- dovecot - dovecot.org

Re: Random delivery
by Aki Tuomi 29 Dec '17

29 Dec '17

Not sure how this is random ... =) So you want it to deliver a the mail to first email1, next email to email2, next to email3, and next to email1. I am pretty sure you can do this better with postfix with transport that redirects it to one of these accounts in order. Aki > On December 29, 2017 at 2:09 AM Jorge Bastos <mysql.jorge(a)decimal.pt> wrote: > > > Howdy, > > > > Id like to achieve something that i dont know if its possible. > > > > I have account info(a)domain.tld and when an email is received, I want to > forward it to several accounts, always in this order: > > > > ð Email1(a)domain.tlf > > ð Email2(a)domain.tld > > ð Email3(a)domain.tld > > > > And when it reached email3(a)domain.tld it starts again with email1(a)domain.tld > > > > Would something like this be possible? >

1 0

doveconf -n not showing all changes
by Marc Weustink 29 Dec '17

29 Dec '17

Hi, Today I was testing the last dovecot release 2.3 from the dovecot repo on ubuntu 16.04. (I upgraded from 2.2.23) I cannot recall if I noticed it before, but doveconf -n not showing all changes. To be able to track my changes, I don't touch the config files provided in conf.d/ anymore, but I write them in local.conf (I did in the past so doveconf -n still shows something) I was testing the new submission service so I added to local.conf: protocols = imap pop3 lmtp sieve submission service submission-login { inet_listener submission { # test port = 588 } } submission_relay_host = 127.0.0.1 after restarting dovecot, submission works, mails get relayed. However doveconf -n shows: protocols = imap pop3 lmtp sieve This is very confusing. Marc

2 2

rename dirs at file system to strip .INBOX prefix?
by Voytek Eymont 29 Dec '17

29 Dec '17

looking at my personal email in /var/vmail/vmail1/dom.tld/voytek(a)dom.tld/Maildir I have some older dirs prefixed with .INBOX as so: .INBOX.Sent.2010.11 .INBOX.Sent.2010.12 around 30 or so, every other dir, .Sent or otherwise, doesn't have INBOX prefix can I just rename them from terminal to strip .INBOX from dir name..? and, if I do, what else I need to do or is that a bad idea, if so, how to get rid of old '.INBOX' prefixes? thanks, -- Voytek

1 0

Random delivery
by Jorge Bastos 29 Dec '17

29 Dec '17

Howdy, Id like to achieve something that i dont know if its possible. I have account info(a)domain.tld and when an email is received, I want to forward it to several accounts, always in this order: ð Email1(a)domain.tlf ð Email2(a)domain.tld ð Email3(a)domain.tld And when it reached email3(a)domain.tld it starts again with email1(a)domain.tld Would something like this be possible?

1 0

Ubuntu Auth Issues with new repository code..
by Howard Leadmon 28 Dec '17

28 Dec '17

Saw the new repository notification, and figured what the heck I would try letting it upgrade me from the current v2.2.22 release that apparently is in the Ubuntu 16.04 packages, to the new repository release of v2.3.0. I followed the info on repo.dovecot.org, and first it started bitching about lmtp (dovecot: master: Fatal: service(lmtp) access(/usr/lib/dovecot/lmtp) failed: No such file or directory), so I went back and installed the dovecot-lmtpd package and that seemed to fix that issue. Just FYI, I had dovecot-core, dovecot-imapd, and dovecot-pop3d installed on the system. OK, so now it started up, said it was 2.3.0 and I thought all was good, but now all authentication is failing. I turned on some of the logging debugging, and am seeing the below: dovecot: auth-worker(19578): Debug: pam(toss1,127.0.0.1,<IR3NJlZhFtZ/AAAB>): lookup service=dovecot dovecot: auth-worker(19578): Debug: pam(toss1,127.0.0.1,<IR3NJlZhFtZ/AAAB>): #1/1 style=1 msg=Password: dovecot: auth-worker(19578): pam(toss1,127.0.0.1,<IR3NJlZhFtZ/AAAB>): pam_authenticate() failed: System error dovecot: auth: Debug: client passdb out: FAIL#0111#011user=toss1 dovecot: imap-login: Aborted login (auth failed, 1 attempts in 3 secs): user=<toss1>, method=PLAIN, rip=127.0.0.1, lip=127.0.1.1, session=<IR3NJlZhFtZ/AAAB> I took and compared my auth files like 10-auth.conf, and auth-system.conf.ext, and they are identical between the two versions, even though they were overwritten as part of the upgrade. If I just uninstall the 2.3.0 release, and install 2.2.22 back on the server, it all just starts working again. So for now I am back on 2.2, but was willing to give 2.3 a run if I can get it going. Any ideas as to what to look at to get this working, would be great. As stated above, this is Ubuntu Server 16.04.03, and I am also running Postfix and amavis-new, but don't think they should really impact me using dovecot for email over POP3 or IMAP.. --- Howard Leadmon PBW Communications, LLC http://www.pbwcomm.com

5 6

2.3.0 upgrade from 2.2.x
by Fabian A. Santiago 28 Dec '17

28 Dec '17

Question; So after updating to 2.3.0 and following the recommended warnings / changes from running doveconf -n and then doing that same command > "a new conf file", and then renaming the conf files and restarting dovecot, I should be good to go with my old config updated to the new config spec? Just confirming. Thanks. What I mean is doing the -n to a new file hasn't changed or removed anything from my old config? Unless it was a changed or obsoleted option and in that case it would have warned me anyway, correct? -- Thanks, Fabian S. OpenPGP: 3C3FA072ACCB7AC5DB0F723455502B0EEB9070FC

2 2

Question about imap (expunge response)
by kjonca＠o2.pl 28 Dec '17

28 Dec '17

(This is not neccesarily about dovecot, but rather IMAP protocol) At https://drive.google.com/open?id=1j3oa5jYeSdiPbgaihq02K-u_vHbZLJZQ is fetchmail log from my sessinon with polish email provider "Wirtualna Polska" As you can se fetchmail logged "* 1 EXPUNGE" as a response to "STORE" command. According to https://tools.ietf.org/html/rfc3501#section-7.4.1 EXPUNGE must not be sent as response to STORE command. Am I right that their imap server is erroneous or am I missing something? KJ -- http://stopstopnop.pl/stop_stopnop.pl_o_nas.html Lonely men seek companionship. Lonely women sit at home and wait. They never meet.

2 2

Re: Renewing certificates
by Joseph Tam 28 Dec '17

28 Dec '17

Kenneth Porter <shiva(a)sewingwitch.com> writes: > Thanks. Some digging indicates that this is equivalent to doveadm reload. > Both paths ultimately send a SIGHUP to the server which initiates a full > reload of the configuration. > > I'll be combining this with a restart of sendmail. Alas, I don't see a way > to get it to reload its configuration. Should be the same way: send a SIGHUP signal to the parent process. http://etutorials.org/Server+Administration/Sendmail/Part+II+Administration… I'm not sure whether this will cause the sendmail worker processes to dump their cients, but if it did, SMTP is fault tolerant enough that delivery should be retried later. Joseph Tam <jtam.home(a)gmail.com>

1 0

Renewing certificates
by Kenneth Porter 27 Dec '17

27 Dec '17

I'm setting up certbot/letsencrypt to provide a certificate for dovecot and sendmail. Is it necessary to restart dovecot to load the new certificate, as shown in most examples I find in blogs? That seems rude to established connections. When does dovecot read the cert and key files? Once at startup or each time a connection requests SSL? Is there a preferred locking protocol when changing the two files to keep dovecot from reading one while the other is being replaced and getting a mismatched pair?

3 3

zlib plugin aborts without zlib_save
by Adam Weinberger 26 Dec '17

26 Dec '17

This is in follow-up to https://dovecot.org/pipermail/dovecot/2017-December/110443.html I had mail_plugins = "zlib", but zlib_save wasn't set (my mailboxes were not compressed). It seems that when the zlib plugin is enabled, but zlib_save isn't set, the zlib plugin aborts on a regular basis---on a single-user system, I was seeing it about 150 times a day. Panic: file ostream-zlib.c: line 36 (o_stream_zlib_close): assertion failed: (zstream->ostream.finished || zstream->ostream.ostream.stream_errno != 0) Fatal: master: service(imap): child 80128 killed with signal 6 (core not dumped - set service imap { drop_priv_before_exec=yes }) Removing the (unused) zlib plugin made the errors disappear, at least. # Adam -- Adam Weinberger adamw(a)adamw.org http://www.adamw.org

1 0

Sieve 0.5.0/Dovecot 2.3.0
by Larry Rosenman 26 Dec '17

26 Dec '17

Using 2.3.0/0.5 and the below scripts/config, why doesn’t a mail addressed to ler_freebsd(a)lerctr.org get the FreeBSD flag? .dovecot.sieve points to master.sieve. Scripts: http://www.lerctr.org/~ler/sieve/ doveconf -n: thebighonker.lerctr.org /home/ler/sieve $ doveconf -n # 2.3.0 (c8b89eb): /usr/local/etc/dovecot/dovecot.conf # Pigeonhole version 0.5.0 (d68c23a1) # OS: FreeBSD 11.1-STABLE amd64 auth_mechanisms = plain login auth_realms = lerctr.org thebighonker.lerctr.org tbh.lerctr.org thejonesonair.com thejonesonair.net default_vsz_limit = 1 G deliver_log_format = msgid=%m: %$ (subject=%s from=%f size=%w) doveadm_password = # hidden, use -P to show it first_valid_gid = 0 first_valid_uid = 0 lda_mailbox_autocreate = yes listen = 192.147.25.65, :: lmtp_save_to_detail_mailbox = yes login_access_sockets = tcpwrap mail_attribute_dict = file:%h/mail/.imap/dovecot-mail-attributes mail_location = mbox:~/mail:INBOX=~/mail/INBOX mail_log_prefix = "%s(%u/%p): " mail_plugins = " fts fts_solr notify virtual" mail_privileged_group = mail mail_server_admin = mailto:ler@lerctr.org mail_server_comment = LERCTR Mail Server managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext vacation-seconds editheader mboxmetadata servermetadata imapsieve vnd.dovecot.imapsieve namespace archive { hidden = no list = no location = mbox:~/MAIL-ARCHIVE prefix = ARCHIVE/ separator = / } namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox INBOX { auto = create } mailbox SENT { special_use = \Sent } mailbox SPAM { special_use = \Junk } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } mailbox virtual/Flagged { special_use = \Flagged } mailbox virtual/all { special_use = \All } prefix = separator = / } namespace virtual { hidden = no list = yes location = virtual:~/MAIL-VIRTUAL:INDEX=MEMORY prefix = Virtual/ separator = / } passdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } passdb { args = user=%Ln noauthenticate driver = static skip = authenticated } passdb { args = failure_show_msg=yes session=yes max_requests=20 driver = pam skip = authenticated } plugin { fts = solr fts_autoindex = yes fts_solr = url=http://thebighonker.lerctr.org:8983/solr/dovecot/ fts_tika = http://localhost:9998/tika/ imapsieve_mailbox1_before = file:/usr/local/share/dovecot-pigeonhole/sieve/report-spam.sieve imapsieve_mailbox1_causes = COPY imapsieve_mailbox1_name = SPAM imapsieve_mailbox2_before = file:/usr/local/share/dovecot-pigeonhole/sieve/report-ham.sieve imapsieve_mailbox2_causes = COPY imapsieve_mailbox2_from = SPAM imapsieve_mailbox2_name = * imapsieve_url = sieve://thebighonker.lerctr.org mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename flag_change append mail_log_fields = uid box msgid size from subject vsize flags sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_execute_bin_dir = /usr/local/share/dovecot-pigeonhole/sieve sieve_extensions = +editheader +vacation-seconds +mboxmetadata +servermetadata sieve_global_extensions = +vnd.dovecot.pipe +vnd.dovecot.execute sieve_pipe_bin_dir = /usr/local/share/dovecot-pigeonhole/sieve sieve_plugins = sieve_imapsieve sieve_extprograms } protocols = imap pop3 lmtp sieve recipient_delimiter = +-_ service anvil { unix_listener anvil { group = mail mode = 0660 } } service auth { unix_listener auth-client { mode = 0666 } unix_listener auth-master { mode = 0666 } } service doveadm { inet_listener http { port = 8080 ssl = yes } } service indexer-worker { drop_priv_before_exec = yes } service lmtp { inet_listener lmtp { address = 127.0.0.1 port = 24 } } service managesieve-login { inet_listener sieve { port = 4190 } inet_listener sieve_deprecated { port = 2000 } } service stats { unix_listener stats-reader { group = mail mode = 0660 user = } unix_listener stats-writer { group = mail mode = 0660 user = } } service tcpwrap { unix_listener login/tcpwrap { group = $default_login_user mode = 0600 user = $default_login_user } } ssl_cert = </home/ler/letsencrypt-home/lerctr.org/fullchain.cer ssl_cipher_list = EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH+AESGCM:EECDH:EDH+AESGCM:EDH+aRSA:HIGH:!MEDIUM:!LOW:!aNULL:!eNULL:!LOW:!RC4:!MD5:!EXP:!PSK:!SRP:!DSS ssl_dh = # hidden, use -P to show it ssl_key = # hidden, use -P to show it userdb { args = /usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } userdb { args = username_format=%Ln /etc/passwd driver = passwd-file } verbose_proctitle = yes protocol lmtp { mail_plugins = " fts fts_solr notify virtual sieve mail_log" } protocol lda { mail_plugins = " fts fts_solr notify virtual sieve mail_log" } protocol pop3 { mail_plugins = " fts fts_solr notify virtual mail_log" } protocol !doveadm { mail_plugins = " fts fts_solr notify virtual mail_log" } protocol imap { imap_client_workarounds = tb-extra-mailbox-sep tb-lsub-flags imap_logout_format = in=%i out=%o fhc=%{fetch_hdr_count} fhb=%{fetch_hdr_bytes} fbc=%{fetch_body_count} fbb=%{fetch_body_bytes} del=%{deleted} exp=%{expunged} trash=%{trashed} imap_metadata = yes mail_max_userip_connections = 50 mail_plugins = " fts fts_solr notify virtual mail_log imap_sieve" } thebighonker.lerctr.org /home/ler/sieve $ -- Larry Rosenman http://www.lerctr.org/~ler Phone: +1 214-642-9640 E-Mail: larryrtx(a)gmail.com US Mail: 5708 Sabbia Drive, Round Rock, TX 78665-2106

2 5

Crash in sieve_extprogram_create() after dovecot/pigeonhole update
by Oleksandr Natalenko 25 Dec '17

25 Dec '17

Hi all. My dovecot setup: pf@vulcan:~ » dovecot --version 2.3.0 (c8b89eb) on Arch Linux, x86_64 (full config here: [0]) uses sieve plugin to train rspamd system as described in the wiki [1]. It used to work fine prior to 2.3.0/0.5.0 update, but now "imap" process crashes when I move spam letters from the inbox to the junk folder. I've recompiled both dovecot and pigeonhole with debug symbols and got this stacktrace [2]. As you can see, it fails (with a SIGSEGV) in sieve_extprogram_create(), sieve- extprograms-common.c:562, which corresponds to this code: === 562 if ( !smtp_address_isnull(msgdata->envelope.rcpt_params->orcpt.addr) ) { 563 program_client_set_env 564 (sprog->program_client, "ORIG_RECIPIENT", 565 smtp_address_encode(msgdata->envelope.rcpt_params- >orcpt.addr)); 566 } === When I dump msgdata structure, I see that rcpt_params is NULL: [3]. Thus, NULL pointer dereference occurs. Here is my report-spam.sieve file: [4] What I'm doing wrong here? Or is this some bug within pigeonhole? Could you please help me with resolving this? Thanks. [0] https://gist.github.com/92be2a4abe04149fd4b6971b6b4fa38d [1] https://wiki2.dovecot.org/HowTo/AntispamWithSieve [2] https://gist.github.com/8b202ebe9310845b59bcdeed7567026e [3] https://gist.github.com/a7e30b9e7a6c315d729bdcfe7142f532 [4] https://gist.github.com/fd1aa8943af106408a30155dffe052ab

1 1

ssl_curve_list seems to be ignored with Dovecot 2.3
by Marcel Menzel 25 Dec '17

25 Dec '17

Hi all, after upgrading to Dovecot 2.3, I've noticed the new "ssl_curve_list" TLS option in 10-ssl.conf. Setting it to "ssl_curve_list = X25519:P-256" or leaving it blank (auto) does not change anything, Dovecot keeps on negotiating P-384: Server Temp Key: ECDH, P-384, 384 bits When using "-curves X25519" in s_client, it does a fallback to DH: Server Temp Key: DH, 4096 bits I'm on Dovecot 2.3.0 (c8b89eb) with OpenSSL 1.1.0g 2 Nov 2017 on Arch Linux 4.14.8-1-ARCH. Am I missing something here? OpenSSL 1.1 defaults to Curve25519 when leaving it on auto. Greetings, Marcel Menzel

1 0

Dovecot 2.3.0 generates all index files at once
by Andreas M. Kirchwitz 25 Dec '17

25 Dec '17

Merry Christmas! The brandnew Dovecot 2.3.0 seems to generate index (cache) files for all IMAP folders at once when a user logs in the first time. (Those "dovecot.index" files that live in ".imap" directories.) Previous versions generated these index files on demand when a folder was actually accessed (so if a folder was never used, no resources were wasted to ever generate an index file for it). For large mailboxes with lots of mail this may take hours, and during this time the user's mail client hangs (like Mutt) or exits with a timeout (like Thunderbird). Access to this user's mailbox hangs/fails with locking errors for obvious reasons. For fresh installations with pre-existing folders (but no index files yet) this kind of brings down the machine running Dovecot as soon as multiple users try to access their mail. I haven't analyzed the IMAP commands in detail. Just tried with Mutt and Thunderbird and they both trigger the issue. However, maybe Dovecot is just fine and the clients do something wrong which was just tolerated by Dovecot until now. My configuration is pretty simple: # 2.3.0 (c8b89eb): /usr/local/Dovecot-2.3.0/etc/dovecot/dovecot.conf # OS: Linux 2.6.32-042stab124.2 i686 CentOS release 6.9 (Final) auth_mechanisms = plain login digest-md5 cram-md5 first_valid_gid = 1000 first_valid_uid = 1000 mail_location = mbox:~/Mail:INBOX=/var/spool/mail/%u passdb { args = /usr/local/dovecot/etc/dovecot/dovecot.passwd driver = passwd-file } protocols = imap ssl_cert = </usr/local/dovecot/etc/dovecot/certs/server.crt ssl_dh = # hidden, use -P to show it ssl_key = # hidden, use -P to show it userdb { args = /usr/local/dovecot/etc/dovecot/dovecot.passwd driver = passwd-file } verbose_proctitle = yes protocol imap { imap_client_workarounds = tb-extra-mailbox-sep tb-lsub-flags mail_max_userip_connections = 20 } Good news is, Dovecot 2.3.0 compiles without errors and it also runs fine once all index files have been created. Maybe there's a new configuration option to toggle this behaviour but I haven't spotted anything obvious yet. Any help is appreciated. Thanks a lot and keep up the good work, Andreas

1 0

Disable ssl validation for replication?
by Joseph Ward 24 Dec '17

24 Dec '17

Hi, I have two servers (HA configuration) on which I'm attempting to get replication working over SSL. They're at two different sites, but connected via a site-site VPN. Everything seems to be fine, except that the certificates are not validating as I'm using IP addresses for the sync, as opposed to the public hostnames for which the certificates are valid, and so I get the following error: doveadm(user@domain): Error: doveadm server disconnected before handshake: SSL certificate doesn't match expected host name 10.x.x.x I'm on Dovecot 2.2.33. Is there any way to disable the certificate checking/validation for the sync engine? ( I'm aware of at least a couple of fallback options: -have a self-signed cert for replication and use the Let's Encrypt one for IMAP/POP - create firewall rules allowing them to connect to each other over the public internet so that it can validate the proper cert These are both much less palatable than simply disabling the cert validation if it's possible. ) Thank you in advance for any assistance, Joseph

3 3

sieve_pipe_socket_dir not created at startup for configured pipe service
by Garth Corral 24 Dec '17

24 Dec '17

Hi, all I’m new to the list but not to dovecot. I’ve been using it in a basic configuration for some time, but finally decided to tweak my deployed system to take advantage of some more dovecot features. In particular I’m trying to set up pigeonhole to implement spam retraining with imapsieve. All of this is with dovecot 2.2.31 (65cde28) and pigeonhole 0.4.19. Before going any further let me start by saying that I have gotten all of this to work. It works when I can get dovecot to start up, that is. My configuration is pretty much straight from the docs, with a few tweaks for my particular needs. I’m trying to set up a pipe service using sieve-extprograms, and the relevant part of my config looks like this: plugin { sieve_pipe_input_eol = lf sieve_pipe_socket_dir = sieve-pipe sieve_filter_socket_dir = sieve-filter sieve_execute_socket_dir = sieve-execute sieve_pipe_bin_dir = /usr/local/libexec/dovecot/sieve-pipe sieve_filter_bin_dir = /usr/local/libexec/dovecot/sieve-filter sieve_execute_bin_dir = /usr/local/libexec/dovecot/sieve-execute } service sieve-train-ham { executable = script /usr/local/libexec/dovecot/sieve-pipe/train-ham.sh # Needs access to dspam config and lockfiles. user = dspam # socket name is program-name in Sieve (without sieve-pipe/ prefix) unix_listener sieve-pipe/train-ham { } } It’s my understanding from reading the docs that the sieve_pipe_socket_dir specifies a directory that is relative to base_dir, which is the default /var/run/dovecot in my case. The issue I’m having is that dovecot will not start, and spews the following errors: dovecot: master: Error: bind(/var/run/dovecot/sieve-pipe/train-ham) failed: No such file or directory dovecot: master: Fatal: Failed to start listeners Once dovecot fails startup, it leaves /var/run/dovecot around and if I manually create the sieve-pipe directory there it will start up, create the sockets there and everything works as intended subsequently. The problem, though, is that on normal shutdown all of /var/run/dovecot goes away and the at the next startup it fails to start again. Needless to say this isn’t great for unintended reboots, etc. So, can anyone see anything obvious that I’m doing wrong? I’m just assuming that dovecot should create the needed subdir since I can’t find anything in the docs to suggest a way to create it otherwise. I’ve tried all I can think of at the moment to try to remedy this without success. I’m happy to provide additional details as needed to try to track this down. Thanks in advance, Garth

3 3

Dovecot 2.3-rc Logging Format
by Thomas Leuxner 24 Dec '17

24 Dec '17

Hi, the release candidate defaults to a log format with session IDs. mail_log_prefix = "%s(%u)<%{pid}><%{session}>: " As the LMTP service seems to have the session ID hardcoded, the IDs get duplicated in the logs: Dec 21 08:48:03 edi dovecot: lmtp(26573): Connect from local Dec 21 08:48:03 edi dovecot: lmtp(tlx(a)leuxner.net)[26573]: <fCVaBjNnO1rNZwAAIROLbg>: fCVaBjNnO1rNZwAAIROLbg: sieve: msgid=<2323281.OorJHhdMHM@ylum>, time=158ms, status=stored mail into mailbox ':public/Mailing-Lists/Debian-User' Dec 21 08:48:03 edi dovecot: lmtp(26573): Disconnect from local: Client has quit the connection (state = READY) Regards Thomas

3 2

Released Pigeonhole v0.5.0 for Dovecot v2.3.0.
by Stephan Bosch 24 Dec '17

24 Dec '17

Hello Dovecot users, Here's the definitive 0.5.0 release. There is one RC fix regarding the duplicate presence of the session ID in the LMTP/LDA log lines produced by the Sieve interpreter. Since this change is relative to the RC, it is not in the change log below. Changelog v0.5.0: * editheader extension: The implementation of header modifications is heavily updated. Although the functionality has not changed, the underlying code was updated to address several static analysis warnings, runtime integer arithmetic warnings (Clang), and to match updates in the Dovecot stream API. + variables extension: Made the maximum scope and variable size configurable. + subaddress: Support multiple recipient_delimiters. - enotify extension: mailto method: Fixed parsing of mailto URI with only a header part. - enotify plugin: mailto method: Make sure the "From:" header is set to a usable address and not "(null)". - Fixed writing address headers to outgoing messages. Sometimes headers were MIME-encoded twice, yielding invalid results. The release is available as follows: https://pigeonhole.dovecot.org/releases/2.3/dovecot-2.3-pigeonhole-0.5.0.ta… https://pigeonhole.dovecot.org/releases/2.3/dovecot-2.3-pigeonhole-0.5.0.ta… Refer to http://pigeonhole.dovecot.org and the Dovecot v2.x wiki for more information. Have fun testing this release and don't hesitate to notify me when there are any problems. Regards, -- Stephan Bosch stephan(a)rename-it.nl

1 0

Dovecot 2.3-rc1 SMTP submission proxy always gives TLS required error even when already using TLS
by Michael Marley 23 Dec '17

23 Dec '17

First of all, I apologize for my accidental empty message earlier. I just set up the SMTP submission proxy in Dovecot 2.3, but whenever I try to connect to it, it always returns "530 5.7.0 TLS required." for any sort of AUTH or MAIL command. This occurs even if TLS is being used. It also occurs regardless of whether I connect with a real client (Thunderbird) or manually with openssl s_client and regardless of whether a loopback connection or a remote connection is used. Here is the output of "dovecot -n". Please let me know if I can provide any other data. Thanks! # 2.3.0.rc1 (12aba5948): /etc/dovecot/dovecot.conf # Pigeonhole version 0.5.0.alpha1 (f60f2785) # OS: Linux 4.14.7-041407-generic x86_64 Ubuntu Bionic Beaver (development branch) auth_mechanisms = plain login auth_username_format = %Ln mail_location = mdbox:~/mdbox managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } plugin { sieve = file:~/sieve;active=~/.dovecot.sieve } postmaster_address = michael(a)michaelmarley.com protocols = imap sieve lmtp submission service auth { unix_listener /var/spool/postfix/private/dovecot-auth { group = postfix mode = 0660 user = postfix } } service imap-login { inet_listener imaps { port = 0 } } service lmtp { process_min_avail = 5 unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } ssl = required ssl_cert = </etc/ssl/private/michaelmarley.com.pem ssl_cipher_list = HIGH !RC4 !aNULL !eNULL !3DES @STRENGTH ssl_dh = # hidden, use -P to show it ssl_key = # hidden, use -P to show it ssl_min_protocol = TLSv1.2 ssl_prefer_server_ciphers = yes submission_relay_host = localhost submission_relay_port = 24 submission_relay_trusted = yes userdb { driver = passwd } protocol lmtp { mail_plugins = " sieve" } protocol lda { mail_plugins = " sieve" } local_name matthewtmarley.com { ssl_cert = </etc/ssl/private/matthewtmarley.com.pem ssl_key = # hidden, use -P to show it }

2 4

Pigeonhole implicit keep gets unfiltered message
by Adam Weinberger 23 Dec '17

23 Dec '17

I'm getting a behaviour with pigeonhole that I wasn't expecting. Am I misunderstanding the design? I run my messages through a vnd.dovecot.filter. It's essentially this: filter "spam_filter"; if spamheaders { fileinto "spam"; stop; } Mail stored in the spam folder is the filtered version, but the implicit-keep message is the original, unfiltered message. If I add an explicit `keep;` to the end, it stores the filtered version into my inbox. Based on the filter RFC, I was expecting the implicit keep to retain the filtered version. Am I misinterpreting the spec? # Adam -- Adam Weinberger adamw(a)adamw.org http://www.adamw.org

2 4

Re: Lua Auth
by Mark Moseley 23 Dec '17

23 Dec '17

> > > > > 2) Is there an appropriate way to return data with spaces in it (or > presumably other non-alphanum chars. My quota name had a space in it, > which > somehow got interpreted as 'yes' , i.e.: > > imap: Error: Failed to initialize quota: Invalid quota root quota: Unknown > quota backend: yes > > I simply changed the space to an underscore as a workaround, but I'm > curious if there's a better way. I tried various quoting without success. > Didn't try escaping yet. > > > 2) Instead of string, return a key value table. you can have spaces in > values. > > > Does this work for auth_passdb_lookup too, or just auth_userdb_lookup? I've been returning a table with auth_userdb_lookup just fine. But when I try using it with passdb (and despite being very very sure that a 'password' key exists in the table I'm returning from auth_passdb_lookup() -- I'm logging it one line above the return), the passdb auth fails with this log entry: Dec 21 23:29:22 auth-worker(7779): Info: lua(test1(a)test.com,10.20.103.32,<dSvLQuZg+uIKFGcg>): No password returned (and no nopassword) I guess it's not seeing the password key in the table I'm returning. If I return a concat'd string ("password=... user=...") from auth_passdb_lookup(), it works just fine. I was also curious if there's a way to pass info between auth_userdb_lookup and auth_passdb_lookup. I was trying to use a table with auth_passdb_lookup() so I could take advantage of prefetch and thought that if auth_passdb_lookup didn't take a table, I could stash data away and then un-stash it in auth_userdb_lookup Thanks! > 3) response_from_template expands a key=value string into table by var > expanding values. > > > var_expand can be used to interpolation for any purposes. it returns a > string. see https://wiki.dovecot.org/Variables for details on how to use > it. > > > Individual variable access is more efficient to do directly. > > > --- > Aki Tuomi >

3 5

ot: how to block persistent same invalid account, different IPs
by Joseph Tam 22 Dec '17

22 Dec '17

"Voytek Eymont" <voytek(a)sbt.net.au> > I've installed fail2ban, it seems to be working as it identified my failed > test logins, BUT, my question is: > > what can I do when I see same invalid name trying to login to dovecot, > different IP each time, how can I say block each IP as used by this name ? If each IP is only used once in a long while, what would be the point? In general, distributed attacks are very hard to stop if you have a default accept stance. I've observed that most of the attacks to my site are from the enormous Chinese stated owned public network superblocks. I finally got sick of them so I now spiral these IMAP/POP connections into the Scharwzschild radius of my firewall. It's a prophylactic measure and not a reactive system like fail2ban, and may not work for you if you got road warriors that frequent that part of the world. However, it did get rid of a metric ton of BFD connections. Joseph Tam <jtam.home(a)gmail.com>

1 0

ot: how to block persistent same invalid account, different IPs
by Voytek Eymont 22 Dec '17

22 Dec '17

I've installed fail2ban, it seems to be working as it identified my failed test logins, BUT, my question is: what can I do when I see same invalid name trying to login to dovecot, different IP each time, how can I say block each IP as used by this name ? or it that a bad idea ? I can see two persistent attempts as so: I don't have such user 'ignacio' or 'julian' # grep ignacio.munoz /var/log/dovecot.log | wc 178 3436 35624 # grep ignacio.munoz /var/log/dovecot.log | grep 'auth fail' | wc 178 3436 35624 # grep julian /var/log/dovecot.log | wc 178 3432 34321 # grep julian /var/log/dovecot.log | grep 'auth fail' | wc 178 3432 34321 last 6 tries, sometimes have just : <ignacio.munoz>, sometimes, with tld Dec 22 17:00:33 imap-login: Info: Disconnected (auth failed, 1 attempts in 8 secs): user=<ignacio.munoz(a)aaa.com>, method=PLAIN, rip=157.122.183.218, lip=163.47.110.6, TLS, session=<Z4JniOdgkgCderfa> Dec 22 17:01:06 imap-login: Info: Disconnected (auth failed, 1 attempts in 7 secs): user=<ignacio.munoz>, method=PLAIN, rip=60.172.162.2, lip=163.47.110.6, TLS, session=<CsdriudgWAA8rKIC> Dec 22 18:58:26 imap-login: Info: Disconnected (auth failed, 1 attempts in 10 secs): user=<ignacio.munoz(a)aaa.com>, method=PLAIN, rip=60.30.224.189, lip=163.47.110.6, TLS: Disconnected, session=<kvLWLelg0QA8HuC9> Dec 22 18:58:59 imap-login: Info: Disconnected (auth failed, 1 attempts in 7 secs): user=<ignacio.munoz>, method=PLAIN, rip=220.164.2.138, lip=163.47.110.6, TLS: Disconnected, session=<T7T5L+lgRADcpAKK> Dec 22 19:30:28 imap-login: Info: Disconnected (auth failed, 1 attempts in 6 secs): user=<ignacio.munoz(a)aaa.com>, method=PLAIN, rip=113.8.194.3, lip=163.47.110.6, TLS, session=<jfSgoOlgswBxCMID> Dec 22 19:31:09 imap-login: Info: Disconnected (auth failed, 1 attempts in 6 secs): user=<ignacio.munoz>, method=PLAIN, rip=58.210.119.226, lip=163.47.110.6, TLS, session=<moAVo+lg8gA60nfi> -- Voytek

3 2

New Dovecot service: SMTP Submission (RFC6409)
by Stephan Bosch 22 Dec '17

22 Dec '17

Hi, As some of you know, I started implementing the SMTP submission proxy a few years ago. It acts as a front-end for any MTA, adding the necessary functionality for an SMTP submission service, also known as a Mail Submission Agent (MSA) (https://tools.ietf.org/html/rfc6409) The main reason I created this, back then, was implementing the BURL capability (https://tools.ietf.org/html/rfc4468) The main application of that capability -- together with IMAP URLAUTH -- is avoiding a duplicate upload of submitted e-mail messages; normally the message is both sent through SMTP and uploaded to the "Sent" folder through IMAP. Using BURL, the client can first upload the message to IMAP and then use BURL to make the SMTP server fetch the message from IMAP for submission, thereby avoiding a second upload. Apart from BURL, the submission proxy service also adds the required AUTH support, avoiding the need to configure the MTA for SASL authentication. More SMTP capabilities like CHUNKING and SIZE are supported, without requiring the backend MTA supporting these extensions. Other capabilities like DSN currently require support from the backend/relay MTA. At this point, the submission proxy is still pretty basic. However, it will provide a basis for adding all kinds of functionality in the (not so distant) future. For the first time, it will be possible to act upon message submission, rather than only message retrieval; e.g. plugins can be devised that process outgoing messages somehow. Examples of the things we could do are adding Sieve filtering support for outgoing messages, or implicitly storing submitted messages to the Sent folder. Once a plugin API is devised, you can create your own plugins. The reason I send this message now, is that this code is finally merged into the Dovecot master repository. This means that it is part of the upcoming 2.3 release. Now that it is merged, you can install and test it from Github if you like. Feedback is of course appreciated. The documentation is still pretty sparse, but there is currently not much to configure. Just add "submission" to the protocols and configure the relay MTA server. The configuration is currently only documented in the example configuration in doc/example-config/conf.d/20-submission.conf. The submission service is a login service, just like IMAP, POP3 and ManageSieve, so clients are required to authenticate. The same authentication configuration will also apply to submission, unless you're doing protocol-specific things, in which case you may need to amend your configuration for the new protocol. BURL support requires a working IMAP URLAUTH implementation. I've updated the automated Xi Debian package builder to create an additional dovecot-submissiond package. So, if you're using the Xi packages, you only need to install that package and configure the relay MTA. Regards, Stephan.

7 16

v2.3.0 released
by Timo Sirainen 22 Dec '17

22 Dec '17

https://dovecot.org/releases/2.3/dovecot-2.3.0.tar.gz https://dovecot.org/releases/2.3/dovecot-2.3.0.tar.gz.sig Some random notes: - This release is signed with a new PGP key 0x18A348AEED409DA1 (which is signed by the old key). - This fixes several compiling issues reported for the 2.3 release candidate. Also a few other fixes mainly for submission server and doveadm server. - We're still planning to make at least one (or two) more v2.2.x release before retiring it. It's now time for Christmas holidays though, so the next release will have to wait until the end of January. - We'll start distributing v2.3.x releases in apt/yum repositories in near future. There will be a separate email about it. Some repetition from the release candidate's announcement: There are several new and exciting features in v2.3.0. I'm especially happy about the new logging and statistics code, which will allow us to generate statistics for just about everything. We didn't have time to implement everything we wanted for them yet, and there especially aren't all that many logging events yet that can be used for statistics. We'll implement those to v2.3.1, which might also mean that some of the APIs might still change in v2.3.1 if that's required. We also have new lib-smtp server code, which was used to implement SMTP submission server and do a partial rewrite for LMTP server. Some of the larger changes: * Various setting changes, see https://wiki2.dovecot.org/Upgrading/2.3 * Logging rewrite started: Logging is now based on hierarchical events. This makes it possible to do various things, like: 1) giving consistent log prefixes, 2) enabling debug logging with finer granularity, 3) provide logs in more machine readable formats (e.g. json). Everything isn't finished yet, especially a lot of the old logging code still needs to be translated to the new way. * Statistics rewrite started: Stats are now based on (log) events. It's possible to gather statistics about any event that is logged. See http://wiki2.dovecot.org/Statistics for details * ssl_dh setting replaces the old generated ssl-parameters.dat * IMAP: When BINARY FETCH finds a broken mails, send [PARSE] error instead of [UNKNOWNCTE] * Linux: core dumping via PR_SET_DUMPABLE is no longer enabled by default due to potential security reasons (found by cPanel Security Team). + Added support for SMTP submission proxy server, which includes support for BURL and CHUNKING extension. + LMTP rewrite. Supports now CHUNKING extension and mixing of local/proxy recipients. + auth: Support libsodium to add support for ARGON2I and ARGON2ID password schemes. + auth: Support BLF-CRYPT password scheme in all platforms + auth: Added LUA scripting support for passdb/userdb. See https://wiki2.dovecot.org/AuthDatabase/Lua - Input streams are more reliable now when there are errors or when the maximum buffer size is reached. Previously in some situations this could have caused Dovecot to try to read already freed memory. - Output streams weren't previously handling failures when writing a trailer at the end of the stream. This mainly affected encrypt and zlib compress ostreams, which could have silently written truncated files if the last write happened to fail (which shouldn't normally have ever happened). - virtual plugin: Fixed panic when fetching mails from virtual mailboxes with IMAP BINARY extension. - doveadm-server: Fix potential hangs with SSL connections - doveadm proxy: Reading commands' output from v2.2.33+ servers could have caused the output to be corrupted or caused a crash. - Many other smaller fixes

1 0

detect suspicious logins
by Matthew Broadhead 22 Dec '17

22 Dec '17

does anyone know of a linux module (maybe similar to fail2ban) that could be installed which would monitor email logs (sign ins) and alert the user to any suspicious activity on their account? i suspect it would need to log geo location, device type and ip address to a database. it seems like a module like this would be very useful and should exist already? thanks in advance

4 3

Re: Disable ssl validation for replication?
by Joseph Tam 22 Dec '17

22 Dec '17

Joseph Ward writes: > I'm aware of at least a couple of fallback options: > ??? -have a self-signed cert for replication and use the Let's Encrypt > one for IMAP/POP > ??? - create firewall rules allowing them to connect to each other over > the public internet so that it can validate the proper cert > ? > These are both much less palatable than simply disabling the cert > validation if it's possible. Maybe instead of disabling the check, appease it by supplying (in /etc/hosts) an alternate mapping of the FQDN subject of your certificate to your internal IP: 10.x.x.x your.sync.target Joseph Tam <jtam.home(a)gmail.com>

3 2

Re: detect suspicious logins
by Joseph Tam 21 Dec '17

21 Dec '17

Matthew Broadhead <matthew.broadhead(a)nbmlaw.co.uk> wrote: >> does anyone know of a linux module (maybe similar to fail2ban) that >> could be installed which would monitor email logs (sign ins) and alert >> the user to any suspicious activity on their account? I just monitor straight from the logs using homebrew utilties. @lbutlr" <kremels(a)kreme.com> > Fail2ban can protect email logins. Alerting a user because random IP > in Korean Middle School tried to login seems no helpful. > >> i suspect it would need to log geo location, device type and ip >> address to a database. it seems like a module like this would be very >> useful > > How? > > Blacklist failed logins. That protects everyone and doesn't induce panic. I just went through a long thread elsewhere on this topic. Fail2ban is mainly a counter brute force measure. If you have a strong password policy, the net result of using it is that it makes your logs smaller, and maybe saves some CPU cycles or from DoS for really intense bouts, but otherwise, does not add to security as good passwords makes BFD infeasible. *However*, if the attacker knows the approximate password (e.g. shoulder surfing), this may help, but eventually, the password will succumb to a patient diligent attack. What the OP is considering is if the password is divulged e.g. phishing attack or snarfed from another source. In this case, an intruder's authentication will succeed immediately. If a monitor spots someone authenticating from another continent than where the owner is supposed to be, or from 2 locations thousands of miles apart, or from 5 different location simultaneously, or tried to send a huge number of messages with many bounces, or was using a different mail clients that one historically used), it can signal the admin/user for further investigation. For users, I think reporting a login origin audit will be helpful, regardless of circumstances. However, it should be done out of band, if the assumption is someone else has control of the account. Joseph Tam <jtam.home(a)gmail.com>

1 0

Logouts/disconnections not being logged?
by Joseph Tam 21 Dec '17

21 Dec '17

In a previous thread Subject: Re: iPhone/iPad IMAP connection bursts causes user+IP exceeded I reported the behaviour of MacOSX/iOS IMAP readers whereby it would use up all available connections (up to the mail_max_userip_connections setting) for mailbox searches, then log them all out, then repeat the cycle with another batch of mailbox searches, until all mailboxes were scanned. However, login/logout log counts don't square up. I would observe (for a particular user+ip) mail_max_userip_connections login entries, followed by *fewer* than mail_max_userip_connections logout entries. (I could not find any disconnections or other forms of termination.) The next peak connection count happened after another mail_max_userip_connections logins (implying the total connection count > mail_max_userip_connections), then another strings of logouts fewer than mail_max_userip_connections. For example, if mail_max_userip_connections=100, I would see 0 -> 100 logins -> 87 logouts -> 100 logins -> 87 logouts -> 100 logins -> 94 logouts -> 100 logins -> ... It appears that somewhere, somehow, IMAP session exits are not being logged. Is there a reason to explain this discrepancy? Joseph Tam <jtam.home(a)gmail.com>

1 0

Virtual folders: Panic: file mail-index-sync.c
by Andreas Tauscher 21 Dec '17

21 Dec '17

Hi! I have compiled Dovecot 2.33.2 and crated some virtual folders. When I create a virtual folder for all flagged mails with dovecot-virtual containing * flagged and I set in 15-mailboxes.conf mailbox virtual/Flagged { special_use = \Flagged comment = All flagged messages auto = subscribe } The dovecot is crashing when any virtual folder is accessed: Dec 21 01:07:59 mail dovecot: imap(transfer1(a)shidolya.co.tz): Panic: file mail-index-sync.c: line 413 (mail_index_sync_begin_to2): asserti on failed: (!index->syncing) Dec 21 01:07:59 mail dovecot: imap(test(a)test.local): Error: Raw backtrace:/usr/lib/dovecot/libdovecot.so.0(+0x935c2) [0x7f4ead13 95c2] -> /usr/lib/dovecot/libdovecot.so.0(+0x936ad) [0x7f4ead1396ad] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7f4ead0c9f61] -> /u sr/lib/dovecot/libdovecot-storage.so.0(+0xd4d4c) [0x7f4ead49ed4c] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_index_sync_begin_to+0x4 f) [0x7f4ead49ee2f] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_index_sync_begin+0x1c) [0x7f4ead49eecc] -> /usr/lib/dovecot/modules/l ib20_virtual_plugin.so(virtual_storage_sync_init+0x20e) [0x7f4eabe9904e] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_sync_init+0x4 4) [0x7f4ead4076a4] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_sync+0x37) [0x7f4ead407747] -> /usr/lib/dovecot/libdovecot-storage .so.0(index_storage_get_status+0x31) [0x7f4ead481dd1] -> /usr/lib/dovecot/modules/lib20_virtual_plugin.so(+0x916d) [0x7f4eabe9616d] -> /us r/lib/dovecot/libdovecot-storage.so.0(+0x9ce81) [0x7f4ead466e81] -> /usr/lib/dovecot/modules/lib01_acl_plugin.so(+0xd825) [0x7f4eac8d0825] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_get_status+0x31) [0x7f4ead407ae1] -> /usr/lib/dovecot/modules/lib20_virtual_plugin.so (virtual_storage_sync_init+0x1096) [0x7f4eabe99ed6] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_sync_init+0x44) [0x7f4ead4076a4] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_sync+0x37) [0x7f4ead407747] -> /usr/lib/dovecot/libdovecot-storage.so.0(index_storage_get_status+0x31) [0x7f4ead481dd1] -> /usr/lib/dovecot/modules/lib20_virtual_plugin.so(+0x916d) [0x7f4eabe9616d] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0x9ce81) [0x7f4ead466e81] -> /usr/lib/dovecot/modules/lib01_acl_plugin.so(+0xd825) [0x7f4eac8d0825] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_get_status+0x31) [0x7f4ead407ae1] -> /usr/lib/dovecot/modules/lib20_virtual_plugin.so(virtual_storage_sync_init+0x1096) [0x7f4eabe99ed6] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_sync_init+0x44) [0x7f4ead4076a4] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_sync+0x37) [0x7f4ead407747] -> /usr/lib/dovecot/libdovecot-storage.so.0(index_storage_get_status+0x31) [0x7f4ead481dd1] -> /usr/lib/dovecot/modules/lib20_virtual_plugin.so(+0x916d) [0x7f4eabe9616d] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0x9ce81) [0x7f4ead466e81] When I remove "auto = subscribe" everything working like expected. I got this crash only if I use "flagged" in the virtual folder. Other virtual folders like a unseen folder is working fine with "auto = subscribe" Andreas

1 0

ot: fail2ban dovecot setup
by voytek＠sbt.net.au 20 Dec '17

20 Dec '17

I'm trying to setup and test fail2ban with dovecot I've installed fail2ban, I've copied config from https://wiki2.dovecot.org/HowTo/Fail2Ban, and, trying to test it, attempted multiple mail access with wrong password, but, get this: # fail2ban-client status dovecot-pop3imap Status for the jail: dovecot-pop3imap |- Filter | |- Currently failed: 0 | |- Total failed: 0 | `- File list: /var/log/dovecot.log `- Actions |- Currently banned: 0 |- Total banned: 0 `- Banned IP list: # grep 'auth fail' /var/log/dovecot.log | grep voytek@k | wc 19 367 3749 and Dec 17 09:55:03 imap-login: Info: Disconnected (auth failed, 2 attempts in 5 secs): user=<voytek@k..au>, method=PLAIN, rip=110.175.246.167, lip=163.47.110.7, TLS, session=<bQ6mAX1gHcRur/an> Dec 17 09:55:12 imap-login: Info: Disconnected (auth failed, 2 attempts in 4 secs): user=<voytek@k..au>, method=PLAIN, rip=110.175.246.167, lip=163.47.110.7, TLS, session=<Osk5An1gAKVur/an> Dec 17 09:55:20 imap-login: Info: Disconnected (auth failed, 2 attempts in 4 secs): user=<voytek@k..au>, method=PLAIN, rip=110.175.246.167, lip=163.47.110.7, TLS, session=<xsq/An1gDN1ur/an> Dec 17 09:55:27 imap-login: Info: Disconnected (auth failed, 2 attempts in 4 secs): user=<voytek@k..au>, method=PLAIN, rip=110.175.246.167, lip=163.47.110.7, TLS, session=<RVUkA31gm4xur/an> # cat dovecot-pop3imap.conf [Definition] failregex = (?: pop3-login|imap-login): (?:Authentication failure|Aborted login \(auth failed|Aborted login \(tried to use disabled|Disconnected \(auth failed).*rip=(?P<host>\S*),.* ignoreregex = # systemctl status fail2ban ● fail2ban.service - Fail2Ban Service Loaded: loaded (/usr/lib/systemd/system/fail2ban.service; enabled; vendor preset: disabled) Active: active (running) since Sat 2017-12-16 22:35:14 AEDT; 12h ago Docs: man:fail2ban(1) Process: 2034 ExecStop=/usr/bin/fail2ban-client stop (code=exited, status=0/SUCCESS) Process: 6024 ExecReload=/usr/bin/fail2ban-client reload (code=exited, status=0/SUCCESS) Process: 2036 ExecStart=/usr/bin/fail2ban-client -x start (code=exited, status=0/SUCCESS) Main PID: 2039 (fail2ban-server) CGroup: /system.slice/fail2ban.service └─2039 /usr/bin/python2 -s /usr/bin/fail2ban-server -s /var/run/fail2ban/fail2ban.sock -p /var/ru... Dec 16 22:35:14 systemd[1]: Starting Fail2Ban Service... Dec 16 22:35:14 fail2ban-client[2036]: 2017-12-16 22:35:14,657 fail2ban.server [2...9.7 Dec 16 22:35:14 fail2ban-client[2036]: 2017-12-16 22:35:14,657 fail2ban.server [2...ode Dec 16 22:35:14 systemd[1]: Started Fail2Ban Service. Dec 17 09:21:51 systemd[1]: Reloaded Fail2Ban Service. Dec 17 09:22:52 systemd[1]: Reloaded Fail2Ban Service. Dec 17 09:31:40 systemd[1]: Reloaded Fail2Ban Service. Hint: Some lines were ellipsized, use -l to show in full.

4 8

Shared mailboxes ACL's in MySQL, mailboxes in LDAP
by Matt . 20 Dec '17

20 Dec '17

Hi Guys, I'm having a situation that I want to autocreate my mailboxes using ldap auth as my mailboxes are in there. But as I need to share some mailboxes as shared folder is it possible to have that information in MySQL ? Maybe it even better to put everything in MySQL but designwise it's actually not. I f someone has an example how to accomplish this as I'm reading about ACL's as well and I'm wondering if this is actually going to work. Thanks! Matt

1 0

POP3 lock
by The Doctor 19 Dec '17

19 Dec '17

This might be trivial or not. I have a customer access his e-mail via POP3 using multiple devs. I recommend they switch to IMAP , however, How can the POP3 locking be made into a non-issue? -- Member - Liberal International This is doctor@@nl2k.ab.ca Ici doctor@@nl2k.ab.ca Yahweh, Queen & country!Never Satan President Republic!Beware AntiChrist rising! https://www.empire.kred/ROOTNK?t=94a1f39b Look at Psalms 14 and 53 on Atheism Happy Christmas 2017 and Merry New Year 2018

2 1

IMAP proxy
by Gandalf Corvotempesta 19 Dec '17

19 Dec '17

I'm migrating an old server to another old server (same dovecot version in both servers) The migration itself is straightforward, stop dovecot on the old server, migrate everything via rsync, start dovecot to the new server. There is only one step left: change the dns configuration, pointing from the old server to the newer one. As most of domains are not managed by me and some other domains are pointing to our server via IP, I can't simply change the A record or wait for all users to change their domain configuration. TL;DR: is possible to use dovecot as IMAP proxy so that even after changing our dns records, any user directly connecting to my old server would be proxied to the newer one automatically ? Any additional software or only a configuration change is required ?

3 3

Panic: file-lock.c
by Ricardo Branco 19 Dec '17

19 Dec '17

Today we had an unclean shutdown of our NFS filler and have had lots of issues with mailboxes being re-synced, mostly all the issues are now resolved but we are seeing the following appear for one user on our system. Dec 19 16:15:29 imap(xxx.xxx@xxx.com)(xxx.xxx@xxx.com): Panic: file file-lock.c: line 287: unreached Dec 19 16:15:29 imap(xxx.xxx@xxx.com)(xxx.xxx@xxx.com): Error: Raw backtrace: /usr/local/lib/dovecot/libdovecot.so.0(+0x9ceda) [0x7f2b45209eda] -> /usr/local/lib/dovecot/libdovecot.so.0(+0x9cf46) [0x7f2b45209f46] -> /usr/local/lib/dovecot/libdovecot.so.0(i_error+0) [0x7f2b4519cc5f] -> /usr/local/lib/dovecot/libdovecot.so.0(+0xa150a) [0x7f2b4520e50a] -> /usr/local/lib/dovecot/libdovecot.so.0(file_wait_lock_error+0x39) [0x7f2b4520e789] -> /usr/local/lib/dovecot/libdovecot.so.0(file_try_lock_error+0x13) [0x7f2b4520e873] -> /usr/local/lib/dovecot/libdovecot.so.0(file_create_locked+0x29e) [0x7f2b4520b7de] -> /usr/local/lib/dovecot/libdovecot-storage.so.0(mailbox_lock_file_create+0x125) [0x7f2b454dc345] -> /usr/local/lib/dovecot/libdovecot-storage.so.0(+0xba1fd) [0x7f2b4554f1fd] -> /usr/local/lib/dovecot/libdovecot-storage.so.0(index_mailbox_vsize_update_appends+0x63) [0x7f2b4554f363] -> /usr/local/lib/dovecot/libdovecot-storage.so.0(index_mailbox_sync_deinit+0x197) [0x7f2b4555c327] -> /usr/local/lib/dovecot/lib20_fts_plugin.so(+0xebd1) [0x7f2b4416bbd1] -> /usr/local/lib/dovecot/libdovecot-storage.so.0(mailbox_sync_deinit+0x30) [0x7f2b454de750] -> /usr/local/lib/dovecot/libdovecot-storage.so.0(mailbox_sync+0x3b) [0x7f2b454e0b4b] -> /usr/local/lib/dovecot/libdovecot-storage.so.0(index_storage_get_status+0x62) [0x7f2b45558402] -> /usr/local/lib/dovecot/lib20_fts_plugin.so(+0xfbf4) [0x7f2b4416cbf4] -> /usr/local/lib/dovecot/lib01_acl_plugin.so(+0xe564) [0x7f2b445aa564] -> /usr/local/lib/dovecot/libdovecot-storage.so.0(mailbox_get_status+0x8c) [0x7f2b454e05cc] -> dovecot/imap(imap_status_get+0x7a) [0x42222a] -> dovecot/imap(cmd_status+0x15d) [0x41514d] -> dovecot/imap(command_exec+0x5d) [0x41a7fd] -> dovecot/imap() [0x417fb0] -> dovecot/imap() [0x418046] -> dovecot/imap(client_handle_input+0x165) [0x418385] -> dovecot/imap(client_input+0x6f) [0x41882f] -> /usr/local/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x61) [0x7f2b4521db71] -> /usr/local/lib/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0xbf) [0x7f2b4521f75f] -> /usr/local/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0x3c) [0x7f2b4521dc2c] Dec 19 16:15:29 imap(xxx.xxx@xxx.com)(xxx.xxx@xxx.com): Fatal: master: service(imap): child 30620 killed with signal 6 (core dumps disabled)

1 0

Released Pigeonhole v0.5.0.rc1 for Dovecot v2.3.0.rc1.
by Stephan Bosch 19 Dec '17

19 Dec '17

Hello Dovecot users, Here is the Pigeonhole release candidate that goes with the Dovecot v2.3 release candidate. Of course, a large part of this release consists of compatibility changes for Dovecot v2.3. Apart from that, not much changed, just a few additions and fixes that accumulated over the last few months. Most of these changes will be back-ported to Pigeonhole v0.4, but that release will happen a little later. Changelog v0.5.0: * editheader extension: The implementation of header modifications is heavily updated. Although the functionality has not changed, the underlying code was updated to address several static analysis warnings, runtime integer arithmetic warnings (Clang), and to match updates in the Dovecot stream API. + variables extension: Made the maximum scope and variable size configurable. + subaddress: Support multiple recipient_delimiters. - enotify extension: mailto method: Fixed parsing of mailto URI with only a header part. - enotify plugin: mailto method: Make sure the "From:" header is set to a usable address and not "(null)". - Fixed writing address headers to outgoing messages. Sometimes headers were MIME-encoded twice, yielding invalid results. The release is available as follows: http://pigeonhole.dovecot.org/releases/2.3/rc/dovecot-2.3-pigeonhole-0.5.0.… http://pigeonhole.dovecot.org/releases/2.3/rc/dovecot-2.3-pigeonhole-0.5.0.… Refer to http://pigeonhole.dovecot.org and the Dovecot wiki for more information. Have fun testing this release candidate and don't hesitate to notify me when there are any problems. Regards, -- Stephan Bosch stephan(a)rename-it.nl

3 3

nfs_flush_chown_uid errors over NFS
by Johan Hendriks 18 Dec '17

18 Dec '17

Hello all, We use an older version of dovecot 2.0.19 on Ubuntu 12.04 using an NFS share, also a linux box. Now we want to migrate the storage to a FreeBSD server and later on the mailservers them self. In the firsts test all looks fine, but we do see some errors some times. Error: nfs_flush_chown_uid: chown(/var/mail/virtual/domain.com/user/Maildir) failed: Invalid argument This does not happen all the time but sometimes it shows up. I can read all the mail using an mailclient and the uid shows the user vmail:vmail. Is this cosmetic or is there something wrong? Thanks for your time Regards johan

1 0

Sieve with LDA
by Doug Hardie 18 Dec '17

18 Dec '17

I found an email that sieve stored in Deleted Messages incorrectly. The log messages show sieve doing that, but don't give me any indication of which sieve rule caused the problem. I went through it manually, but didn't see anything that matched. I seem to recall that there was a way to use sieve-test to show the rules and how they were applied, but I can't seem to get it to do that now. -- Doug

3 4

ot: 2.2 ghettoforge install systemctl Q
by voytek＠sbt.net.au 16 Dec '17

16 Dec '17

I've installed new Centos 7 with Dovecot 2.2 from ghettoforge and, used /etc/dovecot from current Centos 6 Dovecot 2.1 I can start/stop Dovecot with dovecot / doveadm stop BUT when I tried 'systemctl' I get # systemctl status dovecot ● dovecot.service - Dovecot IMAP/POP3 email server Loaded: loaded (/usr/lib/systemd/system/dovecot.service; disabled; vendor preset: disabled) Active: inactive (dead) Docs: man:dovecot(1) http://wiki2.dovecot.org/ how do I fix this, or, do I need to fix it ? or maybe I need to pursue this on ghettoforge list

3 3

2.1 to 2.2 server migration Qs: sanity check, config ?
by voytek＠sbt.net.au 16 Dec '17

16 Dec '17

I have an old Centos 6 running dovecot 2.1.17 with Postfix 2.1x, mysql virtual domains, in the process of setting a new Centos 7 to migrate, copied /etc/dovecot, made some minor edits to get rid of errors, added Letsencrypt in place of self certified certs, it seems to work, using mail client I can log on StartSSL/110/143, TLS/995/993 with no visible errors when login on is there any other sanity checks I should do ? before I start putting users on it ? attaching dovecot.conf at the end, appreciate any suggestion or correction I see a lot of these warning, are they benign? #grep Warning /var/log/dovecot.log | wc 74 1102 6900 # wc /var/log/dovecot.log 174 2299 19716 /var/log/dovecot.log Dec 16 00:57:12 auth: Warning: auth client 0 disconnected with 1 pending requests: Connection reset by peer Dec 16 00:57:52 auth: Warning: auth client 0 disconnected with 1 pending requests: EOF Dec 16 00:57:59 auth: Warning: auth client 0 disconnected with 1 pending requests: Connection reset by peer ( as I've re used an old host name, I can see some users already trying to connect, they must've never removed this server name when it was shut down, perhaps they're generating these errors, repeatedly logging on ?) # doveadm who username # proto (pids) (ips) five(a)aaa.com.au 1 imap (9047) (35.196.255.170) seven(a)aaa.com.au 1 imap (9056) (104.196.21.108) eight(a)aaa.com.au 1 imap (9062) (35.196.255.170) five(a)aa.com.au 2 imap (9240 9044) (203.194.43.48 35.196.255.170) six(a)aa.com.au 2 imap (9248 9063) (203.194.43.48 35.185.44.87) postbox(a)aa.com.au 1 imap (9057) (104.196.178.232) eight(a)aa.com.au 2 imap (9244 9050) (203.194.43.48 35.196.255.170) seven(a)aa.com.au 2 imap (9055 9242) (104.196.21.108 203.194.43.48) six(a)aaa.com.au 1 imap (9054) (35.185.44.87) doveconf -n -c /etc/dovecot/test/dovecot.conf > /etc/dovecot/test/dovecot.conf.new # cat dovecot.conf.new # 2.2.33.2 (d6601f4ec): /etc/dovecot/test/dovecot.conf # Pigeonhole version 0.4.21 (92477967) # OS: Linux 3.10.0-693.11.1.el7.x86_64 x86_64 CentOS Linux release 7.4.1708 (Core) auth_master_user_separator = * auth_mechanisms = PLAIN LOGIN dict { acl = mysql:/etc/dovecot/dovecot-share-folder.conf quotadict = mysql:/etc/dovecot/dovecot-used-quota.conf } first_valid_uid = 2000 last_valid_uid = 2000 listen = * log_path = /var/log/dovecot.log mail_gid = 2000 mail_location = maildir:/%Lh/Maildir/:INDEX=/%Lh/Maildir/ mail_plugins = quota mail_uid = 2000 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext namespace { inbox = yes location = prefix = separator = / type = private } namespace { list = children location = maildir:/%%Lh/Maildir/:INDEX=/%%Lh/Maildir/Shared/%%u prefix = Shared/%%u/ separator = / subscriptions = yes type = shared } passdb { args = /etc/dovecot/dovecot-mysql.conf driver = sql } passdb { args = /etc/dovecot/dovecot-master-users-password driver = passwd-file master = yes } plugin { acl = vfile acl_shared_dict = proxy::acl auth_socket_path = /var/run/dovecot/auth-master autocreate = INBOX autocreate2 = Sent autocreate3 = Trash autocreate4 = Drafts autocreate5 = Junk autosubscribe = INBOX autosubscribe2 = Sent autosubscribe3 = Trash autosubscribe4 = Drafts autosubscribe5 = Junk quota = dict:user::proxy::quotadict quota_rule = *:storage=1G quota_warning = storage=85%% quota-warning 85 %u quota_warning2 = storage=90%% quota-warning 90 %u quota_warning3 = storage=95%% quota-warning 95 %u sieve = /%Lh/sieve/dovecot.sieve sieve_dir = /%Lh/sieve sieve_global_dir = /var/vmail/sieve sieve_global_path = /var/vmail/sieve/dovecot.sieve } protocols = pop3 imap sieve service auth { unix_listener /var/spool/postfix/dovecot-auth { group = postfix mode = 0666 user = postfix } unix_listener auth-master { group = vmail mode = 0666 user = vmail } unix_listener auth-userdb { group = vmail mode = 0660 user = vmail } } service dict { unix_listener dict { group = vmail mode = 0660 user = vmail } } service imap-login { process_limit = 500 service_count = 1 } service pop3-login { service_count = 1 } service quota-warning { executable = script /usr/local/bin/dovecot-quota-warning.sh unix_listener quota-warning { group = vmail mode = 0660 user = vmail } } ssl = required ssl_cert = </etc/letsencrypt/..fullchain.pem ssl_key = # hidden, use -P to show it userdb { args = /etc/dovecot/dovecot-mysql.conf driver = sql } protocol lda { auth_socket_path = /var/run/dovecot/auth-master lda_mailbox_autocreate = yes log_path = /var/log/sieve.log mail_plugins = quota sieve autocreate postmaster_address = root } protocol imap { imap_client_workarounds = tb-extra-mailbox-sep mail_max_userip_connections = 60 mail_plugins = quota imap_quota } protocol pop3 { mail_plugins = quota pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = %08Xu%08Xv } #

2 3

Dovecot path separator clarification
by Davide Marchi 15 Dec '17

15 Dec '17

Hi Friends, On Debian Jessie and Dovecot 1:2.2.x using the default separator "/" (simply leave commented 10-mail.conf -> "#separator =") I've create for a vuser (from client) a subfolder Scuola/prova on server side, Dovecot create: ../Maildir/.Scuola.prova Here my question: why not ../Maildir/Scuola/prova ? Where I'm wrong? Many thanks! Davide

2 1

Re: sieve filter move wrong email to Junk folder
by Richard 15 Dec '17

15 Dec '17

> Date: Thursday, December 14, 2017 09:47:44 -0800 > From: Gao <gao(a)pztop.com> > > I use a sieve filter to move spam email to user's Junk folder: ># cat spam_to_junk.sieve > require "fileinto"; > if exists "X-Spam-Status" { > if header :contains "X-Spam-Status" "YES" { > fileinto "Junk"; > stop; > } else { > } > } > if header :contains "subject" ["SPAM?"] { > fileinto "Junk"; > stop; > } > > Most time this filter works fine but occasionally it move non-spam > in to Junk folder. Here is an example, this email is from dovecot > mailling list and it end up in my Junk folder. Mailllog and header > here. Would someone help me to figure out what went wrong here? > > Thanks. > > Gao > > X-Spam-Status: No, score=-2.9 required=5.0 tests=ALL_TRUSTED,BAYES_00 Because of the way you are bounding it, I suspect that the "YES" in BAYES_00, at the end of that line, is triggering the mis-filing. Why not make: contains "X-Spam-Status" "YES" a single string: contains "X-Spam-Status: YES" that would be more precise and avoid this issue.

