:02, Mathieu R. <mathieu(a)400iso.net> a écrit : > I just tried to configure a new dovecot/postfix server, and i end up with > a dovecot auth error at startup. > I can't find a solution by myself. > Below are details, thanks in advance for your precious help, and excuse my > poor english : > > dovecot --version > 2.2.27 (c0f36b0) (Debian) > > Dovecot -n : > https://400iso.net/public/dov.txt > > > grep -v '^ *$#.*$\?$' /etc/dovecot/dovecot-sql.conf > driver = mysql > connect = host=127.0.0.1 dbname=postfix user=postfix password=password > default_pass_scheme = MD5-CRYPT > user_query = SELECT '/srv/vmail/%d/%n' AS home, 3000 AS uid, 3000 AS gid, > CONCAT('*:bytes=', CAST(quota AS CHAR)) AS quota_rule FROM mailbox WHERE > username = '%u' AND active='1' > password_query = SELECT password FROM mailbox WHERE username = '%u' > > > Here is part of the server's log : > > Nov 4 20:57:49 vps81550 postfix/postscreen[21578]: CONNECT from > [209.85.215.51]:47485 to [149.56.x.x]:25 > Nov 4 20:57:49 vps81550 postfix/dnsblog[21583]: addr 209.85.215.51 listed > by domain dnsbl.sorbs.net as 127.0.0.6 > Nov 4 20:57:55 vps81550 postfix/postscreen[21578]: PASS OLD > [209.85.215.51]:47485 > Nov 4 20:57:55 vps81550 postfix/smtpd[21585]: connect from > mail-lf0-f51.google.com[209.85.215.51] > Nov 4 20:57:55 vps81550 postfix/smtpd[21585]: Untrusted TLS connection > established from mail-lf0-f51.google.com[209.85.215.51] TLSv1.2 with > cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits) > Nov 4 20:57:55 vps81550 dovecot: auth: Fatal: sql: driver not set in > configuration file /etc/dovecot/dovecot-sql.conf.ext > Nov 4 20:57:55 vps81550 dovecot: master: Error: service(auth): command > startup failed, throttling for 2 secs > Nov 4 20:57:55 vps81550 postfix/smtpd[21585]: fatal: no SASL > authentication mechanisms > Nov 4 20:57:56 vps81550 postfix/master[21528]: warning: process > /usr/lib/postfix/sbin/smtpd pid 21585 exit status 1 > Nov 4 20:57:56 vps81550 postfix/master[21528]: warning: > /usr/lib/postfix/sbin/smtpd: bad command startup -- throttling > -- > > Mathieu R. > -- Mathieu R.

1 0

Log reopen broken in 2.2.33?
by David Zambonini 07 Nov '17

07 Nov '17

Has re-opening the logfiles broken between 2.2.32 and 2.2.33 releases? Using the same config that I've had for the past 10 or so point releases, /usr/bin/doveadm log reopen works perfectly up until 2.2.32, but with 2.2.33 (and .1 and .2) no new logfiles are created, file descriptors still have the original files open and keep writings to those logs. On an idling test instance, I get: master: Warning: Sent SIGKILL to 1 log processes I can see both SIGUSR1 and SIGKILL generated by the master process, but the current log process doesn't terminate - it receives SIGUSR1, but not SIGKILL. Anyone able to verify this on their own setup? Am I missing a required config change? Using epoll, which hasn't changed. -- David Zambonini

2 3

dovecot-lda without starting dovecot?
by Stephan von Krawczynski 07 Nov '17

07 Nov '17

Hello, we have a setup where SMTP/LDA and POP3/IMAP are on different physical hosts. They share the mail data via an external storage. Now we would like to use dovecot-lda on the smtp host, so we wonder if the lda binary works without starting dovecot from init. As there will be no POP3/IMAP usage on this host it seems unnecessary. Nevertheless we cannot judge if it is still needed for lda&sieve to work. Your opinion? -- Regards, Stephan

4 5

mail_crypt plugin, few questions
by Zbyszek Żółkiewski 06 Nov '17

06 Nov '17

Hi, I have few questions regarding mail_crypt: 1) Is mail_crypt_global_private_key file read upon dovecot start/restart only or it is/can be read in any other time? I have made few tests by starting dovecot and removing master key for decryption - therefore it is not available on the platform - it only reside in memory, removing one of attack vectors 2) Is there planned any “rollout” for key rotation in the feature ? 3) is there any better way to encrypt mails that were sent before enabling mail_crypt ? I have made some simple script to automate and in-place encryption: https://gist.github.com/kolargol/d551d132949068ce6efce7bc85a317cb but maybe there is better way? If someone want to use it, please read code before as it require updating magic(5) local database thanks! _ Zbyszek Żółkiewski

2 5

stats module
by Jeff Abrahamson 06 Nov '17

06 Nov '17

I'd like to monitor my dovecot instance (running on ubuntu 16.04) using telegraf. [T] jeff@nantes-1:log $ dovecot --version 2.2.22 (fe789d2) [T] jeff@nantes-1:log $ To do that, I think I need to use the stats module and get it to talk on port 24242. I've not found enough documentation on this module to feel really comfortable with it, so it doesn't surprise me that I don't have it working. But I'd much appreciate if someone could point me in the right direction. In particular, nothing listens on 24242. # This file is based on https://wiki2.dovecot.org/Statistics # Dovecot v2.1+ supports gathering statistics (CPU, disk usage, etc.) # from mail processes (IMAP, POP3, LMTP, etc.) to the stats # process. The stats process can later be queried what's going on in # the system. With imap_stats plugin you can get per-command level # statistics for IMAP commands. # # There are different "zoom levels" you can look at the statistics: # # * command: Per-IMAP command # * session: Per IMAP/POP3 connection # * user: Per user (all of user's sessions summed up) # * domain: Per domain (all of domain's users summed up) # * ip: Per IP address (all sessions from the IP summed up) # * global: Everything summed up (2.2.16+) mail_plugins = $mail_plugins stats protocol imap { mail_plugins = $mail_plugins imap_stats } plugin { # how often to session statistics (must be set) stats_refresh = 30 secs # track per-IMAP command statistics (optional) stats_track_cmds = yes } # You'll also need to give enough permissions for mail processes to be # able to write to stats-mail fifo. For example if you use a single # "vmail" user for mail access: service stats { fifo_listener stats-mail { user = vmail mode = 0600 } } # Memory usage configuration # The stats process attempts to keep memory usage below a specified # amount. This value is only approximate because of extra overhead # caused by malloc() itself. stats_memory_limit = 16 M # Once the memory limit is reached, oldest statistics are freed from # memory. Different statistics levels have different timeout limits, # which are configured in: stats_command_min_time = 1 mins stats_domain_min_time = 12 hours stats_ip_min_time = 12 hours stats_session_min_time = 15 mins stats_user_min_time = 1 hours service stats { inet_listener { address = 127.0.0.1 port = 24242 } } Thanks in advance. -- Jeff Abrahamson +33 6 24 40 01 57 +44 7920 594 255 http://p27.eu/jeff/

6 11

migrating from maildir to mdbox, preserving pop3 UIDL
by Jan-Pieter Cornet 03 Nov '17

03 Nov '17

Hi, I'm trying to migrate from maildir to mdbox while preserving the pop3 UIDL (and the imap UID). The problem is, for maildir we use (for compatiblity with qpopper): pop3_uidl_format = %f Problem is, as soon as I convert that to mdbox, then whenever a client issues the UIDL command via a POP connection, the connection is closed and this error is displayed in the log: Error: UIDL: File name not found (pop3_uidl_format=%f not supported by storage?) As a workaround, I enabled "pop3_reuse_xuidl = yes", and before conversion I put an X-UIDL: header in the mails. However, since the UIDL is the filename and the filename also contains S=<size>,W=<sizeOnWire>, I need to change the header in such a way that the size and number of lines stay the same. That's... tedious and error-prone. Is there an easier solution, eg teaching 'doveadm sync' to preserve pop3 UIDL somehow? For the record, I currently convert maildir to mdbox using: doveadm -D backup -u user@domain 'doveadm -o mail=mdbox:/path/to/storage:INDEX=/path/to/fast/storage -o plugin/zlib_save=gz -o mail_uid=$UID -o mail_gid=$GID dsync-server' Thanks for any help! -- Jan-Pieter Cornet <johnpc(a)xs4all.net> Systeembeheer XS4ALL Internet bv www.xs4all.nl

1 0

Enabling notification for all users
by Delisle, John 03 Nov '17

03 Nov '17

Hello, I have a domain populated with ~60 users who infrequently receive email. As a result, they rarely check their email, and miss important messages. The users are virtual LDAP users, and each user has an attribute "backupMailAddress" that contains their primary high-traffic email address that they check daily. (i.e. they have an address like John(a)lowtrafficdomain.com<mailto:John@lowtrafficdomain.com>, and a backupMailAddress attribute like john(a)primaryemailaddress.com<mailto:john@primaryemailaddress.com> ) I'm looking to enable new-email notification for all users, and have the notifications go to their high-traffic email address (their backupMailAddress). I know I can do this through individual user managesieve.sieve configurations and have a script that populates this with a notify rule, but this solution doesn't scale well, and doesn't handle new users/ departing users well. Is the a way I could apply this globally, so that if a user has a populated backupMailAddress attribute, a notification is sent there? Thanks John Delisle | Solution Architecture | Ceridian HCM | m: 204.294.5529 (preferred) | w: 204.975.5909 John.Delisle(a)ceridian.com<mailto:John.Delisle@ceridian.com> | www.ceridian.com<http://www.ceridian.com/> Ceridian. Makes Work Life Better(tm) This communication is intended to be received only by the individual[s] or entity[s] to whom or to which it is addressed, and contains information which is confidential, privileged and subject to copyright. Any unauthorized use, copying, review or disclosure is prohibited. Please notify the sender immediately if you have received this communication in error [by calling collect, if necessary] so that we can arrange for its return at our expense. Thank you in advance for your anticipated assistance and cooperation. Cette communication est destinée uniquement à la personne ou à la personne morale à qui elle est adressée. Elle contient de l’information confidentielle, protégée par le secret professionnel et sujette à des droits d'auteurs. Toute utilisation, reproduction, consultation ou divulgation non autorisées sont interdites. Nous vous prions d’aviser immédiatement l’expéditeur si vous avez reçu cette communication par erreur (en appelant à frais virés, si nécessaire), afin que nous puissions prendre des dispositions pour en assurer le renvoi à nos frais. Nous vous remercions à l’avance de votre coopération.

1 0

LDAP Filters as defined for dovecot UserDB and passDB
by Will Merkens 03 Nov '17

03 Nov '17

I have pretty much everything working fine. I have run into one issue with the filters that I am unsure where this a filter is being set. Dovecot 2.2.32 (dfbe293d4) I have setup dovecot-ldap.conf.ext to control my LDAP query's My current layout used filters based on looking at the posixAccount attributes user_filter = (&(objectClass=posixAccount)(uid=%u)) If I connect to a a ldap account that has no posixAccount attributes set I was getting a failure in the logs Nov 02 14:15:48 mail2 dovecot[28715]: auth: Debug: ldap(sales,192.168.123.39,<fd5mpwVddrvAqHsn>): user search: base=ou=People,dc=userful,dc=ca scope=subtree filter=(&(objectClass=posixAccount)(uid=sales)) fields=mail,user_filter Nov 02 14:15:48 mail2 dovecot[28715]: auth: Debug: ldap(sales,192.168.123.39,<fd5mpwVddrvAqHsn>): no fields returned by the server Nov 02 14:15:48 mail2 dovecot[28715]: auth: ldap(sales,192.168.123.39,<fd5mpwVddrvAqHsn>): unknown user Nov 02 14:15:48 mail2 dovecot[28715]: auth: Error: ldap(sales,192.168.123.39,<fd5mpwVddrvAqHsn>): user not found from userdb I changed the filters thinking I needed to look at the attributes seen by one of these accounts, I used the apache studio to find out what was visible. >From that I saw inetOrgPerson could be used. So I changed the filters. user_filter = (&(objectClass=inetOrgPerson)(uid=%u)) pass_filter = (&(objectClass=inetOrgPerson)(uid=%n)) iterate_filter = (objectClass=inetOrgPerson) Nov 02 14:26:44 mail2 dovecot[29047]: auth: Debug: client in: AUTH 1 PLAIN service=imap secured session=Y0GBzgVdlorAqHsn lip=192.168.123.236 Nov 02 14:26:44 mail2 dovecot[29047]: auth-worker(29066): Debug: ldap(sales(a)userful.com,192.168.123.39,<Y0GBzgVdlorAqHsn>): bind search: base=ou=People,dc=userful,dc=ca filter=(&(objectClass=inetOrgPerson)(uid=sales)) Nov 02 14:26:44 mail2 dovecot[29047]: auth-worker(29066): Debug: ldap(sales(a)userful.com,192.168.123.39,<Y0GBzgVdlorAqHsn>): result: uid=sales; uid unused Nov 02 14:26:44 mail2 dovecot[29047]: auth-worker(29066): Debug: ldap(sales(a)userful.com,192.168.123.39,<Y0GBzgVdlorAqHsn>): username changed sales(a)userful.com -> sales Nov 02 14:26:44 mail2 dovecot[29047]: auth-worker(29066): Debug: ldap(sales,192.168.123.39,<Y0GBzgVdlorAqHsn>): result: uid=sales Nov 02 14:26:44 mail2 dovecot[29047]: auth: Debug: ldap(sales(a)userful.com,192.168.123.39,<Y0GBzgVdlorAqHsn>): username changed sales(a)userful.com -> sales Nov 02 14:26:44 mail2 dovecot[29047]: auth: Debug: client passdb out: OK 1 user=sales original_user=sales(a)userful.com so far so good but then I get Nov 02 14:26:44 mail2 dovecot[29047]: auth: Debug: master in: REQUEST 3851550721 29049 1 519189df600c24c010b57158ac01c867 session_pid=29073 request_auth_token Nov 02 14:26:44 mail2 dovecot[29047]: auth-worker(29066): Debug: ldap(sales,192.168.123.39,<Y0GBzgVdlorAqHsn>): user search: base=ou=People,dc=userful,dc=ca scope=subtree filter=(&(objectClass=posixAccount)(uid=sales)) fields=mail,user_filter Nov 02 14:26:44 mail2 dovecot[29047]: auth-worker(29066): Debug: ldap(sales,192.168.123.39,<Y0GBzgVdlorAqHsn>): no fields returned by the server Nov 02 14:26:44 mail2 dovecot[29047]: auth-worker(29066): ldap(sales,192.168.123.39,<Y0GBzgVdlorAqHsn>): unknown user Nov 02 14:26:44 mail2 dovecot[29047]: auth: Error: ldap(sales,192.168.123.39,<Y0GBzgVdlorAqHsn>): user not found from userdb The question then is where did it get filter=(&(objectClass=posixAccount) from since I changed the filters to inetOrgPerson I grep the dovecot settings directory and all My filters are in the one file. The file that hold the ldap settings -- William Merkens IT Support Analyst Userful Corporation +1 403.289.2177 ext.289 +1 866 USERFUL (1-866-873-7385) Suite 300, 736 8th Ave. SW Calgary AB T2P 1H4 Managed Desktops Done Right. http://www.userful.com

3 3

Bug: lmtp proxy does not quote local parts with spaces
by David Zambonini 03 Nov '17

03 Nov '17

There seems to be a bug with RFC822 processing in ltmp proxying that doesn't quote local parts that, for example, contain spaces. director config: director_username_hash = %Ln lmtp_proxy = yes recipient_delimiter = + protocol lmtp { auth_socket_path = director-userdb auth_username_chars = auth_username_format = %Ln passdb { driver = sql args = /etc/director/sql.d/lmtp.ext result_failure = return-fail result_internalfail = return-fail } } lmtp.ext: password_query = SELECT 'y' AS proxy, NULL AS password, 'y' AS nopassword FROM users WHERE userName='%Ln' from exim -> director LMTP network dump: MAIL FROM:<test(a)testdomain.com>\r\n RCPT TO:<"deemzed.uk+Junk E-mail"@mailbox.localhost>\r\n DATA\r\n (etc) .\r\n 501 5.5.4 Invalid parameters\r\n QUIT\r\n from director -> dovecot LMTP network dump: MAIL FROM:<test(a)testdomain.com>\r\n RCPT TO:<deemzed.uk+Junk E-mail>\r\n 501 5.5.4 Invalid.parameters\r\n I'll try to pare down a full config for doveconf that displays this behaviour if required, as currently I have sensitive/extraneous information in there, but this seems fairly cut and dried as a bug to me. -- Dave

3 7

dovecot-2.3 (-git) Warning (Was Re: dovecot Digest, Vol 174, Issue 64)
by Reuben Farrelly 02 Nov '17

02 Nov '17

Hi, On 30/10/2017 7:22 PM, dovecot-request(a)dovecot.org wrote: > Message: 6 > Date: Mon, 30 Oct 2017 10:22:42 +0200 > From: Teemu Huovila <teemu.huovila(a)dovecot.fi> > To: dovecot(a)dovecot.org > Subject: Re: dovecot-2.3 (-git) Warning and Fatal Compile Error > Message-ID: <7d2c0b5b-019a-067c-c6be-f36571ed9a96(a)dovecot.fi> > Content-Type: text/plain; charset=utf-8 > > > > On 30.10.2017 09:10, Aki Tuomi wrote: >> >> >> On 30.10.2017 00:23, Reuben Farrelly wrote: >>> Hi Aki, >>> >>> On 30/10/2017 12:43 AM, Aki Tuomi wrote: >>>>> On October 29, 2017 at 1:55 PM Reuben Farrelly >>>>> <reuben-dovecot(a)reub.net> wrote: >>>>> >>>>> >>>>> Hi again, >>>>> >>>>> Chasing down one last problem which seems to have been missed from my >>>>> last email: >>>>> >>>>> On 20/10/2017 9:22 PM, Stephan Bosch wrote: >>>>>> >>>>>> Op 20-10-2017 om 4:23 schreef Reuben Farrelly: >>>>>>> On 18/10/2017 11:40 PM, Timo Sirainen wrote: >>>>>>>> On 18 Oct 2017, at 6.34, Reuben Farrelly <reuben-dovecot(a)reub.net> >>>>>>>> wrote: >>>>> This problem below is still present in 2.3 -git, as of version >>>>> 2.3.devel >>>>> (6fc40674e) >>>>> >>>>>>>> Secondly, this ssl_dh messages is always printed from doveconf: >>>>>>>> >>>>>>>> doveconf: Warning: please set ssl_dh=</etc/dovecot/dh.pem >>>>>>>> doveconf: Warning: You can generate it with: dd >>>>>>>> if=/var/lib/dovecot/ssl-parameters.dat bs=1 skip=88 | openssl dh >>>>>>>> -inform der > /etc/dovecot/dh.pem >>>>>>>> >>>>>>>> Yet the file is there: >>>>>>>> >>>>>>>> thunderstorm conf.d # ls -la /etc/dovecot/dh.pem >>>>>>>> -rw-r--r-- 1 root root 769 Oct 19 21:55 /etc/dovecot/dh.pem >>>>>>>> >>>>>>>> And the config is there as well: >>>>>>>> >>>>>>>> thunderstorm dovecot # doveconf -P | grep ssl_dh >>>>>>>> ssl_dh = </etc/dovecot/dh.pem >>>>>>>> doveconf: Warning: please set ssl_dh=</etc/dovecot/dh.pem >>>>>>>> doveconf: Warning: You can generate it with: dd >>>>>>>> if=/var/lib/dovecot/ssl-parameters.dat bs=1 skip=88 | openssl dh >>>>>>>> -inform der > /etc/dovecot/dh.pem >>>>>>>> ?? ssl_dh = -----BEGIN DH PARAMETERS----- >>>>>>>> ?? ssl_dh = -----BEGIN DH PARAMETERS----- >>>>>>>> ?? ssl_dh = -----BEGIN DH PARAMETERS----- >>>>>>>> ?? ssl_dh = -----BEGIN DH PARAMETERS----- >>>>>>>> ?? ssl_dh = -----BEGIN DH PARAMETERS----- >>>>>>>> ?? ssl_dh = -----BEGIN DH PARAMETERS----- >>>>>>>> ?? ssl_dh = -----BEGIN DH PARAMETERS----- >>>>>>>> ?? ssl_dh = -----BEGIN DH PARAMETERS----- >>>>>>>> thunderstorm dovecot # >>>>>>>> >>>>>>>> It appears that this warning is being triggered by the presence of >>>>>>>> the ssl-parameters.dat file because when I remove it the warning >>>>>>>> goes away. Perhaps the warning could be made a bit more specific >>>>>>>> about this file being removed if it is not required because at the >>>>>>>> moment the warning message is not related to the trigger. >>>>>>>> >>>>>>>> Thanks, >>>>>>>> Reuben >>>>> Thanks, >>>>> Reuben >>>> It is triggered when there is ssl-parameters.dat file *AND* there is >>>> no ssl_dh=< explicitly set in config file. >>>> >>>> Aki >>> >>> I have this already in my 10-ssl.conf file: >>> >>> lightning dovecot # /etc/init.d/dovecot reload >>> doveconf: Warning: please set ssl_dh=</etc/dovecot/dh.pem >>> doveconf: Warning: You can generate it with: dd >>> if=/var/lib/dovecot/ssl-parameters.dat bs=1 skip=88 | openssl dh >>> -inform der > /etc/dovecot/dh.pem >>> ?* Reloading dovecot configs and restarting auth/login processes >>> ...????? [ ok ] >>> lightning dovecot # >>> >>> However: >>> >>> lightning dovecot # grep ssl_dh conf.d/10-ssl.conf >>> # gives on startup when ssl_dh is unset. >>> ssl_dh=</etc/dovecot/dh.pem >>> lightning dovecot # >>> >>> and the file is there: >>> >>> lightning dovecot # ls -la /etc/dovecot/dh.pem >>> -rw-r--r-- 1 root root 769 Oct 19 19:06 /etc/dovecot/dh.pem >>> lightning dovecot # >>> >>> So it is actually configured and yet the warning still is present. >>> >>> Reuben >> >> Hi! >> >> I gave this a try, and I was not able to repeat this issue. Perhaps you >> are still missing ssl_dh somewhere? >> >> Aki >> > Hello > > Just a guess, but at this point I would recommend reviewing the output of "doveconf -n" to make sure the appropriate settings are present. > > br, > Teemu I still can't see anything amiss. Here's the output from doveconf -n: # 2.3.devel (65ef8330e): /etc/dovecot/dovecot.conf # Pigeonhole version 0.5.devel (f4659224) # OS: Linux 4.9.56-x86_64-linode87 x86_64 Gentoo Base System release 2.4.1 auth_mechanisms = plain login auth_socket_path = /var/run/dovecot/auth-userdb auth_username_format = %Ln doveadm_password = # hidden, use -P to show it first_valid_uid = 1000 imap_client_workarounds = tb-lsub-flags tb-extra-mailbox-sep last_valid_uid = 1100 login_log_format_elements = user=<%u> auth-method=%m remote=%r local=%l %k login_trusted_networks = 192.168.0.0/16 mail_location = maildir:~/Maildir mail_plugins = stats notify replication fts fts_lucene managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = failure_show_msg=yes %s driver = pam } plugin { fts = lucene fts_autoindex = yes fts_languages = en fts_lucene = whitespace_chars=@. mail_replica = tcps:inside-mail.reub.net:4813 replication_full_sync_interval = 4 hours sieve = file:~/sieve;active=~/.dovecot.sieve stats_refresh = 30 secs stats_track_cmds = yes } protocols = imap lmtp sieve recipient_delimiter = - service aggregator { fifo_listener replication-notify-fifo { mode = 0666 user = root } unix_listener replication-notify { mode = 0666 user = root } } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-userdb { mode = 0777 } } service doveadm { inet_listener { address = 2400:8901:e001:3a::20 port = 4813 ssl = yes } user = root } service imap { executable = imap postlogin } service lmtp { inet_listener lmtp { address = ::1 port = 24 } unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0660 user = postfix } } service postlogin { executable = script-login -d rawlog } service replicator { process_min_avail = 1 unix_listener replicator-doveadm { mode = 0666 } } service stats { fifo_listener stats-mail { mode = 0666 } } ssl_ca = </etc/ssl/misc/alphassl_intermediate_ca.crt ssl_cert = </etc/ssl/dovecot/*.reub.net.crt ssl_cipher_list = DEFAULT:!EXPORT:!LOW:!MEDIUM:!MD5 ssl_client_ca_dir = /etc/ssl/certs ssl_client_ca_file = /etc/ssl/misc/alphassl_intermediate_ca.crt ssl_dh = # hidden, use -P to show it ssl_key = # hidden, use -P to show it ssl_protocols = !SSLv2 !SSLv3 !TLSv1 userdb { driver = passwd } protocol lmtp { mail_plugins = stats notify replication fts fts_lucene sieve ssl_dh = # hidden, use -P to show it } protocol !indexer-worker { ssl_dh = # hidden, use -P to show it } protocol lda { mail_plugins = stats notify replication fts fts_lucene sieve ssl_dh = # hidden, use -P to show it } protocol imap { mail_plugins = stats notify replication fts fts_lucene imap_stats ssl_dh = # hidden, use -P to show it } protocol sieve { ssl_dh = # hidden, use -P to show it } protocol pop3 { ssl_dh = # hidden, use -P to show it } And showing with -P as an example: protocol pop3 { ssl_dh = -----BEGIN DH PARAMETERS----- MIIBCAKCAQEAo4NpFI4fpUe65FVv1hotVS9pTUbCKs1ypGRZcFMXzpsXPqHU+M4s ... AAAAAAAAAAAAAAAAAAAAAAAAAAA= -----END DH PARAMETERS----- There is a single set of valid DH parameters for every protocol as listed above. It seems odd that ssl_dh is defined all of these protocols specifically too. This specific per-protocol definition of ssl_dh isn't specified in any config file. Reuben

3 4

Replication to wrong mailbox
by Ralf Becker 02 Nov '17

02 Nov '17

It happened now twice that replication created folders and mails in the wrong mailbox :( Here's the architecture we use: - 2 Dovecot (2.2.32) backends in two different datacenters replicating via a VPN connection - Dovecot directors in both datacenters talks to both backends with vhost_count of 100 vs 1 for local vs remote backend - backends use proxy dict via a unix domain socket and socat to talk via tcp to a dict on a different server (kubernetes cluster) - backends have a local sqlite userdb for iteration (also containing home directories, as just iteration is not possible) - serving around 7000 mailboxes in a roughly 200 different domains Everything works as expected, until dict is not reachable eg. due to a server failure or a planed reboot of a node of the kubernetes cluster. In that situation it can happen that some requests are not answered, even with Kubernetes running multiple instances of the dict. I can only speculate what happens then: it seems the connection failure to the remote dict is not correctly handled and leads to situation in which last mailbox/home directory is used for the replication :( When it happened the first time we attributed it to the fact that the Sqlite database at that time contained no home directory information, which we fixed after. This first time (server failure) took a couple of minutes and lead to many mailboxes containing mostly folders but also some new arrived mails belonging to other mailboxes/users. We could only resolve that situation by rolling back to a zfs snapshot before the downtime. The second time was last Friday night during a (much shorter) reboot of a Kubernetes node and lead only to a single mailbox containing folders and mails of other mailboxes. That was verified by looking at timestamps of directories below $home/mdbox/mailboxes and files in $home/mdbox/storage. I can not tell if adding the home directory to the Sqlite database or the shorter time of the failure limited the wrong replication to a single mailbox. Can someone with more knowledge of the Dovecot code please check/verify how replication deals with failures in proxy dict. I'm of cause happy to provide more information of our configuration if needed. Here is an exert of our configuration (full doveconf -n is attached): passdb { args = /etc/dovecot/dovecot-dict-master-auth.conf driver = dict master = yes } passdb { args = /etc/dovecot/dovecot-dict-auth.conf driver = dict } userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-dict-auth.conf driver = dict } userdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } dovecot-dict-auth.conf: uri = proxy:/var/run/dovecot_auth_proxy/socket:backend password_key = passdb/%u/%w user_key = userdb/%u iterate_disable = yes dovecot-dict-master-auth.conf: uri = proxy:/var/run/dovecot_auth_proxy/socket:backend password_key = master/%{login_user}/%u/%w iterate_disable = yes dovecot-sql.conf: driver = sqlite connect = /etc/dovecot/users.sqlite user_query = SELECT home,NULL AS uid,NULL AS gid FROM users WHERE userid = '%n' AND domain = '%d' iterate_query = SELECT userid AS username, domain FROM users -- Ralf Becker EGroupware GmbH [www.egroupware.org] Handelsregister HRB Kaiserslautern 3587 Geschäftsführer Birgit und Ralf Becker Leibnizstr. 17, 67663 Kaiserslautern, Germany Telefon +49 631 31657-0

3 5

How to limit Apple Mail (desktop)?
by Rupert Gallagher 02 Nov '17

02 Nov '17

By default, Apple Mail downloads all e-mails from server's account. Previous versions of this client allowed to opt-out. The latest two versions? however, only allow to opt-out from downloading the attachments. The stress on the server is unbearable. We cannot ask users to be considerate: this is the default behaviour of Apple Mail. We need a server-side solution to the problem. Please share your ideas.

6 13

LDAP authentication and shadowExpire
by Mantas Gegužis 02 Nov '17

02 Nov '17

Hi, I am trying to configure Dovecot (2.2.27) with LDAP passdb, specifically with authentication binds (https://wiki.dovecot.org/AuthDatabase/LDAP/AuthBinds) Atribute shadowExpire has a unix time stamp value. Is there a way to write pass_filter like shadowExpire<ToDay? Or maybe there is better way to implement password expiration in Dovecot? -- Pagarbiai Mantas Gegužis VU Informacinių technologijų taikymo centras

2 1

Re: How to limit Apple Mail (desktop)?
by Joseph Tam 01 Nov '17

01 Nov '17

"@lbutlr" <kremels(a)kreme.com> writes: (Are you the OP, or have I mistakenly atributed this to Rupert Gallagher?) >> So what the composition of all this traffic? Are you saying the mail >> client is ultra dumb and repeatedly downloading entire messages, read >> and unread, attachment and all (i.e. you're truly bandwidth limited?) > > It most certainly does not do that. If this is the case for the OP, it's back to square one to find log entries, and/or nfsstat/iostat/vmstat/etc output to see what is "killing" the server. File locking issues, mail_max_userip_connections and process limit values could also cause service flakiness. Apple mail readers seems to gobble up IMAP connections like candy. Joseph Tam <jtam.home(a)gmail.com>

1 0

IMAP Benchmarking, active/active cluster with GFS2
by Hristo Pavlov 01 Nov '17

01 Nov '17

Hi All, We're on migration stage to a new 2-node active/active cluster with shared iSCSI storage, everything is ready, but we are in the process of I/O testing, before we going to in production. Cluster info: 2 nodes with CentOS 7.4 balancer ( keepalived + ldirectord ), 2 dovecot directors, 2 dovecot IMAP backends, 2 Postfix SMTP, gfs2 ( corosync + dlm ), LMTP between Postfix and Dovecot directors ( proxy ) and Dovecot backends. Everything seems normal, the users are mapped to dovecot backends, the balancers and the directors are working properly. The measurements were created under the following conditions : - operating system : CentOS Linux release 7.4.1708 (Core)- virtual server (KVM) - (2 cores per virtual socket) and 4 GB RAM - RAID 10 ( 6 x 2TB Seagate ST2000NX0273 SAS 7200 RPM ( iSCSI SAN Infrotrend Storage DS 4024 ), partition 5.45 TB formatted with gfs2. - Dovecot 2.2.10 - imaptest v.1.0.0 We run a test with ./imaptest userfile=users.txt mbox=dovecot-crlf secs=300 clients=50 append=100,0 logout=0 msgs=10000000, part of the output is that, but we can't understand what mean these values, anyone who has experience with imaptest can explain what they mean? 100% 50% 50% 100% 100% 100% 50% 100% 100% 100% 30% 0 223 216 0 442 657 219 218 443 438 50/ 50 0 229 212 0 418 596 194 224 428 424 50/ 50 0 217 226 0 436 632 227 223 429 428 50/ 50 0 214 226 0 432 644 207 193 429 435 50/ 50 0 213 204 0 414 587 209 213 414 417 50/ 50 0 195 206 0 427 611 213 203 426 420 50/ 50 0 225 200 0 435 642 215 226 439 445 50/ 50 0 229 194 0 441 637 223 213 441 436 50/ 50 0 213 219 0 434 616 212 232 431 428 50/ 50 0 210 213 0 427 622 203 219 434 440 50/ 50 0 112 113 0 35 30 30 56 87 111 ms/cmd avg Logi List Stat Sele Fetc Fet2 Stor Dele Expu Appe 100% 50% 50% 100% 100% 100% 50% 100% 100% 100% 30% 0 231 246 0 443 622 204 211 444 440 50/ 50 0 215 211 0 431 601 194 219 428 430 50/ 50 0 230 228 0 445 626 216 235 445 440 50/ 50 0 218 234 0 429 624 182 225 420 428 50/ 50 0 223 222 0 427 640 214 215 430 431 50/ 50 0 210 219 0 424 582 201 213 433 428 50/ 50 0 198 208 0 418 579 212 210 416 412 50/ 50 0 221 211 0 419 617 209 215 418 420 50/ 50 0 208 196 0 405 566 223 189 413 413 50/ 50 0 215 244 0 441 639 198 212 431 435 50/ 50 0 115 114 0 35 30 30 57 87 112 ms/cmd avg Logi List Stat Sele Fetc Fet2 Stor Dele Expu Appe 100% 50% 50% 100% 100% 100% 50% 100% 100% 100% 30% 0 199 219 0 422 608 206 205 424 420 50/ 50 0 214 206 0 429 616 209 208 432 435 50/ 50 0 227 204 0 413 583 200 213 412 410 50/ 50 0 192 214 0 416 609 212 219 411 415 50/ 50 0 212 215 0 426 625 204 225 434 428 50/ 50 0 202 209 0 423 585 224 197 415 421 50/ 50 0 216 221 0 422 599 190 197 427 426 50/ 50 0 208 207 0 414 579 209 211 414 410 50/ 50 0 205 211 0 432 616 212 213 423 427 50/ 50 0 225 207 0 432 642 208 215 436 434 50/ 50 0 115 115 0 36 31 32 59 89 113 ms/cmd avg Logi List Stat Sele Fetc Fet2 Stor Dele Expu Appe 100% 50% 50% 100% 100% 100% 50% 100% 100% 100% 30% 0 211 216 0 431 614 212 221 437 439 50/ 50 0 165 159 0 324 487 160 148 322 315 50/ 50 0 225 199 0 406 568 215 209 403 410 50/ 50 0 213 217 0 441 617 202 220 448 442 50/ 50 0 221 230 0 439 609 229 216 428 437 50/ 50 0 227 211 0 429 595 210 206 432 430 50/ 50 0 196 218 0 423 619 209 207 425 419 50/ 50 0 218 194 0 422 596 199 212 417 422 50/ 50 0 223 213 0 427 599 221 220 434 432 50/ 50 0 185 203 0 405 558 226 211 399 403 50/ 50 0 118 118 0 37 32 31 58 91 116 ms/cmd avg Totals: Logi List Stat Sele Fetc Fet2 Stor Dele Expu Appe 100% 50% 50% 100% 100% 100% 50% 100% 100% 100% 30% 50 61115 61109 50 122229 174619 59582 60969 122229 122229 Both nodеs pick up load average about 20-30 and io wait 14-20%. top - 16:34:50 up 7 days, 1:35, 1 user, load average: 22.22, 9.18, 3.47 Tasks: 244 total, 4 running, 240 sleeping, 0 stopped, 0 zombie %Cpu(s): 28.8 us, 29.8 sy, 0.0 ni, 16.4 id, 14.9 wa, 0.0 hi, 10.1 si, 0.0 st KiB Mem : 4013876 total, 134212 free, 1083648 used, 2796016 buff/cache KiB Swap: 6292476 total, 5974836 free, 317640 used. 2449504 avail Mem Do you think that's normal? Тhis test is only for 50 users, if run it for 100 have many stalled commands... We have about 500-700 mailboxes and we want to testing a load close to a real environment. Can anyone help with ideas? Thank you very much!

1 0

Re: How to limit Apple Mail (desktop)?
by Joseph Tam 01 Nov '17

01 Nov '17

Rupert Gallagher writes: > By default, Apple Mail downloads all e-mails from? server's account. > Previous versions of this client allowed to opt-out. The latest two > versions? however, only allow to opt-out from downloading the > attachments. > > The stress on the server is unbearable. We cannot ask users to be > considerate: this is the default behaviour of Apple Mail. (I'm coming into this thread late.) I'm having a hard time visualizing the cause of your problem. Most big messages have the bulk of their data as attachments (which you state the mail reader can defer downloading). Also, readers usually cache local copies, so they're downloaded once. So what the composition of all this traffic? Are you saying the mail client is ultra dumb and repeatedly downloading entire messages, read and unread, attachment and all (i.e. you're truly bandwidth limited?) Do your users typically have many concurrent readers for the same mailbox? What kind of session numbers are you supporting? 100s? 1000s? 10K+? Your data outflow has an incoming counterpart: if you're having a hard time serving it out, is your MTA also having a hard time with the incoming volume? Can it simply be the case you've underscaled your remote mail service? Joseph Tam <jtam.home(a)gmail.com>

2 1

All over sudden dovecot thinks FS is read only
by Tobi 31 Oct '17

31 Oct '17

Hi list I have to dovecot instances running which host my mailboxes on Centos7 dovecot.x86_64 1:2.2.26.0-2.el7.centos installed dovecot-debuginfo.x86_64 1:2.2.26.0-2.el7.centos installed dovecot-mysql.x86_64 1:2.2.26.0-2.el7.centos installed dovecot-pigeonhole.x86_64 1:2.2.26.0-2.el7.centos installed all over sudden both dovecot "think" that the mailbox filesystem is read only and fill the logs with Oct 28 11:39:50 mbox1 dovecot: lmtp(tobster(a)brain-force.ch): Error: ssY/MGZQ9FnoLgAAC4IaJw:2: sieve: failed to open logfile (LOGGING TO STDERR): open(/home/vmail/brain-force.ch/tobster/.dovecot.sieve.log) failed: Read-only file system But a test at cli shows that I can write to the location $ echo "test" >/home/vmail/brain-force.ch/tobster/.dovecot.test $ cat /home/vmail/brain-force.ch/tobster/.dovecot.test test $ echo "test1" >/home/vmail/brain-force.ch/tobster/.dovecot.test $ cat /home/vmail/brain-force.ch/tobster/.dovecot.test test1 Mounts show that the FS should be rw /dev/vda2 / ext4 rw,relatime,data=ordered 0 0 I restarted dovecot several time already. As well I restarted the physical host on which the dovecot vms reside. Filesystems are not full and are not running out of inodes. Does anyone have an idea why dovecot suddenly behaves like that? Thanks a lot for any hint Regards tobi

4 6

Pigeonhole vacation and envelope extension recipient addresses
by David Zambonini 31 Oct '17

31 Oct '17

I have a situation where my LMTP RCPT TO: goes to a mailbox user account that does not reflect either the final (through aliasing) or envelope email address. SMTP RCPT TO: (envelope-local-part@envelope-domain) Final Recipient: (final-local-part@final-domain) LMTP RCPT TO: (mailbox-local-part@mailbox-domain) I'd like to use the final recipient as the vacation address, but also have the envelope recipient address used in place of the LTMP RCPT TO for the envelope extension. At the moment it looks like I can set one or the other? Let's say I add an x-final-to and x-envelope-to header to the email headers before delivering via LMTP. Then, setting: sieve_vacation_use_original_recipient = yes lda_original_recipient_header = x-final-to will get the vacation replies coming from where I'd like, but the envelope extension will not reflect the original SMTP envelope to. Conversely, setting: lda_original_recipient_header = x-envelope-to might get the envelope extension working correctly, but will not give vacation replies from where I'd like. Is there some way anyone is aware of to configure both final and envelope senders based on email headers (that doesn't involve lda flags, these are on different systems), or am I currently out of luck? I've tried playing with DSN ORCPT but it seems like a non-starter trying to get it passed through (exim) -- David Zambonini

3 2

antispam plugin with IMAPSieve
by j.emerlik 31 Oct '17

31 Oct '17

Hi, my dovecot is configured with IMAP Sieve antispam plugin (sa-learn), everything seems to be working correctly but in debug mode in my log file I noticed "dovecot: imap: Error". Last 14 lines od my log file: Oct 31 15:05:25 mnode1 dovecot: imap: Error: Oct 31 15:05:25.040 [10743] dbg: bayes: tokenized header: 90 tokens Oct 31 15:05:25 mnode1 dovecot: imap: Error: Oct 31 15:05:25.067 [10743] dbg: bayes: seen (8e031cc9fec44b6607dc7f6b37903fc49e9c8526@sa_generated) put Oct 31 15:05:25 mnode1 dovecot: imap: Error: Oct 31 15:05:25.067 [10743] dbg: bayes: learned '8e031cc9fec44b6607dc7f6b37903fc49e9c8526@sa_generated', atime: 1509457623 Oct 31 15:05:25 mnode1 dovecot: imap: Error: Oct 31 15:05:25.068 [10743] dbg: plugin: Mail::SpamAssassin::Plugin::Bayes=HASH(0x2adc340) implements 'learner_close', priority 0 Oct 31 15:05:25 mnode1 dovecot: imap: Error: Oct 31 15:05:25.033 [10743] dbg: bayes: using userid: 7 Oct 31 15:05:25 mnode1 dovecot: imap: Error: Oct 31 15:05:25.037 [10743] dbg: bayes: tokenized body: 174 tokens Oct 31 15:05:25 mnode1 dovecot: imap: Error: Oct 31 15:05:25.037 [10743] dbg: bayes: tokenized uri: 0 tokens Oct 31 15:05:25 mnode1 dovecot: imap: Error: Oct 31 15:05:25.037 [10743] dbg: bayes: tokenized invisible: 0 tokens Oct 31 15:05:25 mnode1 dovecot: imap: Error: Oct 31 15:05:25.040 [10743] dbg: bayes: tokenized header: 90 tokens Oct 31 15:05:25 mnode1 dovecot: imap: Error: Oct 31 15:05:25.067 [10743] dbg: bayes: seen (8e031cc9fec44b6607dc7f6b37903fc49e9c8526@sa_generated) put Oct 31 15:05:25 mnode1 dovecot: imap: Error: Oct 31 15:05:25.067 [10743] dbg: bayes: learned '8e031cc9fec44b6607dc7f6b37903fc49e9c8526@sa_generated', atime: 1509457623 Logs looks good and I don't understand "Error:" from log, It looks like sa-learn is connected to database and learned bayes. Error in log it's normal or It's means that it not work ? Regards, Jack

2 1

Re: Bug#876364: dovecot-sieve: Just discovered imap_sieve/sieve_imapsieve is not set up to work with virtual mailboxes.
by Apollon Oikonomopoulos 31 Oct '17

31 Oct '17

Control: tags -1 + moreinfo upstream [Forwarding this to the Dovecot mailing list, just in case someone can help] Hi, Thanks for the report! See my comments inline. On 11:56 Thu 21 Sep , Thurgood Angelou wrote: > Package: dovecot-core > Version: 1:2.2.32-2 > > I've just discovered a bug where the sieve plugin (especially IMAP) > will not work with a virtual mailbox. I recently found this out when > testing a virtual mailbox setup and I use imap_sieve for SPAM > filtering so to lose that would be painful. > > This is what is reported in dovecot's debug log... > > Sep 21 10:53:01 imap(personal(a)othersider92.com): Panic: file mail-index-map.c: line 549 (mail_index_map_lookup_seq_range): assertion failed: (first_uid > 0) > Sep 21 10:53:01 imap(personal(a)othersider92.com): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x9f0a2) [0x7f4226fd50a2] -> /usr/lib/dovecot/libdovecot.so.0(+0x9f19a) [0x7f4226fd519a] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7f4226f65cf8] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_index_map_lookup_seq_range+0x120) [0x7f422733dae0] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0xe8d1d) [0x7f422734cd1d] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_index_lookup_seq+0xf) [0x7f4227350e9f] -> /usr/lib/dovecot/modules/lib20_virtual_plugin.so(+0x82aa) [0x7f422678a2aa] -> /usr/lib/dovecot/modules/lib95_imap_sieve_plugin.so(+0x708c) [0x7f422657d08c] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_transaction_commit_get_changes+0x52) [0x7f42272adca2] -> dovecot/imap(+0x10084) [0x556502adb084] -> dovecot/imap(command_exec+0x5c) [0x556502ae7d9c] -> dovecot/imap(+0x1b322) [0x556502ae6322] -> dovecot/imap(+0x1b3bc) [0x556502ae63bc] -> dovecot/imap(client_handle_input > +0x18d) [0x556502ae677d] -> dovecot/imap(client_input+0xac) [0x556502ae6ccc] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x52) [0x7f4226fea742] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0x12e) [0x7f4226febd8e] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0x36) [0x7f4226fea7d6] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x38) [0x7f4226fea988] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f4226f70353] -> dovecot/imap(main+0x329) [0x556502ad9139] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf1) [0x7f4226bb92e1] -> dovecot/imap(_start+0x2a) [0x556502ad92ca] After mixing in the debug symbols, this backtrace becomes: /usr/lib/dovecot/libdovecot.so.0(+0x9f0a2) [0x7f4226fd50a2] default_fatal_finish at ./src/lib/failures.c:195 /usr/lib/dovecot/libdovecot.so.0(+0x9f19a) [0x7f4226fd519a] ?? at ./src/lib/failures.c:670 /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7f4226f65cf8] i_fatal at ./src/lib/failures.c:280 /usr/lib/dovecot/libdovecot-storage.so.0(mail_index_map_lookup_seq_range+0x120) [0x7f422733dae0] mail_index_map_lookup_seq_range at ./src/lib-index/mail-index-map.c:550 /usr/lib/dovecot/libdovecot-storage.so.0(+0xe8d1d) [0x7f422734cd1d] tview_lookup_seq_range at ./src/lib-index/mail-index-transaction-view.c:178 /usr/lib/dovecot/libdovecot-storage.so.0(mail_index_lookup_seq+0xf) [0x7f4227350e9f] mail_index_lookup_seq at ./src/lib-index/mail-index-view.c:522 /usr/lib/dovecot/modules/lib20_virtual_plugin.so(+0x82aa) [0x7f422678a2aa] virtual_mail_set_uid at ./src/plugins/virtual/virtual-mail.c:213 /usr/lib/dovecot/modules/lib95_imap_sieve_plugin.so(+0x708c) [0x7f422657d08c] imap_sieve_mailbox_transaction_run at ./pigeonhole/src/plugins/imapsieve/imap-sieve-storage.c:752 (inlined by: imap_sieve_mailbox_transaction_commit at ./pigeonhole/src/plugins/imapsieve/imap-sieve-storage.c:807) /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_transaction_commit_get_changes+0x52) [0x7f42272adca2] mailbox_transaction_commit_get_changes at ./src/lib-storage/mail-storage.c:2083 dovecot/imap(+0x10084) [0x556502adb084] cmd_copy_full at ./src/imap/cmd-copy.c:146 dovecot/imap(command_exec+0x5c) [0x556502ae7d9c] command_exec at ./src/imap/imap-commands.c:200 dovecot/imap(+0x1b322) [0x556502ae6322] client_command_input at ./src/imap/imap-client.c:1088 dovecot/imap(+0x1b3bc) [0x556502ae63bc] client_command_input at ./src/imap/imap-client.c:1150 dovecot/imap(client_handle_input+0x18d) [0x556502ae677d] client_handle_input at ./src/imap/imap-client.c:1203 dovecot/imap(client_input+0xac) [0x556502ae6ccc] client_input at ./src/imap/imap-client.c:1249 /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x52) [0x7f4226fea742] io_loop_call_io at ./src/lib/ioloop.c:600 /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0x12e) [0x7f4226febd8e] io_loop_handler_run_internal at ./src/lib/ioloop-epoll.c:223 /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0x36) [0x7f4226fea7d6] io_loop_handler_run at ./src/lib/ioloop.c:648 /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x38) [0x7f4226fea988] io_loop_run at ./src/lib/ioloop.c:622 /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f4226f70353] master_service_run at ./src/lib-master/master-service.c:667 dovecot/imap(main+0x329) [0x556502ad9139] main at ./src/imap/main.c:491 /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf1) [0x7f4226bb92e1] __libc_start_main at ../csu/libc-start.c:325 dovecot/imap(_start+0x2a) [0x556502ad92ca] start at ??:0 > -- System Information: > Debian Release: 8.2 > APT prefers oldstable-updates > APT policy: (500, 'oldstable-updates'), (500, 'unstable'), (500, 'testing'), (500, 'oldstable') > Architecture: amd64 (x86_64) > > Kernel: Linux 3.16.0-4-amd64 (SMP w/2 CPU cores) > Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), LANGUAGE=en_GB:en (charmap=UTF-8) > Shell: /bin/sh linked to /bin/dash > Init: systemd (via /run/systemd/system) > > Versions of packages dovecot-sieve depends on: > ii dovecot-core 1:2.2.32-2 > ii libc6 2.24-17 > ii ucf 3.0030 > > dovecot-sieve recommends no packages. > > dovecot-sieve suggests no packages. > > Versions of packages dovecot-sieve is related to: > ii dovecot-core [dovecot-common] 1:2.2.32-2 > pn dovecot-dbg <none> > pn dovecot-dev <none> > ii dovecot-gssapi 1:2.2.32-2 > ii dovecot-imapd 1:2.2.32-2 > ii dovecot-ldap 1:2.2.32-2 > ii dovecot-lmtpd 1:2.2.32-2 > ii dovecot-managesieved 1:2.2.32-2 > ii dovecot-mysql 1:2.2.32-2 > pn dovecot-pgsql <none> > pn dovecot-pop3d <none> > ii dovecot-sieve 1:2.2.32-2 > pn dovecot-sqlite <none> Could you also include the output of doveconf -n? Regards, Apollon

3 2

Re: Disconnected: Inactivity (no auth attempts in 180 secs)
by Joseph Tam 31 Oct '17

31 Oct '17

Alexandre <byalefp(a)yahoo.com.br> wrote: > I can send and receive mails using: > IMAP 143 with TLS OK, IMAP STARTTLS is working in some sense. (Your MTA handles SMTP, not dovecot.) > The hangup occours inside of my LAN using Outlook 2016, and Outside > also trying access on 4G from my Android smartphone. > > My goal is enable also POP3s and IMAPs using TLS. [voluminous diagnostics] I can't really see from what you present what the problem is. Can you report the output of openssl s_client -starttls imap {imap-server}:143 openssl s_client -starttls pop3 {imap-server}:110 (from both inside and outside), as well as any matching log entries. Joseph Tam <jtam.home(a)gmail.com>

1 0

Re: Password encription
by Joseph Tam 30 Oct '17

30 Oct '17

> Aki, (Not speaking for Aki) > I understand that salted passwords saved in my database and stronger hash > algorithm course that it will require more processor time/power to crack my > passwords. > > But only when hackers have direct access to my database what means that > hackers have access to my passwords hashes (eg. hackers stolen my database). > > My Dovecot use passwords saved in database as SHA256 and hackers can use > only SMTP, IMAP or POP3 services to try crack it using dictionary attack (I > understand that they using plain text dictionaty passwords). > > Stronger hash algorithm and salt is useful when hackers have direct access > to my database but when they use services as SMTP, IMAP or POP3 > to crack passwords only longer and more complicated password can be more > secure. > > I do not understand this correctly ? Yes, your understanding is basically correct. However, history gives lots of examples of broken systems that explicitly or implicitly relied on one critical system not failing -- they lacked defense in depth or resilience. Examples are "this system has no bugs", "my system does not leak hashes", "this algorithm is unbreakable", "we'll never see a CAT5 hurricane", etc. If these critical assumption ever becomes untrue, the foundation of your defense crumbles. If you narrow your attack definition to only include in-protocol remote brute forcing, then any decent password will take far too long to break that way (esp. with throttling controls that are built-in). Your log files will overflow recording the attempts long before you can expect a password to be cracked. However, you're still susceptable to the qwerty passwords. If this is your *only* line of defense, it is brittle. A robustly secure system will overlap protection: strong hashes, password compliance systems, brute force countermeasures, file permissions/OS hardening, network origins vetting, anti-DoS measures, etc. Keep this picture in mind that I found on CLCERT https://www.clcert.cl/humor/img/weakest-link-road.jpg Joseph Tam <jtam.home(a)gmail.com>

1 0

Dovecot and the Maildir path
by Will Merkens 30 Oct '17

30 Oct '17

System basics Centos 7.3 Dovecot 2.2.32 (dfbe293d4) I am working on a replacement mail server for work and one of the features I wanted was ldap authentication After much fiddling I got it to work. But I encountered a issue where two different methods of testing a mail account resulted in the mail_location being different I set mail_location = maildir:/var/spool/maildir/%d/%n/Maildir in dovecot.conf when I test the authentication and to see if the folders are created correctly on first use I have two results depending on how I test. First test was from openssl openssl s_client -connect mail2:993 I have no problem connecting, I issue the following commands * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN] Dovecot ready. a login testuser(a)userful.com ******** a OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDSUBJECT MULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS BINARY MOVE] Logged in a list "" * * LIST (\HasNoChildren) "." INBOX a OK List completed (0.001 + 0.000 secs). * BYE Disconnected for inactivity. closed But when I look in the mail server at /var/spool/maildir the testuser is not created inside of userful.com but at the same level as userful.com contrary to the %d in mail_location settings. Now second method doveadm -D mailbox list -u 'testuser(a)userful.com' This correctly creates the user under the domain as specified. for logs I have from journalctl for openssl Oct 30 07:37:12 mail2 dovecot[10722]: auth: Debug: client in: AUTH 2 PLAIN service=imap secured session=VgBmvMNcQoTAqHsn lip=192.168. 123.236 rip=192.168.123.39 lport=993 rport=33858 resp=AHRlc3R1c2VyQHVzZXJmdWwuY29tADk5dGVzdHVzZXI5OQ== (previous base64 data may contain sensitive data) Oct 30 07:37:12 mail2 dovecot[10722]: auth: Debug: ldap(testuser(a)userful.com,192.168.123.39,<VgBmvMNcQoTAqHsn>): bind search: base=ou=People,dc=userful,dc=ca filter=(&(objectClass=posixAccount)(uid=testuser)) Oct 30 07:37:12 mail2 dovecot[10722]: auth: Debug: ldap(testuser(a)userful.com,192.168.123.39,<VgBmvMNcQoTAqHsn>): result: uid=testuser; uid unused Oct 30 07:37:12 mail2 dovecot[10722]: auth: Debug: ldap(testuser(a)userful.com,192.168.123.39,<VgBmvMNcQoTAqHsn>): username changed testuser(a)userful.com -> testuser Oct 30 07:37:12 mail2 dovecot[10722]: auth: Debug: ldap(testuser,192.168.123.39,<VgBmvMNcQoTAqHsn>): result: uid=testuser Oct 30 07:37:12 mail2 dovecot[10722]: auth: Debug: client passdb out: OK 2 user=testuser original_user=testuser(a)userful.com Oct 30 07:37:12 mail2 dovecot[10722]: auth: Debug: master in: REQUEST 2784755713 10725 2 d4a357fe811a1da8bd725b82fc1da2ab session_pid=11051 request_auth_token Oct 30 07:37:12 mail2 dovecot[10722]: auth: Debug: ldap(testuser,192.168.123.39,<VgBmvMNcQoTAqHsn>): user search: base=ou=People,dc=userful,dc=ca scope=subtree filter=(&(objectClass=posixAccount)(uid=testuser)) fields=homeDirectory,uidNumber,gidNumber Oct 30 07:37:12 mail2 dovecot[10722]: auth: Debug: ldap(testuser,192.168.123.39,<VgBmvMNcQoTAqHsn>): result: homeDirectory=/nfs/home/test-user uidNumber=6000 gidNumber=1000; homeDirectory,uidNumber,gidNumber unused Oct 30 07:37:12 mail2 dovecot[10722]: auth: Debug: ldap(testuser,192.168.123.39,<VgBmvMNcQoTAqHsn>): result: homeDirectory=/nfs/home/test-user uidNumber=6000 gidNumber=1000 Oct 30 07:37:12 mail2 dovecot[10722]: auth: Debug: master userdb out: USER 2784755713 testuser home=/nfs/home/test-user uid=6000 gid=1000 auth_token=29e6ac32c85cf1b69eeabbe8e4f8e4810e9a3468 auth_user=testuser(a)userful.com Oct 30 07:37:12 mail2 dovecot[10722]: imap-login: Login: user=<testuser>, method=PLAIN, rip=192.168.123.39, lip=192.168.123.236, mpid=11051, TLS, session=<VgBmvMNcQoTAqHsn> for doveadm Oct 30 07:39:12 mail2 dovecot[10722]: auth: Debug: master in: USER 1 testuser(a)userful.com service=doveadm Oct 30 07:39:12 mail2 dovecot[10722]: auth: Debug: ldap(testuser(a)userful.com): user search: base=ou=People,dc=userful,dc=ca scope=subtree filter=(&(objectClass=posixAccount)(uid=testuser)) fields=homeDirectory,uidNumber,gidNumber Oct 30 07:39:12 mail2 dovecot[10722]: auth: Debug: ldap(testuser(a)userful.com): result: homeDirectory=/nfs/home/test-user uidNumber=6000 gidNumber=1000; homeDirectory,uidNumber,gidNumber unused Oct 30 07:39:12 mail2 dovecot[10722]: auth: Debug: ldap(testuser(a)userful.com): result: homeDirectory=/nfs/home/test-user uidNumber=6000 gidNumber=1000 Oct 30 07:39:12 mail2 dovecot[10722]: auth: Debug: userdb out: USER 1 testuser(a)userful.com home=/nfs/home/test-user uid=6000 gid=1000 Any ideas and any settings files that I need to post. -- William Merkens IT Support Analyst Userful Corporation +1 403.289.2177 ext.289 +1 866 USERFUL (1-866-873-7385) Suite 300, 736 8th Ave. SW Calgary AB T2P 1H4 Managed Desktops Done Right. http://www.userful.com

2 1

dovecot-2.3 (-git) Warning and Fatal Compile Error
by Reuben Farrelly 30 Oct '17

30 Oct '17

I haven't been tracking dovecot-2.3 until now, but I've just given it a quick run, and there are a few things that may need some attention. Linux x86-64, Gentoo, GCC-7.2.0 Dovecot 2.3 @ commit 32c2612514a404ebc226f32bb88f28d76ceb1db1 Compiled with: ./configure --prefix=/usr --build=x86_64-pc-linux-gnu --host=x86_64-pc-linux-gnu --mandir=/usr/share/man --infodir=/usr/share/info --datadir=/usr/share --sysconfdir=/etc --localstatedir=/var/lib --disable-dependency-tracking --disable-silent-rules --docdir=/usr/share/doc/dovecot-9999_p20171018 --htmldir=/usr/share/doc/dovecot-9999_p20171018/html --libdir=/usr/lib64 --localstatedir=/var --with-moduledir=/usr/lib64/dovecot --without-stemmer --disable-rpath --with-icu --with-systemdsystemunitdir=/usr/lib/systemd/system --enable-maintainer-mode --with-bzlib --without-libcap --without-gssapi --without-ldap --with-lucene --with-lz4 --with-lzma --without-mysql --with-pam --without-pgsql --without-sqlite --without-solr --with-ssl --with-libwrap --without-textcat --without-vpopmail --with-zlib --disable-static Warnings: (Lots of this one...) /bin/sh ../../../libtool --tag=CC --mode=compile x86_64-pc-linux-gnu-gcc -DHAVE_CONFIG_H -I. -I../../.. -I../../../src/lib -I../../../src/lib-settings -I../../../src/lib-fts -I../../../src/lib-ssl-iostream -I../../../src/lib-http -I../../../src/lib-mail -I../../../src/lib-imap -I../../../src/lib-index -I../../../src/lib-storage -I../../../src/lib-storage/index -I../../../src/doveadm -std=gnu99 -O0 -g -pipe -march=native -mtune=native -ggdb -fstack-protector-strong -D_FORTIFY_SOURCE=2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime -Wstrict-aliasing=2 -c -o fts-user.lo fts-user.c libtool: compile: x86_64-pc-linux-gnu-gcc -DHAVE_CONFIG_H -I. -I../../.. -I../../../src/lib -I../../../src/lib-settings -I../../../src/lib-fts -I../../../src/lib-ssl-iostream -I../../../src/lib-http -I../../../src/lib-mail -I../../../src/lib-imap -I../../../src/lib-index -I../../../src/lib-storage -I../../../src/lib-storage/index -I../../../src/doveadm -std=gnu99 -O0 -g -pipe -march=native -mtune=native -ggdb -fstack-protector-strong -D_FORTIFY_SOURCE=2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime -Wstrict-aliasing=2 -c fts-storage.c -fPIC -DPIC -o .libs/fts-storage.o <command-line>:0:0: warning: "_FORTIFY_SOURCE" redefined <built-in>: note: this is the location of the previous definition In file included from /usr/include/bits/libc-header-start.h:33:0, from /usr/include/stdlib.h:25, from ../../../src/lib/lib.h:11, from fts-storage.c:3: /usr/include/features.h:376:4: warning: #warning _FORTIFY_SOURCE requires compiling with optimization (-O) [-Wcpp] # warning _FORTIFY_SOURCE requires compiling with optimization (-O) ^~~~~~~ The build then fails entirely with this: /bin/sh ../../../libtool --tag=CC --mode=compile x86_64-pc-linux-gnu-gcc -DHAVE_CONFIG_H -I. -I../../.. -I/home/portage/portage/net-mail/dovecot-9999_p20171018/work/dovecot-9999_p20171018 -I/home/portage/portage/net-mail/dovecot-9999_p20171018/work/dovecot-9999_p20171018/src/lib -I/home/portage/portage/net-mail/dovecot-9999_p20171018/work/dovecot-9999_p20171018/src/lib-dict -I/home/portage/portage/net-mail/dovecot-9999_p20171018/work/dovecot-9999_p20171018/src/lib-dns -I/home/portage/portage/net-mail/dovecot-9999_p20171018/work/dovecot-9999_p20171018/src/lib-http -I/home/portage/portage/net-mail/dovecot-9999_p20171018/work/dovecot-9999_p20171018/src/lib-mail -I/home/portage/portage/net-mail/dovecot-9999_p20171018/work/dovecot-9999_p20171018/src/lib-smtp -I/home/portage/portage/net-mail/dovecot-9999_p20171018/work/dovecot-9999_p20171018/src/lib-imap -I/home/portage/portage/net-mail/dovecot-9999_p20171018/work/dovecot-9999_p20171018/src/lib-fs -I/home/portage/portage/net-mail/dovecot-9999_p20171018/work/dovecot-9999_p20171018/src/lib-charset -I/home/portage/portage/net-mail/dovecot-9999_p20171018/work/dovecot-9999_p20171018/src/lib-auth -I/home/portage/portage/net-mail/dovecot-9999_p20171018/work/dovecot-9999_p20171018/src/lib-master -I/home/portage/portage/net-mail/dovecot-9999_p20171018/work/dovecot-9999_p20171018/src/lib-ssl-iostream -I/home/portage/portage/net-mail/dovecot-9999_p20171018/work/dovecot-9999_p20171018/src/lib-compression -I/home/portage/portage/net-mail/dovecot-9999_p20171018/work/dovecot-9999_p20171018/src/lib-settings -I/home/portage/portage/net-mail/dovecot-9999_p20171018/work/dovecot-9999_p20171018/src/lib-test -I/home/portage/portage/net-mail/dovecot-9999_p20171018/work/dovecot-9999_p20171018/src/lib-sasl -I/home/portage/portage/net-mail/dovecot-9999_p20171018/work/dovecot-9999_p20171018/src/lib-stats -I/home/portage/portage/net-mail/dovecot-9999_p20171018/work/dovecot-9999_p20171018/src/lib-dcrypt -I/home/portage/portage/net-mail/dovecot-9999_p20171018/work/dovecot-9999_p20171018/src/lib-program-client -I/home/portage/portage/net-mail/dovecot-9999_p20171018/work/dovecot-9999_p20171018/src/lib-index -I/home/portage/portage/net-mail/dovecot-9999_p20171018/work/dovecot-9999_p20171018/src/lib-storage -I/home/portage/portage/net-mail/dovecot-9999_p20171018/work/dovecot-9999_p20171018/src/lib-storage/list -I/home/portage/portage/net-mail/dovecot-9999_p20171018/work/dovecot-9999_p20171018/src/lib-storage/index -I/home/portage/portage/net-mail/dovecot-9999_p20171018/work/dovecot-9999_p20171018/src/lib-storage/index/raw -I/home/portage/portage/net-mail/dovecot-9999_p20171018/work/dovecot-9999_p20171018/src/lib-imap-storage -I/home/portage/portage/net-mail/dovecot-9999_p20171018/work/dovecot-9999_p20171018/src/plugins/quota -DMODULEDIR=\""/usr/lib64/dovecot"\" -O0 -g -pipe -march=native -mtune=native -ggdb -c -o realpath.lo realpath.c edit-mail.c: In function ‘edit_mail_wrap’: edit-mail.c:235:14: error: too few arguments to function ‘mailbox_transaction_begin’ raw_trans = mailbox_transaction_begin(raw_box, 0); ^~~~~~~~~~~~~~~~~~~~~~~~~ In file included from /home/portage/portage/net-mail/dovecot-9999_p20171018/work/dovecot-9999_p20171018/src/lib-storage/mail-storage-private.h:7:0, from edit-mail.c:16: /home/portage/portage/net-mail/dovecot-9999_p20171018/work/dovecot-9999_p20171018/src/lib-storage/mail-storage.h:651:1: note: declared here mailbox_transaction_begin(struct mailbox *box, ^~~~~~~~~~~~~~~~~~~~~~~~~ edit-mail.c: In function ‘edit_mail_set_cache_corrupted’: edit-mail.c:1662:2: error: too few arguments to function ‘edmail->wrapped->v.set_cache_corrupted’ edmail->wrapped->v.set_cache_corrupted(&edmail->wrapped->mail, field); ^~~~~~ edit-mail.c: In function ‘edit_mail_set_cache_corrupted_reason’: edit-mail.c:1671:21: error: ‘struct mail_vfuncs’ has no member named ‘set_cache_corrupted_reason’; did you mean ‘set_cache_corrupted’? edmail->wrapped->v.set_cache_corrupted_reason ^~~~~~~~~~~~~~~~~~~~~~~~~~ set_cache_corrupted edit-mail.c: At top level: edit-mail.c:1701:2: warning: initialization from incompatible pointer type [-Wincompatible-pointer-types] edit_mail_get_real_mail, ^~~~~~~~~~~~~~~~~~~~~~~ edit-mail.c:1701:2: note: (near initialization for ‘edit_mail_vfuncs.get_backend_mail’) edit-mail.c:1708:2: warning: initialization from incompatible pointer type [-Wincompatible-pointer-types] edit_mail_set_cache_corrupted, ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~ edit-mail.c:1708:2: note: (near initialization for ‘edit_mail_vfuncs.set_cache_corrupted’) edit-mail.c:1710:2: warning: excess elements in struct initializer edit_mail_set_cache_corrupted_reason ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ edit-mail.c:1710:2: note: (near initialization for ‘edit_mail_vfuncs’) make[4]: *** [Makefile:481: edit-mail.lo] Error 1 make[4]: *** Waiting for unfinished jobs.... Reuben

5 9

Re: Password encription
by Joseph Tam 29 Oct '17

29 Oct '17

Aki Tuomi wrote: > The use of salt, today, is to prevent the attacker from directly seeing > who has same passwords. Of course it also will make a rainbow table > attack less useful, Not just less useful, but almost infeasible. Given the use of random salts, you would have to generate (number of possible salts) rainbow tables. This drastically changes the CPU/storage tradeoffs. > but then again, no one uses rainbow tables anymore > since it takes about few minutes to brute force a password in the cloud > or on your home computer GPU. SHA512-CRYPT uses by default 4000 rounds > on dovecot, to make it more computationally expensive, but still it's > not very strong protection anymore. I know it is theoretically possible, but really, how feasible is it? The way people talk about it, they make it sound trivial. As a test, I just generated a hash using "doveadm pw". Any takers? {SHA512-CRYPT}$6$qyQANQFbQGqOSqHh$Z4YVIe.QakXtWs63lWUmzlseKpiFzfPCKhwM0NQk8jP6QeRmk6POkCdSrFBmVO2wh.dgPCPA7Gq3sNUeKOZLM/ > MD5 with or without salt can be ATTAcked at passwords per second speed, > so using CRAM-MD5 of DIGEST-MD5 is very very poor choice. Anything with > MD5 should not be used for passwords these days. > > With Dovecot 2.3 we are making BLF-CRYPT available on all platforms, and > also adding support for ARGON2 when you have libsodium available. Straight hashes, without question, are weak. I routinely break NTLM hashes with rainbow tables. I'm *not* arguing against the use of stronger hashes, I'm just skeptical of the FUD surrounding the user of older salted hashes. This is especially true if the hashes are guarded against leakage, as most are. Strong crypt-hashes are an extra layer of protection (defense in depth). This page (if you trust 3rd parties) will report whether a password was ever found in a breached databases. You can also download the SHA1 hashes of all their known cracked passwords. It's big -- 5.3Gb 7-zipped file. https://haveibeenpwned.com/Passwords "j.emerlik" further asks: > You mean that today they using encrypted passwords to seeing > who has same passwords using brute force, hashes dictionary attack ? They precompute hashes for large number of password candidates, then look up hashes in that table. Rainbow tables are a way of folding large tables into a smaller ones, trading off space for extra CPU time. However, for hashes that use non-trivial salts, you would need to precompute an astronomically large number of tables. An attacker might be better off with a straight CPU-bound brute force search. Joseph Tam <jtam.home(a)gmail.com>

3 3

Need help in understanding auth digest-md5 and realm
by Admin Beckspaced 28 Oct '17

28 Oct '17

Hello dovecot community, I've setup dovecot and need a bit help in understanding the auth mechanism digest-md5 and realm in 10-auth.conf I got auth_mechanisms = plain login digest-md5 cram-md5 apop #auth_realms = #auth_default_realm = So i got empty realms. Auth normally works fine and clients can auth with mechanism digest-md5 and I see the following log entries: dovecot: auth: Debug: sql(user(a)temizbau.de,46.85.229.153,<klUjO3FcTy8uVeWZ>): Generating DIGEST-MD5 from user 'user(a)temizbau.de', password 'xxxx' dovecot: auth: Debug: sql(user(a)gruene-wiesentheid.de,87.168.26.5,<ISVLQXFcT/xXqBoF>): Generating DIGEST-MD5 from user 'user@gruene-wiesentheid.de@', password 'xxxxxxxxxx' dovecot: auth: Debug: sql(user(a)vitaler-genuss.de,81.209.203.170,<tzxyT3FcT9RR0cuq>): Generating DIGEST-MD5 from user 'user(a)vitaler-genuss.de', password 'xxxxxxxxxxx' But sometimes clients get a password mismatch and I the see the following log entries: dovecot: auth: Debug: sql(user(a)temizbau.de,80.187.103.15,<adzhAnVclmxQu2cP>): Generating DIGEST-MD5 from user 'user@temizbau.de@mail.beckspaced.com', password 'xxxx' dovecot: auth: Debug: sql(user(a)thansadet.com,87.218.86.165,<LWItYHVc6r1X2lal>): Generating DIGEST-MD5 from user 'user@thansadet.com@mail.beckspaced.com', password 'xxxxxxxxxx' dovecot: auth: Debug: sql(user(a)plaa-thansadetresort.com,110.164.127.146,<aGhcvHBcStJupH+S>): Generating DIGEST-MD5 from user 'user@plaa-thansadetresort.com@imap.beckspaced.com', password 'xxxxxxxxxx' when there's a password mismatch I see a different user string for generating the digest-md5 hash. i suppose users use a different mail client and the mail client does things differently? How can I fix this password mismatch thing? Do i just need to set an auth_realms of some random string in the 10-auth.conifig Or does the auth_realms need to be a host name? Domain name of some sort? For the moment I just removed the digest-md5 mechanism ... Or could I just simply not offer that mechanism? If someone could shed some light on this I would be more than grateful ;) Thanks & greetings Becki

4 6

Quota warning executable can not log to /dev/stdout
by Michael Härtl 28 Oct '17

28 Oct '17

I'm running dovecot 2.2.27 in a alpine based docker container and want to log to /dev/stdout. I therefore added this setting: log_path = /dev/stdout Logging works fine so far. Now I've added a quota-warning script. With the log_path setting above the script creates warnings like: Oct 28 10:27:01 quota-warning: Error: Can't open log file /dev/stdout: No such device or address Oct 28 10:27:01 quota-warning: Fatal: master: service(quota-warning): child 460 returned error 75 When I change log_path to something like /tmp/dovecot.log everything works fine. Dovecot itself is started via s6 with a run script like this: #!/bin/sh exec /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf What could cause this issue and how could I fix it? For the record here's my doveconf -n output: # 2.2.27 (c0f36b0): /etc/dovecot/dovecot.conf # OS: Linux 4.4.27-x86_64-jb1 x86_64 ext4 auth_mechanisms = plain login auth_verbose = yes first_valid_uid = 100 log_path = /dev/stdout mail_gid = dovecot mail_home = /var/mail/domains/%d/%n mail_location = maildir:/var/mail/domains/%d/%n mail_max_userip_connections = 160 mail_plugins = " quota" mail_privileged_group = dovecot mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = separator = . } passdb { args = /etc/dovecot/dovecot-mysql.conf.ext driver = sql } plugin { quota = maildir:User quota quota_exceeded_message = Storage quota for user %u exceeded (Benutzer %u hat sein Speichervolumen ueberschritten) quota_grace = 10%% quota_rule2 = Trash:storage=+100M quota_status_nouser = DUNNO quota_status_overquota = 552 5.2.2 Mailbox is full quota_status_success = DUNNO quota_warning = storage=85%% quota-warning 80 %u %d } protocols = imap lmtp sieve service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-userdb { mode = 0777 } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } service quota-status { client_limit = 1 executable = quota-status -p postfix inet_listener { port = 10001 } } service quota-warning { executable = script /usr/local/bin/quota-warning.sh group = dovecot unix_listener quota-warning { mode = 0666 user = dovecot } user = vmail } ssl_cert = </certs/fullchain.pem ssl_key = # hidden, use -P to show it ssl_protocols = !SSLv2 !SSLv3 userdb { args = /etc/dovecot/dovecot-mysql.conf.ext driver = sql } protocol imap { mail_plugins = " quota imap_quota" } protocol lmtp { mail_plugins = " quota sieve" }

2 2

How to check which version of openssl is getting compiled in into dovecot?
by krzf83＠gmail.com 27 Oct '17

27 Oct '17

I got multiple versions of openssl in my system. I compile dovecot with PKG_CONFIG_PATH=/usr/openssl-1.0.2l-fpic/lib/pkgconfig ./configure How do I check which version of openssl got compiled in? configure script does not show version. There seem to be no way to check it in compiled binary (?) My dovecot is still seen vulnerable by tls testing tools so I'm guessing wrong version of openssl got compiled it but there seem to be no way to check it.

3 7

secure setup for imap hibernation
by Arkadiusz Miśkiewicz 27 Oct '17

27 Oct '17

Hi. What's the approach for securely enabling imap hibernation in case when each user uses different uid and gid? Looks like none and 0666 on hibernation and imap master sockets is the only way? Thanks, -- Arkadiusz Miśkiewicz, arekm / ( maven.pl | pld-linux.org )

2 3

Re: Password encription
by Aki Tuomi 27 Oct '17

27 Oct '17

SHA512-CRYPT and PLAIN/LOGIN with SSL. ---Aki TuomiDovecot oy -------- Original message --------From: "j.emerlik" <j.emerlik(a)gmail.com> Date: 25/10/2017 12:07 (GMT+02:00) To: Aki Tuomi <aki.tuomi(a)dovecot.fi> Cc: Dovecot Mailing List <dovecot(a)dovecot.org> Subject: Re: Password encription What scheme and mechanism do you recommend? 2017-10-25 11:01 GMT+02:00 Aki Tuomi <aki.tuomi(a)dovecot.fi>: > CRAM-MD5 should not be used. Its not terribly secure. > > > ---Aki TuomiDovecot oy > -------- Original message --------From: "j.emerlik" <j.emerlik(a)gmail.com> > Date: 25/10/2017 11:58 (GMT+02:00) To: Aki Tuomi <aki.tuomi(a)dovecot.fi> > Cc: Dovecot Mailing List <dovecot(a)dovecot.org> Subject: Re: Password > encription > Thx Aki, > with CRAP-MD5 as scheme and mechanism it's works corretlly. > > 2017-10-25 10:52 GMT+02:00 Aki Tuomi <aki.tuomi(a)dovecot.fi>: > > > PLAIN and LOGIN. > > > > > > > > --- > > Aki Tuomi > > Dovecot oy > > > > -------- Original message -------- > > From: "j.emerlik" <j.emerlik(a)gmail.com> > > Date: 25/10/2017 11:41 (GMT+02:00) > > To: Dovecot Mailing List <dovecot(a)dovecot.org> > > Subject: Password encription > > > > Hi, > > which authentication mechanism should I use for SHA-256 password schama ? > > Regards, > > Jack > > >

3 6

Looking for NTLM config example
by Mark Foley 26 Oct '17

26 Oct '17

Now that I am running Thunderbird on Linux and away from Windows/Outlook, I'd like to take another run at setting up NTLM authentication from Thunderbird to my Samba4 AC/DC. With the help of the samba maillist folks I was able to set up NTLM authentication for domain user login. I should be able to do the same for email! But, I need help. I went to http://wiki2.dovecot.org/Authentication/Mechanisms/NTLM and got lost immediately. Are "authenticaion submethods" synonymous with "password schemes"? The 7th line down says, "NTLM password scheme is required for NTLM, NTLM2 and NTLMv2.", but in the referenced link I found no reference to "NTLM password scheme". The links http://wiki2.dovecot.org/Authentication/Mechanisms/NTLM and http://wiki2.dovecot.org/Authentication/PasswordSchemes, tell you what the 4 NTLM authentication submethods are, tells you what password schemes are, tells you what the NTLM client/server handshake is, but doesn't actually tell you how to configure dovecot config files. I'm much more interested in the "how to" than in: "NTLMv2: server and client nonce, MITM can't force downgrade" ... whatever that means. Anyway, probably it's my lack of understanding terminology. I don't even know what a "nonce" is. But, I learn well from examples! Can somone please give me a sample 10-auth.conf for NTML and any other supporting settings or configs I need? My current/working dovecot settings, which have been running perfectly for well over a year now, are: $ dovecot -n # 2.2.15: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 3.10.17 x86_64 Slackware 14.1 auth_debug_passwords = yes auth_mechanisms = plain login auth_verbose = yes auth_verbose_passwords = plain disable_plaintext_auth = no info_log_path = /var/log/dovecot_info mail_location = maildir:~/Maildir passdb { driver = shadow } protocols = imap ssl_cert = </etc/ssl/certs/OHPRS/GoDaddy/Apache/2015-08-14/57aa6ed6ae98b4c7.crt ssl_key = </etc/ssl/certs/OHPRS/GoDaddy/my.server.name.key userdb { driver = passwd } verbose_ssl = yes Here's what I've tried so far as 10-auth.conf: disable_plaintext_auth = no auth_use_winbind = yes info_log_path = /var/log/dovecot_info auth_verbose = yes auth_debug_passwords = yes auth_verbose_passwords= plain auth_winbind_helper_path = /usr/bin/ntlm_auth auth_mechanisms = ntlm plain login userdb { driver = passwd args = username_format=%n allow_all_users=yes } Which gives me a dovecot -n of: $ dovecot -n # 2.2.15: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 3.10.17 x86_64 Slackware 14.1 auth_debug_passwords = yes auth_mechanisms = ntlm plain login auth_use_winbind = yes auth_verbose = yes auth_verbose_passwords = plain disable_plaintext_auth = no info_log_path = /var/log/dovecot_info mail_location = maildir:~/Maildir protocols = imap ssl_cert = </etc/ssl/certs/OHPRS/GoDaddy/Apache/2015-08-14/57aa6ed6ae98b4c7.crt ssl_key = </etc/ssl/certs/OHPRS/GoDaddy/my.server.name.key userdb { args = username_format=%n allow_all_users=yes driver = passwd } verbose_ssl = yes I configured Thunderbird for NTLM authentication, then tried sending a message, I got the following in /var/log/dovecot_info: Apr 22 01:37:57 imap-login: Debug: SSL: elliptic curve secp384r1 will be used for ECDH and ECDHE key exchanges Apr 22 01:37:57 imap-login: Debug: SSL: elliptic curve secp384r1 will be used for ECDH and ECDHE key exchanges Apr 22 01:37:57 auth: Debug: Loading modules from directory: /usr/local/lib/dovecot/auth Apr 22 01:37:57 imap-login: Info: Disconnected: Auth process broken (disconnected before auth was ready, waited 0 secs): user=<>, rip=192.168.0.58, lip=98.102.63.107, session=<xFuyOgwx9wDAqAA6> On Thunderbird I got the error, "Sending of the message failed. The Outlgoing server (SMTP) my.server.name does not support the selected authentication method. Please change the 'Autnentication method' in 'Account Settings | Outgoing Server (SMTP)'." Clearly, something is configured wrong, but I've no clue what. Can I get some advice? THX --Mark

8 19

Initialization failed: Namespace '': mkdir(/var/www/mail) failed: Permission denied
by trash＠skrilnetz.net 26 Oct '17

26 Oct '17

Hi, I'm running dovecot (v 2.2.9) on ubuntu 14.04 since a long time. I did not change any configuration lately and I'm getting the below error message. /dovecot: lda(www-data): Error: user www-data: Initialization failed: Namespace '': MKDIR(/VAR/WWW/MAIL) failed: Permission denied (euid=33(www-data) egid=33(www-data) missing +w perm: /var/www, dir owned by 1001:1001 mode=0755//) / I did some troubleshooting and I don't understand where the MKDIR(/VAR/WWW/MAIL) is coming from. Mailboxes are in /var/mail and sending/receiving emails is working as it always did. mail_location is still setup to be MAIL_LOCATION = MBOX:~/MAIL:INBOX=/VAR/MAIL/%U Why is it trying a mkdir in /var/www? Any help would be appreciated. Rgs,

3 11

haproxy ssl support
by Rok Potočnik 26 Oct '17

26 Oct '17

Even though it seems dovecot (using 2.2.33.1) supports haproxy's send-proxy-v2, it seems to lack send-proxy-v2-ssl (which also sends client's ssl state). It would be a nice feature for the backend server to identify clients so one wouldn't have to use disable_plaintext_auth on a production environment. --- haproxy.cfg frontend pop3 bind [::]:110 v4v6 bind [::]:995 v4v6 ssl crt /etc/pki/tls/private/haproxy.pem mode tcp default_backend pop3 backend pop3 mode tcp balance leastconn stick store-request src stick-table type ip size 200k expire 30m timeout connect 5000 timeout server 50000 server proxy1 [2001:db8::11]:10110 send-proxy-v2-ssl server proxy2 [2001:db8::22]:10110 send-proxy-v2-ssl --- --- dovecot.conf haproxy_trusted_networks = [2001:db8::]/64 service pop3-login { inet_listener pop3_haproxy { port = 10110 haproxy = yes } } --- It would also be nice if haproxy would support STARTTLS offloading but that's a subject for a different mailing list ;) -- BR, Rok

3 3

fts-solr: fresh start or reindex large mailboxes
by Anton Borovoy 26 Oct '17

26 Oct '17

Hi, Install solr (in the end 7.1.0) there were errors: Caused by: org.eclipse.jetty.io.EofException: Early EOF and from dovecot: Error: Mailbox INBOX: Transaction commit failed: FTS transaction commit failed: backend I could not find for a long time what the problem was and set the nginx as a proxy, and see that dovecot breaks the connect after 60 seconds. After examining the code, I found the fixed connection time: http_set.request_timeout_msecs = 60 * 1000; which is clearly not enough for large data. After searching, he also found this post https://dovecot.org/pipermail/dovecot-cvs/2015-March/025551.html 1. I think it would be a good idea to remove these settings in the configuration file dovecot.conf A bit of statistics from nginx, solr and nginx on same server (req_len == post body): 60 seconds, requests do not pass: [25 / Oct / 2017: 23: 07: 11 +0700] POST / solr / dovecot / update HTTP / 1.1 resp_time - msec 1508947631.364 req_time 86.863 req_len 171401961 499 [25 / Oct / 2017: 23: 07: 25 +0700] POST / solr / dovecot / update HTTP / 1.1 resp_time - msec 1508947645.149 req_time 74.657 req_len 70140598 499 [25 / Oct / 2017: 23: 11: 28 +0700] POST / solr / dovecot / update HTTP / 1.1 resp_time - msec 1508947888.834 req_time 90.776 req_len 205474676 499 600 seconds, requests do not pass: [26 / Oct / 2017: 04: 50: 50 +0700] POST / solr / dovecot / update HTTP / 1.1 resp_time - msec 1508968250.522 req_time 811.480 req_len 3083215798 499 [26 / Oct / 2017: 04: 51: 06 +0700] POST / solr / dovecot / update HTTP / 1.1 resp_time - msec 1508968266.432 req_time 666.089 req_len 556157906 499 [26 / Oct / 2017: 05: 06: 18 +0700] POST / solr / dovecot / update HTTP / 1.1 resp_time - msec 1508969178.612 req_time 797.983 req_len 3083215798 499 2. the index is more than 3g is transmitted painfully, can U make a queue limit on the size of the request, segment them, adjust max size of post body in the configuration file dovecot.conf thx solr: 7.1.0 dovecot: 2.2.32 server: Intel(R) Xeon(TM) CPU 2.93GHz x24, 72G RAM

1 0

authenticate as userA, but get authorization to user userB's account
by Heiko Schlittermann 26 Oct '17

26 Oct '17

Hello, given a small organization. There are *personal* mailboxes (mailbox per user, incl. subfolders et cetera). The users can share specic folders via the ACL (we call it "other users/", Dovecot calls it "shared" folder. Additionally there are mailboxes Dovecot calls "public" (we use the term "groups/"). They are not associated with a specific account, but acessible via ACL only. (Good example for the latter is "info(a)example.com") But now they're seeking for a way to implement "role" Accounts. We could create new "role" users, share the password and create an additional account within the mail client (thunderbird) they use. From users perspective it is exactly what they want. But I dislike the idea of sharing the password. Question: Is there any way to split the authentication from the authorization within common mail clients (as Thunderbird) in combination with Dovecot. That is, doing something like logging in to the account sales(a)example.com, using the credentials of the very own account (say hans(a)example.com)? - how to do it in Dovecot? (We use LDAP) - how to set up this in Thunderbird? - how to set up this in a generic MUA, as some webmail client? Thanks in advance, best regards from Dresden/Germany Heiko Schlittermann -- SCHLITTERMANN.de ---------------------------- internet & unix support - Heiko Schlittermann, Dipl.-Ing. (TU) - {fon,fax}: +49.351.802998{1,3} - gnupg encrypted messages are welcome --------------- key ID: F69376CE - ! key id 7CBF764A and 972EAC9F are revoked since 2015-01 ------------ -

5 9

Re: STAT command failure
by Joseph Tam 25 Oct '17

25 Oct '17

Andrew Charnley <ac(a)igaro.com> writes: >> It's also telling that it works for some accounts, and not for others. >> Try rebuilding the user's index cache by removing it (save a copy!) >> and see if that makes it work. If it does, you can send the buggy >> caches to the developer and see if they can figure it out. > > Which user index file to you refer to? If you're using INDEX= in your mail_location, that one. I think it suffices to remove the indices for the user's INBOX, since that's the only mailbox POP3 is aware of. I'm not sure where the default index location is if you don't specify INDEX, so maybe look in your mail spool or personal mail folder for $WHATEVER/.imap/INBOX. Caches are regenerated if they go missing (unless you use mdbox/sdbox formats: *don't* do this if you're using them.) Joseph Tam <jtam.home(a)gmail.com>

1 0

Replication Issue
by Jorge Canto E. 25 Oct '17

25 Oct '17

Hello, I've been trying to set up replication, Server A is dovecot 2.2.32 (upgrade from 2.0.9) and Server B is dovecot 2.2.10, I use mysql as userdb, I don't want to replicate every user on my database only especific users so I set my iterate_query on dovecot-sql.conf.ext file; my problem: doveadm replication is not "reading" my iterate_query, it tries to replicate every user. Diagnosis: - I removed iterate_query from dovecot-sql.conf.ext, on the log file I can see the doveadm replication is still trying to replicate. - doveadm user '*' shows error (obvious) there is not iterate_query but, on the log files I can see replication is trying, why doveadm replication is trying to replicate? what userdb is reading from? doveconf -n # 2.2.32 (dfbe293d4): /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-696.1.1.el6.x86_64 x86_64 CentOS release 6.9 (Final) ext3 auth_debug = yes auth_socket_path = /var/run/dovecot/auth-userdb doveadm_password = # hidden, use -P to show it first_valid_uid = 150 last_valid_uid = 150 mail_debug = yes mail_location = maildir:/var/vmail/%d/%n mail_plugins = notify replication mail_privileged_group = mail mbox_write_locks = fcntl passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { mail_replica = tcp:x.x.x.x:61800 } postmaster_address = postmaster(a)email.com service aggregator { fifo_listener replication-notify-fifo { mode = 0666 user = vmail } unix_listener replication-notify { mode = 0666 user = vmail } } service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 user = postfix } unix_listener auth-userdb { group = mail mode = 0600 user = vmail } } service config { unix_listener config { user = vmail } } service doveadm { inet_listener { port = 61800 } user = vmail } service replicator { process_min_avail = 1 unix_listener replicator-doveadm { mode = 0666 } } ssl = required ssl_cert = </etc/pki/tls/certs/mailnew.crt ssl_key = # hidden, use -P to show it userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } I really appreciate your help Jorge C.