5 7

Re: Recommended tool for migrating IMAP servers
by Davide Marchi 15 Dec '17

15 Dec '17

Sami Ketola wrote:> We run all our migrations using Dovecot internal dsync. Usually using imapc connector to connect to legacy > platform. > > Wqmi Many thanks Wqmi! Well, I've read the dsync documentation, but this warning has me a little worried: "Make sure destination is exactly as source, deleting/reverting any changes in destination if necessary" So I followed the Imapsync way, and all works fine. I seem to have understood thatImapsync works as a traditional client,for this reason also much easier to use and with less mistakes risk. And anyway a software done very well ;-) x9p wrote:> I do not believe imapsync has license issues. Its written in perl and its > hosted on github. You can pay for support if you want. and disable > stats > uploaded to their servers, via command line. Well, clear, many thanks x9p! Many thanks to all! Davide -- cosmogoniA cosmogoniA<https://www.cosmogonia.org/> n o p r o v a r e n o f a r e o n o n f a r e n o n c e p r o v a r e

2 2

Re: Mail-crypt plugin clarification
by Joseph Tam 15 Dec '17

15 Dec '17

Aki Tuomi writes: > Dovecot does support making it difficult to prevent access to the stored > mail. Those who have had problems understanding the documentation might find this unintended double-negative ironically funny. > You can, with suitable workflows, ensure that the user's emails are not > readable by anyone but the user. Of course the only way to be fully > sure is to use end-to-end encryption, ... "Ensure" (or OP: "impossible") are very high standards of privacy. If the OP really means it, then since a third party has control over the (virtual or real) hardware, the server should never have access to private keys or decrypted data. (We're in agreement I think.) If the OP lowers their standards to "inconvenient" to gain access, then the plugin is enough. It will keep the honest admin honest. > ... like PGP or S/MIME, but this does go a long way to prevent admin access > to user's email. Don't ignore metadata; who/when/where (and headers?) could reveal much information. Joseph Tam <jtam.home(a)gmail.com>

2 1

sieve filter move wrong email to Junk folder
by Gao 15 Dec '17

15 Dec '17

I use a sieve filter to move spam email to user's Junk folder: # cat spam_to_junk.sieve require "fileinto"; if exists "X-Spam-Status" { if header :contains "X-Spam-Status" "YES" { fileinto "Junk"; stop; } else { } } if header :contains "subject" ["SPAM?"] { fileinto "Junk"; stop; } Most time this filter works fine but occasionally it move non-spam in to Junk folder. Here is an example, this email is from dovecot mailling list and it end up in my Junk folder. Mailllog and header here. Would someone help me to figure out what went wrong here? Thanks. Gao =======Header========= Dovecot Mailing List <dovecot(a)dovecot.org> References: <c2562504-d5ae-cf3b-3e71-35ef0df15b79(a)rename-it.nl> <e804da79-6bdc-fb21-8ed4-7c1385ea8936(a)gmx.com> From: sender name <sender(a)rename-it.nl> Message-ID: <9100b497-7f3e-8129-9f8f-c675296e2bd7(a)rename-it.nl> Date: Thu, 14 Dec 2017 11:54:19 +0100 User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:52.0) Gecko/20100101 Thunderbird/52.5.0 MIME-Version: 1.0 In-Reply-To: <e804da79-6bdc-fb21-8ed4-7c1385ea8936(a)gmx.com> Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 8bit Content-Language: en-US X-SA-Exim-Connect-IP: 217.119.239.130 X-SA-Exim-Mail-From: sender(a)rename-it.nl X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on sogo.guto.nl X-Spam-Level: X-Spam-Status: No, score=-2.9 required=5.0 tests=ALL_TRUSTED,BAYES_00 autolearn=ham version=3.3.2, No Subject: Re: New Dovecot service: SMTP Submission (RFC6409) X-SA-Exim-Version: 4.2.1 (built Mon, 26 Dec 2011 16:24:06 +0000) X-SA-Exim-Scanned: Yes (on sogo.guto.nl) X-BeenThere: dovecot(a)dovecot.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: Dovecot Mailing List <dovecot.dovecot.org> List-Unsubscribe: <https://dovecot.org/mailman/options/dovecot>, <mailto:dovecot-request@dovecot.org?subject=unsubscribe> List-Archive: <https://dovecot.org/pipermail/dovecot/> List-Post: <mailto:dovecot@dovecot.org> List-Help: <mailto:dovecot-request@dovecot.org?subject=help> List-Subscribe: <https://dovecot.org/mailman/listinfo/dovecot>, <mailto:dovecot-request@dovecot.org?subject=subscribe> Errors-To: dovecot-bounces(a)dovecot.org Sender: "dovecot" <dovecot-bounces(a)dovecot.org> X-mydomain-MailScanner-Information: Please contact the administrator for more information X-mydomain-MailScanner-ID: D6773400AB09.ADBA7 X-mydomain-MailScanner: Found to be clean X-mydomain-MailScanner-SpamCheck: not spam, SpamAssassin (not cached, score=-4.598, required 5, autolearn=not spam, BAYES_00 -1.90, DCC_CHECK 1.10, HEADER_FROM_DIFFERENT_DOMAINS 0.00, KAM_LAZY_DOMAIN_SECURITY 1.00, KAM_SHORT 0.00, RCVD_IN_DNSWL_MED -2.30, RCVD_IN_HOSTKARMA_W -2.50) X-mydomain-MailScanner-From: dovecot-bounces(a)dovecot.org =====End of header======= =======Maillog========= Dec 14 02:54:51 mail postfix/postscreen[19236]: CONNECT from [94.237.32.243]:40818 to [10.11.22.68]:25 Dec 14 02:54:52 mail postfix/postscreen[19236]: PASS OLD [94.237.32.243]:40818 Dec 14 02:54:52 mail postfix/smtpd[19244]: connect from wursti.dovecot.fi[94.237.32.243] Dec 14 02:54:52 mail policyd-spf[19248]: None; identity=helo; client-ip=94.237.32.243; helo=mail.dovecot.fi; envelope-from=dovecot-bounces(a)dovecot.org; receiver=gao(a)pztop.com Dec 14 02:54:52 mail policyd-spf[19248]: None; identity=mailfrom; client-ip=94.237.32.243; helo=mail.dovecot.fi; envelope-from=dovecot-bounces(a)dovecot.org; receiver=gao(a)pztop.com Dec 14 02:54:52 mail postfix/smtpd[19244]: D6773400AB09: client=wursti.dovecot.fi[94.237.32.243] Dec 14 02:54:53 mail postfix/cleanup[19249]: D6773400AB09: hold: header Received: from mail.dovecot.fi (wursti.dovecot.fi [94.237.32.243])??by mail.mydomain.com (Postfix) with ESMTP id D6773400AB09??for <gao(a)pztop.com>; Thu, 14 Dec 2017 02:54:52 -0800 (PST) from wursti.dovecot.fi[94.237.32.243]; from=<dovecot-bounces(a)dovecot.org> to=<gao(a)pztop.com> proto=ESMTP helo=<mail.dovecot.fi> Dec 14 02:54:53 mail postfix/cleanup[19249]: D6773400AB09: message-id=<9100b497-7f3e-8129-9f8f-c675296e2bd7(a)rename-it.nl> Dec 14 02:54:53 mail opendkim[1706]: D6773400AB09: wursti.dovecot.fi [94.237.32.243] not internal Dec 14 02:54:53 mail opendkim[1706]: D6773400AB09: not authenticated Dec 14 02:54:53 mail opendkim[1706]: D6773400AB09: no signature data Dec 14 02:54:53 mail postfix/smtpd[19244]: disconnect from wursti.dovecot.fi[94.237.32.243] ehlo=1 mail=1 rcpt=1 data=1 quit=1 commands=5 Dec 14 02:54:53 mail MailScanner[18700]: New Batch: Scanning 1 messages, 7572 bytes Dec 14 02:54:53 mail MailScanner[18700]: Virus and Content Scanning: Starting Dec 14 02:54:53 mail MailScanner[18700]: Spam Checks: Starting Dec 14 02:54:53 mail MailScanner[18700]: MailWatch: Blacklist refresh time reached Dec 14 02:54:53 mail MailScanner[18700]: MailWatch: Starting up MailWatch SQL Blacklist Dec 14 02:54:53 mail MailScanner[18700]: MailWatch: Read 0 blacklist entries Dec 14 02:54:56 mail MailScanner[18700]: Requeue: D6773400AB09.ADBA7 to 24EDE400AABD Dec 14 02:54:56 mail MailScanner[18700]: Uninfected: Delivered 1 messages Dec 14 02:54:56 mail postfix/qmgr[1756]: 24EDE400AABD: from=<dovecot-bounces(a)dovecot.org>, size=6784, nrcpt=1 (queue active) Dec 14 02:54:56 mail MailScanner[18700]: Deleted 1 messages from processing-database Dec 14 02:54:56 mail MailScanner[18700]: MailWatch: Logging message D6773400AB09.ADBA7 to SQL Dec 14 02:54:56 mail MailScanner[18962]: MailWatch: D6773400AB09.ADBA7: Logged to MailWatch SQL Dec 14 02:54:56 mail dovecot: lmtp(19259): Connect from local Dec 14 02:54:56 mail dovecot: lmtp(gao(a)pztop.com): AHqjGYBYMlo7SwAAlqGq+A: sieve: msgid=<9100b497-7f3e-8129-9f8f-c675296e2bd7(a)rename-it.nl>: stored mail into mailbox 'Junk' Dec 14 02:54:56 mail dovecot: lmtp(19259): Disconnect from local: Successful quit Dec 14 02:54:56 mail postfix/lmtp[19258]: 24EDE400AABD: to=<gao(a)pztop.com>, relay=mail.mydomain.com[private/dovecot-lmtp], delay=3.9, delays=3.8/0.01/0.01/0.06, dsn=2.0.0, status=sent (250 2.0.0 <gao(a)pztop.com> AHqjGYBYMlo7SwAAlqGq+A Saved) Dec 14 02:54:56 mail postfix/qmgr[1756]: 24EDE400AABD: removed Dec 14 02:54:56 mail dovecot: indexer-worker(gao(a)pztop.com): Indexed 1 messages in Junk (UIDs 11..11) ======End of Maillog======

3 2

doveadm log reopen not works with 2.2.33
by Alessio Cecchi 14 Dec '17

14 Dec '17

Hi, after the upgrade from dovecot 2.2.32 to 2.2.33 we notice that the /var/log/director/director.log was empty and the log are write in the logrotate file es. /var/log/director/director.log-20171201. Log path is dovecot is: log_path = /var/log/director/director.log Logrotate configuration is: /var/log/director/director.log { daily rotate 31 missingok notifempty compress delaycompress sharedscripts postrotate doveadm -i director log reopen endscript } and worked fine until the last dovecot upgrade. Now the only way to "reopen" the log file is doveadm reload. Is this a know bug? Thanks -- Alessio Cecchi Postmaster @ http://www.qboxmail.it https://www.linkedin.com/in/alessice

2 1

Panic: file imap-client.c: line 1204 (client_handle_input): assertion failed: (o_stream_is_corked(client->output))
by Ralf Hildebrandt 14 Dec '17

14 Dec '17

Running Dovecot from the daily builds: 2:2.3.0~alpha0-1~auto+1287 in an proxy setup: auth_mechanisms = plain login default_vsz_limit = 1 G imapc_host = <redacted>.charite.de imapc_port = 993 imapc_ssl = imaps imapc_ssl_verify = no listen = *,:: mail_gid = imapproxy mail_home = /home/imapproxy/%u mail_location = imapc:~/imapc mail_plugins = mail_log notify mail_uid = imapproxy passdb { args = host=<redacted>.charite.de port=993 ssl=imaps ssl_ca_file=/etc/ssl/certs/ca-certificates.crt default_fields = userdb_imapc_user=%u userdb_imapc_password=%w userdb_imapc_host=<redacted>.charite.de userdb_imapc_ssl=imaps userdb_imapc_port=993 driver = imap } postmaster_address = postmaster(a)charite.de protocols = imap service auth { inet_listener { address = 127.0.0.1 port = 12345 } } ssl = required ssl_ca = </etc/ssl/certs/ca-certificates.crt ssl_cert = </etc/dovecot/dovecot.pem ssl_cipher_list = EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH+aRSA+RC4:EECDH:EDH+aRSA:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS:!RC4 ssl_client_ca_file = /etc/ssl/certs/ca-certificates.crt ssl_dh = # hidden, use -P to show it ssl_key = # hidden, use -P to show it ssl_prefer_server_ciphers = yes userdb { driver = prefetch } verbose_proctitle = yes Error in my log: Dec 14 14:35:28 mproxy dovecot: imap(voxxxxea)<79275><dnC4tUxgZs3BrwIS>: Panic: file imap-client.c: line 1204 (client_handle_input): assertion failed: (o_stream_is_corked(client->output)) Dec 14 14:35:28 mproxy dovecot: imap(voxxxxea)<79305><taooukxgd83BrwIS>: Panic: file imap-client.c: line 1204 (client_handle_input): assertion failed: (o_stream_is_corked(client->output)) Dec 14 14:35:28 mproxy dovecot: imap(voxxxxea)<79275><dnC4tUxgZs3BrwIS>: Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0xc3cd5) [0x7fe40d9cccd5] -> /usr/lib/dovecot/libdovecot.so.0(+0xc3dbc) [0x7fe40d9ccdbc] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7fe40d942f8e] -> dovecot/imap [voxxxxea 193.175.2.18](client_handle_input+0x2a8) [0x564f326e0e18] -> dovecot/imap [voxxxxea 193.175.2.18](client_continue_pending_input+0x80) [0x564f326e0f20] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x69) [0x7fe40d9e48f9] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0x10a) [0x7fe40d9e612a] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0x52) [0x7fe40d9e4a02] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x38) [0x7fe40d9e4c18] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7fe40d965b63] -> dovecot/imap [voxxxxea 193.175.2.18](main+0x333) [0x564f326d3113] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf1) [0x7fe40d5623f1] -> dovecot/imap [voxxxxea 193.175.2.18](+0xe2f1) [0x564f326d32f1] Dec 14 14:35:28 mproxy dovecot: imap(voxxxxea)<79305><taooukxgd83BrwIS>: Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0xc3cd5) [0x7faa962d8cd5] -> /usr/lib/dovecot/libdovecot.so.0(+0xc3dbc) [0x7faa962d8dbc] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7faa9624ef8e] -> dovecot/imap [voxxxxea 193.175.2.18](client_handle_input+0x2a8) [0x5615124cde18] -> dovecot/imap [voxxxxea 193.175.2.18](client_continue_pending_input+0x80) [0x5615124cdf20] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x69) [0x7faa962f08f9] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0x10a) [0x7faa962f212a] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0x52) [0x7faa962f0a02] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x38) [0x7faa962f0c18] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7faa96271b63] -> dovecot/imap [voxxxxea 193.175.2.18](main+0x333) [0x5615124c0113] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf1) [0x7faa95e6e3f1] -> dovecot/imap [voxxxxea 193.175.2.18](+0xe2f1) [0x5615124c02f1] -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Franklin Hindenburgdamm 30 | D-12203 Berlin Tel. +49 30 450 570 155 | Fax: +49 30 450 570 962 ralf.hildebrandt(a)charite.de | https://www.charite.de

1 0

dovecot (+sendmail) fails to get email into thunderbird
by jo land 14 Dec '17

14 Dec '17

I ain't able to get emails into my email application (thunderbird). I use 143 Imap to connect which i have tested with telnet and was able to login. But if i select the inbox with telnet it returns "0 EXISTS" like so: telnet 192.168.1.13 143 Trying 192.168.1.13... Connected to sub.domain.net. Escape character is '^]'. * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN AUTH=LOGIN] Dovecot ready. oper1 login update.site1 1234 oper1 OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS SPECIAL-USE] Logged in oper2 select INBOX * FLAGS (\Answered \Flagged \Deleted \Seen \Draft) * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft \*)] Flags permitted. * 0 EXISTS * 0 RECENT * OK [UIDVALIDITY 1513093097] UIDs valid * OK [UIDNEXT 1] Predicted next UID * OK [NOMODSEQ] No permanent modsequences oper2 OK [READ-WRITE] Select completed. My dovecot -n gist.pastebin <https://gist.github.com/anonymous/db5c7d81e18cff8180f6484c8dcb2a54> https://gist.github.com/anonymous/db5c7d81e18cff8180f6484c8dcb2a54 Mail location set to: /var/mail/

2 2

dovecot crashing
by cheese＠nosuchhost.net 14 Dec '17

14 Dec '17

i have a system with panics/crashes and seem to be able to trigger the problem. dovecot version: 2.2.33.2 (from ius rpm-package-repository) maillog: Dec 14 10:55:00 vimap01 dovecot: imap(XXX): Panic: file index-mail-binary.c: line 358 (blocks_count_lines): assertion failed: (block_count == 0 || block_idx+1 == block_count) Dec 14 10:55:00 vimap01 dovecot: imap(XXX): Error: Raw backtrace: /usr/lib64/dovecot/libdovecot.so.0(+0x9f3de) [0x7fa6768ef3de] -> /usr/lib64/dovecot/libdovecot.so.0(+0x9f4be) [0x7fa6768ef4be] -> /usr/lib64/dovecot/libdovecot.so.0(i_fatal+0) [0x7fa67688077c] -> /usr/lib64/dovecot/libdovecot-storage.so.0(+0xb50f7) [0x7fa676c370f7] -> /usr/lib64/dovecot/libdovecot-storage.so.0(index_mail_get_binary_stream+0x3c9) [0x7fa676c37569] -> /usr/lib64/dovecot/libdovecot-storage.so.0(mail_get_binary_size+0x5b) [0x7fa676bbfa2b] -> /usr/lib64/dovecot/libdovecot-storage.so.0(imap_msgpart_size+0x80) [0x7fa676c7a340] -> dovecot/imap(+0x207a9) [0x55b9589327a9] -> dovecot/imap(+0x1e63a) [0x55b95893063a] -> dovecot/imap(imap_fetch_more+0x35) [0x55b958931b45] -> dovecot/imap(cmd_fetch+0x34d) [0x55b95892336d] -> dovecot/imap(command_exec+0x5c) [0x55b95892ef0c] -> dovecot/imap(+0x1b48f) [0x55b95892d48f] -> dovecot/imap(+0x1b521) [0x55b95892d521] -> dovecot/imap(client_handle_input+0x195) [0x55b9589 2d8e5] -> dovecot/imap(client_input+0x85) [0x55b95892de05] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_call_io+0x52) [0x7fa676904cd2] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0x10f) [0x7fa6769063bf] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_handler_run+0x3c) [0x7fa676904d6c] -> /usr/lib64/dovecot/libdovecot.so.0(io_loop_run+0x38) [0x7fa676904f28] -> /usr/lib64/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7fa67688afa3] -> dovecot/imap(main+0x333) [0x55b9589202e3] -> /lib64/libc.so.6(__libc_start_main+0xf5) [0x7fa6764aec05] -> dovecot/imap(+0xe476) [0x55b958920476] Dec 14 10:55:00 vimap01 dovecot: imap(XXX): Fatal: master: service(imap): child 5766 killed with signal 6 (core dumped) gdb backtrace is attached as file more infos/core-dump-file available if needed. yours josef

1 0

Re: Mail-crypt plugin clarification
by Joseph Tam 14 Dec '17

14 Dec '17

rje writes: > I'm looking into ways to encrypt the stored email on my server. The idea is > to make it impossible for my hosting provider (who has access to my VPS) to > read the mail from the disk. Just to be clear, if at any point your VPS has access to the plaintext mail (or keys that decrypt mail), then the VPS provider could access your decrypted mail. To make it unfeasible for your VPS to read your mail, it has to arrive at your VPS pre-encrypted. I can envision a system where you import encrypted mail into your mail store, then use client IMAP access to be decrypted locally by your mail reader. However, metadata is still accessible by your VPS provider. If your VPS is the MTA that directly handles SMTP from your correspondees sending you unencrypted messages, you can't lock out a sufficiently skilled platform admin. Joseph Tam <jtam.home(a)gmail.com>

2 1

Error: stat no such file or directory with 2.2.33.2
by María Arrea 14 Dec '17

14 Dec '17

We have upgraded today from Dovecot 2.2.31 to Dovecot 2.2.33.2 and modified our config to include ITERINDEX in mail_location and we are detecting some errors like this: /Dec 13 08:17:31 buzon_rhel7 dovecot: imap(rboloix): Error: stat(/buzones/location/18/48/rboloix/mailboxes/SIT - Pra&AwE-cticas 2014/dbox-Mails) failed: No such file or directory// //Dec 13 08:40:24 buzon_rhel7 dovecot: imap(espi): Error: stat(/buzones/location/11/21/espi/mailboxes/CURSOS/ACCION SOCIAL/dbox-Mails) failed: No such file or directory// //Dec 13 08:40:25 buzon_rhel7 dovecot: imap(espi: Error: stat(/buzones/location/11/21/espi/mailboxes/CURSOS/ACCION SOCIAL/dbox-Mails) failed: No such file or directory// //Dec 13 08:41:59 buzon_rhel7 dovecot: imap(espi): Error: stat(/buzones/location/11/21/espi/mailboxes/CURSOS/ACCION SOCIAL/dbox-Mails) failed: No such file or directory/ I have grepped logs of past 4 weeks and have not found this errors with Dovecot 2.2.31. Any idea of what is going on? Full doveconf -n output below: /# 2.2.33.2 (d6601f4ec): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.21 (92477967) # OS: Linux 3.10.0-693.11.1.el7.x86_64 x86_64 Red Hat Enterprise Linux Server release 7.4 (Maipo) xfs auth_cache_negative_ttl = 10 secs auth_cache_size = 10 M auth_cache_ttl = 2 mins auth_master_user_separator = * auth_mechanisms = plain login auth_worker_max_count = 5500 base_dir = /var/run/dovecot/ default_client_limit = 5000 default_process_limit = 6500 disable_plaintext_auth = no imap_capability = +XLIST imap_client_workarounds = tb-extra-mailbox-sep delay-newmail tb-lsub-flags lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes mail_fsync = never mail_gid = entrega mail_home = /buzones/location/%2.26Hn/%2.200Hn/%n/home_usuario/ mail_location = mdbox:/buzones////location//%2.26Hn/%2.200Hn/%n:ITERINDEX:INDEX=/indices_dovecot/indices/%2.26Hn/%2.200Hn/%n:ALT=/buzones/alternativo////location//%2.26Hn/%2.200Hn/%n mail_max_userip_connections = 15000 mail_plugins = " zlib acl quota virtual mail_log notify" mail_uid = entrega mailbox_list_index = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date mdbox_purge_preserve_alt = yes mdbox_rotate_interval = 1 days mdbox_rotate_size = 60 M namespace { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox SPAM { auto = subscribe special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = type = private } namespace { list = yes location = mdbox:/buzones////location//%%2.26Hn/%%2.200Hn/%%n:ALT=/buzones/alternativo////location//%%2.26Hn/%%2.200Hn/%%n:INDEX=/indices_dovecot/indices/%%2.26Hn/%%2.200Hn/%%n:INDEXPVT=~/mdbox/carpeta_compartida/%%u prefix = carpeta_compartida/%%u/ separator = / subscriptions = no type = shared } namespace { list = yes location = virtual:/etc/dovecot/virtual:INDEX=~/mdbox/virtual:CONTROL=~/mdbox/virtual prefix = Carpetas_virtuales/ separator = / } passdb { args = /etc/dovecot/deny deny = yes driver = passwd-file } passdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } passdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } plugin { acl = vfile acl_shared_dict = file:/buzones////location//acls_compartidas.db lda_mailbox_autosubscribe = yes mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size subject from quota = dict:Cuota de usuario::file:/buzones/cuotas/%n quota_rule2 = Trash:storage=+10%% quota_warning = storage=90%% aviso_cuota 90 %u sieve = /buzones////location//%2.26Hn/%2.200Hn/%n/home_usuario/dovecot.sieve sieve_dir = /buzones////location//%2.26Hn/%2.200Hn/%n/home_usuario/sieve/ zlib_save = gz zlib_save_level = 9 } pop3_no_flag_updates = yes protocols = pop3 imap sieve service anvil { client_limit = 25000 } service auth { client_limit = 32000 unix_listener auth-master { user = entrega } unix_listener auth-userdb { user = entrega } user = root } service aviso_cuota { executable = script /usr/local/bin/quota-warning.sh unix_listener aviso_cuota { mode = 0666 } user = entrega } service config { process_min_avail = 4 } service imap-login { executable = /usr/libexec/dovecot/imap-login group = dovenull process_min_avail = 2 service_count = 0 vsz_limit = 1 G } service imap { executable = /usr/libexec/dovecot/imap process_limit = 8000 process_min_avail = 12 vsz_limit = 1 G } service managesieve-login { executable = /usr/libexec/dovecot/managesieve-login inet_listener sieve { port = 2000 } process_limit = 2000 vsz_limit = 1 G } service managesieve { executable = /usr/libexec/dovecot/managesieve process_limit = 5000 } service pop3-login { executable = /usr/libexec/dovecot/pop3-login process_limit = 5000 process_min_avail = 2 service_count = 0 vsz_limit = 1 G } service pop3 { executable = /usr/libexec/dovecot/pop3 process_limit = 5000 } ssl_ca = </etc/pki/SCS2016/cadena_Terena.crt ssl_cert = </etc/pki/SCS2016/buzonus_us_es.crt ssl_key = # hidden, use -P to show it ssl_protocols = !SSLv2 !SSLv3 userdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } userdb { args = /etc/dovecot/dovecot-ldap-userdb.conf driver = ldap } verbose_proctitle = yes protocol sieve { managesieve_implementation_string = dovecot managesieve_logout_format = bytes=%i/%o managesieve_max_line_length = 65536 } protocol lda { hostname = location info_log_path = log_path = mail_fsync = optimized mail_plugins = sieve zlib quota virtual acl postmaster_address = me(a)xxxxx.com syslog_facility = mail } protocol imap { mail_plugins = zlib quota imap_quota virtual acl imap_acl notify mail_log } protocol pop3 { mail_plugins = zlib quota virtual pop3_enable_last = yes pop3_uidl_format = %g }/

2 2

TLS Error and not working lmtp
by Jakob Schürz 13 Dec '17

13 Dec '17

Hi! I have some troubles with the virtual plugin. I run a self-compiled dovecot 2.2.33.2 from debian testing. I patched this version with the QRESYNC-Patch from a few weeks ago. But i always get an errormessage, when i try to open an email from a virtual mailbox. So i cloned the actual git-Repo and compiled dovecot and pigonehole-sieve. The problem with the virtual plugin seems gone away. But there are some other problems. I use ssl=required and with dovecot from debian TLS/SSL and STARTTLS works fine. With the selfcompiled from git, i get this error: dovecot[1284]: imap-login: Error: Failed to initialize SSL server context: Couldn't parse DH parameters: error:0906D06C:PEM routines:PEM_read_bio:no start line: Expecting: DH PARAMETERS: user=<>, rip=127.0.0.1, lip=127.0.0.1, secured, session=<D6bC4Rlg8ut/AAAB> The key and crt are exactly the same files as before. The second problem is, lmtp is not working. I use exactly the same config for the debians dovecot and dovecot from git. But in the gitversion the error in exim is: Failed to connect to socket /var/run/dovecot/lmtp for dovecot_lmtp transport: Connection refused My config is: # dovecot -n # 2.3.devel (b1aac3a1d): /usr/local/etc/dovecot/dovecot.conf # Pigeonhole version 0.5.devel (624e1769) # OS: Linux 4.13.0-trunk-amd64 x86_64 Debian 9.3 btrfs auth_debug = yes auth_mechanisms = plain login cram-md5 digest-md5 auth_socket_path = /var/run/dovecot/auth-userdb auth_verbose = yes first_valid_uid = 1000 imap_capability = +XDOVECOT imap_client_workarounds = tb-extra-mailbox-sep lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes listen = *, ::1 login_trusted_networks = 127.0.0.1/8 192.168.0.0/24 192.168.1.0/24 172.17.0.0/24 172.18.0.0/24 mail_debug = yes mail_gid = vmail mail_home = /var/mail/%u mail_location = maildir:/var/mail/%u/Maildir:LAYOUT=fs:INDEX=/var/lib/dovecot/db/indexes/Maildir/%u:INDEXPVT=/var/lib/dovecot/db/indexes/Maildir/%u:CONTROL=/var/lib/dovecot/db/control/Maildir/%u mail_plugins = zlib quota acl listescape mail_log notify virtual mail_privileged_group = vmail mail_server_admin = mailto:jakob@xundeenergie.at mail_shared_explicit_inbox = yes mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext mmap_disable = yes namespace { hidden = no inbox = no list = children location = maildir:/var/mail/mailarchiv/%u/:LAYOUT=fs:INDEX=/var/lib/dovecot/db/indexes/mailarchiv/%u:INDEXPVT=/var/lib/dovecot/db/indexes/mailarchiv/%u mailbox incoming { auto = create } mailbox outgoing { auto = create } prefix = Mailarchiv/ separator = / subscriptions = no type = private } namespace { list = children location = maildir:/var/mail/public/:LAYOUT=fs:INDEX=/var/lib/dovecot/db/indexes/public/%u:INDEXPVT=/var/lib/dovecot/db/indexes/public/%u prefix = Roseggergasse/ separator = / subscriptions = no type = public } namespace Geteilt { hidden = no inbox = no list = children location = maildir:/var/mail/%%u/Maildir:LAYOUT=fs:INDEXPVT=/var/lib/dovecot/db/indexes/shared/%u/%%u:INDEX=/var/lib/dovecot/db/indexes/shared/%u/%%u prefix = Geteilt/%%n/ separator = / subscriptions = no type = shared } namespace Real { hidden = yes list = no location = virtual:/var/mail/real:INDEX=/var/lib/dovecot/db/indexes/real/%u prefix = Real/ separator = / subscriptions = no } namespace Synoptic { hidden = no list = children location = virtual:/var/mail/virtual:INDEX=/var/lib/dovecot/db/indexes/virtual/%u mailbox INBOX/Archives { auto = no special_use = \Archive } mailbox INBOX/Drafts { auto = no special_use = \Drafts } mailbox INBOX/Entwürfe { auto = no special_use = \Drafts } mailbox INBOX/Junk { auto = no special_use = \Junk } mailbox INBOX/Sent { auto = no special_use = \Sent } mailbox INBOX/Spam { auto = no special_use = \Junk } prefix = Synoptic/ separator = / subscriptions = no } namespace inbox { hidden = no inbox = yes location = mailbox Archiv { auto = no special_use = \Archive } mailbox Archive { auto = no special_use = \Archive } mailbox Archives { auto = no special_use = \Archive } mailbox "Deleted Messages" { auto = no special_use = \Trash } mailbox Drafts { auto = no special_use = \Drafts } mailbox Entwürfe { auto = no special_use = \Drafts } mailbox "Gelöschte Elemente" { auto = no special_use = \Trash } mailbox "Gelöschte Objekte" { auto = no special_use = \Trash } mailbox Gesendet { auto = no special_use = \Sent } mailbox "Gesendete Elemente" { auto = no special_use = \Sent } mailbox "Gesendete Objekte" { auto = no special_use = \Sent } mailbox Important { auto = no } mailbox Junk { auto = subscribe autoexpunge = 30 days special_use = \Junk } mailbox Mistkübel { auto = no special_use = \Trash } mailbox Papierkorb { auto = no special_use = \Trash } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { auto = no special_use = \Sent } mailbox Spam { auto = no special_use = \Junk } mailbox Synoptic/Alle { auto = no comment = All my messages special_use = \All } mailbox Trash { auto = no special_use = \Trash } mailbox Wichtig { auto = create } prefix = INBOX/ separator = / subscriptions = no type = private } namespace subscriptions { hidden = yes list = no location = prefix = subscriptions = yes } passdb { args = scheme=CRYPT username_format=%u /usr/local/etc/dovecot/users driver = passwd-file } plugin { acl = vfile:/etc/dovecot/dovecot-acl:cache_secs=300 acl_shared_dict = file:/var/lib/dovecot/db/shared-mailboxes.db mail_home = /var/mail/%u setting_name = sieve, managedsieve sieve = file:/var/mail/%u/sieve/;active=/var/mail/%u/sieve/%u.sieve } postmaster_address = postmaster@localhost protocols = imap pop3 lmtp imap lmtp sieve pop3 sieve service anvil { unix_listener anvil-auth-penalty { mode = 00 } } service auth { unix_listener auth-client { group = vmail mode = 0666 user = vmail } unix_listener auth-userdb { group = vmail mode = 0666 user = vmail } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } process_min_avail = 1 service_count = 1 } service imap { executable = imap postlogin process_limit = 1024 vsz_limit = 400 M } service lmtp { executable = lmtp -L user = vmail vsz_limit = 400 M } service postlogin { executable = script-login -d rawlog } ssl = required ssl_cert = </usr/local/etc/dovecot/dovecot.crt ssl_key = # hidden, use -P to show it userdb { args = username_format=%u /usr/local/etc/dovecot/users default_fields = home=/var/mail/%u driver = passwd-file } verbose_proctitle = yes verbose_ssl = yes protocol lmtp { auth_username_format = %n mail_plugins = zlib quota acl listescape mail_log notify virtual quota sieve acl } protocol lda { mail_plugins = zlib quota acl listescape mail_log notify virtual quota sieve acl } protocol imap { mail_max_userip_connections = 10 mail_plugins = zlib quota acl listescape mail_log notify virtual imap_quota imap_acl } Any ideas jakob

2 3

sieve problem config antispam
by Günther J. Niederwimmer 12 Dec '17

12 Dec '17

Hello, I like to configure the antispam with sieve from this site https:// wiki2.dovecot.org/HowTo/AntispamWithSieve#For_rspamd But when I compile the scripts I have this Errors sievec /usr/lib64/dovecot/sieve/report-ham.sieve report-ham: line 1: error: require command: unknown Sieve capability `vnd.dovecot.pipe'. report-ham: line 1: error: require command: unknown Sieve capability `imapsieve'. report-ham: line 15: error: unknown command 'pipe' (only reported once at first occurrence). report-ham: error: validation failed. sievec(root): Fatal: failed to compile sieve script '/usr/lib64/dovecot/sieve/ report-ham.sieve' My system is a centos 7 dovecot 2.2.33.1 dovecot-pigeonhole 2.2.33.1 -- mit freundlichen Grüssen / best regards, Günther J. Niederwimmer

2 1

Recommended tool for migrating IMAP servers
by Davide Marchi 12 Dec '17

12 Dec '17

Hi Friends, I would like to ask you a suggestion: I need to migrate a imap server to a new one and then dismiss the old one. Reading from relative Dovecot documentation page (https://wiki.dovecot.org/Migration) more tools are shown: UW-IMAP's mailutil, imapsync, YippieMove and Larch. The each mail servers are Linux based, one of this (mine) is Dovecot. Based on your experience which of these tools would be preferable to use? Thank you very much Davide

6 12

Re: hosting emails at home
by André Rodier 11 Dec '17

11 Dec '17

Hello Mike, Yes, I am using a static IP address, but in theory, you could use a dynamic one. Nothing technically would prevent email exchanges between two boxes, as long as the SPF records are up to date and the DKIM is properly setup. Unfortunately, some ISPs are simply blacklisting full range of private IP addresses just because they are not officials / commercials. Kind regards, André On 10/12/17 19:24, Mike wrote: > > Nice. > > Are you using a static IP in this setup? > > It doesn't seem like it, but wanted to be sure. > > Mike. > > Quoting André Rodier <andre(a)rodier.me>: > >> Hello everyone, >> >> I have been using Postfix and Dovecot for my personal emails for years. >> After being tired of reinstalling my personal mail server many times, I >> am currently writing some Ansible scripts to do it automatically. >> >> I obviously checked the other projects, and did not found anything close >> to what I am looking for, so I am implementing it now. >> >> The final goal is to have a box that once online, would setup itself, by >> creating the certificates, the DKIM keys and update the appropriate DNS >> records. >> >> This is so far what I have achieved: >> - Automatic generation of certificates using LetsEncrypt >> - Automatic update of the domain entries: imap, smtp, webmail, etc. >> - Automatic generation of a DKIM keys >> - Automatic update of specific records (MX, SPF, DKIM, etc.) >> - LDAP server for user accounts, with or without system login. >> - Installation of Postfix, Dovecot and Roundcube >> >> Sending DKIM signed emails is working, and the IMAP server is configured >> as well, although basic. >> >> The postfix and dovecot configuration are not yet entirely finished. I >> am planing to add an anti spam system, and sieve, amongst other things. >> >> Although in development during my spare time, the system is normally >> robust and you should be able to run it multiple times without errors. >> >> If anyone is interested to use it, to have a look, or to take part, it >> is here: https://github.com/progmaticltd/homebox >> >> Kind regards, >> André Rodier. > >

5 10

hosting emails at home
by André Rodier 11 Dec '17

11 Dec '17

Hello everyone, I have been using Postfix and Dovecot for my personal emails for years. After being tired of reinstalling my personal mail server many times, I am currently writing some Ansible scripts to do it automatically. I obviously checked the other projects, and did not found anything close to what I am looking for, so I am implementing it now. The final goal is to have a box that once online, would setup itself, by creating the certificates, the DKIM keys and update the appropriate DNS records. This is so far what I have achieved: - Automatic generation of certificates using LetsEncrypt - Automatic update of the domain entries: imap, smtp, webmail, etc. - Automatic generation of a DKIM keys - Automatic update of specific records (MX, SPF, DKIM, etc.) - LDAP server for user accounts, with or without system login. - Installation of Postfix, Dovecot and Roundcube Sending DKIM signed emails is working, and the IMAP server is configured as well, although basic. The postfix and dovecot configuration are not yet entirely finished. I am planing to add an anti spam system, and sieve, amongst other things. Although in development during my spare time, the system is normally robust and you should be able to run it multiple times without errors. If anyone is interested to use it, to have a look, or to take part, it is here: https://github.com/progmaticltd/homebox Kind regards, André Rodier.

5 7

recover missing messages - files still present in storage
by Webert de Souza Lima 11 Dec '17

11 Dec '17

Hi, I have a user account that had almost 20GB of emails and now they're missing. Only a few are available trough IMAP or doveadm. I can see in /path/to/mailbox/storage that thousands of "m." files are still there, summing up 19GB of files. doveconf -n http://termbin.com/7lgc I have tried: accessing via IMAP accessing via doveadm search/fetch/mailbox status doveadm index doveadm force-resync doveadm dump: -- INDEX: /srv/dovecot2/index/DOMAIN_SUPRESSED/ACCOUNT_SUPRESSED/storage/dovecot.map.index version .................. = 7.3 base header size ......... = 120 header size .............. = 176 record size .............. = 20 compat flags ............. = 1 index id ................. = 1500105889 (2017-07-15 05:04:49) flags .................... = 0 uid validity ............. = 1500105889 (2017-07-15 05:04:49) next uid ................. = 26514 messages count ........... = 26513 seen messages count ...... = 0 deleted messages count ... = 0 first recent uid ......... = 1 first unseen uid lowwater = 1 first deleted uid lowwater = 26446 log file seq ............. = 47 log file tail offset ..... = 15656 log file head offset ..... = 15656 log2 rotate time ......... = 1512558922 (2017-12-06 09:15:22) last temp file scan ...... = 0 (1969-12-31 21:00:00) day stamp ................ = 1512604800 (2017-12-06 22:00:00) day first uid[0] ......... = 26450 day first uid[1] ......... = 26395 day first uid[2] ......... = 26328 day first uid[3] ......... = 26252 day first uid[4] ......... = 26234 day first uid[5] ......... = 26216 day first uid[6] ......... = 26135 day first uid[7] ......... = 26055 -- Extension 0 -- name ........ = map hdr_size .... = 8 reset_id .... = 0 record_offset = 8 record_size . = 12 record_align = 4 header ........ = 6111000001000000 -- Extension 1 -- name ........ = ref hdr_size .... = 0 reset_id .... = 0 record_offset = 6 record_size . = 2 record_align = 2 -- Keywords -- -- CACHE: /srv/dovecot2/index/DOMAIN_SUPRESSED/ACCOUNT_SUPRESSED/storage/dovecot.map.index.cache cache is unusable Regards, Webert Lima DevOps Engineer at MAV Tecnologia *Belo Horizonte - Brasil*

2 3

Mailsploit problem in responce of BODYSTRUCTURE
by TACHIBANA Masashi 11 Dec '17

11 Dec '17

Hi, I tried to see a mail that have a strange From header in bellow URL: https://www.mailsploit.com/index Then, I got BODYSTRUCTURE response contain next: ((NIL NIL "service" "paypal.com")) Are this problem already founded by anyone? So already fixed? -- TACHIBANA Masashi QUALITIA CO., LTD. mailto:tachibana@qualitia.co.jp

3 6

iPhone no longer authenticating
by Mark Foley 11 Dec '17

11 Dec '17

I've switched a user to being an active directory user. That user's email client authorizes just fine with dovecot using GSSAPI. However, now his iPhone won't authorize. In the dovecot log file I get: Dec 01 14:27:28 auth: Debug: client in: AUTH 1 PLAIN service=imap secured session=q4n3W0xfggBiZj9s lip=98.102.63.107 rip=98.102.63.108 lport=993 rport=49538 resp=AG1wcmVzcwBEaW5va3JvbndhbGw0NQ== (previous base64 data may contain sensitive data) Dec 01 14:27:32 auth-worker(5988): Debug: shadow(mpress,98.102.xx.yyy): lookup Dec 01 14:27:32 auth-worker(5988): Info: shadow(mpress,98.102.xx.yyy): unknown user (given password: *******) Dec 01 14:27:34 auth: Debug: client passdb out: FAIL 1 user=mpress Dec 01 14:27:34 imap-login: Info: Aborted login (auth failed, 1 attempts in 6 secs): user=<mpress>, method=PLAIN, rip=98.102.xx.yyy, lip=98.102.63.107, TLS, session=<q4n3W0xfggBiZj9s> Dec 01 14:27:34 imap-login: Debug: SSL alert: close notify [98.102.xx.yyy] This same user will authenticate OK from his local domain workstation: Dec 01 14:28:52 auth: Debug: master userdb out: USER 1948516353 mpress system_groups_user=HPRS\mpress uid=10005gid=10000 home=/home/HPRS/mpress auth_token=ce3050035718ed0996af698400c4de1be453ec06 auth_user=mpress(a)HPRS.LOCAL Dec 01 14:28:52 imap-login: Info: Login: user=<mpress>, method=GSSAPI, rip=192.168.0.54, lip=192.168.0.2, mpid=9755, TLS, session=<6MT1YExftwDAqAA2> I'm pretty sure the reason has to do with Active Directory authenication locally, but of course his iPhone is not a member of the domain, and he is no longer in /etc/passwd/shadow. So, what is the best way to get the iPhone to authenticate? Here's my current config: > doveconf -n # 2.2.15: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 4.4.88 x86_64 Slackware 14.2 auth_debug = yes auth_debug_passwords = yes auth_gssapi_hostname = $ALL auth_krb5_keytab = /etc/dovecot/dovecot.keytab auth_mechanisms = plain login gssapi auth_use_winbind = yes auth_username_format = %n auth_verbose = yes auth_verbose_passwords = plain disable_plaintext_auth = no info_log_path = /var/log/dovecot_info mail_location = maildir:~/Maildir passdb { driver = shadow } protocols = imap ssl_cert = </etc/ssl/certs/OHPRS/GoDaddy/Apache/2016-08-10/54e789087d419b6e.crt ssl_key = </etc/ssl/certs/OHPRS/GoDaddy/mail.ohprs.org.key userdb { driver = passwd } verbose_ssl = yes Thanks, --Mark

2 2

Doveadm backup error.
by Dovecot list 10 Dec '17

10 Dec '17

Hello. I try to migrate dovecot 1 to dovecot 2 with doveadm backup. But when i try to set doveadm backup i get : mx3:/root/dsync@[23:11] # doveadm -v -c ah.temp backup -R -u ah(a)test.pl <ahuryn(a)i-pi.pl> imapc: doveadm(ah(a)test.pl <ahuryn(a)i-pi.pl>): Error: Mail access for users with UID 145 not permitted (see first_valid_uid in config file, uid from userdb lookup). doveadm(ah(a)test.pl <ahuryn(a)i-pi.pl>): Error: User init failed mx3:/root/dsync@[22:13] # ls -la /home/mail/vhosts/test.pl/ah(a)test.pl/ <http://i-pi.pl/ahuryn@i-pi.pl/> total 1 drwxr-xr-x 2 vmail vmail 2 Nov 12 23:59 . mx3:/root/dsync@[22:14] # doveadm user ah(a)test.pl <ahuryn(a)i-pi.pl> field value uid 145 gid 145 home /home/mail/vhosts/test.pl/ah(a)test.pl <http://i-pi.pl/ahuryn@i-pi.pl> mail mdbox:~/mdbox quota_rule *:storage=50000M mx3:/root/dsync@[22:14] # id 145 uid=145(vmail) gid=145(vmail) groups=145(vmail) mx3:/root/dsync@[1:14] # doveconf -n | grep 145 first_valid_uid = 145 last_valid_uid = 145 I dont have any idea whats is the problem. Best regards.

2 3

Mail-crypt plugin clarification
by rje 10 Dec '17

10 Dec '17

I'm looking into ways to encrypt the stored email on my server. The idea is to make it impossible for my hosting provider (who has access to my VPS) to read the mail from the disk. So I'm looking into ways to do this, and I found the mail-crypt plugin for dovecot. Unfortunately I find the documentation very hard to understand. There is no clear description of what the goal and purpose of the plugin is, or how it works. Most of the documentation is very short and provides no explanation. So here are some questions - I will gladly help to update the documentation when some of these questions are answered :) If you cannot answer them all, please tell me what you know.. - It seems mail-cypt will transparently encrypt/decrypt mail - so it stores it on the server in encrypted form, but dovecot serves it unencrypted over IMAP. Is this correct? - It seems that mail-crypt needs both a private and a public key to work. Is this correct? - If mail-crypt has both private and public key in its configuration, does that not defeat the purpose of the whole thing? Anyone with access to the disk will be able to read everything? Regarding the settings: mail_crypt_global_private_key(_n) - Private key to decrypt files, you can specify many mail_crypt_global_public_key - Public key to use to encrypt files, you can specify one - How does this work? What does mail-crypt do when multiple private keys are specified? mail_crypt_private_key - Private key to decrypt user's master key, can be base64 encoded mail_crypt_private_password - Password to decrypt user's master key or environment private key - What is the relation between a users master key, and the private/public global keys above? What is an environment private key? TIA, and as I said above, I will help with updating the docs! -- Sent from: http://dovecot.2317879.n4.nabble.com/

1 0

Re: Use multiple mbox locations
by Joseph Tam 09 Dec '17

09 Dec '17

Steffen Kaiser > Hmm, this is a job for: > > https://wiki2.dovecot.org/Plugins/Snarf Cool! Can this be used with the imapc: driver to consolidate mail from separate IMAP accounts into one? (Sort of like how you can configure Gmail to slurp up mail into the Gmail account.) Joseph Tam <jtam.home(a)gmail.com>

1 0

Use multiple mbox locations
by bapt x 08 Dec '17

08 Dec '17

Hello, With GNU mailutils on Debian 9, we receive mails in /var/mail/<username> but when we read mails with the "mail" command, they are moved in a file ~/mbox: "Saved 1 message in /home/<username>/mbox". I use Roundcube webmail with Dovecot but if I also use use the "mail" command to read emails, Roundcube will not display old messages anymore since they were moved to ~/mbox. So is their a way to tell Dovecot that we want to lookup for emails both in /var/mail/<username> and ~/mbox? I saw https://wiki.dovecot.org/Namespaces#Mixed_mbox_and_Maildir but I it did not work if when I tried to add 2 times a mbox location. Thanks for your help.

2 1

Errors and dovecot crashing...
by SH Development 06 Dec '17

06 Dec '17

Our production dovecot/postfix server has been stable for a number of years. In the last month or so, we are seeing increasing errors such as these: Dec 6 15:51:20 mail dovecot: imap(redacted(a)lilythicket.com): Warning: Transaction log file /home/vmail/lilythicket.com/diana/Maildir/dovecot.index.log was locked for 322 seconds Dec 6 15:50:54 mail dovecot: imap(redacted(a)theormans.com): Warning: Maildir /home/vmail/theormans.com/connieorman/Maildir/.Junk: Synchronization took 66 seconds (1 new msgs, 0 flag change attempts, 0 expunge attempts) Dec 6 15:51:43 mail dovecot: master: Error: service(pop3-login): Initial status notification not received in 30 seconds, killing the process Dec 6 15:51:43 mail dovecot: master: Error: service(pop3-login): command startup failed, throttling Dec 6 15:51:43 mail dovecot: master: Error: service(imap-login): child 5868 killed with signal 9 Dec 6 15:51:43 mail dovecot: master: Error: service(imap-login): command startup failed, throttling Dec 6 15:55:31 mail dovecot: imap-login: Fatal: Corrupted SSL ssl-parameters.dat in state_dir: Truncated file Dec 6 15:55:32 mail dovecot: pop3-login: Fatal: Error reading configuration: Timeout reading config from /var/run/dovecot/config And so forth. Seems to be all over the place. The server slows down to a crawl. Restarting dovecot or postfix has no effect on the problem. Only a server reboot solves it, temporarily. Sometimes for weeks, sometimes for hours. The hard drive SMART status reads okay. During this time, of course, users cannot connect to check their email. Thoughts on where to go to troubleshoot this and why it’s happening? Ethon

1 0

Re: Howto authenticate smartPhone via Active Directory
by Mark Foley 06 Dec '17

06 Dec '17

On Tue, 5 Dec 2017 16:42:15 +0100 mj <lists(a)merit.unu.edu> wrote: > Hi, > > Not much time to reply now. > > On 12/05/2017 05:21 AM, Mark Foley wrote: > > mj - thanks! That the first useful example I've received from any forum/list. I'm getting ready > > to try my config (have to do so after hours), but I have some probably simple-minded questions: > > Well, that looks as if you are testing/trying out on your production > machine. Why not setup a seperate (virtual?) test server to play with..? > Use the same os version, with the same dovecot version. > Or clone your production machine, so you can test as much as you like, > without time pressure, at any given time. I've been playing with this ldap authentication for a couple of years off and on. Time isn't a problem. The issue with setting up a test environment is that I really need the domain workstations and external smartphone attempting to connect when I make a change so I can follow what's going on in the Dovecot log and maillog. It's rather simple to test a change, then put things back. I'll likely not go the test platform route for now, but thanks for the input. > > Your example is not the complete dovecot-ldap.conf.ext file, right? Have you just given me > > differences in your config from the "original"? You've kept the hosts, base, ldap_version, > > scope, deref, debug_level, and auth_bind_userdn settings in your config, right? > Not the complete file, no. I just provided the essentials. > [deleted] Ok, here's what I've come up with for dovecot-ldap.conf.ext hosts = mail.hprs.local base = dc=mail, dc=hprs, dc=local ldap_version = 3 scope = subtree deref = never debug_level = -1 auth_bind = yes auth_bind_userdn = %n@dom dn = cn=Administrator,cn=users,dc=hprs,dc=local dnpass = ******* user_filter = (&(objectclass=person)(sAMAccountName=%n)(!(userAccountControl=514))) pass_filter = (&(objectclass=person)(sAMAccountName=%n)(!(userAccountControl=514))) I've enabled auth-ldap.conf.ext in 10-auth.conf. My doveconf is listed at bottom. Unfortuntately, this doesn't work. My remote devices are not even showing as trying to connect. For internal domain LAN users I get: Dec 06 01:08:10 imap-login: Info: Disconnected: Auth process broken (disconnected before auth was ready, waited 30 secs): user=<>, rip=192.168.0.52, lip=192.168.0.2, session=<3/ZyxaVfE8PAqAA0> I do see ldap listening on 389, imap[s] (Dovecot) listening on 143 and 993, these last two are opened externally through the firewall. > For the rest: my advise is that you *really* need to pay around with > this much more. Get yourself a test environment, and play and test. > > Plus: read some dovecot/ad howto's, and try things in your own environment. > > Quick google returns: > https://www.howtoforge.com/postfix-dovecot-authentication-against-active-di… > I know my level of sophistication on this must sound like I've glibly posted a question hoping someone will do the work for me without my having to do any thinking myself, but believe me, I've been reading and experimenting with this for a very long time. I've got internal AD authentication working with GSSAPI and I've got a rather complex checkpassword program able to do authentication, so I don't think I'm a complete moron, although this project makes me feel that way. Now, I just want smartphones to authenticate with their owners' domain credentials and get them out of /etc/passwd. I believe I've read all the Dovecot wikis on ldap plus things from many other sites. I've been to that howtoforge site before. It mostly deals with setting up Postfix, which I'm not using. The dovecot bits make more sense in light of your feedback. I've tried that ldapsearch example: ldapsearch -x -h ad.example.com -D 'vmail' -W -b 'cn=users,dc=example,dc=com' with the domain user I specified in my dovecot-ldap.conf.ext with my host and dc info and I get the error ldap_bind: Strong(er) authentication required (8) additional info: BindSimple: Transport encryption required. I've seen confusing postings on this error having to do with port 636 and LDAPS -- no idea what they're talking about. My user is the Samba/domain administrator and has a pretty complex password. None of the sites I've visited on this error indicate it has anything to do with the actual password's complexity. Perhaps I'm just thick-skulled with all this. If you or anyone can see something obviously wrong with my conf, or have any suggestion at all on a baby step I can take to incm me forward, please let me know. Thanks, --Mark doveconf -n: # 2.2.33.2 (d6601f4ec): /usr/local/etc/dovecot/dovecot.conf # OS: Linux 4.4.88 x86_64 Slackware 14.2 auth_debug = yes auth_debug_passwords = yes auth_gssapi_hostname = $ALL auth_krb5_keytab = /etc/dovecot/dovecot.keytab auth_mechanisms = plain login gssapi auth_use_winbind = yes auth_username_format = %n auth_verbose = yes auth_verbose_passwords = plain disable_plaintext_auth = no info_log_path = /var/log/dovecot_info mail_location = maildir:~/Maildir passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } passdb { driver = shadow } protocols = imap ssl_cert = </etc/ssl/certs/OHPRS/GoDaddy/Apache/2016-08-10/54e789087d419b6e.crt ssl_key = # hidden, use -P to show it userdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } userdb { driver = passwd } verbose_ssl = yes

2 1

Re: Disabling index files?
by Stroller 06 Dec '17

06 Dec '17

> On 5 Dec 2017, at 15:32, Gregory Finch <gfinch(a)ldmltd.ca> wrote: >> >> How do I disable the index files, please? >> … >> > > from https://wiki2.dovecot.org/MailLocation#Index_files > > add :INDEX=MEMORY to your mail_location line, ie: > > mail_location = maildir:~/Maildir:INDEX=MEMORY Many thanks! That works perfectly. Stroller.

1 0

Do we really need Solr commit as cronjob?
by Gao 06 Dec '17

06 Dec '17

I am testing Solr FTS on dovecot. Read online that some suggested to run cronjob commit every minute, and optimize once a day. I am using Solr 7.1.0 and I see some configurations: In /etc/default/solr.in.sh: #SOLR_OPTS="$SOLR_OPTS -Dsolr.autoSoftCommit.maxTime=3000" #SOLR_OPTS="$SOLR_OPTS -Dsolr.autoCommit.maxTime=60000" Also in solrconfig.xml: <autoCommit> <maxTime>${solr.autoCommit.maxTime:15000}</maxTime> <openSearcher>false</openSearcher> </autoCommit> <autoSoftCommit> <maxTime>${solr.autoSoftCommit.maxTime:-1}</maxTime> </autoSoftCommit> So my question is do I still need run cronjob for commit? Do I need uncomment these lines in the solr.in.sh? Does my solrconfig.xml overwrite the setting in solr.in.sh? Thanks for help.

2 1

Re: Howto authenticate smartPhone via Active Directory
by Aki Tuomi 05 Dec '17

05 Dec '17

with passdb ldap i guess. ---Aki TuomiDovecot oy -------- Original message --------From: Mark Foley <mfoley(a)ohprs.org> Date: 03/12/2017 21:18 (GMT+02:00) To: dovecot(a)dovecot.org Subject: Re: Howto authenticate smartPhone via Active Directory Yes, you are right. This link: https://www.redips.net/linux/android-email-postfix-auth/#section2 shows: passdb pam { } used for authenticating Android. Problem #1 is that Slackware does not ship with PAM and the AD/DC Samba4 does not use it. It is used on Slackware for a domain member, but I'm not sure I should try configuring PAM on the AD/DC. Is there some otherway I can get authentication using domain credentials besides pam? the phone can send user and password. --Mark -----Original Message----- > Date: Sun, 03 Dec 2017 15:22:56 +0200 > Subject: Re: Howto authenticate smartPhone via Active Directory > From: Aki Tuomi <aki.tuomi(a)dovecot.fi> > To: Mark Foley <mfoley(a)ohprs.org>, dovecot(a)dovecot.org > > Actually you are authenticating gssapi clients from ad and everyone else from shadow. maybe you need to configure pam module? > ---Aki TuomiDovecot oy > > -------- Original message -------- > From: Mark Foley <mfoley(a)ohprs.org> > Date: 03/12/2017 06:03 (GMT+02:00) > To: dovecot(a)dovecot.org > Subject: Howto authenticate smartPhone via Active Directory > I have a Samba4 Active Directory server. Dovecot authenticates AD Users with domain credentials > using GSSAPI (Thunderbird client). I believe I have Dovecot set to attempt authentication via > shadow first and. failing that, it does authenticate via GSSAPI. > > Smartphones connect to Dovecot via port 143 and SSL. They are not domain members so if the > shadow authentication fails, no other methods are tried and no connection is made. > > What can I do with my dovecot config to fix this? > > > doveconf -n > # 2.2.15: /usr/local/etc/dovecot/dovecot.conf > # OS: Linux 4.4.88 x86_64 Slackware 14.2 > auth_debug = yes > auth_debug_passwords = yes > auth_gssapi_hostname = $ALL > auth_krb5_keytab = /etc/dovecot/dovecot.keytab > auth_mechanisms = plain login gssapi > auth_use_winbind = yes > auth_username_format = %n > auth_verbose = yes > auth_verbose_passwords = plain > disable_plaintext_auth = no > info_log_path = /var/log/dovecot_info > mail_location = maildir:~/Maildir > passdb { > driver = shadow > } > protocols = imap > ssl_cert = </etc/ssl/certs/OHPRS/GoDaddy/Apache/2016-08-10/54e789087d419b6e.crt > ssl_key = </etc/ssl/certs/OHPRS/GoDaddy/mail.ohprs.org.key > userdb { > driver = passwd > } > verbose_ssl = yes > > Thanks, Mark

3 6

Disabling index files?
by Stroller 05 Dec '17

05 Dec '17

The wiki says: > Each mailbox has its own separate index files. **If the index files are disabled**, the same structures are still kept in the memory, except cache file is disabled completely (because the client probably won't fetch the same data twice within a connection). [1] I tend to grep my maildirs quite often, and use the output to cp emails to other folders, so it's annoying when the dovecot.index.cache files show up in the results. How do I disable the index files, please? My mail server is hardly loaded, so I don't think it'll be a problem to keep the caching in memory. I can find `mailbox_list_index = no` in /etc/dovecot/conf.d/10-mail.conf but this seems to be enabled by default, and it makes no difference when I enable it explicitly - deleted dovecot.index.cache are recreated when Dovecot is restarted. The setting `mbox_min_index_size` tends to suggests it's only for mbox files, not maildirs? Thanks in advance for any help you can offer, Stroller. [1] https://wiki.dovecot.org/IndexFiles

4 3

Re: Recommended tool for migrating IMAP servers
by Joseph Tam 05 Dec '17

05 Dec '17

"Davide Marchi" <danjde(a)msw.it> writes: >> UW-IMAP's mailutil, imapsync, YippieMove and Larch. Whatever you use, *don't* use UW-IMAP's mailutil unless you got lots of time to kill. It is dreadfully slow -- I used it to export some of my users' mailboxes to Gmail or other remote mail servers, and I could almost cut&paste the messages faster. Like Aki said, if you have the same mailbox format and FS access on both sides, rsync is much simpler. You can also try exporting the old mailboxes via NFS, and with some artful symlinks, march through your user mailboxes replacing the symlinks with the instantiated local copies and have almost zero downtime. Joseph Tam <jtam.home(a)gmail.com>

4 3

Can passdb be bypassed for non-plaintext authentication mechanisms
by Mark Foley 05 Dec '17

05 Dec '17

I am using Active directory authentication via gssapi for most users. In dovecot.conf I have: auth_mechanisms = plain login gssapi auth_use_winbind = yes I also have passdb { driver = shadow } userdb { driver = passwd } for those few users who are NOT AD users. Even though the AD users do not exist in /etc/passwd or /etc/shadow, Dovecot ALWAYS first looks them up in shadow, which ALWAYS fails. The https://wiki2.dovecot.org/PasswordDatabase wiki says, "these databases can't be used with non-plaintext authentication mechanisms." Is there a way to bypass checking passdb (and userdb?) for these mechanism? --Mark

2 1

Re: Recommended tool for migrating IMAP servers
by Davide Marchi 05 Dec '17

05 Dec '17

[..] > Hi, > > I vouch for imapsync. Have used it in the past with quite a big amount > of > emails. > > cheers. > > x0p Ah, thanks x0! > Also if you have fs access on both servers, and you are using maildir, > plain rsync works just as well. > > Aki no, I've not fs access on both servers! :-/ > If you want to preserve IMAP UID:s and possibly also POP3 UIDL:s then > dovecot internal > dsync is the only tool that can do it. > > With every other tool you will face end users needing to invalidate > their local caches and > redownloading all headers if not also all mail bodies. > > Sami > Can I use this tool even if I do not know the other remote server typology? Many thanks to all!! Davide -- firma cosmogoniA <https://www.cosmogonia.org/> n o p r o v a r e n o f a r e o n o n f a r e n o n c e p r o v a r e

5 5

Re: Dovecot lmtp doesn't log
by Tomislav Perisic 04 Dec '17

04 Dec '17

Does anyone have any idea regarding this? On 17 Nov 2017 11:36, "Tomislav Perisic" <tomiperisic(a)gmail.com> wrote: Hi, We have 2 servers, server A and server B. Server A has: Postfix dovecot-2.2.33.2-1.el6.x86_64 Server B has: dovecot-2.2.33.2-1.el6.x86_64 dovecot-pigeonhole-2.2.33.2-1.el6.x86_64 Server A receives email on postfix, dovecot then takes that email from postfix and proxies it to Server B Dovecot. Dovecot on Server B takes the proxied email and delivers it with lmtp to the user inboxes. The problem is that the dovecot on server B Doesn't log anything regarding the emails that are being delivered to the mailbox via lmtp. Dovecot on server A logs everything perfectly regarding the proxy, so my assumption is that there is an issue with Dovecot lmtp logging. We changed the logging from syslog directly to a file and we noticed the same problem, missing log entries. We also tried turning on verbose logging and it didn't help. Server B: Red Hat 6.7 x86_64 rpm -qa | grep dove dovecot-2.2.33.2-1.el6.x86_64 dovecot-pigeonhole-2.2.33.2-1.el6.x86_64 doveconf -n # 2.2.33.2: /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.21 auth_cache_negative_ttl = 0 auth_debug = yes auth_debug_passwords = yes auth_verbose = yes listen = * mail_debug = yes mail_gid = mail mail_location = maildir:~/Maildir mail_plugins = " quota zlib" mail_uid = vmail managesieve_notify_capability = mailto namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Spam { auto = subscribe special_use = \Junk } mailbox Trash { auto = subscribe special_use = \Trash } mailbox Virus { auto = subscribe } plugin { quota = maildir:User quota sieve_extensions = +editheader sieve_max_actions = 32 sieve_max_redirects = 4 sieve_max_script_size = 1M sieve_quota_max_scripts = 0 sieve_trace_debug = yes sieve_trace_level = matching sieve_vacation_dont_check_recipient = yes sieve_vacation_send_from_recipient = yes sieve_vacation_use_original_recipient = yes zlib_save = gz zlib_save_level = 6 } protocols = imap pop3 lmtp sieve service auth { unix_listener auth-userdb { group = mail mode = 0666 user = vmail } } service lmtp { inet_listener lmtp { port = xx } } service managesieve-login { inet_listener sieve { port = xx } service_count = 1 } protocol lmtp { mail_plugins = " quota zlib sieve mail_log notify" } protocol imap { mail_plugins = " quota zlib imap_quota imap_zlib" } protocol sieve { managesieve_implementation_string = dovecot managesieve_logout_format = bytes ( in=%i : out=%o ) managesieve_max_line_length = 65536 managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave }

3 6

Re: Howto authenticate smartPhone via Active Directory
by Mark Foley 03 Dec '17

03 Dec '17

Yes, you are right. This link: https://www.redips.net/linux/android-email-postfix-auth/#section2 shows: passdb pam { } used for authenticating Android. Problem #1 is that Slackware does not ship with PAM and the AD/DC Samba4 does not use it. It is used on Slackware for a domain member, but I'm not sure I should try configuring PAM on the AD/DC. Is there some otherway I can get authentication using domain credentials besides pam? the phone can send user and password. --Mark -----Original Message----- > Date: Sun, 03 Dec 2017 15:22:56 +0200 > Subject: Re: Howto authenticate smartPhone via Active Directory > From: Aki Tuomi <aki.tuomi(a)dovecot.fi> > To: Mark Foley <mfoley(a)ohprs.org>, dovecot(a)dovecot.org > > Actually you are authenticating gssapi clients from ad and everyone else from shadow. maybe you need to configure pam module? > ---Aki TuomiDovecot oy > > -------- Original message -------- > From: Mark Foley <mfoley(a)ohprs.org> > Date: 03/12/2017 06:03 (GMT+02:00) > To: dovecot(a)dovecot.org > Subject: Howto authenticate smartPhone via Active Directory > I have a Samba4 Active Directory server. Dovecot authenticates AD Users with domain credentials > using GSSAPI (Thunderbird client). I believe I have Dovecot set to attempt authentication via > shadow first and. failing that, it does authenticate via GSSAPI. > > Smartphones connect to Dovecot via port 143 and SSL. They are not domain members so if the > shadow authentication fails, no other methods are tried and no connection is made. > > What can I do with my dovecot config to fix this? > > > doveconf -n > # 2.2.15: /usr/local/etc/dovecot/dovecot.conf > # OS: Linux 4.4.88 x86_64 Slackware 14.2 > auth_debug = yes > auth_debug_passwords = yes > auth_gssapi_hostname = $ALL > auth_krb5_keytab = /etc/dovecot/dovecot.keytab > auth_mechanisms = plain login gssapi > auth_use_winbind = yes > auth_username_format = %n > auth_verbose = yes > auth_verbose_passwords = plain > disable_plaintext_auth = no > info_log_path = /var/log/dovecot_info > mail_location = maildir:~/Maildir > passdb { > driver = shadow > } > protocols = imap > ssl_cert = </etc/ssl/certs/OHPRS/GoDaddy/Apache/2016-08-10/54e789087d419b6e.crt > ssl_key = </etc/ssl/certs/OHPRS/GoDaddy/mail.ohprs.org.key > userdb { > driver = passwd > } > verbose_ssl = yes > > Thanks, Mark

1 0

Upgrade to 2.2.32 from 2.2.15 failed
by Mark Foley 03 Dec '17

03 Dec '17

I have a problem. I have been running Dovecot 2.2.15 and I'd like to upgrade. My distro (Slackware) has dovecot 2.2.32 available. I downloaded and installed that, but it didn't work. No one was able to get messages from the dovecot server on their workstations. The following is the entire dovecot log file from startup to the last message generated. No more messages went into the logfile after line 76, even with clients trying to connect. The 174.233.134.88 IP is from an external user connecting from his iPhone. The normal successful message from this user are shown at bottom. I'm suspecting something to do with line 18 where is says "Auth process broken." If anyone has any insight I'd deeply appreciate it as I'd love to upgrade. THX -- Mark 1 Nov 24 19:22:24 master: Info: Dovecot v2.2.32 (dfbe293d4) starting up for imap (core dumps disabled) 2 Nov 24 19:22:24 ssl-params: Info: Generating SSL parameters 3 Nov 24 19:22:26 ssl-params: Info: SSL parameters regeneration completed 4 Nov 24 19:23:02 imap-login: Debug: SSL: where=0x10, ret=1: before/accept initialization [174.233.134.88] 5 Nov 24 19:23:02 imap-login: Debug: SSL: where=0x2001, ret=1: before/accept initialization [174.233.134.88] 6 Nov 24 19:23:02 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read client hello A [174.233.134.88] 7 Nov 24 19:23:02 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write server hello A [174.233.134.88] 8 Nov 24 19:23:02 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write certificate A [174.233.134.88] 9 Nov 24 19:23:02 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write key exchange A [174.233.134.88] 10 Nov 24 19:23:02 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write server done A [174.233.134.88] 11 Nov 24 19:23:02 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 flush data [174.233.134.88] 12 Nov 24 19:23:02 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read client certificate A [174.233.134.88] 13 Nov 24 19:23:02 imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3 read client key exchange A [174.233.134.88] 14 Nov 24 19:23:02 imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3 read client key exchange A [174.233.134.88] 15 Nov 24 19:23:02 auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth 16 Nov 24 19:23:02 auth: Debug: Module loaded: /usr/lib64/dovecot/auth/lib20_auth_var_expand_crypt.so 17 Nov 24 19:23:02 auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth 18 Nov 24 19:23:02 imap-login: Info: Disconnected: Auth process broken (disconnected before auth was ready, waited 0 secs): user=<>, rip=174.233.134.88, lip=98.102.63.107, TLS handshaking, session=<idAcrMNe8xqu6YZY> 19 Nov 24 19:23:02 imap-login: Debug: SSL: where=0x10, ret=1: before/accept initialization [174.233.134.88] 20 Nov 24 19:23:02 imap-login: Debug: SSL: where=0x2001, ret=1: before/accept initialization [174.233.134.88] 21 Nov 24 19:23:02 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read client hello A [174.233.134.88] 22 Nov 24 19:23:02 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write server hello A [174.233.134.88] 23 Nov 24 19:23:02 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write certificate A [174.233.134.88] 24 Nov 24 19:23:02 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write key exchange A [174.233.134.88] 25 Nov 24 19:23:02 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write server done A [174.233.134.88] 26 Nov 24 19:23:02 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 flush data [174.233.134.88] 27 Nov 24 19:23:02 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read client certificate A [174.233.134.88] 28 Nov 24 19:23:02 imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3 read client key exchange A [174.233.134.88] 29 Nov 24 19:23:02 imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3 read client key exchange A [174.233.134.88] 30 Nov 24 19:23:02 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read client key exchange A [174.233.134.88] 31 Nov 24 19:23:02 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read certificate verify A [174.233.134.88] 32 Nov 24 19:23:02 imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3 read finished A [174.233.134.88] 33 Nov 24 19:23:03 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read finished A [174.233.134.88] 34 Nov 24 19:23:03 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write change cipher spec A [174.233.134.88] 35 Nov 24 19:23:03 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write finished A [174.233.134.88] 36 Nov 24 19:23:03 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 flush data [174.233.134.88] 37 Nov 24 19:23:03 imap-login: Debug: SSL: where=0x20, ret=1: SSL negotiation finished successfully [174.233.134.88] 38 Nov 24 19:23:03 imap-login: Debug: SSL: where=0x2002, ret=1: SSL negotiation finished successfully [174.233.134.88] 39 Nov 24 19:23:04 auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth 40 Nov 24 19:23:04 auth: Debug: Module loaded: /usr/lib64/dovecot/auth/lib20_auth_var_expand_crypt.so 41 Nov 24 19:23:04 auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth 42 Nov 24 19:23:04 imap-login: Info: Disconnected: Auth process broken (disconnected before auth was ready, waited 2 secs): user=<>, rip=174.233.134.88, lip=98.102.63.107, TLS, session=<YGw7rMNe+Rqu6YZY> 43 Nov 24 19:23:04 imap-login: Debug: SSL alert: close notify [174.233.134.88] 44 Nov 24 19:23:05 imap-login: Debug: SSL: where=0x10, ret=1: before/accept initialization [174.233.134.88] 45 Nov 24 19:23:05 imap-login: Debug: SSL: where=0x2001, ret=1: before/accept initialization [174.233.134.88] 46 Nov 24 19:23:05 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read client hello A [174.233.134.88] 47 Nov 24 19:23:05 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write server hello A [174.233.134.88] 48 Nov 24 19:23:05 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write certificate A [174.233.134.88] 49 Nov 24 19:23:05 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write key exchange A [174.233.134.88] 50 Nov 24 19:23:05 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write server done A [174.233.134.88] 51 Nov 24 19:23:05 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 flush data [174.233.134.88] 52 Nov 24 19:23:05 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read client certificate A [174.233.134.88] 53 Nov 24 19:23:05 imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3 read client key exchange A [174.233.134.88] 54 Nov 24 19:23:05 imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3 read client key exchange A [174.233.134.88] 55 Nov 24 19:23:05 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read client key exchange A [174.233.134.88] 56 Nov 24 19:23:05 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read certificate verify A [174.233.134.88] 57 Nov 24 19:23:05 imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3 read finished A [174.233.134.88] 58 Nov 24 19:23:05 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read finished A [174.233.134.88] 59 Nov 24 19:23:05 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write change cipher spec A [174.233.134.88] 60 Nov 24 19:23:05 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write finished A [174.233.134.88] 61 Nov 24 19:23:05 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 flush data [174.233.134.88] 62 Nov 24 19:23:05 imap-login: Debug: SSL: where=0x20, ret=1: SSL negotiation finished successfully [174.233.134.88] 63 Nov 24 19:23:05 imap-login: Debug: SSL: where=0x2002, ret=1: SSL negotiation finished successfully [174.233.134.88] 64 Nov 24 19:23:08 auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth 65 Nov 24 19:23:08 auth: Debug: Module loaded: /usr/lib64/dovecot/auth/lib20_auth_var_expand_crypt.so 66 Nov 24 19:23:08 auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth 67 Nov 24 19:23:08 imap-login: Info: Disconnected: Auth process broken (disconnected before auth was ready, waited 3 secs): user=<>, rip=174.233.134.88, lip=98.102.63.107, TLS, session=<7ZF4rMNe8hqu6YZY> 68 Nov 24 19:23:08 imap-login: Debug: SSL alert: close notify [174.233.134.88] 69 Nov 24 19:23:16 auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth 70 Nov 24 19:23:16 auth: Debug: Module loaded: /usr/lib64/dovecot/auth/lib20_auth_var_expand_crypt.so 71 Nov 24 19:23:16 auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth 72 Nov 24 19:23:16 imap-login: Info: Disconnected: Auth process broken (disconnected before auth was ready, waited 0 secs): user=<>, rip=192.168.0.54, lip=192.168.0.2, session=<6bbyrMNeGM/AqAA2> 73 Nov 24 19:24:13 auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth 74 Nov 24 19:24:13 auth: Debug: Module loaded: /usr/lib64/dovecot/auth/lib20_auth_var_expand_crypt.so 75 Nov 24 19:24:13 auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth 76 Nov 24 19:24:13 imap-login: Info: Disconnected: Auth process broken (disconnected before auth was ready, waited 0 secs): user=<>, rip=192.168.0.52, lip=192.168.0.2, session=<b75YsMNeb9nAqAA0> Normal OK messages from dovecot 2.2.15: Nov 24 23:50:49 imap-login: Debug: SSL: where=0x20, ret=1: SSL negotiation finished successfully [174.233.134.88] Nov 24 23:50:49 imap-login: Debug: SSL: where=0x2002, ret=1: SSL negotiation finished successfully [174.233.134.88] Nov 24 23:50:49 auth: Debug: client in: AUTH 1 PLAIN service=imap secured session=vQnEacde6QCu6YZY lip=98.102.63.107 rip=174.233.134.88 lport=993 rport=6889 resp=AG0udGhlbQAhbXRfMTAxOQ== (previous base64 data may contain sensitive data) Nov 24 23:50:49 auth-worker(17650): Debug: shadow(m.them,174.233.134.88): lookup Nov 24 23:50:49 auth: Debug: client passdb out: OK 1 user=m.them Finally, the 2.2.15 doveconf, which I used the same for 2.2.32: > doveconf -n # 2.2.15: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 4.4.88 x86_64 Slackware 14.2 auth_debug = yes auth_debug_passwords = yes auth_gssapi_hostname = $ALL auth_krb5_keytab = /etc/dovecot/dovecot.keytab auth_mechanisms = plain login gssapi auth_use_winbind = yes auth_username_format = %n auth_verbose = yes auth_verbose_passwords = plain disable_plaintext_auth = no info_log_path = /var/log/dovecot_info mail_location = maildir:~/Maildir passdb { driver = shadow } protocols = imap ssl_cert = </etc/ssl/certs/OHPRS/GoDaddy/Apache/2016-08-10/54e789087d419b6e.crt ssl_key = </etc/ssl/certs/OHPRS/GoDaddy/mail.ohprs.org.key userdb { driver = passwd } verbose_ssl = yes

3 4

Dovecot (doveadm, ssl, sync) - SSL error
by Arkadiusz Majewski 03 Dec '17

03 Dec '17

Hello! I've got a problem to run syncing between both dovecot services on the separate servers. The error indicates to the problem with SSL. Directly using openssl command to connect from one server to other and vice versa is passed without any errors. OS: FreeBSD 11.1-RELEASE-p4 Dovecot: 2.2.33.2_2 and the older one dovecot-2.2.32.1_1 (or similar) - build by ports. OpenSSL: 1.0.2k-freebsd 26 Jan 2017 dovecot: doveadm(10.18.1.15): Error: doveadm client disconnected before handshake: SSL_accept() failed: error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol dovecot.conf (on both servers): mail_plugins = $mail_plugins notify replication service replicator { process_min_avail = 1 } service aggregator { fifo_listener replication-notify-fifo { user = dovecot } unix_listener replication-notify { user = dovecot } } service replicator { unix_listener replicator-doveadm { mode = 0600 } } replication_max_conns = 10 service doveadm { inet_listener { port = 12130 ssl = yes } } ssl = required ssl_protocols = SSLv3 TLSv1 TLSv1.1 TLSv1.2 ssl_cert = </usr/local/etc/dovecot/ssl/cert.crt ssl_key = </usr/local/etc/dovecot/ssl/cert.key ssl_client_ca_file = </usr/local/etc/dovecot/ssl/ca.pem ssl_client_ca_dir = /usr/local/etc/dovecot/ssl Thank you in advance for any help. Kind Regards, Arkadiusz Majewski

1 0

doveadm with 2-level user/domain quotas scheme
by Max Kostikov 03 Dec '17

03 Dec '17

Hi! I believe now it a right time to return to previous discussion about Dovecot's in 2-level user/domain quotas scheme wich was finished here https://dovecot.org/pipermail/dovecot/2015-October/102346.html Here is configuration. 1. Dictionary storage placed in MySQL table "quota2" root@localhost [(none)]> SHOW COLUMNS FROM quota2 FROM exim; +----------+--------------+------+-----+---------+-------+ | Field | Type | Null | Key | Default | Extra | +----------+--------------+------+-----+---------+-------+ | username | varchar(100) | NO | PRI | NULL | | | bytes | bigint(20) | NO | | 0 | | | messages | int(11) | NO | | 0 | | +----------+--------------+------+-----+---------+-------+ 3 rows in set (0,00 sec) 2. Two types of quota - for domains with index "2" and for users without index. ... plugin { quota = dict:user_quota::proxy::sqluserquota quota_rule2 = Trash:storage=+10%% quota_rule3 = Junk:storage=+10%% quota_warning = storage=100%% quota-exceeded 100 %u quota_warning2 = storage=95%% quota-warning 95 %u quota_warning3 = storage=90%% quota-warning 90 %u quota_warning4 = storage=75%% quota-warning 75 %u quota2 = dict:domain_quota:%d:proxy::sqldomainquota } dict { sqluserquota = mysql:/usr/local/etc/dovecot/dovecot-dict-sql-user.conf sqldomainquota = mysql:/usr/local/etc/dovecot/dovecot-dict-sql-domain.conf } service dict { unix_listener dict { user = mailnull mode = 0660 } } ... 3. Both stored in the same table and files "dovecot-dict-sql-user.conf" and "dovecot-dict-sql-domain.conf" are identical. connect = host=localhost dbname=exim user=user password=password map { pattern = priv/quota/storage table = quota2 username_field = username value_field = bytes } map { pattern = priv/quota/messages table = quota2 username_field = username value_field = messages } All quotas for users and domains are calculates correctly until "doveadm quota recalc" use. root@beta:~ # doveadm quota recalc -u foo(a)my.domain root@beta:~ # doveadm quota get -u foo(a)my.domain Quota name Type Value Limit % user_quota STORAGE 7850978 - 0 user_quota MESSAGE 32474 - 0 domain_quota STORAGE 7850978 - 0 domain_quota MESSAGE 32474 - , 0 If we look at MySQL table directly foo(a)my.domain quota was counted right but last users data was copied into domains values. ... root@localhost [exim]> SELECT * FROM quota2 WHERE username LIKE '%my.domain'; +-------------------+-------------+----------+ | username | bytes | messages | +-------------------+-------------+----------+ | foo(a)my.domain | 8039401321 | 32474 | | my.domain | 8039401321 | 32474 | | john(a)my.domain | 3455382803 | 11142 | | mary(a)my.domain | 544637146 | 1965 | +-------------------+-------------+----------+ 4 rows in set (0.00 sec) ... Also you may see that "doveadm quota get" above gave wrong values. For domain its produces empty output root@beta:~ # doveadm quota get -u my.domain doveadm(my.domain): Error: User doesn't exist Quota name Type Value Limit % Than if we are trying to calculate quota for domain or for all users (-A) it produces an error. root@beta:~ # doveadm quota recalc -u my.domain doveadm(my.domain): Error: User doesn't exist root@beta:~ # doveadm quota recalc -A Error: User listing returned failure doveadm: Error: Failed to iterate through some users So "doveadm quota" almost useless for such quotas scheme except single user. I wrote small shell-script "dovequota.sh" to resolve this issue but I believe that doveadm need to be fixed too. (script may be found here https://kostikov.co/problemy-uchyota-domennoj-kvoty-v-dovecot-2) -- With best regards, Max Kostikov BBM: 24CA5DF8 | W: https://kostikov.co

1 0

Re: Howto authenticate smartPhone via Active Directory
by Aki Tuomi 03 Dec '17

03 Dec '17

Actually you are authenticating gssapi clients from ad and everyone else from shadow. maybe you need to configure pam module? ---Aki TuomiDovecot oy -------- Original message --------From: Mark Foley <mfoley(a)ohprs.org> Date: 03/12/2017 06:03 (GMT+02:00) To: dovecot(a)dovecot.org Subject: Howto authenticate smartPhone via Active Directory I have a Samba4 Active Directory server. Dovecot authenticates AD Users with domain credentials using GSSAPI (Thunderbird client). I believe I have Dovecot set to attempt authentication via shadow first and. failing that, it does authenticate via GSSAPI. Smartphones connect to Dovecot via port 143 and SSL. They are not domain members so if the shadow authentication fails, no other methods are tried and no connection is made. What can I do with my dovecot config to fix this? > doveconf -n # 2.2.15: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 4.4.88 x86_64 Slackware 14.2 auth_debug = yes auth_debug_passwords = yes auth_gssapi_hostname = $ALL auth_krb5_keytab = /etc/dovecot/dovecot.keytab auth_mechanisms = plain login gssapi auth_use_winbind = yes auth_username_format = %n auth_verbose = yes auth_verbose_passwords = plain disable_plaintext_auth = no info_log_path = /var/log/dovecot_info mail_location = maildir:~/Maildir passdb { driver = shadow } protocols = imap ssl_cert = </etc/ssl/certs/OHPRS/GoDaddy/Apache/2016-08-10/54e789087d419b6e.crt ssl_key = </etc/ssl/certs/OHPRS/GoDaddy/mail.ohprs.org.key userdb { driver = passwd } verbose_ssl = yes Thanks, Mark

1 0

mmap() Error, Invalid Argument - Double slash in path?
by GE Junk 02 Dec '17

02 Dec '17

I get a ton of these mmap() errors in the log. I noticed there's a double slash before Maildir. Is this normal? Config error? Dovecot bug? dovecot: imap(email(a)email.net): Error: mmap() failed with file /shares/email/vmail/vmail1/email.net/e/m/a/email-2017.02.25.08.09.39//Maildir/dovecot.index.cache: Invalid argument I'm running dovecot version 2.2.22 Thanks Eric

2 2

Re: Lua Auth
by Aki Tuomi 02 Dec '17

02 Dec '17

-------- Original message --------From: Mark Moseley <moseleymark(a)gmail.com> Date: 02/12/2017 02:34 (GMT+02:00) To: Cc: Dovecot Mailing List <dovecot(a)dovecot.org> Subject: Re: Lua Auth On Thu, Nov 30, 2017 at 5:26 AM, Stephan Bosch <s.bosch(a)ox.io> wrote: > > > Op 29-11-2017 om 6:17 schreef Aki Tuomi: > >> On November 29, 2017 at 4:37 AM Mark Moseley <moseleymark(a)gmail.com> >>> wrote: >>> >>> >>> Just happened to be surfing the docs and saw this. This is beyond >>> awesome: >>> >>> https://wiki2.dovecot.org/AuthDatabase/Lua >>> >>> Any words of wisdom on using it? I'd be putting a bunch of mysql logic in >>> it. Any horrible gotchas there? When it says 'blocking', should I assume >>> that means that a auth worker process will *not* accept any new auth >>> lookups until both auth_passdb_lookup() and auth_userdb_lookup() have >>> completed (in which I'd be doing several mysql calls)? If that's the >>> case, >>> I assume that the number of auth workers should be bumped up. >>> >>> And is a 2.3 release fairly imminent? >>> >> Hi! >> >> This feature was added very recently, and there is very little >> operational experience on it. As the docs should say, blocking=yes means >> that an auth worker is used, and yes, it will block each auth worker during >> authentication, but what we tried, it should perform rather nicely. >> >> The most important gotcha is to always test your lua code rigorously, >> because there is not much we can do to save you. >> >> It should be present in master branch, so if someone feels like trying it >> out, please let us know if you find any bugs or strangeness. It's not >> present in nightlies yet. >> >> We are planning on releasing 2.3.0 this year. >> > > The Xi package builder has this feature enabled since yesterday. It is > available in the dovecot-lua package; the first Xi package that doesn't > have an official Debian equivalent (yet anyway). > > > I've been playing with Lua auth and so far no issues. I was previously putting together a very ugly MySQL stored procedure. Using Lua would be a lot easier (esp when it comes to returning an arbitrary number of columns). I'd love to see any test Lua code that the dovecot team has been playing around with (and realize it's not remotely production-ready, so don't worry about caveats I did have a couple of questions though: 1) Is the data returned by Lua auth not cacheable? I've got the following settings (and I'm just using Lua in the userdb lookup, not passdb -- passdb is doing a lightweight SQL lookup for username/password): auth_cache_negative_ttl = 1 mins auth_cache_size = 10 M auth_cache_ttl = 10 mins but I notice that every time I auth, it'll redo all the queries in my Lua code. I'd have expected that data to be served out of cache till the 10min TTL is up 2) Is there an appropriate way to return data with spaces in it (or presumably other non-alphanum chars. My quota name had a space in it, which somehow got interpreted as 'yes' , i.e.: imap: Error: Failed to initialize quota: Invalid quota root quota: Unknown quota backend: yes I simply changed the space to an underscore as a workaround, but I'm curious if there's a better way. I tried various quoting without success. Didn't try escaping yet. 3) Can you elaborate on the "auth_request#response_from_template(template)" and "auth_request#var_expand(template)" functions? Specifically how to use them. I'm guessing that I could've used one of them to work around #2 (that it would have done the escaping for me) Thanks! ----- 1) I'll have to check this. 2) Instead of string, return a key value table. you can have spaces in values. 3) response_from_template expands a key=value string into table by var expanding values. var_expand can be used to interpolation for any purposes. it returns a string. see https://wiki.dovecot.org/Variables for details on how to use it. Individual variable access is more efficient to do directly. --- Aki Tuomi

1 0

Re: iPhone/iPad IMAP connection bursts causes user+IP exceeded
by Joseph Tam 02 Dec '17

02 Dec '17

"David.M.Clark" <david(a)davrom.com> wrote: > I have modified mail_max_userip_connections to 400 which made no difference. > > The end user customer actually had Apple remote into their device and > they were impressed that the end user knew their IMAP settings. They > tested it and during this connection time, it worked as expected with > send and receive of e-mails. After Apple support disconnected from the > device, it not longer worked. I'm not sure your problem is the same as mine. Apart from getting a lot of these log messages ... Oct 24 21:32:54 server dovecot: imap-login: Maximum number of connections from user+IP exceeded (mail_max_userip_connections=12): user=<user> my users are not reporting any functional problems. I investigated this a little further. I bumped mail_max_userip_connections to 100, and looked at one of these connection bursts for one of my users. What I found was that it would steadily open new connections, hit the cap, then disconnect them all, and start the cycle over again. However, it would stop when the total number of connections made roughly equal to the number of mailboxes the user had. So a rough algorithm for these clients is for each mailbox[1..n] { if open mailbox[i] { ... do operation ... } else { // Hit cap close all open mailboxes } } close all open mailbox For example, if the user has 13 mailboxes and mail_max_userip_connections=5, you would see (c=connect, d=disconnect, m=max log lessage): ccccc m ddddd ccccc m ddddd ccc ddd I'm not sure whether the reader client displays partial results, or it collects all the results when the entire operation finishes. So the final effect I saw of bumping mail_max_userip_connections from the server perspective is that I get fewer "Maximum number of connections" log messages. Joseph Tam <jtam.home(a)gmail.com>

1 0

client unable to send mail, dovecot-imap errors
by GE Junk 02 Dec '17

02 Dec '17

Hi, I have an email client that is currently unable to send mail through imap. I am getting a ton of errors in dovecot-imap.log. All of these errors continue to show up, even after purging the dovecot*.* files from the offending folders. This happens to all email accounts on the server. Clearing the cache files doesn't fix, the error appears pretty much immediately after the new cache is generated. ============================== Error: mmap() failed with file path/Maildir/dovecot.index.cache: Invalid argument ============================== These errors are associated with an account unable to send right now. They seem to have only started since the send problem started. ============================== Error: Corrupted transaction log file path/Maildir/dovecot.index.log seq 5: indexid changed 1512100549 -> 1512183737 (sync_offset=0) Error: Index path/Maildir/dovecot.index: Lost log for seq=5 offset=12576: Failed to map file seq=178 offset=40..18446744073709551615 (ret=0) Warning: fscking index file path/Maildir/dovecot.index Error: Fixed index file path/Maildir/dovecot.index: log_file_seq 5 -> 179 IMAP session state is inconsistent, please relogin. in=26 out=1276 ============================== This error is also associated with the offending email client ============================== message repeated 9 times: [ imap(emailaddress): Error: Transaction log path/Maildir/dovecot.index.log: duplicate transaction log sequence (2)] ============================== Some additional info: dovecot: 2.2.22 (fe789d2) Ubuntu Server 16.04 Running on a qemu VM installed on an Unraid 6.3.5 Server 4GB RAM mail folder is located on virtio 9p2000 host passthru fs located on the same physical machine as the VM. Anyone have any ideas? Need additional information? Thanks, Eric

1 0

Lua Auth
by Mark Moseley 02 Dec '17

02 Dec '17

Just happened to be surfing the docs and saw this. This is beyond awesome: https://wiki2.dovecot.org/AuthDatabase/Lua Any words of wisdom on using it? I'd be putting a bunch of mysql logic in it. Any horrible gotchas there? When it says 'blocking', should I assume that means that a auth worker process will *not* accept any new auth lookups until both auth_passdb_lookup() and auth_userdb_lookup() have completed (in which I'd be doing several mysql calls)? If that's the case, I assume that the number of auth workers should be bumped up. And is a 2.3 release fairly imminent?