1 0

Disconnected: Inactivity (no auth attempts in 180 secs)
by Alexandre 25 Oct '17

25 Oct '17

Hi, I hope you guys can understand me since english is not my nativelanguage. I am trying setup dovecot for imap and pop3 on FreeBSD 10.3 and is notworking on IMAPS or POP3S, currently My setup is: OS = FreeBSD 10.3 ( I did not get enough time for update to 11) Postfix = 3.2.3 Dovecot = 2.2.33.2 (d6601f4ec) OpenSSL =1.0.1s-freebsd SSL Certificate = Let's Encrypt I can send and receive mails using: IMAP 143 with TLS SMTP 587 with TLS Usually on Linux distros works pretty easy, when I don't forgetsomething this should be working on first try, but, after spend 2 weeks workingon it after arrive from job without found any solution, I am trying the luckasking for help from your guys expert on dovecot. The hangup occours inside of my LAN using Outlook 2016, and Outside also trying access on 4G from my Android smartphone. My goal is enable also POP3s and IMAPs using TLS. This is my data: Dovecot –n: #2.2.33.2 (d6601f4ec): /usr/local/etc/dovecot/dovecot.conf # Pigeonhole version 0.4.21 (92477967) # OS: FreeBSD 10.3-RELEASE-p22 amd64 zfs auth_debug = yes auth_debug_passwords = yes auth_mechanisms = plain login auth_verbose = yes auth_verbose_passwords = yes hostname = mail.mydomain.com imap_client_workarounds = delay-newmail tb-extra-mailbox-septb-lsub-flags lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes lda_original_recipient_header = X-Original-To mail_attachment_fs = sis-queue posix mail_attachment_hash = %{sha512} mail_debug = yes mail_location = maildir:/usr/local/vmail/%d/%n:LAYOUT=fs mail_plugins = quota acl mail_privileged_group = vmail mailbox_list_index = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelopeencoded-character vacation subaddress comparator-i;ascii-numeric relationalregex imap4flags copy include variables body enotify environment mailbox dateindex ihave duplicate mime foreverypart extracttext mbox_write_locks = fcntl namespace inbox { inbox = yes location = mailbox Archives { auto = subscribe special_use = \Archive } mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "SentMessages" { auto = subscribe special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } mailbox virtual/All { auto = subscribe comment = All my messages special_use = \All } mailbox virtual/Flagged { auto = subscribe comment = All my flaggedmessages special_use = \Flagged } prefix = } passdb { args =/usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { acl = vfile quota = maildir:User quota quota_max_mail_size = 100M quota_rule = *:storage=1G quota_rule2 =Archive:storage=+1G quota_rule3 =Trash:storage=+100M quota_warning = storage=80%%quota-warning 80 %u sieve =/usr/local/vmail/%d/%n/.dovecot.sieve sieve_before =/usr/local/vmail/sieve/before.d/ sieve_dir = /usr/local/vmail/%d/%n sieve_global_dir =/usr/local/vmail/sieve/%d sieve_global_path =/usr/local/vmail/sieve/%d/default.sieve } pop3_client_workarounds = outlook-no-nuls oe-ns-eoh postmaster_address = postmaster(a)mydomain.com protocols = imap pop3 lmtp sieve quota_full_tempfail = yes service auth-worker { user = vmail } service auth { unix_listener/var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = vmail mode = 0600 user = vmail } } service dict { unix_listener dict { mode = 0600 user = vmail } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } process_min_avail = 2 } service lmtp { unix_listener/var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } service managesieve-login { inet_listener sieve { port = 4190 } process_min_avail = 0 service_count = 1 vsz_limit = 64 M } service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 ssl = yes } } service quota-warning { executable = script/usr/local/bin/quota-warning.sh unix_listener quota-warning { user = vmail } user = dovecot } ssl = required ssl_ca = </etc/ssl/cert.pem ssl_cert = </usr/local/etc/dovecot/private/mail.mydomain.com.crt ssl_cipher_list =ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA ssl_dh_parameters_length = 4096 ssl_key = # hidden, use -P toshow it ssl_options = no_compression ssl_parameters_regenerate = 6 hours ssl_prefer_server_ciphers = yes ssl_protocols = TLSv1.2 userdb { driver = prefetch } verbose_ssl = yes protocollda { mail_plugins = quota acl sieve postmaster_address = root } protocol lmtp { deliver_log_format = msgid=%m:%s mail_plugins = quota acl sieve postmaster_address =postmaster(a)mydomain.com } protocol sieve { managesieve_implementation_string = Dovecot Pigeonhole managesieve_max_compile_errors =5 managesieve_max_line_length =65536 } protocolpop3 { mail_plugins = quota } protocolimap { mail_plugins = quota acl imap_quota imap_acl } Dovecot-sql driver = mysql connect = host=127.0.0.1 dbname=mailserver user=mail password=***** default_pass_scheme = SHA512-CRYPT user_query = \ SELECT \ email asuser, \ maildir ashome, \ uid, \ gid, \ CONCAT('*:storage=',quota, 'B') AS quota_rule, \ CONCAT(maildir,'./sieve')as sieve \ FROM \ virtual_users\ WHERE \ email ='%u' \ AND \ active= '1' password_query = \ SELECT \ email asuser, \ password, \ maildir asuserdb_home, \ uid asuserdb_uid, \ gid asuserdb_gid, \ CONCAT('*:storage=',quota, 'B') AS userdb_quota_rule, \ CONCAT(maildir,'./sieve')as userdb_sieve \ FROM \ virtual_users\ WHERE \ email ='%u' \ AND \ active= '1' iterate_query = \ SELECT \ email ASuser \ FROM \ virtual_users\ WHERE \ active ='1' maillog with Disconnected: Inactivity (no auth attempts in 180 secs) Oct 25 06:46:38 mail dovecot: imap-login: Debug: SSL: where=0x10, ret=1:before/accept initialization [192.168.0.95] Oct 25 06:46:38 mail dovecot: imap-login: Debug: SSL: where=0x2001,ret=1: before/accept initialization [192.168.0.95] Oct 25 06:46:38 mail dovecot: imap-login: Debug: SSL: where=0x2002,ret=-1: SSLv2/v3 read client hello A [192.168.0.95] Oct 25 06:46:38 mail dovecot: auth: Debug: auth client connected(pid=9371) Oct 25 06:49:38 mail dovecot: imap-login: Disconnected: Inactivity (noauth attempts in 180 secs): user=<>, rip=192.168.0.95, lip=10.0.0.32, TLShandshaking, session=<+XXXXXXXXXXXXXf> Oct 25 06:49:38 mail postfix/submission/smtpd[9400]: connect fromunknown[192.168.0.95]:50860 Oct 25 06:49:38 mail postfix/submission/smtpd[9400]: Anonymous TLSconnection established from unknown[192.168.0.95]:50860: TLSv1.2 with cipherECDHE-RSA-AES256-SHA384 (256/256 bits) Oct 25 06:49:38 mail dovecot: auth: Debug: auth client connected (pid=0) Oct 25 06:49:38 mail dovecot: auth: Debug: client in: AUTH 1 LOGIN service=smtp nologin lip=10.0.0.32 rip=192.168.0.95 secured Oct 25 06:49:38 mail dovecot: auth: Debug: client passdb out: CONT 1 VXXXXXXXXXX6 Oct 25 06:49:38 mail dovecot: auth: Debug: client in: CONT 1 cXXXXXXXXXXXXXXXXXXXXXXXXXXt(previous base64 data may contain sensitive data) Oct 25 06:49:38 mail dovecot: auth: Debug: client passdb out: CONT 1 UXXXXXXXXXX6 Oct 25 06:49:38 mail dovecot: auth: Debug: client in: CONT 1 dXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX=(previous base64 data may contain sensitive data) Oct 25 06:49:38 mail dovecot: auth-worker(9402): Debug: Loading modulesfrom directory: /usr/local/lib/dovecot/auth Oct 25 06:49:38 mail dovecot: auth-worker(9402): Debug: Module loaded:/usr/local/lib/dovecot/auth/lib20_auth_var_expand_crypt.so Oct 25 06:49:39 mail dovecot: auth-worker(9402): Debug:sql(test@domain.com,192.168.0.95): query: SELECT email as user, password,maildir as userdb_home, uid as userdb_uid, gid as userdb_gid,CONCAT('*:storage=', quota, 'B') AS userdb_quota_rule,CONCAT(maildir,'./sieve') as userdb_sieve FROM virtual_users WHERE email ='test(a)domain.com' AND active = '1' Oct 25 06:49:39 mail dovecot: auth: Debug: client passdb out: OK 1 user=test(a)domain.com Oct 25 06:49:39 mail postfix/submission/smtpd[9400]: 3XXXXXXXXXXXt:client=unknown[192.168.0.95]:50860, sasl_method=LOGIN,sasl_username=test(a)domain.com Oct 25 06:49:39 mail postfix/cleanup[9404]: 3XXXXXXXXXXXt:message-id=<3XXXXXXXXXXXt(a)mail.domain.com> Oct 25 06:49:39 mail opendkim[945]: 3XXXXXXXXXXXt: DKIM-Signature fieldadded (s=201710, d=domain.com) Oct 25 06:49:39 mail postfix/qmgr[8504]: 3XXXXXXXXXXXt:from=<test(a)domain.com>, size=1446, nrcpt=1 (queue active) Oct 25 06:49:39 mail postfix/submission/smtpd[9400]: disconnect fromunknown[192.168.0.95]:50860 ehlo=2 starttls=1 auth=1 mail=1 rcpt=1 data=1commands=7 Oct 25 06:49:49 mail postfix/smtpd[9408]: connect from localhost[127.0.0.1]:23696 Oct 25 06:49:49 mail opendmarc[949]: ignoring connection from localhost Oct 25 06:49:49 mail postfix/smtpd[9408]: 3YYYYYYYYYYY1:client=localhost[127.0.0.1]:23696 Oct 25 06:49:49 mail postfix/cleanup[9404]: 3YYYYYYYYYYY1:message-id=<3XXXXXXXXXXXt(a)mail.domain.com> Oct 25 06:49:49 mail opendkim[945]: 3YYYYYYYYYYY1: DKIM-Signature fieldadded (s=201710, d=domain.com) Oct 25 06:49:49 mail postfix/qmgr[8504]: 3YYYYYYYYYYY1:from=<test(a)domain.com>, size=2918, nrcpt=1 (queue active) Oct 25 06:49:49 mail postfix/smtpd[9408]: disconnect fromlocalhost[127.0.0.1]:23696 ehlo=1 mail=1 rcpt=1 data=1 quit=1 commands=5 Oct 25 06:49:49 mail amavis[913]: (00913-03) Passed CLEAN {RelayedInternal},MYNETS LOCAL [192.168.0.95]:50860 <test(a)domain.com> -><test(a)domain.com>, Queue-ID: 3XXXXXXXXXXXt, Message-ID:<3XXXXXXXXXXXt(a)mail.domain.com>, mail_id: SuyWDTSHlDWx, Hits: -1.099,size: 2315, queued_as: 3YYYYYYYYYYY1, dkim_sd=201710:domain.com, 9815 ms Oct 25 06:49:49 mail postfix/lmtp[9405]: 3XXXXXXXXXXXt:to=<test(a)domain.com>, relay=127.0.0.1[127.0.0.1]:10024, delay=10,delays=0.3/0.03/0.01/9.8, dsn=2.0.0, status=sent (250 2.0.0 fromMTA(smtp:[127.0.0.1]:10025): 250 2.0.0 Ok: queued as 3YYYYYYYYYYY1) Oct 25 06:49:49 mail postfix/lmtp[9409]: warning: smtp_connect_local:opportunistic TLS encryption is not appropriate for unix-domain destinations. Oct 25 06:49:49 mail postfix/qmgr[8504]: 3XXXXXXXXXXXt: removed Oct 25 06:49:49 mail dovecot: lmtp(9410): Debug: none: root=, index=,indexpvt=, control=, inbox=, alt= Oct 25 06:49:49 mail dovecot: lmtp(9410): Connect from local Oct 25 06:49:49 mail dovecot: lmtp(test(a)domain.com): Debug: Loadingmodules from directory: /usr/local/lib/dovecot Oct 25 06:49:49 mail dovecot: lmtp(test(a)domain.com): Debug: Moduleloaded: /usr/local/lib/dovecot/lib01_acl_plugin.so Oct 25 06:49:49 mail dovecot: lmtp(test(a)domain.com): Debug: Moduleloaded: /usr/local/lib/dovecot/lib10_quota_plugin.so Oct 25 06:49:49 mail dovecot: lmtp(test(a)domain.com): Debug: Moduleloaded: /usr/local/lib/dovecot/lib90_sieve_plugin.so Oct 25 06:49:49 mail dovecot: auth: Debug: master in: USER 1 test(a)domain.com service=lmtp Oct 25 06:49:49 mail dovecot: auth: Debug: prefetch(test(a)domain.com): passdbdidn't return userdb entries, trying the next userdb Oct 25 06:49:49 mail dovecot: auth-worker(9402): Debug:sql(test@domain.com): SELECT email as user, maildir as home, uid, gid,CONCAT('*:storage=', quota, 'B') AS quota_rule, CONCAT(maildir,'./sieve') assieve FROM virtual_users WHERE email = 'test(a)domain.com' AND active = '1' Oct 25 06:49:49 mail dovecot: auth: Debug: userdb out: USER 1 test(a)domain.com home=/usr/local/vmail/domain.com/security uid=5000 gid=5000 quota_rule=*:storage=100000000B sieve=/usr/local/vmail/domain.com/security./sieve Oct 25 06:49:49 mail dovecot: lmtp(test(a)domain.com): Debug: auth USERinput: test(a)domain.com home=/usr/local/vmail/domain.com/security uid=5000gid=5000 quota_rule=*:storage=100000000B sieve=/usr/local/vmail/domain.com/security./sieve Oct 25 06:49:49 mail dovecot: lmtp(test(a)domain.com): Debug: Added userdbsetting: plugin/quota_rule=*:storage=100000000B Oct 25 06:49:49 mail dovecot: lmtp(test(a)domain.com): Debug: Added userdbsetting: plugin/sieve=/usr/local/vmail/domain.com/security./sieve Oct 25 06:49:49 mail dovecot: lmtp(9410, test(a)domain.com) Debug:Effective uid=5000, gid=5000, home=/usr/local/vmail/domain.com/security Oct 25 06:49:49 mail dovecot: lmtp(9410, test(a)domain.com) Debug: acl:No acl_shared_dict setting - shared mailbox listing is disabled Oct 25 06:49:49 mail dovecot: lmtp(9410, test(a)domain.com) Debug: Quotaroot: name=User quota backend=maildir args= Oct 25 06:49:49 mail dovecot: lmtp(9410, test(a)domain.com) Debug: Quotarule: root=User quota mailbox=* bytes=100000000 messages=0 Oct 25 06:49:49 mail dovecot: lmtp(9410, test(a)domain.com) Debug: Quotarule: root=User quota mailbox=Archive bytes=+1073741824 messages=0 Oct 25 06:49:49 mail dovecot: lmtp(9410, test(a)domain.com) Debug: Quotarule: root=User quota mailbox=Trash bytes=+104857600 messages=0 Oct 25 06:49:49 mail dovecot: lmtp(9410, test(a)domain.com) Debug: Quotawarning: bytes=80000000 (80%) messages=0 reverse=no command=quota-warning 80test(a)domain.com Oct 25 06:49:49 mail dovecot: lmtp(9410, test(a)domain.com) Debug: Quotagrace: root=User quota bytes=10000000 (10%) Oct 25 06:49:49 mail dovecot: lmtp(9410, test(a)domain.com) Debug:Namespace inbox: type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes,subscriptions=yeslocation=maildir:/usr/local/vmail/domain.com/secu… Oct 25 06:49:49 mail dovecot: lmtp(9410, test(a)domain.com) Debug: fs:root=/usr/local/vmail/domain.com/security, index=, indexpvt=, control=,inbox=/usr/local/vmail/domain.com/security, alt= Oct 25 06:49:49 mail dovecot: lmtp(9410, test(a)domain.com) Debug: acl:initializing backend with data: vfile Oct 25 06:49:49 mail dovecot: lmtp(9410, test(a)domain.com) Debug: acl:acl username = test(a)domain.com Oct 25 06:49:49 mail dovecot: lmtp(9410, test(a)domain.com) Debug: acl:owner = 1 Oct 25 06:49:49 mail dovecot: lmtp(9410, test(a)domain.com) Debug: aclvfile: Global ACLs disabled Oct 25 06:49:49 mail dovecot: lmtp(9410, test(a)domain.com) Debug: quota:quota_over_flag check: quota_over_script unset - skipping Oct 25 06:49:49 mail dovecot: lmtp(test(a)domain.com): Debug: Mailbox<lmtp DATA>: Opened mail UID=1 because: header X-Original-To (Cache fileis unusable) Oct 25 06:49:49 mail dovecot: lmtp(test(a)domain.com): Debug: sieve:Pigeonhole version 0.4.21 (92477967) initializing Oct 25 06:49:49 mail dovecot: lmtp(test(a)domain.com): Debug: 4ZZZZZZZZZZZZZZZZZZZZQ:sieve: file storage: Failed to normalize active script directory(path=/usr/local/vmail/domain.com/security.): Part of the path does not exist(yet) Oct 25 06:49:49 mail dovecot: lmtp(test(a)domain.com): Debug:4ZZZZZZZZZZZZZZZZZZZZQ: sieve: file storage: Using active Sieve script path:/usr/local/vmail/domain.com/security./sieve Oct 25 06:49:49 mail dovecot: lmtp(test(a)domain.com): Debug:4ZZZZZZZZZZZZZZZZZZZZQ: sieve: file storage: Using script storage path:/usr/local/vmail/domain.com/security Oct 25 06:49:49 mail dovecot: lmtp(test(a)domain.com): Debug:4ZZZZZZZZZZZZZZZZZZZZQ: sieve: file storage: Relative path to sieve storage inactive link: /usr/local/vmail/domain.com/security/ Oct 25 06:49:49 mail dovecot: lmtp(test(a)domain.com): Debug: 4ZZZZZZZZZZZZZZZZZZZZQ:sieve: file storage: Failed to normalize active script directory(path=/usr/local/vmail/domain.com/security.): Part of the path does not exist(yet) Oct 25 06:49:49 mail dovecot: lmtp(test(a)domain.com): Debug:4ZZZZZZZZZZZZZZZZZZZZQ: sieve: file storage: Using Sieve script path:/usr/local/vmail/domain.com/security./sieve Oct 25 06:49:49 mail dovecot: lmtp(test(a)domain.com): Debug:4ZZZZZZZZZZZZZZZZZZZZQ: sieve: file storage: Storage path`/usr/local/vmail/domain.com/security./sieve' not found Oct 25 06:49:49 mail dovecot: lmtp(test(a)domain.com): Debug:4ZZZZZZZZZZZZZZZZZZZZQ: sieve: file storage: Storage path`/usr/local/vmail/sieve/domain.com/default.sieve' not found Oct 25 06:49:49 mail dovecot: lmtp(test(a)domain.com): Debug:4ZZZZZZZZZZZZZZZZZZZZQ: sieve: User has no active script in storage`/usr/local/vmail/domain.com/security' Oct 25 06:49:49 mail dovecot: lmtp(test(a)domain.com): Debug:4ZZZZZZZZZZZZZZZZZZZZQ: sieve: User has no personal script Oct 25 06:49:49 mail dovecot: lmtp(test(a)domain.com): Debug:4ZZZZZZZZZZZZZZZZZZZZQ: sieve: file storage: Storage path`/usr/local/vmail/sieve/before.d/' not found Oct 25 06:49:49 mail dovecot: lmtp(test(a)domain.com): Debug:4ZZZZZZZZZZZZZZZZZZZZQ: sieve: Location for sieve_before not found: /usr/local/vmail/sieve/before.d/ Oct 25 06:49:49 mail dovecot: lmtp(test(a)domain.com): Debug:4ZZZZZZZZZZZZZZZZZZZZQ: sieve: No scripts to execute: reverting to defaultdelivery. Oct 25 06:49:49 mail dovecot: lmtp(test(a)domain.com): Debug: INBOX:Mailbox opened because: lib-lda delivery Oct 25 06:49:49 mail dovecot: lmtp(test(a)domain.com): Debug: Mailbox<lmtp DATA>: Opened mail UID=1 because: copying Oct 25 06:49:49 mail dovecot: lmtp(test(a)domain.com): Debug: acl vfile:file /usr/local/vmail/domain.com/security/dovecot-acl not found Oct 25 06:49:49 mail dovecot: lmtp(test@domain.com):msgid=<3XXXXXXXXXXXt(a)mail.domain.com>: Microsoft Outlook Test Message Oct 25 06:49:49 mail postfix/lmtp[9409]: 3YYYYYYYYYYY1:to=<test(a)domain.com>, relay=mail.domain.com[private/dovecot-lmtp],delay=0.48, delays=0.26/0.03/0.13/0.06, dsn=2.0.0, status=sent (250 2.0.0<test(a)domain.com> 4ZZZZZZZZZZZZZZZZZZZZQ Saved) Oct 25 06:49:49 mail dovecot: lmtp(9410): Disconnect from local:Successful quit Oct 25 06:49:49 mail postfix/qmgr[8504]: 3YYYYYYYYYYY1: removed Testing from another computer with openssl s_client -host 10.0.0.32 -port 993 -verify –debug verify depth is 0 CONNECTED(00000003) depth=2 O = Digital Signature Trust Co., CN = DST Root CA X3 verify return:1 depth=1 C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3 verify return:1 depth=0 CN = domain.com verify return:1 --- Certificate chain 0 s:/CN=domain.com i:/C=US/O=Let'sEncrypt/CN=Let's Encrypt Authority X3 1 s:/C=US/O=Let's Encrypt/CN=Let'sEncrypt Authority X3 i:/O=Digital Signature TrustCo./CN=DST Root CA X3 --- Server certificate -----BEGIN CERTIFICATE----- MIIGDjCCBPagAwIBAgISA71fShBIzBs0jj8E7L/XmHyjMA0GCSqGSIb3DQEBCwUA BzzGusiZmPR/KpKnHmRXThgo -----END CERTIFICATE----- subject=/CN=domain.com issuer=/C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3 --- No client certificate CA names sent Peer signing digest: SHA512 Server Temp Key: ECDH, P-256, 256 bits --- SSL handshake has read 3702 bytes and written 457 bytes --- New, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES256-SHA384 Server public key is 4096 bit Secure Renegotiation IS supported Compression: NONE Expansion: NONE No ALPN negotiated SSL-Session: Protocol : TLSv1.2 Cipher : ECDHE-RSA-AES256-SHA384 Session-ID:548A93EA5A644C15EBA4B8335274B3091D33DD8C1741292BA4C0650E7171EF9F Session-ID-ctx: Master-Key:3DA8713979CA918E62C6E2DDB24F25050545390A031AAEEF82208300911D13C1B850FD78771F2046CAF0484F64A9C7A2 Key-Arg : None PSK identity: None PSK identity hint: None SRP username: None TLS session ticket lifetimehint: 300 (seconds) TLS session ticket: 0000 - 63 99 b8 dc b6 5a ca49-4c 35 62 47 95 a6 59 7e c....Z.IL5bG..Y~ 0010 - 2b 6e 64 a6 bf 06 fd a1-85 e5 6d f8 79 4b 762c +nd.......m.yKv, 0020 - 26 12 c9 8d cd da da 6c-5e 1e 4e 6963 30 b7 90 &......l^.Nic0.. 0030 - 45 ce 70 b5 14 01 ba60-d9 85 df f9 a7 66 1d 58 E.p....`.....f.X 0040 - 0d 36 f3 41 29 0b 43 f6-60 c1 0a 5e 2d db b438 .6.A).C.`..^-..8 0050- 31 0b 8e 05 e4 5f f7 30-d6 4f 34 10 3f 4f a6 e2 1...._.0.O4.?O.. 0060 - 17 d3 36 34 14 5a 3a 91-99 25 96 4f5c 82 d8 f0 ..64.Z:..%.O\... 0070 - ee 82 ef eb 77 ad c1 37-9a 6d 60 796f a3 1f 2e ....w..7.m`yo... 0080 - 0c 5a 40 bc 02 de 92 ff-cf 37 e1 df95 41 30 8c .Z@......7...A0. 0090 - 1d 3d e1 cd 1b 3f 78d4-86 d1 ac ad 3a 23 16 85 .=...?x.....:#.. Start Time: 1508923307 Timeout : 300 (sec) Verify return code: 0 (ok) --- * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLEIDLE AUTH=PLAIN AUTH=LOGIN] Dovecot ready. a login test(a)domain.com XXXXXXXXXXXXXXXXXXXXXXXX a OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLEIDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDSUBJECTMULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UIDPLUSLIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHINCONTEXT=SEARCH LIST-STATUS BINARY MOVE NOTIFY QUOTA ACL RIGHTS=texk] Logged in a select inbox * FLAGS (\Answered \Flagged \Deleted \Seen \Draft $Forwarded) * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft$Forwarded \*)] Flags permitted. * 9 EXISTS * 0 RECENT * OK [UNSEEN 6] First unseen. * OK [UIDVALIDITY 1508179896] UIDs valid * OK [UIDNEXT 62] Predicted next UID a OK [READ-WRITE] Select completed (0.003 + 0.000 + 0.002 secs). a logout * BYE Logging out a OK Logout completed (0.002 + 0.000 + 0.001 secs). closed I have removed the certificate and sensitive data. I am out of ideas what else to config to get this working, and wannathank in advice for everyone who can try help me. Regards, PS.: I am going to work now, and as soon as possible, I can test anyadvice and report the results. Alexandre

1 0

Re: Password encription
by Aki Tuomi 25 Oct '17

25 Oct '17

CRAM-MD5 should not be used. Its not terribly secure. ---Aki TuomiDovecot oy -------- Original message --------From: "j.emerlik" <j.emerlik(a)gmail.com> Date: 25/10/2017 11:58 (GMT+02:00) To: Aki Tuomi <aki.tuomi(a)dovecot.fi> Cc: Dovecot Mailing List <dovecot(a)dovecot.org> Subject: Re: Password encription Thx Aki, with CRAP-MD5 as scheme and mechanism it's works corretlly. 2017-10-25 10:52 GMT+02:00 Aki Tuomi <aki.tuomi(a)dovecot.fi>: > PLAIN and LOGIN. > > > > --- > Aki Tuomi > Dovecot oy > > -------- Original message -------- > From: "j.emerlik" <j.emerlik(a)gmail.com> > Date: 25/10/2017 11:41 (GMT+02:00) > To: Dovecot Mailing List <dovecot(a)dovecot.org> > Subject: Password encription > > Hi, > which authentication mechanism should I use for SHA-256 password schama ? > Regards, > Jack >

2 1

Re: Password encription
by j.emerlik 25 Oct '17

25 Oct '17

Thx Aki, with CRAP-MD5 as scheme and mechanism it's works corretlly. 2017-10-25 10:52 GMT+02:00 Aki Tuomi <aki.tuomi(a)dovecot.fi>: > PLAIN and LOGIN. > > > > --- > Aki Tuomi > Dovecot oy > > -------- Original message -------- > From: "j.emerlik" <j.emerlik(a)gmail.com> > Date: 25/10/2017 11:41 (GMT+02:00) > To: Dovecot Mailing List <dovecot(a)dovecot.org> > Subject: Password encription > > Hi, > which authentication mechanism should I use for SHA-256 password schama ? > Regards, > Jack >

1 0

Re: Password encription
by Aki Tuomi 25 Oct '17

25 Oct '17

PLAIN and LOGIN. ---Aki TuomiDovecot oy -------- Original message --------From: "j.emerlik" <j.emerlik(a)gmail.com> Date: 25/10/2017 11:41 (GMT+02:00) To: Dovecot Mailing List <dovecot(a)dovecot.org> Subject: Password encription Hi, which authentication mechanism should I use for SHA-256 password schama ? Regards, Jack

1 0

Password encription
by j.emerlik 25 Oct '17

25 Oct '17

Hi, which authentication mechanism should I use for SHA-256 password schama ? Regards, Jack

1 0

Re: STAT command failure
by Joseph Tam 25 Oct '17

25 Oct '17

Andrew Charnley <ac(a)igaro.com> writes: >>> Regarding STAT which appears to have an issue with Dovecot:- >>> >>> [23:50:46] POP< +OK Dovecot ready. >>> [23:50:46] POP> USER xxxxx >>> [23:50:46] POP< +OK >>> [23:50:46] POP> PASS ******** >>> [23:50:46] POP< +OK Logged in. >>> [23:50:46] POP> STAT >>> [23:50:46] POP< -ERR Unknown command: >> >> user xxxxx >> pass *** >> stat > > I can confirm this works. > 2. Likely an issue with CLAWS email. If you can arrange a network capture of a non-SSL remote CLAWS connection, try checking whether there's a hidden character (NULL, .etc.) being sent. It's also telling that it works for some accounts, and not for others. Try rebuilding the user's index cache by removing it (save a copy!) and see if that makes it work. If it does, you can send the buggy caches to the developer and see if they can figure it out. Joseph Tam <jtam.home(a)gmail.com>

2 1

Fwd: master/master replications v. 2.2.32
by Jorge Canto E. 24 Oct '17

24 Oct '17

doveconf -n # 2.2.32 (dfbe293d4): /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-696.1.1.el6.x86_64 x86_64 CentOS release 6.9 (Final) ext3 auth_socket_path = /var/run/dovecot/auth-userdb doveadm_password = # hidden, use -P to show it doveadm_port = 61800 first_valid_uid = 150 last_valid_uid = 150 mail_location = maildir:/var/vmail/%d/%n mail_plugins = notify replication mail_privileged_group = mail mbox_write_locks = fcntl passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { mail_replica = tcp:xxx.xxx.xxx.xxx } postmaster_address = postmaster(a)it911.mx service aggregator { fifo_listener replication-notify-fifo { mode = 0666 user = vmail } unix_listener replication-notify { mode = 0666 user = vmail } } service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 user = postfix } unix_listener auth-userdb { group = mail mode = 0600 user = vmail } } service config { unix_listener config { user = vmail } } service doveadm { inet_listener { port = 61800 } user = vmail } service replicator { process_min_avail = 1 unix_listener replicator-doveadm { mode = 0666 } } ssl = required ssl_cert = </etc/pki/tls/certs/mailnew.it911.crt ssl_key = # hidden, use -P to show it userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } Thank you Jorge C. On Mon, Oct 23, 2017 at 1:19 PM, Jorge Canto E. <jorge.canto(a)gmail.com> wrote: > Hi, here is doveconf -n > > # 2.2.32 (dfbe293d4): /etc/dovecot/dovecot.conf > # OS: Linux 2.6.32-696.1.1.el6.x86_64 x86_64 CentOS release 6.9 (Final) > ext3 > auth_socket_path = /var/run/dovecot/auth-userdb > first_valid_uid = 150 > last_valid_uid = 150 > mail_location = maildir:/var/vmail/%d/%n > mail_privileged_group = mail > mbox_write_locks = fcntl > passdb { > args = /etc/dovecot/dovecot-sql.conf.ext > driver = sql > } > postmaster_address = postmaster(a)it911.mx > service auth { > unix_listener /var/spool/postfix/private/auth { > mode = 0666 > user = postfix > } > unix_listener auth-userdb { > group = mail > mode = 0600 > user = vmail > } > } > ssl = required > ssl_cert = </etc/pki/tls/certs/mailnew.it911.crt > ssl_key = # hidden, use -P to show it > userdb { > args = /etc/dovecot/dovecot-sql.conf.ext > driver = sql > } > > > Thank you > > Jorge C. > > On Mon, Oct 23, 2017 at 1:07 PM, Aki Tuomi <aki.tuomi(a)dovecot.fi> wrote: > >> >> > On October 23, 2017 at 7:29 PM "Jorge Canto E." <jorge.canto(a)gmail.com> >> wrote: >> > >> > >> > Hi, in the past I set up a master/master replication through TCP using >> > dovecot 2.2.10 on both servers and everything is running fine, I filter >> the >> > users to replicate using the iterate_query on file dovecot-sql.con.ext; >> now >> > I want to set up a new replication between two new servers running >> dovecot >> > 2.2.32 but the replicator service tries to replicate every user on my >> > database even when the iterate_query is correctly set up and the command >> > "doveadm user '*' " shows only the users I want to replicate, I think >> I am >> > missing something but I do not know what. >> > >> > Thank you so much for your help. >> > >> > Jorge C. >> >> Please provide doveconf -n >> >> Aki >> > >

1 0

Post-login scripting
by j.emerlik 24 Oct '17

24 Oct '17

Hi , I would like to save every authentication IP addresses to database, for IMAP and POP3 everything working correct but I don't know how to configure Post-login script for SMTP AUTH. Can you help me ? Regards, Jack

5 11

STAT command failure
by Andrew Charnley 24 Oct '17

24 Oct '17

Hi, Regarding STAT which appears to have an issue with Dovecot:- [23:50:46] POP< +OK Dovecot ready. [23:50:46] POP> USER xxxxx [23:50:46] POP< +OK [23:50:46] POP> PASS ******** [23:50:46] POP< +OK Logged in. [23:50:46] POP> STAT [23:50:46] POP< -ERR Unknown command: I have enabled the logging as previously instructed for pop3 however this is only up to the point of login. After this there is no further information. Login is successful. Other commands are working fine, I can use Evolution which doesn't use STAT and access email fine. The issue only came to light due to an attempt to change to Claws email. Strangely one of my four accounts on the same server does work. There is no difference in the settings and I've tried recreating them on both Claws and the server. The Claws team are 100% sure it's a Dovecot issue. This is the latest version available with Centos 7 so not the most up-to-date but I can't see anything in the logs which would suggest a change for 2.2. Regards, Andrew

2 2

master/master replications v. 2.2.32
by Jorge Canto E. 23 Oct '17

23 Oct '17

Hi, in the past I set up a master/master replication through TCP using dovecot 2.2.10 on both servers and everything is running fine, I filter the users to replicate using the iterate_query on file dovecot-sql.con.ext; now I want to set up a new replication between two new servers running dovecot 2.2.32 but the replicator service tries to replicate every user on my database even when the iterate_query is correctly set up and the command "doveadm user '*' " shows only the users I want to replicate, I think I am missing something but I do not know what. Thank you so much for your help. Jorge C.

2 1

Panic: file index-mail-binary.c
by grupo correo 23 Oct '17

23 Oct '17

Hi, i have Dovecot Director and Dovecot Backends with 2.2.32. i have found a email that my web server send with only one character "=" in the body of the email and it generate a log error in Dovecot log like this: Oct 23 13:16:50 dovecot_2.2.32 dovecot: imap(user@domain): Panic: file index-mail-binary.c: line 358 (blocks_count_lines): assertion failed: (block_count == 0 || block_idx+1 == block_count) Oct 23 13:16:50 dovecot_2.2.32 dovecot: imap(user@domain): Error: Raw backtrace: /usr/local/lib/dovecot/libdovecot.so.0(+0x9a340) [0x7fc22c186340] -> /usr/local/lib/dovecot/libdovecot.so.0(+0x9a41e) [0x7fc22c18641e] -> /usr/local/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7fc22c11c04b] -> /usr/local/lib/dovecot/libdovecot-storage.so.0(+0xaeaab) [0x7fc22c4c4aab] -> /usr/local/lib/dovecot/libdovecot-storage.so.0(index_mail_get_binary_stream+0x3c2) [0x7fc22c4c4f32] -> /usr/local/lib/dovecot/libdovecot-storage.so.0(mail_get_binary_size+0x4b) [0x7fc22c45349b] -> /usr/local/lib/dovecot/libdovecot-storage.so.0(imap_msgpart_size+0x70) [0x7fc22c504ca0] -> dovecot/imap() [0x41d6ea] -> dovecot/imap() [0x41b8d2] -> dovecot/imap(imap_fetch_more+0x35) [0x41cbf5] -> dovecot/imap(cmd_fetch+0x2fb) [0x40f76b] -> dovecot/imap(command_exec+0x5c) [0x41a4ac] -> dovecot/imap() [0x418c6f] -> dovecot/imap() [0x418cff] -> dovecot/imap(client_handle_input+0x175) [0x419085] -> dovecot/imap(client_input+0x72) [0x419552] -> /usr/local/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x52) [0x7fc22c19a432] -> /usr/local/lib/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0xe7) [0x7fc22c19b977] -> /usr/local/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0x3c) [0x7fc22c19a4cc] -> /usr/local/lib/dovecot/libdovecot.so.0(io_loop_run+0x38) [0x7fc22c19a688] -> /usr/local/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7fc22c125eb3] -> dovecot/imap(main+0x2e7) [0x40cb37] -> /lib64/libc.so.6(__libc_start_main+0xf5) [0x7fc22bd4cb15] -> dovecot/imap() [0x40ccb9] Oct 23 13:16:50 dovecot_2.2.32 dovecot: imap(user@domain): Fatal: master: service(imap): child 1636 killed with signal 6 (core dumps disabled) Oct 23 13:16:50 imapintranetmol1v dovecot: imap-login: proxy(user@domain): disconnecting 10.1.21.253 (Disconnected by server(0s idle, in=303, out=869)): user=<user@domain>, method=PLAIN, rip=xxx.xxx.xxx.xxx, lip=xxx.xxx.xxx.xxx, TLS, session=<fJRD8zRc4PwKARX9> The error happens when the client sends this comnand to the Director or to the Backends directly: C: 34 UID FETCH 7059 (BINARY.PEEK[1] BINARY.SIZE[1]) Thank you

1 0

dovecot, winbind and user folders
by Kristian Rink 23 Oct '17

23 Oct '17

Folks; I'm in the process of migrating an existing IMAP infrastructure to something that should be dovecot based. We live inside a Windows AD 2012 realm and the servers use winbind for user authentication as well as pam configurations to automatically create user home dirs whenever the user logs in first. Can something like this (mailbox is automatically generated whenever user logs in first) be done with dovecot too? Any best practises on how to work in such setups? I want to keep setup effort required for new users as low as possible... ;) Thanks in advance and all the best, Kristian

2 1

postfix -1 read errors
by Alef Veld 23 Oct '17

23 Oct '17

Hi all. I’m a bit worried about the following read errors i see in my log lately. Mails still arrive and get sent fine, but what is going on with this? It doesn’t look good. Nothing has change on server side and i restarted all services (dovecot, postfix, saslauthd, sql ). Maybe it’s a temporary iPhone thing (the device im using to read and send mails, not the first time that happened. Maybe changing the port will do the trick). Thanks for looking. Oct 22 20:19:00 www postfix/smtpd[16117]: SSL_accept:SSLv3 flush data Oct 22 20:19:00 www postfix/smtpd[16117]: read from 58130D3F70 [58130FDA83] (5 bytes => -1 (0xFFFFFFFFFFFFFFFF)) Oct 22 20:19:00 www postfix/smtpd[16117]: read from 58130D3F70 [58130FDA83] (5 bytes => 5 (0x5)) Oct 22 20:19:00 www postfix/smtpd[16117]: 0000 16 03 03 00 86 ..... Oct 22 20:19:00 www postfix/smtpd[16117]: read from 58130D3F70 [58130FDA88] (134 bytes => -1 (0xFFFFFFFFFFFFFFFF)) Oct 22 20:19:00 www postfix/smtpd[16117]: read from 58130D3F70 [58130FDA88] (134 bytes => 134 (0x86)) Oct 22 20:19:00 www postfix/smtpd[16117]: 0000 10 00 00 82 00 80 6d 90|41 c3 d3 9f 15 ea 8f 1c ......m. A....... Oct 22 20:19:00 www postfix/smtpd[16117]: 0010 a8 1c 08 ed a9 65 dc 5b|29 87 73 86 31 0e a9 d8 .....e.[ ).s.1... Oct 22 20:19:00 www postfix/smtpd[16117]: 0020 72 54 84 63 5f 9c 59 3e|cd aa da e7 a3 1f a9 b3 rT.c_.Y> ........ Oct 22 20:19:00 www postfix/smtpd[16117]: 0030 eb 0a 62 2b a4 26 65 d5|9d 63 2b c2 e2 8c a2 31 ..b+.&e. .c+....1 Oct 22 20:19:00 www postfix/smtpd[16117]: 0040 51 be ba a2 1e 73 45 7f|be 71 40 46 b9 01 bf 76 Q....sE. .q@F...v Oct 22 20:19:00 www postfix/smtpd[16117]: 0050 6e 77 a5 f5 c0 40 81 11|fa 95 57 e0 06 36 36 a8 nw...@.. ..W..66. Oct 22 20:19:00 www postfix/smtpd[16117]: 0060 21 c4 08 51 d5 d1 a5 98|6d dd f8 0b 79 a0 16 54 !..Q.... m...y..T Oct 22 20:19:00 www postfix/smtpd[16117]: 0070 4f 38 08 14 ab da a9 99|b7 69 b2 dc 81 4d aa 2e O8...... .i...M.. Oct 22 20:19:00 www postfix/smtpd[16117]: 0080 e8 26 57 8d 08 ea .&W... Oct 22 20:19:00 www postfix/smtpd[16117]: SSL_accept:SSLv3 read client key exchange A Oct 22 20:19:00 www postfix/smtpd[16117]: read from 58130D3F70 [58130FDA83] (5 bytes => -1 (0xFFFFFFFFFFFFFFFF)) Oct 22 20:19:00 www postfix/smtpd[16117]: read from 58130D3F70 [58130FDA83] (5 bytes => 5 (0x5)) Oct 22 20:19:00 www postfix/smtpd[16117]: 0000 14 03 03 00 01 ..... Oct 22 20:19:00 www postfix/smtpd[16117]: read from 58130D3F70 [58130FDA88] (1 bytes => -1 (0xFFFFFFFFFFFFFFFF)) Oct 22 20:19:00 www postfix/smtpd[16117]: read from 58130D3F70 [58130FDA88] (1 bytes => 1 (0x1)) Oct 22 20:19:00 www postfix/smtpd[16117]: 0000 01 . Oct 22 20:19:00 www postfix/smtpd[16117]: read from 58130D3F70 [58130FDA83] (5 bytes => -1 (0xFFFFFFFFFFFFFFFF)) Oct 22 20:19:00 www postfix/smtpd[16117]: read from 58130D3F70 [58130FDA83] (5 bytes => 5 (0x5)) Oct 22 20:19:00 www postfix/smtpd[16117]: 0000 16 03 03 00 28 ....( Oct 22 20:19:00 www postfix/smtpd[16117]: read from 58130D3F70 [58130FDA88] (40 bytes => -1 (0xFFFFFFFFFFFFFFFF)) Oct 22 20:19:00 www postfix/smtpd[16117]: read from 58130D3F70 [58130FDA88] (40 bytes => 40 (0x28)) Oct 22 20:19:00 www postfix/smtpd[16117]: 0000 89 eb f1 52 0c 38 5a 84|f8 ab 93 00 f4 ce dc c0 ...R.8Z. ........ Oct 22 20:19:00 www postfix/smtpd[16117]: 0010 04 6f 20 0b 55 d6 ea 85|15 d4 f0 85 c0 13 78 f4 .o .U... ......x. Oct 22 20:19:00 www postfix/smtpd[16117]: 0020 5c 87 1c ed 2a a0 51 56| \...*.QV Oct 22 20:19:00 www postfix/smtpd[16117]: SSL_accept:SSLv3 read finished A Oct 22 20:19:00 www postfix/smtpd[16117]: SSL_accept:SSLv3 write change cipher spec A Oct 22 20:19:00 www postfix/smtpd[16117]: SSL_accept:SSLv3 write finished A Oct 22 20:19:00 www postfix/smtpd[16117]: write to 58130D3F70 [581310B440] (51 bytes => 51 (0x33)) Oct 22 20:19:00 www postfix/smtpd[16117]: 0000 14 03 03 00 01 01 16 03|03 00 28 56 47 45 d2 74 ........ ..(VGE.t Oct 22 20:19:00 www postfix/smtpd[16117]: 0010 69 b8 8d f3 06 30 10 7e|64 42 a3 5b c8 bc a3 18 i....0.~ dB.[.... Oct 22 20:19:00 www postfix/smtpd[16117]: 0020 35 eb cc 50 f6 2e 9c 72|2e 3b 1f 8d 56 1e 1e 80 5..P...r .;..V... Oct 22 20:19:00 www postfix/smtpd[16117]: 0030 fa c7 6b ..k Oct 22 20:19:00 www postfix/smtpd[16117]: SSL_accept:SSLv3 flush data Oct 22 20:19:00 www postfix/smtpd[16117]: Anonymous TLS connection established from cpc98338-croy25-2-0-cust350.19-2.cable.virginm.net<http://cpc98338-croy25-2-0-cust350.19-2.cable.virginm.net>[82.45.65.95]: TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits) Oct 22 20:19:00 www postfix/smtpd[16117]: read from 58130D3F70 [58130FDA83] (5 bytes => -1 (0xFFFFFFFFFFFFFFFF)) Oct 22 20:19:00 www postfix/smtpd[16117]: read from 58130D3F70 [58130FDA83] (5 bytes => 5 (0x5)) Oct 22 20:19:00 www postfix/smtpd[16117]: 0000 17 03 03 00 2d ....- Oct 22 20:19:00 www postfix/smtpd[16117]: read from 58130D3F70 [58130FDA88] (45 bytes => -1 (0xFFFFFFFFFFFFFFFF)) Oct 22 20:19:00 www postfix/smtpd[16117]: read from 58130D3F70 [58130FDA88] (45 bytes => 45 (0x2D))

2 2

Proxy lmtps
by Matthias Kueth 22 Oct '17

22 Oct '17

Hi, when proxying lmtp from director to backend, director does not use STARTTLS. Delivering mails with postfix via lmtps to backend or director works encrypted. Is there a way to force the use of STARTTLS on dovecot director lmtp proxy? Regards, Matthias -- BOFH excuse #446: Mailer-daemon is busy burning your message in hell. (hbox storage?)

2 2

Question regarding replication - duplicate emails
by Remko Lodder 21 Oct '17

21 Oct '17

Dear Dovecot and community, We run a small email service for our customers, based on two machines that are made “redundant or clustered” by using the replication feature of Dovecot. This works well, for most emails. Sometimes the following happends: Email to our support database arrives at the inbox. Every period a cronjob looks into that mailbox and parses the information and makes a support ticket from that message. The cronjob deletes the email afterwards and sees whether there are more new mails or not. In between the deletion and the (next) check, the email gets “resynced” again from the “other machine”, and is seen as a new email by the cronjob and gets handled again. So basically we get two tickets for one email. After that second run the email is no longer replicated. This behaviour can also be seen via webmail and email clients, this suggests that the replication might not be aware (enough) that the replication is occurring or that an item already had been synced from A to B (and does not need to get back from B to A after A deleted it). Is there a way to fiddle with the acknowledgement timing or give the processes some more space/time to get on par with eachother? Below is the configuration of machine B, they are synchronised through puppet, so only the hostname and IP addresses are different. (so for replication, A has: tcps:hostname_of_b:12346 and B has tcps:hostname_of_a:12346). Also note that HAproxy is prepared but not in use at all. # 2.2.33.1 (e9afa7f18): /usr/local/etc/dovecot/dovecot.conf # Pigeonhole version 0.4.20 (7cd71ba) # OS: FreeBSD 11.1-RELEASE amd64 auth_mechanisms = plain login disable_plaintext_auth = no doveadm_password = # hidden, use -P to show it haproxy_trusted_networks = IPv4_Haproxy IPv6_Haproxy lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes lmtp_save_to_detail_mailbox = yes mail_fsync = always mail_location = sdbox:~/sdbox mail_plugins = " quota notify replication" managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext imapsieve vnd.dovecot.imapsieve namespace { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Spam { auto = subscribe special_use = \Junk } mailbox Trash { auto = subscribe special_use = \Trash } prefix = separator = . } passdb { driver = pam } plugin { imapsieve_mailbox1_before = file:/usr/local/lib/dovecot/sieve/report-spam.sieve imapsieve_mailbox1_causes = COPY imapsieve_mailbox1_name = Spam imapsieve_mailbox2_before = file:/usr/local/lib/dovecot/sieve/report-ham.sieve imapsieve_mailbox2_causes = COPY imapsieve_mailbox2_from = Spam imapsieve_mailbox2_name = * mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size mail_replica = tcps:hostname_of_machine_a:12346 sieve = ~/.dovecot.sieve sieve_after = /usr/local/etc/dovecot/sieve/after/ sieve_before = /usr/local/etc/dovecot/sieve/global/ sieve_pipe_bin_dir = /usr/local/lib/dovecot/sieve sieve_plugins = sieve_imapsieve sieve_extprograms sieve_vacation_dont_check_recipient = yes } postmaster_address = postmaster(a)ourdomain.tld protocols = imap pop3 lmtp sieve replication_max_conns = 100 service aggregator { fifo_listener replication-notify-fifo { mode = 0666 } unix_listener replication-notify { mode = 0666 } } service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } } service doveadm { inet_listener { port = 12346 ssl = yes } } service imap-login { inet_listener imap_haproxy { haproxy = yes port = 10143 } inet_listener imaps_haproxy { haproxy = yes port = 10144 ssl = yes } service_count = 1 } service imap { process_limit = 1024 } service lmtp { inet_listener lmtp { address = IPv4, IPv6, 127.0.0.1 ::1 port = 24 } unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } service pop3 { process_limit = 1024 } service replicator { process_min_avail = 1 unix_listener replicator-doveadm { mode = 0666 } } ssl_ca = </usr/local/etc/letsencrypt/live/host.ourdomain.tld/fullchain.pem ssl_cert = </usr/local/etc/letsencrypt/live/host.ourdomain.tld/cert.pem ssl_client_ca_file = /usr/local/certificates/letsencrypt-ca.pem ssl_key = # hidden, use -P to show it ssl_protocols = !SSLv2 !SSLv3 userdb { driver = passwd } verbose_proctitle = yes protocol lmtp { auth_username_format = %n mail_plugins = quota sieve replication notify postmaster_address = postmaster(a)ourdomain.tld } protocol lda { mail_plugins = " quota notify replication sieve replication notify" } protocol imap { imap_client_workarounds = delay-newmail mail_max_userip_connections = 50 mail_plugins = " quota notify replication imap_quota imap_sieve" }

2 3

Re: IMAP stops responding.
by Joseph Tam 20 Oct '17

20 Oct '17

S?ren Peter Skou <sps(a)DanskKabelTV.dk> writes: > I've experienced that IMAP/IMAPS stops responding. To restore service > there is only one way, restart Dovecot completely. This leads to > services being interrupted for some people, so it seems to only affect > some of the users on the server. But POP3/POP3s is still running > happily. Also, it happens more as we approach Rush Hour. Help us help you: the problem is most likely pointed out in the log files. Also, a dump of your configurations (doveconf -n) would help. Offhand, it seems you've hit an IMAP resource limit, such as mail_max_userip_connections, or perhaps process/memory limits (e.g. process_limit, vsz_limit, etc.). Joseph Tam <jtam.home(a)gmail.com>

1 0

fts_solr: Indexing failed: 500 Server Error
by Kirill Ponomarev 20 Oct '17

20 Oct '17

Hi, running dovecot 2.2.33.2 with solr 7.1.0 (with new XML scheme instead of JSON) on FreeBSD produces this error message: Oct 20 20:58:29 krion postfix/smtpd[13371]: disconnect from mail-yw0-f169.google.com[209.85.161.169] ehlo=2 +starttls=1 mail=1 rcpt=1 data=1 quit=1 commands=7 Oct 20 20:58:29 krion dovecot: indexer-worker(krion(a)krion.cc): Error: fts_solr: Indexing failed: 500 Server Error Oct 20 20:58:29 krion dovecot: indexer-worker(krion(a)krion.cc): Error: fts_solr: Indexing failed: 500 Server Error Oct 20 20:58:29 krion dovecot: indexer-worker(krion(a)krion.cc): Error: Mailbox INBOX: Transaction commit failed: FTS +transaction commit failed: backend deinit (attempted to index 1 messages (UIDs 166..166)) Oct 20 20:58:30 krion dovecot: imap(krion(a)krion.cc): Connection closed (IDLE finished 451.007 secs ago) in=43 +out=812 K.

1 0

IMAP stops responding.
by Søren Peter Skou 20 Oct '17

20 Oct '17

Hiya all, I've experienced that IMAP/IMAPS stops responding. To restore service there is only one way, restart Dovecot completely. This leads to services being interrupted for some people, so it seems to only affect some of the users on the server. But POP3/POP3s is still running happily. Also, it happens more as we approach Rush Hour. All of this leads me to believe that we're facing a problem with clients somehow. I've searched the net for the problem, and dating back I've found references to Apple units being the culprit. So we've taken an old Apple client, and tried to see how many sessions it actually starts, the result of that test was that regardless what we tried it only opened one extra session. A bit of information, Debian OS : dovecot-core 2:2.2.27-1~auto+44 amd64 secure POP3/IMAP server - core files dovecot-imapd 2:2.2.27-1~auto+44 amd64 secure POP3/IMAP server - IMAP daemon dovecot-mysql 2:2.2.27-1~auto+44 amd64 secure POP3/IMAP server - MySQL support dovecot-pop3d 2:2.2.27-1~auto+44 amd64 secure POP3/IMAP server - POP3 daemon dovecot-sieve 2:2.2.27-1~auto+44 amd64 secure POP3/IMAP server - Sieve filters support the Config itself is fairly simple, lookup through MySQL to find username/password etc - I don't really see any obvious option. Also, limiting users/sessions per IP isn't really a good idea as we have a great deal of customers behind NAT. Med venlig hilsen/Best regards Søren P. Skou Netværkstekniker [logo] Teglholmsgade 1 0900 København C Tlf: 69 12 12 12 E-mail: sps(a)danskkabeltv.dk<mailto:sps@danskkabeltv.dk> Web: www.danskkabeltv.dk<http://www.danskkabeltv.dk/>

2 1

v2.2.33.2 released
by Timo Sirainen 20 Oct '17

20 Oct '17

https://dovecot.org/releases/2.2/dovecot-2.2.33.2.tar.gz https://dovecot.org/releases/2.2/dovecot-2.2.33.2.tar.gz.sig One more patch release with some fixes: - doveadm: Fix crash in proxying (or dsync replication) if remote is running older than v2.2.33 - auth: Fix memory leak in %{ldap_dn} - dict-sql: Fix data types to work correctly with Cassandra

1 0

Re: HTTPS for http://xi.dovecot.fi/debian/
by Aki Tuomi 20 Oct '17

20 Oct '17

> On October 20, 2017 at 12:37 PM Florent B <florent(a)coppint.com> wrote: > > > Hi, > > We use Dovecot packages from http://xi.dovecot.fi/debian/. > > Could it be possible to serve it with HTTPS ? > > Thank you. > > Florent Hi! It has now https enabled with valid certificate. Aki

1 0

quota only for oungoing
by Aidar Kamalov 20 Oct '17

20 Oct '17

Hello! I setup quota and quota warnings for my mail system(dovecot+exim). By I want to reject only outgoing messages if quota exceeded. Is it possible to congi dovecot to not reject incoming messages? I use dovecot-lda for mail delivery. ldap_delivery: driver = pipe command = /usr/lib/dovecot/deliver -d "${lookup ldap{user=**********))(mai -f $sender_address -a $original_local_part@$original_domain message_prefix = message_suffix = delivery_date_add envelope_to_add return_path_add log_output return_output user = mail group = mail temp_errors = 64 : 69 : 70: 71 : 72 : 73 : 74 : 75 : 78 -- Aydar A. Kamalov

2 5

Iteration for ldap userdb does not work
by Holger A. Brinkhaus 20 Oct '17

20 Oct '17

Hi, I have a working ldap authentification for dovecot (with ldap based userdb query) for my Active Directory but iterations by doveadm -A runs in timeout. I tried now for three days and get it not to work. Best regards Holger /etc/dovecot/dovecot-ldap-userdb.conf is symlink to /etc/doveconf/doveconf-ldap.conf debug_level = 0 uris = ldaps://server1.office.hb-os.de:636 dn = cn=BINDUSER,cn=Users,dc=SUBDOM,dc=DOM,dc=de dnpass = MYPASSWORD auth_bind = yes ldap_version = 3 deref = never base = cn=Users,dc=SUBDOM,dc=DOM,dc=de scope = subtree user_attrs = =home=/usr/data/vmail/%d/%n, =mail=maildir:/usr/data/vmail/%d/%n/Maildir user_filter = (&(objectClass=person)(mail=%u)) pass_filter = (&(objectClass=person)(mail=%u)) iterate_attrs = mail=user iterate_filter = (objectClass=person) doveconf -n # 2.2.13: /etc/dovecot/dovecot.conf # OS: Linux 3.16.0-4-amd64 x86_64 Debian 8.9 auth_mechanisms = plain login base_dir = /var/run/dovecot/ default_vsz_limit = 512 M dict { expire = mysql:/etc/dovecot/dovecot-dict-expire.conf.ext } first_valid_uid = 100 imap_idle_notify_interval = 16 mins lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes log_path = /var/log/dovecot.log log_timestamp = "%Y-%m-%d %H:%M:%S " mail_gid = vmail mail_home = /usr/data/vmail/%d/ mail_location = maildir:~/Maildir:LAYOUT=fs mail_plugins = expire mail_privileged_group = vmail mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } plugin { antispam_backend = pipe antispam_debug_target = syslog antispam_pipe_program = /usr/data/vmail/spampipe.sh antispam_pipe_program_notspam_arg = --ham antispam_pipe_program_spam_arg = --spam antispam_pipe_tmp_dir = /tmp antispam_spam = Junk;SPAM;Spam antispam_trash = Trash expire = Trash expire2 = Trash/* expire3 = Junk expire_dict = proxy::expire sieve = /usr/data/vmail/%u/sieve/active-script.sieve sieve_before = /usr/data/vmail/sieve/spam-global.sieve sieve_dir = /usr/data/vmail/%d/%n/sieve/scripts/ sieve_max_redirects = 4 sieve_max_script_size = 1M sieve_quota_max_scripts = 128 } postmaster_address = ME(a)DOMAIN.de protocols = imap lmtp sieve service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = postfix mode = 0600 user = postfix } user = vmail } service dict { unix_listener dict { group = vmail mode = 0600 user = vmail } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } process_min_avail = 10 service_count = 1 } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } ssl_cert = </etc/ssl/certs/MY_CERT.crt ssl_key = </etc/ssl/private/MY_CERT.key userdb { args = /etc/dovecot/dovecot-ldap-userdb.conf driver = ldap } protocol lmtp { mail_plugins = expire sieve } protocol lda { mail_plugins = expire sieve } protocol imap { mail_max_userip_connections = 10 mail_plugins = expire antispam }

2 2

Dovecot >=2.2.29 + Filesystem quota = incorrect storage information
by Macka 18 Oct '17

18 Oct '17

Hi, I have problem with quota storage information in dovecot-2.2.29 (and newer versions, too - 2.2.30.2). I use FS quota backend. ............................ # 2.2.29.1 (e0b76e3): /etc/dovecot/dovecot.conf # OS: Linux 4.4.68-1 x86_64 mail_plugins = quota plugin { quota = fs:User quota:mount=/poczta:user quota2 = fs:Group quota:mount=/poczta:group } protocol imap { mail_max_userip_connections = 10 mail_plugins = "imap_quota mail_log notify antispam" } ................................. After upgrade from 2.2.27 to 2.2.29 (newest 2.2.30.2 too), dovecot returns incorrect informations about quota storage: # doveadm quota get -u myusername Quota name Type Value Limit % User quota STORAGE 10960896 100000 10960 or # ( echo "A1 GETQUOTAROOT INBOX"; echo "A2 logout" ) | /usr/lib64/dovecot/imap -u myusername * PREAUTH [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDSUBJECT MULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS BINARY MOVE NOTIFY SPECIAL-USE QUOTA] Logged in as myusername imap(myusername): Info: Logged out in=31 out=588 * QUOTAROOT INBOX "User quota" * QUOTA "User quota" (STORAGE 10960896 100000) A1 OK Getquotaroot completed (0.001 + 0.000 secs). * BYE Logging out A2 OK Logout completed (0.001 + 0.000 secs). Values are in BYTES and Limit in BLOCKS which gives insane information in % Other server with older version 2.2.27 returns correct numbers (both in BLOCKS) # doveadm quota get -u username2 Quota name Type Value Limit % user STORAGE 558336 614400 90 Is this a bug in new versions? How can I fix this? -- macka

3 6

Re: Last Login example
by Siarhei Chystsiakou 18 Oct '17

18 Oct '17

My config: config plugins: # cat /etc/dovecot/conf.d/90-last_login.conf > dict { > lastlogin = mysql:/etc/dovecot/dict.conf.d/90-lastlogin.conf > } > plugin { > last_login_dict = proxy::lastlogin > } config db connector: # cat /etc/dovecot/dict.conf.d/90-lastlogin.conf > connect=host=localhost dbname=mail_user user=userDB password=Pa$$w0rd > map { > pattern = shared/last-login/$user > table = mailbox > username_field = username > value_field = lastlogin > value_type = uint > fields { > username = $user > } > } config imap and pop3 # cat /etc/dovecot/dict.conf.d/20-imap.conf > protocol imap { > mail_plugins = $mail_plugins quota imap_quota imap_acl last_login > } > # cat /etc/dovecot/dict.conf.d/20-pop3.conf > protocol imap { > mail_plugins = $mail_plugins last_login > } In the database in the table with users to add a column. If you have questions, I'll try to answer 2017-10-14 20:20 GMT+02:00 Jorge Bastos <mysql.jorge(a)decimal.pt>: > Howdy, > > > > Where can i find a configuration example for the last login plugin, that > fits for latest dovecot version? > > Thanks in advanced! > > > > Jorge, >

1 0

Re: Last Login example
by Aki Tuomi 18 Oct '17

18 Oct '17

On 14.10.2017 21:20, Jorge Bastos wrote: > Howdy, > > > > Where can i find a configuration example for the last login plugin, that > fits for latest dovecot version? > > Thanks in advanced! > > > > Jorge, https://wiki.dovecot.org/Plugins/LastLogin Is there some problem you are experiencing? Aki

1 0

Replication between different versions of dovecot
by Dmitry Nezhevenko 18 Oct '17

18 Oct '17

Hi, Can't find any notes about this in documentation. Is replication supposed to work between different versions of dovecot? I've just found that dovecot 2.2.33.1 was uploaded to debian unstable and it crashes on every replication with older dovecot 2.2.27. (version 2.2.32.1 was probably ok) Summary: - 2.2.33.1 crashes when replicating from/to 2.2.27 - 2.2.32.1 probably ok when replicating from/to 2.2.27 I was able to capture backtrace of crashed doveadm-server: Program terminated with signal SIGSEGV, Segmentation fault. #0 i_stream_next_line (stream=stream@entry=0x0) at istream.c:428 428 istream.c: No such file or directory. (gdb) bt #0 i_stream_next_line (stream=stream@entry=0x0) at istream.c:428 #1 0x00007f60244306df in i_stream_read_next_line (stream=0x0) at istream.c:449 #2 0x0000560304f22e79 in server_connection_print_log (conn=0x560305e930f8) at server-connection.c:305 #3 0x0000560304f238af in server_connection_input_one (conn=<optimized out>) at server-connection.c:405 #4 server_connection_input (conn=<optimized out>) at server-connection.c:390 #5 0x00007f602443a572 in io_loop_call_io (io=0x560305e81e30) at ioloop.c:600 #6 0x00007f602443bc1e in io_loop_handler_run_internal (ioloop=ioloop@entry=0x560305e59ad0) at ioloop-epoll.c:223 #7 0x00007f602443a606 in io_loop_handler_run (ioloop=ioloop@entry=0x560305e59ad0) at ioloop.c:649 #8 0x00007f602443a7b8 in io_loop_run (ioloop=0x560305e59ad0) at ioloop.c:624 #9 0x0000560304f0de5a in dsync_connect_tcp (ctx=ctx@entry=0x560305e7e9e8, mail_set=mail_set@entry=0x560305e8ad50, target=0x560305e8b94c "inhex.vpn.local:9993", ssl=ssl@entry=false, error_r=error_r@entry=0x7fff8e40b9e8) at doveadm-dsync.c:850 #10 0x0000560304f0fbe3 in parse_location (error_r=0x7fff8e40b9e8, remote_cmd_args_r=0x7fff8e40b858, location=<optimized out>, mail_set=0x560305e8ad50, ctx=0x560305e7e9e8) at doveadm-dsync.c:875 #11 cmd_dsync_prerun (_ctx=0x560305e7e9e8, service_user=<optimized out>, error_r=0x7fff8e40b9e8) at doveadm-dsync.c:947 #12 0x0000560304f10891 in doveadm_mail_next_user (ctx=ctx@entry=0x560305e7e9e8, cctx=cctx@entry=0x7fff8e40b9f0, error_r=error_r@entry=0x7fff8e40b9e8) at doveadm-mail.c:414 #13 0x0000560304f11473 in doveadm_mail_single_user (ctx=ctx@entry=0x560305e7e9e8, cctx=cctx@entry=0x7fff8e40b9f0, error_r=error_r@entry=0x7fff8e40b9e8) at doveadm-mail.c:460 #14 0x0000560304f262fb in doveadm_mail_cmd_server_run (cctx=0x7fff8e40b9f0, mctx=0x560305e7e9e8, conn=0x560305e7a878) at client-connection.c:246 #15 doveadm_cmd_handle (cctx=0x7fff8e40b9f0, argv=<optimized out>, argc=<optimized out>, cmd_name=<optimized out>, conn=0x560305e7a878) at client-connection.c:329 #16 client_handle_command (args=<optimized out>, conn=0x560305e7a878) at client-connection.c:399 #17 client_connection_input (conn=<optimized out>) at client-connection.c:541 #18 0x00007f602443a572 in io_loop_call_io (io=0x560305e58c40) at ioloop.c:600 #19 0x00007f602443bc1e in io_loop_handler_run_internal (ioloop=ioloop@entry=0x560305e529a0) at ioloop-epoll.c:223 #20 0x00007f602443a606 in io_loop_handler_run (ioloop=ioloop@entry=0x560305e529a0) at ioloop.c:649 #21 0x00007f602443a7b8 in io_loop_run (ioloop=0x560305e529a0) at ioloop.c:624 #22 0x00007f60243bf893 in master_service_run (service=0x560305e52840, callback=<optimized out>) at master-service.c:719 #23 0x0000560304f011d5 in main (argc=<optimized out>, argv=<optimized out>) at main.c:143 -- WBR, Dmitry

2 4

Re: Limit the nuumber of mails POPped at a time
by Joseph Tam 18 Oct '17

18 Oct '17

> I have a piece of software with a mailclient that has problems when it > POP's large amounts of mail. Unfortunately the system can't be updated > or fixed.So I'm trying to figure out if I can limit the number of mails > that can be seen via Dovecot. > ... > So it would be a question of always presenting a maximum of 300 mails > via the POP3.Is it doable? You're probably solving the wrong problem -- the mail client really ought to be able to process 300+ messages. It may be a better use of time to fix that than to torture dovecot to give you what you want. You can try using a plugin to define a virtual INBOX https://wiki.dovecot.org/Plugins/Virtual with search/selection criteria to limit the number of messages. You can also try some LDA script (e.g. procmail) hackery to create INBOX volumes of 300 messages, then do some shuffling around when the INBOX gets emptied. Joseph Tam <jtam.home(a)gmail.com>

1 0

mdbox + director + nfs
by Raymond Sellars 17 Oct '17

17 Oct '17

Hi Matt We've been running this configuration for the past couple of years. Not noticed any locking issues. As I understand it that's the objective of using Director. As Aki notes make sure you have the appropriate NFS settings. Other lessons we encountered. Important to ensure NFS is NTP sync'd and aligned with your hosts, we hit some issues with file timestamps leading to problems. Replication, e.g. for perhaps a backup or DR site. Seems to work but we've had the odd occasion of the indexes drifting. Never tracked the reason down and believe its unrelated to the NFS. Just something to monitor. Regards Raymond ------------------------------ Message: 5 Date: Tue, 17 Oct 2017 08:50:18 +0300 From: Aki Tuomi <aki.tuomi(a)dovecot.fi> To: dovecot(a)dovecot.org Subject: Re: mdbox + director + nfs Message-ID: <70b54e75-14fe-2caa-eccb-1ffc05c2a1e5(a)dovecot.fi> Content-Type: text/plain; charset=utf-8 NFS with mdbox should work just fine, locking should not be an issue, but please read https://wiki.dovecot.org/NFS Aki On 17.10.2017 02:32, Matt Bryant wrote: > Anyone had any experience they can share using a director setup with > NFS and using the mdbox format instead of maildir. Is locking an issue > on index files ?? > > rgds > > Matt

1 0

Dovecot 2.2.31 Incorrect Search
by Siarhei Chystsiakou 17 Oct '17

17 Oct '17

Hi. I have installed dovecot 2.2.31 and fts plugin with Apache Solr 6.6.1. I have found that imap search is not correct in my dovecot. For example, I want to find email from user s.chistiakov(a)example.com. I run IMAP command "SEARCH FROM s.chi" and result is null. But if I run IMAP command "SEARCH FROM s.chistiakov" I get list of emails from this user. Why does this happen and how to fix it? Help me please ) Thanks. Result of my actions in telnet: https://hastebin.com/fewanacafu.md Dovecot config: https://hastebin.com/noqehimaxu.makefile

2 2

Re: Disable PAM
by Aki Tuomi 17 Oct '17

17 Oct '17

Yep. Just remove any passdb/userdb pam blocks ---Aki TuomiDovecot oy -------- Original message --------From: Travis Dolan <travis.dolan(a)gmail.com> Date: 17/10/2017 17:40 (GMT+02:00) To: dovecot(a)dovecot.org Subject: Disable PAM Can I disable PAM auth if all my username/password lookups are via a database connection? I would love to get rid of the following lines in my logs... Oct 17 14:32:14 auth-worker(7809): Info: pam(xxx-xxx-xxx,111.111.111.111,<sdfhgsdfgsd>): pam_authenticate() failed: Authentication failure (password mismatch?) Cheers.

1 0

Disable PAM
by Travis Dolan 17 Oct '17

17 Oct '17

Can I disable PAM auth if all my username/password lookups are via a database connection? I would love to get rid of the following lines in my logs... Oct 17 14:32:14 auth-worker(7809): Info: pam(xxx-xxx-xxx,111.111.111.111,<sdfhgsdfgsd>): pam_authenticate() failed: Authentication failure (password mismatch?) Cheers.

1 0

Limit the nuumber of mails POPped at a time
by K F 17 Oct '17

17 Oct '17

Hi All I'm completely new to the world of Dovecot, so please bear with me if this is a simple noob question (which I fer it is :-) ) I have a postfix/dovecot setup for handling specific mails for clients. I have a piece of software with a mailclient that has problems when it POP's large amounts of mail. Unfortunately the system can't be updated or fixed.So I'm trying to figure out if I can limit the number of mails that can be seen via Dovecot. The procedure would be likeThe client connects. Dovecot limits the number of mails to 300. The client fetches and deletes the POPped mails immediately after retreivel.Next time it POPs it has the next batch. So it would be a question of always presenting a maximum of 300 mails via the POP3.Is it doable? Dovecot is version 2.2.10Server is a CentOS 7. Best regardsK

1 0

Fast replication
by ＠4OS 17 Oct '17

17 Oct '17

Hi, I'm trying to get replication to work with a 2 machines setup. So far full replication is happening at the specified interval (24hrs) without problem but fast sync is not happening. The fast sync counter is always equal to full sync unless i exec dsync manually. doveadm replicator status '*' username priority fast sync full sync success sync failed johndoe(a)oricom.dmz none 00:06:33 00:06:33 00:21:33 - johndoe2(a)oricom.dmz none 00:06:34 00:06:34 00:06:34 - johndoe3(a)oricom.dmz none 00:06:34 00:06:34 00:06:34 - The fast replication part is not clear and i cannot find much about it. There is nothing related with dovecot -a and the documentation does not say much about it. How the fast replication is triggered? Manually or it is supposed to be automatic through some type of config. Some light over this would help me understand the way it work and how to get it setup right. yves

2 2

mdbox + director + nfs
by Matt Bryant 17 Oct '17

17 Oct '17

Anyone had any experience they can share using a director setup with NFS and using the mdbox format instead of maildir. Is locking an issue on index files ?? rgds Matt -- <https://www.postbox-inc.com/?utm_source=email&utm_medium=siglink&utm_campai…>

3 2

Trash plugin unexpected results
by Stephan Herker 16 Oct '17

16 Oct '17

I have the trash plugin enabled and testing it out I had an account with a 30MB quota. In the accounts trash it had an email with a large attachment. I sent the same email again to the account expecting the trash plugin to purge the message from trash to make space for the new message in the inbox. However I got an error saying it couldn't remove enough trash to make space. This behavior seems unexpected because it seems like the trash plugin didn't account for the quota and size available. Debug logs and dovecot -n output below. Oct 07 17:33:13 lmtp(31543): Debug: none: root=, index=, indexpvt=, control=, inbox=, alt= Oct 07 17:33:13 lmtp(31543): Info: Connect from local Oct 07 17:33:13 lmtp(31543): Debug: Loading modules from directory: /usr/lib64/dovecot Oct 07 17:33:13 lmtp(31543): Debug: Module loaded: /usr/lib64/dovecot/lib10_quota_plugin.so Oct 07 17:33:13 lmtp(31543): Debug: Module loaded: /usr/lib64/dovecot/lib11_trash_plugin.so Oct 07 17:33:13 lmtp(31543): Debug: Module loaded: /usr/lib64/dovecot/lib20_autocreate_plugin.so Oct 07 17:33:13 lmtp(31543): Debug: Module loaded: /usr/lib64/dovecot/lib90_sieve_plugin.so Oct 07 17:33:13 lmtp(31543): Debug: auth input: 123(a)testdo.com home=/home/vmail/testdo.com/123 mail=maildir:/home/vmail/testdo.com/123 uid=2000 gid=2000 quota_rule=*:storage=30000 Oct 07 17:33:13 lmtp(31543): Debug: Added userdb setting: mail=maildir:/home/vmail/testdo.com/123 Oct 07 17:33:13 lmtp(31543): Debug: Added userdb setting: plugin/quota_rule=*:storage=30000 Oct 07 17:33:13 lmtp(31543, 123(a)testdo.com) Debug: Effective uid=2000, gid=2000, home=/home/vmail/testdo.com/123 Oct 07 17:33:13 lmtp(31543, 123(a)testdo.com) Debug: Quota root: name=User quota backend=dict args=:proxy::quotadict Oct 07 17:33:13 lmtp(31543, 123(a)testdo.com) Debug: Quota rule: root=User quota mailbox=* bytes=30720000 messages=0 Oct 07 17:33:13 lmtp(31543, 123(a)testdo.com) Debug: Quota rule: root=User quota mailbox=Trash bytes=+104857600 messages=0 Oct 07 17:33:13 lmtp(31543, 123(a)testdo.com) Debug: Quota grace: root=User quota bytes=3072000 (10%) Oct 07 17:33:13 lmtp(31543, 123(a)testdo.com) Debug: dict quota: user=123(a)testdo.com, uri=proxy::quotadict, noenforcing=0 Oct 07 17:33:13 lmtp(31543, 123(a)testdo.com) Debug: Namespace inbox: type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:/home/vmail/testdo.com/123 Oct 07 17:33:13 lmtp(31543, 123(a)testdo.com) Debug: maildir++: root=/home/vmail/testdo.com/123, index=, indexpvt=, control=, inbox=/home/vmail/testdo.com/123, alt= Oct 07 17:33:13 lmtp(31543, 123(a)testdo.com) Debug: trash plugin: Added 'Spam' with priority 1 Oct 07 17:33:13 lmtp(31543, 123(a)testdo.com) Debug: trash plugin: Added 'Trash' with priority 2 Oct 07 17:33:13 lmtp(31543, 123(a)testdo.com) Debug: sieve: Pigeonhole version 0.4.2 initializing Oct 07 17:33:13 lmtp(31543, 123(a)testdo.com) Debug: uFHMBEly2Vk3ewAAobcTNA: sieve: using the following location for user's Sieve script: /home/vmail/testdo.com/123/.dovecot.sieve;name=main script Oct 07 17:33:13 lmtp(31543, 123(a)testdo.com) Debug: uFHMBEly2Vk3ewAAobcTNA: sieve: loading script /home/vmail/testdo.com/123/.dovecot.sieve;name=main script Oct 07 17:33:13 lmtp(31543, 123(a)testdo.com) Debug: uFHMBEly2Vk3ewAAobcTNA: sieve: script binary /home/vmail/testdo.com/123/.dovecot.svbin successfully loaded Oct 07 17:33:13 lmtp(31543, 123(a)testdo.com) Debug: uFHMBEly2Vk3ewAAobcTNA: sieve: binary save: not saving binary /home/vmail/testdo.com/123/.dovecot.svbin, because it is already stored Oct 07 17:33:13 lmtp(31543, 123(a)testdo.com) Debug: uFHMBEly2Vk3ewAAobcTNA: sieve: executing script from /home/vmail/testdo.com/123/.dovecot.svbin Oct 07 17:33:13 lmtp(31543, 123(a)testdo.com) Debug: trash plugin: Failed to remove enough messages (needed 17035766 bytes, expunged only 16803594 bytes) Oct 07 17:33:13 lmtp(31543, 123(a)testdo.com) Info: uFHMBEly2Vk3ewAAobcTNA: sieve: msgid=<c5189e27-b2e3-bcc2-b34f-ecffa9d614cc(a)keagaming.com>: failed to store into mailbox 'INBOX': Quota exceeded (mailbox for user is full) Oct 07 17:33:13 lmtp(31543, 123(a)testdo.com) Info: uFHMBEly2Vk3ewAAobcTNA: sieve: execution of script /home/vmail/testdo.com/123/.dovecot.sieve;name=main script failed with unsuccessful implicit keep (user logfile /home/vmail/testdo.com/123/.dovecot.sieve.log may reveal additional details) Oct 07 17:33:13 lmtp(31543): Info: Disconnect from local: Successful quit # 2.2.10: /etc/dovecot/dovecot.conf # OS: Linux 3.10.0-514.26.2.el7.x86_64 x86_64 CentOS Linux release 7.4.1708 (Core) xfs auth_mechanisms = plain login dict { quotadict = mysql:/etc/dovecot/dovecot-dict-quota.conf } first_valid_uid = 2000 hostname = testdo.com last_valid_uid = 2000 log_path = /var/log/dovecot.log mail_debug = yes mail_gid = vmail mail_location = maildir:/home/vmail/%d/%n mail_plugins = " quota trash expire" mail_privileged_group = mail mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave mbox_write_locks = fcntl namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { quota = dict:User quota::proxy::quotadict quota_grace = 10%% quota_rule2 = Trash:storage=+100M quota_status_nouser = DUNNO quota_status_overquota = 552 5.2.2 Mailbox is full quota_status_success = DUNNO sieve_dir = ~/sieve sieve_global_dir = /etc/dovecot/sieve/global/ sieve_global_path = /etc/dovecot/sieve/default.sieve trash = /etc/dovecot/dovecot-trash.conf.ext } postmaster_address = administrator(a)testdo.com protocols = imap lmtp sieve service auth-worker { user = vmail } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-client { group = postfix mode = 0660 user = postfix } unix_listener auth-master { group = vmail mode = 0660 user = vmail } unix_listener auth-userdb { mode = 0600 user = vmail } user = dovecot } service dict { unix_listener dict { group = vmail mode = 0600 user = vmail } } service imap-login { inet_listener imap { port = 143 } } service lmtp { executable = lmtp -L unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } service managesieve-login { inet_listener sieve { port = 4190 } } service pop3-login { inet_listener pop3 { port = 110 } } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lmtp { info_log_path = /var/log/dovecot-lmtp.log log_path = /var/log/dovecot-lmtp-errors.log mail_plugins = " quota trash expire autocreate sieve quota" postmaster_address = postmaster(a)testdo.com } protocol sieve { info_log_path = /var/log/dovecot-sieve.log log_path = /var/log/dovecot-sieve-errors.log managesieve_implementation_string = dovecot managesieve_max_line_length = 65536 } protocol imap { mail_plugins = " quota trash expire imap_quota notify quota" } protocol pop3 { mail_plugins = " quota trash expire quota" } Any help is appreciated, thanks.

3 5

SSL overview...
by SH Development 16 Oct '17

16 Oct '17

Can someone help me understand the overall picture of SSL certificates in this scenario? I have a working dovecot/postfix/mysql server. It has a certificate. I now want to create a second, essentially duplicate configured server for use with replication. What is the relationship between the certificate and the hostname, or the DNS entry since the certs are created using the server’s domain name? mail.serverA.mydomain has a certificate that was created using mail.serverA.mydomain. The server's hostname is mail.serverA.mydomain. Now enter the new server. It would probably be: mailserverB.mydomain and a certificate created using mail.serverB.mydomain. The server’s hostname would be mail.serverB.mydomain. My questions: 1. Can I use the same certificate on both servers since they are serving email for the same domain? 2. Does the hostname have to be the same as the domain name, and thus the name used to create the cert? Sorry if I’m muddled about this. It was never really an issue until I wanted to add a secondary server into the mix. Ethon B.

2 3

Convert from mbox to Maildir
by Josef Wolf 16 Oct '17

16 Oct '17

Hello everybody, I am in the process to install dovecot as an IMAP server. Currently, this system runs postfix and uses procmail for local (mbox style) delivery. Procmail ist started by postfix like this: /etc/postfix/main.cf: mailbox_command = /usr/bin/procmail ~/.forward: "|IFS=' ' && exec /usr/bin/procmail -f- || exit 75 # jw" Before going into IMAP details, I decided to convert the system to Maildir as a first step. So I created a procmail-entryrecipe to populate a test folder: ~/.procmailrc: :0 * ^Subject:.*dovecot-test { ORGMAIL="${HOME}/Maildir/" DEFAULT=${ORGMAIL} DELIVER="/usr/lib/dovecot/deliver -o mail_location=maildir:~/Maildir -o lda_mailbox_autocreate=yes" :0 | $DELIVER -m dovecot-test } This setup seems to work. But there is one point that bugs me: in the first tests, dovecot was mis-configured (the two -o options were missing) and the test mails were silently lost. No errors in the procmail logfile. Only dovecot reports errors in its logfile. But the error seems not to be noticed by procmail. Therefore procmail assumes deliver could store the mail successfully and won't keep a backup of it. I am sure, I'm doing something stupid here. I have never seen such behavior from procmail before. Normally procmail would report failure of sub-commands. Now I hesitate to go forward in this conversion process. I don't want to loose mails if something is wrong with the dovcot setup. Besides: I wonder whether the setting DEFAULT=${ORGMAIL} is a good idea. Wouldn't it be better to have DEFAULT=/var/spool/mail/$USER so there would be a fallback in case there are delivery problems to ${ORGMAIL} Any thougths? -- Josef Wolf jw(a)raven.inka.de

4 5

Question about ITERINDEX in 2.2.32
by María Arrea 16 Oct '17

16 Oct '17

Hello I have a question about the new setting ITERINDEX. This is my filesystem layout /indices_dovecot : 8 x Fast SSD drives /buzones : 32x SAS 10k rpm disks /buzones/alternativo : 24 x SAS 7.2k rpm slow disks This is my mail_location: mail_location = mdbox:/buzones/domain/%2.26Hn/%2.200Hn/%n:INDEX=/indices_dovecot/indices/%2.26Hn/%2.200Hn/%n:ALT=/buzones/alternativo/domain/%2.26Hn/%2.200Hn/%n What should I write in mail_location with the new ITERINDEX setting? Regards María

2 6

Locking Errors
by List 16 Oct '17

16 Oct '17

We recently upgraded to version 2.2.10-8 on Centos 7 (from 2.2.10-7) and immediately started experiencing errors in the log file that look like this: Error: Broken file /mail/user/Maildir/dovecot-uidlist line 891: Invalid data: Error: Timeout (180s) while waiting for lock for transaction log file /mail/user/Maildir/dovecot.index.log Error: /mail/user/Maildir/.Trash/dovecot-uidlist: next_uid was lowered (421 -> 419, hdr=418) Error: Corrupted index cache file /mail/user/Maildir/dovecot.index.cache: invalid record size Error: Broken file /mail/user/Maildir/.Trash/dovecot-uidlist line 156: Invalid data: Error: Corrupted index cache file /mail/user/Maildir/dovecot.index.cache: invalid record size Error: Index /mail/user/Maildir/dovecot.index: Lost log for seq=2 offset=2392 Error: fcntl(write-lock) locking failed for file /mail/user/Maildir/dovecot.index.log: Stale file handle We are not sure what might be causing this, can anyone help illuminate what’s going on?