3 3

Autoreplies are not sent
by Sergio Belkin 01 Dec '17

01 Dec '17

Hi, Let's say I have 2 domains: - Virtual Mailbox Domain: example.local (internal domain) - Virtual Alias Domain: example.com (public domain) Every mail sent to @example.com is really sent to @example.local. I have a virtual alias that forward mails sent to support-abc(a)example.com is sent finally to: op1(a)example.local Now, I'd want to every mail was sent to support-abc(a)example.com it triggers an autoreply vacation style. So, I've wrote and compiled a sieve filter, something like that and put in op1(a)example.local sieve folder. But it fails complaining like that: nov 29 15:55:39 muteriver.example.local dovecot[12549]: lmtp(12675, op1(a)example.local) CqNdF6sCH1qDMQAAcSFsIQ: sieve: msgid=< ded22f3d-f1e3-157e-0667-ca73d851d1a8(a)example.com>: discarding vacation response for implicitly delivered message; no known (envelope) recipient address found in message headers (recipient=<op1(a)example.local>, and additional `:addresses' are specified) I've tried appending in dovecot configuration: lda_original_recipient_header = X-Original-To But it does not work either. Using: dovecot-pigeonhole-2.2.10-8.el7.centos.x86_64 and postfix-2.10.1-6.el7.x86_64 Please could you help me? Thanks in advance! -- -- Sergio Belkin LPIC-2 Certified - http://www.lpi.org

2 3

Re: iPhone/iPad IMAP connection bursts causes user+IP exceeded
by David.M.Clark 01 Dec '17

01 Dec '17

Thanks for the reply and suggestion Robert. I have now set mail_max_userip_connections to 400 in 20-imap.conf to see if it makes any difference. Late yesterday the customer tested from his office, an older IOS 9 tablet and he had IMAP working in a matter of minutes, so is certainly an newer software version by Apple issue. On 30/11/17 03:03, Robert Giles wrote: > David, > > I'd say that if you set the mail_max_userip_connections value to a > large-ish number (300-400), your users likely won't notice an issue on > their iOS 10.x and iOS 11.x devices. It's more of an annoyance in the > logs, and occasionally the iOS Mail app will show that it is stuck > checking mail for a few minutes (when the new max_userip_connections is > reached again, but with a large number, it happens much less frequently). > > Keep in mind max_userip applies to *authenticated* users, so a true, > malicious DoS situation is less likely. > > And yeah, I'm definitely tired of Apple going off and breaking their > software, because the blame always comes back on IT instead of Apple :( > > Robert > > > > On 2017-11-28 at 22:18, David.M.Clark wrote: >> Robert just got this one today. >> >> A customer has phoned who has replaced or updated their Apple 'stuff' >> (including iPhone 8 just purchased) and the identical settings that >> work on the older Apple based devices, as well as Outlook based PCs, >> work fine with IMAP (internal port 143 and external port 10143), but >> the newer IOS based devices just do not work. iPhone 8 does not let >> you downgrade to earlier OS either, which is something the customer >> was thinking of doing. >> >> Once again either Apple or Microsoft have 'moved the goal posts' >> expecting everyone else in the world to be forced to move with them. >> >> They are reporting issues on-line also with MS server and Office 365 >> so will be hoping we have some kind of good result quickly from Apple >> as this will only get worse as more people update and find their >> e-mail is 'dead in the water'. >> >> On 04/11/17 06:19, Robert Giles wrote: >>> Apologies for bumping Joseph Tam's rather old thread, but I'm >>> wondering if anyone has come up with a workaround/fix for this >>> problem that iOS Mail.app clients (10.3.3, 11.0.3, 11.1?) continue to >>> exhibit? >>> >>> Robert >>> >>> >>> >>> On 10/28/2016 at 03:49 PM, Joseph Tam wrote: >>>> I frequently see this from my iPhone/iPad IMAP users: >>>> >>>> Oct 24 21:30:55 server dovecot: imap-login: Login: user=<user>, >>>> ... >>>> [... repeated 10 times ...] >>>> Oct 24 21:32:54 server dovecot: imap-login: Maximum number of >>>> connections from user+IP exceeded (mail_max_userip_connections=12): >>>> user=<user> >>>> Oct 24 21:32:54 server dovecot: imap(user): Logged out ... >>>> [... repeated 11 times ...] >>>> >>>> These bursts of logins/max/logouts would cycling on for a few minutes. >>>> Googling this problem seems to turn up lots of similar complaints about >>>> iOS mail mail clients. e.g. >>>> >>>> https://discussions.apple.com/thread/2547839?tstart=0 >>>> >>>> iOS mail readers do not limit connections limit as other mailreaders >>>> can. I could increase mail_max_userip_connections, but that just moves >>>> the goal posts. >>>> >>>> Using the new rawlog feature in 2.2.26 (thanks Dovecot team!), I was >>>> able >>>> to see that these connection bursts are caused by clients doing global >>>> searches. The rawlogs show each mailbox being SELECT'd and searched >>>> (e.g. From header string): >>>> >>>> 1477369968.730450 2 ID ("name" "iPad Mail" "version" "13G36" >>>> "os" "iOS" "os-version" "9.3.5 (13G36)") >>>> 1477369968.781932 3 SELECT {mailbox} >>>> 1477369968.961636 4 UID SEARCH RETURN (COUNT) 1:* NOT DELETED >>>> 1477369969.006087 5 UID SEARCH RETURN (ALL) 1:* NOT DELETED >>>> 1477369969.052701 6 UID SEARCH RETURN (ALL) {search-term} NOT >>>> DELETED >>>> 1477369974.624153 7 LOGOUT >>>> >>>> Questions: >>>> >>>> 1) How does this affect the user? I heard from one user that it >>>> makes global searches unusable because his reader just spins its >>>> wheel. I'm not sure whether this is impatience or this results >>>> in failed searches. >>>> >>>> 2) Is there a client-side fix (e.g. connection limiting)? >>>> Apple appears to be intransigent on addressing this. >>>> >>>> 3) Will maintaining search indices (e.g. solr) help with this? >>>> Maybe the searches are taking too long and the connections pile >>>> up waiting for previous searches to finish. >>>> >>>> Thanks, >>>> Joseph Tam <jtam.home(a)gmail.com> >>> >> > -- As always, I remain at your service. Kindest Regards, David.M.Clark (Director - Senior Linux/UNIX Consultant) =--------------------------------------------------------------------------= Davrom Consulting Pty Ltd Mobile: 0418763124 PO Box 1644, Sunnybank Hills, 4109 E-mail (Work): david(a)davrom.com ABN: 81 096 990 804 E-mail (Priv): dmc1961(a)dmc1961.id.au Website: http://davrom.com Skype: dmc1961 Podcast: http://ldup.com.au Google: dmc1961(a)gmail.com =--------------------------------------------------------------------------= Specialising in: Linux (Fedora/RedHat/CentOS), UNIX, SCO, MikroTik, Networking/Internet, E-mail/Web Technologies =--------------------------------------------------------------------------= Please note: Any e-mail communication bearing this signature is for the exclusive purpose of the sender and is not for publication without the expressed permission of the sender or respective sender's organisation. =--------------------------------------------------------------------------=

1 1

My Solr FTS problem
by Gao 01 Dec '17

01 Dec '17

I am testing the solr FTS following the guide here: http://things.m31.ch/?p=379 Now I am having problem when I try to test: # doveadm -v index -u fail2ban(a)mydomain.com Inbox doveadm(fail2ban(a)mydomain.com): Error: fts_solr: Invalid XML input at 1:0: not well-formed (invalid token) (near: { "responseHeader":{ "status":0, "QTime":0, "params":{ "q":"box:8864fa1d51ea1d5a7b12000096a1aaf8 AND user:fa) doveadm(fail2ban(a)mydomain.com): Error: Mailbox INBOX: Status lookup failed: Internal error occurred. Refer to server log for more information. [2017-11-30 13:05:24] My system is CentOS 7, Dovecot 3.2.4 (installed from source with solr support), Java OpenJDK-1.8.0, Solr v7.1.0. Could some one help me on this please? Here is detailed debug out put: [root@mail ~]# doveadm -vD index -u fail2ban(a)mydomain.com Inbox Debug: Loading modules from directory: /usr/lib64/dovecot Debug: Module loaded: /usr/lib64/dovecot/lib10_quota_plugin.so Debug: Module loaded: /usr/lib64/dovecot/lib20_fts_plugin.so Debug: Module loaded: /usr/lib64/dovecot/lib21_fts_solr_plugin.so Debug: Loading modules from directory: /usr/lib64/dovecot/doveadm Debug: Skipping module doveadm_acl_plugin, because dlopen() failed: /usr/lib64/dovecot/doveadm/lib10_doveadm_acl_plugin.so: undefined symbol: acl_user_module (this is usually intentional, so just ignore this message) Debug: Skipping module doveadm_expire_plugin, because dlopen() failed: /usr/lib64/dovecot/doveadm/lib10_doveadm_expire_plugin.so: undefined symbol: expire_set_deinit (this is usually intentional, so just ignore this message) Debug: Module loaded: /usr/lib64/dovecot/doveadm/lib10_doveadm_quota_plugin.so Debug: Module loaded: /usr/lib64/dovecot/doveadm/lib10_doveadm_sieve_plugin.so Debug: Module loaded: /usr/lib64/dovecot/doveadm/lib20_doveadm_fts_plugin.so Debug: Skipping module doveadm_mail_crypt_plugin, because dlopen() failed: /usr/lib64/dovecot/doveadm/libdoveadm_mail_crypt_plugin.so: undefined symbol: mail_crypt_box_get_pvt_digests (this is usually intentional, so just ignore this message) doveadm(fail2ban(a)mydomain.com): Debug: Added userdb setting: mail=maildir:/home/vmail/mydomain.com/fail2ban/ doveadm(fail2ban(a)mydomain.com): Debug: Added userdb setting: plugin/quota_rule=*:bytes=0 doveadm(fail2ban(a)mydomain.com): Debug: Effective uid=5000, gid=5000, home=/home/vmail/mydomain.com/fail2ban/ doveadm(fail2ban(a)mydomain.com): Debug: Quota root: name=User quota backend=maildir args= doveadm(fail2ban(a)mydomain.com): Debug: Quota rule: root=User quota mailbox=* bytes=0 messages=0 doveadm(fail2ban(a)mydomain.com): Debug: Quota rule: root=User quota mailbox=Trash bytes=+104857600 messages=0 doveadm(fail2ban(a)mydomain.com): Debug: Quota warning: bytes=0 (90%) messages=0 reverse=no command=quota-warning 90 fail2ban(a)mydomain.com mydomain.com doveadm(fail2ban(a)mydomain.com): Debug: Quota warning: bytes=0 (80%) messages=0 reverse=no command=quota-warning 80 fail2ban(a)mydomain.com mydomain.com doveadm(fail2ban(a)mydomain.com): Debug: Quota grace: root=User quota bytes=0 (10%) doveadm(fail2ban(a)mydomain.com): Debug: Namespace inbox: type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:/home/vmail/mydomain.com/fail2ban/ doveadm(fail2ban(a)mydomain.com): Debug: maildir++: root=/home/vmail/mydomain.com/fail2ban, index=, indexpvt=, control=, inbox=/home/vmail/mydomain.com/fail2ban, alt= doveadm(fail2ban(a)mydomain.com): Debug: quota: quota_over_flag check: quota_over_script unset - skipping doveadm(fail2ban(a)mydomain.com): Debug: INBOX: Mailbox opened because: index doveadm(fail2ban(a)mydomain.com): Debug: http-client: host 127.0.0.1: Host created doveadm(fail2ban(a)mydomain.com): Debug: http-client: peer 127.0.0.1:8983: Peer created doveadm(fail2ban(a)mydomain.com): Debug: http-client: queue http://127.0.0.1:8983: Setting up connection to 127.0.0.1:8983 (1 requests pending) doveadm(fail2ban(a)mydomain.com): Debug: http-client: peer 127.0.0.1:8983: Linked queue http://127.0.0.1:8983 (1 queues linked) doveadm(fail2ban(a)mydomain.com): Debug: http-client: queue http://127.0.0.1:8983: Started new connection to 127.0.0.1:8983 doveadm(fail2ban(a)mydomain.com): Debug: http-client: request [Req1: GET http://127.0.0.1:8983/solr/dovecot/select?fl=uid&rows=1&sort=uid+desc&q=box…] Submitted doveadm(fail2ban(a)mydomain.com): Debug: http-client: Waiting for 1 requests to finish doveadm(fail2ban(a)mydomain.com): Debug: http-client: peer 127.0.0.1:8983: Creating 1 new connections to handle requests (already 0 usable, connecting to 0, closing 0) doveadm(fail2ban(a)mydomain.com): Debug: http-client: peer 127.0.0.1:8983: Making new connection 1 of 1 doveadm(fail2ban(a)mydomain.com): Debug: http-client: conn 127.0.0.1:8983 [0]: HTTP connection created (1 parallel connections exist) doveadm(fail2ban(a)mydomain.com): Debug: http-client: conn 127.0.0.1:8983 [0]: Connected doveadm(fail2ban(a)mydomain.com): Debug: http-client: conn 127.0.0.1:8983 [0]: Ready for requests doveadm(fail2ban(a)mydomain.com): Debug: http-client: peer 127.0.0.1:8983: Successfully connected (connections=1) doveadm(fail2ban(a)mydomain.com): Debug: http-client: peer 127.0.0.1:8983: Using 1 idle connections to handle 1 requests (1 total connections ready) doveadm(fail2ban(a)mydomain.com): Debug: http-client: queue http://127.0.0.1:8983: Connection to peer 127.0.0.1:8983 claimed request [Req1: GET http://127.0.0.1:8983/solr/dovecot/select?fl=uid&rows=1&sort=uid+desc&q=box…] doveadm(fail2ban(a)mydomain.com): Debug: http-client: conn 127.0.0.1:8983 [0]: Claimed request [Req1: GET http://127.0.0.1:8983/solr/dovecot/select?fl=uid&rows=1&sort=uid+desc&q=box…] doveadm(fail2ban(a)mydomain.com): Debug: http-client: request [Req1: GET http://127.0.0.1:8983/solr/dovecot/select?fl=uid&rows=1&sort=uid+desc&q=box…] Sent header doveadm(fail2ban(a)mydomain.com): Debug: http-client: peer 127.0.0.1:8983: No more requests to service for this peer (1 connections exist) doveadm(fail2ban(a)mydomain.com): Debug: http-client: conn 127.0.0.1:8983 [0]: Got 200 response for request [Req1: GET http://127.0.0.1:8983/solr/dovecot/select?fl=uid&rows=1&sort=uid+desc&q=box…] (took 3 ms + 2 ms in queue) doveadm(fail2ban(a)mydomain.com): Error: fts_solr: Invalid XML input at 1:0: not well-formed (invalid token) (near: { "responseHeader":{ "status":0, "QTime":1, "params":{ "q":"box:8864fa1d51ea1d5a7b12000096a1aaf8 AND user:fa) doveadm(fail2ban(a)mydomain.com): Debug: http-client: conn 127.0.0.1:8983 [0]: Response payload stream destroyed (0 ms after initial response) doveadm(fail2ban(a)mydomain.com): Debug: http-client: request [Req1: GET http://127.0.0.1:8983/solr/dovecot/select?fl=uid&rows=1&sort=uid+desc&q=box…] Finished doveadm(fail2ban(a)mydomain.com): Debug: http-client: queue http://127.0.0.1:8983: Dropping request [Req1: GET http://127.0.0.1:8983/solr/dovecot/select?fl=uid&rows=1&sort=uid+desc&q=box…] doveadm(fail2ban(a)mydomain.com): Debug: http-client: host 127.0.0.1: Host is idle (timeout = 100 msecs) doveadm(fail2ban(a)mydomain.com): Debug: http-client: request [Req1: GET http://127.0.0.1:8983/solr/dovecot/select?fl=uid&rows=1&sort=uid+desc&q=box…] Free (requests left=1) doveadm(fail2ban(a)mydomain.com): Debug: http-client: All requests finished doveadm(fail2ban(a)mydomain.com): Error: Mailbox INBOX: Status lookup failed: Internal error occurred. Refer to server log for more information. [2017-11-30 13:13:57] doveadm(fail2ban(a)mydomain.com): Debug: http-client: peer 127.0.0.1:8983: Peer close doveadm(fail2ban(a)mydomain.com): Debug: http-client: peer 127.0.0.1:8983: Peer disconnect doveadm(fail2ban(a)mydomain.com): Debug: http-client: conn 127.0.0.1:8983 [0]: Peer closed doveadm(fail2ban(a)mydomain.com): Debug: http-client: conn 127.0.0.1:8983 [0]: Connection disconnect doveadm(fail2ban(a)mydomain.com): Debug: http-client: conn 127.0.0.1:8983 [0]: Connection destroy doveadm(fail2ban(a)mydomain.com): Debug: http-client: peer 127.0.0.1:8983: Peer destroy doveadm(fail2ban(a)mydomain.com): Debug: http-client: host 127.0.0.1: Host destroy doveadm(fail2ban(a)mydomain.com): Debug: http-client: queue http://127.0.0.1:8983: Destroy

2 2

Username character disallowed by auth_username_chars: 0x13
by Alex 30 Nov '17

30 Nov '17

Hi, I'm receiving the following messages in my mail logs that I haven't seen before: Nov 28 22:45:31 bwipropemail dovecot: auth: login(?,179.210.41.21): Username character disallowed by auth_username_chars: 0x13 (username: AB?) Nov 28 22:45:31 bwipropemail dovecot: auth: login(?,179.210.41.21): Username character disallowed by auth_username_chars: 0x13 (username: AB?) There's thousands of them, from hundreds of different IP addresses. I suspect it's an exploit attempt, but does anyone know which? I've added a fail2ban entry, but I'd also like to make sure my dovecot is not vulnerable. This is on a fc25 system with all updates.

2 2

Detect port number of SASL AUTH request?
by MRob 30 Nov '17

30 Nov '17

Hi, this is partly Postfix related, but I want to know if there could be way to distinguish port of the SASL AUTH request to segregate user services. Currently I use unix listener for dovecot sasl auth, but could change to inet_listener. Only way I can think is to have different SASL AUTH services for each master.cf entry where its needed. But is it possible for Dovecot to have more than one SASL AUTH services with different configuration setup? It would be nicer if there was a way for Postfix to tell Dovecot about the port the client connected on. Or maybe it can be done with a SASL realm? I'm not sure how? Any help please?

2 1

Plugin 'sieve_imapsieve' not found
by Christopher Satchell 30 Nov '17

30 Nov '17

Hello, when Dovecot launches (and pretty much at any action afterwards) it always throws following error: | managesieve: Fatal: Plugin 'sieve_imapsieve' not found from directory /usr/lib/dovecot/modules/sieve | config: Error: managesieve-login: dump-capability process returned 89 dovecot-sieve and dovecot-managesieved are both installed and the only plugin in the mentioned folder is `lib90_sieve_extprograms_plugin.so`. `doveconf -n` output: # 2.2.22 (fe789d2): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.13 (7b14904) managesieve(username): Fatal: Plugin 'sieve_imapsieve' not found from directory /usr/lib/dovecot/modules/sieve doveconf: Error: managesieve-login: dump-capability process returned 89 # OS: Linux 4.4.0-101-generic x86_64 Ubuntu 16.04.3 LTS auth_mechanisms = plain login mail_gid = vmail mail_home = /var/vmail/mailboxes/%d/%n mail_location = maildir:~/mail:LAYOUT=fs mail_privileged_group = vmail mail_uid = vmail namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Spam { auto = subscribe special_use = \Junk } mailbox Trash { auto = subscribe special_use = \Trash } prefix = } passdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } plugin { imapsieve_mailbox1_before = file:/var/vmail/sieve/global/learn-spam.sieve imapsieve_mailbox1_causes = COPY imapsieve_mailbox1_name = Spam imapsieve_mailbox2_before = file:/var/vmail/sieve/global/learn-ham.sieve imapsieve_mailbox2_causes = COPY imapsieve_mailbox2_from = Spam imapsieve_mailbox2_name = * quota = maildir:User quota quota_exceeded_message = Benutzer %u hat das Speichervolumen überschritten. / User %u has exhausted allowed storage space. sieve = file:/var/vmail/sieve/%d/%n/scripts;active=/var/vmail/sieve/%d/%n/active-script.sieve sieve_before = /var/vmail/sieve/global/spam-global.sieve sieve_global_extensions = +vnd.dovecot.pipe sieve_pipe_bin_dir = /usr/bin sieve_plugins = sieve_imapsieve sieve_extprograms } protocols = imap lmtp sieve service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = vmail mode = 0660 user = vmail } } service imap-login { inet_listener imap { port = 143 } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0660 user = postfix } user = vmail } service managesieve-login { inet_listener sieve { port = 4190 } } ssl = required ssl_cert = </etc/letsencrypt/live/mail.domain.tld/fullchain.pem ssl_cipher_list = EDH+CAMELLIA:EDH+aRSA:EECDH+aRSA+AESGCM:EECDH+aRSA+SHA256:EECDH:+CAMELLIA128:+AES128:+SSLv3:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!DSS:!RC4:!SEED:!IDEA:!ECDSA:kEDH:CAMELLIA128-SHA:AES128-SHA ssl_dh_parameters_length = 2048 ssl_key = </etc/letsencrypt/live/mail.domain.tld/privkey.pem ssl_prefer_server_ciphers = yes ssl_protocols = !SSLv3 userdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } protocol imap { imap_idle_notify_interval = 29 mins mail_max_userip_connections = 20 mail_plugins = " quota imap_quota imap_sieve" } protocol lmtp { mail_plugins = " sieve" postmaster_address = postmaster(a)domain.tld } Thanks in advance. Chris

3 3

dovecot - 2 Faktor Auth
by Hajo Locke 30 Nov '17

30 Nov '17

Hallo Liste, hat sich schon mal jemand mit 2 Faktor Auth für dovecot beschäftigt? Es geht dabei nicht nur um die Absicherung einer Weboberfläche sondern direkt die Absicherung der Standard pop/imap Verbindungen des Clients. Wir machen das auth bisher über MySQL. Rein technisch würde das gehen, da man die Password-Query beliebig anpassen und auch mit allow_nets arbeiten kann. Es wäre eher die Herausforderung für den Client den 2. Faktor zu erfüllen und seine IP freizuschalten. Man müsste dann ja Clients wie Thunderbird veranlassen irgendwie die Challenge des 2. Faktors anzuzeigen und zu erfüllen. Vermutlich kann man das nur mit speziellen Clients z.B. einer eigenen App machen. Hat jemand in dem Bereich Erfahrung und kann diese teilen? Danke, Hajo

2 1

ManageSieve: authenticate "EXTERNAL" not behaving correctly
by Marc Weustink 30 Nov '17

30 Nov '17

Hi, I've enabled client certificate authentication for imap and managesieve. When I use Thunderbird with the sieve plugin it tries to login, but times out. Initially I reported this to the sieve plugin, but we came to the conclusion that it managesieve is misbehaving. https://github.com/thsmi/sieve/issues/94 Thunderbird (win10-64) 52.4.0 (32bit) Sieve 0.2.3k Dovecot (Ubuntu 16.04.3 LTS) 2.2.33.1-1 (sid) What happens is the following (p=plugin sends m=managesieve sends) p:authenticate "EXTERNAL" "" m:"" The response is unexpected. According to RFC 5804 an empty challenge/response is sent as an empty string. So I would expect: p:authenticate "EXTERNAL" "" m:OK "Logged in." With the use of gnutls-cli I could reproduce (c=I send m=managesieve sends) gnutls-cli --starttls --x509keyfile marc_mail.key --x509certfile marc_mail.crt -p sieve 172.17.1.4 ... m:OK "TLS negotiation successful." c:authenticate "EXTERNAL" "" m:"" c:"" m:OK "Logged in." However if I try the "imap" syntax (rfc4959) I get logged in at once ... m:OK "TLS negotiation successful." c:authenticate "EXTERNAL" "=" m:OK "Logged in." Note that this is an imap only extention, "=" is an invalid base64 encoding. Marc

2 4

Re: iPhone/iPad IMAP connection bursts causes user+IP exceeded
by Joseph Tam 30 Nov '17

30 Nov '17

On 30/11/17 03:03, Robert Giles wrote: >> David, >> >> I'd say that if you set the mail_max_userip_connections value to a >> large-ish number (300-400), your users likely won't notice an issue on >> their iOS 10.x and iOS 11.x devices.? It's more of an annoyance in the >> logs, and occasionally the iOS Mail app will show that it is stuck >> checking mail for a few minutes (when the new max_userip_connections is >> reached again, but with a large number, it happens much less frequently). >> >> Keep in mind max_userip applies to *authenticated* users, so a true, >> malicious DoS situation is less likely. Maybe not malicious DoS, but if your running a shared platform, or supports hundreds of users using Apple products, you can do the arithmetic and see that you can run into problems with resource starvation. >> And yeah, I'm definitely tired of Apple going off and breaking their >> software, because the blame always comes back on IT instead of Apple :( Apple, are you listening? Would it kill you to design your software not to treat remote mail servers like personal servers that can serve up connections like candy? (I also see that some iOS clients keeps an open SMTP connection on standby, even though it's not sending mail.) Joseph Tam <jtam.home(a)gmail.com>

1 0

iPhone/iPad IMAP connection bursts causes user+IP exceeded
by Joseph Tam 30 Nov '17

30 Nov '17

I frequently see this from my iPhone/iPad IMAP users: Oct 24 21:30:55 server dovecot: imap-login: Login: user=<user>, ... [... repeated 10 times ...] Oct 24 21:32:54 server dovecot: imap-login: Maximum number of connections from user+IP exceeded (mail_max_userip_connections=12): user=<user> Oct 24 21:32:54 server dovecot: imap(user): Logged out ... [... repeated 11 times ...] These bursts of logins/max/logouts would cycling on for a few minutes. Googling this problem seems to turn up lots of similar complaints about iOS mail mail clients. e.g. https://discussions.apple.com/thread/2547839?tstart=0 iOS mail readers do not limit connections limit as other mailreaders can. I could increase mail_max_userip_connections, but that just moves the goal posts. Using the new rawlog feature in 2.2.26 (thanks Dovecot team!), I was able to see that these connection bursts are caused by clients doing global searches. The rawlogs show each mailbox being SELECT'd and searched (e.g. From header string): 1477369968.730450 2 ID ("name" "iPad Mail" "version" "13G36" "os" "iOS" "os-version" "9.3.5 (13G36)") 1477369968.781932 3 SELECT {mailbox} 1477369968.961636 4 UID SEARCH RETURN (COUNT) 1:* NOT DELETED 1477369969.006087 5 UID SEARCH RETURN (ALL) 1:* NOT DELETED 1477369969.052701 6 UID SEARCH RETURN (ALL) {search-term} NOT DELETED 1477369974.624153 7 LOGOUT Questions: 1) How does this affect the user? I heard from one user that it makes global searches unusable because his reader just spins its wheel. I'm not sure whether this is impatience or this results in failed searches. 2) Is there a client-side fix (e.g. connection limiting)? Apple appears to be intransigent on addressing this. 3) Will maintaining search indices (e.g. solr) help with this? Maybe the searches are taking too long and the connections pile up waiting for previous searches to finish. Thanks, Joseph Tam <jtam.home(a)gmail.com>

3 2

XDOVECOT capability?
by Hogne Vevle 28 Nov '17

28 Nov '17

Hi! Here and there, I'm seeing mentions of a "XDOVECOT" capability - e.g. on https://documentation.open-xchange.com/7.8.2/middleware/components/search/c… . However, I can't seem to find any documentation on what this actually does. We need to add this capability to our servers in order for certain functionality of Open Xchange App Suite to work properly (as seen in the link above), but we don't want to blindly update our entire Dovecot cluster just because their docs tell us to :) Can someone, please, shed some light on what other effects we can expect to see after enabling this capability, if any? Or is it simply a way of telling clients that "Hey, I'm a Dovecot server" - nothing else? Cheers, - Hogne

2 1

How to make dovecot access a MySQL database with a certain domain?
by Spike98 28 Nov '17

28 Nov '17

I am trying to make a mail server with Postfix using the Dovecot software. At the time of wanting to access my server from a mail client, it does not let me access and see the logs of my server with the command: $ service dovecot status with the following error: dovecot: auth-worker(2769): Error: mysql(127.0.0.1): Connect failed to database (postfix): Access denied for user 'postfix'@'localhost' (using password: YES) - waiting for 125 seconds before retry From what I understand of this error is that it is trying to enter 'postfix' @ 'localhost' instead of the domain that I specify when I made the database that is mydomain.com How can you make dovecot go to MySQL with postfix(a)mydomain.com instead of localhost This is my Dovecot configuration /etc/dovecot/dovecot-sql.conf.ext driver=mysql default_pass_scheme=PLAIN-MD5 connect=host=127.0.0.1 dbname=postfix user=postfix password=postfix password_query=SELECT username,domain,password FROM usuarios WHERE username='%n' AND domain='%d' user_query=SELECT 1007 as uid, 1007 as gid, concat("maildir:/var/vmail",domain,'/',username,'/') as mail FROM usuarios WHERE username='%n' AND domain='%d' iterate_query=SELECT username,domain FROM usuarios

3 2

Imapsieve plugin?
by Bruce 28 Nov '17

28 Nov '17

Debian stretch. Dovecot 2.2.27 I was working with a document that references the imapsieve plugin. It references the /etc/dovecot/conf.d/90-imapsieve.conf file. The only reference I've found for it is https://wiki2.dovecot.org/Pigeonhole/Sieve/Plugins/IMAPSieve#Configuration. I've got dovecot-managedsieve and dovecot-sieve already installed. Am I missing something obvious here? Bruce M.

2 2

Re: Server migration
by Joseph Tam 27 Nov '17

27 Nov '17

> I've asked this before, but now it's time to move one server to > another, I can't delay the operation anymore (the older server is > failing) > > Both server are pretty old: 1.2.15 > > Probably, faster way would be to rsync all mailboxes from the older > server to the newer one. I can start migrating everything while > running then, stop the older server and sync only what is changed, > keeping downtime at minimum. > > Any better solution ? It depends on your situation. If you only have a small userbase with modest amount of mail, you can probably take your whole system down, do a one time migration, then cut over to the new system without too much downtime. If you have medium sized operation, then what you propose above would work. If you have a large userbase (or large user mailboxes), or you want to minimize downtime, you can incrementally migrate per user so that any particular user experiences a small window of outage, but the system is online for everybody else. This, of course, requires a lot more setup and planning. Joseph Tam <jtam.home(a)gmail.com>

1 0

lmtp-Eroor
by Jakob Schürz 27 Nov '17

27 Nov '17

Hi There! I can not find anything about this message: dovecot[23202]: lmtp(jakob): Debug: Mailbox <lmtp DATA>: Opened mail UID=1 because: header Message-ID (Cache file is unusable) dovecot[23202]: lmtp(jakob): Debug: Mailbox <lmtp DATA>: Opened mail UID=1 because: virtual size (Cache file is unusable) And the next is: dovecot[23202]: lmtp(jakob): rphlK01SG1qiWgAAk1Mx3g: sieve: msgid=<E1eJ6cv-000624-Je(a)xxx.xxxxxxx.xxx>: stored mail into mailbox 'INBOX/TESTORDNER' It happens when a mail gets delivered through lmtp. My exim-Transport is this: dovecot_lmtp: driver = lmtp socket = /var/run/dovecot/lmtp #maximum number of deliveries per batch, default 1 batch_max = 200 And my dovecot-Conf is this: # dovecot -n # 2.2.27 (c0f36b0): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.16 (fed8554) # OS: Linux 4.13.0-trunk-amd64 x86_64 Debian 9.1 btrfs auth_debug = yes auth_mechanisms = plain login cram-md5 digest-md5 auth_socket_path = /var/run/dovecot/auth-userdb auth_verbose = yes first_valid_uid = 1000 imap_capability = +XDOVECOT imap_client_workarounds = tb-extra-mailbox-sep lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes listen = *, ::1 login_trusted_networks = 127.0.0.1/8 192.168.0.0/24 192.168.1.0/24 172.17.0.0/24 172.18.0.0/24 mail_debug = yes mail_gid = vmail mail_home = /var/mail/%u mail_location = maildir:/var/mail/%u/Maildir:LAYOUT=fs:INDEX=/var/lib/dovecot/db/indexes/Maildir/%u:INDEXPVT=/var/lib/dovecot/db/indexes/Maildir/%u:CONTROL=/var/lib/dovecot/db/control/Maildir/%u mail_plugins = zlib quota acl listescape mail_log notify virtual mail_privileged_group = vmail mail_server_admin = mailto:jakob@xundeenergie.at mail_shared_explicit_inbox = yes mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext mmap_disable = yes namespace { hidden = no inbox = no list = children location = maildir:/var/mail/mailarchiv/%u/:LAYOUT=fs:INDEX=/var/lib/dovecot/db/indexes/mailarchiv/%u:INDEXPVT=/var/lib/dovecot/db/indexes/mailarchiv/%u mailbox incoming { auto = create } mailbox outgoing { auto = create } prefix = Mailarchiv/ separator = / subscriptions = no type = private } namespace { list = children location = maildir:/var/mail/public/:LAYOUT=fs:INDEX=/var/lib/dovecot/db/indexes/public/%u:INDEXPVT=/var/lib/dovecot/db/indexes/public/%u prefix = Roseggergasse/ separator = / subscriptions = no type = public } namespace Geteilt { hidden = no inbox = no list = children location = maildir:/var/mail/%%u/Maildir:LAYOUT=fs:INDEXPVT=/var/lib/dovecot/db/indexes/shared/%u/%%u:INDEX=/var/lib/dovecot/db/indexes/shared/%u/%%u prefix = Geteilt/%%n/ separator = / subscriptions = no type = shared } namespace Real { hidden = yes list = no location = virtual:/var/mail/real:INDEX=/var/lib/dovecot/db/indexes/real/%u prefix = Real/ separator = / subscriptions = no } namespace Synoptic { hidden = no list = children location = virtual:/var/mail/virtual:INDEX=/var/lib/dovecot/db/indexes/virtual/%u mailbox INBOX/Archives { auto = no special_use = \Archive } mailbox INBOX/Drafts { auto = no special_use = \Drafts } mailbox INBOX/Entwürfe { auto = no special_use = \Drafts } mailbox INBOX/Junk { auto = no special_use = \Junk } mailbox INBOX/Spam { auto = no special_use = \Junk } mailbox Sent { auto = no special_use = \Sent } prefix = Synoptic/ separator = / subscriptions = no } namespace inbox { hidden = no inbox = yes location = mailbox Archiv { auto = no special_use = \Archive } mailbox Archive { auto = no special_use = \Archive } mailbox Archives { auto = no special_use = \Archive } mailbox "Deleted Messages" { auto = no special_use = \Trash } mailbox Drafts { auto = no special_use = \Drafts } mailbox Entwürfe { auto = no special_use = \Drafts } mailbox "Gelöschte Elemente" { auto = no special_use = \Trash } mailbox "Gelöschte Objekte" { auto = no special_use = \Trash } mailbox Gesendet { auto = no special_use = \Sent } mailbox "Gesendete Elemente" { auto = no special_use = \Sent } mailbox "Gesendete Objekte" { auto = no special_use = \Sent } mailbox Important { auto = no } mailbox Junk { auto = subscribe autoexpunge = 30 days special_use = \Junk } mailbox Mistkübel { auto = no special_use = \Trash } mailbox Papierkorb { auto = no special_use = \Trash } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { auto = no special_use = \Sent } mailbox Spam { auto = no special_use = \Junk } mailbox Synoptic/Alle { auto = no comment = All my messages special_use = \All } mailbox Trash { auto = no special_use = \Trash } mailbox Wichtig { auto = create } prefix = INBOX/ separator = / subscriptions = no type = private } namespace subscriptions { hidden = yes list = no location = prefix = subscriptions = yes } passdb { args = scheme=CRYPT username_format=%u /etc/dovecot/users driver = passwd-file } plugin { acl = vfile:/etc/dovecot/dovecot-acl:cache_secs=300 acl_shared_dict = file:/var/lib/dovecot/db/shared-mailboxes.db fts = lucene fts_autoindex = yes fts_autoindex_max_recent_msgs = 80 fts_decoder = decode2text.sh fts_index_timeout = 90 fts_lucene = whitespace_chars=@. normalize no_snowball mail_home = /var/mail/%u setting_name = sieve, managedsieve sieve = file:/var/mail/%u/sieve/;active=/var/mail/%u/sieve/%u.sieve } postmaster_address = postmaster@localhost protocols = " imap lmtp sieve pop3 sieve" service anvil { unix_listener anvil-auth-penalty { mode = 00 } } service auth { unix_listener auth-client { group = vmail mode = 0666 user = vmail } unix_listener auth-userdb { group = vmail mode = 0666 user = vmail } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } process_min_avail = 1 service_count = 1 } service imap { executable = imap postlogin process_limit = 1024 vsz_limit = 400 M } service lmtp { user = vmail vsz_limit = 400 M } service postlogin { executable = script-login -d rawlog } ssl = required ssl_cert = </etc/dovecot/dovecot.crt ssl_cipher_list = ALL:!ADH:!LOW:!SSLv2:!SSLv3:!EXP:!aNULL:+HIGH:+MEDIUM ssl_key = # hidden, use -P to show it ssl_protocols = TLSv1.2 TLSv1.1 TLSv1 !SSLv3 userdb { args = username_format=%u /etc/dovecot/users default_fields = home=/var/mail/%u driver = passwd-file } verbose_proctitle = yes protocol lmtp { auth_username_format = %n mail_plugins = zlib quota acl listescape mail_log notify virtual quota sieve acl } protocol lda { mail_plugins = zlib quota acl listescape mail_log notify virtual quota sieve acl } protocol imap { mail_max_userip_connections = 10 mail_plugins = zlib quota acl listescape mail_log notify virtual imap_quota imap_acl }

3 6

doveadm backup or sync Read status
by DurgaPrasad - DatasoftComnet 27 Nov '17

27 Nov '17

Hello All, Sorry for reposting. Earlier I was in digest mode hence could not update the previous post. I am trying to migrate mail from a dovecot-2.0.13-1_129.el5 maildir to dovecot-2.2.10-8.el7.x86_64 centos 7 mdbox. I am using this command doveadm -v -o mail_fsync=never backup -R -u user(a)domain.com imapc: also tried doveadm -v -o mail_fsync=never sync -1 -R -u user(a)domain.com imapc: Both work flawlessly - Timo is great !!! - My issue is the source folders are all marked as read. The target folders of-course have unread OK. POP3 UIDLs are also ok (tested for one user). (1) My question is how can I make the source remain same (unread status etc.) so that I do migrate the various domains in a transparent manner and then switch servers ?. I have multiple virtual domains. (2) One more question do I have to do both imapc_ & also pop3c_ migration since I need the POP UIDLs to work properly for my outlook POP3 users after migration ?. I want to know the possibilities. Thanks DP --- This email has been checked for viruses by Avast antivirus software. https://www.avast.com/antivirus

1 0

Server migration
by Gandalf Corvotempesta 27 Nov '17

27 Nov '17

I've asked this before, but now it's time to move one server to another, I can't delay the operation anymore (the older server is failing) Both server are pretty old: 1.2.15 Probably, faster way would be to rsync all mailboxes from the older server to the newer one. I can start migrating everything while running then, stop the older server and sync only what is changed, keeping downtime at minimum. Any better solution ? No, server upgrade is not possible. Not at this time. It's too time consuming and I have to move asap.

2 1

Dovecot LMTP Proxy + STARTTLS?
by Tobi 27 Nov '17

27 Nov '17

Hi I got dovecot 2.2.26 on a Centos7 with latest updates. Dovecot is configured to act as director and delivers to my two backend servers. I enabled lmtp proxy on director to listen on port 24. Now I see in msg headers that the connection to the lmtp proxy uses STARTTLS but the connection from proxy to backend seems to be unencrypted. Is it possible to enforce the use of STARTTLS in the connection from the director to the backend as well? Regards tobi

5 4

doveadm backup or sync Read status
by DurgaPrasad - DatasoftComnet 26 Nov '17

26 Nov '17

Hello all, I am trying to migrate mail from a dovecot-2.0.13-1_129.el5 maildir to dovecot-2.2.10-8.el7.x86_64 centos 7 mdbox. I am using this command doveadm -v -o mail_fsync=never backup -R -u user(a)domain.com imapc: also tried doveadm -v -o mail_fsync=never sync -1 -R -u user(a)domain.com imapc: Both work flawlessly - Timo is great !!! - My issue is the source folders are all marked as read. The target folders of-course have unread OK. POP3 UIDLs are also ok (tested for one user). (1) My question is how can I make the source remain same (unread status etc.) so that I do migrate the various domains in a transparent manner and then switch servers ?. I have multiple virtual domains. (2) One more question do I have to do both imapc_ & also pop3c_ migration since I need the POP UIDLs to work properly for my outlook POP3 users after migration ?. Thanks DP --- This email has been checked for viruses by Avast antivirus software. https://www.avast.com/antivirus

1 0

Mark message as read when moved to Trash
by Felix Rubio Dalmau 26 Nov '17

26 Nov '17

Hi all, When I send a message to trash, without previously reading it (just with the subject is enough to say I do not want to read it), it remains as "unread". Then, clients (I am using Kmail) report there are unread message, when all of them are in Trash. The question, then is: Is there any way to automatically mark a message as read, when that message is moved to Trash? Thank you! Felix

5 5

Re: Sieve coding question
by Stephan Bosch 25 Nov '17

25 Nov '17

Op 11/25/2017 om 5:33 PM schreef Roger Klorese: > On Sat, Nov 25, 2017 at 4:56 AM Stephan Bosch <stephan(a)rename-it.nl > <mailto:stephan@rename-it.nl>> wrote: > > Op 11/19/2017 om 8:54 AM schreef Roger B.A. Klorese: > > On 11/16/17 11:03 AM, Stephan Bosch wrote: > >> Op 11/16/2017 om 7:42 PM schreef lists.dovecot(a)rogerklorese.com > <mailto:lists.dovecot@rogerklorese.com>: > >>> Is there a more appropriate list on which to ask for assistance in > >>> coding Sieve rules, or may I ask here? > >> I know of no other suitable venue, so go ahead. > >> > >> Regards, > >> > >> Stephan. > > > And I > > > Here is the config. I don't think IMAPsieve is configured... > > Then I don't understand what you mean. Sieve is normally only involved > at initial delivery, not when messages are moved between mailboxes. > > Regards, > > Stephan. > > > Of cpurse, that was my understanding too. Hence the question. Are you sure your mail client doesn't have any rules of its own that may be doing this? Regards, Stephan.

1 0

Sieve coding question
by lists.dovecot＠rogerklorese.com 25 Nov '17

25 Nov '17

Is there a more appropriate list on which to ask for assistance in coding Sieve rules, or may I ask here?

3 5

Re: Upgrade to 2.2.32 from 2.2.15 failed
by Mark Foley 25 Nov '17

25 Nov '17

No, is that something that would make a difference between 2.2.15 and 2.2.32? --Mark On Fri, 24 Nov 2017 21:37:47 -0800 Gary <lists(a)lazygranch.com> wrote: > Out of curiosity, do you do a !SSLv3 in the conf file? > > > Original Message >> From: mfoley(a)ohprs.org >> Sent: November 24, 2017 9:04 PM >> To: dovecot(a)dovecot.org >> Subject: Upgrade to 2.2.32 from 2.2.15 failed >> >> I have a problem. I have been running Dovecot 2.2.15 and I'd like to upgrade. My distro >> (Slackware) has dovecot 2.2.32 available. I downloaded and installed that, but it didn't work. >> No one was able to get messages from the dovecot server on their workstations. The following is >> the entire dovecot log file from startup to the last message generated. No more messages went >> into the logfile after line 76, even with clients trying to connect. The 174.233.134.88 IP is >> from an external user connecting from his iPhone. The normal successful message from this user >> are shown at bottom. >> >> I'm suspecting something to do with line 18 where is says "Auth process broken." If anyone has >> any insight I'd deeply appreciate it as I'd love to upgrade. >> >> THX -- Mark >> >> 1 Nov 24 19:22:24 master: Info: Dovecot v2.2.32 (dfbe293d4) starting up for imap (core dumps disabled) >> 2 Nov 24 19:22:24 ssl-params: Info: Generating SSL parameters >> 3 Nov 24 19:22:26 ssl-params: Info: SSL parameters regeneration completed >> 4 Nov 24 19:23:02 imap-login: Debug: SSL: where=0x10, ret=1: before/accept initialization [174.233.134.88] >> 5 Nov 24 19:23:02 imap-login: Debug: SSL: where=0x2001, ret=1: before/accept initialization [174.233.134.88] >> 6 Nov 24 19:23:02 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read client hello A [174.233.134.88] >> 7 Nov 24 19:23:02 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write server hello A [174.233.134.88] >> 8 Nov 24 19:23:02 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write certificate A [174.233.134.88] >> 9 Nov 24 19:23:02 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write key exchange A [174.233.134.88] >> 10 Nov 24 19:23:02 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write server done A [174.233.134.88] >> 11 Nov 24 19:23:02 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 flush data [174.233.134.88] >> 12 Nov 24 19:23:02 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read client certificate A [174.233.134.88] >> 13 Nov 24 19:23:02 imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3 read client key exchange A [174.233.134.88] >> 14 Nov 24 19:23:02 imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3 read client key exchange A [174.233.134.88] >> 15 Nov 24 19:23:02 auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth >> 16 Nov 24 19:23:02 auth: Debug: Module loaded: /usr/lib64/dovecot/auth/lib20_auth_var_expand_crypt.so >> 17 Nov 24 19:23:02 auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth >> 18 Nov 24 19:23:02 imap-login: Info: Disconnected: Auth process broken (disconnected before auth was ready, waited 0 secs): user=<>, rip=174.233.134.88, lip=98.102.63.107, TLS handshaking, session=<idAcrMNe8xqu6YZY> >> 19 Nov 24 19:23:02 imap-login: Debug: SSL: where=0x10, ret=1: before/accept initialization [174.233.134.88] >> 20 Nov 24 19:23:02 imap-login: Debug: SSL: where=0x2001, ret=1: before/accept initialization [174.233.134.88] >> 21 Nov 24 19:23:02 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read client hello A [174.233.134.88] >> 22 Nov 24 19:23:02 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write server hello A [174.233.134.88] >> 23 Nov 24 19:23:02 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write certificate A [174.233.134.88] >> 24 Nov 24 19:23:02 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write key exchange A [174.233.134.88] >> 25 Nov 24 19:23:02 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write server done A [174.233.134.88] >> 26 Nov 24 19:23:02 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 flush data [174.233.134.88] >> 27 Nov 24 19:23:02 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read client certificate A [174.233.134.88] >> 28 Nov 24 19:23:02 imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3 read client key exchange A [174.233.134.88] >> 29 Nov 24 19:23:02 imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3 read client key exchange A [174.233.134.88] >> 30 Nov 24 19:23:02 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read client key exchange A [174.233.134.88] >> 31 Nov 24 19:23:02 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read certificate verify A [174.233.134.88] >> 32 Nov 24 19:23:02 imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3 read finished A [174.233.134.88] >> 33 Nov 24 19:23:03 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read finished A [174.233.134.88] >> 34 Nov 24 19:23:03 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write change cipher spec A [174.233.134.88] >> 35 Nov 24 19:23:03 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write finished A [174.233.134.88] >> 36 Nov 24 19:23:03 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 flush data [174.233.134.88] >> 37 Nov 24 19:23:03 imap-login: Debug: SSL: where=0x20, ret=1: SSL negotiation finished successfully [174.233.134.88] >> 38 Nov 24 19:23:03 imap-login: Debug: SSL: where=0x2002, ret=1: SSL negotiation finished successfully [174.233.134.88] >> 39 Nov 24 19:23:04 auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth >> 40 Nov 24 19:23:04 auth: Debug: Module loaded: /usr/lib64/dovecot/auth/lib20_auth_var_expand_crypt.so >> 41 Nov 24 19:23:04 auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth >> 42 Nov 24 19:23:04 imap-login: Info: Disconnected: Auth process broken (disconnected before auth was ready, waited 2 secs): user=<>, rip=174.233.134.88, lip=98.102.63.107, TLS, session=<YGw7rMNe+Rqu6YZY> >> 43 Nov 24 19:23:04 imap-login: Debug: SSL alert: close notify [174.233.134.88] >> 44 Nov 24 19:23:05 imap-login: Debug: SSL: where=0x10, ret=1: before/accept initialization [174.233.134.88] >> 45 Nov 24 19:23:05 imap-login: Debug: SSL: where=0x2001, ret=1: before/accept initialization [174.233.134.88] >> 46 Nov 24 19:23:05 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read client hello A [174.233.134.88] >> 47 Nov 24 19:23:05 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write server hello A [174.233.134.88] >> 48 Nov 24 19:23:05 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write certificate A [174.233.134.88] >> 49 Nov 24 19:23:05 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write key exchange A [174.233.134.88] >> 50 Nov 24 19:23:05 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write server done A [174.233.134.88] >> 51 Nov 24 19:23:05 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 flush data [174.233.134.88] >> 52 Nov 24 19:23:05 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read client certificate A [174.233.134.88] >> 53 Nov 24 19:23:05 imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3 read client key exchange A [174.233.134.88] >> 54 Nov 24 19:23:05 imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3 read client key exchange A [174.233.134.88] >> 55 Nov 24 19:23:05 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read client key exchange A [174.233.134.88] >> 56 Nov 24 19:23:05 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read certificate verify A [174.233.134.88] >> 57 Nov 24 19:23:05 imap-login: Debug: SSL: where=0x2002, ret=-1: SSLv3 read finished A [174.233.134.88] >> 58 Nov 24 19:23:05 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 read finished A [174.233.134.88] >> 59 Nov 24 19:23:05 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write change cipher spec A [174.233.134.88] >> 60 Nov 24 19:23:05 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 write finished A [174.233.134.88] >> 61 Nov 24 19:23:05 imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3 flush data [174.233.134.88] >> 62 Nov 24 19:23:05 imap-login: Debug: SSL: where=0x20, ret=1: SSL negotiation finished successfully [174.233.134.88] >> 63 Nov 24 19:23:05 imap-login: Debug: SSL: where=0x2002, ret=1: SSL negotiation finished successfully [174.233.134.88] >> 64 Nov 24 19:23:08 auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth >> 65 Nov 24 19:23:08 auth: Debug: Module loaded: /usr/lib64/dovecot/auth/lib20_auth_var_expand_crypt.so >> 66 Nov 24 19:23:08 auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth >> 67 Nov 24 19:23:08 imap-login: Info: Disconnected: Auth process broken (disconnected before auth was ready, waited 3 secs): user=<>, rip=174.233.134.88, lip=98.102.63.107, TLS, session=<7ZF4rMNe8hqu6YZY> >> 68 Nov 24 19:23:08 imap-login: Debug: SSL alert: close notify [174.233.134.88] >> 69 Nov 24 19:23:16 auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth >> 70 Nov 24 19:23:16 auth: Debug: Module loaded: /usr/lib64/dovecot/auth/lib20_auth_var_expand_crypt.so >> 71 Nov 24 19:23:16 auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth >> 72 Nov 24 19:23:16 imap-login: Info: Disconnected: Auth process broken (disconnected before auth was ready, waited 0 secs): user=<>, rip=192.168.0.54, lip=192.168.0.2, session=<6bbyrMNeGM/AqAA2> >> 73 Nov 24 19:24:13 auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth >> 74 Nov 24 19:24:13 auth: Debug: Module loaded: /usr/lib64/dovecot/auth/lib20_auth_var_expand_crypt.so >> 75 Nov 24 19:24:13 auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth >> 76 Nov 24 19:24:13 imap-login: Info: Disconnected: Auth process broken (disconnected before auth was ready, waited 0 secs): user=<>, rip=192.168.0.52, lip=192.168.0.2, session=<b75YsMNeb9nAqAA0> >> >> Normal OK messages from dovecot 2.2.15: >> >> Nov 24 23:50:49 imap-login: Debug: SSL: where=0x20, ret=1: SSL negotiation finished successfully [174.233.134.88] >> Nov 24 23:50:49 imap-login: Debug: SSL: where=0x2002, ret=1: SSL negotiation finished successfully [174.233.134.88] >> Nov 24 23:50:49 auth: Debug: client in: AUTH 1 PLAIN service=imap secured session=vQnEacde6QCu6YZY lip=98.102.63.107 rip=174.233.134.88 lport=993 rport=6889 resp=AG0udGhlbQAhbXRfMTAxOQ== (previous base64 data may contain sensitive data) >> Nov 24 23:50:49 auth-worker(17650): Debug: shadow(m.them,174.233.134.88): lookup >> Nov 24 23:50:49 auth: Debug: client passdb out: OK 1 user=m.them >> >> Finally, the 2.2.15 doveconf, which I used the same for 2.2.32: >> >> > doveconf -n >> # 2.2.15: /usr/local/etc/dovecot/dovecot.conf >> # OS: Linux 4.4.88 x86_64 Slackware 14.2 >> auth_debug = yes >> auth_debug_passwords = yes >> auth_gssapi_hostname = $ALL >> auth_krb5_keytab = /etc/dovecot/dovecot.keytab >> auth_mechanisms = plain login gssapi >> auth_use_winbind = yes >> auth_username_format = %n >> auth_verbose = yes >> auth_verbose_passwords = plain >> disable_plaintext_auth = no >> info_log_path = /var/log/dovecot_info >> mail_location = maildir:~/Maildir >> passdb { >> driver = shadow >> } >> protocols = imap >> ssl_cert = </etc/ssl/certs/OHPRS/GoDaddy/Apache/2016-08-10/54e789087d419b6e.crt >> ssl_key = </etc/ssl/certs/OHPRS/GoDaddy/mail.ohprs.org.key >> userdb { >> driver = passwd >> } >> verbose_ssl = yes

1 0

Dovecot proxy
by Federico Bartolucci 24 Nov '17

24 Nov '17

Hello, has someone already tested the dovecot-proxy with more than 10 nodes? or someone knows anyway if is it officially supported up to a certain number? Thanks.

2 1

set parameter per user
by A. Schulze 24 Nov '17

24 Nov '17

Hello, My dovecot server (2.2.33.2) work with "lmtp_save_to_detail_mailbox = no" Now I would like to enable the feature for /some/ users. Is that an option that could be set from an LDAP entry? I tried the following: modify my ldap schema to allow an optional attribute "lmtp-save-to-detail-mailbox" in /etc/dovecot/ldap.conf user_attrs = ... =lmtp_save_to_detail_mailbox=%{ldap:lmtp-save-to-detail-mailbox:no}, =... Now I set an ldapattribute "lmtp-save-to-detail-mailbox" with value "yes" for some users. Unfortunately messages to user+extension@domain are still delivered to INBOX/ while they should be delivered to INBOX/extension. I also tried to make the attribute accessible vi pass_attr and userdb_foo = ... because I use prefetch driver as userdb. I also disabled prefetching at all but no luck :-/ any Ideas? Andreas

3 5

Exclude disabled accounts
by Evgeniy Korneechev 23 Nov '17

23 Nov '17

Hello! We have userdb=passwd. userdb { driver = passwd #server was entered domain Active Directory override_fields = home=/var/vmail/glu_vrem/%u } If I disable in AD user's account, he can not sign in. But he can and will receive letters, which of course is not correct. How can I exclude disabled accounts from 'userdb'? dovecot -n: # 2.2.27 (c0f36b0): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.16 (fed8554) # OS: Linux 4.4.39-std-def-alt0.M80P.1 x86_64 ALT 8.1 Server auth_debug = yes auth_debug_passwords = yes auth_mechanisms = plain login cram-md5 auth_socket_path = /var/run/dovecot/auth-userdb auth_username_chars = auth_verbose = yes auth_verbose_passwords = plain base_dir = /var/run/dovecot/ debug_log_path = /var/log/dovecot disable_plaintext_auth = no first_valid_gid = 502 first_valid_uid = 502 last_valid_gid = 268999999 last_valid_uid = 268999999 log_path = /var/log/dovecot login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c mail_access_groups = vmail mail_debug = yes mail_gid = 502 mail_location = maildir:/%Lh/Maildir/:INDEX=/%Lh/Maildir/ mail_plugins = " quota autocreate" mail_privileged_group = vmail mail_uid = 502 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext imapflags notify mbox_write_locks = fcntl namespace { list = children location = maildir:%%h/Maildir:INDEX=~/Maildir/shared/%%u prefix = shared/%%u/ separator = / subscriptions = yes type = shared } namespace inbox { inbox = yes location = prefix = separator = / type = private } passdb { driver = pam } passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { quota_rule = *:storage=5G recipient_delimiter = + sieve = /etc/dovecot/sieves/default.sieve sieve_default = /etc/dovecot/sieves/default.sieve sieve_dir = ~/sieve sieve_extensions = +notify +imapflags sieve_max_redirects = 8 } protocols = imap pop3 lmtp sieve service auth-worker { user = root } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-userdb { group = vmail mode = 0666 user = vmail } } service dict { unix_listener dict { group = vmail mode = 0600 user = vmail } } service imap-login { inet_listener imap { port = 143 } } service imap { process_limit = 1024 vsz_limit = 256 M } service lmtp { unix_listener lmtp { mode = 0666 } } service managesieve-login { inet_listener sieve { port = 4190 } vsz_limit = 64 M } service pop3-login { inet_listener pop3 { port = 110 } } service pop3 { process_limit = 1024 } ssl_ca = </usr/share/ca-certificates/ca-bundle.crt ssl_cert = </etc/dovecot/server.crt ssl_key = # hidden, use -P to show it userdb { driver = passwd override_fields = home=/var/vmail/glu_vrem/%u } userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol lmtp { mail_plugins = " quota autocreate sieve" } protocol lda { mail_plugins = " quota autocreate sieve quota" plugin { quota = dict:user::file:/var/vmail/glu_vrem/%n/.quotausage } } protocol imap { mail_plugins = " quota autocreate autocreate imap_quota" plugin { autocreate = INBOX autocreate2 = Sent autocreate3 = Trash autocreate4 = Drafts autocreate5 = Junk autosubscribe = INBOX autosubscribe2 = Sent autosubscribe3 = Trash autosubscribe4 = Drafts autosubscribe5 = Junk quota = dict:user::file:/var/vmail/glu_vrem/%n/.quotausage } } protocol sieve { mail_max_userip_connections = 10 managesieve_implementation_string = Dovecot Pigeonhole managesieve_logout_format = bytes=%i/%o managesieve_max_compile_errors = 5 managesieve_max_line_length = 65536 } protocol pop3 { pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = %08Xu%08Xv } -- WBR, Korneechev Evgeniy BaseALT/ALTLinux Team

2 1

Passing information from passdb to userdb
by Qmail 23 Nov '17

23 Nov '17

I'm trying to hack together a new authentication back-end and I wanted to know if it's possible to pass values from passdb to userdb in the auth_request structure at authentication time. I modified struct auth_request in auth-request.h to contain a new variable and it gets set properly in my passdb, however the value is not there when checking for it userdb. I'm very novice when it comes to Dovecot programming so any help is appreciated. Thanks!

2 3

[Dovecot] Configure replication in backup mode
by japerez 22 Nov '17

22 Nov '17

Dovecot 2.2.27 (c0f36b0) I'm trying to configure dovecot to backup all my email to a secondary server using "dsync". I got it working in "sync" mode or two-way synchonization, that means whatever happens in one server gets replicated in the other. However, documentation also says that a one way synchronization is posible, yet, after spending a good amount of hours searching, I failed to find what do I have to modify in my "30-dsync.conf" to do so. My 30-dsync.conf reads as follows: #This sets globally the port needed to connect #to the doveadm service #doveadm_port = 12345 # Set the password globally to use for connecting to # and requiring for the doveadm service doveadm_password = +++++++++++++ # Set the directory for validating certificates # provided when running with SSL enabled # Should be the standard OpenSSL certificate directory by default ssl_client_ca_dir = /etc/ssl/certs # Configure the doveadm service to listen service doveadm { inet_listener { # port to listen on port = 12345 # enable SSL # ssl = yes } } # Configure the aggregator service for notifications service aggregator { fifo_listener replication-notify-fifo { # Your mail user that's managing files generally is used here user = +++++ mode = 0755 } unix_listener replication-notify { user = +++++ mode = 0755 } } # Configure the replicator service service replicator { user = root process_min_avail = 1 unix_listener replicator-doveadm { user = root mode = 0755 } } replication_dsync_parameters = -d -N -l 30 -U -x nobody # Configure target hosts for replication # tcps can be tcp if you don't want to connect with SSL # :port can be omitted if it's the default set globally for doveadm plugin { mail_replica = tcp:*.*.*.*:12345 } Thanks.

1 0

dovecot initscript
by dovecot＠schoepfer.info 22 Nov '17

22 Nov '17

Hi, about https://wiki.dovecot.org/DovecotInit, i wondered about stop) if test $running = yes; then echo "Stopping Dovecot" kill `cat $pidfile` echo "." else echo "Dovecot is already stopped." fi ;; Is "doveadm stop" technically the same, or better/worse/safer? Does "doveadm stop" wait until all child processes are finished, or would "sleep 1" in the restart-function still be necessary in this case? Is "kill -HUP `cat $pidfile`" technically the same as "doveadm reload"? If it'a all fine to use doveadm in an initscript, i there a reason to not add "doveadm start" to doveadm functionality? Surely this is not that important, but maybe a bit more consistent. Thanks, Johannes

1 0

Log rotation and combining...
by SH Development 22 Nov '17

22 Nov '17

I have recently noticed that my dovecot-deliver.log is huge and wanted to start rotating it. So a couple of questions: 1. Can the dovecot-deliver.log be combined with the maillog, that gets rotated weekly? If it can be done, is it advisable? Since the inception of this particular server, the log file has been located in the /home/vmail directory. Is there a reason it shouldn’t be located in the /var/log directory with the maillog? 2. Separate from above, if I create a new logrotate script example as follows: # dovecot SIGUSR1: Re-opens the log files. /home/vmail/dovecot-deliver.log { missingok notifempty delaycompress sharedscripts postrotate /bin/kill -USR1 `cat /var/run/dovecot/master.pid 2>/dev/null` 2> /dev/null || true endscript } I get the following error only when cron tries to run it: /etc/cron.daily/logrotate: error: stat of /home/vmail/dovecot-deliver.log failed: Permission denied Owner on the log are vmail:vmail. If I manually force logrotate on this particular log, it works fine. Ethon

3 6

Re: Errors installing on Ubuntu 17.04
by Someone 21 Nov '17

21 Nov '17

On Tue, 21/11/17, Jeff Kletsky <dovecot(a)allycomm.com> wrote: > On 11/20/17 1:58 PM, Someone wrote: > > > I've been struggling with this on and off for a while now. Upon > > attempting to install Dovecot on Ubuntu 17.04 I get the following errors [...] > "Hint: Some lines were ellipsized, use -l to show in full." I'm aware of that, yes. Unfortunately I don't know how to tell any of the myriad of package installers to "do the right thing" in such cases, and, as stated, this is happening during installation. > Without seeing the full messages, my guess is that you've got problems with your IPv6 configuration or connectivity. Entirely possible, since I don't have IPv6 and have completely disabled it as a result. Even were I to re-enable it, I don't see it would help if problems with IPv6 connectivity would also be a problem (because I don't have it).

2 1

home folder for virtual users with autoexpunge setting
by felix＠kngnt.org 21 Nov '17

21 Nov '17

Hi all, I have enabled today the autoexpunge setting for Trash folders, and I am getting the following error when Dovecot starts: imap(<USER>): Error: autoexpunge: Couldn't create dovecot.autoexpunge.lock lock: User has no home directory I understand this is correct: as <USER> is a virtual user, it does not have home folder. Is there any way I can set the autoexpunge plugin to store the lock file in the virtual user email home folder? Thank you! Felix

4 4

macros in config support
by Arkadiusz Miśkiewicz 21 Nov '17

21 Nov '17

Hi. Is there any support for macros in dovecot configuration - user defined macros? For example: server-config.conf: %define my_db_name "aaa" %define my_db_host "db.example.com" %define my_db_pass "sdfdsfsdfsdf2313" %define server_id 10 %define something blabla ... dovecot-sql.conf: !include server-config.conf connect = host=%{my_db_host} dbname=%{my_db_name} .... iterate_query = SELECT ... WHERE os.id_pop3_server=%{server_id} ... Basically to be able to use own macros anywhere in config files. -- Arkadiusz Miśkiewicz, arekm / ( maven.pl | pld-linux.org )

1 0

LMTP "Relative home directory paths not supported"
by Jeff Kletsky 21 Nov '17

21 Nov '17

I'm in the process of moving from LDA to LMTP (Postfix upstream) prior to a transition off `nix accounts to virtual accounts and am stumped by LMTP reporting dovecot: lmtp(10019, jeff(a)example.com) Error: Relative home directory paths not supported: 0 LDA does /not /have any problems with PAM or passwd-file passdb/userdb and the ubiquitous definition of mail_location = maildir:~/Maildir:LAYOUT=fs I have yet to be able to get LMTP to deliver mail, nor have I found anything on the Dovecot wiki to describe how to represent that the mail_location is <whatever/userdb/returned/for/home>/Maildir I'd prefer to localize the user-to-file-space mapping localized to Dovecot (rather than split within Postfix and Dovecot) I'd definitely appreciate any pointers to web pages or specific suggestions as to how to resolve this. Excerpts of Dovecot local.conf follow, full doveconf -n output on request. The/users /file is in the same format as FreeBSD /etc/master.passwd with name, password, UID, gid, home_dir, and shell meaningfully populated. The configuration below works with LDA (end-to-end). With LMTP, it identifies <jeff(a)example.com> as a valid destination, but fails on delivery with the "relative home directory paths" error message. passdb { driver = passwd-file args = /path/to/users } userdb { driver = passwd-file args = username_format=%n /path/to/users } # See http://wiki2.dovecot.org/MailLocation/Maildir # https://wiki.dovecot.org/VirtualUsers/Home mail_location = maildir:~/Maildir:LAYOUT=fs # mail_location = maildir:%h/Maildir:LAYOUT=fs Thanks! Jeff

2 4

Errors installing on Ubuntu 17.04
by Someone 21 Nov '17

21 Nov '17

I've been struggling with this on and off for a while now. Upon attempting to install Dovecot on Ubuntu 17.04 I get the following errors Selecting previously unselected package dovecot-imapd. (Reading database ... 243684 files and directories currently installed.) Preparing to unpack .../dovecot-imapd_1%3a2.2.27-2ubuntu2_amd64.deb ... Unpacking dovecot-imapd (1:2.2.27-2ubuntu2) ... Processing triggers for dovecot-core (1:2.2.27-2ubuntu2) ... Processing triggers for ufw (0.35-4) ... Setting up dovecot-imapd (1:2.2.27-2ubuntu2) ... Creating config file /etc/dovecot/conf.d/20-imap.conf with new version Processing triggers for dovecot-core (1:2.2.27-2ubuntu2) ... Job for dovecot.service failed because the control process exited with error code. See "systemctl status dovecot.service" and "journalctl -xe" for details. invoke-rc.d: initscript dovecot, action "restart" failed. dovecot.service - Dovecot IMAP/POP3 email server Loaded: loaded (/lib/systemd/system/dovecot.service; enabled; vendor preset: enabled) Active: failed (Result: exit-code) since Thu 2017-10-05 14:08:56 BST; 17ms ago Docs: man:dovecot(1) http://wiki2.dovecot.org/ Process: 8880 ExecStop=/usr/bin/doveadm stop (code=exited, status=0/SUCCESS) Process: 8885 ExecStart=/usr/sbin/dovecot (code=exited, status=89) Main PID: 8729 (code=exited, status=0/SUCCESS) Oct 05 14:08:56 ash systemd[1]: Starting Dovecot IMAP/POP3 email server... Oct 05 14:08:56 ash dovecot[8885]: Error: socket() failed: Address family n…ocol Oct 05 14:08:56 ash dovecot[8885]: Error: service(imap-login): listen(::, 1…ocol Oct 05 14:08:56 ash dovecot[8885]: master: Error: socket() failed: Address …ocol Oct 05 14:08:56 ash dovecot[8885]: Fatal: Failed to start listeners Oct 05 14:08:56 ash systemd[1]: dovecot.service: Control process exited, co…s=89 Oct 05 14:08:56 ash systemd[1]: Failed to start Dovecot IMAP/POP3 email server. Oct 05 14:08:56 ash systemd[1]: dovecot.service: Unit entered failed state. Oct 05 14:08:56 ash systemd[1]: dovecot.service: Failed with result 'exit-code'. Hint: Some lines were ellipsized, use -l to show in full. dpkg: error processing package dovecot-core (--configure): subprocess installed post-installation script returned error exit status 1 (and more) Apologies for any wrapping due to long lines in the above output.