3 5

Setting up replication - First steps...
by SH Development 16 Oct '17

16 Oct '17

Just had my first (non-Dovecot) server failure due to dried out caps on the motherboard. Got me to thinking about my single-point-of-failure mail server. Currently running Dovecot and Postfix with no issues, but want to start taking steps just to be safe. I currently run a filesystem backup every 24 hours to a tar file over NFS to another server in our rack. I am backing up: /home/vmail /etc/dovecot /etc/postfix Unfortunately, the vmail directory has grown to 27GB and takes around 7 hours now to backup as described above. Which leads me to start thinking about how quickly I could restore the server from a backup if need be, and that time is at least 7 hours just to copy and untar the files onto another hard drive. I’m sure I could hook up a HD up directly to the backup server, then I could considerably reduce the time, but I’m making the assumption that I won’t always have quick physical access to the location. So I believe my first step is to set up another server, on another IP, different hostname, with Dovecot and Postfix, and simply use the files from the /etc directories of the existing server to configure it (changing the IP and hostname of course). Am I on the right track so far? Next steps involve setting up replication with dsync? If I have successfully setup replication between the two servers, does this mean users can then actually log into either server and have their “stuff” intact? So I could set up DNS failover in case the primary server fails? Would this make the setup acceptable for secondary MX as everything should sync to the primary server when it comes back online? Sorry for thinking out loud, but I want to make sure I’m understanding the bigger picture here. Jeff

4 3

Re: Newbie question...
by SH Development 16 Oct '17

16 Oct '17

I see you haven’t received an answer. Sorry people here don’t seem to have time or inclination to answer basic questions. I’ve tried. You’re better to search elsewhere. Ethon > On Oct 11, 2017, at 12:17 PM, Michael Segel <dovecot_mjs(a)hotmail.com <mailto:dovecot_mjs@hotmail.com>> wrote: > > Hi, > > I’ve downloaded and built dovecot from the source. > Now I’ve run in to a couple of issues. > Like namespaces. > > Is there an example of the namespaces settings? Nothing fancy, just the basics… > > These are private mailboxes, but still need to know what I have to do to set this correctly. > > Thanks In Advance, > > -Mike >

3 4

Filtering by country
by Anvar Kuchkartaev 16 Oct '17

16 Oct '17

Is it possible to filter out logins by country (I would like to limit dovecot instance users to log in only from specific countries)?‎‎ Anvar Kuchkartaev anvar(a)anvartay.com

3 2

Re: Core Dumps with dovecot-2.2 -git as of 2.2.devel (eaf276b33)
by Aki Tuomi 15 Oct '17

15 Oct '17

We'll take a look ---Aki TuomiDovecot oy -------- Original message --------From: Reuben Farrelly <reuben-dovecot(a)reub.net> Date: 12/10/2017 07:50 (GMT+02:00) To: Aki Tuomi <aki.tuomi(a)dovecot.fi> Subject: Re: Core Dumps with dovecot-2.2 -git as of 2.2.devel (eaf276b33) Hi Aki, I think I posted a bt full of this in the original email I sent to the list: https://www.dovecot.org/pipermail/dovecot/2017-October/109583.html I've got heaps of coredumps if we need to pick apart one specific one now though. Reuben On 12/10/2017 3:36 PM, Aki Tuomi wrote: > can you provide bt full output from core? > > > > --- > Aki Tuomi > Dovecot oy > > -------- Original message -------- > From: Reuben Farrelly <reuben-dovecot(a)reub.net> > Date: 12/10/2017 06:22 (GMT+02:00) > To: Aki Tuomi <aki.tuomi(a)dovecot.fi>, dovecot(a)dovecot.org > Subject: Re: Core Dumps with dovecot-2.2 -git as of 2.2.devel (eaf276b33) > > Hi, > > Just to confirm this is still a major problem for me with the 2.2.33.1 > release (did not exist in previous releases). > > Reuben > > > On 8/10/2017 6:30 AM, Aki Tuomi wrote: >> Thanks! We'll look into it. >> >> >> >> --- >> Aki Tuomi >> Dovecot oy >> >> -------- Original message -------- >> From: Reuben Farrelly <reuben-dovecot(a)reub.net> >> Date: 07/10/2017 13:08 (GMT+02:00) >> To: dovecot(a)dovecot.org >> Subject: Core Dumps with dovecot-2.2 -git as of 2.2.devel (eaf276b33) >> >> This appears to be breaking dsync at the moment and is caused by >> something committed in the last week or so. This is with the current >> -git of dovecot-2.2 (eaf276b33). >> >> The crash happens all the time - the logs are full of this message. >> >> Oct 7 20:31:24 thunderstorm.reub.net dovecot: doveadm: Warning: I/O >> leak: 0x7f8bb6581b4c (ostream-file.c:350, fd 14) >> Oct 7 20:31:24 thunderstorm.reub.net dovecot: doveadm: Panic: file >> ioloop.c: line 126 (io_remove_full): assertion failed: (io->callback != >> NULL) >> Oct 7 20:31:24 thunderstorm.reub.net dovecot: doveadm: Error: Raw >> backtrace: /usr/lib64/dovecot/libdovecot.so.0(+0xd48a6) [0x7f8bb654a8a6] >> -> /usr/lib64/dovecot/li >> bdovecot.so.0(+0xd5e26) [0x7f8bb654be26] -> >> /usr/lib64/dovecot/libdovecot.so.0(i_fatal+0) [0x7f8bb654ac39] -> >> /usr/lib64/dovecot/libdovecot.so.0(+0xf5cb0) [0x7f8bb6 >> 56bcb0] -> /usr/lib64/dovecot/libdovecot.so.0(io_remove+0x1d) >> [0x7f8bb656be31] -> /usr/lib64/dovecot/libdovecot.so.0(+0x10b5f8) >> [0x7f8bb65815f8] -> /usr/lib64/dovec >> ot/libdovecot.so.0(o_stream_cork+0x5a) [0x7f8bb657e289] -> >> /usr/lib64/dovecot/libssl_iostream_openssl.so(+0x6406) [0x7f8bb12d6406] >> -> /usr/lib64/dovecot/libssl_iost >> ream_openssl.so(openssl_iostream_bio_sync+0x18) [0x7f8bb12d6af6] -> >> /usr/lib64/dovecot/libssl_iostream_openssl.so(+0xa52e) >> [0x7f8bb12da52e] -> / >> usr/lib64/dovecot/libssl_iostream_openssl.so(+0xa6ef) [0x7f8bb12da6ef] >> -> /usr/lib64/dovecot/libdovecot.so.0(o_stream_sendv+0xc7) >> [0x7f8bb657e765] -> >> /usr/lib64/dovecot/libdovecot.so.0(o_stream_send+0x61) [0x7f8bb657e688] >> -> /usr/lib64/dovecot/libdovecot.so.0(+0x10dc2c) [0x7f8bb6583c2c] -> >> /usr/lib64/dovecot/libdovecot.so.0(+0x10ddd4) [0x7f8bb6583dd4] -> >> /usr/lib64/dovecot/libdovecot.so.0(o_stream_sendv+0xc7) [0x7f8bb657e765] >> -> /usr/lib64/dovecot/libdovecot.so.0(o_stream_nsendv+0x55) >> [0x7f8bb657e93f] -> >> /usr/lib64/dovecot/libdovecot.so.0(o_stream_nsend+0x61) [0x7f8bb657e8d3] >> -> dovecot/doveadm-server() [0x444a35] -> >> /usr/lib64/dovecot/libdovecot.so.0(i_warning+0xce) [0x7f8bb654afdc] -> >> /usr/lib64/dovecot/libdovecot.so.0(io_loop_destroy+0x2ca) >> [0x7f8bb656d8cd] -> dovecot/doveadm-server() [0x4454d1] -> >> dovecot/doveadm-server() [0x445793] -> dovecot/doveadm-server() >> [0x445dd6] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_call_io+0xd6) >> [0x7f8bb656d241] -> >> /usr/lib64/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0x225) >> [0x7f8bb656fe58] -> >> /usr/lib64/dovecot/libdovecot.so.0(io_loop_handler_run+0x3e) >> [0x7f8bb656d422] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_run+0xbe) >> [0x7f8bb656d345] >> Oct 7 20:31:24 thunderstorm.reub.net dovecot: doveadm: Fatal: master: >> service(doveadm): child 27186 killed with signal 6 (core dumped) >> >> >> thunderstorm reuben # file core >> core: ELF 64-bit LSB core file x86-64, version 1 (SYSV), SVR4-style, >> from 'dovecot/doveadm-server', real uid: 0, effective uid: 0, real gid: >> 0, effective gid: 0, execfn: '/usr/libexec/dovecot/doveadm-server', >> platform: 'x86_64' >> >> thunderstorm reuben # gdb /usr/libexec/dovecot/doveadm-server core >> GNU gdb (Gentoo 8.0.1 vanilla) 8.0.1 >> Copyright (C) 2017 Free Software Foundation, Inc. >> License GPLv3+: GNU GPL version 3 or later >> <http://gnu.org/licenses/gpl.html> >> This is free software: you are free to change and redistribute it. >> There is NO WARRANTY, to the extent permitted by law. Type "show copying" >> and "show warranty" for details. >> This GDB was configured as "x86_64-pc-linux-gnu". >> Type "show configuration" for configuration details. >> For bug reporting instructions, please see: >> <https://bugs.gentoo.org/>. >> Find the GDB manual and other documentation resources online at: >> <http://www.gnu.org/software/gdb/documentation/>. >> For help, type "help". >> Type "apropos word" to search for commands related to "word"... >> Reading symbols from /usr/libexec/dovecot/doveadm-server...done. >> [New LWP 27186] >> [Thread debugging using libthread_db enabled] >> Using host libthread_db library "/lib64/libthread_db.so.1". >> Core was generated by `dovecot/doveadm-server'. >> Program terminated with signal SIGABRT, Aborted. >> #0 0x00007f8bb60e7f70 in raise () from /lib64/libc.so.6 >> (gdb) bt full >> #0 0x00007f8bb60e7f70 in raise () from /lib64/libc.so.6 >> No symbol table info available. >> #1 0x00007f8bb60e9aa7 in abort () from /lib64/libc.so.6 >> No symbol table info available. >> #2 0x00007f8bb654a8f5 in default_fatal_finish (type=LOG_TYPE_PANIC, >> status=0) at failures.c:201 >> backtrace = 0x228e4d8 >> "/usr/lib64/dovecot/libdovecot.so.0(+0xd48a6) [0x7f8bb654a8a6] -> >> /usr/lib64/dovecot/libdovecot.so.0(+0xd5e26) [0x7f8bb654be26] -> >> /usr/lib64/dovecot/libdovecot.so.0(i_fatal+0) [0x7f8bb654ac39] -> /usr"... >> #3 0x00007f8bb654be26 in i_internal_fatal_handler (ctx=0x7ffef81daa50, >> format=0x7f8bb65ba898 "file %s: line %d (%s): assertion failed: (%s)", >> args=0x7ffef81daa70) >> at failures.c:670 >> status = 0 >> #4 0x00007f8bb654ac39 in i_panic (format=0x7f8bb65ba898 "file %s: line >> %d (%s): assertion failed: (%s)") at failures.c:275 >> ctx = {type = LOG_TYPE_PANIC, exit_status = 0, timestamp = 0x0, >> timestamp_usecs = 0} >> args = {{gp_offset = 40, fp_offset = 48, overflow_arg_area = >> 0x7ffef81dab50, reg_save_area = 0x7ffef81daa90}} >

3 6

Updating keywords on copy/move
by Daniele Ricci 14 Oct '17

14 Oct '17

Hello, I'm working on my virtual keywords plugin [1] to add an apparently simple feature: add a keyword to a message when it is moved or copied into a virtual folder (let's forget about what keyword to add, I'm starting with a hard-coded one to understand Dovecot plugin development). So I've added a mail_copy hook by the notify plugin [2] and did a simple call to mail_update_keywords [3]. The current source code shows a call to mail_get_backend_mail, this is me experimenting, I've also tried calling mail_update_keywords directly on "dst" mail. The result is an imap crash: Oct 14 21:22:26 notebook dovecot: imap(daniele): Panic: file mail-log-plugin.c: line 461 (mail_log_mail_transaction_commit): assertion failed: (msg->pretext == NULL) Oct 14 21:22:26 notebook dovecot: imap(daniele): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x9f0a2) [0x7f81af52f0a2] -> /usr/lib/dovecot/libdovecot.so.0(+0x9f19a) [0x7f81af52f19a] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7f81af4bfcf8] -> /usr/lib/dovecot/modules/lib20_mail_log_plugin.so(+0x19e8) [0x7f81aeae89e8] -> /usr/lib/dovecot/modules/lib15_notify_plugin.so(notify_contexts_mail_transaction_commit+0x58) [0x7f81aecec548] -> /usr/lib/dovecot/modules/lib15_notify_plugin.so(+0x2105) [0x7f81aeced105] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_transaction_commit_get_changes+0x52) [0x7f81af807ca2] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_transaction_commit+0x21) [0x7f81af807d71] -> /usr/lib/dovecot/modules/lib20_virtual_plugin.so(virtual_transaction_commit+0x78) [0x7f81ae8e2fb8] -> /usr/lib/dovecot/modules/lib15_notify_plugin.so(+0x20ec) [0x7f81aeced0ec] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_transaction_commit_get_changes+0x52) [0x7f81af807ca2] -> dovecot/imap(+0x10084) [0x563d0ff2b084] -> dovecot/imap(command_exec+0x5c) [0x563d0ff37d9c] -> dovecot/imap(+0x1b322) [0x563d0ff36322] -> dovecot/imap(+0x1b3bc) [0x563d0ff363bc] -> dovecot/imap(client_handle_input+0x18d) [0x563d0ff3677d] -> dovecot/imap(client_input+0xac) [0x563d0ff36ccc] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x52) [0x7f81af544742] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0x12e) [0x7f81af545d8e] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0x36) [0x7f81af5447d6] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x38) [0x7f81af544988] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f81af4ca353] -> dovecot/imap(main+0x329) [0x563d0ff29139] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf1) [0x7f81af1132e1] -> dovecot/imap(_start+0x2a) [0x563d0ff292ca] This happens after my hook returns. Now, before activating core dumps and starting to do some serious debugging and reverse engineering, I ask: do I have to do something extra such as opening a transaction or something? Isn't the notify plugin supposed to do that already? Thanks for your help! [1] http://github.com/daniele-athome/dovecot-virtual-keywords-plugin [2] https://github.com/daniele-athome/dovecot-virtual-keywords-plugin/blob/keyw… [3] https://github.com/daniele-athome/dovecot-virtual-keywords-plugin/blob/keyw… -- Daniele

1 0

Last Login example
by Jorge Bastos 14 Oct '17

14 Oct '17

Howdy, Where can i find a configuration example for the last login plugin, that fits for latest dovecot version? Thanks in advanced! Jorge,

1 0

Re: Solr/Basic Auth?
by Aki Tuomi 14 Oct '17

14 Oct '17

You can include it in the url, like http://user:pass@host/---Aki TuomiDovecot oy -------- Original message --------From: Larry Rosenman <larryrtx(a)gmail.com> Date: 13/10/2017 23:32 (GMT+02:00) To: Dovecot Mailing List <dovecot(a)dovecot.org> Subject: Solr/Basic Auth? Does the fts-solr plugin support solr's basic auth plugin? If not, can it? -- Larry Rosenman http://www.lerctr.org/~ler Phone: +1 214-642-9640 (c) E-Mail: larryrtx(a)gmail.com US Mail: 17716 Limpia Crk, Round Rock, TX 78664-7281

1 0

Solr/Basic Auth?
by Larry Rosenman 13 Oct '17

13 Oct '17

Does the fts-solr plugin support solr's basic auth plugin? If not, can it? -- Larry Rosenman http://www.lerctr.org/~ler Phone: +1 214-642-9640 (c) E-Mail: larryrtx(a)gmail.com US Mail: 17716 Limpia Crk, Round Rock, TX 78664-7281

1 0

Re: Convert from mbox to Maildir
by Joseph Tam 13 Oct '17

13 Oct '17

Nikolai Lusan <nikolai(a)lusan.id.au> writes: >> Just went through this one recently using CentOS with SendMail, Procmail >> and IMAP conversion from mbox to Maildir - I needed to make sure I could >> run both formats while I migrated users one-by-one. > > When I have migrated solutions from mbox to maildir (I have done more than > one) I found it easier to get a mail client to do the hard work for me (if > you're on a LAN with the server it's faster). I created new usernames with > maildir as their base, and copied the folder over. Reading over David's and various schemes, the tricky part is consistency: avoiding race conditions where you have the user manipulating their mailboxes and your MTA/LDA delivering mail, while simultaneously doing mbox->Maildir conversion. To guarantee consistency, it's necessary to lock out other avenues of mbox changes while the conversion takes place. Otherwise, you'll have the situation where mail can get duplicated, or worse, deleted. For example, think of this sequence: convert B, user moves message A->B, convert A. I think the safest is method is 1) Deny the user access to IMAP/POP: deny userdb/passdb, or lock their password and flush their auth cache entry. 2) TEMPFAIL MTA delivery to user during conversion 3) Kick the user 4) Do the conversion 5) Undo 1+2 If you have a smart conversion script (one that recognizes changes and only do delta updates) you can greatly speed up step 4 and minimize outage time. 0) Do an initial conversion that will do the bulk of the work but does not guranatee consistency. Joseph Tam <jtam.home(a)gmail.com>

1 0

Re: v2.2.33 released
by Aki Tuomi 13 Oct '17

13 Oct '17

try with 2.2.33.1 ---Aki TuomiDovecot oy -------- Original message --------From: Odhiambo Washington <odhiambo(a)gmail.com> Date: 13/10/2017 10:42 (GMT+02:00) To: Dovecot Mailing List <dovecot(a)dovecot.org> Cc: dovecot-news(a)dovecot.org Subject: Re: v2.2.33 released On 10 October 2017 at 18:28, Timo Sirainen <tss(a)iki.fi> wrote: > https://dovecot.org/releases/2.2/dovecot-2.2.33.tar.gz > https://dovecot.org/releases/2.2/dovecot-2.2.33.tar.gz.sig > > We're getting close to the last v2.2.x releases. Hopefully we'll have the > first v2.3 beta releases out soon. > Something is wrong with 2.2.33, but I haven't found time to catch it. I have been running 2.2.32 without issues. I use dovecot-lda with Exim. The moment I installed 2.2.33, it was all failures - mail somehow gets delivered, but a failure too is generated. I have backed off from 2.2.33 for now. Maybe I will find time to debug later. Maybe someone already found a way around, but I missed the post? -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft."

2 3

v2.2.33 released
by Timo Sirainen 13 Oct '17

13 Oct '17

https://dovecot.org/releases/2.2/dovecot-2.2.33.tar.gz https://dovecot.org/releases/2.2/dovecot-2.2.33.tar.gz.sig We're getting close to the last v2.2.x releases. Hopefully we'll have the first v2.3 beta releases out soon. * doveadm director commands wait for the changes to be visible in the whole ring before they return. This is especially useful in testing. * Environments listed in import_environment setting are now set or preserved when executing standalone commands (e.g. doveadm) + doveadm proxy: Support proxying logs. Previously the logs were visible only in the backend's logs. + Added %{if}, see https://wiki2.dovecot.org/Variables#Conditionals + Added a new notify_status plugin, which can be used to update dict with current status of a mailbox when it changes. See https://wiki2.dovecot.org/Plugins/NotifyStatus + Mailbox list index can be disabled for a namespace by appending ":LISTINDEX=" to location setting. + dsync/imapc: Added dsync_hashed_headers setting to specify which headers are used to match emails. + pop3-migration: Add pop3_migration_ignore_extra_uidls=yes to ignore mails that are visible in POP3 but not IMAP. This could happen if new mails were delivered during the migration run. + pop3-migration: Further improvements to help with Zimbra + pop3-migration: Cache POP3 UIDLs in imapc's dovecot.index.cache if indexes are enabled. These are used to optimize incremental syncs. + cassandra, dict-sql: Use prepared statements if protocol version>3. + auth: Added %{ldap_dn} variable for passdb/userdb ldap - acl: The "create" (k) permission in global acl-file was sometimes ignored, allowing users to create mailboxes when they shouldn't have. - sdbox: Mails were always opened when expunging, unless mail_attachment_fs was explicitly set to empty. - lmtp/doveadm proxy: hostip passdb field was ignored, which caused unnecessary DNS lookups if host field wasn't an IP - lmtp proxy: Fix crash when receiving unexpected reply in RCPT TO - quota_clone: Update also when quota is unlimited (broken in v2.2.31) - mbox, zlib: Fix assert-crash when accessing compressed mbox - doveadm director kick -f parameter didn't work - doveadm director flush <host> resulted flushing all hosts, if <host> wasn't an IP address. - director: Various fixes to handling backend/director changes at abnormal times, especially while ring was unsynced. These could have resulted in crashes, non-optimal behavior or ignoring some of the changes. - director: Use less CPU in imap-login processes when moving/kicking many users. - lmtp: Session IDs were duplicated/confusing with multiple RCPT TOs when lmtp_rcpt_check_quota=yes - doveadm sync -1 fails when local mailboxes exist that do not exist remotely. This commonly happened when lazy_expunge mailbox was autocreated when incremental sync expunged mails. - pop3: rawlog_dir setting didn't work

2 1

Released Pigeonhole v0.4.21 for Dovecot v2.2.33.1.
by Stephan Bosch 13 Oct '17

13 Oct '17

Hello Dovecot users, Here's the definitive 0.4.21 release. There were no changes since the release candidate. Changelog v0.4.21: * redirect action: Always set the X-Sieve-Redirected-From header to sieve_user_email if configured. Before, it would use the envelope recipient instead if available, which makes no sense if the primary e-mail address is available. + vacation extension: Allow ignoring the envelope sender while composing the "To:" header for the reply. Normally, the "To:" header is composed from the address found in the "Sender", "Resent-From" or "From" headers that is equal to the envelope sender. If none is then found, the bare envelope sender is used. This change adds a new setting "sieve_vacation_to_header_ignore_envelope". With this setting enabled, the "To:" header is always composed from those headers in the source message. The new setting thus allows ignoring the envelope, which is useful e.g. when SRS is used. + vacation extension: Compose the "To:" header from the full sender address found in the first "Sender:", "From:" or "Resent-From:" header. Before, it would create a "To:" header without a phrase part. The new behavior is nicer, since the reply will be addressed to the sender by name if possible. - LDA Sieve plugin: Fixed sequential execution of LDAP-based scripts. A missing LDAP-based script could cause the script sequence to exit earlier. - sieve-filter: Removed the (now) duplicate utf8 to mutf7 mailbox name conversion. This caused problems with mailbox names containing UTF-8 characters. The Dovecot API was changed years ago, but apparently sieve-filter was never updated. The release is available as follows: https://pigeonhole.dovecot.org/releases/2.2/dovecot-2.2-pigeonhole-0.4.21.t… https://pigeonhole.dovecot.org/releases/2.2/dovecot-2.2-pigeonhole-0.4.21.t… Refer to http://pigeonhole.dovecot.org and the Dovecot v2.x wiki for more information. Have fun testing this release and don't hesitate to notify me when there are any problems. Regards, -- Stephan Bosch stephan(a)rename-it.nl

1 0

Solr 7
by Ricardo Branco 12 Oct '17

12 Oct '17

Before I go down the route of upgrading our main Solr instance from 6 to 7, just checking if anyone is using Solr 7 with Dovecot.

4 4

Re: Mail Alias Stores in mySQL Not working - SOLVED
by jason hirsh 12 Oct '17

12 Oct '17

"You have the alias abuse(a)kasdivi.com <mailto:abuse@kasdivi.com> for the address admin(a)theoceanwindow.com <mailto:admin@theoceanwindow.com> in your db and all mail to these aliases should go the the admin@ mailbox. Address mapping should be done in postfix so that the recipient address that gets used on the lmtp connection to dovecot is admin(a)theoceanwindow.com <mailto:admin@theoceanwindow.com> You probably disabled address mapping in postfix. -- Christian Kivalo” You nailed that .. I had completely forgotten about that.. I am changing a system from hash to SQL I actually feel kind of stupid I knew Postfix was supposed to do the acceptance.. and it should have been common sense that it need to rewrite.. The logs kept reminding me I had the following line in master,cf -o receive_override_options=no_address_mappings,no_header_body_checks,no_unknown_recipient_checks changed to -o receive_override_options=no_header_body_checks,no_unknown_recipient_checks and system works great.. Thanls!!

1 0

Re: Mail Alias Stores in mySQL Not working
by jason hirsh 12 Oct '17

12 Oct '17

"So abuse(a)kasdivi.com <mailto:abuse@kasdivi.com> is an alias, not a user.? You can't login with an alias because your user_query is looking at the`mailbox` table. Have your tried logging in as: admin(a)theoceanwindow.com <mailto:admin@theoceanwindow.com> OR you could put an entry forabuse(a)kasdivi.com <mailto:forabuse@kasdivi.com> in your `mailbox` table. Bill” Bill Excuse me I must have some where mi-stated myself. Yes abuse(a)variousdoamns.com is an alias going back to my admin account The issue was iin my master.cf where I had at some time disabled remapping Fixed that and all is good Thanks for your time and effort.. You helped tremendously and actually had me discover some other issues Jason

1 0

Re: Mail Alias Stores in mySQL Not working
by jason hirsh 12 Oct '17

12 Oct '17

3 2

Re: Mail Alias Stores in mySQL Not working
by jason hirsh 12 Oct '17

12 Oct '17

"In an earlier post you said your user_query was: user_query = SELECT CONCAT('/var/vmail/mail/', maildir) AS home, 5000 AS uid, 5000 AS gid, CONCAT('*:bytes=', quota) AS quota_rule FROM mailbox WHERE username = '%u' AND active=?1' Last post you said: mail is stored at /var/mail/vhosts and: mail_location = maildir:/var/mail/vhosts/%d/%n These don't agree with your user_query.” Probably my mis-statement "Run a MySQL query: SELECT `username`, `domain`, `maildir` FROM `mailbox` LIMIT 5; Let's see the value of maildir” mysql> SELECT `username`, `domain`, `maildir` FROM `mailbox` LIMIT 5; +--------------------------+--------------------+---------------------------+ | username | domain | maildir | +--------------------------+--------------------+---------------------------+ | jason(a)theoceanwindow.com | theoceanwindow.com | theoceanwindow.com/jason/ | | admin(a)gcsbonaire.com | gcsbonaire.com | gcsbonaire.com/admin/ | | admin(a)theoceanwindow.com | theoceanwindow.com | theoceanwindow.com/admin/ | | test(a)theoceanwindow.com | theoceanwindow.com | theoceanwindow.com/test/ | | lin(a)grapestreet.com | grapestreet.com | grapestreet.com/lin/ | +--------------------------+--------------------+---------------------------+ 5 rows in set (0.00 sec) "Also, lets see the output of: ls -l /var/mail/vhosts/*” drwxrwxr-x 4 1003 vmail 512 Jun 25 2016 camantonewfashion.com drwxrwxr-x 4 1003 vmail 512 Sep 6 2016 filmusfamily.com drwxrwxr-x 8 1003 vmail 512 Oct 8 13:44 gcs-bonaire.com drwxrwxr-x 4 1003 vmail 512 Oct 5 07:40 gcsbonaire.com drwxrwxr-x 3 1003 vmail 512 Jun 25 2016 grapestreet.com drwxrwxr-x 5 1003 vmail 512 Jun 25 2016 grapestreetgen.com drwxrwxr-x 5 1003 vmail 512 Jun 25 2016 grapestreetvoice.com drwxrwxr-x 11 1003 vmail 512 Oct 11 13:37 kasdivi.com drwx------ 3 1003 vmail 512 Oct 11 13:25 test.com drwxrwxr-x 7 1003 vmail 512 Oct 11 13:42 theoceanwindow.com It seems that the correct information is stored in the correct place but i get dovecot: auth-worker(21961): sql(abuse(a)kasdivi.com): unknown user Its seems like there is a simple config thing I am not getting right Jason

2 1

v2.2.33.1 released
by Timo Sirainen 12 Oct '17

12 Oct '17

https://dovecot.org/releases/2.2/dovecot-2.2.33.1.tar.gz https://dovecot.org/releases/2.2/dovecot-2.2.33.1.tar.gz.sig Oops, one a bit too bad bug was left in the release, so fixing it here. - dovecot-lda was logging to stderr instead of to the log file.

2 1

Connection closed reason
by Miloslav Hůla 12 Oct '17

12 Oct '17

Hi, we have one user using the old Alpine client with IMAP. Time to time (3 times per day or 3 times per week) he get error: "MAIL FOLDER INBOX CLOSED DUE TO ACCESS ERROR" and he complains, that inbox stops to refresh with new emails. I don't know Alpine but I can imagine, that Alpine creates TCP connection to IMAPS and uses IDLE. I read wiki page about Timeouts [1] and it seems OK. Alpine is connected 5 or more hours without interrupt. But I found 'Connection closed' at approximate times of user reports in mail.log. Am'I undestand it correctly, that 'Connection closed' is some kind of incorrect connection end? I can find 'Logged out' messages which seems to me as correct ones. I can imagine that such situations may happend for moving clients, such a smartphone with losing signal. But mentioned user is on local network connected by cable. I'm interested, what exactly 'Connection closed' in mail log means. We have following lines in log: dovecot: imap(username): Connection closed in=63 out=288442 dovecot: imap(username): Connection closed (IDLE running for 0.001 + waiting input for 0.001 secs, 2 B in + 10+0 B out, state=wait-input) in=9668 out=17375 imap(username): Connection closed: read(size=3751) failed: Connection reset by peer in=4441 out=51431 dovecot: imap(username): Connection closed (UID fetch running for 0.008 + waiting input for 0.001 secs, 0.001 in locks, 101 B in + 202+202 B out, state=wait-input) in=3330 out=436043 Could it be problem in our network or Dovecot configuration issue? Can I somehow debug all connections for single client? Thank you, Milo [1] https://wiki.dovecot.org/Timeouts

2 2

Re: Connection closed reason
by Joseph Tam 12 Oct '17

12 Oct '17

Miloslav H?la <miloslav.hula(a)gmail.com> > we have one user using the old Alpine client with IMAP. Time to time (3 > times per day or 3 times per week) he get error: "MAIL FOLDER INBOX > CLOSED DUE TO ACCESS ERROR" and he complains, that inbox stops to > refresh with new emails. Hmm, I see when using direct file access, but not when using IMAP, but I don't often connect this way with alpine). > Am'I undestand it correctly, that 'Connection closed' is some kind of > incorrect connection end? I can find 'Logged out' messages which seems > to me as correct ones. > ... > dovecot: imap(username): Connection closed in=63 out=288442 > dovecot: imap(username): Connection closed (IDLE running for 0.001 + > waiting input for 0.001 secs, 2 B in + 10+0 B out, state=wait-input) > in=9668 out=17375 I was able to simulate this using netcat -- this log message comes when the client closes the connection during IDLE. > imap(username): Connection closed: read(size=3751) failed: Connection > reset by peer in=4441 out=51431 I couldn't recreate this, but this happens when the client sends an immediate TCP RST connection teardown packet, rather than the usual FIN/ACK/RST orderly shutdown. I don't know what would cause this -- maybe some firewall state session timeout? Joseph Tam <jtam.home(a)gmail.com>

2 1

How to map email addresses to usernames?
by Andreas Born 12 Oct '17

12 Oct '17

Hello, I have a general question about userdb and passdb lookups, in my case related to driver=sql. The documentation and most examples in the internet seem to assume that a user's login username to access a mailbox is identical to his email-address, or at least to the local-part of this email-address. This setup works fine. But I don't understand how to setup dovecot, when login username and email adresses differ. Or to say it in other words, how to map email-adresses to mailbox users. I need a sql password_query for passdb to validate the password for a given login name during SMTP or SASL authentication. Lets say the credentials are "user-1"/"anypassword", then the query is similar to "select password from mailboxes where username='%u'". The next step, user_query for userdb is executed to get storage information for user "user-1". This query must also search for the username "user-1", not for an email-adress: "select home, mail from mailboxes where username='%u'". So far, so good. But: For incoming mails via LMTP, my user_query from userdb is being executed with the email-address as search parameter (instead of the login name), so it fails. I miss a third query that maps one user to each email address for delivery, prior to the userdb lookup. For Example: bob(a)example.org => user-1 eve(a)example.org => user-1 ted(a)example.org => user-2 @catchall.org => user-3 "select username from addr_maps where addr='%n@%d'". What is the correct setup for this szenario? I've found two solutions that seem to work, but i'm not sure if they are really failsafe. I) I use driver=prefetch as a first userdb, so for authentication, only the password_query from passdb is relevant and returns all mailbox details. A second userdb does a user_query lookup against email-addresses and is only called for incoming mails. passdb { driver = sql args = /etc/dovecot/sql-check-user.conf } userdb { driver = prefetch } userdb { driver = sql args = /etc/dovecot/sql-check-addr.conf } II) The second userdb performs lookups against usernames (as in the passwd query), but I place a third userdb {} within the lmtp's protocol section, which does a address lookup instead of a username lookup: protocol lmtp { userdb { driver = sql args = /etc/dovecot/sql-check-addr.conf } } passdb { driver = sql args = /etc/dovecot/sql-check-user.conf } userdb { driver = sql args = /etc/dovecot/sql-check-user.conf } What do you think, is there a better solution? - greetings Andreas Dovecot Version: 2.2.27 (c0f36b0)

2 1

Newbie question...
by Michael Segel 12 Oct '17

12 Oct '17

Hi, I’ve downloaded and built dovecot from the source. Now I’ve run in to a couple of issues. Like namespaces. Is there an example of the namespaces settings? Nothing fancy, just the basics… These are private mailboxes, but still need to know what I have to do to set this correctly. Thanks In Advance, -Mike

2 1

Re: Core Dumps with dovecot-2.2 -git as of 2.2.devel (eaf276b33)
by Aki Tuomi 12 Oct '17

12 Oct '17

can you provide bt full output from core? ---Aki TuomiDovecot oy -------- Original message --------From: Reuben Farrelly <reuben-dovecot(a)reub.net> Date: 12/10/2017 06:22 (GMT+02:00) To: Aki Tuomi <aki.tuomi(a)dovecot.fi>, dovecot(a)dovecot.org Subject: Re: Core Dumps with dovecot-2.2 -git as of 2.2.devel (eaf276b33) Hi, Just to confirm this is still a major problem for me with the 2.2.33.1 release (did not exist in previous releases). Reuben On 8/10/2017 6:30 AM, Aki Tuomi wrote: Thanks! We'll look into it. --- Aki Tuomi Dovecot oy -------- Original message -------- From: Reuben Farrelly <reuben-dovecot(a)reub.net> Date: 07/10/2017 13:08 (GMT+02:00) To: dovecot(a)dovecot.org Subject: Core Dumps with dovecot-2.2 -git as of 2.2.devel (eaf276b33) This appears to be breaking dsync at the moment and is caused by something committed in the last week or so. This is with the current -git of dovecot-2.2 (eaf276b33). The crash happens all the time - the logs are full of this message. Oct 7 20:31:24 thunderstorm.reub.net dovecot: doveadm: Warning: I/O leak: 0x7f8bb6581b4c (ostream-file.c:350, fd 14) Oct 7 20:31:24 thunderstorm.reub.net dovecot: doveadm: Panic: file ioloop.c: line 126 (io_remove_full): assertion failed: (io->callback != NULL) Oct 7 20:31:24 thunderstorm.reub.net dovecot: doveadm: Error: Raw backtrace: /usr/lib64/dovecot/libdovecot.so.0(+0xd48a6) [0x7f8bb654a8a6] -> /usr/lib64/dovecot/li bdovecot.so.0(+0xd5e26) [0x7f8bb654be26] -> /usr/lib64/dovecot/libdovecot.so.0(i_fatal+0) [0x7f8bb654ac39] -> /usr/lib64/dovecot/libdovecot.so.0(+0xf5cb0) [0x7f8bb6 56bcb0] -> /usr/lib64/dovecot/libdovecot.so.0(io_remove+0x1d) [0x7f8bb656be31] -> /usr/lib64/dovecot/libdovecot.so.0(+0x10b5f8) [0x7f8bb65815f8] -> /usr/lib64/dovec ot/libdovecot.so.0(o_stream_cork+0x5a) [0x7f8bb657e289] -> /usr/lib64/dovecot/libssl_iostream_openssl.so(+0x6406) [0x7f8bb12d6406] -> /usr/lib64/dovecot/libssl_iost ream_openssl.so(openssl_iostream_bio_sync+0x18) [0x7f8bb12d6af6] -> /usr/lib64/dovecot/libssl_iostream_openssl.so(+0xa52e) [0x7f8bb12da52e] -> / usr/lib64/dovecot/libssl_iostream_openssl.so(+0xa6ef) [0x7f8bb12da6ef] -> /usr/lib64/dovecot/libdovecot.so.0(o_stream_sendv+0xc7) [0x7f8bb657e765] -> /usr/lib64/dovecot/libdovecot.so.0(o_stream_send+0x61) [0x7f8bb657e688] -> /usr/lib64/dovecot/libdovecot.so.0(+0x10dc2c) [0x7f8bb6583c2c] -> /usr/lib64/dovecot/libdovecot.so.0(+0x10ddd4) [0x7f8bb6583dd4] -> /usr/lib64/dovecot/libdovecot.so.0(o_stream_sendv+0xc7) [0x7f8bb657e765] -> /usr/lib64/dovecot/libdovecot.so.0(o_stream_nsendv+0x55) [0x7f8bb657e93f] -> /usr/lib64/dovecot/libdovecot.so.0(o_stream_nsend+0x61) [0x7f8bb657e8d3] -> dovecot/doveadm-server() [0x444a35] -> /usr/lib64/dovecot/libdovecot.so.0(i_warning+0xce) [0x7f8bb654afdc] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_destroy+0x2ca) [0x7f8bb656d8cd] -> dovecot/doveadm-server() [0x4454d1] -> dovecot/doveadm-server() [0x445793] -> dovecot/doveadm-server() [0x445dd6] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_call_io+0xd6) [0x7f8bb656d241] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0x225) [0x7f8bb656fe58] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_handler_run+0x3e) [0x7f8bb656d422] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_run+0xbe) [0x7f8bb656d345] Oct 7 20:31:24 thunderstorm.reub.net dovecot: doveadm: Fatal: master: service(doveadm): child 27186 killed with signal 6 (core dumped) thunderstorm reuben # file core core: ELF 64-bit LSB core file x86-64, version 1 (SYSV), SVR4-style, from 'dovecot/doveadm-server', real uid: 0, effective uid: 0, real gid: 0, effective gid: 0, execfn: '/usr/libexec/dovecot/doveadm-server', platform: 'x86_64' thunderstorm reuben # gdb /usr/libexec/dovecot/doveadm-server core GNU gdb (Gentoo 8.0.1 vanilla) 8.0.1 Copyright (C) 2017 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "x86_64-pc-linux-gnu". Type "show configuration" for configuration details. For bug reporting instructions, please see: <https://bugs.gentoo.org/>. Find the GDB manual and other documentation resources online at: <http://www.gnu.org/software/gdb/documentation/>. For help, type "help". Type "apropos word" to search for commands related to "word"... Reading symbols from /usr/libexec/dovecot/doveadm-server...done. [New LWP 27186] [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib64/libthread_db.so.1". Core was generated by `dovecot/doveadm-server'. Program terminated with signal SIGABRT, Aborted. #0 0x00007f8bb60e7f70 in raise () from /lib64/libc.so.6 (gdb) bt full #0 0x00007f8bb60e7f70 in raise () from /lib64/libc.so.6 No symbol table info available. #1 0x00007f8bb60e9aa7 in abort () from /lib64/libc.so.6 No symbol table info available. #2 0x00007f8bb654a8f5 in default_fatal_finish (type=LOG_TYPE_PANIC, status=0) at failures.c:201 backtrace = 0x228e4d8 "/usr/lib64/dovecot/libdovecot.so.0(+0xd48a6) [0x7f8bb654a8a6] -> /usr/lib64/dovecot/libdovecot.so.0(+0xd5e26) [0x7f8bb654be26] -> /usr/lib64/dovecot/libdovecot.so.0(i_fatal+0) [0x7f8bb654ac39] -> /usr"... #3 0x00007f8bb654be26 in i_internal_fatal_handler (ctx=0x7ffef81daa50, format=0x7f8bb65ba898 "file %s: line %d (%s): assertion failed: (%s)", args=0x7ffef81daa70) at failures.c:670 status = 0 #4 0x00007f8bb654ac39 in i_panic (format=0x7f8bb65ba898 "file %s: line %d (%s): assertion failed: (%s)") at failures.c:275 ctx = {type = LOG_TYPE_PANIC, exit_status = 0, timestamp = 0x0, timestamp_usecs = 0} args = {{gp_offset = 40, fp_offset = 48, overflow_arg_area = 0x7ffef81dab50, reg_save_area = 0x7ffef81daa90}}

1 0

Re: Core Dumps with dovecot-2.2 -git as of 2.2.devel (eaf276b33)
by Reuben Farrelly 12 Oct '17

12 Oct '17

Hi, Just to confirm this is still a major problem for me with the 2.2.33.1 release (did not exist in previous releases). Reuben On 8/10/2017 6:30 AM, Aki Tuomi wrote: > Thanks! We'll look into it. > > > > --- > Aki Tuomi > Dovecot oy > > -------- Original message -------- > From: Reuben Farrelly <reuben-dovecot(a)reub.net> > Date: 07/10/2017 13:08 (GMT+02:00) > To: dovecot(a)dovecot.org > Subject: Core Dumps with dovecot-2.2 -git as of 2.2.devel (eaf276b33) > > This appears to be breaking dsync at the moment and is caused by > something committed in the last week or so. This is with the current > -git of dovecot-2.2 (eaf276b33). > > The crash happens all the time - the logs are full of this message. > > Oct 7 20:31:24 thunderstorm.reub.net dovecot: doveadm: Warning: I/O > leak: 0x7f8bb6581b4c (ostream-file.c:350, fd 14) > Oct 7 20:31:24 thunderstorm.reub.net dovecot: doveadm: Panic: file > ioloop.c: line 126 (io_remove_full): assertion failed: (io->callback != > NULL) > Oct 7 20:31:24 thunderstorm.reub.net dovecot: doveadm: Error: Raw > backtrace: /usr/lib64/dovecot/libdovecot.so.0(+0xd48a6) [0x7f8bb654a8a6] > -> /usr/lib64/dovecot/li > bdovecot.so.0(+0xd5e26) [0x7f8bb654be26] -> > /usr/lib64/dovecot/libdovecot.so.0(i_fatal+0) [0x7f8bb654ac39] -> > /usr/lib64/dovecot/libdovecot.so.0(+0xf5cb0) [0x7f8bb6 > 56bcb0] -> /usr/lib64/dovecot/libdovecot.so.0(io_remove+0x1d) > [0x7f8bb656be31] -> /usr/lib64/dovecot/libdovecot.so.0(+0x10b5f8) > [0x7f8bb65815f8] -> /usr/lib64/dovec > ot/libdovecot.so.0(o_stream_cork+0x5a) [0x7f8bb657e289] -> > /usr/lib64/dovecot/libssl_iostream_openssl.so(+0x6406) [0x7f8bb12d6406] > -> /usr/lib64/dovecot/libssl_iost > ream_openssl.so(openssl_iostream_bio_sync+0x18) [0x7f8bb12d6af6] -> > /usr/lib64/dovecot/libssl_iostream_openssl.so(+0xa52e) > [0x7f8bb12da52e] -> / > usr/lib64/dovecot/libssl_iostream_openssl.so(+0xa6ef) [0x7f8bb12da6ef] > -> /usr/lib64/dovecot/libdovecot.so.0(o_stream_sendv+0xc7) > [0x7f8bb657e765] -> > /usr/lib64/dovecot/libdovecot.so.0(o_stream_send+0x61) [0x7f8bb657e688] > -> /usr/lib64/dovecot/libdovecot.so.0(+0x10dc2c) [0x7f8bb6583c2c] -> > /usr/lib64/dovecot/libdovecot.so.0(+0x10ddd4) [0x7f8bb6583dd4] -> > /usr/lib64/dovecot/libdovecot.so.0(o_stream_sendv+0xc7) [0x7f8bb657e765] > -> /usr/lib64/dovecot/libdovecot.so.0(o_stream_nsendv+0x55) > [0x7f8bb657e93f] -> > /usr/lib64/dovecot/libdovecot.so.0(o_stream_nsend+0x61) [0x7f8bb657e8d3] > -> dovecot/doveadm-server() [0x444a35] -> > /usr/lib64/dovecot/libdovecot.so.0(i_warning+0xce) [0x7f8bb654afdc] -> > /usr/lib64/dovecot/libdovecot.so.0(io_loop_destroy+0x2ca) > [0x7f8bb656d8cd] -> dovecot/doveadm-server() [0x4454d1] -> > dovecot/doveadm-server() [0x445793] -> dovecot/doveadm-server() > [0x445dd6] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_call_io+0xd6) > [0x7f8bb656d241] -> > /usr/lib64/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0x225) > [0x7f8bb656fe58] -> > /usr/lib64/dovecot/libdovecot.so.0(io_loop_handler_run+0x3e) > [0x7f8bb656d422] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_run+0xbe) > [0x7f8bb656d345] > Oct 7 20:31:24 thunderstorm.reub.net dovecot: doveadm: Fatal: master: > service(doveadm): child 27186 killed with signal 6 (core dumped) > > > thunderstorm reuben # file core > core: ELF 64-bit LSB core file x86-64, version 1 (SYSV), SVR4-style, > from 'dovecot/doveadm-server', real uid: 0, effective uid: 0, real gid: > 0, effective gid: 0, execfn: '/usr/libexec/dovecot/doveadm-server', > platform: 'x86_64' > > thunderstorm reuben # gdb /usr/libexec/dovecot/doveadm-server core > GNU gdb (Gentoo 8.0.1 vanilla) 8.0.1 > Copyright (C) 2017 Free Software Foundation, Inc. > License GPLv3+: GNU GPL version 3 or later > <http://gnu.org/licenses/gpl.html> > This is free software: you are free to change and redistribute it. > There is NO WARRANTY, to the extent permitted by law. Type "show copying" > and "show warranty" for details. > This GDB was configured as "x86_64-pc-linux-gnu". > Type "show configuration" for configuration details. > For bug reporting instructions, please see: > <https://bugs.gentoo.org/>. > Find the GDB manual and other documentation resources online at: > <http://www.gnu.org/software/gdb/documentation/>. > For help, type "help". > Type "apropos word" to search for commands related to "word"... > Reading symbols from /usr/libexec/dovecot/doveadm-server...done. > [New LWP 27186] > [Thread debugging using libthread_db enabled] > Using host libthread_db library "/lib64/libthread_db.so.1". > Core was generated by `dovecot/doveadm-server'. > Program terminated with signal SIGABRT, Aborted. > #0 0x00007f8bb60e7f70 in raise () from /lib64/libc.so.6 > (gdb) bt full > #0 0x00007f8bb60e7f70 in raise () from /lib64/libc.so.6 > No symbol table info available. > #1 0x00007f8bb60e9aa7 in abort () from /lib64/libc.so.6 > No symbol table info available. > #2 0x00007f8bb654a8f5 in default_fatal_finish (type=LOG_TYPE_PANIC, > status=0) at failures.c:201 > backtrace = 0x228e4d8 > "/usr/lib64/dovecot/libdovecot.so.0(+0xd48a6) [0x7f8bb654a8a6] -> > /usr/lib64/dovecot/libdovecot.so.0(+0xd5e26) [0x7f8bb654be26] -> > /usr/lib64/dovecot/libdovecot.so.0(i_fatal+0) [0x7f8bb654ac39] -> /usr"... > #3 0x00007f8bb654be26 in i_internal_fatal_handler (ctx=0x7ffef81daa50, > format=0x7f8bb65ba898 "file %s: line %d (%s): assertion failed: (%s)", > args=0x7ffef81daa70) > at failures.c:670 > status = 0 > #4 0x00007f8bb654ac39 in i_panic (format=0x7f8bb65ba898 "file %s: line > %d (%s): assertion failed: (%s)") at failures.c:275 > ctx = {type = LOG_TYPE_PANIC, exit_status = 0, timestamp = 0x0, > timestamp_usecs = 0} > args = {{gp_offset = 40, fp_offset = 48, overflow_arg_area = > 0x7ffef81dab50, reg_save_area = 0x7ffef81daa90}}

1 0

Re: Mail Alias Stores in mySQL Not working
by jason hirsh 12 Oct '17

12 Oct '17

"With that query, it appears everyone is sharing the same mail directory.? It, of course, depends on the value of `maildir`.? It doesn't look right.” stored by domain or at least it was until i started messing with mysql "Have you checked your MySQL log file to see the actual query?” hmm found out i had never enabled that log…. another tangent I need to follow "We don't know your mailbox format.? Post your 'doveconf -n’.” My bad # OS: FreeBSD 11.0-RELEASE-p9 amd64 ufs auth_debug = yes auth_debug_passwords = yes auth_mechanisms = plain login auth_verbose = yes auth_verbose_passwords = yes base_dir = /var/run/dovecot/ disable_plaintext_auth = no mail_location = maildir:/var/mail/vhosts/%d/%n mail_privileged_group = vmail namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } pop3_uidl_format = %v.%u postmaster_address = postmaster(a)theoceanwindow.com service auth-worker { user = vmail } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { mode = 0600 user = vmail } user = dovecot } service director { unix_listener director-userdb { mode = 0600 } } service imap-login { inet_listener imaps { port = 993 ssl = yes } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } service pop3-login { inet_listener pop3s { port = 995 ssl = yes } } ssl_ca = </usr/local/etc/keys/certs/ca.crt ssl_cert = </usr/local/etc/keys/certs/domain.crt ssl_key = # hidden, use -P to show it userdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol imap { mail_max_userip_connections = 30 } We don't know what your table layout looks like.? Post your 'SHOW COLUMNS FROM `mailbox`’. +------------+--------------+------+-----+---------------------+-------+ | Field | Type | Null | Key | Default | Extra | +------------+--------------+------+-----+---------------------+-------+ | username | varchar(255) | NO | PRI | NULL | | | password | varchar(255) | NO | | NULL | | | name | varchar(255) | NO | | NULL | | | maildir | varchar(255) | NO | | NULL | | | quota | bigint(20) | NO | | 0 | | | local_part | varchar(255) | NO | | NULL | | | domain | varchar(255) | NO | MUL | NULL | | | created | datetime | NO | | 2000-01-01 00:00:00 | | | modified | datetime | NO | | 2000-01-01 00:00:00 | | | active | tinyint(1) | NO | | 1 | | +------------+--------------+------+-----+---------------------+-------+ What is the on-disk directory layout for mail? mail is stored at /var/mail/vhosts

2 1

Aborted dsync backup and resulting fallout
by Andreas Thienemann 11 Oct '17

11 Oct '17

Hi, I am in the middle of setting up a dovecot imap server to replace an aging cyrus imapd. The new server is using mdbox storage for better filesystem performance and is running dovecot-2.2.32. To migrate email over and keep UIDs etc. intact I used the backup feature of doveadm. During testing this generally worked fine. So thanks for that functionality, it really makes migration much easier. I did another sync yesterday which was unintentionally aborted in the middle which left some corrupted files around. Not a problem generally, that's what doveadm force-resync should fix. It did move a m.2 to m.2.broken mailbox file, so that is good. But it seemed to have issues with the m.3 file, which was an empty file of 0 bytes. Even running force-resync a repeatedly always showed the same message: # doveadm force-resync -u cd INBOX doveadm(cd): Warning: fscking index file /var/spool/imap/user/cd/storage/dovecot.map.index doveadm(cd): Warning: mdbox /var/spool/imap/user/cd/storage: rebuilding indexes doveadm(cd): Error: Corrupted dbox file /var/spool/imap/user/cd/storage/m.3 (around offset=0): EOF while reading file header doveadm(cd): Error: mdbox rebuild: Failed to fix file /var/spool/imap/user/cd/storage/m.3 This looks like incorrect behavior. If the file header on a file expected to be a mailbox header is absent, I would expect it to be either best-effort parsed and the header added or at least be moved out of the way as e.g. m.3.broken. After fixing the m.3 storage manually I encountered another kind of error running dsync again: dsync(cd): Error: lucene index /var/spool/imap/user/cd/lucene-indexes: IndexReader::open() failed (#1): IndexInput read past EOF Lucene index broken should be easily fixed by running doveadm fts rescan. Is that correct? The other error thought had to do with the single instance store for attachments. There were a bunch of errors about a broken pipe and three errors stating success instead: dsync(cd): Error: fs-sis: Couldn't read hash file /var/spool/imap/attachments/c3/0c/hashes/c30cb535927c8bcecb0d45d374624942d0f4e56e: Broken pipe dsync(cd): Error: fs-sis: Couldn't read hash file /var/spool/imap/attachments/0f/0b/hashes/0f0b5351e09ebb487660f23c9b617568093b93d1: Broken pipe dsync(cd): Error: fs-sis: Couldn't read hash file /var/spool/imap/attachments/10/f9/hashes/10f9a4ffd14a5c31f9938c9d8a3ce3f2095fab36: Success dsync(cd): Error: fs-sis: Couldn't read hash file /var/spool/imap/attachments/9b/9a/hashes/9b9a449477882dfca86e80157616cadbb21bb3b8: Success dsync(cd): Error: fs-sis: Couldn't read hash file /var/spool/imap/attachments/df/69/hashes/df698a8bda301a7a474ae2b11414c6f532f4461e: Broken pipe As with the m.3 storage file, all these files had 0 byte size. What is the best way of fixing these up? Delete and be done? Thanks, Andreas

1 0

FTS Dealing badly with Tika failures
by Andreas Thienemann 11 Oct '17

11 Oct '17

Hi, I've seen that latest Dovecot has the ability to use the Apache Tika Server to extract metadata from attachments. That is a pretty useful feature and looks to be an improvement over piping the attachment through a shellscript as done with fts_decoder. Having this feature enabled though I sometimes do see the situation that the tika service does not reply in time and it looks like the whole FTS transaction gets aborted: dovecot: indexer-worker(eggs@localhost): Error: fts_tika: PUT http://localhost:9998/tika/ failed: Request timed out (Request queued 60.145 secs ago, 1 attempts in 60.134 secs, 60.034 in http ioloop, 0.000 in other ioloops, connected 1739.235 secs ago) dovecot: indexer-worker(eggs@localhost): Error: Mailbox INBOX.junk: Mail search failed: Internal error occurred. Refer to server log for more information. [2017-10-09 03:46:09] dovecot: indexer-worker(eggs(a)bawue.de): Error: Mailbox INBOX.junk: Transaction commit failed: FTS transaction commit failed: transaction context (attempted to index 12084 messages (UIDs 2..17850)) Is that actually sensible behavior? I would consider attachment metadata to be nice to have, but not necessarily mandatory. So if the attachment indexing fails, I would hope that at least the mailtext got indexed. But it seems like we abort the whole transaction. Am I reading the error log correctly? cheers, Andreas

1 0

dovecot-2.2.33 bug report
by David Binderman 11 Oct '17

11 Oct '17

Hello there, dovecot-2.2.33/src/lib/str-find.c:86]: (warning) Calling 'sizeof' on 'sizeof' Source code is ctx = p_malloc(pool, MALLOC_ADD(sizeof(struct str_find_context), MALLOC_MULTIPLY(sizeof(ctx->goodtab[0]), key_len))); Regards David Binderman

2 1

Re: My sub-folder with Outlook work-around to date - update 201710111315 - Final
by David.M.Clark 11 Oct '17

11 Oct '17

Hi All, After over a week of stuffing around in /etc/dovecot/conf.d files and lots of trial and error, I now have a controlled setup to migrate one user at a time to Maildir without affecting the other mbox based users. For the sake of not posting an essay, if you go to this web page: http://dmc1961.id.au/howto_17101101.php you will see what I have done (moderators please let me know if this is the correct or allowable practice to post links rather than massive e-mails to the group?). My sincere thanks to all who contributed and helped steer me in the right direction - I got a little lost on-line for a while but eventually got back to the right setup (our beloved Linux does have a few different file locations and setup based on the releases out there, so these were a little confusing). Working well now on my test environment and on a test user on the client's box we need to convert, so if there are any more gotchas I will add them to the how-to web page and update you all. Was a battle at times but it was a war worth winning. -- As always, I remain at your service. Kindest Regards, David.M.Clark (Director - Senior Linux/UNIX Consultant) =--------------------------------------------------------------------------= Davrom Consulting Pty Ltd Mobile: 0418763124 PO Box 1644, Sunnybank Hills, 4109 E-mail (Work): david(a)davrom.com ABN: 81 096 990 804 E-mail (Priv): dmc1961(a)dmc1961.id.au Website: http://davrom.com Skype: dmc1961 Podcast: http://ldup.com.au Google: dmc1961(a)gmail.com =--------------------------------------------------------------------------= Specialising in: Linux (Fedora/RedHat/CentOS), UNIX, SCO, MikroTik, Networking/Internet, E-mail/Web Technologies =--------------------------------------------------------------------------= Please note: Any e-mail communication bearing this signature is for the exclusive purpose of the sender and is not for publication without the expressed permission of the sender or respective sender's organisation. =--------------------------------------------------------------------------=

1 0

Issue with mailbox conversion using dsync in v2.2.32 (maildir <-> mdbox)
by Jason Kiniry 11 Oct '17

11 Oct '17

Hi all, I've run into an issue with in-place mailbox format conversions between mdbox and maildir and wondered if someone could assist. When using dsync to convert a mailbox, the conversion loses a mailbox GUID and produces a warning. This behavior seems to have been introduced between version 2.2.31 and 2.2.32. See below for the full debug output from both versions followed by the dovecot configuration used for both attempts. When I run the following: /usr/bin/dsync -f -D -o mail_location=mdbox:/home/blahmail/mail -u _mainaccount(a)blahmail.tld -v mirror maildir:/home/blahmail/mail On version 2.2.32, I get the following with the warning included on the last line of the output: Debug: Loading modules from directory: /usr/lib64/dovecot Debug: Module loaded: /usr/lib64/dovecot/lib10_quota_plugin.so Debug: Module loaded: /usr/lib64/dovecot/lib20_fts_plugin.so Debug: Module loaded: /usr/lib64/dovecot/lib20_quota_clone_plugin.so Debug: Module loaded: /usr/lib64/dovecot/lib20_zlib_plugin.so Debug: Module loaded: /usr/lib64/dovecot/lib21_fts_solr_plugin.so Debug: Loading modules from directory: /usr/lib64/dovecot/doveadm Debug: Skipping module doveadm_acl_plugin, because dlopen() failed: /usr/lib64/dovecot/doveadm/lib10_doveadm_acl_plugin.so: undefined symbol: acl_user_module (this is usually intentional, so just ignore this message) Debug: Skipping module doveadm_expire_plugin, because dlopen() failed: /usr/lib64/dovecot/doveadm/lib10_doveadm_expire_plugin.so: undefined symbol: expire_set_deinit (this is usually intentional, so just ignore this message) Debug: Module loaded: /usr/lib64/dovecot/doveadm/lib10_doveadm_quota_plugin.so Debug: Module loaded: /usr/lib64/dovecot/doveadm/lib20_doveadm_fts_plugin.so Debug: Skipping module doveadm_mail_crypt_plugin, because dlopen() failed: /usr/lib64/dovecot/doveadm/libdoveadm_mail_crypt_plugin.so: undefined symbol: mail_crypt_box_get_pvt_digests (this is usually intentional, so just ignore this message) doveadm(_mainaccount(a)blahmail.tld): Debug: Ignoring overridden (-o) userdb setting: mail doveadm(_mainaccount(a)blahmail.tld): Debug: Added userdb setting: plugin/password=<hidden> doveadm(_mainaccount(a)blahmail.tld): Debug: Added userdb setting: plugin/quota=maildir:Mailbox:ns=INBOX. doveadm(_mainaccount(a)blahmail.tld): Debug: Added userdb setting: plugin/quota2=fs:cPanel Account doveadm(_mainaccount(a)blahmail.tld): Debug: Added userdb setting: plugin/quota_clone_dict=file:/home/blahmail/mail/dovecot-quota doveadm(_mainaccount(a)blahmail.tld): Debug: Added userdb setting: plugin/quota_rule=*:messages=2147483647 doveadm(_mainaccount(a)blahmail.tld): Debug: Added userdb setting: plugin/quota_rule2=INBOX.Trash:ignore doveadm(_mainaccount(a)blahmail.tld): Debug: Added userdb setting: plugin/quota_status_overquota=552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded doveadm(_mainaccount(a)blahmail.tld): Debug: Added userdb setting: plugin/quota_vsizes=yes doveadm(_mainaccount(a)blahmail.tld): Debug: Added userdb setting: plugin/userdb_gid=1081 doveadm(_mainaccount(a)blahmail.tld): Debug: Added userdb setting: plugin/userdb_home=/home/blahmail doveadm(_mainaccount(a)blahmail.tld): Debug: Added userdb setting: plugin/userdb_mail=maildir:/home/blahmail/mail doveadm(_mainaccount(a)blahmail.tld): Debug: Added userdb setting: plugin/userdb_password=<hidden> doveadm(_mainaccount(a)blahmail.tld): Debug: Added userdb setting: plugin/userdb_quota=maildir:Mailbox:ns=INBOX. doveadm(_mainaccount(a)blahmail.tld): Debug: Added userdb setting: plugin/userdb_quota2=fs:cPanel Account doveadm(_mainaccount(a)blahmail.tld): Debug: Added userdb setting: plugin/userdb_quota_clone_dict=file:/home/blahmail/mail/dovecot-quota doveadm(_mainaccount(a)blahmail.tld): Debug: Added userdb setting: plugin/userdb_quota_rule=*:messages=2147483647 doveadm(_mainaccount(a)blahmail.tld): Debug: Added userdb setting: plugin/userdb_quota_rule2=INBOX.Trash:ignore doveadm(_mainaccount(a)blahmail.tld): Debug: Added userdb setting: plugin/userdb_quota_status_overquota=552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded doveadm(_mainaccount(a)blahmail.tld): Debug: Added userdb setting: plugin/userdb_quota_vsizes=yes doveadm(_mainaccount(a)blahmail.tld): Debug: Added userdb setting: plugin/userdb_uid=1137 doveadm(_mainaccount(a)blahmail.tld): Debug: Added userdb setting: plugin/userdb_user=blahmail doveadm(_mainaccount(a)blahmail.tld): Debug: Effective uid=1137, gid=1081, home=/home/blahmail doveadm(_mainaccount(a)blahmail.tld): Debug: Quota root: name=Mailbox backend=maildir args=ns=INBOX. doveadm(_mainaccount(a)blahmail.tld): Debug: Quota rule: root=Mailbox mailbox=* bytes=0 messages=2147483647 doveadm(_mainaccount(a)blahmail.tld): Debug: Quota rule: root=Mailbox mailbox=INBOX.Trash ignored doveadm(_mainaccount(a)blahmail.tld): Debug: Quota grace: root=Mailbox bytes=0 (10%) doveadm(_mainaccount(a)blahmail.tld): Debug: Quota root: name=cPanel Account backend=fs args= doveadm(_mainaccount(a)blahmail.tld): Debug: Quota grace: root=cPanel Account bytes=0 (10%) doveadm(_mainaccount(a)blahmail.tld): Debug: Namespace inbox: type=private, prefix=INBOX., sep=., inbox=yes, hidden=no, list=yes, subscriptions=yes location=mdbox:/home/blahmail/mail doveadm(_mainaccount(a)blahmail.tld): Debug: fs: root=/home/blahmail/mail, index=, indexpvt=, control=, inbox=, alt= doveadm(_mainaccount(a)blahmail.tld): Debug: Namespace INBOX.: Using permissions from /home/blahmail/mail: mode=0751 gid=default doveadm(_mainaccount(a)blahmail.tld): Debug: Namespace : type=private, prefix=, sep=, inbox=no, hidden=yes, list=no, subscriptions=no location=fail::LAYOUT=none doveadm(_mainaccount(a)blahmail.tld): Debug: none: root=, index=, indexpvt=, control=, inbox=, alt= doveadm(_mainaccount(a)blahmail.tld): Debug: fts: Indexes disabled for namespace '' doveadm(_mainaccount(a)blahmail.tld): Debug: quota: quota_over_flag check: quota_over_script unset - skipping doveadm(_mainaccount(a)blahmail.tld): Debug: quota: quota_over_flag check: quota2_over_script unset - skipping doveadm(_mainaccount(a)blahmail.tld): Debug: Namespace INBOX.: /home/blahmail/mail/mailboxes/INBOX doesn't exist yet, using default permissions doveadm(_mainaccount(a)blahmail.tld): Debug: Namespace INBOX.: Using permissions from /home/blahmail/mail: mode=0751 gid=default dsync(blahmail): Debug: Effective uid=1137, gid=1081, home=/home/blahmail dsync(blahmail): Debug: Quota root: name=Mailbox backend=maildir args=ns=INBOX. dsync(blahmail): Debug: Quota rule: root=Mailbox mailbox=* bytes=0 messages=2147483647 dsync(blahmail): Debug: Quota rule: root=Mailbox mailbox=INBOX.Trash ignored dsync(blahmail): Debug: Quota grace: root=Mailbox bytes=0 (10%) dsync(blahmail): Debug: Quota root: name=cPanel Account backend=fs args= dsync(blahmail): Debug: Quota grace: root=cPanel Account bytes=0 (10%) dsync(blahmail): Debug: Namespace inbox: type=private, prefix=INBOX., sep=., inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:/home/blahmail/mail dsync(blahmail): Debug: maildir++: root=/home/blahmail/mail, index=, indexpvt=, control=, inbox=/home/blahmail/mail, alt= dsync(blahmail): Debug: fs quota add mailbox dir = /home/blahmail/mail dsync(blahmail): Debug: fs quota block device = /dev/mapper/centos_centos--7--clone-root dsync(blahmail): Debug: fs quota mount point = / dsync(blahmail): Debug: fs quota mount type = xfs dsync(blahmail): Debug: Namespace : type=private, prefix=, sep=, inbox=no, hidden=yes, list=no, subscriptions=no location=fail::LAYOUT=none dsync(blahmail): Debug: none: root=, index=, indexpvt=, control=, inbox=, alt= dsync(blahmail): Debug: fts: Indexes disabled for namespace '' dsync(blahmail): Debug: quota: quota_over_flag check: quota_over_script unset - skipping dsync(blahmail): Debug: quota: quota_over_flag check: quota2_over_script unset - skipping dsync(blahmail): Debug: Namespace INBOX.: Using permissions from /home/blahmail/mail: mode=0751 gid=default dsync(blahmail): Debug: brain M: Local mailbox tree: INBOX guid=60f6d91a25fddb5983040000a19766e2 uid_validity=1507589418 uid_next=1 subs=no last_change=0 last_subs=0 dsync(blahmail): Debug: brain S: Local mailbox tree: INBOX guid=e6191d3644fddb59e2040000a19766e2 uid_validity=1507589413 uid_next=2 subs=no last_change=0 last_subs=0 dsync(blahmail): Debug: brain S: Local mailbox tree: INBOX.Drafts guid=61f6d91a25fddb5983040000a19766e2 uid_validity=1507589414 uid_next=1 subs=no last_change=0 last_subs=0 dsync(blahmail): Debug: brain S: Local mailbox tree: INBOX.Junk guid=62f6d91a25fddb5983040000a19766e2 uid_validity=1507589415 uid_next=1 subs=no last_change=0 last_subs=0 dsync(blahmail): Debug: brain M: Remote mailbox tree: INBOX guid=e6191d3644fddb59e2040000a19766e2 uid_validity=1507589413 uid_next=2 subs=no last_change=0 last_subs=0 dsync(blahmail): Debug: brain M: Remote mailbox tree: INBOX.Drafts guid=61f6d91a25fddb5983040000a19766e2 uid_validity=1507589414 uid_next=1 subs=no last_change=0 last_subs=0 dsync(blahmail): Debug: brain M: Remote mailbox tree: INBOX.Junk guid=62f6d91a25fddb5983040000a19766e2 uid_validity=1507589415 uid_next=1 subs=no last_change=0 last_subs=0 dsync(blahmail): Debug: brain S: Local mailbox tree: INBOX.Sent guid=63f6d91a25fddb5983040000a19766e2 uid_validity=1507589416 uid_next=1 subs=no last_change=0 last_subs=0 dsync(blahmail): Debug: brain M: Remote mailbox tree: INBOX.Sent guid=63f6d91a25fddb5983040000a19766e2 uid_validity=1507589416 uid_next=1 subs=no last_change=0 last_subs=0 dsync(blahmail): Debug: brain S: Local mailbox tree: INBOX.Trash guid=64f6d91a25fddb5983040000a19766e2 uid_validity=1507589417 uid_next=1 subs=no last_change=0 last_subs=0 dsync(blahmail): Debug: brain M: Remote mailbox tree: INBOX.Trash guid=64f6d91a25fddb5983040000a19766e2 uid_validity=1507589417 uid_next=1 subs=no last_change=0 last_subs=0 dsync(blahmail): Debug: brain M: Mailbox INBOX: local=60f6d91a25fddb5983040000a19766e2/0/1, remote=e6191d3644fddb59e2040000a19766e2/0/1: GUIDs conflict - will be merged later dsync(blahmail): Debug: brain M: Mailbox INBOX.Drafts: local=00000000000000000000000000000000/0/0, remote=61f6d91a25fddb5983040000a19766e2/0/1: mailbox not selectable yet dsync(blahmail): Debug: brain M: Mailbox INBOX.Junk: local=00000000000000000000000000000000/0/0, remote=62f6d91a25fddb5983040000a19766e2/0/1: mailbox not selectable yet dsync(blahmail): Debug: brain M: Mailbox INBOX.Sent: local=00000000000000000000000000000000/0/0, remote=63f6d91a25fddb5983040000a19766e2/0/1: mailbox not selectable yet dsync(blahmail): Debug: brain M: Mailbox INBOX.Trash: local=00000000000000000000000000000000/0/0, remote=64f6d91a25fddb5983040000a19766e2/0/1: mailbox not selectable yet dsync(blahmail): Debug: Namespace INBOX.: /home/blahmail/mail/mailboxes/Drafts doesn't exist yet, using default permissions dsync(blahmail): Debug: Namespace INBOX.: Using permissions from /home/blahmail/mail: mode=0751 gid=default dsync(blahmail): Debug: INBOX: Mailbox opened because: copy caching decisions dsync(blahmail): Debug: Namespace INBOX.: /home/blahmail/mail/mailboxes/Junk doesn't exist yet, using default permissions dsync(blahmail): Debug: Namespace INBOX.: Using permissions from /home/blahmail/mail: mode=0751 gid=default dsync(blahmail): Debug: INBOX: Mailbox opened because: copy caching decisions dsync(blahmail): Debug: Namespace INBOX.: /home/blahmail/mail/mailboxes/Sent doesn't exist yet, using default permissions dsync(blahmail): Debug: Namespace INBOX.: Using permissions from /home/blahmail/mail: mode=0751 gid=default dsync(blahmail): Debug: INBOX: Mailbox opened because: copy caching decisions dsync(blahmail): Debug: Namespace INBOX.: /home/blahmail/mail/mailboxes/Trash doesn't exist yet, using default permissions dsync(blahmail): Debug: Namespace INBOX.: Using permissions from /home/blahmail/mail: mode=0751 gid=default dsync(blahmail): Debug: INBOX: Mailbox opened because: copy caching decisions dsync(blahmail): Debug: brain S: Remote mailbox tree: INBOX guid=60f6d91a25fddb5983040000a19766e2 uid_validity=1507589418 uid_next=1 subs=no last_change=0 last_subs=0 dsync(blahmail): Debug: brain S: Mailbox INBOX: local=e6191d3644fddb59e2040000a19766e2/0/1, remote=60f6d91a25fddb5983040000a19766e2/0/1: GUIDs conflict - will be merged later dsync(blahmail): Debug: brain S: Mailbox INBOX.Drafts: local=61f6d91a25fddb5983040000a19766e2/0/1, remote=00000000000000000000000000000000/0/0: mailbox not selectable yet dsync(blahmail): Debug: brain S: Mailbox INBOX.Junk: local=62f6d91a25fddb5983040000a19766e2/0/1, remote=00000000000000000000000000000000/0/0: mailbox not selectable yet dsync(blahmail): Debug: brain S: Mailbox INBOX.Sent: local=63f6d91a25fddb5983040000a19766e2/0/1, remote=00000000000000000000000000000000/0/0: mailbox not selectable yet dsync(blahmail): Debug: brain S: Mailbox INBOX.Trash: local=64f6d91a25fddb5983040000a19766e2/0/1, remote=00000000000000000000000000000000/0/0: mailbox not selectable yet dsync(blahmail): Debug: brain S: Change during sync: Mailbox GUID e6191d3644fddb59e2040000a19766e2 was lost dsync(blahmail): Debug: brain S: We don't have mailbox e6191d3644fddb59e2040000a19766e2 dsync(blahmail): Debug: brain M: Change during sync: Remote lost mailbox GUID e6191d3644fddb59e2040000a19766e2 (maybe it was just deleted?) dsync(blahmail): Debug: brain S: Import INBOX.Drafts: Last common UID=0. Delayed expunges= dsync(blahmail): Debug: brain M: Import INBOX.Drafts: Last common UID=0. Delayed expunges= dsync(blahmail): Debug: brain S: Import INBOX.Drafts: Saved UIDs: dsync(blahmail): Debug: brain S: Import INBOX.Drafts: Finish update: min_next_uid=1 min_first_recent_uid=1 min_highest_modseq=1 min_highest_pvt_modseq=0 dsync(blahmail): Debug: brain M: Import INBOX.Drafts: Saved UIDs: dsync(blahmail): Debug: brain M: Import INBOX.Drafts: Finish update: min_next_uid=1 min_first_recent_uid=1 min_highest_modseq=1 min_highest_pvt_modseq=0 dsync(blahmail): Debug: brain S: Import INBOX.Junk: Last common UID=0. Delayed expunges= dsync(blahmail): Debug: brain M: Import INBOX.Junk: Last common UID=0. Delayed expunges= dsync(blahmail): Debug: brain S: Import INBOX.Junk: Saved UIDs: dsync(blahmail): Debug: brain S: Import INBOX.Junk: Finish update: min_next_uid=1 min_first_recent_uid=1 min_highest_modseq=1 min_highest_pvt_modseq=0 dsync(blahmail): Debug: brain M: Import INBOX.Junk: Saved UIDs: dsync(blahmail): Debug: brain M: Import INBOX.Junk: Finish update: min_next_uid=1 min_first_recent_uid=1 min_highest_modseq=1 min_highest_pvt_modseq=0 dsync(blahmail): Debug: brain S: Import INBOX.Sent: Last common UID=0. Delayed expunges= dsync(blahmail): Debug: brain M: Import INBOX.Sent: Last common UID=0. Delayed expunges= dsync(blahmail): Debug: brain S: Import INBOX.Sent: Saved UIDs: dsync(blahmail): Debug: brain S: Import INBOX.Sent: Finish update: min_next_uid=1 min_first_recent_uid=1 min_highest_modseq=1 min_highest_pvt_modseq=0 dsync(blahmail): Debug: brain M: Import INBOX.Sent: Saved UIDs: dsync(blahmail): Debug: brain M: Import INBOX.Sent: Finish update: min_next_uid=1 min_first_recent_uid=1 min_highest_modseq=1 min_highest_pvt_modseq=0 dsync(blahmail): Debug: brain S: Import INBOX.Trash: Last common UID=0. Delayed expunges= dsync(blahmail): Debug: brain M: Import INBOX.Trash: Last common UID=0. Delayed expunges= dsync(blahmail): Debug: brain S: Import INBOX.Trash: Saved UIDs: dsync(blahmail): Debug: brain S: Import INBOX.Trash: Finish update: min_next_uid=1 min_first_recent_uid=1 min_highest_modseq=1 min_highest_pvt_modseq=0 dsync(blahmail): Debug: brain M: Import INBOX.Trash: Saved UIDs: dsync(blahmail): Debug: brain M: Import INBOX.Trash: Finish update: min_next_uid=1 min_first_recent_uid=1 min_highest_modseq=1 min_highest_pvt_modseq=0 dsync(blahmail): Warning: Mailbox changes caused a desync. You may want to run dsync again: Remote lost mailbox GUID e6191d3644fddb59e2040000a19766e2 (maybe it was just deleted?) -------------------------------------------------------------------------------------------------------------------------------------------- Previously, on 2.2.31 I ran: /usr/bin/dsync -f -D -o mail_location=mdbox:/home/mymail/mail -u _mainaccount(a)mymail.tld -v mirror maildir:/home/mymail/mail And got the following successful conversion output: Debug: Loading modules from directory: /usr/lib64/dovecot Debug: Module loaded: /usr/lib64/dovecot/lib10_quota_plugin.so Debug: Module loaded: /usr/lib64/dovecot/lib20_fts_plugin.so Debug: Module loaded: /usr/lib64/dovecot/lib20_quota_clone_plugin.so Debug: Module loaded: /usr/lib64/dovecot/lib20_zlib_plugin.so Debug: Module loaded: /usr/lib64/dovecot/lib21_fts_solr_plugin.so Debug: Loading modules from directory: /usr/lib64/dovecot/doveadm Debug: Skipping module doveadm_acl_plugin, because dlopen() failed: /usr/lib64/dovecot/doveadm/lib10_doveadm_acl_plugin.so: undefined symbol: acl_user_module (this is usually intentional, so just ignore this message) Debug: Skipping module doveadm_expire_plugin, because dlopen() failed: /usr/lib64/dovecot/doveadm/lib10_doveadm_expire_plugin.so: undefined symbol: expire_set_deinit (this is usually intentional, so just ignore this message) Debug: Module loaded: /usr/lib64/dovecot/doveadm/lib10_doveadm_quota_plugin.so Debug: Module loaded: /usr/lib64/dovecot/doveadm/lib20_doveadm_fts_plugin.so Debug: Skipping module doveadm_mail_crypt_plugin, because dlopen() failed: /usr/lib64/dovecot/doveadm/libdoveadm_mail_crypt_plugin.so: undefined symbol: mail_crypt_box_get_pvt_digests (this is usually intentional, so just ignore this message) doveadm(_mainaccount(a)mymail.tld): Debug: Ignoring overridden (-o) userdb setting: mail doveadm(_mainaccount(a)mymail.tld): Debug: Added userdb setting: plugin/password=<hidden> doveadm(_mainaccount(a)mymail.tld): Debug: Added userdb setting: plugin/quota=maildir:Mailbox:ns=INBOX. doveadm(_mainaccount(a)mymail.tld): Debug: Added userdb setting: plugin/quota2=fs:cPanel Account doveadm(_mainaccount(a)mymail.tld): Debug: Added userdb setting: plugin/quota_clone_dict=file:/home/mymail/mail/dovecot-quota doveadm(_mainaccount(a)mymail.tld): Debug: Added userdb setting: plugin/quota_rule=*:messages=2147483647 doveadm(_mainaccount(a)mymail.tld): Debug: Added userdb setting: plugin/quota_rule2=INBOX.Trash:ignore doveadm(_mainaccount(a)mymail.tld): Debug: Added userdb setting: plugin/quota_status_overquota=552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded doveadm(_mainaccount(a)mymail.tld): Debug: Added userdb setting: plugin/quota_vsizes=yes doveadm(_mainaccount(a)mymail.tld): Debug: Added userdb setting: plugin/userdb_gid=1077 doveadm(_mainaccount(a)mymail.tld): Debug: Added userdb setting: plugin/userdb_home=/home/mymail doveadm(_mainaccount(a)mymail.tld): Debug: Added userdb setting: plugin/userdb_mail=maildir:/home/mymail/mail doveadm(_mainaccount(a)mymail.tld): Debug: Added userdb setting: plugin/userdb_password=<hidden> doveadm(_mainaccount(a)mymail.tld): Debug: Added userdb setting: plugin/userdb_quota=maildir:Mailbox:ns=INBOX. doveadm(_mainaccount(a)mymail.tld): Debug: Added userdb setting: plugin/userdb_quota2=fs:cPanel Account doveadm(_mainaccount(a)mymail.tld): Debug: Added userdb setting: plugin/userdb_quota_clone_dict=file:/home/mymail/mail/dovecot-quota doveadm(_mainaccount(a)mymail.tld): Debug: Added userdb setting: plugin/userdb_quota_rule=*:messages=2147483647 doveadm(_mainaccount(a)mymail.tld): Debug: Added userdb setting: plugin/userdb_quota_rule2=INBOX.Trash:ignore doveadm(_mainaccount(a)mymail.tld): Debug: Added userdb setting: plugin/userdb_quota_status_overquota=552 5.2.2 Mailbox is full / Blocks limit exceeded / Inode limit exceeded doveadm(_mainaccount(a)mymail.tld): Debug: Added userdb setting: plugin/userdb_quota_vsizes=yes doveadm(_mainaccount(a)mymail.tld): Debug: Added userdb setting: plugin/userdb_uid=1134 doveadm(_mainaccount(a)mymail.tld): Debug: Added userdb setting: plugin/userdb_user=mymail doveadm(_mainaccount(a)mymail.tld): Debug: Effective uid=1134, gid=1077, home=/home/mymail doveadm(_mainaccount(a)mymail.tld): Debug: Quota root: name=Mailbox backend=maildir args=ns=INBOX. doveadm(_mainaccount(a)mymail.tld): Debug: Quota rule: root=Mailbox mailbox=* bytes=0 messages=2147483647 doveadm(_mainaccount(a)mymail.tld): Debug: Quota rule: root=Mailbox mailbox=INBOX.Trash ignored doveadm(_mainaccount(a)mymail.tld): Debug: Quota grace: root=Mailbox bytes=0 (10%) doveadm(_mainaccount(a)mymail.tld): Debug: Quota root: name=cPanel Account backend=fs args= doveadm(_mainaccount(a)mymail.tld): Debug: Quota grace: root=cPanel Account bytes=0 (10%) doveadm(_mainaccount(a)mymail.tld): Debug: Namespace inbox: type=private, prefix=INBOX., sep=., inbox=yes, hidden=no, list=yes, subscriptions=yes location=mdbox:/home/mymail/mail doveadm(_mainaccount(a)mymail.tld): Debug: fs: root=/home/mymail/mail, index=, indexpvt=, control=, inbox=, alt= doveadm(_mainaccount(a)mymail.tld): Debug: Namespace INBOX.: Using permissions from /home/mymail/mail: mode=0751 gid=default doveadm(_mainaccount(a)mymail.tld): Debug: Namespace : type=private, prefix=, sep=, inbox=no, hidden=yes, list=no, subscriptions=no location=fail::LAYOUT=none doveadm(_mainaccount(a)mymail.tld): Debug: none: root=, index=, indexpvt=, control=, inbox=, alt= doveadm(_mainaccount(a)mymail.tld): Debug: fts: Indexes disabled for namespace '' doveadm(_mainaccount(a)mymail.tld): Debug: quota: quota_over_flag check: quota_over_script unset - skipping doveadm(_mainaccount(a)mymail.tld): Debug: quota: quota_over_flag check: quota2_over_script unset - skipping dsync(mymail): Debug: Effective uid=1134, gid=1077, home=/home/mymail dsync(mymail): Debug: Quota root: name=Mailbox backend=maildir args=ns=INBOX. dsync(mymail): Debug: Quota rule: root=Mailbox mailbox=* bytes=0 messages=2147483647 dsync(mymail): Debug: Quota rule: root=Mailbox mailbox=INBOX.Trash ignored dsync(mymail): Debug: Quota grace: root=Mailbox bytes=0 (10%) dsync(mymail): Debug: Quota root: name=cPanel Account backend=fs args= dsync(mymail): Debug: Quota grace: root=cPanel Account bytes=0 (10%) dsync(mymail): Debug: Namespace inbox: type=private, prefix=INBOX., sep=., inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:/home/mymail/mail dsync(mymail): Debug: maildir++: root=/home/mymail/mail, index=, indexpvt=, control=, inbox=/home/mymail/mail, alt= dsync(mymail): Debug: fs quota add mailbox dir = /home/mymail/mail dsync(mymail): Debug: fs quota block device = /dev/mapper/centos_centos--7--clone-root dsync(mymail): Debug: fs quota mount point = / dsync(mymail): Debug: fs quota mount type = xfs dsync(mymail): Debug: Namespace : type=private, prefix=, sep=, inbox=no, hidden=yes, list=no, subscriptions=no location=fail::LAYOUT=none dsync(mymail): Debug: none: root=, index=, indexpvt=, control=, inbox=, alt= dsync(mymail): Debug: fts: Indexes disabled for namespace '' dsync(mymail): Debug: quota: quota_over_flag check: quota_over_script unset - skipping dsync(mymail): Debug: quota: quota_over_flag check: quota2_over_script unset - skipping dsync(mymail): Debug: Namespace INBOX.: Using permissions from /home/mymail/mail: mode=0751 gid=default dsync(mymail): Debug: brain M: Local mailbox tree: INBOX guid=00000000000000000000000000000000 uid_validity=0 uid_next=0 subs=no last_change=0 last_subs=0 dsync(mymail): Debug: brain S: Local mailbox tree: INBOX guid=a884611c1cf3db5999530000a19766e2 uid_validity=1507586844 uid_next=2 subs=no last_change=0 last_subs=0 dsync(mymail): Debug: brain S: Local mailbox tree: INBOX.Drafts guid=a984611c1cf3db5999530000a19766e2 uid_validity=1507586845 uid_next=1 subs=no last_change=0 last_subs=0 dsync(mymail): Debug: brain S: Local mailbox tree: INBOX.Junk guid=aa84611c1cf3db5999530000a19766e2 uid_validity=1507586846 uid_next=1 subs=no last_change=0 last_subs=0 dsync(mymail): Debug: brain M: Remote mailbox tree: INBOX guid=a884611c1cf3db5999530000a19766e2 uid_validity=1507586844 uid_next=2 subs=no last_change=0 last_subs=0 dsync(mymail): Debug: brain M: Remote mailbox tree: INBOX.Drafts guid=a984611c1cf3db5999530000a19766e2 uid_validity=1507586845 uid_next=1 subs=no last_change=0 last_subs=0 dsync(mymail): Debug: brain M: Remote mailbox tree: INBOX.Junk guid=aa84611c1cf3db5999530000a19766e2 uid_validity=1507586846 uid_next=1 subs=no last_change=0 last_subs=0 dsync(mymail): Debug: brain S: Local mailbox tree: INBOX.Sent guid=ab84611c1cf3db5999530000a19766e2 uid_validity=1507586847 uid_next=1 subs=no last_change=0 last_subs=0 dsync(mymail): Debug: brain M: Remote mailbox tree: INBOX.Sent guid=ab84611c1cf3db5999530000a19766e2 uid_validity=1507586847 uid_next=1 subs=no last_change=0 last_subs=0 dsync(mymail): Debug: brain S: Local mailbox tree: INBOX.Trash guid=ac84611c1cf3db5999530000a19766e2 uid_validity=1507586848 uid_next=1 subs=no last_change=0 last_subs=0 dsync(mymail): Debug: brain M: Remote mailbox tree: INBOX.Trash guid=ac84611c1cf3db5999530000a19766e2 uid_validity=1507586848 uid_next=1 subs=no last_change=0 last_subs=0 dsync(mymail): Debug: brain M: Mailbox INBOX: local=00000000000000000000000000000000/0/0, remote=a884611c1cf3db5999530000a19766e2/0/1: mailbox not selectable yet dsync(mymail): Debug: brain M: Mailbox INBOX.Drafts: local=00000000000000000000000000000000/0/0, remote=a984611c1cf3db5999530000a19766e2/0/1: mailbox not selectable yet dsync(mymail): Debug: brain M: Mailbox INBOX.Junk: local=00000000000000000000000000000000/0/0, remote=aa84611c1cf3db5999530000a19766e2/0/1: mailbox not selectable yet dsync(mymail): Debug: brain M: Mailbox INBOX.Sent: local=00000000000000000000000000000000/0/0, remote=ab84611c1cf3db5999530000a19766e2/0/1: mailbox not selectable yet dsync(mymail): Debug: brain M: Mailbox INBOX.Trash: local=00000000000000000000000000000000/0/0, remote=ac84611c1cf3db5999530000a19766e2/0/1: mailbox not selectable yet dsync(mymail): Debug: Namespace INBOX.: /home/mymail/mail/mailboxes/INBOX doesn't exist yet, using default permissions dsync(mymail): Debug: Namespace INBOX.: Using permissions from /home/mymail/mail: mode=0751 gid=default dsync(mymail): Debug: Namespace INBOX.: /home/mymail/mail/mailboxes/Drafts doesn't exist yet, using default permissions dsync(mymail): Debug: Namespace INBOX.: Using permissions from /home/mymail/mail: mode=0751 gid=default dsync(mymail): Debug: INBOX: Mailbox opened because: copy caching decisions dsync(mymail): Debug: Namespace INBOX.: /home/mymail/mail/mailboxes/Junk doesn't exist yet, using default permissions dsync(mymail): Debug: Namespace INBOX.: Using permissions from /home/mymail/mail: mode=0751 gid=default dsync(mymail): Debug: INBOX: Mailbox opened because: copy caching decisions dsync(mymail): Debug: Namespace INBOX.: /home/mymail/mail/mailboxes/Sent doesn't exist yet, using default permissions dsync(mymail): Debug: Namespace INBOX.: Using permissions from /home/mymail/mail: mode=0751 gid=default dsync(mymail): Debug: INBOX: Mailbox opened because: copy caching decisions dsync(mymail): Debug: Namespace INBOX.: /home/mymail/mail/mailboxes/Trash doesn't exist yet, using default permissions dsync(mymail): Debug: Namespace INBOX.: Using permissions from /home/mymail/mail: mode=0751 gid=default dsync(mymail): Debug: INBOX: Mailbox opened because: copy caching decisions dsync(mymail): Debug: brain S: Remote mailbox tree: INBOX guid=00000000000000000000000000000000 uid_validity=0 uid_next=0 subs=no last_change=0 last_subs=0 dsync(mymail): Debug: brain S: Mailbox INBOX: local=a884611c1cf3db5999530000a19766e2/0/1, remote=00000000000000000000000000000000/0/0: mailbox not selectable yet dsync(mymail): Debug: brain S: Mailbox INBOX.Drafts: local=a984611c1cf3db5999530000a19766e2/0/1, remote=00000000000000000000000000000000/0/0: mailbox not selectable yet dsync(mymail): Debug: brain S: Mailbox INBOX.Junk: local=aa84611c1cf3db5999530000a19766e2/0/1, remote=00000000000000000000000000000000/0/0: mailbox not selectable yet dsync(mymail): Debug: brain S: Mailbox INBOX.Sent: local=ab84611c1cf3db5999530000a19766e2/0/1, remote=00000000000000000000000000000000/0/0: mailbox not selectable yet dsync(mymail): Debug: brain S: Mailbox INBOX.Trash: local=ac84611c1cf3db5999530000a19766e2/0/1, remote=00000000000000000000000000000000/0/0: mailbox not selectable yet dsync(mymail): Debug: brain S: Import INBOX: Last common UID=0. Delayed expunges= dsync(mymail): Debug: brain M: Import INBOX: Last common UID=0. Delayed expunges= dsync(mymail): Debug: brain M: Import INBOX: Import change type=save GUID= 1507586844.M476153P21401.jason64.dev.cpanel.net,S=46659,W=46886 UID=1 hdr_hash= result=Mail's UID is above local UIDNEXT - No more local mails found dsync(mymail): Debug: Mailbox INBOX: Opened mail UID=1 because: prefetch dsync(mymail): Debug: Mailbox INBOX: Opened mail UID=1 because: access dsync(mymail): Debug: Mailbox INBOX: Opened mail UID=1 because: mail stream dsync(mymail): Debug: brain M: import mail uid 0 guid 1507586844.M476153P21401.jason64.dev.cpanel.net,S=46659,W=46886 dsync(mymail): Debug: brain M: Import INBOX: Import mail body for GUID= 1507586844.M476153P21401.jason64.dev.cpanel.net,S=46659,W=46886 UID=0 dsync(mymail): Debug: Mailbox INBOX: Opened mail UID=1 because: copying dsync(mymail): Debug: /home/mymail/mail/mailboxes/INBOX/dbox-Mails/dovecot.index.cache: Compressed, file_seq changed 0 -> 1507586868, size=32, max_uid=0 dsync(mymail): Debug: Mailbox INBOX: Opened mail UID=1 because: mail stream dsync(mymail): Debug: brain S: Import INBOX: Saved UIDs: dsync(mymail): Debug: brain S: Import INBOX: Finish update: min_next_uid=1 min_first_recent_uid=1 min_highest_modseq=1 min_highest_pvt_modseq=0 dsync(mymail): Warning: quota: Namespace 'INBOX.' is not Maildir, skipping for Maildir++ quota dsync(mymail): Debug: brain M: Import INBOX: Saved UIDs: 1 dsync(mymail): Debug: brain M: Import INBOX: Finish update: min_next_uid=2 min_first_recent_uid=1 min_highest_modseq=2 min_highest_pvt_modseq=0 dsync(mymail): Debug: brain S: Import INBOX.Drafts: Last common UID=0. Delayed expunges= dsync(mymail): Debug: brain M: Import INBOX.Drafts: Last common UID=0. Delayed expunges= dsync(mymail): Debug: brain S: Import INBOX.Drafts: Saved UIDs: dsync(mymail): Debug: brain S: Import INBOX.Drafts: Finish update: min_next_uid=1 min_first_recent_uid=1 min_highest_modseq=1 min_highest_pvt_modseq=0 dsync(mymail): Debug: brain M: Import INBOX.Drafts: Saved UIDs: dsync(mymail): Debug: brain M: Import INBOX.Drafts: Finish update: min_next_uid=1 min_first_recent_uid=1 min_highest_modseq=1 min_highest_pvt_modseq=0 dsync(mymail): Debug: brain S: Import INBOX.Junk: Last common UID=0. Delayed expunges= dsync(mymail): Debug: brain M: Import INBOX.Junk: Last common UID=0. Delayed expunges= dsync(mymail): Debug: brain S: Import INBOX.Junk: Saved UIDs: dsync(mymail): Debug: brain S: Import INBOX.Junk: Finish update: min_next_uid=1 min_first_recent_uid=1 min_highest_modseq=1 min_highest_pvt_modseq=0 dsync(mymail): Debug: brain M: Import INBOX.Junk: Saved UIDs: dsync(mymail): Debug: brain M: Import INBOX.Junk: Finish update: min_next_uid=1 min_first_recent_uid=1 min_highest_modseq=1 min_highest_pvt_modseq=0 dsync(mymail): Debug: brain S: Import INBOX.Sent: Last common UID=0. Delayed expunges= dsync(mymail): Debug: brain M: Import INBOX.Sent: Last common UID=0. Delayed expunges= dsync(mymail): Debug: brain S: Import INBOX.Sent: Saved UIDs: dsync(mymail): Debug: brain S: Import INBOX.Sent: Finish update: min_next_uid=1 min_first_recent_uid=1 min_highest_modseq=1 min_highest_pvt_modseq=0 dsync(mymail): Debug: brain M: Import INBOX.Sent: Saved UIDs: dsync(mymail): Debug: brain M: Import INBOX.Sent: Finish update: min_next_uid=1 min_first_recent_uid=1 min_highest_modseq=1 min_highest_pvt_modseq=0 dsync(mymail): Debug: brain S: Import INBOX.Trash: Last common UID=0. Delayed expunges= dsync(mymail): Debug: brain M: Import INBOX.Trash: Last common UID=0. Delayed expunges= dsync(mymail): Debug: brain S: Import INBOX.Trash: Saved UIDs: dsync(mymail): Debug: brain S: Import INBOX.Trash: Finish update: min_next_uid=1 min_first_recent_uid=1 min_highest_modseq=1 min_highest_pvt_modseq=0 dsync(mymail): Debug: brain M: Import INBOX.Trash: Saved UIDs: dsync(mymail): Debug: brain M: Import INBOX.Trash: Finish update: min_next_uid=1 min_first_recent_uid=1 min_highest_modseq=1 min_highest_pvt_modseq=0 -------------------------------------------------------------------------------------------------------------------------------------------- dovecot -n # 2.2.32 (dfbe293d4): /etc/dovecot/dovecot.conf # OS: Linux 3.10.0-514.6.2.el7.x86_64 x86_64 CentOS Linux release 7.4.1708 (Core) auth_cache_size = 819 M auth_mechanisms = plain login auth_policy_hash_mech = sha512 auth_policy_hash_nonce = 85979662 auth_policy_hash_truncate = 64 auth_policy_request_attributes = auth_database=mail database=mail service=dovecot username=%{orig_user} authtoken_hash=$0$0$%{hashed_password} local_host=%{real_lip} local_port=%{real_lport} remote_host=%{real_rip} remote_port=%{real_rport} auth_policy_server_api_header = X-API-Key:dovecot:4FR0BN8IWTpSnB42 auth_policy_server_timeout_msecs = 3000 auth_policy_server_url = http://127.0.0.1:579/dovecot-auth-policy auth_username_chars = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789!#$-=?^_{}~./@+%" disable_plaintext_auth = no first_valid_uid = 201 lda_mailbox_autocreate = yes lmtp_save_to_detail_mailbox = yes lmtp_user_concurrency_limit = 4 mail_access_groups = dovecot mail_plugins = quota quota_clone zlib fts fts_solr mail_prefetch_count = 20 mailbox_list_index = yes maildir_very_dirty_syncs = yes namespace inbox { inbox = yes location = mailbox Archive { auto = create special_use = \Archive } mailbox Archives { auto = no special_use = \Archive } mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = create special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { auto = no special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } mailbox spam { auto = create special_use = \Junk } prefix = INBOX. separator = . type = private } passdb { args = /usr/local/cpanel/etc/dovecot/cpauthd-dict.conf driver = dict } passdb { args = /usr/local/cpanel/etc/dovecot/cpauthd-dict-domain_owner_mail_pass.conf driver = dict result_failure = return-fail skip = authenticated } passdb { args = /usr/local/cpanel/bin/dovecot-wrap driver = checkpassword skip = authenticated } plugin { acl = vfile:cache_secs=86400 fts = solr fts_solr = url= http://WVJMEK57hc3cg712:9v9W13cT8fTYaXkQ@127.0.0.1:8984/solr/dovecot/ quota_exceeded_message = Mailbox is full / Blocks limit exceeded / Inode limit exceeded } protocols = lmtp imap pop3 service auth { unix_listener auth-client { mode = 0666 } } service config { vsz_limit = 2 G } service dict { unix_listener dict { group = dovecot mode = 0660 } } service imap-login { client_limit = 500 inet_listener imap { address = *,:: } inet_listener imaps { address = *,:: } process_limit = 50 process_min_avail = 2 service_count = 0 vsz_limit = 128 M } service imap { process_limit = 512 vsz_limit = 512 M } service lmtp { client_limit = 1 process_limit = 565 unix_listener lmtp { group = mail mode = 0660 user = mailnull } vsz_limit = 512 M } service managesieve-login { client_limit = 500 process_limit = 50 process_min_avail = 2 service_count = 0 vsz_limit = 128 M } service managesieve { process_limit = 512 vsz_limit = 512 M } service pop3-login { client_limit = 500 inet_listener pop3 { address = *,:: } inet_listener pop3s { address = *,:: } process_limit = 50 process_min_avail = 2 service_count = 0 vsz_limit = 128 M } service pop3 { process_limit = 512 vsz_limit = 512 M } service quota-status { executable = quota-status -p postfix unix_listener quota-status { mode = 0666 } } ssl_cert = </etc/dovecot/ssl/dovecot.crt ssl_cipher_list = ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA:ECDHE-RSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA:ECDHE-ECDSA-DES-CBC3-SHA:ECDHE-RSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:DES-CBC3-SHA:!DSS ssl_key = # hidden, use -P to show it ssl_protocols = !SSLv2 !SSLv3 userdb { driver = prefetch } userdb { args = /usr/local/cpanel/etc/dovecot/cpauthd-dict.conf driver = dict } userdb { args = /usr/local/cpanel/bin/dovecot-wrap driver = checkpassword } protocol imap { imap_capability = +NAMESPACE imap_idle_notify_interval = 24 mins imap_logout_format = in=%i, out=%o, bytes=%i/%o mail_max_userip_connections = 20 mail_plugins = acl quota imap_quota zlib imap_zlib quota_clone virtual fts fts_solr namespace sent { hidden = yes list = no location = virtual:/usr/local/cpanel/etc/dovecot/virtual/sent:INDEX=~/mail/virtual/%u prefix = sent separator = . } namespace spam { hidden = yes list = no location = virtual:/usr/local/cpanel/etc/dovecot/virtual/spam:INDEX=~/mail/virtual/%u prefix = spam separator = . } } protocol pop3 { mail_max_userip_connections = 3 mail_plugins = quota quota quota_clone virtual zlib namespace sent { hidden = yes list = no location = virtual:/usr/local/cpanel/etc/dovecot/virtual/sent:INDEX=~/mail/virtual/%u prefix = sent separator = . } namespace spam { hidden = yes list = no location = virtual:/usr/local/cpanel/etc/dovecot/virtual/spam:INDEX=~/mail/virtual/%u prefix = spam separator = . } pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s, bytes=%i/%o pop3_uidl_format = UID%u-%v } protocol lmtp { mail_plugins = quota quota_clone zlib postmaster_address = root quota_full_tempfail = no } protocol lda { mail_plugins = quota quota_clone zlib postmaster_address = root quota_full_tempfail = no } local_name jason64.dev.cpanel.net { ssl_cert = </etc/dovecot/ssl/dovecot.crt ssl_key = # hidden, use -P to show it } local_name adomain.tld www.adomain.tld mail.adomain.tld webmail.adomain.tld cpanel.adomain.tld autodiscover.adomain.tld webdisk.adomain.tld { ssl_cert = </var/cpanel/ssl/domain_tls/adomain.tld/combined ssl_key = # hidden, use -P to show it } local_name argon.tld www.argon.tld mail.argon.tld xenon.tld carbon.tld helium.tld oxygen.tld chlorine.tld hydrogen.tld www.xenon.tld www.carbon.tld www.helium.tld www.oxygen.tld www.chlorine.tld www.hydrogen.tld mail.xenon.tld mail.carbon.tld mail.helium.tld mail.oxygen.tld mail.chlorine.tld mail.hydrogen.tld webmail.argon.tld cpanel.argon.tld autodiscover.argon.tld webdisk.argon.tld www.mail.argon.tld { ssl_cert = </var/cpanel/ssl/domain_tls/argon.tld/combined ssl_key = # hidden, use -P to show it } -------------------------------------------------------------------------------------------------------------------------------------------- I'm starting to narrow down on which commit introduced the problem, but that'll take some time. If anyone knows which commit caused this or knows of a fix, please let me know. Thank you very much! Regards, Jason