2 1

Re: dovecot-lda without starting dovecot?
by Aki Tuomi 20 Nov '17

20 Nov '17

you could try setting protocols = in config file to disable (most) listeners. ---Aki TuomiDovecot oy -------- Original message --------From: Stephan von Krawczynski <skraw.ml(a)ithnet.com> Date: 03/11/2017 19:39 (GMT+02:00) To: Dovecot Mailing List <dovecot(a)dovecot.org> Subject: Re: dovecot-lda without starting dovecot? On Fri, 3 Nov 2017 19:30:22 +0200 Sami Ketola <sami.ketola(a)dovecot.fi> wrote: > > On 3 Nov 2017, at 18.23, Stephan von Krawczynski <skraw.ml(a)ithnet.com> > > wrote: Hello Aki, > > > > let me explain this a bit more. We do not intend to use only some copied > > binary. Of course we would do a full installation of dovecot and > > pidgeonhole, only we question if it is necessary to start the dovecot > > init-file bringing up the dovecot imap/imap-login/pop/pop-login/auth and > > other processes. Indeed we have virtual users. > > > While it might be possible to disable all the other services except master I > must ask why? How would the users be accessing their mails then? > > Sami Hello Sami, you did not read my first post. We are talking about a multihost installation where one host does SMTP and LDA, and the other does POP and IMAP (with dovecot). Now we want to use dovecot-lda for the local delivery _on the SMTP host_. So there is no need for open POP or IMAP ports and the corresponding running services. -- Regards, Stephan

7 19

doveadm mailbox list -s Segmentation fault
by Kristjan Eentsalu 20 Nov '17

20 Nov '17

Hey, I'm getting Segmentation fault when doing "doveadm mailbox list -s -u kristjan.eentsalu". doveadm mailbox list -u kristjan.eentsalu works fine. OS: FreeBSD 11.1-RELEASE-p1 Dovecot 2.2.33.2 , pigenhole 0.4.21 Trace and dovecot -n below GNU gdb 6.1.1 [FreeBSD] Copyright 2004 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "amd64-marcel-freebsd"... Core was generated by `doveadm mailbox list -s -u kristjan.eentsalu'. Program terminated with signal 11, Segmentation fault. Reading symbols from /lib/libz.so.6...done. Loaded symbols for /lib/libz.so.6 Reading symbols from /lib/libcrypt.so.5...done. Loaded symbols for /lib/libcrypt.so.5 Reading symbols from /usr/local/lib/dovecot/libdovecot-storage.so.0...done. Loaded symbols for /usr/local/lib/dovecot/libdovecot-storage.so.0 Reading symbols from /usr/local/lib/dovecot/libdovecot.so.0...done. Loaded symbols for /usr/local/lib/dovecot/libdovecot.so.0 Reading symbols from /lib/libc.so.7...done. Loaded symbols for /lib/libc.so.7 Reading symbols from /usr/local/lib/dovecot/lib01_acl_plugin.so...done. Loaded symbols for /usr/local/lib/dovecot/lib01_acl_plugin.so Reading symbols from /usr/local/lib/dovecot/lib10_quota_plugin.so...done. Loaded symbols for /usr/local/lib/dovecot/lib10_quota_plugin.so Reading symbols from /usr/local/lib/dovecot/lib15_notify_plugin.so...done. Loaded symbols for /usr/local/lib/dovecot/lib15_notify_plugin.so Reading symbols from /usr/local/lib/dovecot/lib20_mail_log_plugin.so...done. Loaded symbols for /usr/local/lib/dovecot/lib20_mail_log_plugin.so Reading symbols from /usr/local/lib/dovecot/doveadm/lib10_doveadm_acl_plugin.so...done. Loaded symbols for /usr/local/lib/dovecot/doveadm/lib10_doveadm_acl_plugin.so Reading symbols from /usr/local/lib/dovecot/doveadm/lib10_doveadm_quota_plugin.so...done. Loaded symbols for /usr/local/lib/dovecot/doveadm/lib10_doveadm_quota_plugin.so Reading symbols from /usr/local/lib/dovecot/doveadm/lib10_doveadm_sieve_plugin.so...done. Loaded symbols for /usr/local/lib/dovecot/doveadm/lib10_doveadm_sieve_plugin.so Reading symbols from /usr/local/lib/dovecot-2.2-pigeonhole/libdovecot-sieve.so.0...done. Loaded symbols for /usr/local/lib/dovecot-2.2-pigeonhole/libdovecot-sieve.so.0 Reading symbols from /usr/local/lib/libldap-2.4.so.2...done. Loaded symbols for /usr/local/lib/libldap-2.4.so.2 Reading symbols from /usr/local/lib/liblber-2.4.so.2...done. Loaded symbols for /usr/local/lib/liblber-2.4.so.2 Reading symbols from /usr/local/lib/dovecot/libdovecot-lda.so.0...done. Loaded symbols for /usr/local/lib/dovecot/libdovecot-lda.so.0 Reading symbols from /usr/lib/libssl.so.8...done. Loaded symbols for /usr/lib/libssl.so.8 Reading symbols from /lib/libcrypto.so.8...done. Loaded symbols for /lib/libcrypto.so.8 Reading symbols from /libexec/ld-elf.so.1...done. Loaded symbols for /libexec/ld-elf.so.1 #0 0x0000000800d77e04 in mailbox_tree_traverse (tree=0x0, path=0x801c1a540 "INBOX", create=false, created_r=0x7fffffffe4f7) at mailbox-tree.c:103 103 if (*path != tree->separator && *path != '\0') # 2.2.33.2 (d6601f4ec): /usr/local/etc/dovecot/dovecot.conf # Pigeonhole version 0.4.21 (92477967) # OS: FreeBSD 11.1-RELEASE-p1 amd64 auth_master_user_separator = * auth_verbose_passwords = plain disable_plaintext_auth = no lmtp_save_to_detail_mailbox = yes mail_access_groups = imapmail mail_gid = imapmail mail_plugins = acl quota mail_log notify mail_uid = imapmail mailbox_list_index = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext editheader namespace { hidden = no inbox = no list = no location = prefix = separator = / subscriptions = yes type = private } namespace avalik { hidden = no list = children location = maildir:/mail/imap/ domain.ee/shared:INDEXPVT=%h/public:LAYOUT=fs:DIRNAME=dsfFSFS prefix = shared/ separator = / subscriptions = no type = public } namespace inbox { alias_for = hidden = no inbox = yes list = yes location = mailbox Drafts { special_use = \Drafts } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Spam { special_use = \Junk } mailbox Trash { special_use = \Trash } prefix = INBOX/ separator = / subscriptions = no type = private } namespace user { list = children location = maildir:%%h/Maildir:LAYOUT=fs:DIRNAME=dsfFSFS:INDEXPVT=%h/shared/%%n prefix = user/%%n/ separator = / subscriptions = no type = shared } passdb { args = /usr/local/etc/dovecot/master-users driver = passwd-file master = yes pass = yes } passdb { args = /usr/local/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } passdb { args = username_format=%u /usr/local/etc/dovecot/users driver = passwd-file } plugin { acl = vfile:/mail/dovecot/db/global-acls:cache_secs=300 acl_shared_dict = file:/mail/dovecot/db/shared-mailboxes quota = maildir quota2 = maildir:Public quota:ns=shared/ quota2_rule = *:storage=100G quota_grace = 10%% quota_rule = *:storage=5G quota_rule2 = INBOX/Trash:storage=+100M quota_status_nouser = DUNNO quota_status_overquota = 552 5.2.2 Mailbox is full quota_status_success = DUNNO recipient_delimiter = + sieve = file:~/sieve;active=~/.dovecot.sieve sieve_extensions = +editheader } protocols = imap lmtp sieve service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } service managesieve-login { inet_listener sieve { port = 4190 } inet_listener sieve_deprecated { port = 2000 } service_count = 0 vsz_limit = 64 M } ssl = no ssl_cert = </etc/ssl/servercerts/domain.crt ssl_key = # hidden, use -P to show it userdb { args = /usr/local/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } userdb { args = username_format=%u /usr/local/etc/dovecot/users default_fields = uid=1000 gid=1000 home=/mail/imap/%d/user/%n mail=maildir:~/Maildir:LAYOUT=fs:DIRNAME=dsfFSFS driver = passwd-file } protocol lmtp { mail_plugins = acl quota mail_log notify sieve postmaster_address = postmaster(a)domain.ee } protocol imap { mail_plugins = acl quota mail_log notify imap_acl imap_quota } Kristjan

2 4

how to fix this warnig
by Chandran Manikandan 20 Nov '17

20 Nov '17

Hi Friends, I have noticed below log in dovecot.log on my machine Centos 6.7 32 bit. Warning: Inotify instance limit for user 89 (UID vpopmail) exceeded, disabling. Increase /proc/sys/fs/inotify/max_user_instances I have increased manually but after reboot goto the same existing default value. How do i fix this issue permanently. Advance thanks for your help. -- *Thanks,* *Manikandan.C* *System Administrator*

2 2

Dovecots header files not optimized for external plugins
by Jan Engelhardt 19 Nov '17

19 Nov '17

Making third-party plugins for Dovecot is really hard and frustrating. Using dovecot 2.2.33.2 and the following sources, the compile errors keep coming. The use of g++ is mandated as the underlying backend this plugin will access only has a C++ interface. == Source 1 /* g++-7 -c a.cpp */ #include <byteswap.h> #include <dovecot/lib.h> #include <dovecot/auth-request.h> #include <dovecot/passdb.h> static enum passdb_result authdb_mapi_logon(struct auth_request *rq, const char *password) { int x = dev_null_fd + bswap_16(1); } == Problems 1 /usr/include/dovecot/compat.h:45:4: error: #error uoff_t size not set # error uoff_t size not set == Source 2 /* g++-7 -DHAVE_CONFIG_H -c a.cpp */ #include "config.h" /* generated by my configure */ #include <byteswap.h> #include <dovecot/lib.h> #include <dovecot/auth-request.h> #include <dovecot/passdb.h> static enum passdb_result authdb_mapi_logon(struct auth_request *rq, const char *password) { int x = dev_null_fd + bswap_16(1); } == Problems 2 In file included from /usr/include/bits/byteswap.h:35:0, from /usr/include/byteswap.h:24, from a.cpp:2: /usr/include/dovecot/byteorder.h:32:24: error: expected unqualified-id before ‘__extension__’ static inline uint16_t bswap_16(uint16_t in); == Other problems dovecot headers files are missing 'extern "C"' lines. This means the linkage of symbols like dev_null_fd is not what it should be. I can't use extern "C" { #include <dovecot/...> } either because then the standardy library headers that are included by dovecot headers can easily start acting up too.

2 2

user selection for replication
by Remko Lodder 18 Nov '17

18 Nov '17

Hi, I am running a setup where I have a multitude of users. Usernames are formed in both user-domain.tld and user(a)domain.tld. One to be able to login with the @ account to dovecot / webmail etc and the - account to be able to deliver email to it. Virtualmin does it like that for example. This is fine for logging in to accounts and telling postfix via lmtp which users are valid. But I do not want the - AND @ account to both synchronise. How can I select which users can replicate and then ideally like I can do in ldap ‘uid=*@*’ for example? Thanks Remko

1 0

Re: Plugin virtual, Horde BAD IMAP QRESYNC not enabled
by wertstoffe＠nurfuerspam.de 18 Nov '17