2 2

Parallel build problems with dovecot 2.2.32
by Craig Leres 10 Oct '17

10 Oct '17

I use dovecot under FreeBSD 10.3 and build using poudriere. My build server has 12 cores builds typically happen in parallel and I find software that is not parallel make friendly will fail once every month or so. Attached is a build log from this afternoon that failed because doveadm-util.o had not finished building when the attempt to link test-doveadm-util happened. Looking in src/doveadm/Makefile* in the build tree the only place I see doveadm-util.o is in a make variable: test_doveadm_util_LDADD = doveadm-util.o $(test_libs) $(MODULE_LIBS) This is only used in the test-doveadm-util rule: test-doveadm-util$(EXEEXT): $(test_doveadm_util_OBJECTS) $(test_doveadm_util_DEPENDENCIES) $(EXTRA_test_doveadm_util_DEPENDENCIES) @rm -f test-doveadm-util$(EXEEXT) $(AM_V_CCLD)$(LINK) $(test_doveadm_util_OBJECTS) $(test_doveadm_util_LDADD) $(LIBS) So the problem is that doveadm-util.o needs to be an explicit dependency for test-doveadm-util. I believe one possible fix would be to add doveadm-util.o to test_doveadm_util_DEPENDENCIES: test_doveadm_util_DEPENDENCIES = $(test_deps) bug this isn't something that can easily tested. Craig

2 2

Mail Alias Stores in mySQL Not working
by jason hirsh 10 Oct '17

10 Oct '17

First of all excuse.. I am having an issue getting maillist responses so I may be responding to this worng No on topic I commented out the first user_quesry The second query was not copied correctly , reads user_query = SELECT CONCAT('/var/vmail/mail/', maildir) AS home, 5000 AS uid, 5000 AS gid, CONCAT('*:bytes=', quota) AS quota_rule FROM mailbox WHERE username = '%u' AND active=‘1' still have the same error I did a comparison between the data contained in the sql file and my mail directory and found that they are not consistent Apparently postfixadmin, which I have been using, does not update the maildir I am surprised I am getting any mail at all. I think I have to take this back to ground zero "I see two problems: 1) you have two user_querys, there should only be one 2) your 2nd user_query is not limiting the SQL search with a WHERE clause"

3 2

Sieve rules not processing
by Stephan Herker 10 Oct '17

10 Oct '17

I'm new to dovecot altogether and I have a working dovecot system. I'm trying to setup sieve for mail filtering. If I run the debug program sieve-test I get a positive result that it would have sorted the mail appropriately, but the logs for lmtp don't appear to be processing the rule. Below is output of dovecot -n. Any help is appreciated. Thanks # 2.2.10: /etc/dovecot/dovecot.conf # OS: Linux 3.10.0-514.26.2.el7.x86_64 x86_64 CentOS Linux release 7.4.1708 (Core) xfs auth_mechanisms = plain login first_valid_uid = 2000 last_valid_uid = 2000 log_path = /var/log/dovecot.log mail_gid = vmail mail_location = maildir:/home/vmail/%d/%n mail_plugins = " quota" mail_privileged_group = mail mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave mbox_write_locks = fcntl namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { quota_grace = 10%% quota_status_nouser = DUNNO quota_status_overquota = 552 5.2.2 Mailbox is full quota_status_success = DUNNO sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_global_dir = /etc/dovecot/sieve/global/ sieve_global_path = /etc/dovecot/sieve/default.sieve } postmaster_address = administrator(a)keagaming.com protocols = imap lmtp sieve service auth-worker { user = vmail } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-client { group = postfix mode = 0660 user = postfix } unix_listener auth-master { group = vmail mode = 0660 user = vmail } unix_listener auth-userdb { mode = 0600 user = vmail } user = dovecot } service imap-login { inet_listener imap { port = 143 } } service lmtp { executable = lmtp -L unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } service managesieve-login { inet_listener sieve { port = 4190 } } service pop3-login { inet_listener pop3 { port = 110 } } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { args = uid=vmail gid=vmail home=/home/vmail/%d/%n driver = static } protocol lmtp { info_log_path = /var/log/dovecot-lmtp.log log_path = /var/log/dovecot-lmtp-errors.log mail_plugins = " quota autocreate sieve quota" postmaster_address = postmaster(a)keagaming.com } protocol sieve { info_log_path = /var/log/dovecot-sieve.log log_path = /var/log/dovecot-sieve-errors.log managesieve_implementation_string = dovecot managesieve_max_line_length = 65536 } protocol imap { mail_plugins = " quota quota" }

2 3

Trash quota issue
by Stephan Herker 10 Oct '17

10 Oct '17

I have quotas setup on a test domain to try everything out before I move my domains email over to dovecot. I have a trash quota rule that should have added 100M to trash folder specifically, but mail was denied due to quota being full even though the only mail in the test account was in trash. Below are debug log lines and dovecot -n output. Oct 07 17:16:03 lmtp(26801): Debug: none: root=, index=, indexpvt=, control=, inbox=, alt= Oct 07 17:16:03 lmtp(26801): Info: Connect from local Oct 07 17:16:03 lmtp(26801): Debug: Loading modules from directory: /usr/lib64/dovecot Oct 07 17:16:03 lmtp(26801): Debug: Module loaded: /usr/lib64/dovecot/lib10_quota_plugin.so Oct 07 17:16:03 lmtp(26801): Debug: Module loaded: /usr/lib64/dovecot/lib20_autocreate_plugin.so Oct 07 17:16:03 lmtp(26801): Debug: Module loaded: /usr/lib64/dovecot/lib90_sieve_plugin.so Oct 07 17:16:03 lmtp(26801): Debug: auth input: 123(a)testdo.com home=/home/vmail/testdo.com/123 mail=maildir:/home/vmail/testdo.com/123 uid=2000 gid=2000 quota_rule=*:storage=20000 Oct 07 17:16:03 lmtp(26801): Debug: Added userdb setting: mail=maildir:/home/vmail/testdo.com/123 Oct 07 17:16:03 lmtp(26801): Debug: Added userdb setting: plugin/quota_rule=*:storage=20000 Oct 07 17:16:03 lmtp(26801, 123(a)testdo.com) Debug: Effective uid=2000, gid=2000, home=/home/vmail/testdo.com/123 Oct 07 17:16:03 lmtp(26801, 123(a)testdo.com) Debug: Quota root: name=User quota backend=dict args=:proxy::quotadict Oct 07 17:16:03 lmtp(26801, 123(a)testdo.com) Debug: Quota rule: root=User quota mailbox=* bytes=20480000 messages=0 Oct 07 17:16:03 lmtp(26801, 123(a)testdo.com) Debug: Quota rule: root=User quota mailbox=Trash bytes=+104857600 messages=0 Oct 07 17:16:03 lmtp(26801, 123(a)testdo.com) Debug: Quota grace: root=User quota bytes=2048000 (10%) Oct 07 17:16:03 lmtp(26801, 123(a)testdo.com) Debug: dict quota: user=123(a)testdo.com, uri=proxy::quotadict, noenforcing=0 Oct 07 17:16:03 lmtp(26801, 123(a)testdo.com) Debug: Namespace inbox: type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:/home/vmail/testdo.com/123 Oct 07 17:16:03 lmtp(26801, 123(a)testdo.com) Debug: maildir++: root=/home/vmail/testdo.com/123, index=, indexpvt=, control=, inbox=/home/vmail/testdo.com/123, alt= Oct 07 17:16:03 lmtp(26801, 123(a)testdo.com) Debug: sieve: Pigeonhole version 0.4.2 initializing Oct 07 17:16:03 lmtp(26801, 123(a)testdo.com) Debug: OFqmG0Nu2VmxaAAAobcTNA: sieve: using the following location for user's Sieve script: /home/vmail/testdo.com/123/.dovecot.sieve;name=main script Oct 07 17:16:03 lmtp(26801, 123(a)testdo.com) Debug: OFqmG0Nu2VmxaAAAobcTNA: sieve: loading script /home/vmail/testdo.com/123/.dovecot.sieve;name=main script Oct 07 17:16:03 lmtp(26801, 123(a)testdo.com) Debug: OFqmG0Nu2VmxaAAAobcTNA: sieve: script binary /home/vmail/testdo.com/123/.dovecot.svbin is not up-to-date Oct 07 17:16:03 lmtp(26801, 123(a)testdo.com) Debug: OFqmG0Nu2VmxaAAAobcTNA: sieve: script `main script' from /home/vmail/testdo.com/123/.dovecot.sieve;name=main script successfully compiled Oct 07 17:16:03 lmtp(26801, 123(a)testdo.com) Debug: OFqmG0Nu2VmxaAAAobcTNA: sieve: executing script from /home/vmail/testdo.com/123/.dovecot.sieve;name=main script Oct 07 17:16:03 lmtp(26801, 123(a)testdo.com) Info: OFqmG0Nu2VmxaAAAobcTNA: sieve: msgid=<3a1e5ba2-f0a7-4cec-e7fb-bf5202c2152d(a)keagaming.com>: failed to store into mailbox 'INBOX': Quota exceeded (mailbox for user is full) # 2.2.10: /etc/dovecot/dovecot.conf # OS: Linux 3.10.0-514.26.2.el7.x86_64 x86_64 CentOS Linux release 7.4.1708 (Core) xfs auth_mechanisms = plain login dict { quotadict = mysql:/etc/dovecot/dovecot-dict-quota.conf } first_valid_uid = 2000 hostname = testdo.com last_valid_uid = 2000 log_path = /var/log/dovecot.log mail_debug = yes mail_gid = vmail mail_location = maildir:/home/vmail/%d/%n mail_plugins = " quota trash expire" mail_privileged_group = mail mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave mbox_write_locks = fcntl namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { quota = dict:User quota::proxy::quotadict quota_grace = 10%% quota_rule2 = Trash:storage=+100M quota_status_nouser = DUNNO quota_status_overquota = 552 5.2.2 Mailbox is full quota_status_success = DUNNO sieve_dir = ~/sieve sieve_global_dir = /etc/dovecot/sieve/global/ sieve_global_path = /etc/dovecot/sieve/default.sieve trash = /etc/dovecot/dovecot-trash.conf.ext } postmaster_address = administrator(a)testdo.com protocols = imap lmtp sieve service auth-worker { user = vmail } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-client { group = postfix mode = 0660 user = postfix } unix_listener auth-master { group = vmail mode = 0660 user = vmail } unix_listener auth-userdb { mode = 0600 user = vmail } user = dovecot } service dict { unix_listener dict { group = vmail mode = 0600 user = vmail } } service imap-login { inet_listener imap { port = 143 } } service lmtp { executable = lmtp -L unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } service managesieve-login { inet_listener sieve { port = 4190 } } service pop3-login { inet_listener pop3 { port = 110 } } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lmtp { info_log_path = /var/log/dovecot-lmtp.log log_path = /var/log/dovecot-lmtp-errors.log mail_plugins = " quota trash expire autocreate sieve quota" postmaster_address = postmaster(a)testdo.com } protocol sieve { info_log_path = /var/log/dovecot-sieve.log log_path = /var/log/dovecot-sieve-errors.log managesieve_implementation_string = dovecot managesieve_max_line_length = 65536 } protocol imap { mail_plugins = " quota trash expire imap_quota notify quota" } protocol pop3 { mail_plugins = " quota trash expire quota" } Any help is appreciated, thanks.

1 0

Mail Alias Stores in mySQL Not working
by jason hirsh 10 Oct '17

10 Oct '17

This apparently was a problem that i was not aware since i redid my mail server configuration to make use of Postfixadmin. I have update the conf files using the postfix document fromthe down load. The download document seems to be fpr an early version of dovecot (I am using 2.2.4) as it focuse of dovecot.conf which is now broken into file in the conf.d subdirectory I get "dovecot: auth-worker(30555): sql(abuse(a)examplei.com): unknown user " I imagine this is a conf problem and deals with reading the sql daya I have confirmed the dayta is there The major file apperas to be dovecot-sql.conf.ext Mine reads as follows driver = mysql connect = host=127.0.0.1 dbname=postfix user=postfix password=postfixadmin password_query = SELECT username, password FROM mailbox WHERE username='%u' and active =" default_pass_scheme = MD5-CRYPT user_query = SELECT maildir, 5000 AS uid, 5000 AS gid FROM mailbox WHERE username = '%u' user_query = SELECT CONCAT('/var/vmail/mail/', maildir) AS home, 5000 AS uid, 5000 AS gid Since normal mail is habdled by dovecoy It would see somthing is wrong wihh the first user_query since it appears to be the one that should fine the alias user Any hellp or suggestions would be appreciate

2 1

Error: file_preallocate in logs
by Ricardo Branco 10 Oct '17

10 Oct '17

I am getting lots of these messages in my imapd.log or while I am doing mailbox operations on the terminal. All my mailboxes are stored on NFS and ive set the nfs locking params in the config, only one mailserver accessing this share. Any ideas why this would be happening? doveadm(ops): Error: file_preallocate(/var/vmail/ops/mdbox/storage/.temp.1507551663.P21424Q109M878872.posti2.dc1.wenn.com) failed: Operation not supported

2 3

Re: ACL permission: give permission to move email into different folder
by Davide Marchi 10 Oct '17

10 Oct '17

On 06.10.2017 12:42:22, Aki Tuomi wrote: [..] >> >> Maybe it is not possible with Dovecot? >> >> Many Thanks >> >> Davide > > Just give the relevant permissions to the user, and it also requires > that the target directory is writable by source user. > > Aki Oh, excuse me for the (most probably) silly question, but where I could give to my *virtual user* the directory write permission, if not from the Dovecot ACL? Actually on /etc/dovecot/dovecot.acl: * user=foo(a)mydomain.com lrwsip * user=info(a)mydomain.com lrwsip Many thanks Aki for you help! :-) Davide

2 3

Re: My sub-folder with Outlook work-around to date - update 201710091046
by David.M.Clark 09 Oct '17

09 Oct '17

Hi Mike, I haven't seen your messages come through the feed so something is not working for your e-mail address there? No I am not using Sieve - the server has a third party handling spam etc so the Linux box is very basic SendMail, Dovecot and RoundCube setup (along with my own procmail based web interface for e-mail forwarding and away message responses). I struggle on. On 09/10/17 12:30, Mike wrote: > > Mr. Clark, > > I would post this question to the maillist, but for some unknown reason, > it will not post my messages. > > Are you currently using Sieve with your mbox setup? > > If so, would you be willing to share your configuration of that? > > If not, I guess I'll just convert to maildir like you are doing. > > I'd be willing to help in any way you feel needed. > > Thanks. > > Mike Barsalou > > Quoting "David.M.Clark" <david(a)davrom.com>: > >> Hi All, >> >> Will start using an "update" tag in my subject just to not cause >> confusion (mainly for yours truly). >> >> Pursuant to my victory in finding Maildir and mbox being used if >> either exist (and if both still seems to favour Maildir - a mistake my >> end: "rmdir -f mail" fixed it), I have found one issue with not >> declaring the mailbox location: it won't import your new e-mail from >> your Inbox (/var/spool/mail/user in my case). If I run the conversion >> script mb2md with a '-m', I get duplicate entries in Outlook's Inbox - >> I understand why, just a shame it doesn't sync with what 'isn't' >> already there. >> >> So yesterday and today I have done additional testing as the customer >> uses RoundCube and mobile devices - so attacking the same Linux server >> I have Thunderbird and a couple of Android e-mail clients. Outlook is >> the only stick in the mud with needing to manually subscribe to >> folders when I create them on other devices - again could be me as I >> don't use Outlook. (Thunderbird and other e-mail clients, all good >> with immediate auto-sync). >> >> I looked at the wiki to try and run both mail_location settings with >> the wiki suggested: >> >> ##namespace { >> ## separator = / >> ## prefix = "#mbox/" >> ## location = mbox:~/mail:INBOX=/var/mail/%u >> ## inbox = yes >> ## hidden = yes >> ## list = no >> ##} >> ##namespace { >> ## separator = / >> ## prefix = "Maildir/" >> ## location = maildir:~/Maildir >> ## list = yes >> ##} >> >> in 10-mail.conf but as you can see, I have commented it out now as it >> introduced some more layers of errors which I have to get back to - >> "Duplicate namespace prefix" was one issue. >> >> The goal is to run the server with the existing mbox users blissfully >> unaware they are being converted one-by-one so it looks like I 'can' >> run both formats but just need to get the configs right. Was hoping >> the mb2md would just sync new stuff so I could cron script the Inbox >> check for the users that are converted to Maildir until I can throw >> the switch and be done with the cut-over..... or I could be dangerous >> and remove and import each time.... but that could lead to more dramas >> at the user end. >> >> Looks like more R&D is needed so will persevere - annoying to get so >> close though, might see if I can just sync in the Inbox items that are >> 'new' - that means I am ready to roll on the customer site...... >> >> On 09/10/17 00:12, David.M.Clark wrote: >>> Wow excellent feedback Joseph, Philon and Aki, >>> >>> You have all pointed me in the right direction. Tonight I have tested >>> Dovecot with just the minor configs I do for Dovecot setup and I have >>> commented out the mbox/Maildir lines in 10-mail.conf from my testing: >>> >>> #mail_location = >>> #mail_location = mbox:~/mail:INBOX=/var/spool/mail/%u >>> #mail_location = maildir:~/Maildir >>> >>> I had run up some test files (folders) under mbox using >>> "/u/home/user/mail_test" and then renamed this to 'mail' (so >>> /u/home/user/mail). >>> Ran some tests with sends/receives, created folders - all good. >>> Created mbox text folders. >>> >>> Then had my initial test 'Maildir_test' populated with test folders >>> which I renamed to /u/home/user/Maildir - and each time I restarted >>> Outlook it was obeying the folder 'format' based on whether I had >>> 'mail' or 'Maildir' in place. >>> >>> I did see in the posts and docs on-line somewhere that someone >>> mentioned the later implementations of Dovecot, without hard-setting >>> either mbox or Maildir in the 10-mail.conf file, Dovecot, based on >>> the presence of the particular directory in the user's $HOME >>> directory obeys the rules based on mbox/Maildir respectively. >>> >>> I haven't needed to touch the namespace rules as per: >>> >>> https://wiki2.dovecot.org/Namespaces >>> >>> so the only files that bear any changes from the installed config in >>> conf.d are: >>> >>> -rw-r--r-- 1 root root 14531 Oct 8 23:28 10-mail.conf >>> -rw-r--r-- 1 root root 2965 Oct 7 08:49 10-master.conf >>> -rw-r--r-- 1 root root 1728 Oct 7 08:52 10-ssl.conf >>> >>> This will make migration so much easier with converting one user at a >>> time and then getting them to start Outlook and re-sync things again. >>> >>> This will save a massive job from being just that and can be done in >>> batches of users to suit time constraints. >>> >>> I will post here once again to let you all know how I fare but just >>> proves to me over and over again the power of the Linux e-mail server >>> with Dovecot for IMAP and being able to keep with the older SendMail >>> MTA (been working with Sendmail since 1996 so....). >>> >>> Thank you all so much for taking time to respond. >>> >>> On 08/10/17 20:32, Aki Tuomi wrote: >>>> You can give mail location and home directory from userdb or passdb. >>>> >>>> For userdb, return mail=something:~/something and for home use >>>> home=/path/to/home >>>> >>>> For passdb, you can return userdb_mail and userdb_home >>>> >>>> Aki >>>> >>>>> On October 8, 2017 at 1:14 PM Philon <bytesplit(a)gmail.com> wrote: >>>>> >>>>> >>>>> Hi David, >>>>> >>>>> I somehow remember that there is a way to get the mail_location >>>>> from per-user-settings. I had this once when migrating from maildir >>>>> to mdbox. >>>>> >>>>> You might want to use Google and the mailing list archives for the >>>>> details but in summary it went like this: >>>>> >>>>> - set Dovecot to grab the mail_location from user-settings (I think >>>>> we used MySQL db field - or check docs for auto:) >>>>> - have login script which converts maildir from setup A to B and >>>>> update the user setting >>>>> - kick the user once again to apply the setting (I’m not sure about >>>>> this) >>>>> >>>>> This then automates the conversion process to happen on next user >>>>> login. >>>>> >>>>> Be warned though that today with all the idle phones, probably many >>>>> users will re-login after you restart the server. Perhaps the >>>>> scripting could handle a timer which randomizes this a little. >>>>> >>>>> >>>>> Philon >>>>> >>>>> >>>>>> Am 07.10.2017 um 02:22 schrieb David.M.Clark <david(a)davrom.com>: >>>>>> >>>>>> Hi All, >>>>>> >>>>>> Thanks to MJ for the suggestion as my only hope, and I have tested >>>>>> this with Outlook 2016 and Thunderbird today - seamless creation >>>>>> of folders. >>>>>> >>>>>> Now the mammoth task of converting customers with masses of mbox >>>>>> folders to MailDir format using the on-line perl script: >>>>>> mb2md-3.20.pl >>>>>> >>>>>> Works nicely and will be what gets us out of trouble. My only >>>>>> sadness is that Outlook then has to be 're-subscribed' to the >>>>>> folders again.... which makes sense or maybe I didn't give it long >>>>>> enough - its IMAP folder syncs are extremely slow compared to >>>>>> Thunderbird which I also tested in parallel. Thunderbird didn't >>>>>> need any re-sync, it just found the new subscription setup and was >>>>>> ready to go. But in all fairness, Outlook is still really only an >>>>>> Exchange compatible product for the most part. >>>>>> >>>>>> Would be great to run both mbox and MailDir at the same time so we >>>>>> can do the slow user-by-user process rather than having them all >>>>>> down at some point completely - might look at running Dovecot on a >>>>>> different port maybe with a different ".conf" but thinking this >>>>>> may not work anyway or cause issues.... back to my server tests to >>>>>> see :-) >>>>>> >>>>>> I use additional ports to 143 for external IMAP restrictions >>>>>> anyway so might be able to do this method somehow. >>>>>> >>>>>> Anyway, for those interested in where I got to in my testing so >>>>>> far... >>>>>> >>>>>> 1. Download perl script "mb2md-3.20.pl" from: >>>>>> >>>>>> http://batleth.sapienti-sat.org/projects/mb2md >>>>>> >>>>>> 2. Changed Dovecot /etc/dovecot/conf.d/10-mail.conf mbox entry to >>>>>> MailDir: >>>>>> >>>>>> #mail_location = mbox:~/mail:INBOX=/var/spool/mail/%u >>>>>> mail_location = maildir:~/Maildir >>>>>> >>>>>> 3. Restarted Dovecot >>>>>> >>>>>> 4. su as user and in their home (/u/home/user on my setup): >>>>>> >>>>>> /u/packages/mb2md-3.20.pl -m >>>>>> >>>>>> then: >>>>>> >>>>>> mv mail mail_old >>>>>> >>>>>> then: >>>>>> >>>>>> /u/packages/mb2md-3.20.pl -s mail_old -R >>>>>> >>>>>> then: >>>>>> >>>>>> Login with Outlook and subscribe to IMAP folders again. >>>>>> >>>>>> Not a big fan of gazillions of little eml based text mail files in >>>>>> directories but hey, if it fixes our issues, maybe I need to stop >>>>>> wambulancing about it all and do as I am told :-) >>>>>> >>>>>> Hope this helps - will keep this e-mail updated on findings if >>>>>> anything else comes to light. >>> >> >> -- >> >> As always, I remain at your service. >> >> Kindest Regards, >> David.M.Clark (Director - Senior Linux/UNIX Consultant) >> =--------------------------------------------------------------------------= >> >> Davrom Consulting Pty Ltd Mobile: 0418763124 >> PO Box 1644, Sunnybank Hills, 4109 E-mail (Work): david(a)davrom.com >> ABN: 81 096 990 804 E-mail (Priv): >> dmc1961(a)dmc1961.id.au >> Website: http://davrom.com Skype: dmc1961 >> Podcast: http://ldup.com.au Google: dmc1961(a)gmail.com >> =--------------------------------------------------------------------------= >> >> Specialising in: Linux (Fedora/RedHat/CentOS), UNIX, SCO, MikroTik, >> Networking/Internet, E-mail/Web Technologies >> =--------------------------------------------------------------------------= >> >> Please note: Any e-mail communication bearing this signature is for >> the exclusive purpose of the sender and is not for publication >> without the expressed permission of the sender or respective >> sender's organisation. >> =--------------------------------------------------------------------------= >> > > -- As always, I remain at your service. Kindest Regards, David.M.Clark (Director - Senior Linux/UNIX Consultant) =--------------------------------------------------------------------------= Davrom Consulting Pty Ltd Mobile: 0418763124 PO Box 1644, Sunnybank Hills, 4109 E-mail (Work): david(a)davrom.com ABN: 81 096 990 804 E-mail (Priv): dmc1961(a)dmc1961.id.au Website: http://davrom.com Skype: dmc1961 Podcast: http://ldup.com.au Google: dmc1961(a)gmail.com =--------------------------------------------------------------------------= Specialising in: Linux (Fedora/RedHat/CentOS), UNIX, SCO, MikroTik, Networking/Internet, E-mail/Web Technologies =--------------------------------------------------------------------------= Please note: Any e-mail communication bearing this signature is for the exclusive purpose of the sender and is not for publication without the expressed permission of the sender or respective sender's organisation. =--------------------------------------------------------------------------=

1 0

My sub-folder with Outlook work-around to date
by David.M.Clark 09 Oct '17

09 Oct '17

Hi All, please be kind, this is my first e-mail to the list :-) I actively support CentOS based e-mail servers running Dovecot, Sendmail, Spammassassin and 3 x SOGo based setups. Dovecot is my goto IMAP server and have used it and modifications to it to net excellent results for years. Then we have people who insist on only using Outlook (and in some instances the MS Live Messenger thingy). Some shenanigans in recent years have arose with using sub-folders in the Outlook clients (2013 and 2016). Traditionally, placing a "/" after the name of a newly desired e-mail folder has netted the result of something like: "Rentals/" creating: /u/home/someuser/mail/Rentals/ Under which users then create actual e-mail folders under the "Rentals" Linux directory as such. With Outlook 2013 and 2016 this seems to have stopped working and so I implemented a work-around where the user creates a normal folder, example "Rentals++", and I have written a cron script that trawls the $HOMEs each minute and if it finds a folder with a "++" at the end, it creates the folder as a directory, so: /u/home/someuser/mail/Rentals++ becomes: /u/home/someuser/mail/Rentals/ and adds this new subscription to their .subscription folder. It also sends an e-mail to the user advising that the new folder is created and they can proceed to use the "Rentals" folder for adding sub-folders (as in real text based mail folders). The script was a quick work-around one weekend in a mad flurry to get things working and to date works but is not 'user-proof'. So I am now looking at developing an internal web interface to do the same thing and hoping with more controls, has no or far less margin for user error. Long times of Outlook folder refreshes don't help and users sometimes end up with issues that require my Linux command line help. I have been trawling e-mail forums for some time now and have not seen any other work-arounds (or perhaps I am living under a rock) but before I embark on this web interface adventure, I just wanted to make sure I had not missed some fundamental 'bit' that I should be observing. All servers are either CentOS 6.9 (or slightly less) and CentOS 7 with the latest updates and for things like Thunderbird and Roundcube and SOGo, work well. I need to experiment with the whole "/" for these but I am currently driven by the enforced Outlook chains. Any input from you guys on whether this is my best approach or 'hey mate, just do this', would be much appreciated. I am happy to share my travels script/web-wise if this is the only option to date. -- As always, I remain at your service. Kindest Regards, David.M.Clark (Director - Senior Linux/UNIX Consultant) E-mail: david(a)davrom.com =--------------------------------------------------------------------------= Specialising in: Linux (Fedora/RedHat/CentOS), UNIX, SCO, MikroTik, Networking/Internet, E-mail/Web Technologies =--------------------------------------------------------------------------=

4 7

Released Pigeonhole v0.4.21.rc1 for Dovecot v2.2.33.rc1.
by Stephan Bosch 09 Oct '17

09 Oct '17

Hello Dovecot users, Here is the Pigeonhole hole release candidate that goes with the Dovecot release candidate. Nothing really special going on, just a few changes and fixes that accumulated over the last few months. Changelog v0.4.21: * redirect action: Always set the X-Sieve-Redirected-From header to sieve_user_email if configured. Before, it would use the envelope recipient instead if available, which makes no sense if the primary e-mail address is available. + vacation extension: Allow ignoring the envelope sender while composing the "To:" header for the reply. Normally, the "To:" header is composed from the address found in the "Sender", "Resent-From" or "From" headers that is equal to the envelope sender. If none is then found, the bare envelope sender is used. This change adds a new setting "sieve_vacation_to_header_ignore_envelope". With this setting enabled, the "To:" header is always composed from those headers in the source message. The new setting thus allows ignoring the envelope, which is useful e.g. when SRS is used. + vacation extension: Compose the "To:" header from the full sender address found in the first "Sender:", "From:" or "Resent-From:" header. Before, it would create a "To:" header without a phrase part. The new behavior is nicer, since the reply will be addressed to the sender by name if possible. - LDA Sieve plugin: Fixed sequential execution of LDAP-based scripts. A missing LDAP-based script could cause the script sequence to exit earlier. - sieve-filter: Removed the (now) duplicate utf8 to mutf7 mailbox name conversion. This caused problems with mailbox names containing UTF-8 characters. The Dovecot API was changed years ago, but apparently sieve-filter was never updated. The release is available as follows: http://pigeonhole.dovecot.org/releases/2.2/rc/dovecot-2.2-pigeonhole-0.4.21… http://pigeonhole.dovecot.org/releases/2.2/rc/dovecot-2.2-pigeonhole-0.4.21… Refer to http://pigeonhole.dovecot.org and the Dovecot v2.x wiki for more information. Have fun testing this release candidate and don't hesitate to notify me when there are any problems. Regards, -- Stephan Bosch stephan(a)rename-it.nl

1 0

Permission denied error on private key...
by SH Development 08 Oct '17

08 Oct '17

I have a working dovecot/postfix/mysql server running and was trying to set up another one for replication purposes. If I copy my certificates from the working server, everything works fine. However, I purchased another updated certificate for the replication server, and I cannot get dovecot to start up. Keep getting: doveconf: Fatal: Error in configuration file /etc/dovecot/dovecot.conf line 31: ssl_key: Can't open file /etc/pki/dovecot/private/mailserver.crt: Permission denied Different permissions on the mailserver.crt have no effect on the error. Maybe something I did in creating the file? I’m a little fuzzy when it comes to how you’re supposed to create the whole thing. Here are the steps I took: openssl genrsa -out mailserverkey.crt 2048 I then took the CSR, submitted it to Comodo, a certificate was generated and emailed back to me. I placed the certs in the appropriately referenced places on the server… And that is where I’m at. I’ve spent quite a bit of time comparing my working server’s configuration files to the new server and cannot find any differences in the SSL configuration, OTHER than the certs themselves. Is dovecot looking for something I didn’t do correctly in the creation maybe? Jeff J. Starion Technologies, LLC 816-331-0030

2 4

Re: My sub-folder with Outlook work-around to date
by Joseph Tam 08 Oct '17

08 Oct '17

"David.M.Clark" <david(a)davrom.com> writes: > Would be great to run both mbox and MailDir at the same time so we can > do the slow user-by-user process rather than having them all down at > some point completely ... - might look at running Dovecot on a different I believe you can do this by using a userdb that can accommodate extra fields. In particular, supplying a mail field will overwrite the global mail_location. You can iterate through your users, convert them one at a time, then update the mail field as you go. At the end, update mail_location to your new default and remove the extra fields. https://wiki.dovecot.org/UserDatabase/ExtraFields Joseph Tam <jtam.home(a)gmail.com>

1 0

Re: Core Dumps with dovecot-2.2 -git as of 2.2.devel (eaf276b33)
by Aki Tuomi 07 Oct '17

07 Oct '17

Thanks! We'll look into it. ---Aki TuomiDovecot oy -------- Original message --------From: Reuben Farrelly <reuben-dovecot(a)reub.net> Date: 07/10/2017 13:08 (GMT+02:00) To: dovecot(a)dovecot.org Subject: Core Dumps with dovecot-2.2 -git as of 2.2.devel (eaf276b33) This appears to be breaking dsync at the moment and is caused by something committed in the last week or so. This is with the current -git of dovecot-2.2 (eaf276b33). The crash happens all the time - the logs are full of this message. Oct 7 20:31:24 thunderstorm.reub.net dovecot: doveadm: Warning: I/O leak: 0x7f8bb6581b4c (ostream-file.c:350, fd 14) Oct 7 20:31:24 thunderstorm.reub.net dovecot: doveadm: Panic: file ioloop.c: line 126 (io_remove_full): assertion failed: (io->callback != NULL) Oct 7 20:31:24 thunderstorm.reub.net dovecot: doveadm: Error: Raw backtrace: /usr/lib64/dovecot/libdovecot.so.0(+0xd48a6) [0x7f8bb654a8a6] -> /usr/lib64/dovecot/li bdovecot.so.0(+0xd5e26) [0x7f8bb654be26] -> /usr/lib64/dovecot/libdovecot.so.0(i_fatal+0) [0x7f8bb654ac39] -> /usr/lib64/dovecot/libdovecot.so.0(+0xf5cb0) [0x7f8bb6 56bcb0] -> /usr/lib64/dovecot/libdovecot.so.0(io_remove+0x1d) [0x7f8bb656be31] -> /usr/lib64/dovecot/libdovecot.so.0(+0x10b5f8) [0x7f8bb65815f8] -> /usr/lib64/dovec ot/libdovecot.so.0(o_stream_cork+0x5a) [0x7f8bb657e289] -> /usr/lib64/dovecot/libssl_iostream_openssl.so(+0x6406) [0x7f8bb12d6406] -> /usr/lib64/dovecot/libssl_iost ream_openssl.so(openssl_iostream_bio_sync+0x18) [0x7f8bb12d6af6] -> /usr/lib64/dovecot/libssl_iostream_openssl.so(+0xa52e) [0x7f8bb12da52e] -> / usr/lib64/dovecot/libssl_iostream_openssl.so(+0xa6ef) [0x7f8bb12da6ef] -> /usr/lib64/dovecot/libdovecot.so.0(o_stream_sendv+0xc7) [0x7f8bb657e765] -> /usr/lib64/dovecot/libdovecot.so.0(o_stream_send+0x61) [0x7f8bb657e688] -> /usr/lib64/dovecot/libdovecot.so.0(+0x10dc2c) [0x7f8bb6583c2c] -> /usr/lib64/dovecot/libdovecot.so.0(+0x10ddd4) [0x7f8bb6583dd4] -> /usr/lib64/dovecot/libdovecot.so.0(o_stream_sendv+0xc7) [0x7f8bb657e765] -> /usr/lib64/dovecot/libdovecot.so.0(o_stream_nsendv+0x55) [0x7f8bb657e93f] -> /usr/lib64/dovecot/libdovecot.so.0(o_stream_nsend+0x61) [0x7f8bb657e8d3] -> dovecot/doveadm-server() [0x444a35] -> /usr/lib64/dovecot/libdovecot.so.0(i_warning+0xce) [0x7f8bb654afdc] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_destroy+0x2ca) [0x7f8bb656d8cd] -> dovecot/doveadm-server() [0x4454d1] -> dovecot/doveadm-server() [0x445793] -> dovecot/doveadm-server() [0x445dd6] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_call_io+0xd6) [0x7f8bb656d241] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0x225) [0x7f8bb656fe58] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_handler_run+0x3e) [0x7f8bb656d422] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_run+0xbe) [0x7f8bb656d345] Oct 7 20:31:24 thunderstorm.reub.net dovecot: doveadm: Fatal: master: service(doveadm): child 27186 killed with signal 6 (core dumped) thunderstorm reuben # file core core: ELF 64-bit LSB core file x86-64, version 1 (SYSV), SVR4-style, from 'dovecot/doveadm-server', real uid: 0, effective uid: 0, real gid: 0, effective gid: 0, execfn: '/usr/libexec/dovecot/doveadm-server', platform: 'x86_64' thunderstorm reuben # gdb /usr/libexec/dovecot/doveadm-server core GNU gdb (Gentoo 8.0.1 vanilla) 8.0.1 Copyright (C) 2017 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "x86_64-pc-linux-gnu". Type "show configuration" for configuration details. For bug reporting instructions, please see: <https://bugs.gentoo.org/>. Find the GDB manual and other documentation resources online at: <http://www.gnu.org/software/gdb/documentation/>. For help, type "help". Type "apropos word" to search for commands related to "word"... Reading symbols from /usr/libexec/dovecot/doveadm-server...done. [New LWP 27186] [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib64/libthread_db.so.1". Core was generated by `dovecot/doveadm-server'. Program terminated with signal SIGABRT, Aborted. #0 0x00007f8bb60e7f70 in raise () from /lib64/libc.so.6 (gdb) bt full #0 0x00007f8bb60e7f70 in raise () from /lib64/libc.so.6 No symbol table info available. #1 0x00007f8bb60e9aa7 in abort () from /lib64/libc.so.6 No symbol table info available. #2 0x00007f8bb654a8f5 in default_fatal_finish (type=LOG_TYPE_PANIC, status=0) at failures.c:201 backtrace = 0x228e4d8 "/usr/lib64/dovecot/libdovecot.so.0(+0xd48a6) [0x7f8bb654a8a6] -> /usr/lib64/dovecot/libdovecot.so.0(+0xd5e26) [0x7f8bb654be26] -> /usr/lib64/dovecot/libdovecot.so.0(i_fatal+0) [0x7f8bb654ac39] -> /usr"... #3 0x00007f8bb654be26 in i_internal_fatal_handler (ctx=0x7ffef81daa50, format=0x7f8bb65ba898 "file %s: line %d (%s): assertion failed: (%s)", args=0x7ffef81daa70) at failures.c:670 status = 0 #4 0x00007f8bb654ac39 in i_panic (format=0x7f8bb65ba898 "file %s: line %d (%s): assertion failed: (%s)") at failures.c:275 ctx = {type = LOG_TYPE_PANIC, exit_status = 0, timestamp = 0x0, timestamp_usecs = 0} args = {{gp_offset = 40, fp_offset = 48, overflow_arg_area = 0x7ffef81dab50, reg_save_area = 0x7ffef81daa90}} #5 0x00007f8bb656bcb0 in io_remove_full (_io=0x220a100, closed=false) at ioloop.c:126 io = 0x22694a0 __FUNCTION__ = "io_remove_full" #6 0x00007f8bb656be31 in io_remove (io=0x220a100) at ioloop.c:169 No locals. #7 0x00007f8bb65815f8 in o_stream_file_cork (stream=0x220a010, set=true) at ostream-file.c:342 fstream = 0x220a010 ret = 32766 __FUNCTION__ = "o_stream_file_cork" #8 0x00007f8bb657e289 in o_stream_cork (stream=0x220a0a0) at ostream.c:146 _stream = 0x220a010 #9 0x00007f8bb12d6406 in openssl_iostream_bio_output (ssl_io=0x220aa00) at iostream-openssl.c:325 bytes = 140238036407941 max_bytes = 18446742978492891135 sent = 35692560 buffer = "\027\003\003\000\001\000\000\000\020\240 \002\000\000\000\000\200\254\035\370\376\177\000\000\022\343W\266\213\177\000\000`\214\033\002\000\000\000\000\240\240 \002\000\000\000\000`\214\033\002\000\000\000\000\020\240 \002\000\000\000\000\320\314\035\370\376\177\000\000\236f-\261\213\177\000\000\025\071\260fK\247\000\000\000\252 \002\000\000\000\000`\214\033", '\000' <repeats 14 times>, "\315\035\370\376\177\000\000\236f-\261\213\177\000\000\225\305^\001?\236,,\000\252 \002\000\000\000\000=$h\000\272Å«\033\000\000\000\000\000\000\000\000\221\371Í¦f\237\035\224\335-\365\214l\333\347|\005\310\345\035/\200r\242\222}\313I\226G\313*\223\364\312\310\313j\263\260/\245"... bytes_sent = false ret = 32766 __FUNCTION__ = "openssl_iostream_bio_output" #10 0x00007f8bb12d6af6 in openssl_iostream_bio_sync (ssl_io=0x220aa00) at iostream-openssl.c:459 ret = false #11 0x00007f8bb12da52e in o_stream_ssl_flush_buffer (sstream=0x220aca0) at ostream-openssl.c:110 pos = 6 ret = 6 #12 0x00007f8bb12da6ef in o_stream_ssl_sendv (stream=0x220aca0, iov=0x7ffef81dcd70, iov_count=1) at ostream-openssl.c:155 sstream = 0x220aca0 bytes_sent = 6 #13 0x00007f8bb657e765 in o_stream_sendv (stream=0x220ad30, iov=0x7ffef81dcd70, iov_count=1) at ostream.c:260 _stream = 0x220aca0 i = 1 total_size = 6 ret = 35771392 __FUNCTION__ = "o_stream_sendv" #14 0x00007f8bb657e688 in o_stream_send (stream=0x220ad30, data=0x2308850, size=6) at ostream.c:239 iov = {iov_base = 0x2308850, iov_len = 6} #15 0x00007f8bb6583c2c in o_stream_multiplex_sendv (mstream=0x221d270) at ostream-multiplex.c:90 channel = 0x0 ret = 0 #16 0x00007f8bb6583dd4 in o_stream_multiplex_ochannel_sendv (stream=0x221d720, iov=0x7ffef81dcef0, iov_count=1) at ostream-multiplex.c:124 channel = 0x221d720 ret = 7354428521 total = 1 #17 0x00007f8bb657e765 in o_stream_sendv (stream=0x221d7b0, iov=0x7ffef81dcef0, iov_count=1) at ostream.c:260 _stream = 0x221d720 i = 1 total_size = 1 ret = 36233296 __FUNCTION__ = "o_stream_sendv" #18 0x00007f8bb657e93f in o_stream_nsendv (stream=0x221d7b0, iov=0x7ffef81dcef0, iov_count=1) at ostream.c:295 No locals. #19 0x00007f8bb657e8d3 in o_stream_nsend (stream=0x221d7b0, data=0x7ffef81dcf42, size=1) at ostream.c:287 iov = {iov_base = 0x7ffef81dcf42, iov_len = 1} #20 0x0000000000444a35 in doveadm_server_log_handler (ctx=0x7f8bb6805bd0 <failure_ctx_warning>, format=0x7f8bb65bac69 "Raw backtrace for leaks: %s", args=0x7ffef81dcfb0) at client-connection.c:64 c = 3 '\003' corked = false str = 0x228e050 ptr = 0x0 start = 0x228e088 "Raw backtrace for leaks: /usr/lib64/dovecot/libdovecot.so.0(io_loop_destroy+0x2ae) [0x7f8bb656d8b1] -> dovecot/doveadm-server() [0x4454d1] -> dovecot/doveadm-server() [0x445793] -> dovecot/doveadm-ser"... va = {{gp_offset = 16, fp_offset = 48, overflow_arg_area = 0x7ffef81dd090, reg_save_area = 0x7ffef81dcfd0}} _data_stack_cur_id = 4 #21 0x00007f8bb654afdc in i_warning (format=0x7f8bb65bac69 "Raw backtrace for leaks: %s") at failures.c:325 old_errno = 0 args = {{gp_offset = 8, fp_offset = 48, overflow_arg_area = 0x7ffef81dd090, reg_save_area = 0x7ffef81dcfd0}} #22 0x00007f8bb656d8cd in io_loop_destroy (_ioloop=0x7ffef81dd138) at ioloop.c:766 backtrace = 0x228dc38 "/usr/lib64/dovecot/libdovecot.so.0(io_loop_destroy+0x2ae) [0x7f8bb656d8b1] -> dovecot/doveadm-server() [0x4454d1] -> dovecot/doveadm-server() [0x445793] -> dovecot/doveadm-server() [0x445dd6] -> /usr/"... ioloop = 0x221ddc0 to_idx = 0x221dfe0 item = 0x0 leaks = true __FUNCTION__ = "io_loop_destroy" #23 0x00000000004454d1 in doveadm_cmd_handle (conn=0x22059d8, cmd_name=0x21b8c20 "dsync-server", argc=3, argv=0x21b8c50, cctx=0x7ffef81dd1b0) at client-connection.c:337 ioloop = 0x0 prev_ioloop = 0x21bfc40 cmd = 0x0 mail_cmd = 0x21c65e8 mctx = 0x221d9f8 cmd_ver2 = 0x0 #24 0x0000000000445793 in client_handle_command (conn=0x22059d8, args=0x21b8c40) at client-connection.c:399 cctx = {cmd = 0x0, argc = 0, argv = 0x0, username = 0x21b8c19 "reuben", cli = false, tcp_server = true, local_ip = {family = 10, u = {ip6 = {__in6_u = { ---Type <return> to continue, or q <return> to quit--- Reuben

1 0

Core Dumps with dovecot-2.2 -git as of 2.2.devel (eaf276b33)
by Reuben Farrelly 07 Oct '17

07 Oct '17

This appears to be breaking dsync at the moment and is caused by something committed in the last week or so. This is with the current -git of dovecot-2.2 (eaf276b33). The crash happens all the time - the logs are full of this message. Oct 7 20:31:24 thunderstorm.reub.net dovecot: doveadm: Warning: I/O leak: 0x7f8bb6581b4c (ostream-file.c:350, fd 14) Oct 7 20:31:24 thunderstorm.reub.net dovecot: doveadm: Panic: file ioloop.c: line 126 (io_remove_full): assertion failed: (io->callback != NULL) Oct 7 20:31:24 thunderstorm.reub.net dovecot: doveadm: Error: Raw backtrace: /usr/lib64/dovecot/libdovecot.so.0(+0xd48a6) [0x7f8bb654a8a6] -> /usr/lib64/dovecot/li bdovecot.so.0(+0xd5e26) [0x7f8bb654be26] -> /usr/lib64/dovecot/libdovecot.so.0(i_fatal+0) [0x7f8bb654ac39] -> /usr/lib64/dovecot/libdovecot.so.0(+0xf5cb0) [0x7f8bb6 56bcb0] -> /usr/lib64/dovecot/libdovecot.so.0(io_remove+0x1d) [0x7f8bb656be31] -> /usr/lib64/dovecot/libdovecot.so.0(+0x10b5f8) [0x7f8bb65815f8] -> /usr/lib64/dovec ot/libdovecot.so.0(o_stream_cork+0x5a) [0x7f8bb657e289] -> /usr/lib64/dovecot/libssl_iostream_openssl.so(+0x6406) [0x7f8bb12d6406] -> /usr/lib64/dovecot/libssl_iost ream_openssl.so(openssl_iostream_bio_sync+0x18) [0x7f8bb12d6af6] -> /usr/lib64/dovecot/libssl_iostream_openssl.so(+0xa52e) [0x7f8bb12da52e] -> / usr/lib64/dovecot/libssl_iostream_openssl.so(+0xa6ef) [0x7f8bb12da6ef] -> /usr/lib64/dovecot/libdovecot.so.0(o_stream_sendv+0xc7) [0x7f8bb657e765] -> /usr/lib64/dovecot/libdovecot.so.0(o_stream_send+0x61) [0x7f8bb657e688] -> /usr/lib64/dovecot/libdovecot.so.0(+0x10dc2c) [0x7f8bb6583c2c] -> /usr/lib64/dovecot/libdovecot.so.0(+0x10ddd4) [0x7f8bb6583dd4] -> /usr/lib64/dovecot/libdovecot.so.0(o_stream_sendv+0xc7) [0x7f8bb657e765] -> /usr/lib64/dovecot/libdovecot.so.0(o_stream_nsendv+0x55) [0x7f8bb657e93f] -> /usr/lib64/dovecot/libdovecot.so.0(o_stream_nsend+0x61) [0x7f8bb657e8d3] -> dovecot/doveadm-server() [0x444a35] -> /usr/lib64/dovecot/libdovecot.so.0(i_warning+0xce) [0x7f8bb654afdc] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_destroy+0x2ca) [0x7f8bb656d8cd] -> dovecot/doveadm-server() [0x4454d1] -> dovecot/doveadm-server() [0x445793] -> dovecot/doveadm-server() [0x445dd6] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_call_io+0xd6) [0x7f8bb656d241] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0x225) [0x7f8bb656fe58] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_handler_run+0x3e) [0x7f8bb656d422] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_run+0xbe) [0x7f8bb656d345] Oct 7 20:31:24 thunderstorm.reub.net dovecot: doveadm: Fatal: master: service(doveadm): child 27186 killed with signal 6 (core dumped) thunderstorm reuben # file core core: ELF 64-bit LSB core file x86-64, version 1 (SYSV), SVR4-style, from 'dovecot/doveadm-server', real uid: 0, effective uid: 0, real gid: 0, effective gid: 0, execfn: '/usr/libexec/dovecot/doveadm-server', platform: 'x86_64' thunderstorm reuben # gdb /usr/libexec/dovecot/doveadm-server core GNU gdb (Gentoo 8.0.1 vanilla) 8.0.1 Copyright (C) 2017 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html> This is free software: you are free to change and redistribute it. There is NO WARRANTY, to the extent permitted by law. Type "show copying" and "show warranty" for details. This GDB was configured as "x86_64-pc-linux-gnu". Type "show configuration" for configuration details. For bug reporting instructions, please see: <https://bugs.gentoo.org/>. Find the GDB manual and other documentation resources online at: <http://www.gnu.org/software/gdb/documentation/>. For help, type "help". Type "apropos word" to search for commands related to "word"... Reading symbols from /usr/libexec/dovecot/doveadm-server...done. [New LWP 27186] [Thread debugging using libthread_db enabled] Using host libthread_db library "/lib64/libthread_db.so.1". Core was generated by `dovecot/doveadm-server'. Program terminated with signal SIGABRT, Aborted. #0 0x00007f8bb60e7f70 in raise () from /lib64/libc.so.6 (gdb) bt full #0 0x00007f8bb60e7f70 in raise () from /lib64/libc.so.6 No symbol table info available. #1 0x00007f8bb60e9aa7 in abort () from /lib64/libc.so.6 No symbol table info available. #2 0x00007f8bb654a8f5 in default_fatal_finish (type=LOG_TYPE_PANIC, status=0) at failures.c:201 backtrace = 0x228e4d8 "/usr/lib64/dovecot/libdovecot.so.0(+0xd48a6) [0x7f8bb654a8a6] -> /usr/lib64/dovecot/libdovecot.so.0(+0xd5e26) [0x7f8bb654be26] -> /usr/lib64/dovecot/libdovecot.so.0(i_fatal+0) [0x7f8bb654ac39] -> /usr"... #3 0x00007f8bb654be26 in i_internal_fatal_handler (ctx=0x7ffef81daa50, format=0x7f8bb65ba898 "file %s: line %d (%s): assertion failed: (%s)", args=0x7ffef81daa70) at failures.c:670 status = 0 #4 0x00007f8bb654ac39 in i_panic (format=0x7f8bb65ba898 "file %s: line %d (%s): assertion failed: (%s)") at failures.c:275 ctx = {type = LOG_TYPE_PANIC, exit_status = 0, timestamp = 0x0, timestamp_usecs = 0} args = {{gp_offset = 40, fp_offset = 48, overflow_arg_area = 0x7ffef81dab50, reg_save_area = 0x7ffef81daa90}} #5 0x00007f8bb656bcb0 in io_remove_full (_io=0x220a100, closed=false) at ioloop.c:126 io = 0x22694a0 __FUNCTION__ = "io_remove_full" #6 0x00007f8bb656be31 in io_remove (io=0x220a100) at ioloop.c:169 No locals. #7 0x00007f8bb65815f8 in o_stream_file_cork (stream=0x220a010, set=true) at ostream-file.c:342 fstream = 0x220a010 ret = 32766 __FUNCTION__ = "o_stream_file_cork" #8 0x00007f8bb657e289 in o_stream_cork (stream=0x220a0a0) at ostream.c:146 _stream = 0x220a010 #9 0x00007f8bb12d6406 in openssl_iostream_bio_output (ssl_io=0x220aa00) at iostream-openssl.c:325 bytes = 140238036407941 max_bytes = 18446742978492891135 sent = 35692560 buffer = "\027\003\003\000\001\000\000\000\020\240 \002\000\000\000\000\200\254\035\370\376\177\000\000\022\343W\266\213\177\000\000`\214\033\002\000\000\000\000\240\240 \002\000\000\000\000`\214\033\002\000\000\000\000\020\240 \002\000\000\000\000\320\314\035\370\376\177\000\000\236f-\261\213\177\000\000\025\071\260fK\247\000\000\000\252 \002\000\000\000\000`\214\033", '\000' <repeats 14 times>, "\315\035\370\376\177\000\000\236f-\261\213\177\000\000\225\305^\001?\236,,\000\252 \002\000\000\000\000=$h\000\272Å«\033\000\000\000\000\000\000\000\000\221\371Í¦f\237\035\224\335-\365\214l\333\347|\005\310\345\035/\200r\242\222}\313I\226G\313*\223\364\312\310\313j\263\260/\245"... bytes_sent = false ret = 32766 __FUNCTION__ = "openssl_iostream_bio_output" #10 0x00007f8bb12d6af6 in openssl_iostream_bio_sync (ssl_io=0x220aa00) at iostream-openssl.c:459 ret = false #11 0x00007f8bb12da52e in o_stream_ssl_flush_buffer (sstream=0x220aca0) at ostream-openssl.c:110 pos = 6 ret = 6 #12 0x00007f8bb12da6ef in o_stream_ssl_sendv (stream=0x220aca0, iov=0x7ffef81dcd70, iov_count=1) at ostream-openssl.c:155 sstream = 0x220aca0 bytes_sent = 6 #13 0x00007f8bb657e765 in o_stream_sendv (stream=0x220ad30, iov=0x7ffef81dcd70, iov_count=1) at ostream.c:260 _stream = 0x220aca0 i = 1 total_size = 6 ret = 35771392 __FUNCTION__ = "o_stream_sendv" #14 0x00007f8bb657e688 in o_stream_send (stream=0x220ad30, data=0x2308850, size=6) at ostream.c:239 iov = {iov_base = 0x2308850, iov_len = 6} #15 0x00007f8bb6583c2c in o_stream_multiplex_sendv (mstream=0x221d270) at ostream-multiplex.c:90 channel = 0x0 ret = 0 #16 0x00007f8bb6583dd4 in o_stream_multiplex_ochannel_sendv (stream=0x221d720, iov=0x7ffef81dcef0, iov_count=1) at ostream-multiplex.c:124 channel = 0x221d720 ret = 7354428521 total = 1 #17 0x00007f8bb657e765 in o_stream_sendv (stream=0x221d7b0, iov=0x7ffef81dcef0, iov_count=1) at ostream.c:260 _stream = 0x221d720 i = 1 total_size = 1 ret = 36233296 __FUNCTION__ = "o_stream_sendv" #18 0x00007f8bb657e93f in o_stream_nsendv (stream=0x221d7b0, iov=0x7ffef81dcef0, iov_count=1) at ostream.c:295 No locals. #19 0x00007f8bb657e8d3 in o_stream_nsend (stream=0x221d7b0, data=0x7ffef81dcf42, size=1) at ostream.c:287 iov = {iov_base = 0x7ffef81dcf42, iov_len = 1} #20 0x0000000000444a35 in doveadm_server_log_handler (ctx=0x7f8bb6805bd0 <failure_ctx_warning>, format=0x7f8bb65bac69 "Raw backtrace for leaks: %s", args=0x7ffef81dcfb0) at client-connection.c:64 c = 3 '\003' corked = false str = 0x228e050 ptr = 0x0 start = 0x228e088 "Raw backtrace for leaks: /usr/lib64/dovecot/libdovecot.so.0(io_loop_destroy+0x2ae) [0x7f8bb656d8b1] -> dovecot/doveadm-server() [0x4454d1] -> dovecot/doveadm-server() [0x445793] -> dovecot/doveadm-ser"... va = {{gp_offset = 16, fp_offset = 48, overflow_arg_area = 0x7ffef81dd090, reg_save_area = 0x7ffef81dcfd0}} _data_stack_cur_id = 4 #21 0x00007f8bb654afdc in i_warning (format=0x7f8bb65bac69 "Raw backtrace for leaks: %s") at failures.c:325 old_errno = 0 args = {{gp_offset = 8, fp_offset = 48, overflow_arg_area = 0x7ffef81dd090, reg_save_area = 0x7ffef81dcfd0}} #22 0x00007f8bb656d8cd in io_loop_destroy (_ioloop=0x7ffef81dd138) at ioloop.c:766 backtrace = 0x228dc38 "/usr/lib64/dovecot/libdovecot.so.0(io_loop_destroy+0x2ae) [0x7f8bb656d8b1] -> dovecot/doveadm-server() [0x4454d1] -> dovecot/doveadm-server() [0x445793] -> dovecot/doveadm-server() [0x445dd6] -> /usr/"... ioloop = 0x221ddc0 to_idx = 0x221dfe0 item = 0x0 leaks = true __FUNCTION__ = "io_loop_destroy" #23 0x00000000004454d1 in doveadm_cmd_handle (conn=0x22059d8, cmd_name=0x21b8c20 "dsync-server", argc=3, argv=0x21b8c50, cctx=0x7ffef81dd1b0) at client-connection.c:337 ioloop = 0x0 prev_ioloop = 0x21bfc40 cmd = 0x0 mail_cmd = 0x21c65e8 mctx = 0x221d9f8 cmd_ver2 = 0x0 #24 0x0000000000445793 in client_handle_command (conn=0x22059d8, args=0x21b8c40) at client-connection.c:399 cctx = {cmd = 0x0, argc = 0, argv = 0x0, username = 0x21b8c19 "reuben", cli = false, tcp_server = true, local_ip = {family = 10, u = {ip6 = {__in6_u = { ---Type <return> to continue, or q <return> to quit--- Reuben

1 0

dovecot: master: Warning: Sent SIGKILL to 100 imap-login processes
by absolutely_free＠libero.it 07 Oct '17

07 Oct '17

Hi, I am using Dovecot 2.2.32 (dfbe293d4) I noticed lots of messages like: dovecot: master: Warning: Sent SIGKILL to 100 imap-login processes in /var/log/maillog I commented out "process_limit" service imap { # Most of the memory goes to mmap()ing files. You may need to increase this # limit if you have huge mailboxes. #vsz_limit = $default_vsz_limit # Max. number of IMAP processes (connections) process_limit = 1024 } but it seems that value doesn't change (still 100). Any suggestions? Thank you very much!

2 2

Re: moving from mysql to pgsql
by Joseph Tam 06 Oct '17

06 Oct '17

mws(a)alpenjodel.de writes: > 1) select digest('testing123','sha512'); > result: > ?\x4120117b3190ba5e24044732b0b09aa9ed50eb1567705abcbfa78431a4e0a96b1152ed7f4925966b1c82325e186a8100e692e6d2fcb6702572765820d25c7e9e > login fails I think 2 problems here: 1) the encoding should be some modified base64; and 2) this appears to compute the SHA512 hash, *not* the SHA512-Crypt hash, which is different. It involves adding a salt and doing many iterations of SHA512. A totally different algorithm. Perusing the PostgreSQL man pages, I think you need something like crypt(password,gen_salt('sha512')) I made the 'sha512' up -- I can't find PostgresSQL docs stating whether it supports this value. The docs I found support the older SHA1 ($5$) crypt hashes. If your version doesn't support creating SHA512 ($6$) salts, you can create your own by replacing gen_salt() with "$6$" + base64(long random value), and feed that to crypt(). Just as long as PostgreSQL uses the system crypt() and not its own implementation, it should produce a usable hash. Joseph Tam <jtam.home(a)gmail.com>

1 0

How to require client SSL certificate, except for local connections
by Evan Martin 06 Oct '17

06 Oct '17

Is there any way to make Dovecot 2.2.22 not require a client SSL certificate for a local IMAP connection, but require it for any remote IMAP connection? My server is configured to require client certificates: ssl = required ... auth_ssl_require_client_cert = yes I tried adding the following to create an exception for localhost: remote 127.0.0.1 { ssl = no auth_ssl_require_client_cert = no disable_plaintext_auth = no } But Dovecot fails to start with: doveconf: Fatal: Error in configuration file /etc/dovecot/dovecot.conf line 81: Auth settings not supported inside local/remote blocks: Is there any other way to do this? I don't need to override any other auth settings, just that one. I could probably use a Unix socket, if that would help. Thanks, Evan

1 0

Director DNS
by Travis Dolan 06 Oct '17

06 Oct '17

Hello, I am currently running 2.2.31. I have a cluster of dovecot instances running in AWS. - Two instances running Director/Proxy - Two instances running Dovecot. -- Storage for the Dovecot instances is EFS. My setup works, requests for 143 hit my Director cluster and are proxied to an appropriate dovecot backend. My question is how often if at all the Director service looks up the addresses for the following setting... *director_servers = mailproxy.internal* I have created a Lambda to continually update the values for the A records found in the *.internal* zone since EC2 instances can come and go for a variety of reasons. If those values changes will the Director service "notice" or will a "service dovecot restart" be needed? Thank in advance.

2 1

Re: ACL permission: give permission to move email into different folder
by Davide Marchi 06 Oct '17

06 Oct '17

> I've set ACL for two user (two primary email address, no alias), where > these users must not be able to delete email from imap server. > Now I would like to add (from the client) the ability to move any > incoming mail into different directory, if possible into an existing > directory chosen by me. Maybe it is not possible with Dovecot? Many Thanks Davide

2 1

seccomp filter for dovecot
by Phoenix Krypt 06 Oct '17

06 Oct '17

Hi, I would like to contribute to dovecot by adding seccomp system call filtering. Is this something you would like to merge into the dovecot codebase? If so, I can put up a PR on github once I complete it. Thanks, Archana

2 2

Dovecot Performance Issues on VMWARE Esxi
by Holger 06 Oct '17

06 Oct '17

Hello, I'm new to dovcot, but have serious issues with dovecot and IMAP. I'm struggling with low IMAP performance but have no glue, where to start my search. It is a small office setup. 10 Mailaccounts. Mine is the biggest with 4GB in size. But searching for mail takes several seconds... Zu switch to specific folder also takes some seconds. To long in my opinion. I use esxi 6.0 with local datastorage lenovo megaraid raid5 3x2TB SAS 7.2K. On the dovecot appliance i see high iowait. Some issues dovecot or the VM config? Any help i would appreciate... -- Sent from: http://dovecot.2317879.n4.nabble.com/

3 2

moving from mysql to pgsql
by Magnus 06 Oct '17

06 Oct '17

Hello, I hope that this mailing list is "alive", since I am looking for a solution for my problem for a long time. I would like to migrate my existing dovecot installation from mysql to pgsql. But I have problems with the passwords when using pgsql. The existing and working mysql-based installation looks like this: dovecot-sql.conf.ext: driver = mysql default_pass_scheme = SHA512-CRYPT Users are created like this: INSERT INTO mls_user (idx,domain,password,email) VALUES (1,99,ENCRYPT('Test'),'mws(a)alpenjodel.de'); This setup is working, which I can verify like this: $ telnet localhost 143 * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN AUTH=LOGIN AUTH=DIGEST-MD5 AUTH=CRAM-MD5] Dovecot ready. a login mws(a)alpenjodel.de Test OK Now let's take a look at the pgsql version of the setup: dovecot-sql.conf.ext: driver = pgsql default_pass_scheme = SHA512-CRYPT Users are created like this: INSERT INTO mls_user (idx,domain,password,email) VALUES (1,99,crypt('Test',gen_salt('des')),'mws(a)alpenjodel.de'); This setup is not working: $ telnet localhost 143 * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN AUTH=LOGIN AUTH=DIGEST-MD5 AUTH=CRAM-MD5] Dovecot ready. a login mws(a)alpenjodel.de Test a NO [AUTHENTICATIONFAILED] Authentication failed. Assumptions: - I believe that the mysql encrypt function uses the crypt system call, which in turn uses the DES algorithm with a random salt. - I believe that the same is done with the pgsql function call crypt('Test',gen_salt('des')). But obviously some of these assumptions must be wrong. Besides that, the variable "default_pass_scheme" is set to "SHA512-CRYPT" in both cases. But obviously, not SHA but DES is used by the working mysql-based setup. I don't understand that. Could someone please explain the relationship between the default_pass_scheme variable and the encryption/hashing algorithm used to store the user passwords? And finally: What can I do to migrate to pgsql? Thank you Magnus

4 3

v2.2.33 release candidate released
by Timo Sirainen 05 Oct '17

05 Oct '17

https://dovecot.org/releases/2.2/rc/dovecot-2.2.33.rc1.tar.gz https://dovecot.org/releases/2.2/rc/dovecot-2.2.33.rc1.tar.gz.sig There are a couple more small changes still coming, but this should be very close to the final release. I'm especially interested in hearing if there are any problems with doveadm log proxying or with director. We've improved our automated director tests quite a lot now, and fixed some rarely occurring bugs. * doveadm director commands wait for the changes to be visible in the whole ring before they return. This is especially useful in testing. * Environments listed in import_environment setting are now set or preserved when executing standalone commands (e.g. doveadm) + doveadm proxy: Support proxying logs. Previously the logs were visible only in the backend's logs. + Added %{if}, see https://wiki2.dovecot.org/Variables#Conditionals + Added a new notify_status plugin, which can be used to update dict with current status of a mailbox when it changes. See https://wiki2.dovecot.org/Plugins/NotifyStatus + Mailbox list index can be disabled for a namespace by appending ":LISTINDEX=" to location setting. + dsync/imapc: Added dsync_hashed_headers setting to specify which headers are used to match emails. + pop3-migration: Add pop3_migration_ignore_extra_uidls=yes to ignore mails that are visible in POP3 but not IMAP. This could happen if new mails were delivered during the migration run. + pop3-migration: Further improvements to help with Zimbra + pop3-migration: Cache POP3 UIDLs in imapc's dovecot.index.cache if indexes are enabled. These are used to optimize incremental syncs. + cassandra, dict-sql: Use prepared statements if protocol version>3. - sdbox: Mails were always opened when expunging, unless mail_attachment_fs was explicitly set to empty. - lmtp/doveadm proxy: hostip passdb field was ignored, which caused unnecessary DNS lookups if host field wasn't an IP - lmtp proxy: Fix crash when receiving unexpected reply in RCPT TO - quota_clone: Update also when quota is unlimited (broken in v2.2.31) - mbox, zlib: Fix assert-crash when accessing compressed mbox - doveadm director kick -f parameter didn't work - doveadm director flush <host> resulted flushing all hosts, if <host> wasn't an IP address. - director: Various fixes to handling backend/director changes at abnormal times, especially while ring was unsynced. These could have resulted in crashes, non-optimal behavior or ignoring some of the changes. - director: Use less CPU in imap-login processes when moving/kicking many users. - lmtp: Session IDs were duplicated/confusing with multiple RCPT TOs when lmtp_rcpt_check_quota=yes - doveadm sync -1 fails when local mailboxes exist that do not exist remotely. This commonly happened when lazy_expunge mailbox was autocreated when incremental sync expunged mails.

1 0

Issue with imap folder structure
by absolutely_free＠libero.it 05 Oct '17

05 Oct '17

Hi, I use Dovecot 2.2.32 I just migrated spool from another server (by copying filesystem, I use maildir), this is an example of mailbox's content: drwx------ 20 postfix postfix 30 Oct 4 18:38 . drwx------ 3 postfix postfix 3 Nov 16 2012 .. drwx------ 5 postfix postfix 11 Jun 19 18:22 .Deleted Items drwx------ 5 postfix postfix 11 Sep 29 09:27 .Drafts drwx------ 5 postfix postfix 9 Oct 4 10:18 .INBOX.Drafts drwx------ 5 postfix postfix 9 Oct 4 10:18 .INBOX.Sent drwx------ 5 postfix postfix 9 Oct 3 18:01 .INBOX.Trash drwx------ 5 postfix postfix 12 Sep 29 09:27 .Junk drwx------ 5 postfix postfix 8 Dec 9 2014 .Junk E-mail drwx------ 5 postfix postfix 8 Nov 11 2015 .Archive drwx------ 5 postfix postfix 9 Oct 2 14:18 .Posta indesiderata drwx------ 5 postfix postfix 9 Jun 19 18:22 .Posta inviata drwx------ 5 postfix postfix 10 Oct 4 12:27 .Sent drwx------ 5 postfix postfix 10 Oct 4 18:01 .Trash drwx------ 2 postfix postfix 215 Oct 4 18:00 cur -rw------- 1 postfix postfix 53 Feb 16 2017 dovecot-keywords -rw------- 1 postfix postfix 13963 Oct 4 16:45 dovecot-uidlist -rw------- 1 postfix postfix 8 Oct 3 18:01 dovecot-uidvalidity -r--r--r-- 1 postfix postfix 0 Nov 27 2015 dovecot-uidvalidity.5658162a -r--r--r-- 1 postfix postfix 0 Sep 27 18:18 dovecot-uidvalidity.59cbcf5c -rw------- 1 postfix postfix 7200 Sep 29 01:19 dovecot.index -rw------- 1 postfix postfix 63336 Oct 4 18:00 dovecot.index.cache -rw------- 1 postfix postfix 6436 Oct 4 18:38 dovecot.index.log -rw------- 1 postfix postfix 216 Oct 3 18:01 dovecot.mailbox.log drwx------ 2 postfix postfix 2 Oct 4 16:45 new -rw------- 1 postfix postfix 96 Oct 3 18:01 subscriptions drwx------ 2 postfix postfix 2 Oct 4 16:12 tmp and this is my Dovecot's conf: auth_mechanisms = plain login digest-md5 cram-md5 disable_plaintext_auth = no first_valid_gid = 125 first_valid_uid = 125 mail_gid = 1003 mail_location = maildir:/var/spool/virtual/domains mail_privileged_group = postfix mail_uid = 1003 namespace { inbox = yes location = prefix = INBOX. separator = . type = private } namespace inbox { location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } passdb { args = /etc/dovecot/dovecot-sql-crypt.conf.ext driver = sql } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-userdb { group = postfix mode = 0600 user = postfix } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } ssl_cert = </etc/ssl/wildcard.domain.net_bundle.crt ssl_key = # hidden, use -P to show it userdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql It seems I have duplicate folder (for example during webmail access, I use Roundcube). What is wrong with my setup? Thank you

3 4

STAT command error
by Andrew Charnley 04 Oct '17

04 Oct '17

Hi, Unsure if my previous message made it through as didn't see it on a digest. I'm using Claws Email and 3 of 4 email accounts keep giving; [10:50:45] POP< +OK Dovecot ready. [10:50:45] POP> USER sales [10:50:45] POP< +OK [10:50:45] POP> PASS ******** [10:50:45] POP< +OK Logged in. [10:50:45] POP> STAT [10:50:45] POP< -ERR Unknown command: *** error occurred on POP session *** Error occurred while processing mail. I've turned on as much logging as I can find in Dovecot but nothing useful is coming out, it honestly does believe STAT is invalid - I can see the connection close rather than disconnect. It's strange how it works for one account but not others, the settings are identical - I went through them with a fine tooth comb. Any suggestions appreciated. Regards, Andrew

2 1

ACL permission: give permission to move email into different folder
by Davide Marchi 03 Oct '17

03 Oct '17

Hi friends, I've set ACL for two user (two primary email address, no alias), where these users must not be able to delete email from imap server. Now I would like to add (from the client) the ability to move any incoming mail into different directory, if possible into an existing directory chosen by me. These are the settings on /etc/dovecot/dovecot.acl: * user=foo(a)mydomain.com lrwsip * user=info(a)mydomain.com lrwsip is it possible? I've read https://wiki2.dovecot.org/ACL but I've not found a solution. many many thanks! Davide

1 0

Postfix + saslauthd SASL With Kerberos (FreeIPA) unable to send mail
by Anvar Kuchkartaev 03 Oct '17

03 Oct '17

Hello I just finished setting up FreeIPA with Dovecot + Postfix + Saslauthd. I can easily access to mails using imap via dovecot with gssapi authentication and postfix also delivering mails very well. But I cannot send email from postfix using gssapi authentication (plain and login authentication working fine) because saslauthd is not specifying realm when requesting service from freeipa domain. warning: SASL authentication failure: GSSAPI Error: Unspecified GSS failure. Minor code may provide more information (No key table entry found matching smtp/mx0.aegisnet.eu@) right form of request is smtp/mx0.aegisnet.eu(a)AEGISNET.EU I googled alot but couldn't find any solution to solve this problem. How to configure saslauthd well that it will use realm to contact with freeipa. Best Regards...

2 3

file-solr
by Siarhei Chystsiakou 02 Oct '17

02 Oct '17

Hi, I have installed dovecot 2.2.31 and settings fts-solr, when I run command doveadm -v index -A "*" sometimes in logs I see information: doveadm(user(a)domain.com): Warning: fts-solr(user(a)domain.com): Mailbox INBOX UID=2028 header size is huge, truncating Does it influence the work of plugin and its functions?

1 0