18 Nov '17

Return-path: <xxxxxx-xxxxxxxx-xxxxxxxxx-xxxxxxx-xxxxxxx-xxx(a)xxxxxx.xxxxxxxxx.xx.xxx> Envelope-to: xxxxx@xxxxxxxxx Delivery-date: xxx, xx xxx xxxx xx:xx:xx +xxxx Received: xxxx [xxx.x.x.x] (xxxx=xxxxxxxxx) xx xxxxxxxxx.xxxxxxxxxxxx.xx xxxx xxxxx (xxxx x.xx) (xxxxxxxx-xxxx <xxxxxx-xxxxxxxx-xxxxxxxxx-xxxxxxx-xxxxxxx-xxx(a)xxxxxx.xxxxxxxxx.xx.xxx>) xx xxxxxx-xxxxxx-xx xxx xxxxx@xxxxxxxxx; xxx, xx xxx xxxx xx:xx:xx +xxxx Delivered-To: xxxxxxx.xxxxxxx(a)xxxxx.xxx Received: xxxx xxxxx-xxxx.x.xxxxxx.xxx [xx.xxx.xxx.xxx] xx xxxxxxxxx xxxx xxxx (xxxxxxxxx-x.x.xx) xxx <xxxxx@xxxxxxxxx> (xxxxxx-xxxx); xxx, xx xxx xxxx xx:xx:xx +xxxx (xxxx) Received: xx xx.xxx.xx.xxx xxxx xxxx xx xxxxxxxxxxxxxxxx; xxx, xx xxx xxxx xx:xx:xx -xxxx (xxx) X-Google-Smtp-Source: xxxxxxxxxxxxxxxxxxxxxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx X-Received: xx xx.xxx.xx.xx xxxx xxxx xx xxxxxxxxxxxxxxx.x.xxxxxxxxxxxxx; xxx, xx xxx xxxx xx:xx:xx -xxxx (xxx) ARC-Seal: x=x; x=xxx-xxxxxx; x=xxxxxxxxxx; xx=xxxx; x=xxxxxx.xxx; x=xxx-xxxxxxxx; x=xxxxxxxxxxxxxxx++xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx/xxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxx+xxxxxxxx xxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxx xxxxxxxxx/xxxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxxxxxx/xxxxxxxxxxxxxxxxxx xxxxxxxx+xxxxxxxxxxxxxx/xxxxxxxxxxxx+x/xxxxxxxxxxxxxxxxxxxxxxxxxxxxx xx+x== ARC-Message-Signature: x=x; x=xxx-xxxxxx; x=xxxxxxx/xxxxxxx; x=xxxxxx.xxx; x=xxx-xxxxxxxx; x=xxxxxxxx-xx:xxxxxxx-xx:xxxx-xx:xxxxx-xx:xxxx-xxxxxxx :xxxx-xxxxxxxxxxx:xxxx:xxxxxxx:xx:xxxx:xxx-xxxxxxxxxxxxxx-xxxxxxx; xx=xxxxxxxxxxxxxx+/xxxxxx/xxxxxxxxxxxxxxxxxxxx=; x=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxx+xx+xxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxx xxxxx/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxx== ARC-Authentication-Results: x=x; xx.xxxxxx.xxx; xxx=xxxx (xxxxxx.xxx: xxxxxx xx xxxxxx-xxxxxxxx-xxxxxxxxx-xxxxxxx-xxxxxxx-xxx(a)xxxxxx.xxxxxxxxx.xx.xxx xxxxxxxxxx xxx.xxx.xx.xxx xx xxxxxxxxx xxxxxx) xxxx.xxxxxxxx=xxxxxx-xxxxxxxx-xxxxxxxxx-xxxxxxx-xxxxxxx-xxx(a)xxxxxx.xxxxxxxxx.xx.xxx Received: xxxx xxxx.xxxxxxxxx.xx.xxx (xxxx.xxxxxxxxx.xx.xxx. [xxx.xxx.xx.xxx]) xx xx.xxxxxx.xxx xxxx xxxxxx xx xxxxxxxxxxxxxx.xxx.xxxx.xx.xx.xx.xx.xx xxx <xxxxxxx.xxxxxxx(a)xxxxx.xxx> (xxxxxxx=xxxxxx xxxxxx=xxxxx-xxx-xxxxxx-xxx-xxxxxx xxxx=xxx/xxx); xxx, xx xxx xxxx xx:xx:xx -xxxx (xxx) Received-SPF: xxxx (xxxxxx.xxx: xxxxxx xx xxxxxx-xxxxxxxx-xxxxxxxxx-xxxxxxx-xxxxxxx-xxx(a)xxxxxx.xxxxxxxxx.xx.xxx xxxxxxxxxx xxx.xxx.xx.xxx xx xxxxxxxxx xxxxxx) xxxxxx-xx=xxx.xxx.xx.xxx; Authentication-Results: xx.xxxxxx.xxx; xxx=xxxx (xxxxxx.xxx: xxxxxx xx xxxxxx-xxxxxxxx-xxxxxxxxx-xxxxxxx-xxxxxxx-xxx(a)xxxxxx.xxxxxxxxx.xx.xxx xxxxxxxxxx xxx.xxx.xx.xxx xx xxxxxxxxx xxxxxx) xxxx.xxxxxxxx=xxxxxx-xxxxxxxx-xxxxxxxxx-xxxxxxx-xxxxxxx-xxx(a)xxxxxx.xxxxxxxxx.xx.xxx Received: xx xxxx.xxxxxxxxx.xx.xxx xx xxxxxxxxxxxx xxx <xxxxxxx.xxxxxxx(a)xxxxx.xxx>; xxx, xx xxx xxxx xx:xx:xx -xxxx (xxxxxxxx-xxxx <xxxxxx-xxxxxxxx-xxxxxxxxx-xxxxxxx-xxxxxxx-xxx(a)xxxxxx.xxxxxxxxx.xx.xxx>) From: "xx xxxxxxx" <xxxxxx(a)xxxxxx.xx.xxx> To: <xxxxxxx.xxxxxxx(a)xxxxx.xxx> Date: Fri, 15 Sep 2017 08:55:12 -0600 List-Unsubscribe: <xxxxxx:xxxxx-xxxxxxxxxxxxxxxxxxxx-xxxxxxxxxxxxxxxxxxxxxx-xxxxxxxxxxxxxxxxxx-xxxxxxxxxxxxxxxxxx-xxxxxxxxxx@xxxxx.xxxxxxxxx.xx.xxx> MIME-Version: x.x Reply-To: "xxxxxxxx.xxxxxxx" <xxxxx-xxxxxxxxxxxxxxxxxx-xxxxxxxx-xxxxxxxxx-xxxxxxx-xxx(a)xxxxxxxxxxx.xx.xxx> List-ID: <xxxxxxxxxxxxxxx.xx.xxxxx> X-CSA-Complaints: xxxxxxxxxxxxxxxxxxx(a)xxx.xx x-job: xxxxxxxxxxxxxxx Message-ID: <xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx(a)xxxxxxxxxxx.xx.xxxxx> Feedback-ID: xxxxxxx:xxxxxxx:xxx.xxx.xx.xxx:xxxxxxxxx Content-Type: multipart/alternative; boundary="5leCU61ckUeP=_?:" X-SA-Exim-Connect-IP: xxx.x.x.x X-SA-Exim-Mail-From: xxxxxx-xxxxxxxx-xxxxxxxxx-xxxxxxx-xxxxxxx-xxx(a)xxxxxx.xxxxxxxxx.xx.xxx X-Spam-Checker-Version: xxxxxxxxxxxx x.x.x (xxxx-xx-xx) xx xxxxxxxxx X-Spam-Level: X-Spam-Status: xx, xxxxx=x.x xxxxxxxx=x.x xxxxx=xxxxxxxxxxxx xxxxxxxxx=xxx xxxxxxxxxxxxxxx=xx xxxxxxx=x.x.x Subject: xxxxxxxx xxxxx xxx xxxx xxxxxxx xxx xxxxxxx xxx xxxxxxxx & xxxxxxxxxxxx X-SA-Exim-Version: x.x.x (xxxxx xxx, xx xxx xxxx xx:xx:xx +xxxx) X-SA-Exim-Scanned: xxx (xx xxxxxxxxx.xxxxxxxxxxxx.xx) xxxx xx x xxxxx-xxxx xxxxxxx xx xxxx xxxxxx. --xxxxxxxxxxxx=x?: xxxxxxx-xxxx: xxxx/xxxxx; xxxxxxx="xxx-x" xxxxxxx-xxxxxxxx-xxxxxxxx: xxxx ===================================================================== xxxxxxx xxxxxx ===================================================================== xx xxxxxxxx xxxx://xxxxx.xxxxxxxxx.xx.xxx/?xx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx --------------------------------------------------------------------- xxxxxx xxxxxx xxxx://xxxxx.xxxxxxxxx.xx.xxx/?xx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx --------------------------------------------------------------------- xxxxxxx xxxxxx xxxx://xxxxx.xxxxxxxxx.xx.xxx/?xx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx --------------------------------------------------------------------- xx xxxxxx xxxx://xxxxx.xxxxxxxxx.xx.xxx/?xx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxx xxxxx xxxxxx (xxx xx.x.xx.xx xxxx) xxxxxx xxxxx xxxx: xxxx://xxxxx.xxxxxxxxx.xx.xxx/?xx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxx: xxxxxxxx xxxxxxxx: xx xxxxxxx xxxxxxxx xxx, xx xxxxxxxxx xxxxxxxx xxx, xx xxxxxx xxxxxxxxxxx, xx xxxxxxxx xxx xx: xxxxxxx xxxxxxx xxxx: xxx xx xxxx xxxxxxxxxxx: xxxx xxxxxxx xxxxxxxx xxx xxxxxxxxx xxxxx xxxxxx. xxx xxxxxx xxxxxxxx xxxxxxxx xxxxxxxx xxxx xx xxxxxxxxx, xxxxxxxxxx, xxx xxxxx, xxxxxx-xxx, xxx xxx-xx-xxxxxx. xxxx xxxxxxx xx xxxxxxxx xxx xxxxxxxxx xxxxxxxx xxxxxx xxxxxxx x xxxxxxxxx xxxxxxxxx xxxxxx. xxxxxxxx - xxxxxx xx x xxxxxxxx xxxxx xxx xxxx xx xx xxxxx xx. xxxxx xxxxxxxx xx xxxxxxxxx xxxxxxxxxxx xxxx xx xxxxxxxxx xx xxxxxxx xxx xxxx xx xxxxxxxxxxxxx xxxxxxx xxxx xx xxxx xxxxxxxxxx xx xxxx, xxxxxxxx xxxxxx, xx xxxxxxxxxxxxx xxxxxx xx xxxx. xxx xxxxx xx xx xxxx xx x xxxxxxx xxxxxxxxxxxxx xxxxx xx xxxxxx xx xxx xxxxx. xxxxxxxxxxx - xxxxxx xx xxxxxxxxx xxxxxxx xx xxxxxx xxxxxxxxxxx. xxxxxxxxx xxxxxxxxxxxx xxxxxx xx xxxxxxx xx xxxx xxxxxxxx xxxxxxxxxxx. xxxxx xx xxxxxxxxx xxx xxx-xxxxxxx xxxxxxxxxxx, xxxx-xxx xx xxxxxxxx xxxxxxxxx. xxxx xxxx xxxxxxx xxxx xxxxxx xxxx x xxxxxxx, xxx xxx xxxxxxxxxxxxx xxxxxxx. xxxxxxx - xxxxxx xx xxxxxxxxxxx xxx xxxxxxxxxxxx xxxx xxx xxxx xxx xxxxxx xxxx xxxxxx, xxxx xx xxxxxxxxxxx xxxxxxxx xxx xxxx xxxxxxxxx. xxxxx xxxxxxxxxxxx xxx xx xxxxx xx xxxx xxxxxxxxxx xx xxxx xxxxxxxx xxxx xx xxxxxxx ==================================================================== xx.xxx xxxx://xxxxx.xxxxxxxxx.xx.xxx/?xx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxx xxxx://xxxxx.xxxxxxxxx.xx.xxx/?xx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxx xxxx://xxxxx.xxxxxxxxx.xx.xxx/?xx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxx xxxxxxx xxxx://xxxxx.xxxxxxxxx.xx.xxx/?xx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xx xxxxxxxx xxxx xxxxxxx. xx xxx'x xxxx xx xxxxxxxxxxx xxxxxxxxx x-xxxxx xxxx xx xxxxxxxxx xxxxxxx xxxxxx xxx xxxxxxxxxxx, xxxxxx xxxxx xxxx. xxxx://xxxxx.xxxxxxxxx.xx.xxx/?xx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxx xxxx xxxxxxxxxxx xxxxxxxxx xx'x xxxxxxx xxxxxxxx xxx xxxxxxxxx, xxxxxx xxxxx xxx xxxxxxx xxxxxxxxx. xxxx://xxxxx.xxxxxxxxx.xx.xxx/?xx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xx xxxxxxxx xxxx xxxxxx xx xxxxxx, xxxxxxxxxxxxx, xxxxxxxxxx xx xxxxxxxx, xxxxxx xxx xxx 'xxxxxxx xxxxxxxx xxxx' xxxxxxxxx xxxx xx'x xxxxxxxx xxxx xxxxxx xxxxxx. xxxx://xxxxx.xxxxxxxxx.xx.xxx/?xx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx (x) xxxxxxxxx xxxx xx xxxxxxxxxxx xxxxxxx, x.x. xxx xxxxxxxxxxx xxxxxxxxx xxxxxx xx xxxxxxx xx xxxxxx xxxxxxx xxxxxx. --xxxxxxxxxxxx=x?: xxxxxxx-xxxx: xxxx/xxxx; xxxxxxx="xxx-x" xxxxxxx-xxxxxxxx-xxxxxxxx: xxxx <xxx xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxxx.xxxx?xxxxxx-xxxxxxxxxxxxxxxxxx-xxxxxxxxxxxxxxxxxxxxxx-xxxxxxxxxxxxxxxxxx-xxxxxxxxxx-xxxxxxxxxxxxxxxxxxxxxx-xxxxxxxxxx" xxxxx="x" xxxxxx="x"><xxxx> <xxxx> </xxxx> <xxxx xxxxx="#xxxxxx" xxxxxxx="#xxxxxx" xxxxxxxxxx="x" xxxx="#xxxxxx" xxxxxxxxxxxx="x" xxxxxxxxxxx="x" xxxx="#xxxxxx" xxxxxxxxx="x" xxxxx="#xxxxxx"> <xxxxx xxxxx="xxxxxx" xxxxxx="x" xxxxxxxxxxx="x" xxxxxxxxxxx="x" xxxxx="xxx"> <xx> <xx>     <xxxxx xxxxxx="x" xxxxxxxxxxx="x" xxxxxxxxxxx="x" xxxxx="xxxx" xxxxx="xxx" xxxxx="xxxxxx-xxxxxxxx:xxxxxxxx; xxx-xxxxx-xxxxxx:xxx; xxx-xxxxx-xxxxxx:xxx;"><xx><xx xxxxx="xx" xxxxx="xxxx-xxxxxx"><xxx xxxxxx="x" xxxxx="xxxx-xxxxxx xxxxxxxxx" xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxx.xxx" xxxxx="xxxxxxx:xxxxx;" xxxxx="xx" xxxxxx="xx"/></xx><xx xxxxx="xxx" xxxxx="xxxxxxxxx" xxxxx="xxxx-xxxxxx:xxxxx, xxxxxxxxx, xxxx-xxxxx; xxxx-xxxx:xxxx; xxxxx:#xxxxxx; xxxx-xxxxx:xxxxx;">xxxx xxx xxx xxxx xxxxxx xxxxxx xxx xxx x xxxxxxxx xxx xxx| <x xxxxx="xxxxx: #xxxxxx;xxxx-xxxxxxxxxx: xxxx;" xxxx="xxxx://xxxx.xxxxxxxxx.xx.xxx/?xx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx">xxx xxxx</x></xx></xx><xx><xx xxxxxxx="x" xxxxx="xxxxxx-xxxxx-xxxxxx" xxxxxx="x" xxxxx="xxxxxxxxxx-xxxxx:#xxxxxx; xxxx-xxxxxx:xxx; xxxx-xxxx:xxx;"> <xxx xxxxxx="x" xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxx.xxx" xxxxx="xxxxxxx:xxxxx;" xxxxx="x" xxxxxx="x"/></xx></xx><xx><xx xxxxxxx="x" xxxxx="xxxxxx-xxxxx-xxxxxx" xxxxxx="x" xxxxx="xxxxxxxxxx-xxxxx:#xxxxxx;xxxx-xxxxxx:xxx;xxxx-xxxx:xxx;"><xxx xxxxxx="x" xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxx.xxx" xxxxx="xxxxxxx:xxxxx;" xxxxx="x" xxxxxx="x"/></xx></xx><xx><xx xxxxxxx="x" xxxxx="xxxx" xxxxxx="xxx"><xxxxx xxxxx="xxx" xxxxxx="xxx" xxxxxxxxxxx="x" xxxxxxxxxxx="x" xxxxxx="x" xxxxx="xxxx" xxxxx="xxxx"><xx><xx xxxxx="xx" xxxxx="xxxx-xxxxxx"><xxx xxxxxx="x" xxxxx="xxxx-xxxxxx" xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxx.xxx" xxxxx="xxxxxxx:xxxxx;" xxxxx="xx" xxxxxx="xx"/></xx><xx><xxxxx xxxxxx="x" xxxxxxxxxxx="x" xxxxxxxxxxx="x"><xx><xx xxxxxx="xx" xxxxx="xxxxx-xxxx"> <xxx xxxxxx="x" xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxx.xxx" xxxxx="xxxxxxx:xxxxx;" xxxxx="x" xxxxxx="xx"/></xx></xx><xx><xx xxxxxx="xxxxxx"><x xxxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/?xx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"><xxx xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxxx-xxxxxxxxx.xxx" xxxxx="xx" xxxxxx="xx" xxxxxx="x" xxxxx="xxxx-xxx" xxxxx="xxxxxxx:xxxxx;" /></x></xx></xx><xx><xx xxxxxxx="x" xxxxxx="xx" xxxxx="xxxxx-xxxx"><xxx xxxxxx="x" xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxx.xxx" xxxxx="xxxxxxx:xxxxx;" xxxxx="x" xxxxxx="xx"/></xx></xx></xxxxx></xx></xx></xxxxx><xxxxx xxxxx="xxx" xxxxxxxxxxx="x" xxxxxxxxxxx="x" xxxxxx="x" xxxxx="xxxxxxxx"><xx><xx xxxxxxx="x" xxxxxx="xx" xxxxx="xxxxx-xxxx"> <xxx xxxxxx="x" xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxx.xxx" xxxxx="xxxxxxx:xxxxx;" xxxxx="x" xxxxxx="xx"/></xx></xx><xx><xx xxxxx="xxxx-xxxx:xxxx; xxxx-xxxxxx:xxxx; xxxx-xxxxxx:xxxxx, xxxxxxxxx, xxxx-xxxxx;" xxxxxx="xxxxxx">xxxxxxx xxxxxx</xx></xx><xx><xx xxxxxxx="x" xxxxxx="xx" xxxxx="xxxxx-xxxx"><xxx xxxxxx="x" xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxx.xxx" xxxxx="xxxxxxx:xxxxx;" xxxxx="x" xxxxxx="xx"/></xx></xx></xxxxx><xxxxx xxxxx="xxx" xxxxxxxxxxx="x" xxxxxxxxxxx="x" xxxxxx="x" xxxxx="xxxxxx"><xx><xx xxxxx="xxxx-xxxx:xxxx; xxxx-xxxxxx:xxxx; xxxx-xxxxxx:xxxxx, xxxxxxxxx, xxxx-xxxxx;"><x xxxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/?xx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" xxxxx="xxxx-xxxxxxxxxx:xxxx; xxxxx:#xxxxxx;">xx xxxxxxx</x>&#xxx;&#xxx;&#xxx; <x xxxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/?xx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" xxxxx="xxxx-xxxxxxxxxx:xxxx; xxxxx:#xxxxxx;">xxxxxx xxxxxx</x>&#xxx;&#xxx;&#xxx;<x xxxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/?xx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" xxxxx="xxxx-xxxxxxxxxx:xxxx; xxxxx:#xxxxxx;">xxxxxxx xxxxxx</x>&#xxx;&#xxx;&#xxx;<x xxxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/?xx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" xxxxx="xxxx-xxxxxxxxxx:xxxx; xxxxx:#xxxxxx;">xx xxxxxx</x></xx></xx><xx><xx xxxxxxx="x" xxxxxx="xx" xxxxx="xxxxx-xxxx"><xxx xxxxxx="x" xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxx.xxx" xxxxx="xxxxxxx:xxxxx;" xxxxx="x" xxxxxx="xx"/></xx></xx></xxxxx></xx></xx><xx><xx xxxxxxx="x" xxxxx="xxxxxx-xxxxx-xxxxxx" xxxxxx="x" xxxxx="xxxxxxxxxx-xxxxx:#xxxxxx;xxxx-xxxxxx:xxx;xxxx-xxxx:xxx;"><xxx xxxxxx="x" xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxx.xxx" xxxxx="xxxxxxx:xxxxx;" xxxxx="x" xxxxxx="x"/></xx></xx><xx><xx xxxxxxx="x" xxxxxx="xx" xxxxx="xxxxx-xxxx"><xxx xxxxxx="x" xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxx.xxx" xxxxx="xxxxxxx:xxxxx;" xxxxx="x" xxxxxx="xx"/></xx></xx></xxxxx>  </xx> </xx> <xx> <xx> <xxxxx xxxxxx="x" xxxxxxxxxxx="x" xxxxxxxxxxx="x" xxxxx="xxx"> <xx> <xx xxxxxx="xxx"> <xxxxx xxxxxx="x" xxxxxxxxxxx="x" xxxxxxxxxxx="x" xxxxx="xxx"> <xx> <xx xxxxxx="xxx">  <xxxxx xxxxxx="x" xxxxxxxxxxx="x" xxxxxxxxxxx="x" xxxxx="xxxxxx-xxxxxxxx:xxxxxxxx; xxx-xxxxx-xxxxxx:xxx; xxx-xxxxx-xxxxxx:xxx;"><xx><xx xxxxx="xx" xxxxx="xxxx-xxxxxx"><xxx xxxxxx="x" xxxxx="xxxx-xxxxxx" xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxx.xxx" xxxxx="xxxxxxx:xxxxx;" xxxxx="xx" xxxxxx="x"/></xx><xx><xxxxx xxxxxx="x" xxxxxxxxxxx="x" xxxxxxxxxxx="x"><xx><xx><xxxxx xxxxxx="x" xxxxxxxxxxx="x" xxxxxxxxxxx="x"><xx><xx xxxxx="xx"><xxx xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxxxxxxxxxxxxxx.xxx" xxxxx="xx" xxxxxx="xx" xxxxx="xxxx" xxxxx="xxxxxxx:xxxxx;"/></xx><xx xxxxx="xxxx-xxxxxx:xxxxx,xxxxxxxxx, xxxx-xxxxx; xxxx-xxxx:xxxx;"><x>xxxxxxxx xxxxxx xxxxx -</x> xxx xx xxxx</xx></xx></xxxxx></xx></xx><xx><xx><x></x><xxx xxxxx="xxxxxxx:xxxxx;" xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxx.xxx" xxxxxx="xx"/></xx></xx><xx> <xx xxxxx="xxxx-xxxxxx:xxxxx, xxxxxxxxx, xxxx-xxxxx; xxxx-xxxx:xxxx; xxxx-xxxxxx:xxxx;"><x xxxxx="xxxx-xxxxxx:xxxxx;xxxx-xxxx:xxxx;xxxxx:#xxxxxx;xxxx-xxxxxx:xxxx;xxxx-xxxxxxxxxx:xxxx" xxxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/?xx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" >xxxxxxxxx xxxxx xxxxxx (xxx xx.x.xx.xx xxxx)</x></xx></xx><xx><xx><xxx xxxxx="xxxxxxx:xxxxx;" xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxx.xxx" xxxxxx="xx"/></xx></xx> <xx><xx xxxxx="xxxx-xxxxxx:xxxxx,xxxxxxxxx,xxxx-xxxxx; xxxx-xxxx:xxxx;"><xxxxxx>xxxxxxxx:</xxxxxx> xx xxxxxxx xxxxxxxx xxx, xx xxxxxxxxx xxxxxxxx xxx, xx xxxxxx xxxxxxxxxxx, xx xxxxxxxx xxx</xx></xx><xx><xx xxxxxx="x"><xxx xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxx.xxx" xxxxx="xxxxxxx:xxxxx" xxx="" xxxxxx="x" /></xx></xx> <xx><xx xxxxx="xxxx-xxxxxx:xxxxx,xxxxxxxxx,xxxx-xxxxx; xxxx-xxxx:xxxx;"> <xxxxxx>xx:</xxxxxx> xxxxxxx</xx></xx><xx><xx xxxxxx="x"><xxx xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxx.xxx" xxxxx="xxxxxxx:xxxxx" xxx="" xxxxxx="x" /></xx></xx> <xx><xx xxxxx="xxxx-xxxxxx:xxxxx,xxxxxxxxx,xxxx-xxxxx; xxxx-xxxx:xxxx;"><xxxxxx>xxxxxxxxxxx:</xxxxxx> xxxx xxxxxxx xxxxxxxx xxx xxxxxxxxx xxxxx xxxxxx. xxx xxxxxx xxxxxxxx xxxxxxxx xxxxxxxx xxxx xx xxxxxxxxx, xxxxxxxxxx, xxx xxxxx, xxxxxx-xxx, xxx xxx-xx-xxxxxx. xxxx xxxxxxx xx xxxxxxxx xxx xxxxxxxxx xxxxxxxx xxxxxx xxxxxxx x xxxxxxxxx xxxxxxxxx xxxxxx.</xx></xx><xx><xx><xxx xxxxx="xxxxxxx:xxxxx;" xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxx.xxx" xxxxxx="xx" xxxxx="x"/></xx></xx></xxxxx></xx></xx></xxxxx><xxxxx xxxxxx="x" xxxxxxxxxxx="x" xxxxxxxxxxx="x" xxxxx="xxx%" xxxxx="xxxxxx-xxxxxxxx:xxxxxxxx; xxx-xxxxx-xxxxxx:xxx; xxx-xxxxx-xxxxxx:xxx;"><xx><xx xxxxx="xx" xxxxx="xxxx-xxxxxx xxxx-xxxxxx"> <xxx xxxxxx="x" xxxxx="xxxx-xxxxxx" xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxx.xxx" xxxxx="xxxxxxx:xxxxx;" xxxxx="xx" xxxxxx="x"/></xx><xx xxxxxxx="#xxxxxx" xxxxxx="x" xxxxx="xxxx-xxxxxx:xxx;xxxx-xxxx:xxx;"><xxx xxxxx="xxxxxxx:xxxxx;" xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxx.xxx" xxxxxx="x"/></xx></xx><xx><xx xxxxx="xx" xxxxx="xxxx-xxxxxx"><xxx xxxxxx="x" xxxxx="xxxx-xxxxxx" xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxx.xxx" xxxxx="xxxxxxx:xxxxx;" xxxxx="xx" xxxxxx="x"/></xx><xx><xxx xxxxx="xxxxxxx:xxxxx;" xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxx.xxx" xxxxxx="xx"/></xx></xx></xxxxx>      <xxxxxxxxxxxxxxxxx xxxxxxxxxxxxxx="xxxxxxxxx" xxxxx="xxxxx" xxx="xxxxx"/>     <xxxxxxxxxxxxxxxxx xxxxxxxxxxxxxx="xxxxxxxxx" xxxxx="xxxxx" xxx="xxxxx"/>  </xx> </xx> </xxxxx></xx> <xx xxxxx="xx"><xxx xxx="" xxx="xxxx://xxxxxx.xxxxxxxx.xxx/xxxxxxxxxxx/xxxxx/xxxxxx/x.xxx" xxxxx="xxxxxxx:xxxxx" xxxxx="xx"/></xx> <xx xxxxxxx="#xxxxxx" xxxxx="x"><xxx xxx="xxxx://xxxxxx.xxxxxxxx.xxx/xxxxxxxxxxx/xxxxx/xxxxxx/x.xxx" xxxxx="xxxxxxx:xxxxx" xxxxx="x"/></xx> <xx xxxxxx="xxx"> <xxxxx xxxxxx="x" xxxxxxxxxxx="x" xxxxxxxxxxx="x" xxxxx="xxx"> <xx> <xx xxxxx="xx"><xxx xxx="xxxx://xxxxxx.xxxxxxxx.xxx/xxxxxxxxxxx/xxxxx/xxxxxx/x.xxx" xxxxx="xxxxxxx:xxxxx" xxxxx="xx"/></xx> <xx>      <xxxxx xxxxxx="x" xxxxxxxxxxx="x" xxxxxxxxxxx="x" xxxxx="xxxxxxx-xxxx" xxxxx="xxx"><xx><xx xxxxx="xxxx-xxxxxx" xxxxx="xx"><xxx xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxx.xxx" xxxxx="xxxxxxx:xxxxx" xxxxx="xx"/></xx><xx><xxxxx xxxxxx="x" xxxxxxxxxxx="x" xxxxxxxxxxx="x"><xx><xx xxxxxxx="x"><xxx xxxxxx="xx" xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxx.xxx" xxxxx="xxxxxxx:xxxxx"/></xx></xx><xx><xx xxxxxxx="x" xxxxx="xxxxxxxxxx-xxxxx:#xxxxxx; xxxx-xxxxxx:xxx; xxxx-xxxx:xxx;" xxxxx="xxx"><xxx xxxxxx="x" xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxx.xxx" xxxxx="xxxxxxx:xxxxx" xxxxx="xxx"/></xx></xx><xx><xx xxxxxxx="x"><xxx xxxxxx="xx" xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxx.xxx" xxxxx="xxxxxxx:xxxxx"/></xx></xx><xx><xx xxxxx="xx"> <xxx xxxxx="xxxx" xxx="xxxxxxxx - xxxxxx xx x xxxxxxxx xxxxx xxx xxxx xx xx xxxxx xx. xxxxx xxxxxxxx xx xxxxxxxxx xxxxxxxxxxx xxxx xx xxxxxxxxx xx xxxxxxx xxx xxxx xx xxxxxxxxxxxxx xxxxxxx xxxx xx xxxx xxxxxxxxxx xx xxxx, xxxxxxxx xxxxxx, xx xxxxxxxxxxxxx xxxxxx xx xxxx. xxx xxxxx xx xx xxxx xx x xxxxxxx xxxxxxxxxxxxx xxxxx xx xxxxxx xx xxx xxxxx." xxxxxx="xx" xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxxxxxxxxxxxxxx.xxx" xxxxx="xxxxxxx:xxxxx;" xxxxx="xx"/></xx><xx xxxxx="xxxx-xxxx:xxxx; xxxxx:#xxxxxx; xxxx-xxxxxx:xxxxx, xxxxxxxxx, xxxx-xxxxx;">xxxxxxxx</xx></xx><xx><xx xxxxxxx="x"><xxx xxxxxx="x" xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxx.xxx" xxxxx="xxxxxxx:xxxxx"/></xx></xx><xx><xx xxxxx="xx"> <xxx xxxxx="xxxx" xxx="xxxxxxxxxxx - xxxxxx xx xxxxxxxxx xxxxxxx xx xxxxxx xxxxxxxxxxx. xxxxxxxxx xxxxxxxxxxxx xxxxxx xx xxxxxxx xx xxxx xxxxxxxx xxxxxxxxxxx. xxxxx xx xxxxxxxxx xxx xxx-xxxxxxx xxxxxxxxxxx, xxxx-xxx xx xxxxxxxx xxxxxxxxx. xxxx xxxx xxxxxxx xxxx xxxxxx xxxx x xxxxxxx, xxx xxx xxxxxxxxxxxxx xxxxxxx." xxxxxx="xx" xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxxxxxxxxxxxxxxxxx.xxx" xxxxx="xxxxxxx:xxxxx;" xxxxx="xx"/></xx><xx xxxxx="xxxx-xxxx:xxxx; xxxxx:#xxxxxx; xxxx-xxxxxx:xxxxx, xxxxxxxxx, xxxx-xxxxx;">xxxxxxxxxxx</xx></xx><xx><xx xxxxxxx="x"><xxx xxxxxx="x" xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxx.xxx" xxxxx="xxxxxxx:xxxxx"/></xx></xx><xx><xx xxxxx="xx"> <xxx xxxxx="xxxx" xxx="xxxxxxx - xxxxxx xx xxxxxxxxxxx xxx xxxxxxxxxxxx xxxx xxx xxxx xxx xxxxxx xxxx xxxxxx, xxxx xx xxxxxxxxxxx xxxxxxxx xxx xxxx xxxxxxxxx. xxxxx xxxxxxxxxxxx xxx xx xxxxx xx xxxx xxxxxxxxxx xx xxxx xxxxxxxx xxxx xx xxxxxxx." xxxxxx="xx" xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxxxxxxxxxxxxx.xxx" xxxxx="xxxxxxx:xxxxx;" xxxxx="xx"/></xx><xx xxxxx="xxxx-xxxx:xxxx; xxxxx:#xxxxxx; xxxx-xxxxxx:xxxxx, xxxxxxxxx, xxxx-xxxxx;">xxxxxxx</xx></xx><xx><xx xxxxxxx="x"><xxx xxxxxx="x" xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxx.xxx" xxxxx="xxxxxxx:xxxxx"/></xx></xx><xx><xx xxxxx="xx"><xxx xxxxx="xxxx" xxx="xxxxxx" xxxxxx="xx" xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxxxxxxxxxxxx.xxx" xxxxx="xxxxxxx:xxxxx;" xxxxx="xx"/></xx><xx xxxxx="xxxx-xxxx:xxxx; xxxxx:#xxxxxx; xxxx-xxxxxx:xxxxx, xxxxxxxxx, xxxx-xxxxx;">xxxxxx</xx></xx></xxxxx></xx></xx></xxxxx>  </xx> <xx xxxxx="xx"><xxx xxx="xxxx://xxxxxx.xxxxxxxx.xxx/xxxxxxxxxxx/xxxxx/xxxxxx/x.xxx" xxxxx="xxxxxxx:xxxxx" xxxxx="xx"/></xx> </xx> </xxxxx></xx> </xx> </xxxxx></xx> </xx> <xx> <xx>    <xxxxx xxxxxx="x" xxxxxxxxxxx="x" xxxxxxxxxxx="x" xxxxx="xxxxxx-xxxxxxxx:xxxxxxxx; xxx-xxxxx-xxxxxx:xxx; xxx-xxxxx-xxxxxx:xxx;"><xx><xx xxxxxx="x" xxxxxxx="x" xxxxx="xxxxxxxxxx-xxxxx:#xxxxxx;xxxx-xxxxxx:xxx;xxxx-xxxx:xxx;"><xxx xxxxxx="x" xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxx.xxx" xxxxx="xxxxxxx:xxxxx;" xxxxx="x" xxxxxx="x"/></xx></xx><xx><xx xxxxxxx="x"><xxx xxxxxx="x" xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxx.xxx" xxxxx="xxxxxxx:xxxxx;" xxxxx="x" xxxxxx="xx"/></xx></xx><xx><xx xxxxxxx="x"><xxxxx xxxxxxxxxxx="x" xxxxxxxxxxx="x" xxxxxx="x" xxxxx="xxxxxxx-xxxx" xxxxx="xxxx"><xx><xx xxxxx="xx"><xxx xxxxxx="x" xxxxx="xxxx-xxxxxx" xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxx.xxx" xxxxx="xxxxxxx:xxxxx;" xxxxx="xx" xxxxxx="x"/></xx><xx xxxxx="xxx" xxxxxx="xxx" xxxxx="xxxx-xxxxxx:xxxxx, xxxxxxxxx, xxxx-xxxxx; xxxxx:#xxxxxx; xxxx-xxxx:xxxx;"> <x xxxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/?xx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" xxxxx="xxxxx:#xxxxxx; xxxx-xxxxxxxxxx:xxxx;"><xxxxxx>xx.xxx</xxxxxx></x></xx><xx xxxxx="xxx" xxxxxx="xxx" xxxxx="xxxx-xxxxxx:xxxxx, xxxxxxxxx, xxxx-xxxxx; xxxxx:#xxxxxx; xxxx-xxxx:xxxx;"><x xxxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/?xx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" xxxxx="xxxxx:#xxxxxx; xxxx-xxxxxxxxxx:xxxx;"><xxxxxx>xxxxxxx</xxxxxx></x></xx><xx xxxxx="xxx" xxxxxx="xxx" xxxxx="xxxx-xxxxxx:xxxxx, xxxxxxxxx, xxxx-xxxxx; xxxxx:#xxxxxx; xxxx-xxxx:xxxx;"><x xxxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/?xx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" xxxxx="xxxxx:#xxxxxx; xxxx-xxxxxxxxxx:xxxx;"><xxxxxx>xxxxxxx</xxxxxx></x></xx> <xx xxxxx="xxx" xxxxxx="xxx" xxxxx="xxxx-xxxxxx:xxxxx, xxxxxxxxx, xxxx-xxxxx; xxxxx:#xxxxxx; xxxx-xxxx:xxxx;"><x xxxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/?xx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" xxxxx="xxxxx:#xxxxxx; xxxx-xxxxxxxxxx:xxxx;"><xxxxxx>xxxxxx xxxxxxx</xxxxxx></x></xx></xx></xxxxx></xx></xx><xx><xx xxxxxxx="x"><xxx xxxxxx="x" xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxx.xxx" xxxxx="xxxxxxx:xxxxx;" xxxxx="x" xxxxxx="xx"/></xx></xx> <xx><xx xxxxxxx="x" xxxxxx="x" xxxxx="xxxxxxxxxx-xxxxx:#xxxxxx;xxxx-xxxxxx:xxx;xxxx-xxxx:xxx;"><xxx xxxxxx="x" xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxx.xxx" xxxxx="xxxxxxx:xxxxx;" xxxxx="x" xxxxxx="x"/></xx></xx><xx><xx xxxxxxx="x"><xxx xxxxxx="x" xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxx.xxx" xxxxx="xxxxxxx:xxxxx;" xxxxx="x" xxxxxx="xx"/></xx></xx><xx> <xx xxxxx="xxxx-xxxxxx"><xxx xxxxxx="x" xxxxx="xxxx-xxxxxx" xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxx.xxx" xxxxx="xxxxxxx:xxxxx;" xxxxx="xx" xxxxxx="xx"/></xx><xx xxxxx="xxxx" xxxxx="xxxx-xxxxxx:xxxxx, xxxxxxxxx, xxxx-xxxxx; xxxxx:#xxxxxx; xxxx-xxxx:xxxx; xxxx-xxxxxx:xxxx;">xx xxxxxxxx xxxx xxxxxxx. xx xxx'x xxxx xx xxxxxxxxxxx xxxxxxxxx x-xxxxx xxxx xx xxxxxxxxx xxxxxxx xxxxxx xxx xxxxxxxxxxx, xxxxxx <x><x xxxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/?xx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" xxxxx="xxxxx:#xxxxxx;">xxxxx xxxx</x></x>.<xx> <xx> xxx xxxx xxxxxxxxxxx xxxxxxxxx xx'x xxxxxxx xxxxxxxx xxx xxxxxxxxx, xxxxxx xxxxx xxx <x><x xxxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/?xx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" xxxxx="xxxxx:#xxxxxx;">xxxxxxx xxxxxxxxx</x></x>. <xx/><xx/> xx xxxxxxxx xxxx xxxxxx xx xxxxxx, xxxxxxxxxxxxx, xxxxxxxxxx xx xxxxxxxx, xxxxxx xxx xxx 'xxxxxxx xxxxxxxx xxxx' xxxxxxxxx xxxx <x xxxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/?xx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" xxxxx="xxxxx:#xxxxxx;">xx'x xxxxxxxx xxxx xxxxxx xxxxxx</x>. <xx> <xx> &xxxx; xxxxxxxxx xxxx xx xxxxxxxxxxx xxxxxxx, x.x. xxx xxxxxxxxxxx xxxxxxxxx xxxxxx xx xxxxxxx xx xxxxxx xxxxxxx xxxxxx.</xx><xx xxxxx="xxxx-xxxxxx"><xxx xxxxxx="x" xxxxx="xxxx-xxxxxx" xxx="xxxx://xxxxx.xxxxxxxxx.xx.xxx/xxx/xxxxxxxxxxxxxxxxxx/x/x/xxxxxxxx.xxx" xxxxx="xxxxxxx:xxxxx;" xxxxx="xx" xxxxxx="xx"/></xx></xx></xxxxx>  </xx> </xx> <xx> <xx> </xx> </xx> </xxxxx> </xxxx> </xxxx> --xxxxxxxxxxxx=x?:-- Return-path: <xxxxxxxxxxxx(a)xxxxx.xxxxxxxxx.xxx> Envelope-to: xxxxx@xxxxxxxxx Delivery-date: xxx, xx xxx xxxx xx:xx:xx +xxxx Received: xxxx xxxxxx-xxxx xx xxxxxxxxx xxxx xxxx-xxxxxxx (xxxx x.xx) (xxxxxxxx-xxxx <xxxxxxxxxxxx(a)xxxxx.xxxxxxxxx.xxx>) xx xxxxxx-xxxxxx-xx xxx xxxxx@xxxxxxxxx; xxx, xx xxx xxxx xx:xx:xx +xxxx Received: xxxx [::x] (xxxx=xxxxxxxxx.xxxxxxxxxxx) xx xxxxxxxxx xxxx xxxxx (xxxx x.xx) (xxxxxxxx-xxxx <xxxxxxxxxxxx(a)xxxxx.xxxxxxxxx.xxx>) xx xxxxxx-xxxxxx-xx xxx xxxxx@xxxxxxxxx; xxx, xx xxx xxxx xx:xx:xx +xxxx Delivered-To: xxxxxxxxxxxx(a)xxxxx.xxx Received: xxxx xxxxx-xxx.x.xxxxxx.xxx [xx.xxx.xxx.xxx] xx xxxxxxxxx.xxxxxxxxxxx xxxx xxxx (xxxxxxxxx-x.x.xx) xxx <xxxxx@xxxxxxxxx> (xxxxxx-xxxx); xxx, xx xxx xxxx xx:xx:xx +xxxx (xxx) Received: xx xx.xx.xx.x xxxx xxxx xx xxxxxxxxxxxxxx; xxx, xx xxx xxxx xx:xx:xx -xxxx (xxx) X-Received: xx xx.xxx.xx.xxx xxxx xxxx xx xxxxxxxxxxxxxxxx.xx.xxxxxxxxxxxxx; xxx, xx xxx xxxx xx:xx:xx -xxxx (xxx) Received: xxxx xxxxxxxxxx.xxxxxxxxx.xxx (xxxxxxxxxx.xxxxxxxxx.xxx. [xx.xx.xxx.xx]) xx xx.xxxxxx.xxx xxxx xxxxxx xx xxxxxxxxxxxxxxx.xxx.xxxx.xx.xx.xx.xx.xx (xxxxxxx=xxxxx xxxxxx=xxx-xxx xxxx=xxx/xxx); xxx, xx xxx xxxx xx:xx:xx -xxxx (xxx) Received-SPF: xxxx (xxxxxx.xxx: xxxxxx xx xxxxxxxxxxxx(a)xxxxx.xxxxxxxxx.xxx xxxxxxxxxx xx.xx.xxx.xx xx xxxxxxxxx xxxxxx) xxxxxx-xx=xx.xx.xxx.xx; Authentication-Results: xx.xxxxxx.xxx; xxx=xxxx (xxxxxx.xxx: xxxxxx xx xxxxxxxxxxxx(a)xxxxx.xxxxxxxxx.xxx xxxxxxxxxx xx.xx.xxx.xx xx xxxxxxxxx xxxxxx) xxxx.xxxx=xxxxxxxxxxxx(a)xxxxx.xxxxxxxxx.xxx Received: xxxx [xx.xx.xxx.xx] (xxxx=xxxxx.xxxxxxxxx.xxx) xx xxxxxxxxxx.xxxxxxxxx.xxx xxxx xxxxx (xxxx x.xx) (xxxxxxxx-xxxx <xxxxxxxxxxxx(a)xxxxx.xxxxxxxxx.xxx>) xx xxxxxx-xxxxxx-xx xxx xxxxxxxxxxxx(a)xxxxx.xxx; xxx, xx xxx xxxx xx:xx:xx +xxxx Received: xxxx xxxxx.xxxxxxxxx.xxx (xxxxxxxxx.xxxxxxxxxxx [xxx.x.x.x]) xx xxxxx.xxxxxxxxx.xxx (x.xx.x/x.xx.x) xxxx xxxxx xx xxxxxxxxxxxxxx xxx <xxxxxxxxxxxx(a)xxxxx.xxx>; xxx, xx xxx xxxx xx:xx:xx +xxxx Received: (xxxx xxxxxxxxxxxx@xxxxxxxxx) xx xxxxx.xxxxxxxxx.xxx (x.xx.x/x.xx.x/xxxxxx) xx xxxxxxxxxxxxxx; xxx, xx xxx xxxx xx:xx:xx +xxxx To: xxxxxxxxxxxx(a)xxxxx.xxx Subject: =?xxx-x?x?xxxx=xx=xxxx?= Date: Tue, 26 Feb 2013 12:40:45 +0000 From: xxxxxxx.xxxxxxx(a)xxxxx.xxx Reply-To: xxxxxxx.xxxxxxx(a)xxxxx.xxx Message-ID: <xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx(a)xxx.xxxxxxxxxxxx.xx> X-Priority: x X-Mailer: xxxxxxxxx x.x.x (xxxx://xxxx.xxxxxx.xxx/x/xxxxxx-xxxxxx.xxx/x/xxxxxxxxx/) MIME-Version: x.x Content-Type: multipart/alternative; xxxxxxxx="xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" X-Bogofilterd: xxxx X-Bogosity: xxx, xxxxx=xxxxxxxxxx, xxxxxxxxx=x.xxxxxx, xxxxxxx=x.x.x --xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxx-xxxx: xxxx/xxxxx; xxxxxxx="xxx-x" xxxxxxx-xxxxxxxx-xxxxxxxx: xxxx xx, xxx xxxx x xxx xxxxxxx xxxxxxx xxxx : xxxxxxx.xxxxxxx(a)xxxxx.xxxxxxxx: xxxxxxxxxxxxxxxxxxxx : xxxxöxx xxxxxxx xxxx : xxxöxxxxxxxxxxxxxxxxxxxxxxxxxx: xx=>"xxx xöxxxx xxx xxxxxxxxxxxxxx xxxx.xxxxxx xxxxx" xxxxxxxxxxxx xxxxxxx --xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxx-xxxx: xxxx/xxxx; xxxxxxx="xxx-x" xxxxxxx-xxxxxxxx-xxxxxxxx: xxxx <x>xx,</x> <x>xxx xxxx x xxx xxxxxxx xxxxxxx</x> <x>xxxx : xxxxxxx.xxxxxxx(a)xxxxx.xxx<xx />xxxxx: xxxxxxxxxxxxx<xx />xxxxxxx : xxxxöxx</x> <x><xx xx="xxxxxxxx">xxxxxxx xxxx : xxxöxxxxxxx<xx />xxxxxxxxxxxxxxxxxxx: xx=>"xxx xöxxxx xxx xxxxxxxxxxxxxx xxxx.xxxxxx xxxxx"</xx></x> <x>xxxxxxx<xx />xxxxx xxxxxxx</x> --xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx-- Return-path: <xxxxxxxxxxxx+xxxxxxxx(a)xxxxxxxxxxxx.xxx> Envelope-to: xxxxx@xxxxxxxxx Delivery-date: xxx, xx xxx xxxx xx:xx:xx +xxxx Received: xxxx [xxx.x.x.x] (xxxx=xxxxxxxxx) xx xxxxxxxxx.xxxxxxxxxxxx.xx xxxx xxxxx (xxxx x.xx) (xxxxxxxx-xxxx <xxxxxxxxxxxx+xxxxxxxx(a)xxxxxxxxxxxx.xxx>) xx xxxxxx-xxxxxx-xx xxx xxxxx@xxxxxxxxx; xxx, xx xxx xxxx xx:xx:xx +xxxx Received: xxxx xxx.xxx.xxx [xxx.xxx.xx.xxx] xx xxxxxxxxx xxxx xxxx (xxxxxxxxx-x.x.xx) xxx <xxxxx@xxxxxxxxx> (xxxxxx-xxxx); xxx, xx xxx xxxx xx:xx:xx +xxxx (xxxx) Received: xxxx xx-xxx.xxxxxxxx.xxx ([xx.xxx.xxx.xxx]) xx xx-xx.xxx.xxx (xxxxxxxx [xxx.xxx.xx.x]) xxxx xxxxxx (xxxxxxx) xx xxxxxx-xxxxxxxxxx-xxxxxx xxx <xxxxxxx.xxxxxxx(a)xxx.xx>; xxx, xx xxx xxxx xx:xx:xx +xxxx DKIM-Signature: x=x; x=xxx-xxxxxx; x=xxxxxxx/xxxxxx; x=xxxxxxxxxxxx.xxx; x=xxxxx-xxxx-xx; x=xxxxxxxxxx; xx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxx=; x=xxxx:xx:xxxxxxx:xxxx:xxxx-xxxxxxx:xxxxxxx-xxxx; x=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+x= Received: xxxx xxxxxxxx.xxx (xxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx/xxxxxxxxxxxxxxxxxxxx xx.xxx.xxx.xx) xx xxxxxxxx.xxx xxxx xxxxxx xx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx-xxxxxxxx; xxx, xx xxx xxxx xx:xx:xx -xxxx X-Facebook: xxxx xxxx:xxxx:xx:xxxx:xxxx:x:x:x ([xxxxxxxxxxxx]) xx xxxxx.xxxxxxxxxxxx.xx.xxxx.xxxxxxxx.xxx xxxx xxxx (xxxxxxxx); Date: Thu, 7 Sep 2017 12:43:45 -0700 To: xxxxxx xxxxxxxx <xxxxxxx.xxxxxxx(a)xxx.xx> X-Priority: x X-Mailer: xxxxxxxx [xxxxxxx x.xx] From: "xxxxxxxx" <xxxxxxxxxxxx+xxxxxxxx(a)xxxxxxxxxxxx.xxx> Reply-to: xxxxxxx <xxxxxxx(a)xxxxxxxxxxxx.xxx> Errors-To: xxxxxxxxxxxx+xxxxxxxx(a)xxxxxxxxxxxx.xxx X-Facebook-Notify: xxxxxxxxxxxxxx; xxxxxx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx List-Unsubscribe: <xxxxx://xxx.xxxxxxxx.xxx/x.xxx?x=xxxxxxxxxxxxxxxx&x=xxxxxxxxxx&xxx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx> Feedback-ID: x:xxxxxxxxxxxxxx:xxxxxxxx X-FACEBOOK-PRIORITY: x X-Auto-Response-Suppress: xxx Require-Recipient-Valid-Since: xxxxxxx.xxxxxxx(a)xxx.xx; xxxxxxxxx, x xxx xxxx xx:xx:xx +xxxx Message-ID: <xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx(a)xxxxx.xxxxxxxxxxxx.xx.xxxx.xxxxxxxx.xxx> MIME-Version: x.x Content-Type: multipart/alternative; xxxxxxxx="xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx" X-GMX-Antispam: x (xxxx xxx xxx xxxxxxxxxx xx xxxx); xxxxxx=xx; X-UI-Filterresults: xxxxxxx:x;xxx:xx:xxxxxxxxxxx=:xxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx/xxxx/xxxxx+xxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx/x xxxxxxxxxxxxxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxx/xxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxx xxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxx++xxxxxxxxxxxxxxxx+xxxxxxxxxx+xxxxxxxxxxxxxxxxxxxx+xxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx/xxxx+xxxxxxxxxxxxxxxxxxxxxx/xxxxxxxx/ xxxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxx/xxxxxxxxxxxxxxxxx+xx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx/xxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxx+xxxxxxxxxxxxxxxx+xxxxxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+x xxxxxxxxxxxxxxxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxx+x xxxxxxxxxxxxxxxxx/xxxxxxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx== X-SA-Exim-Connect-IP: xxx.x.x.x X-SA-Exim-Mail-From: xxxxxxxxxxxx+xxxxxxxx(a)xxxxxxxxxxxx.xxx X-Spam-Checker-Version: xxxxxxxxxxxx x.x.x (xxxx-xx-xx) xx xxxxxxxxx X-Spam-Level: * X-Spam-Status: xx, xxxxx=x.x xxxxxxxx=x.x xxxxx=xxxxxxxxxxxxxxxxxxxxxx, xxxxxxxxxxxx,xxxxxxxxx,xxxxxxxxxxxxxx,xxxxxxxxxxxxxxxxx xxxxxxxxx=xx xxxxxxxxxxxxxxx=xx xxxxxxx=x.x.x Subject: =?xxx-x?x?xxxxxxxxxxxxxxxxxxxx?= =?xxx-x?x?xxxxxxxxxxxxxxxxxxxx?= =?xxx-x?x?xxxxxxxxxxxxxxxxxxxx?= X-SA-Exim-Version: x.x.x (xxxxx xxx, xx xxx xxxx xx:xx:xx +xxxx) X-SA-Exim-Scanned: xxx (xx xxxxxxxxx.xxxxxxxxxxxx.xx) --xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxx-xxxx: xxxx/xxxxx; xxxxxxx="xxx-x" xxxxxxx-xxxxxxxx-xxxxxxxx: xxxxxx-xxxxxxxxx =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx= =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx xxxxxxxx =xx=xxxxxxx xxxxx://xxx.xxxxxxxx.xxx/x/?xxxxx.xxx&xxxx=xxxxxxxxxxxxxxxxxxx&xxx=xxx.xxx= xxxxxxxxx.xxxxxx.xxxxxxxxx&xxxx=xxx&xxxxxx=xxxxxxx&xxx=xxxxxxxxxxxxxxxxxxx= xxxxxxxxxxxxxxxxxxxxxxx&xxxxx=xxx.xxxxxxxxxx.xxxxxxxxxxxxxxxxxxx&xxx=xxxxx= xxxx.xxxxxxx%xxxxx.xx =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx= =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx xxxxx xxxxxx, xxxxxxxxxx xx xxx xxx xxxxx xxxx xxxxxxxx=xx=xxxx xx=xx=xx=xx=xxx, xxx xxxxxxxx-xxxx =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx= =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx xxxxx xxxxxxxxx xxxxx xx xxxxxxx.xxxxxxx(a)xxx.xx xxxxxxxx. xxxxx xx xxxxx = x-xxxxx xx xxxxxxx xxxxx xxx xxxxxxxx xxxxxxxx x=xx=xxxxxxxx, xxxxx xxx = xxxx xxxxx, xx xxx xxxxxxxxxxxxx. xxxxx://xxx.xxxxxxxx.xxx/x.xxx?x=xxxxxxxxxxxxxxxxxx&x=xxxxxxxxxxxx&xxx=xxx= xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxx, xxx., xxxxxxxxx: xxxxxxxxx xxxxxxx, x xxxxxx xxx, xxxxx xxxx, xx = xxxxx --xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxx-xxxx: xxxx/xxxx; xxxxxxx="xxx-x" xxxxxxx-xxxxxxxx-xxxxxxxx: xxxxxx-xxxxxxxxx <!xxxxxxx xxxx xxxxxx "-//xxx//xxx xxxx x.xx xxxxxxxxxxxx = //xx"><xxxx><xxxx><xxxxx>xxxxxxxx</xxxxx><xxxx xxxx-xxxxx=xx"xxxxxxx-xxxx" = xxxxxxx=xx"xxxx/xxxx; xxxxxxx=xxxxx-x" /><xxxxx>@xxxxx xxx xxx (xxx-xxxxx: = xxxxx){*[xxxxx].xxxx{xxx-xxxxx:xxx% = !xxxxxxxxx}*[xxxxx].xxxxxx{xxxxxxx:xxxxx = !xxxxxxxxx}*[xxxxx].xxxxxx{xxxxxxx:xxxxx !xxxxxxxxx;xxxxxxx:xxxx x xxx = x;xxxxxxxx-xxxxx:xxx !xxxxxxxxx;xxxxx:xxx% = !xxxxxxxxx}*[xxxxx].xxxxxx,*[xxxxx].xxxxxx{xxxxxxxx-xxxxx:xxx = !xxxxxxxxx}*[xxxxx].xxxxxx{xxxxxxx:xxxxx = !xxxxxxxxx;xxxxxxx-xxxxxx:xxxx;xxxxx:xxx% = !xxxxxxxxx}*[xxxxx].xxxxxxx{xxxxxxx:xxxx = !xxxxxxxxx}*[xxxxx].xxxxxx{xxxxxxx:xxxxxx !xxxxxxxxx}}.xxxxxxxxx{xxxxxxx:x= xxx}.xxxxxxxxxxxxxxxx{xxxxxxx:xxxxx;xxxxxx:xxxx}@xxxxx xxxx xxxxxx xxx = (xxx-xxxxxx-xxxxx: xxxxx){.xxxxxxxxx{xxxxxxx:xxxx = !xxxxxxxxx}.xxxxxxxxx{xxxxxxx:xxxxx !xxxxxxxxx}}.xxxxxxx xx,.xxxxxxx = xx,.xxxxxxx xx,.xxxxxxx xx,.xxxxxxx xx,.xxxxxxx = xx{xxxx-xxxxxx:xxxxxx}.xxxxxxxxxxxx = xx{xxxx-xxxx:xxxx;xxxx-xxxxxx:xxxxxx;xxxxxx-xxx:xxx}.xxxxxxxxxxxx = xx,.xxxxxxxxxxxx = xx{xxxx-xxxx:xxxx;xxxx-xxxxxx:xxxxxx;xxxxxx-xxx:xxx}.xxxxxxxxxxxx = xx,.xxxxxxxxxxxx xx,.xxxxxxxxxxxx = xx{xxxx-xxxx:xxxx;xxxx-xxxxxx:xxxxxx}.xxxxxxxxxxxx = x{xxxxx:#xxxxxx}.xxxxxxxxxxxx x{xxxxxx-xxx:xxx}</xxxxx></xxxx><xxxx = xxxxx=xx"xxxxxx:x;xxxxxxx:x;" xxx=xx"xxx" xxxxxxx=xx"#xxxxxx"><xxxxx = xxxxxx=xx"x" xxxxx=xx"xxx%;" xxxxxxxxxxx=xx"x" xxxxxxxxxxx=xx"x" = xx=xx"xxxxxxxxxxx" xxxxx=xx"xxxxxx-xxxxxxxx:xxxxxxxx;"><xx><xx = xx=xx"xxxxxxxxxxxxx" xxxxx=xx"xxxx-xxxxxx:xxxxxxxxx xxxx,xxxxxxxxx,xxxxxx = xxxxxx,xxxxxx,xxxxxxx,xxxxx,xxxx-xxxxx;xxxxxxxxxx:#xxxxxx;"><xxxxx = xxxxxx=xx"x" xxxxx=xx"xxx%" xxxxxxxxxxx=xx"x" xxxxxxxxxxx=xx"x" = xxxxx=xx"xxxxxx-xxxxxxxx:xxxxxxxx;"><xx xxxxx=xx""><xx xxxxxx=xx"xx" = xxxxx=xx"xxxx-xxxxxx:xxxx;" xxxxxxx=xx"x">&xxxx;</xx></xx><xx><xx = xxxxxx=xx"x" xxxxxxx=xx"x" xxxxx=xx"xxxx-xxxxxx:xxx;"><xxxx = xxxxx=xx"xxxxx:#xxxxxx;xxxxxxx:xxxx !xxxxxxxxx;xxxx-xxxx:xxx;">=xx=xx = =xx=xx=xx=xx=xx=xx xxxxxxxxxx xx xxx xxx xxxxx xxxx xxxxxxxx=xx=xxxx. x. = xxxxxxxxx xx xx:xx xxxxxxxx =xx=xx xxx=xx=xxxxx=xx=xxxxx xxxxxxxxxxxx = =xx=xx =xx=xx =xx=xx</xxxx></xx></xx><xx><xx xxxxx=xx"xx" = xxxxx=xx"xxxxxxx:xxxxx;xxxxx:xxxx;">&xxxx;&xxxx;&xxxx;</xx><xx = xxxxx=xx""><xxxxx xxxxxx=xx"x" xxxxx=xx"xxx%" xxxxxxxxxxx=xx"x" = xxxxxxxxxxx=xx"x" xxxxx=xx"xxxxxx-xxxxxxxx:xxxxxxxx;"><xx xxxxx=xx""><xx = xxxxxx=xx"xx" xxxxx=xx"xxxx-xxxxxx:xxxx;" = xxxxxxx=xx"x">&xxxx;</xx></xx><xx><xx xxxxx=xx"xx" xxxxx=xx"xxxx" = xxxxxx=xx"xxxxxx" xxxxx=xx"xxxxxx:xx;xxxx-xxxxxx:xxx;"><x = xxxx=xx"xxxxx://xxx.xxxxxxxx.xxx/x/?xxxxx.xxx&xxx;xxxx=xxxxxxxxxxxxxxxxxxx= &xxx;xxx=xxx.xxxxxxxxxxxx.xxxxxx.xxxxxxxxx&xxx;xxxx=xxx&xxx;xxxxxx=xxxxxxx= &xxx;xxx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx&xxx;xxxxx=xxx.xxxxxxxx= xx.xxxxxxxxxxxxxxxxxxx&xxx;xxx=xxxxxxxxx.xxxxxxx%xxxxx.xx" = xxxxx=xx"xxxxx:#xxxxxx;xxxx-xxxxxxxxxx:xxxx;"><xxx = xxx=xx"xxxxx://xxxxxx.xx.xxxxx.xxx/xxxx.xxx/xx/xx/x/xxxxxxxxxxx.xxx" = xxxxx=xx"xx" xxxxxx=xx"xx" xxxxx=xx"xxxxxx:x;" /></x></xx><xx xxxxx=xx"xx" = xxxxx=xx"xxxxxxx:xxxxx;xxxxx:xxxx;">&xxxx;&xxxx;&xxxx;</xx><xx = xxxxx=xx"xxx%" xxxxx=xx""><x xxxx=xx"xxxxx://xxx.xxxxxxxx.xxx/x/?xxxxx.xxx= &xxx;xxxx=xxxxxxxxxxxxxxxxxxx&xxx;xxx=xxx.xxxxxxxxxxxx.xxxxxx.xxxxxxxxx&xx= x;xxxx=xxx&xxx;xxxxxx=xxxxxxx&xxx;xxx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx= xxxxxx&xxx;xxxxx=xxx.xxxxxxxxxx.xxxxxxxxxxxxxxxxxxx&xxx;xxx=xxxxxxxxx.xxxx= xxx%xxxxx.xx" = xxxxx=xx"xxxxx:#xxxxxx;xxxx-xxxxxxxxxx:xxxx;xxxx-xxxxxx:xxxxxxxxx = xxxx,xxxxxxxxx,xxxxxx xxxxxx,xxxxxx,xxxxxxx,xxxxx,xxxx-xxxxx;xxxx-xxxx:xxx= x;xxxx-xxxxxx:xxxx;">xxxxxxxx</x></xx></xx><xx = xxxxx=xx"xxxxxx-xxxxxx:xxxxx xxx #xxxxxx;"><xx xxxxxx=xx"xx" = xxxxx=xx"xxxx-xxxxxx:xxxx;" xxxxxxx=xx"x">&xxxx;</xx></xx></xxxxx></xx><xx = xxxxx=xx"xx" = xxxxx=xx"xxxxxxx:xxxxx;xxxxx:xxxx;">&xxxx;&xxxx;&xxxx;</xx></xx><xx><xx = xxxxx=xx"xx" = xxxxx=xx"xxxxxxx:xxxxx;xxxxx:xxxx;">&xxxx;&xxxx;&xxxx;</xx><xx = xxxxx=xx""><xxxxx xxxxxx=xx"x" xxxxx=xx"xxx%" xxxxxxxxxxx=xx"x" = xxxxxxxxxxx=xx"x" xxxxx=xx"xxxxxx-xxxxxxxx:xxxxxxxx;"><xx xxxxx=xx""><xx = xxxxxx=xx"xx" xxxxx=xx"xxxx-xxxxxx:xxxx;">&xxxx;</xx></xx><xx><xx = xxxxx=xx""><xxxxx xxxxxx=xx"x" xxxxx=xx"xxx%" xxxxxxxxxxx=xx"x" = xxxxxxxxxxx=xx"x" xxxxx=xx"xxxxxx-xxxxxxxx:xxxxxxxx;"><xx><xx = xxxxx=xx"xxxx-xxxx:xxxx;xxxx-xxxxxx:xxxxxxxxxxxx,xxxxxx,xxxxxxx,xxxxx,xxxx= -xxxxx;xxxxxx:xxxxx xxx #xxxxxx;xxxxxx-xxxxxx:xxx xxx x = x;xxxxxxx:xxxx;xxxxxxx:xxxxx;"><xxxxx xxxxxx=xx"x" xxxxxxxxxxx=xx"x" = xxxxxxxxxxx=xx"x" xxxxx=xx"xxxxxx-xxxxxxxx:xxxxxxxx;"><xx><xx = xxxxx=xx""><x xxxx=xx"xxxxx://xxx.xxxxxxxx.xxx/x/?xxxxx.xxx&xxx;xxxxxx=xxx= xxxx&xxx;xxx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx&xxx;xxxxx=xxx.xxxx= xxxxxx.xxxxxxxxxxxxxxxxxxx&xxx;xxx=xxxxxxxxx.xxxxxxx%xxxxx.xx" = xxxxx=xx"xxxxx:#xxxxxx;xxxx-xxxxxxxxxx:xxxx;"><xxx xxx=xx"xxxxx://xxxxxxxx= -xxxx-x.xx.xxxxx.xxx/x/x/xx.x-x/xxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx= xxxxxxxxxxxxxxx.xxx?xxxxxx=xxx-x&xxx;xx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx= &xxx;xx=xxxxxxxxxx" xxxxx=xx"xx" xxxxxx=xx"xx" xxxxx=xx"xxxxxx:x;" = /></x></xx><xx xxxxx=xx"xx" = xxxxx=xx"xxxxxxx:xxxxx;xxxxx:xxxx;">&xxxx;&xxxx;&xxxx;</xx><xx = xxxxx=xx"xxx%" xxxxx=xx""><xxxxx xxxxxx=xx"x" xxxxxxxxxxx=xx"x" = xxxxxxxxxxx=xx"x" xxxxx=xx"xxxxxx-xxxxxxxx:xxxxxxxx;"><xx><xx = xxxxx=xx"xxxx-xxxxxx:xxxxxxxxx xxxx,xxxxxxxxx,xxxxxx xxxxxx,xxxxxx,xxxxxxx= ,xxxxx,xxxx-xxxxx;xxxx-xxxx:xxxx;xxxx-xxxxxx:xxxx;xxxxx:#xxxxxx;"><x = xxxx=xx"xxxxx://xxx.xxxxxxxx.xxx/x/?xxxxx.xxx&xxx;xxxxxx=xxxxxxx&xxx;xxx= =xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx&xxx;xxxxx=xxx.xxxxxxxxxx.xxxxx= xxxxxxxxxxxxxx&xxx;xxx=xxxxxxxxx.xxxxxxx%xxxxx.xx" = xxxxx=xx"xxxxx:#xxxxxx;xxxx-xxxxxxxxxx:xxxx;">xxxxxxxxxx xx</x> xxx xxx = xxxxx <x xxxx=xx"xxxxx://xxx.xxxxxxxx.xxx/x/?xxxxx.xxx&xxx;xxxx=xxxxxxxxxx= xxxxxxxxx&xxx;xxx=xxx.xxxxxxxxxxxx.xxxxxx.xxxxxxxxx&xxx;xxxx=xxx&xxx;xxxxx= x=xxxxxxx&xxx;xxx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx&xxx;xxxxx=xxx= .xxxxxxxxxx.xxxxxxxxxxxxxxxxxxx&xxx;xxx=xxxxxxxxx.xxxxxxx%xxxxx.xx" = xxxxx=xx"xxxxx:#xxxxxx;xxxx-xxxxxxxxxx:xxxx;">xxxx</x> = xxxxxxxx=xx=xxxx.</xx></xx><xx><xx xxxxx=xx""><xxxx xxxxx=xx"xxxxxxx" = xxxxx=xx"xxxx-xxxxxx:xxxxxxxxx xxxx,xxxxxxxxx,xxxxxx xxxxxx,xxxxxx,xxxxxxx= ,xxxxx,xxxx-xxxxx;xxxx-xxxx:xxxx;xxxx-xxxxxx:xxxx;xxxxx:#xxxxxx;">x. = xxxxxxxxx xx xx:xx</xxxx></xx></xx></xxxxx></xx><xx xxxxxx=xx"xxxxxx"><x = xxxx=xx"xxxxx://xxx.xxxxxxxx.xxx/x/?xxxxx.xxx&xxx;xxxx=xxxxxxxxxxxxxxxxxxx= &xxx;xxx=xxx.xxxxxxxxxxxx.xxxxxx.xxxxxxxxx&xxx;xxxx=xxx&xxx;xxxxxx=xxxxxxx= &xxx;xxx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx&xxx;xxxxx=xxx.xxxxxxxx= xx.xxxxxxxxxxxxxxxxxxx&xxx;xxx=xxxxxxxxx.xxxxxxx%xxxxx.xx" = xxxxx=xx"xxxxx:#xxxxxx;xxxx-xxxxxxxxxx:xxxx;"><xxxxx xxxxxx=xx"x" = xxxxx=xx"xxx%" xxxxxxxxxxx=xx"x" xxxxxxxxxxx=xx"x" = xxxxx=xx"xxxxxx-xxxxxxxx:xxxxxxxx;"><xx><xx xxxxx=xx"xxxxxx-xxxxxxxx:xxxxx= xxx;xxxxxx-xxxxxx:xxx;xxxx-xxxxx:xxxxxx;xxxxxxx:xxxxx;xxxxxx:xxxxx xxx = #xxxxxx;xxx-xxxxxx:x xxx x xxxx(x, x, x, = x.xx);xxxxxxxxxx:#xxxxxx;xxxxxxx:xxx xxxx xxxx xxxx;"><x = xxxx=xx"xxxxx://xxx.xxxxxxxx.xxx/x/?xxxxx.xxx&xxx;xxxx=xxxxxxxxxxxxxxxxxxx= &xxx;xxx=xxx.xxxxxxxxxxxx.xxxxxx.xxxxxxxxx&xxx;xxxx=xxx&xxx;xxxxxx=xxxxxxx= &xxx;xxx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx&xxx;xxxxx=xxx.xxxxxxxx= xx.xxxxxxxxxxxxxxxxxxx&xxx;xxx=xxxxxxxxx.xxxxxxx%xxxxx.xx" = xxxxx=xx"xxxxx:#xxxxxx;xxxx-xxxxxxxxxx:xxxx;xxxxxxx:xxxxx;"><xxxxxx><xxxx = xxxx=xx"x"><xxxx xxxxx=xx"xxxx-xxxxxx:xxxxxxxxx xxxx,xxxxxxxxx,xxxxxx = xxxxxx,xxxxxx,xxxxxxx,xxxxx,xxxx-xxxxx;xxxxx-xxxxx:xxxxxx;xxxx-xxxxxx:xxxx= ;xxxxxxxx-xxxxx:xxxxxx;xxxxx:#xxxxxx;xxxx-xxxxxx:x xxx x = #xxxxxx;xxxx-xxxx:xxxx;xxxx-xxxxxx:xxxx;">xxxxxxxx</xxxx></xxxx></xxxxxx><= /x></xx></xx></xxxxx></x></xx></xx></xxxxx></xx></xx><xx><xx = xxxxx=xx"xxxx-xxxx:xxxx;xxxx-xxxxxx:xxxxxxxxxxxx,xxxxxx,xxxxxxx,xxxxx,xxxx= -xxxxx;xxxxxxxxxx:#xxxxxx;xxxxxx:xxxxx xxx = #xxxxxx;xxxxxx-xxx:x;xxxxxx-xxxxxx:x x xxx xxx;xxxxxxx:xxx = xxxx;xxxxxxx:xxxxx;"><xxxxx xxxxxx=xx"x" xxxxx=xx"xxx%" xxxxxxxxxxx=xx"x" = xxxxxxxxxxx=xx"x" xxxxx=xx"xxxxxx-xxxxxxxx:xxxxxxxx;"><xx xxxxx=xx""><xx = xxxxxx=xx"x" xxxxx=xx"xxxx-xxxxxx:xxx;">&xxxx;</xx></xx><xx><xx = xxxxx=xx"xxxxxxx:xxx xxxx;xxxxxx-xxxxx:xxx xxxxx #xxxxxx;"><x = xxxx=xx"xxxxx://xxx.xxxxxxxx.xxx/x/?xxxxx%xxxxx%xxxxxxx&xxx;xxxxxx=xxxxxx&= xxx;xxxxxx=xxxxxxxxxxxxxxxxxxx&xxx;xxxx=xxxxxxxxxxxxxxxxxx&xxx;xxxxxx=xxxx= xxx&xxx;xxx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx&xxx;xxxxx=xxx.xxxxx= xxxxx.xxxxxxxxxxxxxxxxxxx&xxx;xxx=xxxxxxxxx.xxxxxxx%xxxxx.xx&xxx;xxxx=xxxx= xxxxxxxxxxxx&xxx;xxxxx=xxxxxxxxxxxx&xxx;xxx=xxxxxxxxxxxxxxxxxx" = xxxxx=xx"xxxxx:#xxxxxx;xxxx-xxxxxxxxxx:xxxx;"><xxxxx xxxxxx=xx"x" = xxxxxxxxxxx=xx"x" xxxxxxxxxxx=xx"x" = xxxxx=xx"xxxxxx-xxxxxxxx:xxxxxxxx;"><xx><xx xxxxxx=xx"xxxxxx" = xxxxx=xx"xxxxxxx:xxx xxx xxx xxx;"><xxx = xxx=xx"xxxxx://xxxxxx.xx.xxxxx.xxx/xxxx.xxx/xx/xx/x/xxxxxxxxxxx.xxx" = xxxxx=xx"xx" xxxxxx=xx"xx" xxxxx=xx"xxxxxx:x;" /></xx><xx = xxxxxx=xx"xxxxxx" xxxxx=xx"xxxxxxx:xxx xxx;"><x xxxx=xx"xxxxx://xxx.xxxxxx= xx.xxx/x/?xxxxx%xxxxx%xxxxxxx&xxx;xxxxxx=xxxxxx&xxx;xxxxxx=xxxxxxxxxxxxxxx= xxxx&xxx;xxxx=xxxxxxxxxxxxxxxxxx&xxx;xxxxxx=xxxxxxx&xxx;xxx=xxxxxxxxxxxxxx= xxxxxxxxxxxxxxxxxxxxxxxxxxxx&xxx;xxxxx=xxx.xxxxxxxxxx.xxxxxxxxxxxxxxxxxxx&= xxx;xxx=xxxxxxxxx.xxxxxxx%xxxxx.xx&xxx;xxxx=xxxxxxxxxxxxxxxx&xxx;xxxxx=xxx= xxxxxxxxx&xxx;xxx=xxxxxxxxxxxxxxxxxx" = xxxxx=xx"xxxxx:#xxxxxx;xxxx-xxxxxxxxxx:xxxx;xxxx-xxxxxx:xxxxxxxxx = xxxx,xxxxxxxxx,xxxxxx xxxxxx,xxxxxx,xxxxxxx,xxxxx,xxxx-xxxxx;xxxxx-xxxxx:x= xxxxx;xxxx-xxxxxx:xxxx;xxxxxxxx-xxxxx:xxxxxx;xxxx-xxxx:xxxx;xxxx-xxxxxx:xx= xx;xxxx-xxxxxx:x xxx x = #xxxxxx;">xxx=xx=xxxxx&xxxx;xxx</x></xx></xx></xxxxx></x></xx><xx = xxxxx=xx"xxxxxxx:xxx xxxx;"><x xxxx=xx"xxxxx://xxx.xxxxxxxx.xxx/x/?xxxxx%x= xxxx%xxxxxxx&xxx;xxxxxx=xxxxxxxxx&xxx;xxxxxx=xxxxxxxxxxxxxxxxxxx&xxx;xxxx= =xxxxxxxxxxxxxxxxxx&xxx;xxxxxx=xxxxxxx&xxx;xxx=xxxxxxxxxxxxxxxxxxxxxxxxxxx= xxxxxxxxxxxxxxx&xxx;xxxxx=xxx.xxxxxxxxxx.xxxxxxxxxxxxxxxxxxx&xxx;xxx=xxxxx= xxxx.xxxxxxx%xxxxx.xx&xxx;xxxx=xxxxxxxxxxxxxxxxxxx&xxx;xxxxx=xxxxxxxxxxxx&= xxx;xxx=xxxxxxxxxxxxxxxxxx" = xxxxx=xx"xxxxx:#xxxxxx;xxxx-xxxxxxxxxx:xxxx;"><xxxxx xxxxxx=xx"x" = xxxxxxxxxxx=xx"x" xxxxxxxxxxx=xx"x" = xxxxx=xx"xxxxxx-xxxxxxxx:xxxxxxxx;"><xx><xx xxxxxx=xx"xxxxxx" = xxxxx=xx"xxxxxxx:xxx xxx xxx xxx;"><xxx = xxx=xx"xxxxx://xxxxxx.xx.xxxxx.xxx/xxxx.xxx/xx/xx/x/xxxxxxxxxxx.xxx" = xxxxx=xx"xx" xxxxxx=xx"xx" xxxxx=xx"xxxxxx:x;" /></xx><xx = xxxxxx=xx"xxxxxx" xxxxx=xx"xxxxxxx:xxx xxx;"><x xxxx=xx"xxxxx://xxx.xxxxxx= xx.xxx/x/?xxxxx%xxxxx%xxxxxxx&xxx;xxxxxx=xxxxxxxxx&xxx;xxxxxx=xxxxxxxxxxxx= xxxxxxx&xxx;xxxx=xxxxxxxxxxxxxxxxxx&xxx;xxxxxx=xxxxxxx&xxx;xxx=xxxxxxxxxxx= xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx&xxx;xxxxx=xxx.xxxxxxxxxx.xxxxxxxxxxxxxxxxx= xx&xxx;xxx=xxxxxxxxx.xxxxxxx%xxxxx.xx&xxx;xxxx=xxxxxxxxxxxxxxxxxxx&xxx;xxx= xx=xxxxxxxxxxxx&xxx;xxx=xxxxxxxxxxxxxxxxxx" = xxxxx=xx"xxxxx:#xxxxxx;xxxx-xxxxxxxxxx:xxxx;xxxx-xxxxxx:xxxxxxxxx = xxxx,xxxxxxxxx,xxxxxx xxxxxx,xxxxxx,xxxxxxx,xxxxx,xxxx-xxxxx;xxxxx-xxxxx:x= xxxxx;xxxx-xxxxxx:xxxx;xxxxxxxx-xxxxx:xxxxxx;xxxx-xxxx:xxxx;xxxx-xxxxxx:xx= xx;xxxx-xxxxxx:x xxx x = #xxxxxx;">xxxxxxxxxxxx</x></xx></xx></xxxxx></x></xx><xx xxxxx=xx"xxx%" = xxxxx=xx""></xx></xx><xx xxxxx=xx""><xx xxxxxx=xx"x" xxxxx=xx"xxxx-xxxxxx:= xxx;">&xxxx;</xx></xx></xxxxx></xx></xx></xxxxx><xxxxx xxxxxx=xx"x" = xxxxxxxxxxx=xx"x" xxxxxxxxxxx=xx"x" = xxxxx=xx"xxxxxx-xxxxxxxx:xxxxxxxx;"><xx xxxxx=xx""><xx xxxxxx=xx"xx" = xxxxx=xx"xxxx-xxxxxx:xxxx;">&xxxx;</xx></xx></xxxxx></xx></xx><xx = xxxxx=xx""><xx xxxxxx=xx"xx" = xxxxx=xx"xxxx-xxxxxx:xxxx;">&xxxx;</xx></xx></xxxxx></xx><xx xxxxx=xx"xx" = xxxxx=xx"xxxxxxx:xxxxx;xxxxx:xxxx;">&xxxx;&xxxx;&xxxx;</xx></xx><xx><xx = xxxxx=xx"xx" = xxxxx=xx"xxxxxxx:xxxxx;xxxxx:xxxx;">&xxxx;&xxxx;&xxxx;</xx><xx = xxxxx=xx""><xxxxx xxxxxx=xx"x" xxxxx=xx"xxx%" xxxxxxxxxxx=xx"x" = xxxxxxxxxxx=xx"x" xxxxx=xx"xxxxxx-xxxxxxxx:xxxxxxxx;"><xx xxxxx=xx""><xx = xxxxxx=xx"x" xxxxx=xx"xxxx-xxxxxx:xxx;" = xxxxxxx=xx"x">&xxxx;</xx></xx><xx><xx xxxxx=xx"xxxxxx" xxxxx=xx""><x = xxxx=xx"xxxxx://xxx.xxxxxxxx.xxx/x/?xxxxx.xxx&xxx;xxxx=xxxxxxxxxxxxxxxxxxx= &xxx;xxx=xxx.xxxxxxxxxxxx.xxxxxx.xxxxxxxxx&xxx;xxxx=xxx&xxx;xxxxxx=xxxxxxx= &xxx;xxx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx&xxx;xxxxx=xxx.xxxxxxxx= xx.xxxxxxxxxxxxxxxxxxx&xxx;xxx=xxxxxxxxx.xxxxxxx%xxxxx.xx" = xxxxx=xx"xxxxx:#xxxxxx;xxxx-xxxxxxxxxx:xxxx;"><xxxxx xxxxxx=xx"x" = xxxxx=xx"xxx%" xxxxxxxxxxx=xx"x" xxxxxxxxxxx=xx"x" = xxxxx=xx"xxxxxx-xxxxxxxx:xxxxxxxx;"><xx><xx xxxxx=xx"xxxxxx-xxxxxxxx:xxxxx= xxx;xxxxxx-xxxxxx:xxx;xxxx-xxxxx:xxxxxx;xxxxxxx:xxxxx;xxxxxx:xxxxx xxx = #xxxxxx;xxx-xxxxxx:xxxxx x xxx xxx xxxx(xxx, xxx, xxx, x.x),x xxx x = xxxx(x, x, x, x.x);xxxxxxxxxx:#xxxxxx;xxxxxxx:xxx xxxx xxxx xxxx;"><x = xxxx=xx"xxxxx://xxx.xxxxxxxx.xxx/x/?xxxxx.xxx&xxx;xxxx=xxxxxxxxxxxxxxxxxxx= &xxx;xxx=xxx.xxxxxxxxxxxx.xxxxxx.xxxxxxxxx&xxx;xxxx=xxx&xxx;xxxxxx=xxxxxxx= &xxx;xxx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx&xxx;xxxxx=xxx.xxxxxxxx= xx.xxxxxxxxxxxxxxxxxxx&xxx;xxx=xxxxxxxxx.xxxxxxx%xxxxx.xx" = xxxxx=xx"xxxxx:#xxxxxx;xxxx-xxxxxxxxxx:xxxx;xxxxxxx:xxxxx;"><xxxxxx><xxxx = xxxx=xx"x"><xxxx xxxxx=xx"xxxx-xxxxxx:xxxxxxxxx xxxx,xxxxxxxxx,xxxxxx = xxxxxx,xxxxxx,xxxxxxx,xxxxx,xxxx-xxxxx;xxxxx-xxxxx:xxxxxx;xxxx-xxxxxx:xxxx= ;xxxxxxxx-xxxxx:xxxxxx;xxxxx:#xxxxxx;xxxx-xxxxxx:x -xxx x = #xxxxxx;xxxx-xxxx:xxxx;xxxx-xxxxxx:xxxx;">xxxxxxxx&xxxx;=xx=xxxxxxx</xxxx>= </xxxx></xxxxxx></x></xx></xx></xxxxx></x></xx><xx xxxxx=xx"xxx%" = xxxxx=xx"xxxxxxx" xxxxx=xx""></xx></xx><xx xxxxx=xx""><xx xxxxxx=xx"xx" = xxxxx=xx"xxxx-xxxxxx:xxxx;" xxxxxxx=xx"x">&xxxx;</xx></xx></xxxxx></xx><xx = xxxxx=xx"xx" = xxxxx=xx"xxxxxxx:xxxxx;xxxxx:xxxx;">&xxxx;&xxxx;&xxxx;</xx></xx><xx><xx = xxxxx=xx"xx" = xxxxx=xx"xxxxxxx:xxxxx;xxxxx:xxxx;">&xxxx;&xxxx;&xxxx;</xx><xx = xxxxx=xx""><xxxxx xxxxxx=xx"x" xxxxx=xx"xxx%" xxxxxxxxxxx=xx"x" = xxxxxxxxxxx=xx"x" xxxxx=xx"xxxxxx-xxxxxxxx:xxxxxxxx;"><xx = xxxxx=xx"xxxxxx-xxx:xxxxx xxx #xxxxxx;"><xx xxxxxx=xx"xx" = xxxxx=xx"xxxx-xxxxxx:xxxx;">&xxxx;</xx></xx><xx><xx = xxxxx=xx"xxxx-xxxxxx:xxxxxxxxx xxxx,xxxxxxxxx,xxxxxx xxxxxx,xxxxxx,xxxxxxx= ,xxxxx,xxxx-xxxxx;xxxx-xxxx:xxxx;xxxxx:#xxxxxx;xxxx-xxxxxx:xxxx;">xxxxx = xxxxxxxxx xxxxx xx <x xxxx=xx"xxxxxx:xxxxxxx.xxxxxxx&#xxx;xxx.xx" = xxxxx=xx"xxxxx:#xxxxxx;xxxx-xxxxxxxxxx:xxxx;">xxxxxxx.xxxxxxx&#xxx;xxx.xx<= /x> xxxxxxxx. xxxxx xx xxxxx x-xxxxx xx xxxxxxx xxxxx xxx xxxxxxxx = xxxxxxxx x=xx=xxxxxxxx, <x xxxx=xx"xxxxx://xxx.xxxxxxxx.xxx/x.xxx?x=xxxxxx= xxxxxxxxxxxx&xxx;x=xxxxxxxxxxxx&xxx;xxx=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx= xxxxxxxx" xxxxx=xx"xxxxx:#xxxxxx;xxxx-xxxxxxxxxx:xxxx;">xxxxxxxx xxx = xx</x>.<xx />xxxxxxxx, xxx., xxxxxxxxx: xxxxxxxxx xxxxxxx, x xxxxxx xxx, = xxxxx xxxx, xx xxxxx</xx></xx></xxxxx></xx><xx xxxxx=xx"xx" = xxxxx=xx"xxxxxxx:xxxxx;xxxxx:xxxx;">&xxxx;&xxxx;&xxxx;</xx></xx><xx = xxxxx=xx""><xx xxxxxx=xx"xx" xxxxx=xx"xxxx-xxxxxx:xxxx;" = xxxxxxx=xx"x">&xxxx;</xx></xx></xxxxx><xxxx xxxxx=xx""><xxx = xxx=xx"xxxxx://xxx.xxxxxxxx.xxx/xxxxxxxxxxxxxxxxxx.xxx?xxx=xxxxxxxxxxxxxxx= xxxxxxxxxxxxxxxxxxxxxxxxxxx" xxxxx=xx"xxxxxx:x;xxxxx:xxx;xxxxxx:xxx;" = /></xxxx></xx></xx></xxxxx></xxxx></xxxx> --xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx-- AF: NF:x PS:xx SRH:x SFN: DSR: MID:<xxxxxxxxxxxxxx.xxxxxxxx(a)xxxxxxxxxxx.xx> CFG: PT:x S:xxxxxxxxxx@xxxxxxxxxxx.xx RQ: SSV: NSV:xxxx.xxxxxx.xx.xx SSH: NG:xx.xxx.xxxxxx NAID:x X-Claws-Privacy-System: X-Claws-Sign:x SCF:#xxxx/xxxx-xxxxxxxxx/xxxxx/xxxx RMID:#xxxx/xxxx.xxxxxx.xx.xx/xx.xxx.xxxxxx xxxxxx xxxxxx.xxx.x(a)xxxx.xxxxxxx.xx X-Claws-End-Special-Headers: x Date: Sun, 19 Apr 2009 14:55:54 +0200 From: xxxxxxx =?xxx-x?x?xxxxxxxxxx==?= <xxxxxxxxxx(a)xxxxxxxxxxx.xx> Newsgroups: xx.xxx.xxxxxx Subject: xx: =?xxx-x?x?xxxxxxxxxxxx?= xxxxxxx xxxxxxx xxxxxxx xx Message-ID: <xxxxxxxxxxxxxx.xxxxxxxx(a)xxxxxxxxxxx.xx> References: <xxxxxxxxxxxxxxx(a)xxx.xxxxxxxxxx.xxx> <xxxxxx.xxx.x(a)xxxx.xxxxxxx.xx> <xxxxxxxxxxxxxxx(a)xxx.xxxxxxxxxx.xxx> <xxxxxx-xxx.xxx(a)xxx.xxxxxxx-xxxxxx.xx> <xxxxxxxxxxxxxxxx(a)xxx.xxxxxxxxxx.xxx> <xxxxxx-xxx.xxx(a)xxx.xxxxxxx-xxxxxx.xx> <xxxxxxxxxxxxxxxx(a)xxx.xxxxxxxxxx.xxx> <xxxxxx-xxx.xxx(a)xxx.xxxxxxx-xxxxxx.xx> <xxxxxx.xxx.x(a)xxxx.xxxxxxx.xx> <xxxxxx-xxx.xxx(a)xxx.xxxxxxx-xxxxxx.xx> <xxxxxx.xxx.x(a)xxxx.xxxxxxx.xx> <xxxxxx.xxx.x(a)xx-xxxx.xxxx.xxxxxx.xx> <xxxxxx.xxx.x(a)xxxx.xxxxxxx.xx> <xxxxxx.xxx.x(a)xx-xxxx.xxxx.xxxxxx.xx> <xxxxxx.xxx.x(a)xxxx.xxxxxxx.xx> X-Newsreader: xxxxx xxxx x.x.x (xxx+ x.xx.xx; xxxxxx-xx-xxxxx-xxx) Mime-Version: x.x Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable xx xxx, xx xxx xxxx xx:xx:xx +xxxx xxxxxxx xxxxxx xxxxxxxxx <xxxxxxxxxxxxxxx(a)xxx.xxx>: > xxxxxxxx x=xx=xxxx (xxxx-xx-xx xxxx): >=xx > >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> xxx: xxxxxxxx x=xx=xxxxx xxx xxxx xxx xxx > >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> xxxx xx xxxxxxxx xxxx xx xxx xx xxx > >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> xxxxxxxxxxxxxx xxx ... > >>>>>>>>>>>>>>>>>>>>>>>>>>>>>> xxxx xxx xxxxxxxx, xxxx xxx xxx > >>>>>>>>>>>>>>>>>>>>>>>>>>>>>> xxxxxxx xxxxxxxxxxx xxx xxxxxx? > >>>>>>>>>>>>>>>>>>>>>>>>>>>>> xxx xxx xx xxxx xxx xxxx xxxxxx? > >>>>>>>>>>>>>>>>>>>>>>>>>>>> xxx "x". > >>>>>>>>>>>>>>>>>>>>>>>>>>> xxxxxxx? > >>>>>>>>>>>>>>>>>>>>>>>>>> xxx xxx, xx "xxxxxx" xxx xxxx "x". > >>>>>>>>>>>>>>>>>>>>>>>>> xxxx; xx xxxxx xx xxx xxxxxx xxxxxxxx. > >>>>>>>>>>>>>>>>>>>>>>>> "xxx xxxxxxx xxx xxxxx, xxx xxxx xxxxxxx xxx > >>>>>>>>>>>>>>>>>>>>>>>> xxxx xxxxx xxxx xxxxxx." - xxxx "x" xx > >>>>>>>>>>>>>>>>>>>>>>>> xxxxxxxxxxxx xxxxxx. > >>>>>>>>>>>>>>>>>>>>>>> "xxx xxxxxxx xxx xxxxxxxxx" xxx xxx xxxxxx > >>>>>>>>>>>>>>>>>>>>>>> xxxxxx. > >>>>>>>>>>>>>>>>>>>>>> xxxx xxxxxxx xxx xxxxxxx!!!!!x > >>>>>>>>>>>>>>>>>>>>> xxxxx? > >>>>>>>>>>>>>>>>>>>> xxx xxxxxxxxx. > >>>>>>>>>>>>>>>>>>> ... xxx xxxx x=xx=xxxxxx xxxx, xxx xxx xx xxx xxxxxxxx > >>>>>>>>>>>>>>>>>>> xxxxxx! > >>>>>>>>>>>>>>>>>> xxx xx xxxxxx, xxxxx xxx 'xxxxxxxxx'. > >>>>>>>>>>>>>>>>> x=xx=xxxxxx xxx xxx xxxxxx? > >>>>>>>>>>>>>>>> xxxx xxx xxxxx xxxxxxxxx x=xx=xxxxxx! > >>>>>>>>>>>>>>> xxxx xxx x=xx=xxxxxx xxxxxxx xxx xxxxxx xxxxx xxx xxxxxx > >>>>>>>>>>>>>>> xxxxx x=xx=xxxxxx xxxxxxxxxxx. > >>>>>>>>>>>>>> xxxx xxxxxx xxxxx, xxxxx xx xxxx xx xxx x=xx=xxxxxxx xxxxx! > >>>>>>>>>>>>> xxx xxxxxx xxxx? xxx xxx xxxx xxxxxx xxxxxxxxxxx. > >>>>>>>>>>>> xx, xx, xxxxxx xxxxxx =xx=xxxxxxxx xxxxx xxx xxxxx. > >>>>>>>>>>>> xx"xxx xxx xxx xxxx=xx=xxxxx, xxx xxxx xx xxxx"xxxxxx > >>>>>>>>>>> xxxxxxxxx? > >>>>>>>>>> xxx /xxx/ xxxxxx? > >>>>>>>>> xxx xxxxxxx xxx xx xxxxxxx xxxxxxxx. > >>>>>>>> xxxx xxxx xxx x=xx=xxxxxxx xxxxxx? > >>>>>>> xx xxx xx xx xxxxxxxxxx > >>>>>> xxx xxxxx x =xx=xx? > >>>>> xxx xxxxxxxxxxxxx x=xx=xxxxx xxx xxxxx x xx. > >>>> xxxx xxxx xxxx xxxxxxxxxxxx. > >>> xxx xxxx xx=xx=xxxxxxxxxxxxxxx xxxx xxx xxxxxxxxxxx xxx xxx. > >> > >> xxxxx xxx xxx xxx xxxxxx xxx xxxxx xxxx. > > > > xxxx xxxxxx xxxxx; xxx xxxxx xxxxx xxx xxxxx ... >=xx > xxxxx xxx, xxx xxxxxxxxx xxxxx! xx xxxxxx xx xxxxx xxxxxx, xxxx xxx xxxxxx xxx xxx xxxxxxx xxx xxxxxx xxxxxx! xxxxx --=xx xxx xxxx xxx xx xxx: xxxxxx-xxxxx-xxxxx-xxxxxx-xxxxx-xxxx-xxxx-xxx-xxxxxx-xxxxx xxxxxx-xxxxx-xxxxx-xxxxxx-xxxxx-xxxx-xxxx-xxx-xxxxxx-xxxxx Return-Path: <xxxxxx-xx.xxxxxxxxxxx.xxxxxxx-xxxxxxxxxx=xxxxxxxxxxx.xx(a)xxxxxx.xxx.xxxx.xxx> Received: xxxx xxxxxxxxx ([xxxx xxxxxx]) xx xxxxx (xxxxx xx.x.xx-xxxxxx-x.x.xx-x) xxxx xxxxx; xxx, xx xxx xxxx xx:xx:xx +xxxx X-Sieve: xxx xxxxx x.x Received: xxxx xxxxxxxxx ([xxx.x.x.x]) xx xxxxxxxxx xxxx xxxxx (xxxx x.xx) (xxxxxxxx-xxxx <xxxxxx-xx.xxxxxxxxxxx.xxxxxxx-xxxxxxxxxx=xxxxxxxxxxx.xx(a)xxxxxx.xxx.xxxx.xxx>) xx xxxxxx-xxxxxx-xx xxx xxxxx@xxxxxxxxx; xxx, xx xxx xxxx xx:xx:xx +xxxx X-Virus-Scanned: xxxxxx xxxxxxx-xxx xx xxxxxxx.xxxxxxxxx.xxx Received: xxxx xxxxxxxxx ([xxx.x.x.x]) xx xxxxxxxxx (xxxxxxxxx [xxx.x.x.x]) (xxxxxxx-xxx, xxxx xxxxx) xxxx xxxxx xx xxxxxxxxxxxx xxx <xxxxx@xxxxxxxxx>; xxx, x xxx xxxx xx:xx:xx +xxxx (xxx) Received: xxxx xxxxxx-xxxx xx xxxxxxxxx xxxx xxxx-xxxxxxx (xxxx x.xx) (xxxxxxxx-xxxx <xxxxxx-xx.xxxxxxxxxxx.xxxxxxx-xxxxxxxxxx=xxxxxxxxxxx.xx(a)xxxxxx.xxx.xxxx.xxx>) xx xxxxxx-xxxxxx-xx xxx xxxxx@xxxxxxxxx; xxx, xx xxx xxxx xx:xx:xx +xxxx Received: xxxx xxxxxxxxx ([xxx.x.x.x]) xx xxxxxxxxx xxxx xxxxx (xxxx x.xx) (xxxxxxxx-xxxx <xxxxxx-xx.xxxxxxxxxxx.xxxxxxx-xxxxxxxxxx=xxxxxxxxxxx.xx(a)xxxxxx.xxx.xxxx.xxx>) xx xxxxxx-xxxxxx-xx xxx xxxxx@xxxxxxxxx; xxx, xx xxx xxxx xx:xx:xx +xxxx Received: xxxx xxx.xxx.xxx [xxx.xxx.xx.xxx] xx xxxxxxxxx xxxx xxxx (xxxxxxxxx-x.x.xx) xxx <xxxxx@xxxxxxxxx> (xxxxxx-xxxx); xxx, xx xxx xxxx xx:xx:xx +xxxx (xxx) Received: xxxx xxxxxx.xxx.xxxx.xxx ([xxx.xxx.xxx.xx]) xx xx-xx.xxx.xxx (xxxxxxxx) xxxx xxxxx (xxxxxxx) xx xxxxxx-xxxxxxxxxx-xxxxxx xxx <xxxxxxxxxx(a)xxxxxxxxxxx.xx>; xxx, xx xxx xxxx xx:xx:xx +xxxx DKIM-Signature: x=x; x=xxx-xxxx; x=xxxxxxx/xxxxxxx; x=xx; x=xxxxxx.xxx.xxxx.xxx; x=xxxxxxx:xxxx:xxxxx-xx:xx:xxxx:xxxxxxx-xx:xxxx-xxxxxxxxxxx:xxxxxx:xxxxxxx-xxxx:xxxx-xxxxxxx; x=xxxxxxxx.xxxxxxx=xxxxxxx.xxx(a)xxxxxx.xxx.xxxx.xxx; xx=xxxxxxxxxxxxxxxxxxxxxxxxxxx=; x=xxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx/xxxxxx xxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxx= DomainKey-Signature: x=xxx-xxxx; x=xxxxx; x=xxx; x=xx; x=xxxxxx.xxx.xxxx.xxx; x=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxx+xxxxx/xx+xxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxx/xxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxx=; Received: xxxx (xxx.x.x.x) xx xxxxxx.xxx.xxxx.xxx (xxxxxxxx(xx) xx.xxxx) xx xxxxxxxxxxxx xxx <xxxxxxxxxx(a)xxxxxxxxxxx.xx>; xxx, xx xxx xxxx xx:xx:xx +xxxx (xxxxxxxx-xxxx <xxxxxx-xx.xxxxxxxxxxx.xxxxxxx-xxxxxxxxxx=xxxxxxxxxxx.xx(a)xxxxxx.xxx.xxxx.xxx>) Subject: =?xxx-x?x?xxxxx=xx=xx=xxxxxxxxxxx=xxxxxx?= From: =?xxx-x?x?xxxxxxxxx=xxx=xxxxxxxxxxx=xx=xx=xxxxxxxxxx=xxxxxxxxxxxxx?= <xxxxxxxx.xxxxxxx(a)xxxxx.xxx> Reply-To: =?xxx-x?x?xxxxxxxxx=xxx=xxxxxxxxxxx=xx=xx=xxxxxxxxxx=xxxxxxxxxxxxx?= <xxxxxxxx.xxxxxxx(a)xxxxx.xxx> To: <xxxxxxxxxx(a)xxxxxxxxxxx.xx> Date: Sat, 29 Dec 2012 22:06:39 +0000 Message-ID: <xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.xxxxxxxxxxxxxx(a)xxxxxx.xxx.xxxx.xxx> X-Mailer: xxxxxxxxx xxxxxx - **xxxxxxxxxxxxxxxxxxxxxxx** X-Campaign: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.xxxxxxxxxx X-campaignid: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx.xxxxxxxxxx X-Report-Abuse: xxxxxx xxxxxx xxxxx xxx xxxx xxxxxxxx xxxx: xxxx://xxx.xxxxxxxxx.xxx/xxxxx/xxxxx.xxxxx?x=xxxxxxxxxxxxxxxxxxxxxxxxx&xx=xxxxxxxxxx&x=xxxxxxxxxx x-accounttype: xx List-Unsubscribe: <xxxxxx:xxxxxxxxxxx-xxxxxxxxxxxxxxxxxxxxxxxxx-xxxxxxxxxx-xxxxxxxxxx@xxxxxxx.xxx.xxxx.xxx?xxxxxxx=xxxxxxxxxxx>, <xxxx://xxxxxxxx.xxx.xxxx-xxxxxxx.xxx/xxxxxxxxxxx?x=xxxxxxxxxxxxxxxxxxxxxxxxx&xx=xxxxxxxxxx&x=xxxxxxxxxx&x=xxxxxxxxxx> Sender: "xxxxxxxxx x xxxxxxxxx - xxxxxxxx xxxxxxxxxxx" <xxxxxxxx.xxxxxxx=xxxxx.xxx(a)xxxxxx.xxx.xxxx.xxx> x-mcda: xxxxx Content-Type: multipart/alternative; boundary="_----------=_MCPart_2024482880" MIME-Version: x.x X-GMX-Antispam: x (xxxx xxx xxx xxxxxxxxxx xx xxxx); xxxxxx=xx; X-GMX-Antivirus: x (xx xxxxx xxxxx) X-UI-Filterresults: ;xxx:xx:xxxxxxxxxxx=:xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxx+x+xxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxx+xxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxx/ xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxx/xxxxxxxxx+xxxxxx/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxx+x xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx/xxxxxxxxxxxxx/xxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx/xxxxxxx//x xxxx/xxxxxxxxxxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx/xxx xxxxxxxxxxxxxxxxxxxxx+xxx+xxxxxxxxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxxxxx/x xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxx/xxxxx/xxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx/xxxxxxxxxxxxxxxxxx/xxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxx+xxxxx/xxxx+xx xxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxx/xxxxx+xxx+xxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxx= X-Bogofiltered: xxxx X-Bogosity: xxxxxx, xxxxx=xxxxxxxxxx, xxxxxxxxx=x.xxxxxx, xxxxxxx=x.x.x xxxx xx x xxxxx-xxxx xxxxxxx xx xxxx xxxxxx --x----------=xxxxxxxxxxxxxxxxxx xxxxxxx-xxxx: xxxx/xxxxx; xxxxxxx="xxx-x"; xxxxxx="xxxxx" xxxxxxx-xxxxxxxx-xxxxxxxx: xxxxxx-xxxxxxxxx xxxxx xxxxxxxxx x xxxxxxxxx xxxxxx - xxxxx xxx xxxxxx xxxxx xxxxxx xxxxxx xxxxxxx (xxxxxxx xxxx xxxx xxxxx xxx xxxxxxx) xxx xxxxxxxxx x=xx=xxxxxxxxxxx, xxx-xxxxxxx x=xx=xxx xxxx x=xx=xxxx xxx xxxxxxx xx xxxxxx xxx xxxxxxxx xx= =xx=xx=xxxx,- xxxxx =xx=xx=xxxx,- xx xxxxxxxx!!! xxx xxxxxxxx xxxxxx xxx xxxxxxxxxx xxxxx xxx xxxxxxxxxxxxxxxx!! xxxxxxxxxx xxxxx xxxxxxxx(a)xxxxxxxx.xxx - xxx xxxxxxxx xxx xxxxxxxxxx xxxxx xxxx, xxx xxx xxx xxx xxxxxxx xxxx xxxxxxxxxx xxxxxxx xxx xxxxxxx. xx xxxxxx xxxxx ... xxxxx xxx xx... xxx xxxxxxxxx x xxxxxxxxx xxxx xx xxx=xx=xxxxxx xxxxxx xxxxxxxxxx, xx xx xxxx xxx xxxxx xxxxxxx xxxxxx, xxxx xxx xxx.xxxxxxxx.xxx, xxx. xxx.xxxxx.xxx xxxxxxxxxxx xxxx. [x]xxxxxxxxxxx xxxx xxxx xxxx | [x]xxxxxx xxxxxxxxxxxx xxxxxxxxxxx xxxxx: x. xxxx://xxxxxxxx.xxx.xxxx-xxxxxxx.xxx/xxxxxxxxxxx?x=xxxxxxxxxxxxxxxx= xxxxxxxxxxx&xx=xxxxxxxxxxxx&x=xxxxxxxxxxxx&x=xxxxxxxxxxxx x. xxxx://xxxxxxxx.xxx.xxxx-xxxxxxx.xxx/xxxxxxx?x=xxxxxxxxxxxxxxxxxxxx= xxxxxxx&xx=xxxxxxxxxxxx&x=xxxxxxxxxxxx --x----------=xxxxxxxxxxxxxxxxxx xxxxxxx-xxxx: xxxx/xxxx; xxxxxxx="xxx-x" xxxxxxx-xxxxxxxx-xxxxxxxx: xxxxxx-xxxxxxxxx <!xxxxxxx xxxx xxxxxx "-//xxx//xxx xxxxx x.x xxxxxxxxxxxx//xx" "xxxx://xxx= =xxxx.xxx/xx/xxxxxx/xxx/xxxxxx-xxxxxxxxxxxx.xxx"> <xxxx> <xxxx> <xxxx xxxx-xxxxx=xx"xxxxxxx-xxxx" xxxxxxx=xx"xxxx/xxxx; xxxxxxx=xx= xxx-x">  <xxxx xxxxxxxx=xx"xx:xxxxx" xxxxxxx=xx"xxxxx - xxxxxxxxx xxxx"> <xxxxx>xxxxx - xxxxxxxxx xxxx</xxxxx> =xx=xx =xx<xxxxx xxxx=xx"xxxx/xxx"> =xx=xx#xxxxxxx x{ =xx=xx=xxxxxxxxx:x; =xx=xx} =xx=xxxxxx{ =xx=xx=xxxxxxx:xxx% !xxxxxxxxx; =xx=xx} =xx=xx.xxxxxxxxxxx{ =xx=xx=xxxxxxx:xxx%; =xx=xx} =xx=xx.xxxxxxxxxxxxx{ =xx=xx=xxxxxxx:xxx%; =xx=xx} =xx=xxxxxx{ =xx=xx=xx-xxxxxx-xxxx-xxxx-xxxxxx:xxxx; =xx=xx} =xx=xxxxxx{ =xx=xx=xxxxxxxx:x; =xx=xx=xxxxxxxxx:x; =xx=xx} =xx=xxxxx{ =xx=xx=xxxxxxxx:x; =xx=xx=xxxxxxxx:xxxx; =xx=xx=xxxxxx-xxxxxx:xxx%; =xx=xx=xxxxxxxxx:xxxx; =xx=xx=xxxxxx-xxxxxxxxxx:xxxx; =xx=xx} =xx=xxxxxxx xx{ =xx=xx=xxxxxxxx-xxxxxxxx:xxxxxxxx; =xx=xx} =xx=xx#xxxxxxxxxxxxxxx{ =xx=xx=xxxxxxxx:xxx% !xxxxxxxxx; =xx=xx=xxxxxxxx:x; =xx=xx=xxxxxxxxx:x; =xx=xx=xxxxxxx:xxx% !xxxxxxxxx; =xx=xx} =xx=xxxxxx,#xxxxxxxxxxxxxxx{ =xx=xx=xxxxxxxxxxxx-xxxxx:#xxxxxx; =xx=xx} =xx=xx#xxxxxxxxxxxxxxxxx{ =xx=xx=xxxxxxxx:xxx xxxxx #xxxxxx; =xx=xx} =xx=xxxx,.xx{ =xx=xx=xxxxxxx:#xxxxxx; =xx=xx=xxxxxxxxx:xxxxx; =xx=xx=xxxxxx-xxxxxx:xxxxx; =xx=xx=xxxxxx-xxxx:xxxx; =xx=xx=xxxxxx-xxxxxx:xxxx; =xx=xx=xxxxxx-xxxxxx:xxx%; =xx=xx=xxxxxxxx-xxx:x; =xx=xx=xxxxxxxx-xxxxx:x; =xx=xx=xxxxxxxx-xxxxxx:xxxx; =xx=xx=xxxxxxxx-xxxx:x; =xx=xx=xxxxxx-xxxxx:xxxx; =xx=xx} =xx=xxxx,.xx{ =xx=xx=xxxxxxx:#xxxxxx; =xx=xx=xxxxxxxxx:xxxxx; =xx=xx=xxxxxx-xxxxxx:xxxxx; =xx=xx=xxxxxx-xxxx:xxxx; =xx=xx=xxxxxx-xxxxxx:xxxx; =xx=xx=xxxxxx-xxxxxx:xxx%; =xx=xx=xxxxxxxx-xxx:x; =xx=xx=xxxxxxxx-xxxxx:x; =xx=xx=xxxxxxxx-xxxxxx:xxxx; =xx=xx=xxxxxxxx-xxxx:x; =xx=xx=xxxxxx-xxxxx:xxxx; =xx=xx} =xx=xxxx,.xx{ =xx=xx=xxxxxxx:#xxxxxx; =xx=xx=xxxxxxxxx:xxxxx; =xx=xx=xxxxxx-xxxxxx:xxxxx; =xx=xx=xxxxxx-xxxx:xxxx; =xx=xx=xxxxxx-xxxxxx:xxxx; =xx=xx=xxxxxx-xxxxxx:xxx%; =xx=xx=xxxxxxxx-xxx:x; =xx=xx=xxxxxxxx-xxxxx:x; =xx=xx=xxxxxxxx-xxxxxx:xxxx; =xx=xx=xxxxxxxx-xxxx:x; =xx=xx=xxxxxx-xxxxx:xxxx; =xx=xx} =xx=xxxx,.xx{ =xx=xx=xxxxxxx:#xxxxxx; =xx=xx=xxxxxxxxx:xxxxx; =xx=xx=xxxxxx-xxxxxx:xxxxx; =xx=xx=xxxxxx-xxxx:xxxx; =xx=xx=xxxxxx-xxxxxx:xxxx; =xx=xx=xxxxxx-xxxxxx:xxx%; =xx=xx=xxxxxxxx-xxx:x; =xx=xx=xxxxxxxx-xxxxx:x; =xx=xx=xxxxxxxx-xxxxxx:xxxx; =xx=xx=xxxxxxxx-xxxx:x; =xx=xx=xxxxxx-xxxxx:xxxx; =xx=xx} =xx=xx#xxxxxxxxxxxxxxxxx{ =xx=xx=xxxxxxxxxxxx-xxxxx:#xxxxxx; =xx=xx} =xx=xx.xxxxxxxxxxxxxxxx xxx{ =xx=xx=xxxxxxx:#xxxxxx; =xx=xx=xxxxxx-xxxxxx:xxxxx; =xx=xx=xxxxxx-xxxx:xxxx; =xx=xx=xxxxxx-xxxxxx:xxx%; =xx=xx=xxxxxx-xxxxx:xxxx; =xx=xx} =xx=xx.xxxxxxxxxxxxxxxx xxx x:xxxx,.xxxxxxxxxxxxxxxx xxx x:xxxxxxx,.xxxxxx= xxxxxxxxxx xxx x .xxxxxxxxxx { =xx=xx=xxxxxxx:#xxxxxx; =xx=xx=xxxxxx-xxxxxx:xxxxxx; =xx=xx=xxxxxx-xxxxxxxxxx:xxxxxxxxx; =xx=xx} =xx=xx#xxxxxxxxxxxxxx{ =xx=xx=xxxxxxxxxxxx-xxxxx:#xxxxxx; =xx=xx=xxxxxxxx-xxxxxx:x; =xx=xx} =xx=xx.xxxxxxxxxxxxx{ =xx=xx=xxxxxxx:#xxxxxx; =xx=xx=xxxxxx-xxxxxx:xxxxx; =xx=xx=xxxxxx-xxxx:xxxx; =xx=xx=xxxxxx-xxxxxx:xxxx; =xx=xx=xxxxxx-xxxxxx:xxx%; =xx=xx=xxxxxxxxx:x; =xx=xx=xxxxxx-xxxxx:xxxxxx; =xx=xx=xxxxxxxxxx-xxxxx:xxxxxx; =xx=xx} =xx=xx.xxxxxxxxxxxxx x:xxxx,.xxxxxxxxxxxxx x:xxxxxxx,.xxxxxxxxxxxxx x .xxx= xxxxxxx { =xx=xx=xxxxxxx:#xxxxxx; =xx=xx=xxxxxx-xxxxxx:xxxxxx; =xx=xx=xxxxxx-xxxxxxxxxx:xxxxxxxxx; =xx=xx} =xx=xx#xxxxxxxxxxx{ =xx=xx=xxxxxxxx:xxxx; =xx=xx=xxxxx-xxxxx:xxxxx; =xx=xx} =xx=xx#xxxxxxxxxxxxxxxxx,.xxxxxxxxxxx{ =xx=xx=xxxxxxxxxxxx-xxxxx:#xxxxxx; =xx=xx} =xx=xx.xxxxxxxxxxx xxx{ =xx=xx=xxxxxxx:#xxxxxx; =xx=xx=xxxxxx-xxxxxx:xxxxx; =xx=xx=xxxxxx-xxxx:xxxx; =xx=xx=xxxxxx-xxxxxx:xxx%; =xx=xx=xxxxxx-xxxxx:xxxx; =xx=xx} =xx=xx.xxxxxxxxxxx xxx x:xxxx,.xxxxxxxxxxx xxx x:xxxxxxx,.xxxxxxxxxxx xxx= x .xxxxxxxxxx { =xx=xx=xxxxxxx:#xxxxxx; =xx=xx=xxxxxx-xxxxxx:xxxxxx; =xx=xx=xxxxxx-xxxxxxxxxx:xxxxxxxxx; =xx=xx} =xx=xx.xxxxxxxxxxx xxx{ =xx=xx=xxxxxxxxx:xxxxxx; =xx=xx=xxxxxxxx:xxxx; =xx=xx} =xx=xx.xxxxxxxxxxxxxxxxx{ =xx=xx=xxxxxxxxxxxx-xxxxx:#xxxxxx; =xx=xx} =xx=xx.xxxxxxxxxxxxxxxxx xxx{ =xx=xx=xxxxxxx:#xxxxxx; =xx=xx=xxxxxx-xxxxxx:xxxxx; =xx=xx=xxxxxx-xxxx:xxxx; =xx=xx=xxxxxx-xxxxxx:xxx%; =xx=xx=xxxxxx-xxxxx:xxxx; =xx=xx} =xx=xx.xxxxxxxxxxxxxxxxx xxx x:xxxx,.xxxxxxxxxxxxxxxxx xxx x:xxxxxxx,.xxxx= xxxxxxxxxxxxx xxx x .xxxxxxxxxx { =xx=xx=xxxxxxx:#xxxxxx; =xx=xx=xxxxxx-xxxxxx:xxxxxx; =xx=xx=xxxxxx-xxxxxxxxxx:xxxxxxxxx; =xx=xx} =xx=xx.xxxxxxxxxxxxxxxxx xxx{ =xx=xx=xxxxxxxxx:xxxxxx; =xx=xx=xxxxxxxx:xxxx; =xx=xx} =xx=xx.xxxxxxxxxxxxxxxxxx{ =xx=xx=xxxxxxxxxxxx-xxxxx:#xxxxxx; =xx=xx} =xx=xx.xxxxxxxxxxxxxxxxxx xxx{ =xx=xx=xxxxxxx:#xxxxxx; =xx=xx=xxxxxx-xxxxxx:xxxxx; =xx=xx=xxxxxx-xxxx:xxxx; =xx=xx=xxxxxx-xxxxxx:xxx%; =xx=xx=xxxxxx-xxxxx:xxxx; =xx=xx} =xx=xx.xxxxxxxxxxxxxxxxxx xxx x:xxxx,.xxxxxxxxxxxxxxxxxx xxx x:xxxxxxx,.xx= xxxxxxxxxxxxxxxx xxx x .xxxxxxxxxx { =xx=xx=xxxxxxx:#xxxxxx; =xx=xx=xxxxxx-xxxxxx:xxxxxx; =xx=xx=xxxxxx-xxxxxxxxxx:xxxxxxxxx; =xx=xx} =xx=xx.xxxxxxxxxxxxxxxxxx xxx{ =xx=xx=xxxxxxxxx:xxxxxx; =xx=xx=xxxxxxxx:xxxx; =xx=xx} =xx=xx#xxxxxxxxxxxxxx{ =xx=xx=xxxxxxxxxxxx-xxxxx:#xxxxxx; =xx=xx=xxxxxxxx-xxx:x; =xx=xx} =xx=xx.xxxxxxxxxxxxx xxx{ =xx=xx=xxxxxxx:#xxxxxx; =xx=xx=xxxxxx-xxxxxx:xxxxx; =xx=xx=xxxxxx-xxxx:xxxx; =xx=xx=xxxxxx-xxxxxx:xxx%; =xx=xx=xxxxxx-xxxxx:xxxx; =xx=xx} =xx=xx.xxxxxxxxxxxxx xxx x:xxxx,.xxxxxxxxxxxxx xxx x:xxxxxxx,.xxxxxxxxxxxx= x xxx x .xxxxxxxxxx { =xx=xx=xxxxxxx:#xxxxxx; =xx=xx=xxxxxx-xxxxxx:xxxxxx; =xx=xx=xxxxxx-xxxxxxxxxx:xxxxxxxxx; =xx=xx} =xx=xx.xxxxxxxxxxxxx xxx{ =xx=xx=xxxxxxxxx:xxxxxx; =xx=xx} =xx=xx#xxxxxx{ =xx=xx=xxxxxxxxxxxx-xxxxx:#xxxxxx; =xx=xx=xxxxxxxx:x; =xx=xx} =xx=xx#xxxxxx xxx{ =xx=xx=xxxxxx-xxxxx:xxxxxx; =xx=xx} =xx=xx#xxxxxxx{ =xx=xx=xxxxxxxxxxxx-xxxxx:#xxxxxx; =xx=xx=xxxxxxxx:x; =xx=xx} =xx=xx#xxxxxxx xxx{ =xx=xx=xxxxxx-xxxxx:xxxxxx; =xx=xx} =xx=xx#xxxxxxxxxxxxx xxx{ =xx=xx=xxxxx-xxxxx:xxxxx; =xx=xx} =xx=xx.xxxxxxxxxxxxx x{ =xx=xx=xxxxxxx:#xxxxxx; =xx=xx=xxxxxx-xxxxxxxxxx:xxxx; =xx=xx} </xxxxx></xxxx> <xxxx xxxxxxxxxx=xx"x" xxxxxxxxxxx=xx"x" xxxxxxxxx=xx"x" xxxxxxxxxxxx= =xx"x" xxxxxx=xx"x" xxxxx=xx"-xxxxxx-xxxx-xxxx-xxxxxx: xxxx;xxxxxx: x;xxxx= xxx: x;xxxxxxxxxx-xxxxx: #xxxxxx;xxxxx: xxx% !xxxxxxxxx;"> =xx<xxxxxx> =xx<xxxxx xxxxxx=xx"x" xxxxxxxxxxx=xx"x" xxxxxxxxxxx=xx"x" xxxxxx= =xx"xxx%" xxxxx=xx"xxx%" xx=xx"xxxxxxxxxxxxxxx" xxxxx=xx"xxxxxx: x;xxxxxxx= : x;xxxxxxxxxx-xxxxx: #xxxxxx;xxxxxx: xxx% !xxxxxxxxx;xxxxx: xxx% !xxxxxxx= xx;"> =xx<xx> =xx<xx xxxxx=xx"xxxxxx" xxxxxx=xx"xxx" xxxxx=xx"xxxxxx-xxx= xxxxx: xxxxxxxx;">  <xxxxx xxxxxx=xx"x" xxxxxxxxxxx=xx"xx" xxxxxxxxxxx= =xx"x" xxxxx=xx"xxx" xx=xx"xxxxxxxxxxxxxxxxx" xxxxx=xx"xxxxxxxxxx-xxxxx: #= xxxxxx;"> <xx> <xx xxxxxx=xx"xxx" xxxxx=xx"xxxxxxxxxxxxxx= xx" xxxxx=xx"xxxxxx-xxxxxxxx: xxxxxxxx;"> =xx <xxxxx xxxxxx=xx"x" xxxxxxxxxxx=xx"xx"= xxxxxxxxxxx=xx"x" xxxxx=xx"xxx%"> =xx<xx> =xx<xx xxxxxx=xx"xxx" xxxxx=xx"xxx= xxx-xxxxxxxx: xxxxxxxx;"> =xx<xxx xxxxx=xx"xxxxx: #xxxxx= x;xxxx-xxxxxx: xxxxx;xxxx-xxxx: xxxx;xxxx-xxxxxx: xxx%;xxxx-xxxxx: xxxx;">= </xxx> </xx>  =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx<xx xxxxxx=xx"xxx" xxxxx=xx"xxx" xxxxx=xx= "xxxxxx-xxxxxxxx: xxxxxxxx;"> =xx<xxx xxxxx=xx"xxxxx: #xxxxx= x;xxxx-xxxxxx: xxxxx;xxxx-xxxx: xxxx;xxxx-xxxxxx: xxx%;xxxx-xxxxx: xxxx;">= </xxx> </xx> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx </xx> </xxxxx> =xx </xx> </xx> </xxxxx>  =xx<xxxxx xxxxxx=xx"x" xxxxxxxxxxx=xx"x" xxxxxxxxxxx= =xx"x" xxxxx=xx"xxx" xx=xx"xxxxxxxxxxxxxxxxx" xxxxx=xx"xxxxxx: xxx xxxxx #= xxxxxx;xxxxxxxxxx-xxxxx: #xxxxxx;"> =xx<xx> =xx<xx xxxxx=xx"xxxxxx" xxxxxx=xx"xxx" xxxxx= =xx"xxxxxx-xxxxxxxx: xxxxxxxx;">  =xx<xxxxx xxxxxx=xx"x" xxxxxxxxxxx=xx"x" x= xxxxxxxxxx=xx"x" xxxxx=xx"xxx" xx=xx"xxxxxxxxxxxxxx" xxxxx=xx"xxxxxxxxxx-x= xxxx: #xxxxxx;xxxxxx-xxxxxx: x;"> <xx> <xx xxxxx=xx"xxxxxxxxxxxxx" xx= xxx=xx"xxxxxx-xxxxxxxx: xxxxxxxx;xxxxx: #xxxxxx;xxxx-xxxxxx: xxxxx;xxxx-xx= xx: xxxx;xxxx-xxxxxx: xxxx;xxxx-xxxxxx: xxx%;xxxxxxx: x;xxxx-xxxxx: xxxxxx= ;xxxxxxxx-xxxxx: xxxxxx;"> =xx =xx<xxx xxxxx=xx"xxxx" xxxxxx= =xx"xxx" xxx=xx"xxxx://xxxxxxx.xxxxxxxxx.xxx/xxxxxxxxxxxxxxxxxxxxxxxxx/xxx= xxx/xxxxxxxxxxxxxxxxx.xxx" xxxxx=xx"xxxxx: xxxxx;xxxxxx: xxxxx;xxxxxx: x;x= xxx-xxxxxx: xxx%;xxxxxxx: xxxx;xxxx-xxxxxxxxxx: xxxx;" xxxxx=xx"xxx"><xx> =xx </xx> </xx> </xxxxx>  </xx> </xx> =xx<xx> =xx<xx xxxxx=xx"xxxxxx" xxxxxx=xx"xxx" xxxxx= =xx"xxxxxx-xxxxxxxx: xxxxxxxx;">  =xx<xxxxx xxxxxx=xx"x" xxxxxxxxxxx=xx"x" x= xxxxxxxxxx=xx"x" xxxxx=xx"xxx" xx=xx"xxxxxxxxxxxx"> =xx<xx> =xx<xx xxxxxxx=xx"x" xxxxxx=xx"xxx= " xxxxx=xx"xxxxxxxxxxx" xxxxx=xx"xxxxxx-xxxxxxxx: xxxxxxxx;xxxxxxxxxx-xxxx= x: #xxxxxx;">  <xxxxx xxxxxx=xx"x" xxxxxx= xxxxx=xx"xx" xxxxxxxxxxx=xx"x" xxxxx=xx"xxx%"> <xx> <xx xxxxxx=xx"xxx"= xxxxx=xx"xxxxxx-xxxxxxxx: xxxxxxxx;"> <xxx xxxxx=xx"= xxxxx: #xxxxxx;xxxx-xxxxxx: xxxxx;xxxx-xxxx: xxxx;xxxx-xxxxxx: xxx%;xxxx-x= xxxx: xxxx;"><xxx xxxxx=xx"xxxx-xxxxx: xxxxxx;xxxxx: #xxxxxx;xxxx-xxxxxx:= xxxxx;xxxx-xxxx: xxxx;xxxx-xxxxxx: xxx%;"> =xx<xx> =xx<xxxx xxxxx=xx"xxxx-xxxxxx:xxxxx xxx xxxxx,xxxxx,xxxxx;"><xxxx xxxxx=xx= "xxxxx:#xxxxxx;"><xxxx xxxxx=xx"xxxx-xxxx:xxxx;">xxxxxxxxx x xxxxxxxxx xxx= xxxxxxxxxx<xx> =xx<xx> =xx<xxxx xxxxx=xx"xxxx-xxxx:xxxx;"><xxxx xxxxx=xx"xxxx-xxxx:xxxx;">xxxxx x= xxxx - xxxxx xxx- xxxxxx!<xx> =xxxxxx xxx xxxxxxxxxxxx xxx xxxxxxxx x&xxxx;x xxxxxxxxx:</xxxx><xx> =xx<xx> =xx<x xxxx=xx"xxxx://xxxxxxxx.xxx.xxxx-xxxxxxx.xxx/xxxxx/xxxxx?x=xxxxxxxxx= xxxxxxxxxxxxxxxxxx&xx=xxxxxxxxxxxx&x=xxxxxxxxxxxx" xxxxxx=xx"xxxxxx" xxxx= x=xx"xxxxx: #xxxxxx;xxxx-xxxxxx: xxxxxx;xxxx-xxxxxxxxxx: xxxxxxxxx;"><xxx= xxxxx=xx"xxxx" xxxxxx=xx"xxx" xxx=xx"xxxx://xxxxxxx.xxxxxxxxx.xxx/xxxxxxx= xxxxxxxxxxxxxxxxxx/xxxxxx/xxxxxxxxxxx.xxx" xxxxx=xx"xxxxx: xxxxx;xxxxxx: x= xxxx;xxxxxx: x;xxxx-xxxxxx: xxx%;xxxxxxx: xxxx;xxxx-xxxxxxxxxx: xxxx;xxxxx= xx: xxxxxx;" xxxxx=xx"xxx"></x><xx> =xx<xx> =xx<xxxx xxxxx=xx"xxxx-xxxx:xxxx;"><xxxx xxxxx=xx"xxxx-xxxx:xxxx;">xxxxxxx= xxxx</xxxx></xxxx><xx> =xx<xx> =xxxxxxxx xxxxxxxx x&xxxx;x xxxx xxxxx xxxxxx xx x xxx<xx> =xxxxxx xxxxxxxxx xxx xxxxxxxxxxxxx<xx> =xxxxxxxxxxxxxxxxx: xxxxxxxxxxx xxxx x,x xxx xxxxx xxx xxxxxxxxxxx xxxxxxx= x</xxxx><xx> =xx<xxxx xxxxx=xx"xxxx-xxxx:xxxx;">xxxxxxxxxxxxxxxxx xxxxx <x xxxx=xx"xxxx= ://xxxxxxxx.xxx.xxxx-xxxxxx.xxx/xxxxx/xxxxx?x=xxxxxxxxxxxxxxxxxxxxxxxxxxx&= xx=xxxxxxxxxxxx&x=xxxxxxxxxxxx" xxxxxx=xx"xxxxxx" xxxxx=xx"xxxxx: #xxxxxx= ;xxxx-xxxxxx: xxxxxx;xxxx-xxxxxxxxxx: xxxxxxxxx;">xxx.xxxxxxxxxx.xx</x></x= xxx><xx> =xx<xx> =xx<x xxxx=xx"xxxx://xxxxxxxx.xxx.xxxx-xxxxxxx.xxx/xxxxx/xxxxx?x=xxxxxxxxx= xxxxxxxxxxxxxxxxxx&xx=xxxxxxxxxxxx&x=xxxxxxxxxxxx" xxxxxx=xx"xxxxxx" xxxx= x=xx"xxxxx: #xxxxxx;xxxx-xxxxxx: xxxxxx;xxxx-xxxxxxxxxx: xxxxxxxxx;"><xxx= xxxxx=xx"xxxx" xxxxxx=xx"xxx" xxx=xx"xxxx://xxxxxxx.xxxxxxxxx.xxx/xxxxxxx= xxxxxxxxxxxxxxxxxx/xxxxxx/xxxxxxxx.xxx" xxxxx=xx"xxxxx: xxxxx;xxxxxx: xxxx= x;xxxxxx: x;xxxx-xxxxxx: xxx%;xxxxxxx: xxxx;xxxx-xxxxxxxxxx: xxxx;xxxxxxx:= xxxxxx;" xxxxx=xx"xxx"></x><xx> =xx<xx> =xxxxxxxxxxxx<xx> =xx<xx> =xx<xxxx xxxxx=xx"xxxx-xxxx:xxxx;"><xxxx xxxxx=xx"xxx"><x>xxxxxxxx xxxxxx= xxx xxxxxxxxxx-xxxx xx xxxxxxxxxxxxxx xxx xxxxxxx xxxxxxxxx<xx> =xxxxx xxxx xxx xxxx xxxx! xx xxx xxxxx xxxxxxxxxxxxxx xx xxxxx xxx xxxxx= xxxx xx xxxxx&xxxxx;xx,<xx> =xxxxxxx xxx xxxxxx xxxxxxxx x&xxxx;x xxxx xxxxxxxxxxx!</x></xxxx><xx> =xx<xx> =xx<x><xxxx xxxxx=xx"xxx">xxxxxx xxx xx xx xxx</xxxx><xx> =xx<xxxx xxxxx=xx"xxx">xxx xx xxx xx xxx xxxxxxx xxxxx xxxx xxxxx xxxxxx x= xxxxxx-xxxx</xxxx><xx> =xx<xxxx xxxxx=xx"xxx">xxx xx xxx xx xxx xxxxxxxx xx xxxx xxxxxx xxxxxxxxx= xx &xxxx; x,xx</xxxx><xx> =xx<xxxx xxxxx=xx"xxx">xx xx xxx xxxxx xxx xxxx xxx x&xxxx;x xxxx</xxxx><x= x> =xx<xx> =xx<xxxx xxxxx=xx"xxx">xxxxxxx-xxxxx:</xxxx><xx> =xx<xxxx xxxxx=xx"xxx">xx. xxxxx &xxxx; xx,-</xxxx><xx> =xx<xxxx xxxxx=xx"xxx">xx. xxxx &xxxx; xx,-</xxxx><xx> =xx<xxxx xxxxx=xx"xxx">xx. xxxxxxxxxx &xxxx; xx,-</xxxx></x></xxxx><xx> =xx<xx> =xx<xxxx xxxxx=xx"xxxx-xxxx:xxxx;">x&xxxx;x xxxx xxxxx xxxxxx xxxx xx x&xx= xx;xxxxxxx xxxxxxxxx xxxxxxx xx xxxxx</xxxx></xxxx></xxxx></xxxx><xx> =xx<xx> =xx<xx> =xx<xxxx xxxxx=xx"xxxxx-xxxxx-xxxx" xxxxx=xx"#xxxxxx" xxxx=xx"xxxxx, xxxx-= xxxxx">&xxxx; &xxxx; &xxxx; &xxxx; &xxxx;&xxxx;</xxxx> =xx<xxxxx xxxxxx=xx"x" xxxxxxxxxxx=xx"x" xxxxx=xx"xxxxxxxxxxxxxx" xxxxx=xx= "xxxxx: xxx.xxxx; xxxxxxxxxx-xxxxx: xxxxxxx; xxxxxxxxxx-xxxxxxxxxx: xxxxxx= x; xxxxxxxxxx-xxxxxx: xxxxxxx; xxxxxxxxxx-xxxx: xxxxxxx; xxxxxxxxxx-xxxxx:= xxxxx; xxxxx: xxx(x, x, x); xxxx-xxxxxx: xxxxx; xxxx-xxxxxx: xxxxxx; -xxx= xxx-xxxx-xxxx-xxxxxx: xxxx; xxxx-xxxx: xxxxxx; " xxxxx=xx"xxx"> =xx=xx<xxxxx> =xx=xx=xx<xx> =xx=xx=xx=xx<xx xxxxxxx=xx"#xxxxxx" xxxxx=xx"xxxxx: x.xxxx;xxxxxxxxxx-xxxx= x: xxxxxxx;xxxxxxxxxx-xxxxxxxxxx: xxxxxxx;xxxxxxxxxx-xxxxxx: xxxxxxx;xxxxx= xxxxx-xxxx: xxxxxxx;xxxxxxxxxx-xxxxx: xxx(xxx, xxx, xx);xxxxxxx-xxx: x.xxx= x;xxxxxxx-xxxxx: x.xxxx;xxxxxxx-xxxxxx: x.xxxx;xxxxxxx-xxxx: x.xxxx;xxxxxx= xxxx-xxxxxxxx: xxxxxxx xxxxxxx;xxxxxxxxxx-xxxxxx: xxxxxxx xxxxxxx;xxxxxx-x= xxxxxxx: xxxxxxxx;" xxxxx=xx"x"> =xx=xx=xx=xx=xx<x xxxxx=xx"xxxxxxxxx" xxxxx=xx"xxxxxx-xxx: xxx; xxxxxx-xxx= xx: xxx; xxxxxx-xxxx: xxx; xxxxxx-xxxxxx: x.xxxxxx; xxxx-xxxx: xxxx; xxxx-= xxxxxx: 'xxxxx xxx xxxxx', xxxxx; xxxx-xxxxx: xxxxxxx; "> =xx=xx=xx=xx=xx=xx<xxxx xxxxx=xx"xxxx-xxxx: x.xxx; xxxx-xxxxxx: xxxxx, xxx= x-xxxxx; xxxxx: xxxxx; ">&xxxx;</xxxx></x> =xx=xx=xx=xx</xx> =xx=xx=xx=xx<xx xxxxx=xx"xxxxx: xxxxx;xxxxxxx-xxx: x.xxxx;xxxxxxx-xxxxx: x= =xxxxxx;xxxxxxx-xxxxxx: x.xxxx;xxxxxxx-xxxx: x.xxxx;xxxxxx-xxxxxxxx: xxxxxxx= x;" xxxxx=xx"xxx"> =xx=xx=xx=xx=xx<x> =xx=xx=xx=xx=xx=xx<xxxx xxxxx=xx"xxxx-xxxx: x.xxx; xxxx-xxxxxx: xxxxx, xxx= x-xxxxx; xxxxx: xxxxx; "><xxx xxxxxx=xx"xxx" xxx=xx"xxxx://xxx.xxxxxxxxx.x= x/xxxxxxxxxx/xxx/xxxxxxxxxxxx.xxx" xxxxx=xx"xxxxx: xxxx;xxxxxx: x;xxxxxx:= xxxx;xxxx-xxxxxx: xxx%;xxxxxxx: xxxx;xxxx-xxxxxxxxxx: xxxx;xxxxxxx: xxxxx= x;" xxxxx=xx"xxx"></xxxx></x> =xx=xx=xx=xx</xx> =xx=xx=xx</xx> =xx=xx=xx<xx> =xx=xx=xx=xx<xx xxxxx=xx"xxxxxxxxxx-xxxxx: xxxxxxx;xxxxxxxxxx-xxxxxxxxxx:= xxxxxxx;xxxxxxxxxx-xxxxxx: xxxxxxx;xxxxxxxxxx-xxxx: xxxxxxx;xxxxxxxxxx-xx= xxx: xxx(xxx, xxx, xx);xxxxxxx-xxx: x.xxxx;xxxxxxx-xxxxx: x.xxxx;xxxxxxx-x= xxxxx: x.xxxx;xxxxxxx-xxxx: x.xxxx;xxxxxxxxxx-xxxxxxxx: xxxxxxx xxxxxxx;xx= xxxxxxxx-xxxxxx: xxxxxxx xxxxxxx;xxxxxx-xxxxxxxx: xxxxxxxx;"> =xx=xx=xx=xx=xx<x xxxxx=xx"xxxxxxxxx" xxxxx=xx"xxxxxx-xxx: xxx; xxxxxx-xxx= xx: xxx; xxxxxx-xxxx: xxx; xxxxxx-xxxxxx: x.xxxxxx; xxxx-xxxx: xxxx; xxxx-= xxxxxx: 'xxxxx xxx xxxxx', xxxxx; xxxx-xxxxx: xxxxxxx; "> =xx=xx=xx=xx=xx=xx<xxxx xxxxx=xx"xxxx-xxxx: x.xxx; xxxx-xxxxxx: xxxxx, xxx= x-xxxxx; xxxxx: xxxxx; ">&xxxx;</xxxx></x> =xx=xx=xx=xx</xx> =xx=xx=xx=xx<xx xxxxx=xx"xxxxxxx-xxx: x.xxxx;xxxxxxx-xxxxx: x.xxxx;xxxxxxx= -xxxxxx: x.xxxx;xxxxxxx-xxxx: x.xxxx;xxxxxx-xxxxxxxx: xxxxxxxx;"> =xx=xx=xx=xx=xx<xxx xxxxx=xx"xxxxxx" xxxxx=xx"xxxxx: #xxxxxx;xxxx-xxxxxx:= xxxxx;xxxx-xxxx: xxxx;xxxx-xxxxxx: xxx%;xxxx-xxxxx: xxxx;"> =xx=xx=xx=xx=xx=xx<xxxxx xxxxxx=xx"x" xxxxxxxxxxx=xx"x" xxxxx=xx"xxxxxxxxx= xxxxx" xxxxx=xx"xxxxx: xxxxx; " xxxxx=xx"xx%"> =xx=xx=xx=xx=xx=xx=xx<xxxxx> =xx=xx=xx=xx=xx=xx=xx=xx<xx xxxxx=xx"xxxxxx: x.xxx; "> =xx=xx=xx=xx=xx=xx=xx=xx=xx<xx xxxxx=xx"xxxxxxxxxx-xxxxx: xxxxxxx;xxxxxxxx= xx-xxxxxxxxxx: xxxxxxx;xxxxxxxxxx-xxxxxx: xxxxxxx;xxxxxxxxxx-xxxx: xxxxxxx= ;xxxxxxxxxx-xxxxx: xxxxx;xxxxxxx-xxx: x.xxxx;xxxxxxx-xxxxx: x.xxxx;xxxxxxx= -xxxxxx: x.xxxx;xxxxxxx-xxxx: x.xxxx;xxxxxx: x.xxx;xxxxxxxxxx-xxxxxxxx: xx= xxxxx xxxxxxx;xxxxxxxxxx-xxxxxx: xxxxxxx xxxxxxx;xxxxxx-xxxxxxxx: xxxxxxxx= ;"> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx<xxx xxxxx=xx"xxxxxx" xxxxx=xx"xxxxxxxxx" xx= xxx=xx"xxxxxx-xxx: xxx;xxxxxx-xxxxx: xxx;xxxxxx-xxxx: xxx;xxxxxx-xxxxxx: x= =xxxxxxxx;xxxx-xxxx: xxxx;xxxx-xxxxxx: 'xxxxx xxx xxxxx', xxxxx;xxxx-xxxxx:= xxxxxx;xxxxx: #xxxxxx;xxxx-xxxxxx: xxx%;"> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx<xx xxxxx=xx"xxxxxx" xxxxxxx=xx"xxxxxxx"= xxxx=xx"x" xxxxx=xx"xxxxx: xxx(xxx, xxx, xxx); " xxxxx=xx"xx%"> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx</xxx> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx<x xxxxx=xx"xxxxxx" xxxxx=xx"xxxxxxxxx" xxxx= x=xx"xxxxxx-xxx: xxx; xxxxxx-xxxxx: xxx; xxxxxx-xxxx: xxx; xxxxxx-xxxxxx:= x.xxxxxx; xxxx-xxxx: xxxx; xxxx-xxxxxx: 'xxxxx xxx xxxxx', xxxxx; xxxx-xx= xxx: xxxxxx; "> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx<xxxx xxxxx=xx"xxxxxx" xxxxx=xx"xxxx-xxxx= xx: xxxxx, xxxx-xxxxx; "><xxxx xxxxx=xx"xxxx-xxxx: xxx; xxxxx: xxxxx; "><x= xxxxx=xx"xxxxx: #xxxxxx;xxxx-xxxxxx: xxxxxx;xxxx-xxxxxxxxxx: xxxxxxxxx;">= <xxxx xxxxx=xx"xxxx-xxxxxx: xxxxx, xxxx-xxxxx; "><xxxxxx>xxxxxxxxxxxxxxxxx= xx</xxxxxx></xxxx></x><xxxxxx>&xxxx;-&xxxx;<x xxxxx=xx"xxxxx: #xxxxxx;xxxx= -xxxxxx: xxxxxx;xxxx-xxxxxxxxxx: xxxxxxxxx;">xxxxxxxxxx</x>&xxxx;-&xxxx;<x= xxxxx=xx"xxxxx: #xxxxxx;xxxx-xxxxxx: xxxxxx;xxxx-xxxxxxxxxx: xxxxxxxxx;">= xxxxx</x>&xxxx;||&xxxx;<x xxxx=xx"xxxx://xxxxxxxx.xxx.xxxx-xxxxxxx.xxx/xxx= xx/xxxxx?x=xxxxxxxxxxxxxxxxxxxxxxxxxxx&xx=xxxxxxxxxxxx&x=xxxxxxxxxxxx" xx= xxxx=xx"xxxxxx" xxxxx=xx"xxxxx: #xxxxxx;xxxx-xxxxxx: xxxxxx;xxxx-xxxxxxxxx= x: xxxxxxxxx;">xxxxxxxxx</x></xxxxxx></xxxx></xxxx></x> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx<xxx xxxxx=xx"xxxxxx" xxxxx=xx"xxxxxxxxx" xx= xxx=xx"xxxxxx-xxx: xxx;xxxxxx-xxxxx: xxx;xxxxxx-xxxx: xxx;xxxxxx-xxxxxx: x= =xxxxxxxx;xxxx-xxxx: xxxx;xxxx-xxxxxx: 'xxxxx xxx xxxxx', xxxxx;xxxx-xxxxx:= xxxxxx;xxxxx: #xxxxxx;xxxx-xxxxxx: xxx%;"> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx<xx xxxxx=xx"xxxxxx" xxxxxxx=xx"xxxxxxx"= xxxx=xx"x" xxxxx=xx"xxxxx: xxx(xxx, xxx, xxx); " xxxxx=xx"xx%"> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx</xxx> =xx=xx=xx=xx=xx=xx=xx=xx=xx</xx> =xx=xx=xx=xx=xx=xx=xx=xx</xx> =xx=xx=xx=xx=xx=xx=xx</xxxxx> =xx=xx=xx=xx=xx=xx</xxxxx> =xx=xx=xx=xx=xx</xxx> =xx=xx=xx=xx=xx<x xxxxx=xx"xxxxxxxxx" xxxxx=xx"xxxxxx-xxx: xxx; xxxxxx-xxx= xx: xxx; xxxxxx-xxxx: xxx; xxxxxx-xxxxxx: x.xxxxxx; xxxx-xxxx: xxxx; xxxx-= xxxxxx: 'xxxxx xxx xxxxx', xxxxx; xxxx-xxxxx: xxxxxxx; "> =xx=xx=xx=xx=xx=xx&xxxx;</x> =xx=xx=xx=xx=xx<xxxxx xxxxxx=xx"x" xxxxxxxxxxx=xx"x" xxxxx=xx"xxxxxxxxxxxx= xx" xxxxx=xx"xxxxx: xxxxx; " xxxxx=xx"xx%"> =xx=xx=xx=xx=xx=xx<xxxxx> =xx=xx=xx=xx=xx=xx=xx<xx> =xx=xx=xx=xx=xx=xx=xx=xx<xx xxxxx=xx"xxxxxxx-xxx: x.xxxx;xxxxxxx-xxxxx: x.= xxxx;xxxxxxx-xxxxxx: x.xxxx;xxxxxxx-xxxx: x.xxxx;xxxxxx-xxxxxxxx: xxxxxxxx= ;"> =xx=xx=xx=xx=xx=xx=xx=xx=xx<x xxxxx=xx"xxxxxx" xxxxx=xx"xxxxxx" xxxxx=xx"x= xxxxx-xxxxx: xxx; xxxxxx-xxxx: xxx; xxxx-xxxx: xxxx; xxxx-xxxxxx: 'xxxxx x= xx xxxxx', xxxxx; xxxx-xxxxxx: xxxx; xxxx-xxxxx: xxxxxx; "> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx<xxxx xxxxx=xx"xxxx-xxxxxx: xxxxx, xxxx-xxxx= x; xxxxx: xxxxx; ">xxx xxxxx xxx xxxxxxxx xx xxxxxx xxxxxxxxx</xxxx></x> =xx=xx=xx=xx=xx=xx=xx=xx=xx<x xxxxx=xx"xxxxxx" xxxxx=xx"xxxxx" xxxxx=xx"xx= xx-xxxxxx: xxxxxxx, xxxxx, xxxxxxxxx, xxxx-xxxxx; xxxx-xxxx: xxxx; xxxx-xx= xxx: xxxxxx; "> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xxxxx xxxxxxxxxxx xxx xx&xxxx;&xxxxx;xx&xxxx;<= xxxxxx>xxxxxxxxxxxxxxxxx</xxxxxx>&xxxx;xxx xxxxx xxx xxx&xxxx;xx! xxx xxxx= xxxx xxx xxxxxx xxxx xx&xxxx;xxxxxxxx xxx xxxxxxxxx xxx&xxxx;<xxxxxx>xxxxx= xxx xxxxxx</xxxxxx>&xxxx;xx xxxx&xxxx;xxx&xxxx;<xxxxxx>xxxxxx xxxxxxxxx</= xxxxxx>.</x> =xx=xx=xx=xx=xx=xx=xx=xx</xx> =xx=xx=xx=xx=xx=xx=xx</xx> =xx=xx=xx=xx=xx=xx</xxxxx> =xx=xx=xx=xx=xx</xxxxx> =xx=xx=xx=xx=xx<xxx xxxxx=xx"xxxxxx" xxxxx=xx"xxxxxxxxx" xxxxx=xx"xxxxxx-x= xx: xxx;xxxxxx-xxxxx: xxx;xxxxxx-xxxx: xxx;xxxxxx-xxxxxx: x.xxxxxx;xxxx-xx= xx: xxxx;xxxx-xxxxxx: 'xxxxx xxx xxxxx', xxxxx;xxxx-xxxxx: xxxxxx;xxxxx: #= xxxxxx;xxxx-xxxxxx: xxx%;"> =xx=xx=xx=xx=xx=xx<xx xxxxx=xx"xxxxxx" xxxxxxx=xx"xxxxxxx" xxxx=xx"x" xxxx= x=xx"xxxxx: xxx(xxx, xxx, xxx); " xxxxx=xx"xx%"> =xx=xx=xx=xx=xx</xxx> =xx=xx=xx=xx=xx<xxxxx xxxxxx=xx"x" xxxxxxxxxxx=xx"x" xxxxx=xx"xxxxxxxxxxxx= xx" xxxxx=xx"xxxxx: xxxxx; " xxxxx=xx"xxx%"> =xx=xx=xx=xx=xx=xx<xxxxx> =xx=xx=xx=xx=xx=xx=xx<xx xxxxx=xx"xxxxxx: xx.xxx; "> =xx=xx=xx=xx=xx=xx=xx=xx<xx xxxxx=xx"xxxxxxx-xxx: x.xxxx;xxxxxxx-xxxxx: x.= xxxx;xxxxxxx-xxxxxx: x.xxxx;xxxxxxx-xxxx: x.xxxx;xxxxxx: xx.xxx;xxxxxx-xxx= xxxxx: xxxxxxxx;"> =xx=xx=xx=xx=xx=xx=xx=xx=xx<x xxxxx=xx"xxxxxxxxx" xxxxx=xx"xxxxxx-xxx: xxx= ; xxxxxx-xxxxx: xxx; xxxxxx-xxxx: xxx; xxxxxx-xxxxxx: x.xxxxxx; xxxx-xxxx:= xxxx; xxxx-xxxxxx: 'xxxxx xxx xxxxx', xxxxx; xxxx-xxxxx: xxxxxxx; "> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx<xxxx xxxxx=xx"xxxx-xxxx: x.xxx; xxxx-xxxxxx= : xxxxx, xxxx-xxxxx; xxxxx: xxxxx; "><xxxx xxxxx=xx"xxxxxxxxx" xxxxx=xx"xx= xx-xxxxx: xxxxxxx; "><xxx xxxxxx=xx"x" xxxxxx=xx"xxx" xx=xx"xxxxxxxxxxxx"= xxxx=xx"xxxxxxxxxxxx" xxx=xx"xxxx://xxx.xxxxxxxxx.xx/xxxxxxxxxx/xxx/xxxxx= xxxxxx.xxx" xxxxx=xx"xxx" xxxxx=xx"xxxxxx: x;xxxxxx: xxxx;xxxx-xxxxxx: xxx= %;xxxxxxx: xxxx;xxxx-xxxxxxxxxx: xxxx;xxxxxxx: xxxxxx;"></xxxx></xxxx></x> =xx=xx=xx=xx=xx=xx=xx=xx=xx<xxx xxxxx=xx"xxxxxx" xxxxx=xx"xxxxxxxxx" xxxxx= =xx"xxxxxx-xxx: xxx;xxxxxx-xxxxx: xxx;xxxxxx-xxxx: xxx;xxxxxx-xxxxxx: x.xx= xxxx;xxxx-xxxx: xxxx;xxxx-xxxxxx: 'xxxxx xxx xxxxx', xxxxx;xxxx-xxxxx: xxx= xxx;xxxxx: #xxxxxx;xxxx-xxxxxx: xxx%;"> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx<xx xxxxx=xx"xxxxxx" xxxxxxx=xx"xxxxxxx" xxx= x=xx"x" xxxxx=xx"xxxxx: xxx(xxx, xxx, xxx); " xxxxx=xx"xx%"> =xx=xx=xx=xx=xx=xx=xx=xx=xx</xxx> =xx=xx=xx=xx=xx=xx=xx=xx</xx> =xx=xx=xx=xx=xx=xx=xx</xx> =xx=xx=xx=xx=xx=xx=xx<xx xxxxx=xx"xxxxxx: xxx.xxxx; "> =xx=xx=xx=xx=xx=xx=xx=xx<xx xxxxx=xx"xxxxxxx-xxx: x.xxxx;xxxxxxx-xxxxx: x.= xxxx;xxxxxxx-xxxxxx: x.xxxx;xxxxxxx-xxxx: x.xxxx;xxxxxx: xxxx;xxxxxx-xxxxx= xxx: xxxxxxxx;"> =xx=xx=xx=xx=xx=xx=xx=xx=xx<x xxxxx=xx"xxxxxxx" xxxxx=xx"xxxxx" xxxxx=xx"x= xxx-xxxxxx: xxxxxxx, xxxxx, xxxxxxxxx, xxxx-xxxxx; xxxx-xxxx: xxxx; "> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xxxxxx xxxxxx xxxxxxxxxxxx xxx xxxxxxxxx xxx x= x&xxxx;&xxxxx;xx xxx xxxxxxxxxxx xxxxxxxxx-xxxxxxxx xxxxx. xxx xxxxxx xxxx= xxxxx xxxx xx xx. xxxxxxxx xxxx xxxxxxxxxx xxx xx&xxxx;&xxxxx;xxx xxxxxxxx= xx xxx xxxxxx xxxx: xxx xxxxxxxx xxxxxx&xxxx;xx xx xxx xxxxx xxxxxx xxxxxx= xxx xxxxxxxx xxxxxxxx xx xxx xxxx xxxxxxxx xxxxxxxxxx xx xxxxxx.</x> =xx=xx=xx=xx=xx=xx=xx=xx=xx<x xxxxx=xx"xxxxxxx" xxxxx=xx"xxxxx" xxxxx=xx"x= xxx-xxxxxx: xxxxxxx, xxxxx, xxxxxxxxx, xxxx-xxxxx; xxxx-xxxx: xxxx; "> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xxxx xxx xx xxx xxxxxxx xxxxxx xxxx xxx xxxxxx= xxx xxx xxxxxx&xxxx;xxxxx x&xxxx;xxx &xxxx;xxx xxxx xx&xxxxx;x xxxxxxxxxxx= xxxxx xxx xx xxxxxx xxxxxxxxx x&xxxx;x xxxx xxxxxxxxxxxxxx xxxxx xxx x&xxx= x;xxxx xxxxxx.</x> =xx=xx=xx=xx=xx=xx=xx=xx=xx<x xxxxx=xx"xxxxxxx" xxxxx=xx"xxxxx" xxxxx=xx"x= xxx-xxxxxx: xxxxxxx, xxxxx, xxxxxxxxx, xxxx-xxxxx; xxxx-xxxx: xxxx; "> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xxxx&xxxx;<xxxxxx>xxxxxxxxx</xxxxxx>&xxxx;xxxx= xx&xxxx;<xxxxxx>xx xxx</xxxxxx>&xxxx;xxx xxxx xxxxx&xxxx;xxxxx. xxx xxxxxx= x xxx x&xxxx;x xxxxxxxxxxxxxx xx&xxxx;&xxxxx;xx xxx: xxxx xxxx, xxxxxxxxx,= xxxx, xxx xxxx xxx. xxx xx xxxxxxx xxxxxxx xxxxxxxx, xxxx xx xxxxx xxx xx= xxxxxx xxxx&xxxx;x xxx xxx xxxxxxxxx xx- xxxxxx xxxxxxx xxx xxxx xxxxxxxxx= x xxx xxx xxxxxxxxxxxxx xxxxx xxx xxxx xxxx xxxxxxxxx.</x> =xx=xx=xx=xx=xx=xx=xx=xx=xx<xxx xxxxx=xx"xxxxxxx" xxxxx=xx"xxxxx: #xxxxxx;= xxxx-xxxxxx: xxxxx;xxxx-xxxx: xxxx;xxxx-xxxxxx: xxx%;xxxx-xxxxx: xxxx;"> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx<xxxx xxxxx=xx"xxxxx" xxxxx=xx"xxxx-xxxxxx:= xxxxxxx, xxxxx, xxxxxxxxx, xxxx-xxxxx; xxxx-xxxx: xxxx; ">xxx&xxxx;<xxxxx= x>xxxxx xxxxx</xxxxxx>&xxxx;xxxx xxxx xxxxxx xxxx xxxxxx&xxxx;<xxxxxx>xx x= xx</xxxxxx>&xxxx;xxxxxxxxx. xxx xxxxxxxxxx xx xxxxxxxx xxxxxxx xx xxxx xxx= xxx xxxxxxx xx xxxxxxxxxxxxx xxxxxxxxxxxx xxx xxxx xxxx xxx xxxxx xxxxxxxx= xxxxxxx xxx xxxx xxxx xxxxxx xxxx&xxxx;xxxx.</xxxx></xxx> =xx=xx=xx=xx=xx=xx=xx=xx</xx> =xx=xx=xx=xx=xx=xx=xx</xx> =xx=xx=xx=xx=xx=xx=xx<xx xxxxx=xx"xxxxxx: xxx.xxx; "> =xx=xx=xx=xx=xx=xx=xx=xx<xx xxxxxx=xx"xxx" xxxxx=xx"xxxxxxx-xxx: x.xxxx;xx= xxxxx-xxxxx: x.xxxx;xxxxxxx-xxxxxx: x.xxxx;xxxxxxx-xxxx: x.xxxx;xxxxxx: xx= x.xxx;xxxxxx-xxxxxxxx: xxxxxxxx;"> =xx=xx=xx=xx=xx=xx=xx=xx=xx<x xxxxx=xx"xxxxxxxxx" xxxxx=xx"xxxxxx-xxx: xxx= ; xxxxxx-xxxxx: xxx; xxxxxx-xxxx: xxx; xxxxxx-xxxxxx: x.xxxxxx; xxxx-xxxx:= xxxx; xxxx-xxxxxx: 'xxxxx xxx xxxxx', xxxxx; xxxx-xxxxx: xxxxxxx; "> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx<xxx xxxxxx=xx"xxx" xxx=xx"xxxx://xxx.xxxxxx= xxx.xx/xxxxxxxxxx/xxx/xxxxxxxxxxxx.xxx" xxxxx=xx"xxx" xxxxx=xx"xxxxxx: x;x= xxxxx: xxxx;xxxx-xxxxxx: xxx%;xxxxxxx: xxxx;xxxx-xxxxxxxxxx: xxxx;xxxxxxx:= xxxxxx;"></x> =xx=xx=xx=xx=xx=xx=xx=xx</xx> =xx=xx=xx=xx=xx=xx=xx</xx> =xx=xx=xx=xx=xx=xx</xxxxx> =xx=xx=xx=xx=xx</xxxxx> =xx=xx=xx=xx=xx<x xxxxx=xx"xxxxxxxxx" xxxxx=xx"xxxxxx-xxx: xxx; xxxxxx-xxx= xx: xxx; xxxxxx-xxxx: xxx; xxxxxx-xxxxxx: x.xxxxxx; xxxx-xxxx: xxxx; xxxx-= xxxxxx: 'xxxxx xxx xxxxx', xxxxx; xxxx-xxxxx: xxxxxxx; "> =xx=xx=xx=xx=xx=xx&xxxx;</x> =xx=xx=xx=xx=xx<xxxxx xxxxxx=xx"x" xxxxxxxxxxx=xx"x" xxxxx=xx"xxxxxxxxxxxx= xx" xxxxx=xx"xxxxx: xxxxx; " xxxxx=xx"xx%"> =xx=xx=xx=xx=xx=xx<xxxxx> =xx=xx=xx=xx=xx=xx=xx<xx> =xx=xx=xx=xx=xx=xx=xx=xx<xx xxxxx=xx"xxxxxxx-xxx: x.xxxx;xxxxxxx-xxxxx: x.= xxxx;xxxxxxx-xxxxxx: x.xxxx;xxxxxxx-xxxx: x.xxxx;xxxxxx-xxxxxxxx: xxxxxxxx= ;"> =xx=xx=xx=xx=xx=xx=xx=xx=xx<x xxxxx=xx"xxxxxxx" xxxxx=xx"xxxx-xxxxx: xxxxx= xx; "> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx<xxxx xxxxx=xx"xxxx-xxxx: x.xxx; xxxx-xxxxxx= : xxxxx, xxxx-xxxxx; xxxxx: xxxxx; "><x xx=xx"xxx" xxxx=xx"xxx" xxxxx=xx"x= xxxx: #xxxxxx;xxxx-xxxxxx: xxxxxx;xxxx-xxxxxxxxxx: xxxxxxxxx;"></x><xxx xx= xxxx=xx"x" xxxxxx=xx"xx" xx=xx"xxxxxxxxxxxx" xxxx=xx"xxxxxxxxxxxx" xxx=xx"= xxxx://xxx.xxxxxxxxx.xx/xxxxxxxxxx/xxx/xxxxxxxxxxxxx.xxx" xxxxx=xx"xxx" xx= xxx=xx"xxxxxx: x;xxxxxx: xxxx;xxxx-xxxxxx: xxx%;xxxxxxx: xxxx;xxxx-xxxxxxx= xxx: xxxx;xxxxxxx: xxxxxx;"></xxxx><xx> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx<xxxx xxxxx=xx"xxxxx" xxxxx=xx"xxxx-xxxxxx:= xxxxxxx, xxxxx, xxxxxxxxx, xxxx-xxxxx; xxxx-xxxx: xxxx; xxxxx: xxxxx; ">x= xxxxxxxxxxxxxxxx (xx xxxx xxxx. xxx&xxxx;xxxx xxxxx&xxxx;xx xxxx&xxxx;xx x= xx xxxxxxxxxx) x&xxxx;x xxx xxxx xxxxxxxx xxxx xx xxxxxx &xxxx;xxx&xxxx;<x= xxxx=xx"xxxx://xxxxxxxx.xxx.xxxx-xxxxxx.xxx/xxxxx/xxxxx?x=xxxxxxxxxxxxxxx= xxxxxxxxxxxx&xx=xxxxxxxxxxxx&x=xxxxxxxxxxxx" xxxxxx=xx"xxxxxx" xxxxx=xx"x= xxxx: #xxxxxx;xxxx-xxxxxx: xxxxxx;xxxx-xxxxxxxxxx: xxxxxxxxx;">xxxxxxxx.xx= x</x>&xxxx;xxx xx xxxxx xxxxxxxx xxx xxxxxxxxx xxx&xxxx;xxxxxx!</xxxx><x x= x=xx"xxxxxx" xxxx=xx"xxxxxx" xxxxx=xx"xxxxx: #xxxxxx;xxxx-xxxxxx: xxxxxx;x= xxx-xxxxxxxxxx: xxxxxxxxx;"></x><xxxx xxxxx=xx"xxxx-xxxx: xxxx; xxxx-xxxxx= x: xxxxx, xxxx-xxxxx; xxxxx: xxxxx; "><xxx xxxxxx=xx"x" xxxxxx=xx"xx" xx= =xx"xxxxxxxxxxxx" xxxx=xx"xxxxxxxxxxxx" xxx=xx"xxxx://xxx.xxxxxxxxx.xx/xxx= xxxxxxx/xxx/xxxxxxxx.xxx" xxxxx=xx"xxx" xxxxx=xx"xxxxxx: x;xxxxxx: xxxx;xx= xx-xxxxxx: xxx%;xxxxxxx: xxxx;xxxx-xxxxxxxxxx: xxxx;xxxxxxx: xxxxxx;"></xx= xx></x> =xx=xx=xx=xx=xx=xx=xx=xx=xx<x xxxxx=xx"xxxxxxx" xxxxx=xx"xxxxx" xxxxx=xx"x= xxx-xxxxxx: xxxxxxx, xxxxx, xxxxxxxxx, xxxx-xxxxx; xxxx-xxxx: xxxx; xxxxx:= xxxxx; "> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xxxxxx xxxxxx xxxx x&xxxx;xxxx xxxxxx xxxxxxxx= xx xxxxxx. xxxxx xxxxxxxxxxx xxx xxxx xx&xxxxx;xxxxxxxxxxxxx xxxxxx x&xxxx= ;x xx&xxxx;&xxxxx;xxx xxxxxxx.&xxxx;<xx> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xxx&xxxx;x xxxxxxxxxxxxxx xxx x&xxxx;xxxxxxxx= xxxxxxxxx xxx xxx xxxxx&xxxx;<x xxxx=xx"xxxxxx:xxxxxxxxx@xxxxxxxxx.xxx?xx= xxxxx=xxxxxxxxxxxxxxxxxxx%xxx%xx%xxx%xxxxxxxxxxx%xxxx%xxxxxxxx%xxxxxxxxxxx= " xxxxx=xx"xxxxx: #xxxxxx;xxxx-xxxxxx: xxxxxx;xxxx-xxxxxxxxxx: xxxxxxxxx;"= >xxxxxxxxx(a)xxxxxxxxx.xxx</x>&xxxx;xxx.<xx> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xxxxx.: +xx (x) xxxxx (xxxxxx xxx xxxxxxx x:xx= xxx xx:xx xxx)</x> =xx=xx=xx=xx=xx=xx=xx=xx=xx<x xxxxx=xx"xxxx-xxxxx: xxxxxxx; "> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx<xxxx xxxxx=xx"xxxx-xxxx: x.xxx; xxxx-xxxxxx= : xxxxx, xxxx-xxxxx; xxxxx: xxxxx; "><xxx xxxxxx=xx"x" xxxxxx=xx"xxx" xx= =xx"xxxxxxxxxxxx" xxxx=xx"xxxxxxxxxxxx" xxx=xx"xxxx://xxx.xxxxxxxxx.xx/xxx= xxxxxxx/xxx/x-xxxxxxxxxx.xxx" xxxxx=xx"xxx" xxxxx=xx"xxxxxx: x;xxxxxx: xxx= x;xxxx-xxxxxx: xxx%;xxxxxxx: xxxx;xxxx-xxxxxxxxxx: xxxx;xxxxxxx: xxxxxx;">= </xxxx></x> =xx=xx=xx=xx=xx=xx=xx=xx=xx<x xxxxx=xx"xxxxx" xxxxx=xx"xxxx-xxxxxx: xxxxxx= x, xxxxx, xxxxxxxxx, xxxx-xxxxx; xxxx-xxxx: xxxx; xxxxx: xxxxx; xxxx-xxxxx= : xxxxxxx; "> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xxxxxxx, xxx xxxxxx xxxxx xxxxxx x&xxxx;xxxx,= x&xxxx;xxxxxx xxx xxxxxxx xxxxx xxxxx xxxxxxxxxxx xxx xxxxx xxxxxxxxxx xx= xxxx xx xxx xxxxxxxxxxxxx xxxx xxxx.</x> =xx=xx=xx=xx=xx=xx=xx=xx=xx<x xxxxx=xx"xxxxx" xxxxx=xx"xxxx-xxxxxx: xxxxxx= x, xxxxx, xxxxxxxxx, xxxx-xxxxx; xxxx-xxxx: xxxx; xxxxx: xxxxx; xxxx-xxxxx= : xxxxxxx; "> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xxxxx xxxxxxxxx-xxxx!</x> =xx=xx=xx=xx=xx=xx=xx=xx</xx> =xx=xx=xx=xx=xx=xx=xx</xx> =xx=xx=xx=xx=xx=xx</xxxxx> =xx=xx=xx=xx=xx</xxxxx> =xx=xx=xx=xx=xx<xxx xxxxx=xx"xxxxxx" xxxxx=xx"xxxxxxxxx" xxxxx=xx"xxxxxx-x= xx: xxx;xxxxxx-xxxxx: xxx;xxxxxx-xxxx: xxx;xxxxxx-xxxxxx: x.xxxxxx;xxxx-xx= xx: xxxx;xxxx-xxxxxx: 'xxxxx xxx xxxxx', xxxxx;xxxx-xxxxx: xxxxxx;xxxxx: #= xxxxxx;xxxx-xxxxxx: xxx%;"> =xx=xx=xx=xx=xx=xx<xx xxxxx=xx"xxxxxx" xxxxxxx=xx"xxxxxxx" xxxx=xx"x" xxxx= x=xx"xxxxx: xxx(xxx, xxx, xxx); " xxxxx=xx"xxx%"> =xx=xx=xx=xx=xx</xxx> =xx=xx=xx=xx=xx<xxxxx xxxxxx=xx"x" xxxxxxxxxxx=xx"x" xxxxx=xx"xxxxxxxxxxxx= xx" xxxxx=xx"xxxxx: xxxxx; " xxxxx=xx"xxx%"> =xx=xx=xx=xx=xx=xx<xxxxx> =xx=xx=xx=xx=xx=xx=xx<xx> =xx=xx=xx=xx=xx=xx=xx=xx<xx xxxxx=xx"xxxxx: xxxxx;xxxxxxx-xxx: x.xxxx;xxxx= xxx-xxxxx: x.xxxx;xxxxxxx-xxxxxx: x.xxxx;xxxxxxx-xxxx: x.xxxx;xxxxxx-xxxxx= xxx: xxxxxxxx;" xxxxx=xx"xx%"> =xx=xx=xx=xx=xx=xx=xx=xx=xx<x xxxxx=xx"xxxx-xxxxx: xxxxxxx; "> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx<x xx=xx"xxxxx" xxxx=xx"xxxxx" xxxxx=xx"xxxx= x: #xxxxxx;xxxx-xxxxxx: xxxxxx;xxxx-xxxxxxxxxx: xxxxxxxxx;"></x><xxxxxx><x= xxx xxxxx=xx"xxxx-xxxx: xxx; xxxx-xxxxxx: xxxxx, xxxx-xxxxx; xxxxx: xxxxx;= ">xxxxx:</xxxx></xxxxxx><xx> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx<xx> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx<xxxx xxxxx=xx"xxxx-xxxx: xxx; xxxx-xxxxxx:= xxxxx, xxxx-xxxxx; xxxxx: xxxxx; "><xx><xxxx xxxxx=xx"xxxx-xxxxxx: xxxxx,= xxxx-xxxxx; ">xxx xxxxx xxx xxxxxxxx xx xxxxxx xxxxxxxxx</xxxx></xx><xx> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx<xx> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx<x><xxxxxx><xxxx xxxxx=xx"xxxx-xxxxxx: xxxxx= , xxxx-xxxxx; ">xx.xx.xxxx</xxxx></xxxxxx><xx> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx<xxxxxx><xxxx xxxxx=xx"xxxx-xxxxxx: xxxxx, x= xxx-xxxxx; ">xxxxx: xx:xx xxx</xxxx></xxxxxx></x><xx> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx<xx> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx<xxxx xxxxx=xx"xxxxxx">xxxxxx xxxxxxxxx</xxx= x><xx> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx<xxxx xxxxx=xx"xxxxxx">xxxxxxxxxxxxx&xxxxx;x= x, xxxx xxxx</xxxx></xxxx></x> =xx=xx=xx=xx=xx=xx=xx=xx=xx<x xxxxx=xx"xxxxx" xxxxx=xx"xxxxxx-xxxxx: xxx;= xxxxxx-xxxx: xxx; xxxx-xxxx: xxx; xxxx-xxxxxx: 'xxxxx xxx xxxxx', xxxxx;= xxxx-xxxxx: xxxxxxx; "> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx<xxxx xxxxx=xx"xxxx-xxxxxx: xxxxx, xxxx-xxxx= x; xxxxx: xxxxx; ">xx/xx xxxxxxxxxxxx</xxxx></x> =xx=xx=xx=xx=xx=xx=xx=xx=xx<x xxxxx=xx"xxxxx" xxxxx=xx"xxxxxx-xxxxx: xxx;= xxxxxx-xxxx: xxx; xxxx-xxxx: xxx; xxxx-xxxxxx: 'xxxxx xxx xxxxx', xxxxx;= xxxx-xxxxx: xxxxxxx; "> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx<x><xxxx xxxxx=xx"xxxx-xxxxxx: xxxxx, xxxx-x= xxxx; xxxxx: xxxxx; ">xxxxxx:</xxxx></x><xx> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx<xxxx xxxxx=xx"xxxx-xxxxxx: xxxxx, xxxx-xxxx= x; xxxxx: xxxxx; ">xxxx xxxxx: xx xxx (xxxxxxx xx xxx xxx xxxx, xxxx, xxxx= xxxx, xxxxxxxxx xxx xxxx xxxx)<xx> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xxxxxxx xxxxx: xx xxx (xx xxxxxxxx)<xx> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xxxxxxxxxx xxxxx&xxxx;</xxxx></x> =xx=xx=xx=xx=xx=xx=xx=xx=xx<x xxxxx=xx"xxxxx" xxxxx=xx"xxxxxx-xxxxx: xxx;= xxxxxx-xxxx: xxx; xxxx-xxxx: xxx; xxxx-xxxxxx: 'xxxxx xxx xxxxx', xxxxx;= xxxx-xxxxx: xxxxxxx; "> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx<x><xxxx xxxxx=xx"xxxx-xxxxxx: xxxxx, xxxx-x= xxxx; xxxxx: xxxxx; ">xxxxxxx:</xxxx></x><xx> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx<xxxx xxxxx=xx"xxxx-xxxxxx: xxxxx, xxxx-xxxx= x; xxxxx: xxxxx; ">xxxxxxxxxx:&xxxx;xx &xxxx;<xx> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xxxxxxxxxxxx: xx &xxxx; xxxx. xxx-xxx&xxxx;xxx= x (xxxxxxxxxxx xxxxxxx!)</xxxx></x> =xx=xx=xx=xx=xx=xx=xx=xx=xx<x xxxxx=xx"xxxx-xxxxx: xxxxxxx; "> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx<xxxx xxxxx=xx"xxxx-xxxx: xxx; xxxx-xxxxxx:= xxxxx, xxxx-xxxxx; xxxxx: xxxxx; "><xxxxxx><xxxx xxxxx=xx"xxxx-xxxxxx: xx= xxx, xxxx-xxxxx; ">xxxxxxxxxx:&xxxx;</xxxx></xxxxxx><xxxx xxxxx=xx"xxxxxx"= >&xxxx;xxx&xxxx;<x xxxx=xx"xxxx://xxxxxxxx.xxx.xxxx-xxxxxxx.xxx/xxxxx/xxxx= x?x=xxxxxxxxxxxxxxxxxxxxxxxxxxx&xx=xxxxxxxxxxxx&x=xxxxxxxxxxxx" xxxxxx=xx= "xxxxxx" xxxxx=xx"xxxxx: #xxxxxx;xxxx-xxxxxx: xxxxxx;xxxx-xxxxxxxxxx: xxxx= xxxxx;">xxxxxxxx.xxx</x>, xxx &xxxx;xxxxxx-xxxxxxxxxxxxxxxxxx xxx xx xxxxx= xxxxxxxx xxx xxxxxxxxx.</xxxx></xxxx></x> =xx=xx=xx=xx=xx=xx=xx=xx</xx> =xx=xx=xx=xx=xx=xx=xx=xx<xx xxxxx=xx"xxxxx: xxxxx;xxxxxxx-xxx: x.xxxx;xxxx= xxx-xxxxx: x.xxxx;xxxxxxx-xxxxxx: x.xxxx;xxxxxxx-xxxx: x.xxxx;xxxxxx-xxxxx= xxx: xxxxxxxx;" xxxxx=xx"xx%"> =xx=xx=xx=xx=xx=xx=xx=xx=xx<x xxxxx=xx"xxxxxx" xxxxx=xx"xxxx-xxxxx: xxxxxx= ; "> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx<xx> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx<xxxx xxxxx=xx"xxxxxx"><x><xxxx xxxxx=xx"xxx= x-xxxx: xxx; xxxx-xxxxxx: xxxxx, xxxx-xxxxx; xxxxx: xxxxx; ">xxx xxxxxxxxx= xxx xxxxxxx&xxxx;xxxxx xxx</xxxx></x></xxxx></x> =xx=xx=xx=xx=xx=xx=xx=xx=xx<x xxxxx=xx"xxxxxx" xxxxx=xx"xxxx-xxxxx: xxxxxx= ; "> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx<xxxx xxxxx=xx"xxxx-xxxx: x.xxx; xxxx-xxxxxx= : xxxxx, xxxx-xxxxx; xxxxx: xxxxx; "><xxx xxxxxx=xx"x" xxxxxx=xx"xxx" xxx= =xx"xxxx://xxx.xxxxxxxxx.xx/xxxxxxxxxx/xxx/xxxxxxxxxxxxxxxx.xxx" xxxxxx=xx= "#xxx" xxxxx=xx"xxx" xxxxx=xx"xxxxxx: x;xxxxxx: xxxx;xxxx-xxxxxx: xxx%;xxx= xxxx: xxxx;xxxx-xxxxxxxxxx: xxxx;xxxxxxx: xxxxxx;">&xxxx;</xxxx></x> =xx=xx=xx=xx=xx=xx=xx=xx=xx<x xxxxx=xx"xxxxxx" xxxxx=xx"xxxx-xxxxx: xxxxxx= ; "> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx&xxxx;</x> =xx=xx=xx=xx=xx=xx=xx=xx</xx> =xx=xx=xx=xx=xx=xx=xx=xx<xx xxxxx=xx"xxxxx: xxx;xxxxxxx-xxx: x.xxxx;xxxxxx= x-xxxxx: x.xxxx;xxxxxxx-xxxxxx: x.xxxx;xxxxxxx-xxxx: x.xxxx;xxxxxx-xxxxxxx= x: xxxxxxxx;" xxxxx=xx"x%"> =xx=xx=xx=xx=xx=xx=xx=xx=xx<x xxxxx=xx"xxxxxxxxx" xxxxx=xx"xxxxxx-xxx: xxx= ; xxxxxx-xxxxx: xxx; xxxxxx-xxxx: xxx; xxxxxx-xxxxxx: x.xxxxxx; xxxx-xxxx:= xxxx; xxxx-xxxxxx: 'xxxxx xxx xxxxx', xxxxx; xxxx-xxxxx: xxxxxxx; "> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx<xxxx xxxxx=xx"xxxx-xxxx: x.xxx; xxxx-xxxxxx= : xxxxx, xxxx-xxxxx; xxxxx: xxxxx; ">&xxxx;</xxxx></x> =xx=xx=xx=xx=xx=xx=xx=xx</xx> =xx=xx=xx=xx=xx=xx=xx</xx> =xx=xx=xx=xx=xx=xx</xxxxx> =xx=xx=xx=xx=xx</xxxxx> =xx=xx=xx=xx=xx<xxx xxxxx=xx"xxxxxx" xxxxx=xx"xxxxxxxxx" xxxxx=xx"xxxxxx-x= xx: xxx;xxxxxx-xxxxx: xxx;xxxxxx-xxxx: xxx;xxxxxx-xxxxxx: x.xxxxxx;xxxx-xx= xx: xxxx;xxxx-xxxxxx: 'xxxxx xxx xxxxx', xxxxx;xxxx-xxxxx: xxxxxx;xxxxx: #= xxxxxx;xxxx-xxxxxx: xxx%;"> =xx=xx=xx=xx=xx=xx<xx xxxxx=xx"xxxxxx" xxxxxxx=xx"xxxxxxx" xxxx=xx"x" xxxx= x=xx"xxxxx: xxx(xxx, xxx, xxx); " xxxxx=xx"xxx%"> =xx=xx=xx=xx=xx</xxx> =xx=xx=xx=xx=xx<x xxxxx=xx"xxxxxx" xxxxx=xx"xxxxxxxxx" xxxxx=xx"xxxxxx-xxx= : xxx; xxxxxx-xxxxx: xxx; xxxxxx-xxxx: xxx; xxxxxx-xxxxxx: x.xxxxxx; xxxx-= xxxx: xxxx; xxxx-xxxxxx: 'xxxxx xxx xxxxx', xxxxx; xxxx-xxxxx: xxxxxx; "> =xx=xx=xx=xx=xx=xx&xxxx;</x> =xx=xx=xx=xx=xx<x xxxxx=xx"xxxxxx" xxxxx=xx"xxxxxxxxx" xxxxx=xx"xxxxxx-xxx= : xxx; xxxxxx-xxxxx: xxx; xxxxxx-xxxx: xxx; xxxxxx-xxxxxx: x.xxxxxx; xxxx-= xxxx: xxxx; xxxx-xxxxxx: 'xxxxx xxx xxxxx', xxxxx; xxxx-xxxxx: xxxxxx; "> =xx=xx=xx=xx=xx=xx<xxxx xxxxx=xx"xxxx-xxxx: xxxx; xxxx-xxxxxx: xxxxxx, xxx= x-xxxxx; xxxxx: xxxxx; ">xxxxxxxxx</xxxx><xx> =xx=xx=xx=xx=xx=xx<xxxx xxxxx=xx"xxxxx" xxxxx=xx"xxxxx: xxx(x, x, x); "><x= xxx xxxx=xx"xxxxxxx, xxxxx, xxxxxxxxx, xxxx-xxxxx" xxxx=xx"x">xxxxxxxxx: x= xxxx xxxxxxxxxxxxxxxxxxxxx xxxx, xxxx xxxx, xxxxxxxxxxxxxxx x/x, xxxxxx /= @ / xxxxx.xx.xx</xxxx></xxxx></x> =xx=xx=xx=xx=xx<x xxxxx=xx"xxxxxx" xxxxx=xx"xxxxxxxxx" xxxxx=xx"xxxxxx-xxx= : xxx; xxxxxx-xxxxx: xxx; xxxxxx-xxxx: xxx; xxxxxx-xxxxxx: x.xxxxxx; xxxx-= xxxx: xxxx; xxxx-xxxxxx: 'xxxxx xxx xxxxx', xxxxx; xxxx-xxxxx: xxxxxx; "> =xx=xx=xx=xx=xx=xx&xxxx;</x> =xx=xx=xx=xx</xx> =xx=xx=xx</xx> =xx=xx</xxxxx> =xx</xxxxx> =xx<xx> =xx<xxxx xxxxx=xx"xxxx-xxxx:xxxx;"><xxxx xxxxx=xx"xxxx-xxxxxx:xxxxx xxx xx= xxx,xxxxx,xxxxx;"><xxxx xxxxx=xx"xxxxx:#xxxxxx;">xxxxxx xxxxxxxxx<xx> =xx<xx> =xx<xxxx xxxxx=xx"xxxx-xxxx:xxxx;">xxxxxxxxx x&xxxx;x xxxx xxxxx xxxxxxx x= xxxx xxxxxxxx.xxxxxxx(a)xxxxx.xxx</xxxx></xxxx><xx> =xx<xx> =xx<xxxx xxxxx=xx"xxxx-xxxx:xxxx;"><xxxx xxxxx=xx"xxxxx:#xxxxxx;">xxxxx xx= xxxx xxx xxx xxxxxx xxxxx xxxx...xx xxx xxxxx... xxx xxxxx xxxx</xxxx></xx= xx></xxxx></xxxx></xxx> <xx> </xxx> =xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx=xx</xx> </xx> </xxxxx>  </xx> </xx> =xx<xx> =xx<xx xxxxxx=xx"xxx" xxxxx=xx"xxx= " xxxxx=xx"xxxxxxxxxxxxxxxxx" xxxxx=xx"xxxxxx-xxxxxxxx: xxxxxxxx;xxxxxxxxx= x-xxxxx: #xxxxxx;">  <xxxxx xxxxxx=xx"x" xxxxxx= xxxxx=xx"xx" xxxxxxxxxxx=xx"x" xxxxx=xx"xxx%"> <xx xx:xxxxxxxxxx=xx"x= xxxxxxx" xx:xxxxxxxxxxx=xx"x" xx:xxxxxxxx=xx"xxxxxxxxxxxxxxxxxxx" xxxxxxxx= xx=xx"xxxxxxxxxxxxxxxxxxx"> <xx xxxxxx=xx"xxx"= xxxxx=xx"xxxxxx-xxxxxxxx: xxxxxxxx;"> <xxx xxx=xx"xx= xx://xxxxxxx.xxxxxxxxx.xxx/xxxxxxxxxxxxxxxxxxxxxxxxx/xxxxxx/xxxxxxxxxxx.xx= x" xxx=xx"" xxxxxx=xx"x" xxxxx=xx"xxxxxx: x;xxxxxxx: x;xxxxxx: x;xxxxxx: x= xxx;xxxx-xxxxxx: xxx%;xxxxxxx: xxxx;xxxx-xxxxxxxxxx: xxxx;xxxxxxx: xxxxxx;= "> <xxx xxxxx=xx"= xxxxx: #xxxxxx;xxxx-xxxxxx: xxxxx;xxxx-xxxx: xxxx;xxxx-xxxxxx: xxx%;xxxx-x= xxxx: xxxx;"></xxx> </xx> </xx> </xxxxx>  </xx> =xx<xx xxxxxx=xx"xxx" xxxxx=xx"xxx= " xxxxx=xx"xxxxxxxxxxxxxxxxxx" xxxxx=xx"xxxxxx-xxxxxxxx: xxxxxxxx;xxxxxxxx= xx-xxxxx: #xxxxxx;">  <xxxxx xxxxxx=xx"x" xxxxxx= xxxxx=xx"xx" xxxxxxxxxxx=xx"x" xxxxx=xx"xxx%"> </xxxxx>  </xx> </xx> </xxxxx>  </xx> </xx> =xx<xx> =xx<xx xxxxx=xx"xxxxxx" xxxxxx=xx"xxx" xxxxx= =xx"xxxxxx-xxxxxxxx: xxxxxxxx;">  =xx<xxxxx xxxxxx=xx"x" xxxxxxxxxxx=xx"xx"= xxxxxxxxxxx=xx"x" xxxxx=xx"xxx" xx=xx"xxxxxxxxxxxxxx" xxxxx=xx"xxxxxxxxxx= -xxxxx: #xxxxxx;xxxxxx-xxx: x;"> =xx<xx> =xx<xx xxxxxx=xx"xxx" xxxxx=xx"xxx= xxxxxxxxxx" xxxxx=xx"xxxxxx-xxxxxxxx: xxxxxxxx;">  <xxxxx xxxxxx=xx"x" xxxxxx= xxxxx=xx"xx" xxxxxxxxxxx=xx"x" xxxxx=xx"xxx%"> <xx> <xx xxxxxxx=xx"x"= xxxxxx=xx"xxxxxx" xx=xx"xxxxxx" xxxxx=xx"xxxxxx-xxxxxxxx: xxxxxxxx;xxxxxx= xxxx-xxxxx: #xxxxxx;xxxxxx: x;"> <xxx xxxxx=xx"= xxxxx: #xxxxxx;xxxx-xxxxxx: xxxxx;xxxx-xxxx: xxxx;xxxx-xxxxxx: xxx%;xxxx-x= xxxx: xxxxxx;"></xxx> </xx> </xx> <xx> <xx xxxxxx=xx"xxx"= xxxxx=xx"xxx" xxxxx=xx"xxxxxx-xxxxxxxx: xxxxxxxx;"> <xxx xxxxx=xx"= xxxxx: #xxxxxx;xxxx-xxxxxx: xxxxx;xxxx-xxxx: xxxx;xxxx-xxxxxx: xxx%;xxxx-x= xxxx: xxxx;"><x>xx xxx&xxxx;xxxx xxxxxx xxxxxxxxxx, xx xx xxxx xxx xxxxx x= xxxxxx<xx> xxxxxx, xxxx xxx xxx.xxxxxxxx.xxx, xxx. xxx.xxxxx.xxx<xx> xxxxxxxxxxx xxxx.</x></xxx> </xx> <xx xxxxxx=xx"xxx"= xxxxx=xx"xxx" xx=xx"xxxxxxxxxxxxx" xxxxx=xx"xxxxxx-xxxxxxxx: xxxxxxxx;"> <xxx xxxxx=xx"= xxxxx: #xxxxxx;xxxx-xxxxxx: xxxxx;xxxx-xxxx: xxxx;xxxx-xxxxxx: xxx%;xxxx-x= xxxx: xxxx;"></xxx> </xx> </xx> <xx> <xx xxxxxxx=xx"x"= xxxxxx=xx"xxxxxx" xx=xx"xxxxxxx" xxxxx=xx"xxxxxx-xxxxxxxx: xxxxxxxx;xxxxx= xxxxx-xxxxx: #xxxxxx;xxxxxx: x;"> <xxx xxxxx=xx"= xxxxx: #xxxxxx;xxxx-xxxxxx: xxxxx;xxxx-xxxx: xxxx;xxxx-xxxxxx: xxx%;xxxx-x= xxxx: xxxxxx;"> &xxxx;<x x= xxx=xx"xxxx://xxxxxxxx.xxx.xxxx-xxxxxxx.xxx/xxxxxxxxxxx?x=xxxxxxxxxxxxxxxx= xxxxxxxxxxx&xx=xxxxxxxxxxxx&x=xxxxxxxxxxxx&x=xxxxxxxxxxxx" xxxxx=xx"xxxxx: #= xxxxxx;xxxx-xxxxxx: xxxxxx;xxxx-xxxxxxxxxx: xxxxxxxxx;">xxxxxxxxxxx xxxx x= xxx xxxx</x> | <x xxxx=xx"xxxx://xxxxxxxx.xxx.xxxx-xxxxxxx.xxx/xxxxxxx?x= =xxxxxxxxxxxxxxxxxxxxxxxxxxx&xx=xxxxxxxxxxxx&x=xxxxxxxxxxxx" xxxxx=xx"xxxxx:= #xxxxxx;xxxx-xxxxxx: xxxxxx;xxxx-xxxxxxxxxx: xxxxxxxxx;">xxxxxx xxxxxxxxx= xxx xxxxxxxxxxx</x>&xxxx; </xxx> </xx> </xx> </xxxxx>  </xx> </xx> </xxxxx>  </xx> </xx> </xxxxx> <xx> </xx> </xx> </xxxxx> </xxxxxx> <xxx xxx=xx"xxxx://xxxxxxxx.xxx.xxxx-xxxxxx.xxx/xxxxx/xxxx.xxx?x=xxxxx= xxxxxxxxxxxxxxxxxxxxxx&xx=xxxxxxxxxxxx&x=xxxxxxxxxxxx" xxxxxx=xx"x" xxxxx= =xx"x"></xxxx> </xxxx> --x----------=xxxxxxxxxxxxxxxxxx-- Return-Path: <xxxxxxx.xxxxxxx(a)xxxxx.xxx> Received: xxxx xxxxxxxxx ([xxxx xxxxxx]) xx xxxxx (xxxxx xx.x.xx-xxxxxx-x.x.xx-x) xxxx xxxxx; xxx, xx xxx xxxx xx:xx:xx +xxxx X-Sieve: xxx xxxxx x.x Received: xxxx xxxxxxxxx ([xxx.x.x.x]) xx xxxxxxxxx xxxx xxxxx (xxxx x.xx) (xxxxxxxx-xxxx <xxxxxxx.xxxxxxx(a)xxxxx.xxx>) xx xxxxxx-xxxxxx-xx xxx xxxxx@xxxxxxxxx; xxx, xx xxx xxxx xx:xx:xx +xxxx X-Virus-Scanned: xxxxxx xxxxxxx-xxx xx xxxxxxx.xxxxxxxxx.xxx X-Amavis-Alert: xxx xxxxxx xxxxxxx, xxxxxx xxxxx xxxxxx xxxx xxxx xxxx: "xxxx" xxxxxx x xxxxx Received: xxxx xxxxxxxxx ([xxx.x.x.x]) xx xxxxxxxxx (xxxxxxxxx [xxx.x.x.x]) (xxxxxxx-xxx, xxxx xxxxx) xxxx xxxxx xx xxxxxxxxxxxx xxx <xxxxx@xxxxxxxxx>; xxx, xx xxx xxxx xx:xx:xx +xxxx (xxx) Received: xxxx xxxxxx-xxxx xx xxxxxxxxx xxxx xxxx-xxxxxxx (xxxx x.xx) (xxxxxxxx-xxxx <xxxxxxx.xxxxxxx(a)xxxxx.xxx>) xx xxxxxx-xxxxxx-xx xxx xxxxx@xxxxxxxxx; xxx, xx xxx xxxx xx:xx:xx +xxxx Received: xxxx xxxxxxxxx ([xxx.x.x.x]) xx xxxxxxxxx xxxx xxxxx (xxxx x.xx) (xxxxxxxx-xxxx <xxxxxxx.xxxxxxx(a)xxxxx.xxx>) xx xxxxxx-xxxxxx-xx xxx xxxxx@xxxxxxxxx; xxx, xx xxx xxxx xx:xx:xx +xxxx Received: xxxx xxxxxxxxxx-xxx.x.xxxxxx.xxx [xxx.xxx.xx.xx] xx xxxxxxxxx xxxx xxxx (xxxxxxxxx-x.x.xx) xxx <xxxxx@xxxxxxxxx> (xxxxxx-xxxx); xxx, xx xxx xxxx xx:xx:xx +xxxx (xxx) Subject: xx: ***xxxxxxx xxxx*** xxxxxxxxxxx xx xx.xx.xxxx xx xx xxx ***xxxxxx-xxxx*** Subject: xx: ***xxxxxxx xxxx*** xxxxxxxxxxx xx xx.xx.xxxx xx xx xxx ***xxxxxx-xxxx*** From: =?xxx-xxxx-x?x?xxxxxxxxxxx=xxxx?= <xxxxxxx.xxxxxxx(a)xxxxx.xxx> Subject: xx: ***xxxxxxx xxxx*** xxxxxxxxxxx xx xx.xx.xxxx xx xx xxx ***xxxxxx-xxxx*** From: =?xxx-xxxx-x?x?xxxxxxxxxxx=xxxx?= <xxxxxxx.xxxxxxx(a)xxxxx.xxx> Date: Wed, 16 Jan 2013 18:23:26 +0100 Subject: xx: ***xxxxxxx xxxx*** xxxxxxxxxxx xx xx.xx.xxxx xx xx xxx ***xxxxxx-xxxx*** From: =?xxx-xxxx-x?x?xxxxxxxxxxx=xxxx?= <xxxxxxx.xxxxxxx(a)xxxxx.xxx> Date: Wed, 16 Jan 2013 18:23:26 +0100 To: xxxxxx.xxxx(a)xxxxxx.xx Subject: xx: ***xxxxxxx xxxx*** xxxxxxxxxxx xx xx.xx.xxxx xx xx xxx ***xxxxxx-xxxx*** From: =?xxx-xxxx-x?x?xxxxxxxxxxx=xxxx?= <xxxxxxx.xxxxxxx(a)xxxxx.xxx> Date: Wed, 16 Jan 2013 18:23:26 +0100 To: xxxxxx.xxxx(a)xxxxxx.xx Message-ID: <xxxxxxxxxxxxxxxxxxxxxxxx.xxxxxxxxxxxxx(a)xxxxx.xxxxxxx.xxx> Subject: xx: ***xxxxxxx xxxx*** xxxxxxxxxxx xx xx.xx.xxxx xx xx xxx ***xxxxxx-xxxx*** From: =?xxx-xxxx-x?x?xxxxxxxxxxx=xxxx?= <xxxxxxx.xxxxxxx(a)xxxxx.xxx> Date: Wed, 16 Jan 2013 18:23:26 +0100 To: xxxxxx.xxxx(a)xxxxxx.xx Message-ID: <xxxxxxxxxxxxxxxxxxxxxxxx.xxxxxxxxxxxxx(a)xxxxx.xxxxxxx.xxx> Content-Type: multipart/mixed; boundary="----NWRIVE76QRJKEC1767KE5YSLJDH1MB" Subject: xx: ***xxxxxxx xxxx*** xxxxxxxxxxx xx xx.xx.xxxx xx xx xxx ***xxxxxx-xxxx*** From: =?xxx-xxxx-x?x?xxxxxxxxxxx=xxxx?= <xxxxxxx.xxxxxxx(a)xxxxx.xxx> Date: Wed, 16 Jan 2013 18:23:26 +0100 To: xxxxxx.xxxx(a)xxxxxx.xx Message-ID: <xxxxxxxxxxxxxxxxxxxxxxxx.xxxxxxxxxxxxx(a)xxxxx.xxxxxxx.xxx> Content-Type: multipart/mixed; boundary="----NWRIVE76QRJKEC1767KE5YSLJDH1MB" MIME-Version: x.x X-Bogofiltered: xxxx X-Bogosity: xxx, xxxxx=xxxxxxxxxx, xxxxxxxxx=x.xxxxxx, xxxxxxx=x.x.x ------xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxx-xxxx: xxxx/xxxx; xxxxxxx=xxx-x xxxxxxx-xxxx: xxxx/xxxx; xxxxxxx=xxx-x xxxxxxx-xxxxxxxx-xxxxxxxx: xxxxxx xxxxxxx+xxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+ ------xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxx-xxxx: xxxx/xxxxx; xxxxxxx=xxx-x xxxxxxx-xxxx: xxxx/xxxxx; xxxxxxx=xxx-x xxxxxxx-xxxxxxxx-xxxxxxxx: xxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx ------xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxx-xxxx: xxxx/xxxxx; xxxxxxx=xxx-x xxxxxxx-xxxx: xxxx/xxxxx; xxxxxxx=xxx-x xxxxxxx-xxxxxxxx-xxxxxxxx: xxxxxx xxxxxxx-xxxx: xxxx/xxxxx; xxxxxxx=xxx-x xxxxxxx-xxxxxxxx-xxxxxxxx: xxxxxx x-xxxxxxx-xxxx-xxxxxx-xxxx: xxxxxx-xxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxx ------xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxx-xxxx: xxxx/xxxx; xxxxxxx=xxx-x xxxxxxx-xxxx: xxxx/xxxx; xxxxxxx=xxx-x xxxxxxx-xxxxxxxx-xxxxxxxx: xxxxxx xxxxxxx-xxxx: xxxx/xxxx; xxxxxxx=xxx-x xxxxxxx-xxxxxxxx-xxxxxxxx: xxxxxx x-xxxxxxx-xxxx-xxxxxx-xxxx: xxxxxx-xxxxxxx xxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxx+xxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxx+ xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+ xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxx xxx+xxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxx+xxxxxxx+xxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxx xxx+xxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxx xxxxxxxxxxx+xxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxx+xxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+ xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+ xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+ xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+ xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxx+xxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxx xxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+ xxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxx+xxxxxxx+xxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxx xxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxx+xxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxx xxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxx+xxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxx+xxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxx+xxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxx xxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxx xxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+ ------xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxx-xxxx: xxxx/xxxxx; xxxxxxx=xxx-x xxxxxxx-xxxx: xxxx/xxxxx; xxxxxxx=xxx-x xxxxxxx-xxxxxxxx-xxxxxxxx: xxxxxx xxxxxxx-xxxx: xxxx/xxxxx; xxxxxxx=xxx-x xxxxxxx-xxxxxxxx-xxxxxxxx: xxxxxx x-xxxxxxx-xxxx-xxxxxx-xxxx: xxxxxx-xxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx== ------xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxx-xxxx: xxxxx/xxxx; xxxx="xxxxxxxx.xxx" xxxxxxx-xxxxxxxx-xxxxxxxx: xxxxxx xxxxxxx-xxxxxxxxxxx: xxxxxxxxxx; xxxxxxxx="xxxxxxxx.xxx"; xxxx=xxxx xxxxxxx-xx: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx(a)xxx.xxxxxxxxx /xx/xxxxxxxxxxxxxxxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxx/xxx/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx/xxxxxxxxxxxxxxxx xxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxx+xxx/xxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxx/xxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxx/xxxxxx/xxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xx xxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxx/xxxxxxxxxxxxxxxxxxxx+xxxxxxxxx+xxxxxxx xxxxxxxxxxxxxxxx/xxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxx/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx/xx xxxxxxxxxxxxxxxxxxxxxxxxxxxx/xx/xxxx/xxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxx/xxxxxxxxxxxxxxxxxxxxx/xx/xxx xxxxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxx/xxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxx/xxxxxxxxxxxxxxxxxxxxxx+xxxxx/xxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx/xxxxxxx+xxxxxxxxx+xxxxxxxxxxx xxxxxxxxxxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx/xx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx/xxxxxxxxxxxx xxxxxx/xx+xxxxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxx xxxx+xxxxxxxxxxxxxxxxxxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxx+xx+xxxxxxxxxxxxx/xxxx /xxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx/xxxxx+xxxxxxx+xx xxx+xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+x/xxxxxxxxxxxxxxxxxxx+xxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx/xxx/xxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxx+xxxxxxxxxxxxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+ xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx +xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx+xxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxx/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx// xx== ------xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx-- ------xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx-- Return-Path: <xxx-xxxx(a)xxxx.xxxxxxxx.xxx> Received: xxxx xxxxxxxxx ([xxxx xxxxxx]) xx xxxxx (xxxxx xx.x.xx-xxxxxx-x.x.xx-x+xxxxxx) xxxx xxxxx; xxx, xx xxx xxxx xx:xx:xx +xxxx X-Sieve: xxx xxxxx x.x Received: xxxx xxxxxxxxx ([xxx.x.x.x]) xx xxxxxxxxx xxxx xxxxx (xxxx x.xx) (xxxxxxxx-xxxx <xxx-xxxx(a)xxxx.xxxxxxxx.xxx>) xx xxxxxx-xxxxxx-xx xxx xxxxx@xxxxxxxxx; xxx, xx xxx xxxx xx:xx:xx +xxxx X-Virus-Scanned: xxxxxx xxxxxxx-xxx xx xxxxxxxxx X-Spam-Flag: xx X-Spam-Score: x.xxx X-Spam-Level: **** X-Spam-Status: xx, xxxxx=x.xxx xxxxxxxxxxxx=-xx xxxxxxxx=x.xx xxxxx=[xxxxxxxxxxxxxxxxxxxxxxx=x.xxx, xxxxxxxxxxxx=x.xxx, xxxxxxxxxxxxxxxxxxxxx=x.xxx, xxxxxxxxxxxxxx=x.xxx, xxxxxxxxxxxxxxxxx=-x.xx] xxxxxxxxx=xx Received: xxxx xxxxxxxxx ([xxx.x.x.x]) xx xxxxxxxxx (xxxxxxxxx [xxx.x.x.x]) (xxxxxxx-xxx, xxxx xxxxx) xxxx xxxxx xx xxxxxxxxxxxx xxx <xxxxx@xxxxxxxxx>; xxx, xx xxx xxxx xx:xx:xx +xxxx (xxxx) Received: xxxx xxxxxx-xxxx xx xxxxxxxxx xxxx xxxx-xxxxxxx (xxxx x.xx) (xxxxxxxx-xxxx <xxx-xxxx(a)xxxx.xxxxxxxx.xxx>) xx xxxxxx-xxxxxx-xx xxx xxxxx@xxxxxxxxx; xxx, xx xxx xxxx xx:xx:xx +xxxx Received: xxxx xxxxxxxxx ([xxx.x.x.x]) xx xxxxxxxxx xxxx xxxxx (xxxx x.xx) (xxxxxxxx-xxxx <xxx-xxxx(a)xxxx.xxxxxxxx.xxx>) xx xxxxxx-xxxxxx-xx xxx xxxxx@xxxxxxxxx; xxx, xx xxx xxxx xx:xx:xx +xxxx Delivered-To: xxxxxxx.xxxxxxx(a)xxxxx.xxx Received: xxxx xxxxx-xxx.x.xxxxxx.xxx [xx.xxx.xxx.xxx] xx xxxxxxxxx xxxx xxxx (xxxxxxxxx-x.x.xx) xxx <xxxxx@xxxxxxxxx> (xxxxxx-xxxx); xxx, xx xxx xxxx xx:xx:xx +xxxx (xxxx) Received: xx xx.xxx.xxx.xx xxxx xxxx xx xxxxxxxxxxxxxx; xxx, x xxx xxxx xx:xx:xx -xxxx (xxx) X-Received: xx xx.xxx.x.xxx xxxx xxxx xx xxxxxxxxxxxxxxx.x.xxxxxxxxxxxxx; xxx, xx xxx xxxx xx:xx:xx -xxxx (xxx) Received: xxxx xxxx.xxxxxxxx.xxx (xxxx.xxxxxxxx.xxx. [xx.xx.xxx.x]) xx xx.xxxxxx.xxx xxxx xxxxx xx xxxxxxxxxxxxxxxx.xx.xxxx.xx.xx.xx.xx.xx xxx <xxxxxxx.xxxxxxx(a)xxxxx.xxx>; xxx, xx xxx xxxx xx:xx:xx -xxxx (xxx) Received-SPF: xxxx (xxxxxx.xxx: xxx-xxxx(a)xxxx.xxxxxxxx.xxx xxxx xxx xxxxxxxxx xxxxxxxxx xxxxxx xxxxx) xxxxxx-xx=xx.xx.xxx.x; Authentication-Results: xx.xxxxxx.xxx; xxx=xxxxxxx (xxxxxx.xxx: xxx-xxxx(a)xxxx.xxxxxxxx.xxx xxxx xxx xxxxxxxxx xxxxxxxxx xxxxxx xxxxx) xxxx.xxxx=xxx-xxxx(a)xxxx.xxxxxxxx.xxx Received: xx xxxx.xxxxxxxx.xxx (xxxxxxx, xxxx xxxxxx xx) xx xxxxxxxxx; xxx, x xxx xxxx xx:xx:xx +xxxx (xxxx) To: =?xxx-x?x?xxxxxxxxxxx=xx=xxxx?= <xxxxxxx.xxxxxxx(a)xxxxx.xxx> Subject: =?xxx-x?x?xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx,xxxxxxxxxx,xxxxxxxxxxxxxxxxxx?= =?xxx-x?x?xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx=xx=xxxxxx-xxxxxxxxxxxxxxxxxxx?= =?xxx-x?x?xxxxxxxxxxxxxxxxxxxx?= X-PHP-Originating-Script: xxxx:xxxxx.xxxxxxxxx.xxx Date: Thu, 5 Jun 2014 14:59:36 +0200 From: =?xxx-x?x?xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx=xxxxxxxxxxxx=xxxxxxxxxxxxxxxx?= =?xxx-x?x?xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx=xx=xxxxx?= <xxxxxx(a)xxxxxxx.xx> Reply-To: xxxxxxxxxxxxxx(a)xxxxxxx.xxx Message-ID: <xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx(a)xxx.xxxxxxx.xx> X-Priority: x X-Mailer: xxxxxxxxx x.x.x (xxxx://xxxx.xxxxxx.xxx/x/xxxxxx-xxxxxx.xxx/x/xxxxxxxxx/) MIME-Version: x.x Content-Transfer-Encoding: 8bit Content-Type: text/html; charset="utf-8" X-Bogofiltered: xxxx X-Bogosity: xxx, xxxxx=xxxxxxxxxx, xxxxxxxxx=x.xxxxxx, xxxxxxx=x.x.x <x>xxxxx xxxxxxx xxxüxx!</x> <x>xxxxx xxxxxxxxxxxx (xxxxxxxxxxxxxx(a)xxxxxxx.xxx, ) xxx xxxxx xxxx xxxxxxxxx xx xxxxx xxxxxxx xxxxxxxxxxxxxxxx xxxxxxxxxxx:</x> <x>xxxx xxxxxxxx xxxx xxxüxx,<xx /> <xx /> xxx xxx xxxx xxx xxx xxxxx xxxx xxxxx Üxxxxxxxxxxx xxx xxx xxx xxxxxx xxxxxxxxx üxxx xxx xxxxxxx xxxxxxxxxx. xxx xxxx xxxxxxx xx xxxxxx xxxxxx xxäxxxxxxxxxxxx xüx xxxxx xxx xxxxxx xxxxxxxxxxx xxx xxxx xxxäxxxx xx xx-xxxxxxxxx xüx xxxxx xxxxxxxäxxxxxxxx xxxxxxxxxxxxxxxxx. xxxx xxx xxxx xxxxxäxxxxx xüx xxx xxxx xxxxxx, xxxx xüxxx xxx xxxx üxxx xxx xxxxöxxxxxxx xxxxxäxx xxxxxx!<xx /> <xx /> xxx xxxxxxxxxxxx xxüßxx,<xx /> <xx /> xxxxx xxxxxxxxxxxx</x> <x>xxx xxxxxxxxxxxx xxüßxx,</x> <x>xxxxxxxxxxxxxxx xxxxxx xxxxxxxxxx, xxxxxxxx, xxxxxxxxx xxxxxxxxxxxxxxx xxxxxxxxx xx xxxxxx xxxxöxxx</x> <x><xx />---<xx />xxx xxxxxxxxxxxxx?<xx />xxxxxxxx xxx xxxx xxxx xxxxx <xxxxxx>xxxxxx xxxxxxxxxxxxxxxxxxxxxx</xxxxxx> xxxxx</x> <x><xxxxxx>xxxx://xxx.xxxxxxxx.xx</xxxxxx></x> X-Account-Key: xxxxxxxx X-UIDL: 1135872122.184 X-Mozilla-Status: xxxx X-Mozilla-Status2: xxxxxxxx X-Mozilla-Keys: Return-Path: <xxxxxx.xxxxxxxxx(a)xxxxxxxxxxxx.xx> Received: xxxx xxxxxxx.xxxxxx.xx (xxxxxxxxx.xxxxxxxxxxx [xxx.x.x.x]) xx xxxxxxx (xxxxx xx.x.xx-xxxx-xxxxxx-x.x.xx-x) xxxx xxxx; xxx, xx xxx xxxx xx:xx:xx +xxxx X-Sieve: xxx xxxxx x.x Received: xxxx xx.xxxxxx.xx (xx.xxxxxx.xx [xx.xxx.xx.xx]) (xxxxx xxxxx xxxx xxxxxx xxx-xxx-xxxxxx-xxx (xxx/xxx xxxx)) (xx xxxxxx xxxxxxxxxxx xxxxxxxxx) xx xxxxxxx.xxxxxx.xx (xxxxxxx) xxxx xxxxx xx xxxxxxxxxxxxx xxx <xxxxxxx.xxxxxxx(a)xxxxxx.xx>; xxx, xx xxx xxxx xx:xx:xx +xxxx (xxx) Received: xxxx xxxxxxxxx (xxxxxxxxx [xxx.x.x.x]) xx xx.xxxxxx.xx (xxxxxxx) xxxx xxxxx xx xxxxxxxxxx xxx <xxxxxxx.xxxxxxx(a)xxxxxx.xx>; xxx, xx xxx xxxx xx:xx:xx +xxxx (xxx) Received: xxxx xxxxxxx.xxxxx.xx (xxxxxxx.xxxxx.xx [xxx.xxx.xxx.xx]) xx xx.xxxxxx.xx (xxxxxxx) xxxx xxxxx xx xxxxxxxxxx xxx <xxxxxxx.xxxxxxx(a)xxxxxx.xx>; xxx, xx xxx xxxx xx:xx:xx +xxxx (xxx) Received: (xxxxx xxxxx xxxxxxx xx xxx x); xx xxx xxxx xx:xx:xx -xxxx Received: xxxx xxxxxxx (xxxx xxxxxxxxx) (xxx.xxx.xxx.xx) xx xxxxxxx.xxxxx.xx xxxx xxxx; xx xxx xxxx xx:xx:xx -xxxx Received: (xxxxx xxxxx xxxxxxx xx xxx x); xx xxx xxxx xx:xx:xx -xxxx X-DNS-Error: xxxx (xxxxxx-xx.xxx) xxxx xxx xxxxxxx xx xxx.xxx.xxx.xx - xxxxxx? Received: xxxx xxxxxxx (xxxx xxxxxx-xx.xxx) (xxx.xxx.xxx.xx) xx xxxxxxx.xxxxx.xx xxxx xxxx; xx xxx xxxx xx:xx:xx -xxxx Received: xxxx xxxxxx.xxxxxx-xx.xxx (xxxxxxxxx [xxx.x.x.x]) xx xxxxxx-xx.xxx (x.xx.xx/x.xx.xx/xxxxxxx) xxxx xxxxx xx xxxxxxxxxxxxxx xxx <xxxxxxx.xxxxxxx(a)xxxxxx.xx>; xxx, xx xxx xxxx xx:xx:xx +xxxx (xxx) Received: xxxx xxxxxxx.xxxx.xxxxxx-xx.xxx (xxxxxxxx.xxxx.xxxxxx-xx.xxx [xx.xxx.x.xx]) xx xxxxxx.xxxxxx-xx.xxx (x.xx.xx/x.xx.xx/xxxxxxx) xxxx xxxxx xx xxxxxxxxxxxxxx xxx <xxxxxxx.xxxxxxx(a)xxxxxx.xx>; xxx, xx xxx xxxx xx:xx:xx +xxxx (xxx) Received: xxxx xxxxxxxx.xxxx.xxxxxx-xx.xxx ([xx.xxx.x.xx]) xx xxxxxxx.xxxx.xxxxxx-xx.xxx xxxx xxxxxxxxx xxxxxxx(x.x.xxxx.xxx); xxx, xx xxx xxxx xx:xx:xx +xxxx X-MimeOLE: xxxxxxxx xx xxxxxxxxx xxxxxxxx xx.x.xxxx.x Content-class: urn:content-classes:message Return-Receipt-To: "xxxxxxxxx xxxxxx" <xxxxxx.xxxxxxxxx(a)xxxxxxxxxxxx.xx> MIME-Version: x.x Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Disposition-Notification-To: "xxxxxxxxx xxxxxx" <xxxxxx.xxxxxxxxx(a)xxxxxxxxxxxx.xx> Subject: xxxxxxxxxxxxxxxx Date: Thu, 26 Jan 2006 15:28:52 +0100 Message-ID: <xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx(a)xxxxxxxx.xxxx.xxxxxx-xx.xxx> X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: xxxxxxxxxxxxxxxx Thread-Index: xxxxxxxxxx+xxxxxxxxxxxxxxxxxxx== From: "xxxxxxxxx xxxxxx" <xxxxxx.xxxxxxxxx(a)xxxxxxxxxxxx.xx> To: "xx.xxx-x" <xxx-x(a)xxxxxxxxxxxx.xx>, "xx.xxx-x" <xxx-x(a)xxxxxxxxxxxx.xx>, "xx.xxx-x" <xxx-x(a)xxxxxxxxxxxx.xx> Cc: "xxxxxxxxxxx xxxxxxx" <xxxxxxx.xxxxxxxxxxx(a)xxxxxxxxxxxx.xx> X-OriginalArrivalTime: xx xxx xxxx xx:xx:xx.xxxx (xxx) xxxxxxxx=[xxxxxxxx:xxxxxxxx] X-Virus-Scanned: xx xxxxx xxxxxxxxxxx xxx xxxxxx. X-Virus-Scanned: xx xxxxxxx-xxx-xxxxxxxx-xxx (xxxxxx) xx xxxxxx.xx X-Bayesian-Result: xxxxx (x) X-Bayesian-Words: xxx x xxx x xxx x xxxxx x xxxxxx-xx x xxxxxxxx x xxxxxxx x xxx x xxxx x xxxxxx x xxx x xxxxxxxx x xxxx x xxxxxxxxx x xxxx x X-SpamPal: xxxx x-xxxxx xxxxx X-Wlist-Pattern: xxxxxx.xxxxxxxxx(a)xxxxxxxxxxxx.xx X-Evolution: xxxxxxxx-xxxx xxxx xxxxxxx xxxxx xxx xxxxxx! xxx xxxxxxx xx xxxxxxxxxx, xx xxx xxx xxx xxxxxxxxxxxxxx=xx xx xxx xxxxx xxxxx xxxxxxxx xxxxx=xxxx xxxxxxxxxxx xxxx, xx xx xxxxxx?=xx xxxx xx xxxxx xxxxxxxxx xx xxx xxxxx xxxx xxxxxxxx xxxxxxxxx xxxx. xxxxxxxx xxxx xxxxxxxxxxxxx xxx xxxxxxxx xxx xxxxxxxxxx xx xxx xxxxx. xx. xxxxxxxx xx. xxxxxxxxxxx xx. xxxxxxxxxxx xxxxxxxxx xx=xx=xxx xxxxxx xxxxxxxxx --=xx xxxxxx xxxxxx xxxx & xx xx xxxxxxxxxxxxxx xxx xxx xxxxxxxxxxxxxxxxx xxxxxxxxx xxxxxxx xx. xxxxx. xxxxxx xxxxxxxxx xxx.: ++xx x xxxx xxxxx xxx : ++xx x xxxx xxxxx =xx xxxx://xxx.xxxxxxxxxxxx.xx xxxxxxx xxxxxxxxxxxxx xxx xxxxxx: xxxx://xxxxxxxxxx.xxxxxx.xx.xx/xxx/xxxxxx.xxxx -- xxxx xx xxxxx xxxxxxx. xx xxxxxx xxxxxx xxx xxx xxxx xxxxxxx xxxxxx! = -- -- xx xxxxxxx xx xxx xxxxxx, xx xxxx xxxx xxxx x xxxxxx xxxxxxxx! = -- -- Return-path: <xxxxx(a)xxxxxxxxxxxx.xx> Envelope-to: xxxxx(a)xxxxxxxxx.xxxxxxxxxxxx.xx Delivery-date: xxx, xx xxx xxxx xx:xx:xx +xxxx Received: xxxx xxx.xxx.xxx.xxx.xxxxxxxx.xxx.xxxx.xxx ([xxx.xxx.xxx.xxx] xxxx=xxxxxxxxxxx) xx xxxxxxxxx.xxxxxxxxxxxx.xx xxxx xxxxxxx (xxxx.x:xxxxxxxxxxxxxxxxxxxxxxxxxxxx:xxx) (xxxx x.xx) (xxxxxxxx-xxxx <xxxxx(a)xxxxxxxxxxxx.xx>) xx xxxxxx-xxxxxx-xx xxx xxxxx(a)xxxxxxxxx.xxxxxxxxxxxx.xx; xxx, xx xxx xxxx xx:xx:xx +xxxx From: xxxxxxxxx xxxxxxx <xxxxx(a)xxxxxxxxxxxx.xx> To: =?xxx-x?x?xxxxxxxxxxxxxxxxxxxx?= <xxxxx(a)xxxxxxxxx.xxxxxxxxxxxx.xx> MIME-Version: x.x Content-Type: text/html; xxxxxxx="xxx-x" Content-Transfer-Encoding: 8bit Message-Id: <xxxxxxx-xxxxxx-xx(a)xxxxxxxxx.xxxxxxxxxxxx.xx> Date: Mon, 13 Nov 2017 09:52:46 +0100 X-SA-Exim-Connect-IP: xxx.xxx.xxx.xxx X-SA-Exim-Mail-From: xxxxx(a)xxxxxxxxxxxx.xx X-Spam-Checker-Version: xxxxxxxxxxxx x.x.x (xxxx-xx-xx) xx xxxxxxxxx X-Spam-Level: X-Spam-Status: xx, xxxxx=x.x xxxxxxxx=x.x xxxxx=xxxxxxxxxxx,xxxxxxxxxxxx, xxxxxxxxxxxxxxxxxxxxx,xxxxxxxxxxxxxx,xxxxxxxxxxx xxxxxxxxx=xx xxxxxxxxxxxxxxx=xx xxxxxxx=x.x.x Subject: =?xxx-x?x?xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx==?= X-SA-Exim-Version: x.x.x (xxxxx xxx, xx xxx xxxx xx:xx:xx +xxxx) X-SA-Exim-Scanned: xxx (xx xxxxxxxxx.xxxxxxxxxxxx.xx) xxxxx x-xxxx-xxxxxxxxx xxxxx xxx xxxxxxxxx xxxxxxx xxxxxxxxxxx xäxxxxx xxx xxxxxxx xxx xxxxxxxxxxxxxxxxxx xxxxxxxx.

4 3

[Mailbox aliases] Sponsoring of bug fixing
by azurit＠pobox.sk 18 Nov '17

18 Nov '17

Hi, how much would it cost to sponsor a complete* fix of mailbox aliases? https://www.dovecot.org/list/dovecot/2015-June/101176.html https://dovecot.org/list/dovecot/2016-September/105459.html * i.e. without any workarounds like disabling mailbox_list_index Thank you for info. azur

2 3

Auto-subscribe but not auto-create
by azurit＠pobox.sk 17 Nov '17

17 Nov '17

Hi, is it, somehow, possible to auto-subscribe a folder IF it exists but NOT auto-create it if it doesn't exists? We have folder 'Spam' which we are using to store messages marked as spam but users are not subscribing to it (most of them simply don't know what it means to subscribe a folder) and are complaining about missing e-mails (which are in 'Spam' folder but they don't see them). Even more, some users don't want from us to move spams into Spam folder so our sieve scripts are set to move spams into INBOX if 'Spam' folder doesn't exists (such users simply remove 'Spam' folder - this is why we don't want to auto-create it). Thanks.

2 2

Dovecot lmtp doesn't log
by Tomislav Perisic 17 Nov '17

17 Nov '17

Hi, We have 2 servers, server A and server B. Server A has: Postfix dovecot-2.2.33.2-1.el6.x86_64 Server B has: dovecot-2.2.33.2-1.el6.x86_64 dovecot-pigeonhole-2.2.33.2-1.el6.x86_64 Server A receives email on postfix, dovecot then takes that email from postfix and proxies it to Server B Dovecot. Dovecot on Server B takes the proxied email and delivers it with lmtp to the user inboxes. The problem is that the dovecot on server B Doesn't log anything regarding the emails that are being delivered to the mailbox via lmtp. Dovecot on server A logs everything perfectly regarding the proxy, so my assumption is that there is an issue with Dovecot lmtp logging. We changed the logging from syslog directly to a file and we noticed the same problem, missing log entries. We also tried turning on verbose logging and it didn't help. Server B: Red Hat 6.7 x86_64 rpm -qa | grep dove dovecot-2.2.33.2-1.el6.x86_64 dovecot-pigeonhole-2.2.33.2-1.el6.x86_64 doveconf -n # 2.2.33.2: /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.21 auth_cache_negative_ttl = 0 auth_debug = yes auth_debug_passwords = yes auth_verbose = yes listen = * mail_debug = yes mail_gid = mail mail_location = maildir:~/Maildir mail_plugins = " quota zlib" mail_uid = vmail managesieve_notify_capability = mailto namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Sent { auto = subscribe special_use = \Sent } mailbox Spam { auto = subscribe special_use = \Junk } mailbox Trash { auto = subscribe special_use = \Trash } mailbox Virus { auto = subscribe } plugin { quota = maildir:User quota sieve_extensions = +editheader sieve_max_actions = 32 sieve_max_redirects = 4 sieve_max_script_size = 1M sieve_quota_max_scripts = 0 sieve_trace_debug = yes sieve_trace_level = matching sieve_vacation_dont_check_recipient = yes sieve_vacation_send_from_recipient = yes sieve_vacation_use_original_recipient = yes zlib_save = gz zlib_save_level = 6 } protocols = imap pop3 lmtp sieve service auth { unix_listener auth-userdb { group = mail mode = 0666 user = vmail } } service lmtp { inet_listener lmtp { port = xx } } service managesieve-login { inet_listener sieve { port = xx } service_count = 1 } protocol lmtp { mail_plugins = " quota zlib sieve mail_log notify" } protocol imap { mail_plugins = " quota zlib imap_quota imap_zlib" } protocol sieve { managesieve_implementation_string = dovecot managesieve_logout_format = bytes ( in=%i : out=%o ) managesieve_max_line_length = 65536 managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave }

1 0

Re: Postlogin script
by Joseph Tam 16 Nov '17

16 Nov '17

"j.emerlik" <j.emerlik(a)gmail.com> writes: > I would like to prepare postlogin a script that allow imap connection to > roundcube for all but restrict imap access for selected users. "from" roundcube? > Is possible in condition IF use IP addresses as range or with mask (because > I've more than one web servers) ? Of course -- many ways to skin this cat. If you have only a handful of IPs case "$IP" in 12.34.56.78) exec "$@";; 23.45.67.89) exec "$@";; ... esac If you have CIDR that align neatly on octet boundaries case "$IP" in 12.34.56.*) exec "$@";; 23.45.67.*) exec "$@";; ... esac The toughest situation (using script techniques) is for CIDR ranges just shy of a full octet boundary e.g. /25. You can use "cut -d .", "IFS=." or "expr" to break the IP into octets, then test the components. e.g. 12.34.56.0/25 # Example 1 PART1=`echo $IP | cut -d. -f1,2,3` PART2=`echo $IP | cut -d. -f4` [ "$PART1" = "12.34.56" -a "$PART2" -ge 0 -a "$PART2" -le 127 ] && exec "$@" # Example 2 PART2=`expr "$IP" : '.*\.$[0-9]*$' expr "$IP" : "12.34.56." && [ "$PART2" -ge 0 -a "$PART2" -le 127 ] && exec "$@" # Example 3 (dodgy, I haven't fully thought this through) `echo "$IP" | { IFS=. read a b c PART2; [ "$a.$b.$c" = "12.34.56" -a "$PART2" -ge 0 -a "$PART2" -le 127 ] && echo "exec $@"; }` If you have a busy IMAP server, you'll probably want to use Aki's passdb solution instead, rather than incurring the execution overhead for each and every authentication. Joseph Tam <jtam.home(a)gmail.com>

4 5

Plugin virtual, Horde BAD IMAP QRESYNC not enabled
by Jakob Schürz 15 Nov '17

15 Nov '17

Hi there! I'm new on this list, so hello to all! First i want say, that dovecot is a really great mailserver. I use it since many years for my private usecase. I'm planning to setup a new Mailserver, so i'm fiddeling around to understand dovecot better and get a "perfect" Mailserver. (Linux and Win10) Outlook, k9mail and the gmail-app on android. I want to leave google behind me, so i'm searching for a good server for cloudbased and selfhosted calendar- and addressbook-server. On some discussion in debianforum.de i got the hint, to use horde. So i installed horde from pear. Got ActiveSync working with the Android and Outlook. Mails, Calendar and Addressbook... very fine. But then i run into a gotcha. There is a problem with some mails in dovecots virtual mailboxes. I tried a lot to find out, how to debug this. First i thought, it's a problem from horde, because the problem is only with horde-client. Some Emails are not shown in horde. Exactly, they are not shown in horde on dovecots virtual mailboxes (plugin virtual in a separate virtual namespace) If i try to open this email in its original directory, it gets opened without any problem. So, when i try to open it from within the virtual mailbox, i get this error: ---8<------ Nov 14 23:29:52 aldebaran dovecot[2495]: imap(jakob): Panic: file index-mail-binary.c: line 586 (index_mail_get_binary_stream): assertion failed: (mail->data.stream != NULL) Nov 14 23:29:52 aldebaran dovecot[2495]: imap(jakob): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x95272) [0x7f671137e272] -> /usr/lib/dovecot/libdovecot.so.0(+0x9536d) [0x7f671137e36d] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7f6711314951] -> /usr/lib/dovecot/libdovecot-storage.so.0(index_mail_get_binary_stream+0x238) [0x7f67116b3de8] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_get_binary_stream+0x60) [0x7f6711640fa0] -> /usr/lib/dovecot/libdovecot-storage.so.0(imap_msgpart_open+0x139) [0x7f67116f40f9] -> dovecot/imap [jakob 192.168.0.14 UID FETCH](+0x1ebbc) [0x55bef3095bbc] -> dovecot/imap [jakob 192.168.0.14 UID FETCH](+0x1cfb6) [0x55bef3093fb6] -> dovecot/imap [jakob 192.168.0.14 UID FETCH](imap_fetch_more+0x39) [0x55bef30950e9] -> dovecot/imap [jakob 192.168.0.14 UID FETCH](cmd_fetch+0x33b) [0x55bef3086d9b] -> dovecot/imap [jakob 192.168.0.14 UID FETCH](command_exec+0xa5) [0x55bef3092735] -> dovecot/imap [jakob 192.168.0.14 UID FETCH](+0x199c2) [0x55bef30909c2] -> dovecot/imap [jakob 192.168.0.14 UID FETCH](+0x19a4c) [0x55bef3090a4c] -> dovecot/imap [jakob 192.168.0.14 UID FETCH](client_handle_input+0x1b5) [0x55bef3090e55] -> dovecot/imap [jakob 192.168.0.14 UID FETCH](client_input+0x86) [0x55bef30913c6] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x52) [0x7f6711392dd2] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0x109) [0x7f6711394409] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0x3c) [0x7f6711392e6c] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x38) [0x7f6711393018] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f671131ae93] -> dovecot/imap [jakob 192.168.0.14 UID FETCH](main+0x328) [0x55bef3083e68] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf1) [0x7f6710f6a2b1] -> dovecot/imap [jakob 192.168.0.14 UID FETCH](_start+0x2a) [0x55bef3083fea] Nov 14 23:29:52 aldebaran dovecot[2495]: imap(jakob): Fatal: master: service(imap): child 2704 killed with signal 6 (core dumps disabled) ---8<------ So i activated rawlog as after-login executeable. The IMAP-dialog when opening this email is: ---8<------ 9 OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDSUBJECT MULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS BINARY MOVE XDOVECOT SPECIAL-USE QUOTA ACL RIGHTS=texk] Logged in 10 BAD Error in IMAP command SELECT: QRESYNC not enabled (0.000 + 0.000 secs). 11 OK No quota (0.000 + 0.000 secs). ---8<------ If found only one Report for this problem, but on regular imap-folders, and there was not really a solution. This report is from 2015. On regular folders, i have no problem with this emails, only on virtual folders. So i think, it is a problem of the virtual-plugin. Here is one of this failing emails: ---8<------ Return-path: <jakob(a)mydomain.example> Envelope-to: jakob(a)mydomain.example Delivery-date: Mon, 13 Nov 2017 09:23:52 +0100 Received: from 1.2.3.4.wireless.dyn.drei.com ([1.2.3.4] helo=marketingnh) by mydomain.example with esmtpsa (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.89) (envelope-from <jakob(a)mydomain2.example>) id 1eEA24-0002AR-IW for jakob(a)mydomain.example; Mon, 13 Nov 2017 09:23:52 +0100 From: Microsoft Outlook <jakob(a)mydomain.example> To: =?utf-8?B?SmFrb2J1cyBTY2jDvHJ6?= <jakob(a)mydomain.example> MIME-Version: 1.0 Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: 8bit Message-Id: <E1eEA24-0002AR-IW(a)mydomain.example> Date: Mon, 13 Nov 2017 09:23:52 +0100 X-SA-Exim-Connect-IP: 178.114.188.235 X-SA-Exim-Mail-From: jakob(a)mydomain.example X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on aldebaran X-Spam-Level: X-Spam-Status: No, score=0.7 required=5.0 tests=ALL_TRUSTED,HTML_MESSAGE, HTML_MIME_NO_HTML_TAG,MIME_HTML_ONLY,TVD_RCVD_IP autolearn=no autolearn_force=no version=3.4.1 Subject: =?utf-8?B?TWljcm9zb2Z0IE91dGxvb2stVGVzdG5hY2hyaWNodA==?= X-SA-Exim-Version: 4.2.1 (built Tue, 02 Aug 2016 21:08:31 +0000) X-SA-Exim-Scanned: Yes (on aldebaran.mydomain.example) Diese E-Mail-Nachricht wurde von Microsoft Outlook automatisch wÃ¤hrend des Testens der Kontoeinstellungen gesendet. ---8<------ my dovecot-config is: ---8<------ # dovecot -n # 2.2.27 (c0f36b0): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.16 (fed8554) # OS: Linux 4.13.0-trunk-amd64 x86_64 Debian 9.1 btrfs auth_mechanisms = plain login cram-md5 digest-md5 auth_socket_path = /var/run/dovecot/auth-userdb first_valid_uid = 1000 imap_capability = +XDOVECOT imap_client_workarounds = tb-extra-mailbox-sep lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes listen = *, ::1 login_trusted_networks = 127.0.0.1/8 192.168.0.0/24 192.168.1.0/24 172.17.0.0/24 172.18.0.0/24 mail_debug = yes mail_gid = vmail mail_home = /var/mail/%u mail_location = maildir:/var/mail/%u/Maildir:LAYOUT=fs:INDEX=/var/lib/dovecot/db/indexes/Maildir/%u:CONTROL=/var/lib/dovecot/db/control/Maildir/%u mail_plugins = zlib quota acl listescape mail_log notify virtual mail_privileged_group = vmail mail_server_admin = mailto:jakob@xundeenergie.at mail_shared_explicit_inbox = yes mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext mmap_disable = yes namespace { hidden = no ignore_on_failure = no inbox = no list = children location = maildir:/var/mail/%%u/Maildir:LAYOUT=fs:INDEX=/var/lib/dovecot/db/indexes/%u/shared/%%u:INDEXPVT=/var/lib/dovecot/db/indexes/%u/shared/%%u prefix = shared$%%u$ separator = $ subscriptions = no type = shared } namespace { hidden = no inbox = no list = children location = maildir:/var/mail/mailarchiv/%u/:LAYOUT=fs:INDEX=/var/lib/dovecot/db/indexes/%u/mailarchiv:INDEXPVT=/var/lib/dovecot/db/indexes/%u/mailarchiv mailbox incoming { auto = create } mailbox outgoing { auto = create } prefix = Mailarchiv$ separator = $ subscriptions = no type = public } namespace { list = children location = maildir:/var/mail/public/:LAYOUT=fs:INDEX=/var/lib/dovecot/db/indexes/public/%u:INDEXPVT=/var/lib/dovecot/db/indexes/public/%u prefix = Roseggergasse$ separator = $ subscriptions = no type = public } namespace Virtual { hidden = no list = children location = virtual:/var/mail/virtual:INDEX=/var/lib/dovecot/db/indexes/virtual/%u:INDEXPVT=/var/lib/dovecot/db/indexes/virtual/%u mailbox "Deleted Messages" { auto = no special_use = \Trash } mailbox Drafts { auto = no special_use = \Drafts } mailbox Entwürfe { auto = no special_use = \Drafts } mailbox "Gelöschte Elemente" { auto = no special_use = \Trash } mailbox "Gelöschte Objekte" { auto = no special_use = \Trash } mailbox Gesendet { auto = no special_use = \Sent } mailbox "Gesendete Elemente" { auto = no special_use = \Sent } mailbox "Gesendete Objekte" { auto = no special_use = \Sent } mailbox Mistkübel { auto = no special_use = \Trash } mailbox Papierkorb { auto = no special_use = \Trash } mailbox Sent { auto = no special_use = \Sent } mailbox "Sent Messages" { auto = no special_use = \Sent } mailbox Trash { auto = no special_use = \Trash } mailbox Virtual$Alle { comment = All my messages } mailbox Virtual$Markierte { comment = All my unread messages } mailbox "Virtual$Neue Mails" { comment = All my unread messages } mailbox "Virtual$Ungelesene Mails" { comment = All my unread messages } prefix = Virtual$ separator = $ subscriptions = no } namespace inbox { hidden = no inbox = yes location = mailbox Archiv { auto = no special_use = \Archive } mailbox Archive { auto = no special_use = \Archive } mailbox Archives { auto = no special_use = \Archive } mailbox "Deleted Messages" { auto = no special_use = \Trash } mailbox Drafts { auto = no special_use = \Drafts } mailbox Entwürfe { auto = no special_use = \Drafts } mailbox "Gelöschte Elemente" { auto = no special_use = \Trash } mailbox "Gelöschte Objekte" { auto = no special_use = \Trash } mailbox Gesendet { auto = no special_use = \Sent } mailbox "Gesendete Elemente" { auto = no special_use = \Sent } mailbox "Gesendete Objekte" { auto = no special_use = \Sent } mailbox Important { auto = no } mailbox Junk { auto = subscribe autoexpunge = 30 days special_use = \Junk } mailbox Mistkübel { auto = no special_use = \Trash } mailbox Papierkorb { auto = no special_use = \Trash } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { auto = no special_use = \Sent } mailbox Spam { auto = no special_use = \Junk } mailbox Trash { auto = no special_use = \Trash } mailbox Wichtig { auto = create } prefix = INBOX$ separator = $ subscriptions = no } namespace subscriptions { hidden = yes list = no location = prefix = subscriptions = yes } passdb { args = scheme=CRYPT username_format=%u /etc/dovecot/users driver = passwd-file } plugin { acl = vfile:/etc/dovecot/dovecot-acl:cache_secs=300 acl_anyone = allow acl_shared_dict = file:/var/lib/dovecot/db/shared-mailboxes.db fts = lucene fts_autoindex = yes fts_autoindex_max_recent_msgs = 80 fts_decoder = decode2text.sh fts_index_timeout = 90 fts_lucene = whitespace_chars=@. normalize no_snowball mail_home = /var/mail/%u setting_name = sieve, managedsieve sieve = file:/var/spool/dovecot/sieve/%n;active=/var/spool/dovecot/sieve/%n/%n.sieve } postmaster_address = postmaster@localhost protocols = " imap lmtp sieve sieve" service anvil { unix_listener anvil-auth-penalty { mode = 00 } } service auth { unix_listener auth-client { group = vmail mode = 0666 user = vmail } unix_listener auth-userdb { group = vmail mode = 0666 user = vmail } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } process_min_avail = 1 } service imap { executable = imap postlogin process_limit = 1024 } service postlogin { executable = script-login -d rawlog } ssl = required ssl_cert = </etc/dovecot/dovecot.crt ssl_cipher_list = ALL:!ADH:!LOW:!SSLv2:!SSLv3:!EXP:!aNULL:+HIGH:+MEDIUM ssl_key = # hidden, use -P to show it ssl_protocols = TLSv1.2 TLSv1.1 TLSv1 !SSLv3 userdb { args = username_format=%u /etc/dovecot/users default_fields = home=/var/mail/%u driver = passwd-file } verbose_proctitle = yes protocol lmtp { mail_plugins = zlib quota acl listescape mail_log notify virtual quota sieve acl } protocol lda { mail_plugins = zlib quota acl listescape mail_log notify virtual quota sieve acl } protocol imap { mail_max_userip_connections = 10 mail_plugins = zlib quota acl listescape mail_log notify virtual imap_quota imap_acl } ---8<------ Hope you can help me. It's a certain showstopper for me... Greetings Jakob

3 7

Authenticate Postfix through Dovecot with slightly different LDAP settings
by Jakob Lenfers 15 Nov '17

15 Nov '17

Hi, I'm setting up a server with Dovecot (2.2.2) and Postfix (3.1.0). Dovecot authenticates against LDAP and Postfix uses Dovecots SASL. That already works fine. But I would like to have slightly different LDAP settings for Dovecot and Postfix. Current setup: passdb { driver = ldap args = /etc/dovecot/dovecot-ldap.conf.ext } userdb { driver = ldap args = /etc/dovecot/dovecot-ldap.conf.ext } Excerpt from dovecot-ldap.conf.ext: user_filter = (& \ (objectClass=gosaMailAccount) \ (allowedServices=*I*) \ (uid=%u) \ ) I wanted to have sparate LDAP filters (allowedServices=*I* for Dovecot and allowedServices=*S* for Postfix), to be able to disable SMTP and IMAP independently. Does anybody know a way to separate those settings? Thanks in advance, Jakob

2 2

dict host param and fqdn
by Stéphane Cottin 15 Nov '17

15 Nov '17

Hi, I would like to use a fqdn instead of an IP address as redis host quota_clone_dict = redis:host=redis.host.name:port=6379 But only ip adresses are supported Error: quota_clone_dict: Failed to initialize 'redis:host=redis.host.name:port=6379': dict redis: Invalid IP: redis.host.name Why is name resolution not implemented here ? Is it for performance considerations ? Stéphane

1 0

Building dovecot 2.2.33.2 is broken with uclibc-ng
by Bernd Kuhls 14 Nov '17

14 Nov '17

Hi, this commit https://github.com/dovecot/core/commit/c9d76e2baf653fa5504d6849e5c1aae32eff… added code which can not be compiled with uclibc-ng 1.0.26 using buildroot: make[3]: Entering directory '/home/bernd/buildroot/br4/output/build/dovecot-2.2.33.2/src/lib-test' /bin/bash ../../libtool --tag=CC --mode=compile /home/bernd/buildroot/br4/output/host/bin/i586-buildroot-linux-uclibc-gcc -DHAVE_CONFIG_H -I. -I../.. -I../../src/lib -I../../src/lib-charset -D_LARGEFILE_SOURCE -D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64 -std=gnu99 -D_LARGEFILE_SOURCE -D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64 -Os -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime -Wstrict-aliasing=2 -I/home/bernd/buildroot/br4/output/host/i586-buildroot-linux-uclibc/sysroot/usr/include -c -o test-common.lo test-common.c libtool: compile: /home/bernd/buildroot/br4/output/host/bin/i586-buildroot-linux-uclibc-gcc -DHAVE_CONFIG_H -I. -I../.. -I../../src/lib -I../../src/lib-charset -D_LARGEFILE_SOURCE -D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64 -std=gnu99 -D_LARGEFILE_SOURCE -D_LARGEFILE64_SOURCE -D_FILE_OFFSET_BITS=64 -Os -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime -Wstrict-aliasing=2 -I/home/bernd/buildroot/br4/output/host/i586-buildroot-linux-uclibc/sysroot/usr/include -c test-common.c -fPIC -DPIC -o .libs/test-common.o In file included from /home/bernd/buildroot/br4/output/host/i586-buildroot-linux-uclibc/sysroot/usr/include/bits/byteswap-common.h:34:0, from /home/bernd/buildroot/br4/output/host/i586-buildroot-linux-uclibc/sysroot/usr/include/bits/byteswap.h:55, from /home/bernd/buildroot/br4/output/host/i586-buildroot-linux-uclibc/sysroot/usr/include/byteswap.h:22, from /home/bernd/buildroot/br4/output/host/i586-buildroot-linux-uclibc/sysroot/usr/include/endian.h:59, from /home/bernd/buildroot/br4/output/host/i586-buildroot-linux-uclibc/sysroot/usr/include/bits/waitstatus.h:72, from /home/bernd/buildroot/br4/output/host/i586-buildroot-linux-uclibc/sysroot/usr/include/stdlib.h:41, from ../../src/lib/lib.h:11, from test-common.c:3: ../../src/lib/byteorder.h:32:24: error: expected identifier or '(' before '__extension__' static inline uint16_t bswap_16(uint16_t in); ^ In file included from /home/bernd/buildroot/br4/output/host/i586-buildroot-linux-uclibc/sysroot/usr/include/endian.h:59:0, from /home/bernd/buildroot/br4/output/host/i586-buildroot-linux-uclibc/sysroot/usr/include/bits/waitstatus.h:72, from /home/bernd/buildroot/br4/output/host/i586-buildroot-linux-uclibc/sysroot/usr/include/stdlib.h:41, from ../../src/lib/lib.h:11, from test-common.c:3: ../../src/lib/byteorder.h:92:24: error: redefinition of '__bswap_64' static inline uint64_t bswap_64(uint64_t in) ^ In file included from /home/bernd/buildroot/br4/output/host/i586-buildroot-linux-uclibc/sysroot/usr/include/bits/byteswap.h:55:0, from /home/bernd/buildroot/br4/output/host/i586-buildroot-linux-uclibc/sysroot/usr/include/byteswap.h:22, from /home/bernd/buildroot/br4/output/host/i586-buildroot-linux-uclibc/sysroot/usr/include/endian.h:59, from /home/bernd/buildroot/br4/output/host/i586-buildroot-linux-uclibc/sysroot/usr/include/bits/waitstatus.h:72, from /home/bernd/buildroot/br4/output/host/i586-buildroot-linux-uclibc/sysroot/usr/include/stdlib.h:41, from ../../src/lib/lib.h:11, from test-common.c:3: /home/bernd/buildroot/br4/output/host/i586-buildroot-linux-uclibc/sysroot/usr/include/bits/byteswap-common.h:75:1: note: previous definition of '__bswap_64' was here __bswap_64 (__uint64_t __bsx) ^~~~~~~~~~ In file included from /home/bernd/buildroot/br4/output/host/i586-buildroot-linux-uclibc/sysroot/usr/include/endian.h:59:0, from /home/bernd/buildroot/br4/output/host/i586-buildroot-linux-uclibc/sysroot/usr/include/bits/waitstatus.h:72, from /home/bernd/buildroot/br4/output/host/i586-buildroot-linux-uclibc/sysroot/usr/include/stdlib.h:41, from ../../src/lib/lib.h:11, from test-common.c:3: ../../src/lib/byteorder.h:104:24: error: redefinition of '__bswap_32' static inline uint32_t bswap_32(uint32_t in) ^ In file included from /home/bernd/buildroot/br4/output/host/i586-buildroot-linux-uclibc/sysroot/usr/include/bits/byteswap.h:55:0, from /home/bernd/buildroot/br4/output/host/i586-buildroot-linux-uclibc/sysroot/usr/include/byteswap.h:22, from /home/bernd/buildroot/br4/output/host/i586-buildroot-linux-uclibc/sysroot/usr/include/endian.h:59, from /home/bernd/buildroot/br4/output/host/i586-buildroot-linux-uclibc/sysroot/usr/include/bits/waitstatus.h:72, from /home/bernd/buildroot/br4/output/host/i586-buildroot-linux-uclibc/sysroot/usr/include/stdlib.h:41, from ../../src/lib/lib.h:11, from test-common.c:3: /home/bernd/buildroot/br4/output/host/i586-buildroot-linux-uclibc/sysroot/usr/include/bits/byteswap-common.h:44:1: note: previous definition of '__bswap_32' was here __bswap_32 (unsigned int __bsx) ^~~~~~~~~~ In file included from /home/bernd/buildroot/br4/output/host/i586-buildroot-linux-uclibc/sysroot/usr/include/bits/byteswap-common.h:34:0, from /home/bernd/buildroot/br4/output/host/i586-buildroot-linux-uclibc/sysroot/usr/include/bits/byteswap.h:55, from /home/bernd/buildroot/br4/output/host/i586-buildroot-linux-uclibc/sysroot/usr/include/byteswap.h:22, from /home/bernd/buildroot/br4/output/host/i586-buildroot-linux-uclibc/sysroot/usr/include/endian.h:59, from /home/bernd/buildroot/br4/output/host/i586-buildroot-linux-uclibc/sysroot/usr/include/bits/waitstatus.h:72, from /home/bernd/buildroot/br4/output/host/i586-buildroot-linux-uclibc/sysroot/usr/include/stdlib.h:41, from ../../src/lib/lib.h:11, from test-common.c:3: ../../src/lib/byteorder.h:112:24: error: expected identifier or '(' before '__extension__' static inline uint16_t bswap_16(uint16_t in) ^ Makefile:491: recipe for target 'test-common.lo' failed To reproduce try something like this: $ git clone git://git.buildroot.net/buildroot $ cd buildroot $ echo "BR2_PACKAGE_DOVECOT=y" > dovecot.defconfig $ make defconfig BR2_DEFCONFIG=dovecot.defconfig Patch buildroot: diff --git a/package/dovecot/dovecot.hash b/package/dovecot/dovecot.hash index 184745b394..3dbc50739c 100644 --- a/package/dovecot/dovecot.hash +++ b/package/dovecot/dovecot.hash @@ -1,2 +1,2 @@ # Locally computed after checking signature -sha256 034be40907748128d65088a4f59789b2f99ae7b33a88974eae0b6a68ece376a1 dovecot-2.2.31.tar.gz +sha256 fe1e3b78609a56ee22fc209077e4b75348fa1bbd54c46f52bde2472a4c4cee84 dovecot-2.2.33.2.tar.gz diff --git a/package/dovecot/dovecot.mk b/package/dovecot/dovecot.mk index 4cc6ae4de7..25a78b9f78 100644 --- a/package/dovecot/dovecot.mk +++ b/package/dovecot/dovecot.mk @@ -5,7 +5,7 @@ ################################################################################ DOVECOT_VERSION_MAJOR = 2.2 -DOVECOT_VERSION = $(DOVECOT_VERSION_MAJOR).31 +DOVECOT_VERSION = $(DOVECOT_VERSION_MAJOR).33.2 DOVECOT_SITE = http://www.dovecot.org/releases/$(DOVECOT_VERSION_MAJOR) DOVECOT_INSTALL_STAGING = YES DOVECOT_LICENSE = LGPL-2.1 Start the build using "make dovecot" and get some coffee/tee ;) Regards, Bernd

2 3

Doubt about replacing alt storage disks
by Amol Kulkarni 14 Nov '17

14 Nov '17

Hello, I have a working setup of dovecot 2.2.19 on centos 6. The mailbox format is mdbox. I've configured primary and alt storage. Now I want to replace the disk of the alt storage only. Broadly my plan to change it is as follows : 1. Mount the new disk on a temporary server. 2. Rsync data only from alt storage to the new disk - while the original server is live. This may take a few days. In between altmove will happen on the live disk. 3. Once the basic rsync is complete, stop all services on the live server 4. Mount the new disk on live server, in addition to live disk 5. Do final rsync - with the delete option 6. Unmount the live disk and mount new disk in its place 7. Start services I've 2 doubts abt this plan : 1. I've tried the first part until step 2. After the first rsync, I found unexpected differences between the m.* files on the live and new disk. The new disk has some additional files for some users, which are not present on the live disk. Since the rsync was run without delete option, these files were not deleted from the new disk. Does altmove delete some m.* files to reorganize mail ? Can end user mail deletion cause deletion of m.* files ? 2. I'm worried about commonly occuring problems with such movement : duplicate mail download in pop / resync in imap / index corruption. Is there any way to check integrity of data before switching to the new disk ? Thanks in advance, Amol.

1 0

Re: IMAP connections with ".eml" in the username - bot attack.
by Joseph Tam 14 Nov '17

14 Nov '17

James Brown writes: > We are seeing lots of IMAP login attempts like this: > > dovecot[363]: imap-login: Disconnected (auth failed, 1 attempts in 6 secs): user=<xcentrex5fxnewx5fxyorkx5fxquotex5fxisx5fxreadyx2dxx2dx426453.eml>, method=PLAIN, rip=197.255.60.118, > dovecot[363]: imap-login: Disconnected (auth failed, 1 attempts in 6 secs): user=<xmatchingx5fxyourx5fxrecentx5fxvisitx5fxonx5fxx2dxx2dx121584.eml(a)bordo.com.au>, method=PLAIN, rip=37.235.28.229, > > etc. > Is anyone else experiencing this? How is such an attack is supposed to > ever succeed? What are they trying to accomplish? Haven't seen it. I agree with another poster -- probably a spammer screwed up their spamware configuration. > Any ideas on how to mitigate it? Mitigate what? Even by your account, this won't get them anywhere, unless it's so fast and heavy, it's DoS'ing your system. Other than that, they're just bloating your logs, nothing more. If you want to pre-empt this via firewall, you'll need to get extremely lucky to characterise these IPs (a sample of 2 is not enough) in such a way as to able to formulate a firewall rule. Mostly likely, this is a rented botnet. If you somehow figure out an oracular rule to discern bot from some user road-warrior *before* they connect, give me a call. Sean Greenslade <sean(a)seangreenslade.com> writes: > Here's a fun laugh I found in one of my webserver logs: > >> 1446098745 218.249.219.2 "GET http://www.sciencedirect.com/science/book/9780123525512" 400 425 "" "Mozilla/4.0 (compatible; MSIE 4.01; Windows 95)" > > Not my website, nothing even close to that url is hosted on that server. Common proxy target. They're testing whether your web server will support anonymous web proxying. Almost exclusively from China. Joseph Tam <jtam.home(a)gmail.com>

1 0

SMTP and IMAP authentication critically fails out of the blue
by Felix Plapper 14 Nov '17

14 Nov '17

Hello Community and first things First: dovecot --version2.2.9dovecot -n# 2.2.9: /etc/dovecot/dovecot.conf# OS: Linux 3.13.0-042stab125.5 x86_64 Ubuntu 14.04.5 LTSauth_mechanisms = plain logindict { sqlquota = mysql:/etc/dovecot/dovecot-dict-sql.conf}listen = *,[::]log_timestamp = "%Y-%m-%d %H:%M:%S "login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c %kmail_fsync = alwaysmail_home = /var/vmail/%d/%nmail_location = maildir:~/mail_nfs_index = yesmail_nfs_storage = yesmail_plugins = quota aclmanagesieve_notify_capability = mailtomanagesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihavemmap_disable = yesnamespace { list = yes location = maildir:%%h/:INDEXPVT=~/Shared/%%u prefix = Shared/%%u/ separator = / subscriptions = yes type = shared}namespace inbox { inbox = yes location = mailbox Archiv { special_use = \Archive } mailbox Archive { auto = subscribe special_use = \Archive } mailbox Archives { special_use = \Archive } mailbox "Deleted Messages" { special_use = \Trash } mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Entwürfe { special_use = \Drafts } mailbox "Gelöschte Objekte" { special_use = \Trash } mailbox Gesendet { special_use = \Sent } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Papierkorb { special_use = \Trash } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = separator = /}passdb { args = /etc/dovecot/dovecot-mysql.conf driver = sql}plugin { acl = vfile acl_anyone = allow acl_shared_dict = file:/var/vmail/shared-mailboxes.db quota = dict:User quota::proxy::sqlquota quota_rule2 = Trash:storage=+100%% sieve = /var/vmail/sieve/%u.sieve sieve_after = /var/vmail/sieve/global.sieve sieve_max_script_size = 1M sieve_quota_max_scripts = 0 sieve_quota_max_storage = 0}protocols = imap sieve lmtp pop3service auth { unix_listener /var/spool/postfix/private/auth_dovecot { group = postfix mode = 0660 user = postfix } unix_listener auth-master { mode = 0600 user = vmail } unix_listener auth-userdb { mode = 0600 user = vmail } user = root}service dict { unix_listener dict { group = vmail mode = 0660 user = vmail }}service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } user = vmail}service managesieve-login { inet_listener sieve { port = 4190 } process_min_avail = 2 service_count = 1 vsz_limit = 128 M}service managesieve { process_limit = 256}ssl_cert = </etc/ssl/mail/mail.crtssl_cipher_list = EDH+CAMELLIA:EDH+aRSA:EECDH+aRSA+AESGCM:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH:+CAMELLIA256:+AES256:+CAMELLIA128:+AES128:+SSLv3:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!DSS:!RC4:!SEED:!ECDSA:CAMELLIA256-SHA:AES256-SHA:CAMELLIA128-SHA:AES128-SHAssl_dh_parameters_length = 2048ssl_key = </etc/ssl/mail/mail.keyssl_protocols = !SSLv3 !SSLv2userdb { args = /etc/dovecot/dovecot-mysql.conf driver = sql}protocol imap { mail_plugins = quota imap_quota imap_acl acl}protocol lmtp { auth_socket_path = /var/run/dovecot/auth-master mail_plugins = quota sieve acl postmaster_address = postmaster(a)domain1.com}protocol sieve { managesieve_logout_format = bytes=%i/%o}remote 127.0.0.1 { disable_plaintext_auth = no}########################################### Mail.errNov 13 23:59:06 webdev dovecot: auth: Error: PLAIN(account(a)domain2.com, XXX.XXX.XXX.XXX,<y869CoDETEST4dHk>): Request 29154.1 timed out after 150 secs, state=1########################################### Mail.logNov 13 23:27:54 webdev dovecot: auth: Error: LOGIN(account(a)domain1.com,IP.IP.IP.IP,<oN4ly+TestDZ6dHk>): Request 28118.1 timed out after 150 secs, state=1Nov 13 23:27:57 webdev dovecot: auth: Error: PLAIN( account(a)domain2.com,XXX.XXX.XXX.XXX,<FAxKe+JaatES7tHk>): Request 28120.1 timed out after 150 secs, state=1Nov 13 23:28:24 webdev dovecot: imap-login: Disconnected: Inactivity during authentication (disconnected while authenticating, waited 180 secs): user=<>, method=LOGIN, rip=ClientIP, lip=ServerIP, TLS: Disconnected, TLSv1.2 with cipher DHE-RSA-AES128-GCM-SHA256 (128/128 bits) [...]Nov 13 23:47:15 webdev dovecot: imap-login: Aborted login (no auth attempts in 0 secs): user=<>, rip=84.119.151.17, lip=62.75.185.32########################################### I did not change anything on my client nor serverside setup and i suddenly could not reach the Mailserver anymore. Obviously I can reach the Server using SSH or HTTP. I hope I provided all infos you need to help me in this situation. And am grateful for every hint to solve this Note: Older mailinglist threads did not help because a link which solved a similar case is not available anymore.plus I tried to make the given pieces of information structured using styles. Maybe it gets delivered,displayed and enhances the ease of reading.

2 1

Carbon_name path hardcoded
by Giordano Fechio (Giu) 13 Nov '17

13 Nov '17

Hello, I am setting up the imap_stats for dovecot and stumb up on a problem with carbon_name setup. const char *prefix = t_strdup_printf("dovecot.%s.global”, But I need to setup the path myself so my index cam be compliant to the index I already have. Wonder if changing it to something like the following so other users have a way to configure their own path or use the default in case they don’t want to worry about that. string_t *str = t_str_new(256); - const char *prefix = t_strdup_printf("dovecot.%s.global", + if ( strstr(carbon_name , "." != NULL) { + const char *prefix = t_strdup_printf("", stats_settings->carbon_name); + } else { + const char *prefix = t_strdup_printf("dovecot.%s.global", + stats_settings->carbon_name); + } If that is not the goal or if I am not using it right , let me know. Bests, G Fechio

1 0

ACL on shared folder
by T.Robers＠smtp.tutech.de 13 Nov '17

13 Nov '17

Hello everybody, we're using shared mailboxes as an archive to which everyone has full rights, set with doveadm. The rights look like this: doveadm acl get -u bob(a)example.com shared/archive(a)example.com ID Global Rights user=bob(a)example.com admin create delete expunge insert lookup \ post read write write-deleted write-seen Looking at this i would this i would think i should be able to move an existing folder to shared/archive(a)example.com. But i get a "permission denied". A rawlog session from trying to copy looks like this: 1 OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDSUBJECT MULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS BINARY MOVE NOTIFY ACL RIGHTS=texk] Logged in * ID ("name" "Dovecot") 2 OK ID completed (0.001 + 0.000 secs). * FLAGS (\Answered \Flagged \Deleted \Seen \Draft) * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft \*)] Flags permitted. * 0 EXISTS * 0 RECENT * OK [UIDVALIDITY 1510573115] UIDs valid * OK [UIDNEXT 1] Predicted next UID 3 OK [READ-WRITE] Select completed (0.005 + 0.000 + 0.004 secs). * MYRIGHTS shared/archive(a)example.com/IT-Sachen/blablub lrwstipekxacd 4 OK Myrights completed (0.001 + 0.000 secs). + idling * OK Still here 5 OK Idle completed (4.007 + 4.006 + 4.006 secs). 6 OK NOOP completed (0.001 + 0.000 secs). + idling 7 OK Idle completed (42.014 + 42.013 + 42.013 secs). 8 OK List completed (0.015 + 0.000 + 0.014 secs). 9 OK Close completed (0.001 + 0.000 secs). 10 NO [NOPERM] Permission denied (0.005 + 0.000 + 0.004 secs). I don't understand why there's a permission denied because doveadm tells something else. The shared mailbox folder ist the inbox of the account archive(a)example.com What has to be changed that it's possible to save messages or to create folders in resp. under a shared inbox, or is this not possible? Any suggestion is welcome. Tia Thomas My configuration: # 2.2.33.2 (d6601f4ec): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.21 (92477967) # OS: Linux 2.6.32-696.13.2.el6.x86_64 x86_64 CentOS release 6.9 (Final) ext4 auth_debug = yes auth_debug_passwords = yes auth_master_user_separator = * auth_mechanisms = plain login auth_verbose = yes disable_plaintext_auth = no doveadm_password = # hidden, use -P to show it doveadm_port = 12345 imap_max_line_length = 2 M mail_debug = yes mail_location = maildir:/export/home/imap/%Lu/Maildir mail_plugins = acl mail_log notify mailbox_idle_check_interval = 10 secs mailbox_list_index = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext namespace { hidden = no ignore_on_failure = no inbox = no list = children location = maildir:%%h/Maildir:INDEXPVT=%h/shared/%%u prefix = shared/%%u/ separator = / subscriptions = yes type = shared } namespace inbox { hidden = no inbox = yes list = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = INBOX/ separator = / type = private } passdb { args = /etc/dovecot/master-users driver = passwd-file master = yes } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { acl = vfile:/etc/dovecot/global-acls:cache_secs=300 acl_shared_dict = file:/export/home/shared-db/shared-mailboxes mail_log_events = append delete undelete expunge copy mailbox_delete mailbox_rename flag_change mail_log_fields = uid box msgid size from flags mail_replica = tcp:mail2.example.com sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_global = /var/lib/dovecot/sieve/global/ sieve_user_log = ~/.dovecot.sieve.log } protocols = imap pop3 lmtp sieve service aggregator { fifo_listener replication-notify-fifo { mode = 0666 user = vmail } unix_listener replication-notify { mode = 0666 user = vmail } } service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } unix_listener auth-userdb { group = vmail mode = 0660 user = vmail } } service config { unix_listener config { user = vmail } } service doveadm { inet_listener { port = 12345 } user = vmail } service imap-login { inet_listener imaps { port = 993 ssl = yes } process_limit = 500 process_min_avail = 20 } service imap { executable = imap postlogin } service lmtp { inet_listener lmtp { address = 127.0.0.1 port = 24 } } service managesieve-login { inet_listener sieve { port = 4190 } inet_listener sieve_deprecated { port = 2000 } } } service pop3-login { inet_listener pop3s { port = 995 ssl = yes } } service pop3 { executable = pop3 postlogin } service postlogin { executable = script-login -d rawlog } service replicator { unix_listener replicator-doveadm { mode = 0666 } } ssl = required ssl_cert = </etc/pki/dovecot/certs/mail2.example.com.crt_chain ssl_cipher_list = ALL:!LOW:!SSLv2:!EXP:!aNULL:!EXPORT ssl_key = # hidden, use -P to show it ssl_protocols = !SSLv3 !SSLv2 syslog_facility = local6 userdb { args = /etc/dovecot/dovecot-ldap-userdb.conf.ext driver = ldap } protocol lmtp { mail_plugins = acl mail_log notify sieve } protocol imap { mail_max_userip_connections = 100 mail_plugins = acl mail_log notify imap_acl rawlog_dir = /tmp/rawlog/%u }

1 0

rawlog segfaults (error 4 in libdovecot.so.0.0.0)
by T. Robers 13 Nov '17

13 Nov '17

Hello everybody, i tried to debug imap sessions with the rawlog feature and rawlog creates files but when i try to dump them doveadm tells me [...] Error: zlib.read((file)): unexpected EOF at [...]. I looked at syslog files and i see, that rawlog gets terminated with a segfault, e.g.: segfault at 10 ip 00007ff6da362596 sp 00007fffe725a080 error 4 in libdovecot.so.0.0.0[7ff6da2a4000+122000] Is there a way to debug why rawlog ist terminated? I haven't found anything.I would be very thankful, if somebody could give a hint. My system is: # 2.2.33.2 (d6601f4ec): /etc/dovecot/dovecot.conf # Pigeonhole version 0.4.21 (92477967) # OS: Linux 2.6.32-696.3.1.el6.x86_64 x86_64 CentOS release 6.9 (Final) ext4 auth_debug = yes auth_debug_passwords = yes auth_master_user_separator = * auth_mechanisms = plain login auth_verbose = yes disable_plaintext_auth = no imap_max_line_length = 2 M mail_debug = yes mail_location = maildir:/export/home/imap/%Lu/Maildir mail_plugins = acl zlib mail_log notify mailbox_idle_check_interval = 10 secs mailbox_list_index = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext namespace { hidden = no ignore_on_failure = no inbox = no list = children location = maildir:%%h/Maildir:INDEXPVT=%h/shared/%%u prefix = shared/%%u/ separator = / subscriptions = yes type = shared } namespace inbox { hidden = no inbox = yes list = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = INBOX/ separator = / type = private } passdb { args = /etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { acl = vfile:/etc/dovecot/global-acls:cache_secs=300 acl_shared_dict = file:/export/home/shared-db/shared-mailboxes mail_log_events = append delete undelete expunge copy mailbox_delete mailbox_rename flag_change mail_log_fields = uid box msgid size from flags sieve = ~/.dovecot.sieve sieve_dir = ~/sieve sieve_global = /var/lib/dovecot/sieve/global/ sieve_user_log = ~/.dovecot.sieve.log zlib_save = gz zlib_save_level = 6 } protocols = imap pop3 lmtp sieve service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } unix_listener auth-userdb { group = vmail mode = 0660 user = vmail } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } process_limit = 500 process_min_avail = 20 } service imap { executable = imap postlogin } service lmtp { inet_listener lmtp { address = 127.0.0.1 port = 24 } } service managesieve-login { inet_listener sieve { port = 4190 } inet_listener sieve_deprecated { port = 2000 } } service pop3-login { inet_listener pop3s { port = 995 ssl = yes } } service pop3 { executable = pop3 postlogin } service postlogin { executable = script-login -d rawlog -f in } ssl = required ssl_cert = </etc/pki/dovecot/certs/mail.tutech.de.crt_chain ssl_cipher_list = ALL:!LOW:!SSLv2:!EXP:!aNULL:!EXPORT ssl_key = # hidden, use -P to show it ssl_protocols = !SSLv3 !SSLv2 syslog_facility = local6 userdb { args = /etc/dovecot/dovecot-ldap-userdb.conf.ext driver = ldap } protocol lmtp { mail_plugins = acl zlib mail_log notify sieve } protocol imap { mail_max_userip_connections = 100 mail_plugins = acl zlib mail_log notify imap_zlib imap_acl rawlog_dir = /tmp/rawlog/%u } Tia Thomas

4 3

imap coredump after doveadm altmove
by Frank Koch 13 Nov '17

13 Nov '17

Hello, i tried to move mails to an alt storage with the following command: doveadm altmove -u user(a)domain.de mailbox Inbox After that, the imap process produces a core dump (files has not been moved): Maillog: dovecot: imap-login: Login: user=<user(a)domain.de>, method=PLAIN, rip=X.X.X.X, lip=X.X.X.X, mpid=5393, TLS, session=<83JiHqNdTwCsEAIf> dovecot: imap(user(a)domain.de): Fatal: master: service(imap): child 5393 killed with signal 11 (core dumped) Version: Dovecot 2.2.18.2 OS: CenotOS6 2.6.32-696.10.2.el6.x86_64 local storage (ext4) #gdb --args /usr/libexec/dovecot/imap -u user(a)domain.de A1 STATUS INBOX (MESSAGES) Program received signal SIGSEGV, Segmentation fault. 0x00007ffff74b3c9a in __strrchr_sse2 () from /lib64/libc.so.6 (gdb) bt full #0 0x00007ffff74b3c9a in __strrchr_sse2 () from /lib64/libc.so.6 No symbol table info available. #1 0x00007ffff7b148cd in sdbox_file_move () from /usr/lib64/dovecot/libdovecot-storage.so.0 No symbol table info available. #2 0x00007ffff7b18284 in sdbox_sync_begin () from /usr/lib64/dovecot/libdovecot-storage.so.0 No symbol table info available. #3 0x00007ffff7b18382 in sdbox_sync () from /usr/lib64/dovecot/libdovecot-storage.so.0 No symbol table info available. #4 0x00007ffff7b18437 in sdbox_storage_sync_init () from /usr/lib64/dovecot/libdovecot-storage.so.0 No symbol table info available. #5 0x00007ffff7af64b3 in mailbox_sync_init () from /usr/lib64/dovecot/libdovecot-storage.so.0 No symbol table info available. #6 0x00007ffff7af7d27 in mailbox_sync () from /usr/lib64/dovecot/libdovecot-storage.so.0 No symbol table info available. #7 0x00007ffff7b62af2 in index_storage_get_status () from /usr/lib64/dovecot/libdovecot-storage.so.0 No symbol table info available. #8 0x00007ffff67eb32c in ?? () from /usr/lib64/dovecot/lib10_quota_plugin.so No symbol table info available. #9 0x00007ffff6c021e4 in ?? () from /usr/lib64/dovecot/lib01_acl_plugin.so No symbol table info available. #10 0x00007ffff7af8931 in mailbox_get_status () from /usr/lib64/dovecot/libdovecot-storage.so.0 No symbol table info available. #11 0x000000000041e07a in imap_status_get () No symbol table info available. #12 0x0000000000413629 in cmd_status () No symbol table info available. #13 0x00000000004178ed in command_exec () No symbol table info available. #14 0x00000000004168d0 in ?? () No symbol table info available. #15 0x0000000000416966 in ?? () No symbol table info available. #16 0x0000000000416c5d in client_handle_input () No symbol table info available. #17 0x0000000000416fdf in client_input () No symbol table info available. #18 0x00007ffff7852fbb in io_loop_call_io () from /usr/lib64/dovecot/libdovecot.so.0 No symbol table info available. #19 0x00007ffff785418f in io_loop_handler_run_internal () from /usr/lib64/dovecot/libdovecot.so.0 No symbol table info available. #20 0x00007ffff7853049 in io_loop_handler_run () from /usr/lib64/dovecot/libdovecot.so.0 No symbol table info available. #21 0x00007ffff78530c8 in io_loop_run () from /usr/lib64/dovecot/libdovecot.so.0 No symbol table info available. #22 0x00007ffff77f2043 in master_service_run () from /usr/lib64/dovecot/libdovecot.so.0 No symbol table info available. #23 0x00000000004206c1 in main () No symbol table info available. This is only on folders i have tried to move. best regards, Frank Koch --

1 0

IMAP connections with ".eml" in the username - bot attack.
by James Brown 13 Nov '17

13 Nov '17

We are seeing lots of IMAP login attempts like this: dovecot[363]: imap-login: Disconnected (auth failed, 1 attempts in 6 secs): user=<xcentrex5fxnewx5fxyorkx5fxquotex5fxisx5fxreadyx2dxx2dx426453.eml>, method=PLAIN, rip=197.255.60.118, or dovecot[363]: imap-login: Disconnected (auth failed, 1 attempts in 6 secs): user=<xmatchingx5fxyourx5fxrecentx5fxvisitx5fxonx5fxx2dxx2dx121584.eml(a)bordo.com.au>, method=PLAIN, rip=37.235.28.229, etc. We are running fail2ban, but as each login attempt is from a different IP it is not able to stop them. We are running Sophos UTM firewall but that has no IMAP Proxy and never will. Is anyone else experiencing this? How is such an attack is supposed to ever succeed? What are they trying to accomplish? Any ideas on how to mitigate it? Thanks, James.

3 3

Doveadm: Skipping module doveadm_mail_crypt_plugin loading
by vkosharskiy＠gmail.com 10 Nov '17

10 Nov '17

# dovecot --version Doveadm unable to load plugin bacause plugin doveadm_mail_crypt_plugin.so not compiled with function mail_crypt_box_get_pvt_digests, who defned in mail-crypt-key.c Fix for these problem: dovecot_doveadm_mail_crypt_fix.diff: --- src/plugins/mail-crypt/Makefile.am.old 2017-11-10 19:51:18.155088706 +0200 +++ src/plugins/mail-crypt/Makefile.am 2017-11-10 20:06:30.557814167 +0200 @@ -70,7 +70,8 @@ libfs_mail_crypt_la_LDFLAGS = -module -avoid-version libdoveadm_mail_crypt_plugin_la_SOURCES = \ - doveadm-mail-crypt.c + doveadm-mail-crypt.c \ + mail-crypt-key.c libdoveadm_mail_crypt_plugin_la_LIBADD = $(LIBDOVECOT) libdoveadm_mail_crypt_plugin_la_DEPENDENCIES = $(LIBDOVECOT_DEPS) libdoveadm_mail_crypt_plugin_la_LDFLAGS = -module -avoid-version # doveadm -D sis _*Debug: Skipping module doveadm_mail_crypt_plugin, because dlopen() failed: /usr/lib64/dovecot/doveadm/libdoveadm_mail_crypt_plugin.so: undefined symbol: mail_crypt_box_get_pvt_digests (this is usually intentional, so just ignore this message) *_ After compile: # doveadm -D sis

1 0

Replication oddities - different sizes between replicated nodes
by Remko Lodder 10 Nov '17

10 Nov '17

Dear Dovecot community, As discussing on IRC with Aki, I have the following thing happening: I got an alert from my mailservice last night that I was running over quota. My quota reached almost 91% (coming from 30%) in one day. I do not recall receiving so much email (we talk about multiple gb’s additional space usage), so something was acting up. When I logged into my mailservers (I’ll describe my setup later on), it mentioned that my FreeBSD mailbox was reaching 12gb of space usage. While the seeming replicated machine (named A) only had 100mb of space in use (which, with the amount of messages in the various mailboxes is consistent with what I would expect). I found out that the “Junk” mailbox was the ‘major' issue. I vaporized the replicated (12GB) mailbox and issued a ‘doveadm sync -u $user -N -U tcps:hostB` so that I would expect the hostB to reach around 100mb-ish of email. I let it go for a little and saw that the mail was done. When I issued a simple ‘df -h’ on the directory, it was already multiple 100mb’s large and growing. It grew back to multiple GB in little time. Again the Junk mailbox was the culprit. In the mean time I noticed my mailclient downloading 44k mails in that mailbox (where there were only a few in the Junk mailbox normally). I again vaporized the entire mailbox on hostB and cleaned out Junk and issued a manual synchronisation. It again grew quickly. Aki did an investigation with me and noticed that my rspamc script was not very well written. I rewrote it as suggested (As written on the site). This morning I continued with the investigation and it was again large on hostB where it was still 100mb-ish on hostA. I vaporized host B again and issued the manual sync with -Dv included per request of Aki. After letting it run for a little hostA grew to 300mb and hostB restarted to reach 1.2GB and remained static there. After half an hour or so the mailbox on hostA grew to 900mb and stayed there. I investigated the mailboxes and saw 8 times the same email. Cleaning them up with doveadm deduplicate -u $user mailbox ‘*’ made sure a lot of email was cut from both hosts. I am now in the state where: hostA: 268MB hostB: 579MB Both are for the same mailbox (I suspect that other mailboxes have similiar issues). When I look at the amount of messages counted by Apple Mail in the particular mailbox I see 1399 emails. The amount of ‘u’ files is 14722 on hostA and 23590 on hostB. I do not understand the difference from my mail client and the amount of u files. from mutt: Mutt: =mailbox [Msgs:1415 New:1 Flag:1 24M]-, which is roughly the same as Apple mail reports. I am a bit lost on where to look next, I would suspect that the synchronised mailboxes would be similar in size, but not the one 2 as large, or before that it grew and grew and grew. My personal feeling is that the sync takes place, but somehow it is not registering that a message had been synchronised and does that again, and again, and again till the message gets synchronised right and the acknowledge is received and it stays the same. That would at least support the 8times the same email that I saw at first and might also support the roughly double as big size of the other host (one sync goes wrong, the next sync went right and got acked). At the bottom I also referenced two previous emails of mine which report similar oddities. Messages that were removed on hostA got back within seconds as “new message” . My feeling there is that the hostB has the ‘failed sync copy with a different uid/guid’ and tells hostA that there is a new message and sends it over. My doveconf -n for hostA (hostB follows), I did sanitize a bit wrt. IP addresses and hostnames: 2.2.33.2 (d6601f4ec): /usr/local/etc/dovecot/dovecot.conf # Pigeonhole version 0.4.21 (92477967) # OS: FreeBSD 11.1-RELEASE amd64 auth_mechanisms = plain login disable_plaintext_auth = no doveadm_password = # hidden, use -P to show it lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes lmtp_save_to_detail_mailbox = yes login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c %k mail_debug = yes mail_fsync = always mail_location = sdbox:~/sdbox mail_plugins = " quota notify replication" managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext imapsieve vnd.dovecot.imapsieve namespace { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Spam { auto = subscribe special_use = \Junk } mailbox Trash { auto = subscribe special_use = \Trash } prefix = separator = . } passdb { driver = pam } plugin { imapsieve_mailbox1_before = file:/usr/local/lib/dovecot/sieve/report-spam.sieve imapsieve_mailbox1_causes = COPY imapsieve_mailbox1_name = Spam imapsieve_mailbox2_before = file:/usr/local/lib/dovecot/sieve/report-ham.sieve imapsieve_mailbox2_causes = COPY imapsieve_mailbox2_from = Spam imapsieve_mailbox2_name = * mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size mail_replica = tcps:hostB:12346 sieve = ~/.dovecot.sieve sieve_after = /usr/local/etc/dovecot/sieve/after/ sieve_before = /usr/local/etc/dovecot/sieve/global/ sieve_dir = ~/sieve sieve_execute_bin_dir = /usr/local/lib/dovecot/sieve sieve_global = /usr/local/etc/dovecot/sieve/global/ sieve_global_extensions = +vnd.dovecot.pipe +vnd.dovecot.execute sieve_global_path = /usr/local/etc/dovecot/sieve/global/dovecot.sieve sieve_pipe_bin_dir = /usr/local/lib/dovecot/sieve sieve_plugins = sieve_imapsieve sieve_extprograms sieve_vacation_dont_check_recipient = yes } postmaster_address = postmaster@isp protocols = imap pop3 lmtp sieve service aggregator { fifo_listener replication-notify-fifo { mode = 0666 } unix_listener replication-notify { mode = 0666 } } service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } } service doveadm { inet_listener { port = 12346 ssl = yes } } service imap-login { service_count = 1 } service imap { process_limit = 1024 } service lmtp { inet_listener lmtp { address = external ipv4 and ipv6 127.0.0.1 ::1 port = 24 } unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } service pop3 { process_limit = 1024 } service replicator { process_min_avail = 1 unix_listener replicator-doveadm { mode = 0666 } } ssl_ca = </usr/local/etc/dehydrated/certs/hostA/fullchain.pem ssl_cert = </usr/local/etc/dehydrated/certs/hostA/cert.pem ssl_client_ca_file = /usr/local/certificates/letsencrypt-ca.pem ssl_dh_parameters_length = 2048 ssl_key = # hidden, use -P to show it ssl_protocols = !SSLv2 !SSLv3 TLSv1 TLSv1.1 TLSv1.2 userdb { driver = passwd } verbose_proctitle = yes protocol lmtp { auth_username_format = %n mail_fsync = optimized mail_plugins = " quota notify replication sieve" postmaster_address = postmaster@isp } protocol lda { mail_plugins = " quota notify replication sieve" } protocol imap { imap_client_workarounds = delay-newmail mail_max_userip_connections = 50 mail_plugins = " quota notify replication imap_quota imap_sieve" } for hostB: # 2.2.33.2 (d6601f4ec): /usr/local/etc/dovecot/dovecot.conf # Pigeonhole version 0.4.21 (92477967) # OS: FreeBSD 11.1-RELEASE-p1 amd64 auth_mechanisms = plain login disable_plaintext_auth = no doveadm_password = # hidden, use -P to show it lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes lmtp_save_to_detail_mailbox = yes login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c %k mail_debug = yes mail_fsync = always mail_location = sdbox:~/sdbox mail_plugins = " quota notify replication" managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext imapsieve vnd.dovecot.imapsieve namespace { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Spam { auto = subscribe special_use = \Junk } mailbox Trash { auto = subscribe special_use = \Trash } prefix = separator = . } passdb { driver = pam } plugin { imapsieve_mailbox1_before = file:/usr/local/lib/dovecot/sieve/report-spam.sieve imapsieve_mailbox1_causes = COPY imapsieve_mailbox1_name = Spam imapsieve_mailbox2_before = file:/usr/local/lib/dovecot/sieve/report-ham.sieve imapsieve_mailbox2_causes = COPY imapsieve_mailbox2_from = Spam imapsieve_mailbox2_name = * mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size mail_replica = tcps:hostA:12346 sieve = ~/.dovecot.sieve sieve_after = /usr/local/etc/dovecot/sieve/after/ sieve_before = /usr/local/etc/dovecot/sieve/global/ sieve_dir = ~/sieve sieve_execute_bin_dir = /usr/local/lib/dovecot/sieve sieve_global = /usr/local/etc/dovecot/sieve/global/ sieve_global_extensions = +vnd.dovecot.pipe +vnd.dovecot.execute sieve_global_path = /usr/local/etc/dovecot/sieve/global/dovecot.sieve sieve_pipe_bin_dir = /usr/local/lib/dovecot/sieve sieve_plugins = sieve_imapsieve sieve_extprograms sieve_vacation_dont_check_recipient = yes } postmaster_address = postmaster@isp protocols = imap pop3 lmtp sieve service aggregator { fifo_listener replication-notify-fifo { mode = 0666 } unix_listener replication-notify { mode = 0666 } } service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } } service doveadm { inet_listener { port = 12346 ssl = yes } } service imap-login { service_count = 1 } service imap { process_limit = 1024 } service lmtp { inet_listener lmtp { address = ipv4 and ipv6 address 127.0.0.1 ::1 port = 24 } unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } service pop3 { process_limit = 1024 } service replicator { process_min_avail = 1 unix_listener replicator-doveadm { mode = 0666 } } ssl_ca = </usr/local/etc/dehydrated/certs/hostA/fullchain.pem ssl_cert = </usr/local/etc/dehydrated/certs/hostA/cert.pem ssl_client_ca_file = /usr/local/certificates/letsencrypt-ca.pem ssl_dh_parameters_length = 2048 ssl_key = # hidden, use -P to show it ssl_protocols = !SSLv2 !SSLv3 TLSv1 TLSv1.1 TLSv1.2 userdb { driver = passwd } verbose_proctitle = yes protocol lmtp { auth_username_format = %n mail_fsync = optimized mail_plugins = " quota notify replication sieve" postmaster_address = postmaster@isp } protocol lda { mail_plugins = " quota notify replication sieve" } protocol imap { imap_client_workarounds = delay-newmail mail_max_userip_connections = 50 mail_plugins = " quota notify replication imap_quota imap_sieve” } Both machines run FreeBSD, with a ZFS backend. HostB has quota’s on the zfs shares but none of them are full or almost full and have plenty of space left on their directories (so there is no quota or disk full issue there) Mail is arriving on both hosts by upstream MX’es. Most of my users use hostB as their main host. I use hostA as my primary host. Both machines are located at Hetzner in Germany. HostA is in DC6 and HostB is in DC12. Not situated next to eachother but low latency links between them. Both machines are connected to gbit uplinks and are not very highly loaded. The machines consist of 2x2TB disk (mirrored with ZFS) and 8cores, 32GB RAM. There were warnings when manually doing the sync that the mailbox changed in between and should be reissued, after which the mailboxes kept growing. Previously I reported two messages here which might be the foundation of the same issue: https://dovecot.org/list/dovecot/2016-July/104873.html and https://www.dovecot.org/list/dovecot/2017-March/107459.html

1 0

Sieve global path?
by Gao 10 Nov '17

10 Nov '17

Hello, I am building a new server on CentOS 7 and the global sieve filter can not be loaded. The debug shows: Nov 9 15:23:09 mail dovecot: lmtp(11182, gao(a)mydomain.com) Debug: sieve: Pigeonhole version 0.4.2 initializing Nov 9 15:23:09 mail dovecot: lmtp(11182, gao(a)mydomain.com) Debug: sieve: include: sieve_global_dir is not set; it is currently not possible to include `:global' scripts. The pigeonhole version: # yum list dovecot-pigeonhole dovecot-pigeonhole.x86_64 1:2.2.10-8.el7 I googled and got confused on how to make sieve point to the correct global filter (which I want auto deliver spams to Junk folder). So what is the correct setting? Thanks in advance. Gao Here is my doveconf -n output: ----------------------------------------------------------- [root@mail ~]# doveconf -n # 2.2.10: /etc/dovecot/dovecot.conf # OS: Linux 3.10.0-693.5.2.el7.x86_64 x86_64 CentOS Linux release 7.4.1708 (Core) xfs auth_mechanisms = plain login cram-md5 first_valid_gid = 5000 first_valid_uid = 5000 last_valid_gid = 5000 last_valid_uid = 5000 listen = * mail_debug = yes mail_gid = 5000 mail_location = maildir:/home/vmail/%d/%n/:INDEX=/home/vmail/%d/%n/indexes mail_plugins = " quota" mail_uid = 5000 managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave mbox_write_locks = fcntl namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = } passdb { args = /etc/dovecot/conf.d/dovecot-mysql.conf.ext driver = sql } plugin { quota = maildir:User quota quota_exceeded_message = ERROR:422 - Mailbox full, sorry. quota_rule = Junk:ignore quota_rule2 = Trash:storage=+100M quota_warning = storage=90%% quota-warning 90 %u %d quota_warning2 = storage=80%% quota-warning 80 %u %d sieve = ~/sieve/.dovecot.sieve sieve_dir = ~/sieve sieve_global_path = /home/vmail/sieve/globalfilter.sieve sieve_max_script_size = 1M sievedir = ~/sieve } protocols = imap pop3 lmtp sieve service auth { unix_listener /var/spool/postfix/private/auth { group = vmail mode = 0666 user = vmail } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } service managesieve-login { inet_listener sieve { port = 4190 } process_min_avail = 0 service_count = 1 vsz_limit = 64 M } service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 ssl = yes } } service quota-warning { executable = script /usr/local/bin/overquota.sh group = vmail unix_listener quota-warning { group = vmail user = vmail } user = vmail } ssl = required ssl_cert = </etc/letsencrypt/live/mydomain.com/fullchain.pem ssl_cipher_list = EECDH+ECDSA+AESGCM:EECDH+aRSA+AESGCM:EECDH+ECDSA+SHA384:EECDH+ECDSA+SHA256:EECDH+aRSA+SHA384:EECDH+aRSA+SHA256:EECDH+aRSA+RC4:EECDH:EDH+aRSA:!aNULL:!eNULL:!LOW:!3DES:!MD5:!EXP:!PSK:!SRP:!DSS:!RC4 ssl_key = </etc/letsencrypt/live/mydomain.com/privkey.pem ssl_prefer_server_ciphers = yes ssl_protocols = !SSLv2 !SSLv3 userdb { args = /etc/dovecot/conf.d/dovecot-mysql.conf.ext driver = sql } protocol lmtp { mail_plugins = " quota sieve" postmaster_address = postmaster(a)mydomain.com } protocol imap { mail_plugins = " quota imap_quota" } protocol sieve { managesieve_implementation_string = Dovecot Pigeonhole managesieve_max_compile_errors = 5 managesieve_max_line_length = 65536 }

5 8

Postlogin script
by j.emerlik 10 Nov '17

10 Nov '17

Hi, I would like to prepare postlogin a script that allow imap connection to roundcube for all but restrict imap access for selected users. My question is that: Is possible in condition IF use IP addresses as range or with mask (because I've more than one web servers) ? My script: #!/bin/sh if [ "$IP" = "172.11.0.28" ] ; then printf "* [ALERT] Access allowed from that IP\r\n" exec "$@" fi CHECK_USER=`PGPASSWORD="somepass" /usr/local/pg950/bin/psql -q -t -U someuser -d maildb -c "select imap_allowed from __users where name = '$USER' LIMIT 1"` if [ $CHECK_USER == "f" ] ; then exit 0 fi if [ $CHECK_USER == "t" ] ; then exec "$@" fi Regards, Jack

3 3

doveadm -A backup
by DurgaPrasad - DatasoftComnet 10 Nov '17

10 Nov '17

Hello, I am trying to backup all users mails using doveadm -Dv backup -A mdbox:/nasdrive/mailbackupfolder However the script is not doing the backup into individual folders but is trying to overwrite the data in /nasdrive/mailbackupfolder for every user. Logically it should write into /nasdrive/mailbackupfolder/user1 , /nasdrive/mailbackupfolder/user2 etc. I know we can run a shell script by listing all users into a file but I feel that will be far slower and it will spawn multiple doveadm commands in parallel and is prone to delays. Can someone suggest something on how to backup using -A in a single command? Regards DP --- This email has been checked for viruses by Avast antivirus software. https://www.avast.com/antivirus

2 1

Migrating from Dovecot 1 to Dovecot 2
by Dovecot list 10 Nov '17

10 Nov '17

Hello. I try to migrate about 200G of mails from one server to another. On the old i have Dovecot1 with Maildirs (without master pass etc.), on the new one i setup dovecot2 with mdbox. I need now to migrate (partialy, not all at once) mails from one to another. I can't find any solution that i can use? I dont have master password, and i want to mikgrate all mailaccont each other. Can anyone use me a working config for this ? Best will be that migratet dont want to be downloaded by mail client one more time. Thanks for any help. Best regards.

2 2

Dovecot auth error
by Mathieu R. 08 Nov '17

08 Nov '17

I just tried to configure a new dovecot/postfix server, and i end up with a dovecot auth error at startup. I can't find a solution by myself. Below are details, thanks in advance for your precious help, and excuse my poor english : dovecot --version 2.2.27 (c0f36b0) (Debian) Dovecot -n : https://400iso.net/public/dov.txt grep -v '^ *$#.*$\?$' /etc/dovecot/dovecot-sql.conf driver = mysql connect = host=127.0.0.1 dbname=postfix user=postfix password=password default_pass_scheme = MD5-CRYPT user_query = SELECT '/srv/vmail/%d/%n' AS home, 3000 AS uid, 3000 AS gid, CONCAT('*:bytes=', CAST(quota AS CHAR)) AS quota_rule FROM mailbox WHERE username = '%u' AND active='1' password_query = SELECT password FROM mailbox WHERE username = '%u' Here is part of the server's log : Nov 4 20:57:49 vps81550 postfix/postscreen[21578]: CONNECT from [209.85.215.51]:47485 to [149.56.x.x]:25 Nov 4 20:57:49 vps81550 postfix/dnsblog[21583]: addr 209.85.215.51 listed by domain dnsbl.sorbs.net as 127.0.0.6 Nov 4 20:57:55 vps81550 postfix/postscreen[21578]: PASS OLD [209.85.215.51]:47485 Nov 4 20:57:55 vps81550 postfix/smtpd[21585]: connect from mail-lf0-f51.google.com[209.85.215.51] Nov 4 20:57:55 vps81550 postfix/smtpd[21585]: Untrusted TLS connection established from mail-lf0-f51.google.com[209.85.215.51] TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits) Nov 4 20:57:55 vps81550 dovecot: auth: Fatal: sql: driver not set in configuration file /etc/dovecot/dovecot-sql.conf.ext Nov 4 20:57:55 vps81550 dovecot: master: Error: service(auth): command startup failed, throttling for 2 secs Nov 4 20:57:55 vps81550 postfix/smtpd[21585]: fatal: no SASL authentication mechanisms Nov 4 20:57:56 vps81550 postfix/master[21528]: warning: process /usr/lib/postfix/sbin/smtpd pid 21585 exit status 1 Nov 4 20:57:56 vps81550 postfix/master[21528]: warning: /usr/lib/postfix/sbin/smtpd: bad command startup -- throttling -- Mathieu R.

3 4

'doveadm replicator remove' only temporary?
by Robert Giles 07 Nov '17

07 Nov '17

Hi folks, Wondering if this is expected behavior; we'd like to be able to pause replication for a particular account on our 2.2.32 active-active cluster, but delivering a message (LMTP) to the account seems to turn replication back on again: (replication on) server1:~# doveadm replicator status rgiles username priority fast sync full sync success sync failed rgiles none 00:00:30 23:45:01 00:00:30 - (remove manually) server:~# doveadm replicator remove rgiles (confirm replication is off) server:~# doveadm replicator remove rgiles Error: Replicator failed: User not found (confirm again that replication is still off) server1:~# doveadm replicator status rgiles username priority fast sync full sync success sync failed (and one more time, still off) server1:~# doveadm replicator status rgiles username priority fast sync full sync success sync failed (send an e-mail, and voila, replication is running again) server1:~# doveadm replicator status rgiles username priority fast sync full sync success sync failed rgiles none 00:00:01 00:00:03 00:00:01 - I've tried quickly disabling replication on both systems, and they inevitably override the 'doveadm replicator remove' command and begin dsync'ing again with each other. Thanks for any ideas out there - Robert

1 1

Re: Dovecot auth error
by Aki Tuomi 07 Nov '17

07 Nov '17

apparently my reply got lost.. have you installed dovecot-mysql package? ---Aki TuomiDovecot oy -------- Original message --------From: "Mathieu R." <mathieu(a)400iso.net> Date: 07/11/2017 16:18 (GMT+02:00) To: dovecot(a)dovecot.org Subject: Re: Dovecot auth error Maybe i got no answer because there is an error which seem obvious in my logs : Nov 4 20:57:55 vps81550 dovecot: auth: Fatal: sql: driver not set in configuration file /etc/dovecot/dovecot-sql.conf.ext I've obviously seen that, and tried to configure driver in that file, but it had no positive outcome, sous i reversed my config to the previous state. Considering what i've read, dovecot's MySQL configuration should be OK, but i still have that fatal error Le sam. 4 nov. 2017 à 21:02, Mathieu R. <mathieu(a)400iso.net> a écrit : > I just tried to configure a new dovecot/postfix server, and i end up with > a dovecot auth error at startup. > I can't find a solution by myself. > Below are details, thanks in advance for your precious help, and excuse my > poor english : > > dovecot --version > 2.2.27 (c0f36b0) (Debian) > > Dovecot -n : > https://400iso.net/public/dov.txt > > > grep -v '^ *$#.*$\?$' /etc/dovecot/dovecot-sql.conf > driver = mysql > connect = host=127.0.0.1 dbname=postfix user=postfix password=password > default_pass_scheme = MD5-CRYPT > user_query = SELECT '/srv/vmail/%d/%n' AS home, 3000 AS uid, 3000 AS gid, > CONCAT('*:bytes=', CAST(quota AS CHAR)) AS quota_rule FROM mailbox WHERE > username = '%u' AND active='1' > password_query = SELECT password FROM mailbox WHERE username = '%u' > > > Here is part of the server's log : > > Nov 4 20:57:49 vps81550 postfix/postscreen[21578]: CONNECT from > [209.85.215.51]:47485 to [149.56.x.x]:25 > Nov 4 20:57:49 vps81550 postfix/dnsblog[21583]: addr 209.85.215.51 listed > by domain dnsbl.sorbs.net as 127.0.0.6 > Nov 4 20:57:55 vps81550 postfix/postscreen[21578]: PASS OLD > [209.85.215.51]:47485 > Nov 4 20:57:55 vps81550 postfix/smtpd[21585]: connect from > mail-lf0-f51.google.com[209.85.215.51] > Nov 4 20:57:55 vps81550 postfix/smtpd[21585]: Untrusted TLS connection > established from mail-lf0-f51.google.com[209.85.215.51] TLSv1.2 with > cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits) > Nov 4 20:57:55 vps81550 dovecot: auth: Fatal: sql: driver not set in > configuration file /etc/dovecot/dovecot-sql.conf.ext > Nov 4 20:57:55 vps81550 dovecot: master: Error: service(auth): command > startup failed, throttling for 2 secs > Nov 4 20:57:55 vps81550 postfix/smtpd[21585]: fatal: no SASL > authentication mechanisms > Nov 4 20:57:56 vps81550 postfix/master[21528]: warning: process > /usr/lib/postfix/sbin/smtpd pid 21585 exit status 1 > Nov 4 20:57:56 vps81550 postfix/master[21528]: warning: > /usr/lib/postfix/sbin/smtpd: bad command startup -- throttling > -- > > Mathieu R. > -- Mathieu R.

1 0

Log reopen broken in 2.2.33?
by David Zambonini 07 Nov '17

07 Nov '17

Has re-opening the logfiles broken between 2.2.32 and 2.2.33 releases? Using the same config that I've had for the past 10 or so point releases, /usr/bin/doveadm log reopen works perfectly up until 2.2.32, but with 2.2.33 (and .1 and .2) no new logfiles are created, file descriptors still have the original files open and keep writings to those logs. On an idling test instance, I get: master: Warning: Sent SIGKILL to 1 log processes I can see both SIGUSR1 and SIGKILL generated by the master process, but the current log process doesn't terminate - it receives SIGUSR1, but not SIGKILL. Anyone able to verify this on their own setup? Am I missing a required config change? Using epoll, which hasn't changed. -- David Zambonini

2 3

dovecot-lda without starting dovecot?
by Stephan von Krawczynski 07 Nov '17

07 Nov '17

Hello, we have a setup where SMTP/LDA and POP3/IMAP are on different physical hosts. They share the mail data via an external storage. Now we would like to use dovecot-lda on the smtp host, so we wonder if the lda binary works without starting dovecot from init. As there will be no POP3/IMAP usage on this host it seems unnecessary. Nevertheless we cannot judge if it is still needed for lda&sieve to work. Your opinion? -- Regards, Stephan

4 5

mail_crypt plugin, few questions
by Zbyszek Żółkiewski 06 Nov '17

06 Nov '17

Hi, I have few questions regarding mail_crypt: 1) Is mail_crypt_global_private_key file read upon dovecot start/restart only or it is/can be read in any other time? I have made few tests by starting dovecot and removing master key for decryption - therefore it is not available on the platform - it only reside in memory, removing one of attack vectors 2) Is there planned any “rollout” for key rotation in the feature ? 3) is there any better way to encrypt mails that were sent before enabling mail_crypt ? I have made some simple script to automate and in-place encryption: https://gist.github.com/kolargol/d551d132949068ce6efce7bc85a317cb but maybe there is better way? If someone want to use it, please read code before as it require updating magic(5) local database thanks! _ Zbyszek Żółkiewski

2 5

stats module
by Jeff Abrahamson 06 Nov '17

06 Nov '17

I'd like to monitor my dovecot instance (running on ubuntu 16.04) using telegraf. [T] jeff@nantes-1:log $ dovecot --version 2.2.22 (fe789d2) [T] jeff@nantes-1:log $ To do that, I think I need to use the stats module and get it to talk on port 24242. I've not found enough documentation on this module to feel really comfortable with it, so it doesn't surprise me that I don't have it working. But I'd much appreciate if someone could point me in the right direction. In particular, nothing listens on 24242. # This file is based on https://wiki2.dovecot.org/Statistics # Dovecot v2.1+ supports gathering statistics (CPU, disk usage, etc.) # from mail processes (IMAP, POP3, LMTP, etc.) to the stats # process. The stats process can later be queried what's going on in # the system. With imap_stats plugin you can get per-command level # statistics for IMAP commands. # # There are different "zoom levels" you can look at the statistics: # # * command: Per-IMAP command # * session: Per IMAP/POP3 connection # * user: Per user (all of user's sessions summed up) # * domain: Per domain (all of domain's users summed up) # * ip: Per IP address (all sessions from the IP summed up) # * global: Everything summed up (2.2.16+) mail_plugins = $mail_plugins stats protocol imap { mail_plugins = $mail_plugins imap_stats } plugin { # how often to session statistics (must be set) stats_refresh = 30 secs # track per-IMAP command statistics (optional) stats_track_cmds = yes } # You'll also need to give enough permissions for mail processes to be # able to write to stats-mail fifo. For example if you use a single # "vmail" user for mail access: service stats { fifo_listener stats-mail { user = vmail mode = 0600 } } # Memory usage configuration # The stats process attempts to keep memory usage below a specified # amount. This value is only approximate because of extra overhead # caused by malloc() itself. stats_memory_limit = 16 M # Once the memory limit is reached, oldest statistics are freed from # memory. Different statistics levels have different timeout limits, # which are configured in: stats_command_min_time = 1 mins stats_domain_min_time = 12 hours stats_ip_min_time = 12 hours stats_session_min_time = 15 mins stats_user_min_time = 1 hours service stats { inet_listener { address = 127.0.0.1 port = 24242 } } Thanks in advance. -- Jeff Abrahamson +33 6 24 40 01 57 +44 7920 594 255 http://p27.eu/jeff/

6 11

migrating from maildir to mdbox, preserving pop3 UIDL
by Jan-Pieter Cornet 03 Nov '17

03 Nov '17

Hi, I'm trying to migrate from maildir to mdbox while preserving the pop3 UIDL (and the imap UID). The problem is, for maildir we use (for compatiblity with qpopper): pop3_uidl_format = %f Problem is, as soon as I convert that to mdbox, then whenever a client issues the UIDL command via a POP connection, the connection is closed and this error is displayed in the log: Error: UIDL: File name not found (pop3_uidl_format=%f not supported by storage?) As a workaround, I enabled "pop3_reuse_xuidl = yes", and before conversion I put an X-UIDL: header in the mails. However, since the UIDL is the filename and the filename also contains S=<size>,W=<sizeOnWire>, I need to change the header in such a way that the size and number of lines stay the same. That's... tedious and error-prone. Is there an easier solution, eg teaching 'doveadm sync' to preserve pop3 UIDL somehow? For the record, I currently convert maildir to mdbox using: doveadm -D backup -u user@domain 'doveadm -o mail=mdbox:/path/to/storage:INDEX=/path/to/fast/storage -o plugin/zlib_save=gz -o mail_uid=$UID -o mail_gid=$GID dsync-server' Thanks for any help! -- Jan-Pieter Cornet <johnpc(a)xs4all.net> Systeembeheer XS4ALL Internet bv www.xs4all.nl

1 0

Enabling notification for all users
by Delisle, John 03 Nov '17

03 Nov '17

Hello, I have a domain populated with ~60 users who infrequently receive email. As a result, they rarely check their email, and miss important messages. The users are virtual LDAP users, and each user has an attribute "backupMailAddress" that contains their primary high-traffic email address that they check daily. (i.e. they have an address like John(a)lowtrafficdomain.com<mailto:John@lowtrafficdomain.com>, and a backupMailAddress attribute like john(a)primaryemailaddress.com<mailto:john@primaryemailaddress.com> ) I'm looking to enable new-email notification for all users, and have the notifications go to their high-traffic email address (their backupMailAddress). I know I can do this through individual user managesieve.sieve configurations and have a script that populates this with a notify rule, but this solution doesn't scale well, and doesn't handle new users/ departing users well. Is the a way I could apply this globally, so that if a user has a populated backupMailAddress attribute, a notification is sent there? Thanks John Delisle | Solution Architecture | Ceridian HCM | m: 204.294.5529 (preferred) | w: 204.975.5909 John.Delisle(a)ceridian.com<mailto:John.Delisle@ceridian.com> | www.ceridian.com<http://www.ceridian.com/> Ceridian. Makes Work Life Better(tm) This communication is intended to be received only by the individual[s] or entity[s] to whom or to which it is addressed, and contains information which is confidential, privileged and subject to copyright. Any unauthorized use, copying, review or disclosure is prohibited. Please notify the sender immediately if you have received this communication in error [by calling collect, if necessary] so that we can arrange for its return at our expense. Thank you in advance for your anticipated assistance and cooperation. Cette communication est destinée uniquement à la personne ou à la personne morale à qui elle est adressée. Elle contient de l’information confidentielle, protégée par le secret professionnel et sujette à des droits d'auteurs. Toute utilisation, reproduction, consultation ou divulgation non autorisées sont interdites. Nous vous prions d’aviser immédiatement l’expéditeur si vous avez reçu cette communication par erreur (en appelant à frais virés, si nécessaire), afin que nous puissions prendre des dispositions pour en assurer le renvoi à nos frais. Nous vous remercions à l’avance de votre coopération.

1 0

LDAP Filters as defined for dovecot UserDB and passDB
by Will Merkens 03 Nov '17

03 Nov '17

I have pretty much everything working fine. I have run into one issue with the filters that I am unsure where this a filter is being set. Dovecot 2.2.32 (dfbe293d4) I have setup dovecot-ldap.conf.ext to control my LDAP query's My current layout used filters based on looking at the posixAccount attributes user_filter = (&(objectClass=posixAccount)(uid=%u)) If I connect to a a ldap account that has no posixAccount attributes set I was getting a failure in the logs Nov 02 14:15:48 mail2 dovecot[28715]: auth: Debug: ldap(sales,192.168.123.39,<fd5mpwVddrvAqHsn>): user search: base=ou=People,dc=userful,dc=ca scope=subtree filter=(&(objectClass=posixAccount)(uid=sales)) fields=mail,user_filter Nov 02 14:15:48 mail2 dovecot[28715]: auth: Debug: ldap(sales,192.168.123.39,<fd5mpwVddrvAqHsn>): no fields returned by the server Nov 02 14:15:48 mail2 dovecot[28715]: auth: ldap(sales,192.168.123.39,<fd5mpwVddrvAqHsn>): unknown user Nov 02 14:15:48 mail2 dovecot[28715]: auth: Error: ldap(sales,192.168.123.39,<fd5mpwVddrvAqHsn>): user not found from userdb I changed the filters thinking I needed to look at the attributes seen by one of these accounts, I used the apache studio to find out what was visible. >From that I saw inetOrgPerson could be used. So I changed the filters. user_filter = (&(objectClass=inetOrgPerson)(uid=%u)) pass_filter = (&(objectClass=inetOrgPerson)(uid=%n)) iterate_filter = (objectClass=inetOrgPerson) Nov 02 14:26:44 mail2 dovecot[29047]: auth: Debug: client in: AUTH 1 PLAIN service=imap secured session=Y0GBzgVdlorAqHsn lip=192.168.123.236 Nov 02 14:26:44 mail2 dovecot[29047]: auth-worker(29066): Debug: ldap(sales(a)userful.com,192.168.123.39,<Y0GBzgVdlorAqHsn>): bind search: base=ou=People,dc=userful,dc=ca filter=(&(objectClass=inetOrgPerson)(uid=sales)) Nov 02 14:26:44 mail2 dovecot[29047]: auth-worker(29066): Debug: ldap(sales(a)userful.com,192.168.123.39,<Y0GBzgVdlorAqHsn>): result: uid=sales; uid unused Nov 02 14:26:44 mail2 dovecot[29047]: auth-worker(29066): Debug: ldap(sales(a)userful.com,192.168.123.39,<Y0GBzgVdlorAqHsn>): username changed sales(a)userful.com -> sales Nov 02 14:26:44 mail2 dovecot[29047]: auth-worker(29066): Debug: ldap(sales,192.168.123.39,<Y0GBzgVdlorAqHsn>): result: uid=sales Nov 02 14:26:44 mail2 dovecot[29047]: auth: Debug: ldap(sales(a)userful.com,192.168.123.39,<Y0GBzgVdlorAqHsn>): username changed sales(a)userful.com -> sales Nov 02 14:26:44 mail2 dovecot[29047]: auth: Debug: client passdb out: OK 1 user=sales original_user=sales(a)userful.com so far so good but then I get Nov 02 14:26:44 mail2 dovecot[29047]: auth: Debug: master in: REQUEST 3851550721 29049 1 519189df600c24c010b57158ac01c867 session_pid=29073 request_auth_token Nov 02 14:26:44 mail2 dovecot[29047]: auth-worker(29066): Debug: ldap(sales,192.168.123.39,<Y0GBzgVdlorAqHsn>): user search: base=ou=People,dc=userful,dc=ca scope=subtree filter=(&(objectClass=posixAccount)(uid=sales)) fields=mail,user_filter Nov 02 14:26:44 mail2 dovecot[29047]: auth-worker(29066): Debug: ldap(sales,192.168.123.39,<Y0GBzgVdlorAqHsn>): no fields returned by the server Nov 02 14:26:44 mail2 dovecot[29047]: auth-worker(29066): ldap(sales,192.168.123.39,<Y0GBzgVdlorAqHsn>): unknown user Nov 02 14:26:44 mail2 dovecot[29047]: auth: Error: ldap(sales,192.168.123.39,<Y0GBzgVdlorAqHsn>): user not found from userdb The question then is where did it get filter=(&(objectClass=posixAccount) from since I changed the filters to inetOrgPerson I grep the dovecot settings directory and all My filters are in the one file. The file that hold the ldap settings -- William Merkens IT Support Analyst Userful Corporation +1 403.289.2177 ext.289 +1 866 USERFUL (1-866-873-7385) Suite 300, 736 8th Ave. SW Calgary AB T2P 1H4 Managed Desktops Done Right. http://www.userful.com

3 3

Bug: lmtp proxy does not quote local parts with spaces
by David Zambonini 03 Nov '17

03 Nov '17

There seems to be a bug with RFC822 processing in ltmp proxying that doesn't quote local parts that, for example, contain spaces. director config: director_username_hash = %Ln lmtp_proxy = yes recipient_delimiter = + protocol lmtp { auth_socket_path = director-userdb auth_username_chars = auth_username_format = %Ln passdb { driver = sql args = /etc/director/sql.d/lmtp.ext result_failure = return-fail result_internalfail = return-fail } } lmtp.ext: password_query = SELECT 'y' AS proxy, NULL AS password, 'y' AS nopassword FROM users WHERE userName='%Ln' from exim -> director LMTP network dump: MAIL FROM:<test(a)testdomain.com>\r\n RCPT TO:<"deemzed.uk+Junk E-mail"@mailbox.localhost>\r\n DATA\r\n (etc) .\r\n 501 5.5.4 Invalid parameters\r\n QUIT\r\n from director -> dovecot LMTP network dump: MAIL FROM:<test(a)testdomain.com>\r\n RCPT TO:<deemzed.uk+Junk E-mail>\r\n 501 5.5.4 Invalid.parameters\r\n I'll try to pare down a full config for doveconf that displays this behaviour if required, as currently I have sensitive/extraneous information in there, but this seems fairly cut and dried as a bug to me. -- Dave

3 7

dovecot-2.3 (-git) Warning (Was Re: dovecot Digest, Vol 174, Issue 64)
by Reuben Farrelly 02 Nov '17

02 Nov '17

Hi, On 30/10/2017 7:22 PM, dovecot-request(a)dovecot.org wrote: > Message: 6 > Date: Mon, 30 Oct 2017 10:22:42 +0200 > From: Teemu Huovila <teemu.huovila(a)dovecot.fi> > To: dovecot(a)dovecot.org > Subject: Re: dovecot-2.3 (-git) Warning and Fatal Compile Error > Message-ID: <7d2c0b5b-019a-067c-c6be-f36571ed9a96(a)dovecot.fi> > Content-Type: text/plain; charset=utf-8 > > > > On 30.10.2017 09:10, Aki Tuomi wrote: >> >> >> On 30.10.2017 00:23, Reuben Farrelly wrote: >>> Hi Aki, >>> >>> On 30/10/2017 12:43 AM, Aki Tuomi wrote: >>>>> On October 29, 2017 at 1:55 PM Reuben Farrelly >>>>> <reuben-dovecot(a)reub.net> wrote: >>>>> >>>>> >>>>> Hi again, >>>>> >>>>> Chasing down one last problem which seems to have been missed from my >>>>> last email: >>>>> >>>>> On 20/10/2017 9:22 PM, Stephan Bosch wrote: >>>>>> >>>>>> Op 20-10-2017 om 4:23 schreef Reuben Farrelly: >>>>>>> On 18/10/2017 11:40 PM, Timo Sirainen wrote: >>>>>>>> On 18 Oct 2017, at 6.34, Reuben Farrelly <reuben-dovecot(a)reub.net> >>>>>>>> wrote: >>>>> This problem below is still present in 2.3 -git, as of version >>>>> 2.3.devel >>>>> (6fc40674e) >>>>> >>>>>>>> Secondly, this ssl_dh messages is always printed from doveconf: >>>>>>>> >>>>>>>> doveconf: Warning: please set ssl_dh=</etc/dovecot/dh.pem >>>>>>>> doveconf: Warning: You can generate it with: dd >>>>>>>> if=/var/lib/dovecot/ssl-parameters.dat bs=1 skip=88 | openssl dh >>>>>>>> -inform der > /etc/dovecot/dh.pem >>>>>>>> >>>>>>>> Yet the file is there: >>>>>>>> >>>>>>>> thunderstorm conf.d # ls -la /etc/dovecot/dh.pem >>>>>>>> -rw-r--r-- 1 root root 769 Oct 19 21:55 /etc/dovecot/dh.pem >>>>>>>> >>>>>>>> And the config is there as well: >>>>>>>> >>>>>>>> thunderstorm dovecot # doveconf -P | grep ssl_dh >>>>>>>> ssl_dh = </etc/dovecot/dh.pem >>>>>>>> doveconf: Warning: please set ssl_dh=</etc/dovecot/dh.pem >>>>>>>> doveconf: Warning: You can generate it with: dd >>>>>>>> if=/var/lib/dovecot/ssl-parameters.dat bs=1 skip=88 | openssl dh >>>>>>>> -inform der > /etc/dovecot/dh.pem >>>>>>>> ?? ssl_dh = -----BEGIN DH PARAMETERS----- >>>>>>>> ?? ssl_dh = -----BEGIN DH PARAMETERS----- >>>>>>>> ?? ssl_dh = -----BEGIN DH PARAMETERS----- >>>>>>>> ?? ssl_dh = -----BEGIN DH PARAMETERS----- >>>>>>>> ?? ssl_dh = -----BEGIN DH PARAMETERS----- >>>>>>>> ?? ssl_dh = -----BEGIN DH PARAMETERS----- >>>>>>>> ?? ssl_dh = -----BEGIN DH PARAMETERS----- >>>>>>>> ?? ssl_dh = -----BEGIN DH PARAMETERS----- >>>>>>>> thunderstorm dovecot # >>>>>>>> >>>>>>>> It appears that this warning is being triggered by the presence of >>>>>>>> the ssl-parameters.dat file because when I remove it the warning >>>>>>>> goes away. Perhaps the warning could be made a bit more specific >>>>>>>> about this file being removed if it is not required because at the >>>>>>>> moment the warning message is not related to the trigger. >>>>>>>> >>>>>>>> Thanks, >>>>>>>> Reuben >>>>> Thanks, >>>>> Reuben >>>> It is triggered when there is ssl-parameters.dat file *AND* there is >>>> no ssl_dh=< explicitly set in config file. >>>> >>>> Aki >>> >>> I have this already in my 10-ssl.conf file: >>> >>> lightning dovecot # /etc/init.d/dovecot reload >>> doveconf: Warning: please set ssl_dh=</etc/dovecot/dh.pem >>> doveconf: Warning: You can generate it with: dd >>> if=/var/lib/dovecot/ssl-parameters.dat bs=1 skip=88 | openssl dh >>> -inform der > /etc/dovecot/dh.pem >>> ?* Reloading dovecot configs and restarting auth/login processes >>> ...????? [ ok ] >>> lightning dovecot # >>> >>> However: >>> >>> lightning dovecot # grep ssl_dh conf.d/10-ssl.conf >>> # gives on startup when ssl_dh is unset. >>> ssl_dh=</etc/dovecot/dh.pem >>> lightning dovecot # >>> >>> and the file is there: >>> >>> lightning dovecot # ls -la /etc/dovecot/dh.pem >>> -rw-r--r-- 1 root root 769 Oct 19 19:06 /etc/dovecot/dh.pem >>> lightning dovecot # >>> >>> So it is actually configured and yet the warning still is present. >>> >>> Reuben >> >> Hi! >> >> I gave this a try, and I was not able to repeat this issue. Perhaps you >> are still missing ssl_dh somewhere? >> >> Aki >> > Hello > > Just a guess, but at this point I would recommend reviewing the output of "doveconf -n" to make sure the appropriate settings are present. > > br, > Teemu I still can't see anything amiss. Here's the output from doveconf -n: # 2.3.devel (65ef8330e): /etc/dovecot/dovecot.conf # Pigeonhole version 0.5.devel (f4659224) # OS: Linux 4.9.56-x86_64-linode87 x86_64 Gentoo Base System release 2.4.1 auth_mechanisms = plain login auth_socket_path = /var/run/dovecot/auth-userdb auth_username_format = %Ln doveadm_password = # hidden, use -P to show it first_valid_uid = 1000 imap_client_workarounds = tb-lsub-flags tb-extra-mailbox-sep last_valid_uid = 1100 login_log_format_elements = user=<%u> auth-method=%m remote=%r local=%l %k login_trusted_networks = 192.168.0.0/16 mail_location = maildir:~/Maildir mail_plugins = stats notify replication fts fts_lucene managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = failure_show_msg=yes %s driver = pam } plugin { fts = lucene fts_autoindex = yes fts_languages = en fts_lucene = whitespace_chars=@. mail_replica = tcps:inside-mail.reub.net:4813 replication_full_sync_interval = 4 hours sieve = file:~/sieve;active=~/.dovecot.sieve stats_refresh = 30 secs stats_track_cmds = yes } protocols = imap lmtp sieve recipient_delimiter = - service aggregator { fifo_listener replication-notify-fifo { mode = 0666 user = root } unix_listener replication-notify { mode = 0666 user = root } } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-userdb { mode = 0777 } } service doveadm { inet_listener { address = 2400:8901:e001:3a::20 port = 4813 ssl = yes } user = root } service imap { executable = imap postlogin } service lmtp { inet_listener lmtp { address = ::1 port = 24 } unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0660 user = postfix } } service postlogin { executable = script-login -d rawlog } service replicator { process_min_avail = 1 unix_listener replicator-doveadm { mode = 0666 } } service stats { fifo_listener stats-mail { mode = 0666 } } ssl_ca = </etc/ssl/misc/alphassl_intermediate_ca.crt ssl_cert = </etc/ssl/dovecot/*.reub.net.crt ssl_cipher_list = DEFAULT:!EXPORT:!LOW:!MEDIUM:!MD5 ssl_client_ca_dir = /etc/ssl/certs ssl_client_ca_file = /etc/ssl/misc/alphassl_intermediate_ca.crt ssl_dh = # hidden, use -P to show it ssl_key = # hidden, use -P to show it ssl_protocols = !SSLv2 !SSLv3 !TLSv1 userdb { driver = passwd } protocol lmtp { mail_plugins = stats notify replication fts fts_lucene sieve ssl_dh = # hidden, use -P to show it } protocol !indexer-worker { ssl_dh = # hidden, use -P to show it } protocol lda { mail_plugins = stats notify replication fts fts_lucene sieve ssl_dh = # hidden, use -P to show it } protocol imap { mail_plugins = stats notify replication fts fts_lucene imap_stats ssl_dh = # hidden, use -P to show it } protocol sieve { ssl_dh = # hidden, use -P to show it } protocol pop3 { ssl_dh = # hidden, use -P to show it } And showing with -P as an example: protocol pop3 { ssl_dh = -----BEGIN DH PARAMETERS----- MIIBCAKCAQEAo4NpFI4fpUe65FVv1hotVS9pTUbCKs1ypGRZcFMXzpsXPqHU+M4s ... AAAAAAAAAAAAAAAAAAAAAAAAAAA= -----END DH PARAMETERS----- There is a single set of valid DH parameters for every protocol as listed above. It seems odd that ssl_dh is defined all of these protocols specifically too. This specific per-protocol definition of ssl_dh isn't specified in any config file. Reuben

3 4

Replication to wrong mailbox
by Ralf Becker 02 Nov '17

02 Nov '17

It happened now twice that replication created folders and mails in the wrong mailbox :( Here's the architecture we use: - 2 Dovecot (2.2.32) backends in two different datacenters replicating via a VPN connection - Dovecot directors in both datacenters talks to both backends with vhost_count of 100 vs 1 for local vs remote backend - backends use proxy dict via a unix domain socket and socat to talk via tcp to a dict on a different server (kubernetes cluster) - backends have a local sqlite userdb for iteration (also containing home directories, as just iteration is not possible) - serving around 7000 mailboxes in a roughly 200 different domains Everything works as expected, until dict is not reachable eg. due to a server failure or a planed reboot of a node of the kubernetes cluster. In that situation it can happen that some requests are not answered, even with Kubernetes running multiple instances of the dict. I can only speculate what happens then: it seems the connection failure to the remote dict is not correctly handled and leads to situation in which last mailbox/home directory is used for the replication :( When it happened the first time we attributed it to the fact that the Sqlite database at that time contained no home directory information, which we fixed after. This first time (server failure) took a couple of minutes and lead to many mailboxes containing mostly folders but also some new arrived mails belonging to other mailboxes/users. We could only resolve that situation by rolling back to a zfs snapshot before the downtime. The second time was last Friday night during a (much shorter) reboot of a Kubernetes node and lead only to a single mailbox containing folders and mails of other mailboxes. That was verified by looking at timestamps of directories below $home/mdbox/mailboxes and files in $home/mdbox/storage. I can not tell if adding the home directory to the Sqlite database or the shorter time of the failure limited the wrong replication to a single mailbox. Can someone with more knowledge of the Dovecot code please check/verify how replication deals with failures in proxy dict. I'm of cause happy to provide more information of our configuration if needed. Here is an exert of our configuration (full doveconf -n is attached): passdb { args = /etc/dovecot/dovecot-dict-master-auth.conf driver = dict master = yes } passdb { args = /etc/dovecot/dovecot-dict-auth.conf driver = dict } userdb { driver = prefetch } userdb { args = /etc/dovecot/dovecot-dict-auth.conf driver = dict } userdb { args = /etc/dovecot/dovecot-sql.conf driver = sql } dovecot-dict-auth.conf: uri = proxy:/var/run/dovecot_auth_proxy/socket:backend password_key = passdb/%u/%w user_key = userdb/%u iterate_disable = yes dovecot-dict-master-auth.conf: uri = proxy:/var/run/dovecot_auth_proxy/socket:backend password_key = master/%{login_user}/%u/%w iterate_disable = yes dovecot-sql.conf: driver = sqlite connect = /etc/dovecot/users.sqlite user_query = SELECT home,NULL AS uid,NULL AS gid FROM users WHERE userid = '%n' AND domain = '%d' iterate_query = SELECT userid AS username, domain FROM users -- Ralf Becker EGroupware GmbH [www.egroupware.org] Handelsregister HRB Kaiserslautern 3587 Geschäftsführer Birgit und Ralf Becker Leibnizstr. 17, 67663 Kaiserslautern, Germany Telefon +49 631 31657-0

3 5

How to limit Apple Mail (desktop)?
by Rupert Gallagher 02 Nov '17

02 Nov '17

By default, Apple Mail downloads all e-mails from server's account. Previous versions of this client allowed to opt-out. The latest two versions? however, only allow to opt-out from downloading the attachments. The stress on the server is unbearable. We cannot ask users to be considerate: this is the default behaviour of Apple Mail. We need a server-side solution to the problem. Please share your ideas.

6 13

LDAP authentication and shadowExpire
by Mantas Gegužis 02 Nov '17

02 Nov '17

Hi, I am trying to configure Dovecot (2.2.27) with LDAP passdb, specifically with authentication binds (https://wiki.dovecot.org/AuthDatabase/LDAP/AuthBinds) Atribute shadowExpire has a unix time stamp value. Is there a way to write pass_filter like shadowExpire<ToDay? Or maybe there is better way to implement password expiration in Dovecot? -- Pagarbiai Mantas Gegužis VU Informacinių technologijų taikymo centras

2 1

Re: How to limit Apple Mail (desktop)?
by Joseph Tam 01 Nov '17

01 Nov '17

"@lbutlr" <kremels(a)kreme.com> writes: (Are you the OP, or have I mistakenly atributed this to Rupert Gallagher?) >> So what the composition of all this traffic? Are you saying the mail >> client is ultra dumb and repeatedly downloading entire messages, read >> and unread, attachment and all (i.e. you're truly bandwidth limited?) > > It most certainly does not do that. If this is the case for the OP, it's back to square one to find log entries, and/or nfsstat/iostat/vmstat/etc output to see what is "killing" the server. File locking issues, mail_max_userip_connections and process limit values could also cause service flakiness. Apple mail readers seems to gobble up IMAP connections like candy. Joseph Tam <jtam.home(a)gmail.com>

1 0

IMAP Benchmarking, active/active cluster with GFS2
by Hristo Pavlov 01 Nov '17

01 Nov '17

Hi All, We're on migration stage to a new 2-node active/active cluster with shared iSCSI storage, everything is ready, but we are in the process of I/O testing, before we going to in production. Cluster info: 2 nodes with CentOS 7.4 balancer ( keepalived + ldirectord ), 2 dovecot directors, 2 dovecot IMAP backends, 2 Postfix SMTP, gfs2 ( corosync + dlm ), LMTP between Postfix and Dovecot directors ( proxy ) and Dovecot backends. Everything seems normal, the users are mapped to dovecot backends, the balancers and the directors are working properly. The measurements were created under the following conditions : - operating system : CentOS Linux release 7.4.1708 (Core)- virtual server (KVM) - (2 cores per virtual socket) and 4 GB RAM - RAID 10 ( 6 x 2TB Seagate ST2000NX0273 SAS 7200 RPM ( iSCSI SAN Infrotrend Storage DS 4024 ), partition 5.45 TB formatted with gfs2. - Dovecot 2.2.10 - imaptest v.1.0.0 We run a test with ./imaptest userfile=users.txt mbox=dovecot-crlf secs=300 clients=50 append=100,0 logout=0 msgs=10000000, part of the output is that, but we can't understand what mean these values, anyone who has experience with imaptest can explain what they mean? 100% 50% 50% 100% 100% 100% 50% 100% 100% 100% 30% 0 223 216 0 442 657 219 218 443 438 50/ 50 0 229 212 0 418 596 194 224 428 424 50/ 50 0 217 226 0 436 632 227 223 429 428 50/ 50 0 214 226 0 432 644 207 193 429 435 50/ 50 0 213 204 0 414 587 209 213 414 417 50/ 50 0 195 206 0 427 611 213 203 426 420 50/ 50 0 225 200 0 435 642 215 226 439 445 50/ 50 0 229 194 0 441 637 223 213 441 436 50/ 50 0 213 219 0 434 616 212 232 431 428 50/ 50 0 210 213 0 427 622 203 219 434 440 50/ 50 0 112 113 0 35 30 30 56 87 111 ms/cmd avg Logi List Stat Sele Fetc Fet2 Stor Dele Expu Appe 100% 50% 50% 100% 100% 100% 50% 100% 100% 100% 30% 0 231 246 0 443 622 204 211 444 440 50/ 50 0 215 211 0 431 601 194 219 428 430 50/ 50 0 230 228 0 445 626 216 235 445 440 50/ 50 0 218 234 0 429 624 182 225 420 428 50/ 50 0 223 222 0 427 640 214 215 430 431 50/ 50 0 210 219 0 424 582 201 213 433 428 50/ 50 0 198 208 0 418 579 212 210 416 412 50/ 50 0 221 211 0 419 617 209 215 418 420 50/ 50 0 208 196 0 405 566 223 189 413 413 50/ 50 0 215 244 0 441 639 198 212 431 435 50/ 50 0 115 114 0 35 30 30 57 87 112 ms/cmd avg Logi List Stat Sele Fetc Fet2 Stor Dele Expu Appe 100% 50% 50% 100% 100% 100% 50% 100% 100% 100% 30% 0 199 219 0 422 608 206 205 424 420 50/ 50 0 214 206 0 429 616 209 208 432 435 50/ 50 0 227 204 0 413 583 200 213 412 410 50/ 50 0 192 214 0 416 609 212 219 411 415 50/ 50 0 212 215 0 426 625 204 225 434 428 50/ 50 0 202 209 0 423 585 224 197 415 421 50/ 50 0 216 221 0 422 599 190 197 427 426 50/ 50 0 208 207 0 414 579 209 211 414 410 50/ 50 0 205 211 0 432 616 212 213 423 427 50/ 50 0 225 207 0 432 642 208 215 436 434 50/ 50 0 115 115 0 36 31 32 59 89 113 ms/cmd avg Logi List Stat Sele Fetc Fet2 Stor Dele Expu Appe 100% 50% 50% 100% 100% 100% 50% 100% 100% 100% 30% 0 211 216 0 431 614 212 221 437 439 50/ 50 0 165 159 0 324 487 160 148 322 315 50/ 50 0 225 199 0 406 568 215 209 403 410 50/ 50 0 213 217 0 441 617 202 220 448 442 50/ 50 0 221 230 0 439 609 229 216 428 437 50/ 50 0 227 211 0 429 595 210 206 432 430 50/ 50 0 196 218 0 423 619 209 207 425 419 50/ 50 0 218 194 0 422 596 199 212 417 422 50/ 50 0 223 213 0 427 599 221 220 434 432 50/ 50 0 185 203 0 405 558 226 211 399 403 50/ 50 0 118 118 0 37 32 31 58 91 116 ms/cmd avg Totals: Logi List Stat Sele Fetc Fet2 Stor Dele Expu Appe 100% 50% 50% 100% 100% 100% 50% 100% 100% 100% 30% 50 61115 61109 50 122229 174619 59582 60969 122229 122229 Both nodеs pick up load average about 20-30 and io wait 14-20%. top - 16:34:50 up 7 days, 1:35, 1 user, load average: 22.22, 9.18, 3.47 Tasks: 244 total, 4 running, 240 sleeping, 0 stopped, 0 zombie %Cpu(s): 28.8 us, 29.8 sy, 0.0 ni, 16.4 id, 14.9 wa, 0.0 hi, 10.1 si, 0.0 st KiB Mem : 4013876 total, 134212 free, 1083648 used, 2796016 buff/cache KiB Swap: 6292476 total, 5974836 free, 317640 used. 2449504 avail Mem Do you think that's normal? Тhis test is only for 50 users, if run it for 100 have many stalled commands... We have about 500-700 mailboxes and we want to testing a load close to a real environment. Can anyone help with ideas? Thank you very much!

1 0

Re: How to limit Apple Mail (desktop)?
by Joseph Tam 01 Nov '17

01 Nov '17

Rupert Gallagher writes: > By default, Apple Mail downloads all e-mails from? server's account. > Previous versions of this client allowed to opt-out. The latest two > versions? however, only allow to opt-out from downloading the > attachments. > > The stress on the server is unbearable. We cannot ask users to be > considerate: this is the default behaviour of Apple Mail. (I'm coming into this thread late.) I'm having a hard time visualizing the cause of your problem. Most big messages have the bulk of their data as attachments (which you state the mail reader can defer downloading). Also, readers usually cache local copies, so they're downloaded once. So what the composition of all this traffic? Are you saying the mail client is ultra dumb and repeatedly downloading entire messages, read and unread, attachment and all (i.e. you're truly bandwidth limited?) Do your users typically have many concurrent readers for the same mailbox? What kind of session numbers are you supporting? 100s? 1000s? 10K+? Your data outflow has an incoming counterpart: if you're having a hard time serving it out, is your MTA also having a hard time with the incoming volume? Can it simply be the case you've underscaled your remote mail service? Joseph Tam <jtam.home(a)gmail.com>

2 1

All over sudden dovecot thinks FS is read only
by Tobi 31 Oct '17

31 Oct '17

Hi list I have to dovecot instances running which host my mailboxes on Centos7 dovecot.x86_64 1:2.2.26.0-2.el7.centos installed dovecot-debuginfo.x86_64 1:2.2.26.0-2.el7.centos installed dovecot-mysql.x86_64 1:2.2.26.0-2.el7.centos installed dovecot-pigeonhole.x86_64 1:2.2.26.0-2.el7.centos installed all over sudden both dovecot "think" that the mailbox filesystem is read only and fill the logs with Oct 28 11:39:50 mbox1 dovecot: lmtp(tobster(a)brain-force.ch): Error: ssY/MGZQ9FnoLgAAC4IaJw:2: sieve: failed to open logfile (LOGGING TO STDERR): open(/home/vmail/brain-force.ch/tobster/.dovecot.sieve.log) failed: Read-only file system But a test at cli shows that I can write to the location $ echo "test" >/home/vmail/brain-force.ch/tobster/.dovecot.test $ cat /home/vmail/brain-force.ch/tobster/.dovecot.test test $ echo "test1" >/home/vmail/brain-force.ch/tobster/.dovecot.test $ cat /home/vmail/brain-force.ch/tobster/.dovecot.test test1 Mounts show that the FS should be rw /dev/vda2 / ext4 rw,relatime,data=ordered 0 0 I restarted dovecot several time already. As well I restarted the physical host on which the dovecot vms reside. Filesystems are not full and are not running out of inodes. Does anyone have an idea why dovecot suddenly behaves like that? Thanks a lot for any hint Regards tobi

4 6

Pigeonhole vacation and envelope extension recipient addresses
by David Zambonini 31 Oct '17

31 Oct '17

I have a situation where my LMTP RCPT TO: goes to a mailbox user account that does not reflect either the final (through aliasing) or envelope email address. SMTP RCPT TO: (envelope-local-part@envelope-domain) Final Recipient: (final-local-part@final-domain) LMTP RCPT TO: (mailbox-local-part@mailbox-domain) I'd like to use the final recipient as the vacation address, but also have the envelope recipient address used in place of the LTMP RCPT TO for the envelope extension. At the moment it looks like I can set one or the other? Let's say I add an x-final-to and x-envelope-to header to the email headers before delivering via LMTP. Then, setting: sieve_vacation_use_original_recipient = yes lda_original_recipient_header = x-final-to will get the vacation replies coming from where I'd like, but the envelope extension will not reflect the original SMTP envelope to. Conversely, setting: lda_original_recipient_header = x-envelope-to might get the envelope extension working correctly, but will not give vacation replies from where I'd like. Is there some way anyone is aware of to configure both final and envelope senders based on email headers (that doesn't involve lda flags, these are on different systems), or am I currently out of luck? I've tried playing with DSN ORCPT but it seems like a non-starter trying to get it passed through (exim) -- David Zambonini

3 2

antispam plugin with IMAPSieve
by j.emerlik 31 Oct '17

31 Oct '17

Hi, my dovecot is configured with IMAP Sieve antispam plugin (sa-learn), everything seems to be working correctly but in debug mode in my log file I noticed "dovecot: imap: Error". Last 14 lines od my log file: Oct 31 15:05:25 mnode1 dovecot: imap: Error: Oct 31 15:05:25.040 [10743] dbg: bayes: tokenized header: 90 tokens Oct 31 15:05:25 mnode1 dovecot: imap: Error: Oct 31 15:05:25.067 [10743] dbg: bayes: seen (8e031cc9fec44b6607dc7f6b37903fc49e9c8526@sa_generated) put Oct 31 15:05:25 mnode1 dovecot: imap: Error: Oct 31 15:05:25.067 [10743] dbg: bayes: learned '8e031cc9fec44b6607dc7f6b37903fc49e9c8526@sa_generated', atime: 1509457623 Oct 31 15:05:25 mnode1 dovecot: imap: Error: Oct 31 15:05:25.068 [10743] dbg: plugin: Mail::SpamAssassin::Plugin::Bayes=HASH(0x2adc340) implements 'learner_close', priority 0 Oct 31 15:05:25 mnode1 dovecot: imap: Error: Oct 31 15:05:25.033 [10743] dbg: bayes: using userid: 7 Oct 31 15:05:25 mnode1 dovecot: imap: Error: Oct 31 15:05:25.037 [10743] dbg: bayes: tokenized body: 174 tokens Oct 31 15:05:25 mnode1 dovecot: imap: Error: Oct 31 15:05:25.037 [10743] dbg: bayes: tokenized uri: 0 tokens Oct 31 15:05:25 mnode1 dovecot: imap: Error: Oct 31 15:05:25.037 [10743] dbg: bayes: tokenized invisible: 0 tokens Oct 31 15:05:25 mnode1 dovecot: imap: Error: Oct 31 15:05:25.040 [10743] dbg: bayes: tokenized header: 90 tokens Oct 31 15:05:25 mnode1 dovecot: imap: Error: Oct 31 15:05:25.067 [10743] dbg: bayes: seen (8e031cc9fec44b6607dc7f6b37903fc49e9c8526@sa_generated) put Oct 31 15:05:25 mnode1 dovecot: imap: Error: Oct 31 15:05:25.067 [10743] dbg: bayes: learned '8e031cc9fec44b6607dc7f6b37903fc49e9c8526@sa_generated', atime: 1509457623 Logs looks good and I don't understand "Error:" from log, It looks like sa-learn is connected to database and learned bayes. Error in log it's normal or It's means that it not work ? Regards, Jack

2 1

Re: Bug#876364: dovecot-sieve: Just discovered imap_sieve/sieve_imapsieve is not set up to work with virtual mailboxes.
by Apollon Oikonomopoulos 31 Oct '17

31 Oct '17

Control: tags -1 + moreinfo upstream [Forwarding this to the Dovecot mailing list, just in case someone can help] Hi, Thanks for the report! See my comments inline. On 11:56 Thu 21 Sep , Thurgood Angelou wrote: > Package: dovecot-core > Version: 1:2.2.32-2 > > I've just discovered a bug where the sieve plugin (especially IMAP) > will not work with a virtual mailbox. I recently found this out when > testing a virtual mailbox setup and I use imap_sieve for SPAM > filtering so to lose that would be painful. > > This is what is reported in dovecot's debug log... > > Sep 21 10:53:01 imap(personal(a)othersider92.com): Panic: file mail-index-map.c: line 549 (mail_index_map_lookup_seq_range): assertion failed: (first_uid > 0) > Sep 21 10:53:01 imap(personal(a)othersider92.com): Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x9f0a2) [0x7f4226fd50a2] -> /usr/lib/dovecot/libdovecot.so.0(+0x9f19a) [0x7f4226fd519a] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7f4226f65cf8] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_index_map_lookup_seq_range+0x120) [0x7f422733dae0] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0xe8d1d) [0x7f422734cd1d] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_index_lookup_seq+0xf) [0x7f4227350e9f] -> /usr/lib/dovecot/modules/lib20_virtual_plugin.so(+0x82aa) [0x7f422678a2aa] -> /usr/lib/dovecot/modules/lib95_imap_sieve_plugin.so(+0x708c) [0x7f422657d08c] -> /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_transaction_commit_get_changes+0x52) [0x7f42272adca2] -> dovecot/imap(+0x10084) [0x556502adb084] -> dovecot/imap(command_exec+0x5c) [0x556502ae7d9c] -> dovecot/imap(+0x1b322) [0x556502ae6322] -> dovecot/imap(+0x1b3bc) [0x556502ae63bc] -> dovecot/imap(client_handle_input > +0x18d) [0x556502ae677d] -> dovecot/imap(client_input+0xac) [0x556502ae6ccc] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x52) [0x7f4226fea742] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0x12e) [0x7f4226febd8e] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0x36) [0x7f4226fea7d6] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x38) [0x7f4226fea988] -> /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f4226f70353] -> dovecot/imap(main+0x329) [0x556502ad9139] -> /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf1) [0x7f4226bb92e1] -> dovecot/imap(_start+0x2a) [0x556502ad92ca] After mixing in the debug symbols, this backtrace becomes: /usr/lib/dovecot/libdovecot.so.0(+0x9f0a2) [0x7f4226fd50a2] default_fatal_finish at ./src/lib/failures.c:195 /usr/lib/dovecot/libdovecot.so.0(+0x9f19a) [0x7f4226fd519a] ?? at ./src/lib/failures.c:670 /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7f4226f65cf8] i_fatal at ./src/lib/failures.c:280 /usr/lib/dovecot/libdovecot-storage.so.0(mail_index_map_lookup_seq_range+0x120) [0x7f422733dae0] mail_index_map_lookup_seq_range at ./src/lib-index/mail-index-map.c:550 /usr/lib/dovecot/libdovecot-storage.so.0(+0xe8d1d) [0x7f422734cd1d] tview_lookup_seq_range at ./src/lib-index/mail-index-transaction-view.c:178 /usr/lib/dovecot/libdovecot-storage.so.0(mail_index_lookup_seq+0xf) [0x7f4227350e9f] mail_index_lookup_seq at ./src/lib-index/mail-index-view.c:522 /usr/lib/dovecot/modules/lib20_virtual_plugin.so(+0x82aa) [0x7f422678a2aa] virtual_mail_set_uid at ./src/plugins/virtual/virtual-mail.c:213 /usr/lib/dovecot/modules/lib95_imap_sieve_plugin.so(+0x708c) [0x7f422657d08c] imap_sieve_mailbox_transaction_run at ./pigeonhole/src/plugins/imapsieve/imap-sieve-storage.c:752 (inlined by: imap_sieve_mailbox_transaction_commit at ./pigeonhole/src/plugins/imapsieve/imap-sieve-storage.c:807) /usr/lib/dovecot/libdovecot-storage.so.0(mailbox_transaction_commit_get_changes+0x52) [0x7f42272adca2] mailbox_transaction_commit_get_changes at ./src/lib-storage/mail-storage.c:2083 dovecot/imap(+0x10084) [0x556502adb084] cmd_copy_full at ./src/imap/cmd-copy.c:146 dovecot/imap(command_exec+0x5c) [0x556502ae7d9c] command_exec at ./src/imap/imap-commands.c:200 dovecot/imap(+0x1b322) [0x556502ae6322] client_command_input at ./src/imap/imap-client.c:1088 dovecot/imap(+0x1b3bc) [0x556502ae63bc] client_command_input at ./src/imap/imap-client.c:1150 dovecot/imap(client_handle_input+0x18d) [0x556502ae677d] client_handle_input at ./src/imap/imap-client.c:1203 dovecot/imap(client_input+0xac) [0x556502ae6ccc] client_input at ./src/imap/imap-client.c:1249 /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x52) [0x7f4226fea742] io_loop_call_io at ./src/lib/ioloop.c:600 /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0x12e) [0x7f4226febd8e] io_loop_handler_run_internal at ./src/lib/ioloop-epoll.c:223 /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0x36) [0x7f4226fea7d6] io_loop_handler_run at ./src/lib/ioloop.c:648 /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x38) [0x7f4226fea988] io_loop_run at ./src/lib/ioloop.c:622 /usr/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7f4226f70353] master_service_run at ./src/lib-master/master-service.c:667 dovecot/imap(main+0x329) [0x556502ad9139] main at ./src/imap/main.c:491 /lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0xf1) [0x7f4226bb92e1] __libc_start_main at ../csu/libc-start.c:325 dovecot/imap(_start+0x2a) [0x556502ad92ca] start at ??:0 > -- System Information: > Debian Release: 8.2 > APT prefers oldstable-updates > APT policy: (500, 'oldstable-updates'), (500, 'unstable'), (500, 'testing'), (500, 'oldstable') > Architecture: amd64 (x86_64) > > Kernel: Linux 3.16.0-4-amd64 (SMP w/2 CPU cores) > Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), LANGUAGE=en_GB:en (charmap=UTF-8) > Shell: /bin/sh linked to /bin/dash > Init: systemd (via /run/systemd/system) > > Versions of packages dovecot-sieve depends on: > ii dovecot-core 1:2.2.32-2 > ii libc6 2.24-17 > ii ucf 3.0030 > > dovecot-sieve recommends no packages. > > dovecot-sieve suggests no packages. > > Versions of packages dovecot-sieve is related to: > ii dovecot-core [dovecot-common] 1:2.2.32-2 > pn dovecot-dbg <none> > pn dovecot-dev <none> > ii dovecot-gssapi 1:2.2.32-2 > ii dovecot-imapd 1:2.2.32-2 > ii dovecot-ldap 1:2.2.32-2 > ii dovecot-lmtpd 1:2.2.32-2 > ii dovecot-managesieved 1:2.2.32-2 > ii dovecot-mysql 1:2.2.32-2 > pn dovecot-pgsql <none> > pn dovecot-pop3d <none> > ii dovecot-sieve 1:2.2.32-2 > pn dovecot-sqlite <none> Could you also include the output of doveconf -n? Regards, Apollon

3 2

Re: Disconnected: Inactivity (no auth attempts in 180 secs)
by Joseph Tam 31 Oct '17

31 Oct '17

Alexandre <byalefp(a)yahoo.com.br> wrote: > I can send and receive mails using: > IMAP 143 with TLS OK, IMAP STARTTLS is working in some sense. (Your MTA handles SMTP, not dovecot.) > The hangup occours inside of my LAN using Outlook 2016, and Outside > also trying access on 4G from my Android smartphone. > > My goal is enable also POP3s and IMAPs using TLS. [voluminous diagnostics] I can't really see from what you present what the problem is. Can you report the output of openssl s_client -starttls imap {imap-server}:143 openssl s_client -starttls pop3 {imap-server}:110 (from both inside and outside), as well as any matching log entries. Joseph Tam <jtam.home(a)gmail.com>

1 0

Re: Password encription
by Joseph Tam 30 Oct '17

30 Oct '17

> Aki, (Not speaking for Aki) > I understand that salted passwords saved in my database and stronger hash > algorithm course that it will require more processor time/power to crack my > passwords. > > But only when hackers have direct access to my database what means that > hackers have access to my passwords hashes (eg. hackers stolen my database). > > My Dovecot use passwords saved in database as SHA256 and hackers can use > only SMTP, IMAP or POP3 services to try crack it using dictionary attack (I > understand that they using plain text dictionaty passwords). > > Stronger hash algorithm and salt is useful when hackers have direct access > to my database but when they use services as SMTP, IMAP or POP3 > to crack passwords only longer and more complicated password can be more > secure. > > I do not understand this correctly ? Yes, your understanding is basically correct. However, history gives lots of examples of broken systems that explicitly or implicitly relied on one critical system not failing -- they lacked defense in depth or resilience. Examples are "this system has no bugs", "my system does not leak hashes", "this algorithm is unbreakable", "we'll never see a CAT5 hurricane", etc. If these critical assumption ever becomes untrue, the foundation of your defense crumbles. If you narrow your attack definition to only include in-protocol remote brute forcing, then any decent password will take far too long to break that way (esp. with throttling controls that are built-in). Your log files will overflow recording the attempts long before you can expect a password to be cracked. However, you're still susceptable to the qwerty passwords. If this is your *only* line of defense, it is brittle. A robustly secure system will overlap protection: strong hashes, password compliance systems, brute force countermeasures, file permissions/OS hardening, network origins vetting, anti-DoS measures, etc. Keep this picture in mind that I found on CLCERT https://www.clcert.cl/humor/img/weakest-link-road.jpg Joseph Tam <jtam.home(a)gmail.com>

1 0

Dovecot and the Maildir path
by Will Merkens 30 Oct '17

30 Oct '17

System basics Centos 7.3 Dovecot 2.2.32 (dfbe293d4) I am working on a replacement mail server for work and one of the features I wanted was ldap authentication After much fiddling I got it to work. But I encountered a issue where two different methods of testing a mail account resulted in the mail_location being different I set mail_location = maildir:/var/spool/maildir/%d/%n/Maildir in dovecot.conf when I test the authentication and to see if the folders are created correctly on first use I have two results depending on how I test. First test was from openssl openssl s_client -connect mail2:993 I have no problem connecting, I issue the following commands * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN] Dovecot ready. a login testuser(a)userful.com ******** a OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDSUBJECT MULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS BINARY MOVE] Logged in a list "" * * LIST (\HasNoChildren) "." INBOX a OK List completed (0.001 + 0.000 secs). * BYE Disconnected for inactivity. closed But when I look in the mail server at /var/spool/maildir the testuser is not created inside of userful.com but at the same level as userful.com contrary to the %d in mail_location settings. Now second method doveadm -D mailbox list -u 'testuser(a)userful.com' This correctly creates the user under the domain as specified. for logs I have from journalctl for openssl Oct 30 07:37:12 mail2 dovecot[10722]: auth: Debug: client in: AUTH 2 PLAIN service=imap secured session=VgBmvMNcQoTAqHsn lip=192.168. 123.236 rip=192.168.123.39 lport=993 rport=33858 resp=AHRlc3R1c2VyQHVzZXJmdWwuY29tADk5dGVzdHVzZXI5OQ== (previous base64 data may contain sensitive data) Oct 30 07:37:12 mail2 dovecot[10722]: auth: Debug: ldap(testuser(a)userful.com,192.168.123.39,<VgBmvMNcQoTAqHsn>): bind search: base=ou=People,dc=userful,dc=ca filter=(&(objectClass=posixAccount)(uid=testuser)) Oct 30 07:37:12 mail2 dovecot[10722]: auth: Debug: ldap(testuser(a)userful.com,192.168.123.39,<VgBmvMNcQoTAqHsn>): result: uid=testuser; uid unused Oct 30 07:37:12 mail2 dovecot[10722]: auth: Debug: ldap(testuser(a)userful.com,192.168.123.39,<VgBmvMNcQoTAqHsn>): username changed testuser(a)userful.com -> testuser Oct 30 07:37:12 mail2 dovecot[10722]: auth: Debug: ldap(testuser,192.168.123.39,<VgBmvMNcQoTAqHsn>): result: uid=testuser Oct 30 07:37:12 mail2 dovecot[10722]: auth: Debug: client passdb out: OK 2 user=testuser original_user=testuser(a)userful.com Oct 30 07:37:12 mail2 dovecot[10722]: auth: Debug: master in: REQUEST 2784755713 10725 2 d4a357fe811a1da8bd725b82fc1da2ab session_pid=11051 request_auth_token Oct 30 07:37:12 mail2 dovecot[10722]: auth: Debug: ldap(testuser,192.168.123.39,<VgBmvMNcQoTAqHsn>): user search: base=ou=People,dc=userful,dc=ca scope=subtree filter=(&(objectClass=posixAccount)(uid=testuser)) fields=homeDirectory,uidNumber,gidNumber Oct 30 07:37:12 mail2 dovecot[10722]: auth: Debug: ldap(testuser,192.168.123.39,<VgBmvMNcQoTAqHsn>): result: homeDirectory=/nfs/home/test-user uidNumber=6000 gidNumber=1000; homeDirectory,uidNumber,gidNumber unused Oct 30 07:37:12 mail2 dovecot[10722]: auth: Debug: ldap(testuser,192.168.123.39,<VgBmvMNcQoTAqHsn>): result: homeDirectory=/nfs/home/test-user uidNumber=6000 gidNumber=1000 Oct 30 07:37:12 mail2 dovecot[10722]: auth: Debug: master userdb out: USER 2784755713 testuser home=/nfs/home/test-user uid=6000 gid=1000 auth_token=29e6ac32c85cf1b69eeabbe8e4f8e4810e9a3468 auth_user=testuser(a)userful.com Oct 30 07:37:12 mail2 dovecot[10722]: imap-login: Login: user=<testuser>, method=PLAIN, rip=192.168.123.39, lip=192.168.123.236, mpid=11051, TLS, session=<VgBmvMNcQoTAqHsn> for doveadm Oct 30 07:39:12 mail2 dovecot[10722]: auth: Debug: master in: USER 1 testuser(a)userful.com service=doveadm Oct 30 07:39:12 mail2 dovecot[10722]: auth: Debug: ldap(testuser(a)userful.com): user search: base=ou=People,dc=userful,dc=ca scope=subtree filter=(&(objectClass=posixAccount)(uid=testuser)) fields=homeDirectory,uidNumber,gidNumber Oct 30 07:39:12 mail2 dovecot[10722]: auth: Debug: ldap(testuser(a)userful.com): result: homeDirectory=/nfs/home/test-user uidNumber=6000 gidNumber=1000; homeDirectory,uidNumber,gidNumber unused Oct 30 07:39:12 mail2 dovecot[10722]: auth: Debug: ldap(testuser(a)userful.com): result: homeDirectory=/nfs/home/test-user uidNumber=6000 gidNumber=1000 Oct 30 07:39:12 mail2 dovecot[10722]: auth: Debug: userdb out: USER 1 testuser(a)userful.com home=/nfs/home/test-user uid=6000 gid=1000 Any ideas and any settings files that I need to post. -- William Merkens IT Support Analyst Userful Corporation +1 403.289.2177 ext.289 +1 866 USERFUL (1-866-873-7385) Suite 300, 736 8th Ave. SW Calgary AB T2P 1H4 Managed Desktops Done Right. http://www.userful.com

2 1

dovecot-2.3 (-git) Warning and Fatal Compile Error
by Reuben Farrelly 30 Oct '17

30 Oct '17

I haven't been tracking dovecot-2.3 until now, but I've just given it a quick run, and there are a few things that may need some attention. Linux x86-64, Gentoo, GCC-7.2.0 Dovecot 2.3 @ commit 32c2612514a404ebc226f32bb88f28d76ceb1db1 Compiled with: ./configure --prefix=/usr --build=x86_64-pc-linux-gnu --host=x86_64-pc-linux-gnu --mandir=/usr/share/man --infodir=/usr/share/info --datadir=/usr/share --sysconfdir=/etc --localstatedir=/var/lib --disable-dependency-tracking --disable-silent-rules --docdir=/usr/share/doc/dovecot-9999_p20171018 --htmldir=/usr/share/doc/dovecot-9999_p20171018/html --libdir=/usr/lib64 --localstatedir=/var --with-moduledir=/usr/lib64/dovecot --without-stemmer --disable-rpath --with-icu --with-systemdsystemunitdir=/usr/lib/systemd/system --enable-maintainer-mode --with-bzlib --without-libcap --without-gssapi --without-ldap --with-lucene --with-lz4 --with-lzma --without-mysql --with-pam --without-pgsql --without-sqlite --without-solr --with-ssl --with-libwrap --without-textcat --without-vpopmail --with-zlib --disable-static Warnings: (Lots of this one...) /bin/sh ../../../libtool --tag=CC --mode=compile x86_64-pc-linux-gnu-gcc -DHAVE_CONFIG_H -I. -I../../.. -I../../../src/lib -I../../../src/lib-settings -I../../../src/lib-fts -I../../../src/lib-ssl-iostream -I../../../src/lib-http -I../../../src/lib-mail -I../../../src/lib-imap -I../../../src/lib-index -I../../../src/lib-storage -I../../../src/lib-storage/index -I../../../src/doveadm -std=gnu99 -O0 -g -pipe -march=native -mtune=native -ggdb -fstack-protector-strong -D_FORTIFY_SOURCE=2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime -Wstrict-aliasing=2 -c -o fts-user.lo fts-user.c libtool: compile: x86_64-pc-linux-gnu-gcc -DHAVE_CONFIG_H -I. -I../../.. -I../../../src/lib -I../../../src/lib-settings -I../../../src/lib-fts -I../../../src/lib-ssl-iostream -I../../../src/lib-http -I../../../src/lib-mail -I../../../src/lib-imap -I../../../src/lib-index -I../../../src/lib-storage -I../../../src/lib-storage/index -I../../../src/doveadm -std=gnu99 -O0 -g -pipe -march=native -mtune=native -ggdb -fstack-protector-strong -D_FORTIFY_SOURCE=2 -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wpointer-arith -Wchar-subscripts -Wformat=2 -Wbad-function-cast -fno-builtin-strftime -Wstrict-aliasing=2 -c fts-storage.c -fPIC -DPIC -o .libs/fts-storage.o <command-line>:0:0: warning: "_FORTIFY_SOURCE" redefined <built-in>: note: this is the location of the previous definition In file included from /usr/include/bits/libc-header-start.h:33:0, from /usr/include/stdlib.h:25, from ../../../src/lib/lib.h:11, from fts-storage.c:3: /usr/include/features.h:376:4: warning: #warning _FORTIFY_SOURCE requires compiling with optimization (-O) [-Wcpp] # warning _FORTIFY_SOURCE requires compiling with optimization (-O) ^~~~~~~ The build then fails entirely with this: /bin/sh ../../../libtool --tag=CC --mode=compile x86_64-pc-linux-gnu-gcc -DHAVE_CONFIG_H -I. -I../../.. -I/home/portage/portage/net-mail/dovecot-9999_p20171018/work/dovecot-9999_p20171018 -I/home/portage/portage/net-mail/dovecot-9999_p20171018/work/dovecot-9999_p20171018/src/lib -I/home/portage/portage/net-mail/dovecot-9999_p20171018/work/dovecot-9999_p20171018/src/lib-dict -I/home/portage/portage/net-mail/dovecot-9999_p20171018/work/dovecot-9999_p20171018/src/lib-dns -I/home/portage/portage/net-mail/dovecot-9999_p20171018/work/dovecot-9999_p20171018/src/lib-http -I/home/portage/portage/net-mail/dovecot-9999_p20171018/work/dovecot-9999_p20171018/src/lib-mail -I/home/portage/portage/net-mail/dovecot-9999_p20171018/work/dovecot-9999_p20171018/src/lib-smtp -I/home/portage/portage/net-mail/dovecot-9999_p20171018/work/dovecot-9999_p20171018/src/lib-imap -I/home/portage/portage/net-mail/dovecot-9999_p20171018/work/dovecot-9999_p20171018/src/lib-fs -I/home/portage/portage/net-mail/dovecot-9999_p20171018/work/dovecot-9999_p20171018/src/lib-charset -I/home/portage/portage/net-mail/dovecot-9999_p20171018/work/dovecot-9999_p20171018/src/lib-auth -I/home/portage/portage/net-mail/dovecot-9999_p20171018/work/dovecot-9999_p20171018/src/lib-master -I/home/portage/portage/net-mail/dovecot-9999_p20171018/work/dovecot-9999_p20171018/src/lib-ssl-iostream -I/home/portage/portage/net-mail/dovecot-9999_p20171018/work/dovecot-9999_p20171018/src/lib-compression -I/home/portage/portage/net-mail/dovecot-9999_p20171018/work/dovecot-9999_p20171018/src/lib-settings -I/home/portage/portage/net-mail/dovecot-9999_p20171018/work/dovecot-9999_p20171018/src/lib-test -I/home/portage/portage/net-mail/dovecot-9999_p20171018/work/dovecot-9999_p20171018/src/lib-sasl -I/home/portage/portage/net-mail/dovecot-9999_p20171018/work/dovecot-9999_p20171018/src/lib-stats -I/home/portage/portage/net-mail/dovecot-9999_p20171018/work/dovecot-9999_p20171018/src/lib-dcrypt -I/home/portage/portage/net-mail/dovecot-9999_p20171018/work/dovecot-9999_p20171018/src/lib-program-client -I/home/portage/portage/net-mail/dovecot-9999_p20171018/work/dovecot-9999_p20171018/src/lib-index -I/home/portage/portage/net-mail/dovecot-9999_p20171018/work/dovecot-9999_p20171018/src/lib-storage -I/home/portage/portage/net-mail/dovecot-9999_p20171018/work/dovecot-9999_p20171018/src/lib-storage/list -I/home/portage/portage/net-mail/dovecot-9999_p20171018/work/dovecot-9999_p20171018/src/lib-storage/index -I/home/portage/portage/net-mail/dovecot-9999_p20171018/work/dovecot-9999_p20171018/src/lib-storage/index/raw -I/home/portage/portage/net-mail/dovecot-9999_p20171018/work/dovecot-9999_p20171018/src/lib-imap-storage -I/home/portage/portage/net-mail/dovecot-9999_p20171018/work/dovecot-9999_p20171018/src/plugins/quota -DMODULEDIR=\""/usr/lib64/dovecot"\" -O0 -g -pipe -march=native -mtune=native -ggdb -c -o realpath.lo realpath.c edit-mail.c: In function ‘edit_mail_wrap’: edit-mail.c:235:14: error: too few arguments to function ‘mailbox_transaction_begin’ raw_trans = mailbox_transaction_begin(raw_box, 0); ^~~~~~~~~~~~~~~~~~~~~~~~~ In file included from /home/portage/portage/net-mail/dovecot-9999_p20171018/work/dovecot-9999_p20171018/src/lib-storage/mail-storage-private.h:7:0, from edit-mail.c:16: /home/portage/portage/net-mail/dovecot-9999_p20171018/work/dovecot-9999_p20171018/src/lib-storage/mail-storage.h:651:1: note: declared here mailbox_transaction_begin(struct mailbox *box, ^~~~~~~~~~~~~~~~~~~~~~~~~ edit-mail.c: In function ‘edit_mail_set_cache_corrupted’: edit-mail.c:1662:2: error: too few arguments to function ‘edmail->wrapped->v.set_cache_corrupted’ edmail->wrapped->v.set_cache_corrupted(&edmail->wrapped->mail, field); ^~~~~~ edit-mail.c: In function ‘edit_mail_set_cache_corrupted_reason’: edit-mail.c:1671:21: error: ‘struct mail_vfuncs’ has no member named ‘set_cache_corrupted_reason’; did you mean ‘set_cache_corrupted’? edmail->wrapped->v.set_cache_corrupted_reason ^~~~~~~~~~~~~~~~~~~~~~~~~~ set_cache_corrupted edit-mail.c: At top level: edit-mail.c:1701:2: warning: initialization from incompatible pointer type [-Wincompatible-pointer-types] edit_mail_get_real_mail, ^~~~~~~~~~~~~~~~~~~~~~~ edit-mail.c:1701:2: note: (near initialization for ‘edit_mail_vfuncs.get_backend_mail’) edit-mail.c:1708:2: warning: initialization from incompatible pointer type [-Wincompatible-pointer-types] edit_mail_set_cache_corrupted, ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~ edit-mail.c:1708:2: note: (near initialization for ‘edit_mail_vfuncs.set_cache_corrupted’) edit-mail.c:1710:2: warning: excess elements in struct initializer edit_mail_set_cache_corrupted_reason ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ edit-mail.c:1710:2: note: (near initialization for ‘edit_mail_vfuncs’) make[4]: *** [Makefile:481: edit-mail.lo] Error 1 make[4]: *** Waiting for unfinished jobs.... Reuben

5 9

Re: Password encription
by Joseph Tam 29 Oct '17

29 Oct '17

Aki Tuomi wrote: > The use of salt, today, is to prevent the attacker from directly seeing > who has same passwords. Of course it also will make a rainbow table > attack less useful, Not just less useful, but almost infeasible. Given the use of random salts, you would have to generate (number of possible salts) rainbow tables. This drastically changes the CPU/storage tradeoffs. > but then again, no one uses rainbow tables anymore > since it takes about few minutes to brute force a password in the cloud > or on your home computer GPU. SHA512-CRYPT uses by default 4000 rounds > on dovecot, to make it more computationally expensive, but still it's > not very strong protection anymore. I know it is theoretically possible, but really, how feasible is it? The way people talk about it, they make it sound trivial. As a test, I just generated a hash using "doveadm pw". Any takers? {SHA512-CRYPT}$6$qyQANQFbQGqOSqHh$Z4YVIe.QakXtWs63lWUmzlseKpiFzfPCKhwM0NQk8jP6QeRmk6POkCdSrFBmVO2wh.dgPCPA7Gq3sNUeKOZLM/ > MD5 with or without salt can be ATTAcked at passwords per second speed, > so using CRAM-MD5 of DIGEST-MD5 is very very poor choice. Anything with > MD5 should not be used for passwords these days. > > With Dovecot 2.3 we are making BLF-CRYPT available on all platforms, and > also adding support for ARGON2 when you have libsodium available. Straight hashes, without question, are weak. I routinely break NTLM hashes with rainbow tables. I'm *not* arguing against the use of stronger hashes, I'm just skeptical of the FUD surrounding the user of older salted hashes. This is especially true if the hashes are guarded against leakage, as most are. Strong crypt-hashes are an extra layer of protection (defense in depth). This page (if you trust 3rd parties) will report whether a password was ever found in a breached databases. You can also download the SHA1 hashes of all their known cracked passwords. It's big -- 5.3Gb 7-zipped file. https://haveibeenpwned.com/Passwords "j.emerlik" further asks: > You mean that today they using encrypted passwords to seeing > who has same passwords using brute force, hashes dictionary attack ? They precompute hashes for large number of password candidates, then look up hashes in that table. Rainbow tables are a way of folding large tables into a smaller ones, trading off space for extra CPU time. However, for hashes that use non-trivial salts, you would need to precompute an astronomically large number of tables. An attacker might be better off with a straight CPU-bound brute force search. Joseph Tam <jtam.home(a)gmail.com>

3 3

Need help in understanding auth digest-md5 and realm
by Admin Beckspaced 28 Oct '17

28 Oct '17

Hello dovecot community, I've setup dovecot and need a bit help in understanding the auth mechanism digest-md5 and realm in 10-auth.conf I got auth_mechanisms = plain login digest-md5 cram-md5 apop #auth_realms = #auth_default_realm = So i got empty realms. Auth normally works fine and clients can auth with mechanism digest-md5 and I see the following log entries: dovecot: auth: Debug: sql(user(a)temizbau.de,46.85.229.153,<klUjO3FcTy8uVeWZ>): Generating DIGEST-MD5 from user 'user(a)temizbau.de', password 'xxxx' dovecot: auth: Debug: sql(user(a)gruene-wiesentheid.de,87.168.26.5,<ISVLQXFcT/xXqBoF>): Generating DIGEST-MD5 from user 'user@gruene-wiesentheid.de@', password 'xxxxxxxxxx' dovecot: auth: Debug: sql(user(a)vitaler-genuss.de,81.209.203.170,<tzxyT3FcT9RR0cuq>): Generating DIGEST-MD5 from user 'user(a)vitaler-genuss.de', password 'xxxxxxxxxxx' But sometimes clients get a password mismatch and I the see the following log entries: dovecot: auth: Debug: sql(user(a)temizbau.de,80.187.103.15,<adzhAnVclmxQu2cP>): Generating DIGEST-MD5 from user 'user@temizbau.de@mail.beckspaced.com', password 'xxxx' dovecot: auth: Debug: sql(user(a)thansadet.com,87.218.86.165,<LWItYHVc6r1X2lal>): Generating DIGEST-MD5 from user 'user@thansadet.com@mail.beckspaced.com', password 'xxxxxxxxxx' dovecot: auth: Debug: sql(user(a)plaa-thansadetresort.com,110.164.127.146,<aGhcvHBcStJupH+S>): Generating DIGEST-MD5 from user 'user@plaa-thansadetresort.com@imap.beckspaced.com', password 'xxxxxxxxxx' when there's a password mismatch I see a different user string for generating the digest-md5 hash. i suppose users use a different mail client and the mail client does things differently? How can I fix this password mismatch thing? Do i just need to set an auth_realms of some random string in the 10-auth.conifig Or does the auth_realms need to be a host name? Domain name of some sort? For the moment I just removed the digest-md5 mechanism ... Or could I just simply not offer that mechanism? If someone could shed some light on this I would be more than grateful ;) Thanks & greetings Becki

4 6

Quota warning executable can not log to /dev/stdout
by Michael Härtl 28 Oct '17

28 Oct '17

I'm running dovecot 2.2.27 in a alpine based docker container and want to log to /dev/stdout. I therefore added this setting: log_path = /dev/stdout Logging works fine so far. Now I've added a quota-warning script. With the log_path setting above the script creates warnings like: Oct 28 10:27:01 quota-warning: Error: Can't open log file /dev/stdout: No such device or address Oct 28 10:27:01 quota-warning: Fatal: master: service(quota-warning): child 460 returned error 75 When I change log_path to something like /tmp/dovecot.log everything works fine. Dovecot itself is started via s6 with a run script like this: #!/bin/sh exec /usr/sbin/dovecot -F -c /etc/dovecot/dovecot.conf What could cause this issue and how could I fix it? For the record here's my doveconf -n output: # 2.2.27 (c0f36b0): /etc/dovecot/dovecot.conf # OS: Linux 4.4.27-x86_64-jb1 x86_64 ext4 auth_mechanisms = plain login auth_verbose = yes first_valid_uid = 100 log_path = /dev/stdout mail_gid = dovecot mail_home = /var/mail/domains/%d/%n mail_location = maildir:/var/mail/domains/%d/%n mail_max_userip_connections = 160 mail_plugins = " quota" mail_privileged_group = dovecot mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext namespace inbox { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } prefix = separator = . } passdb { args = /etc/dovecot/dovecot-mysql.conf.ext driver = sql } plugin { quota = maildir:User quota quota_exceeded_message = Storage quota for user %u exceeded (Benutzer %u hat sein Speichervolumen ueberschritten) quota_grace = 10%% quota_rule2 = Trash:storage=+100M quota_status_nouser = DUNNO quota_status_overquota = 552 5.2.2 Mailbox is full quota_status_success = DUNNO quota_warning = storage=85%% quota-warning 80 %u %d } protocols = imap lmtp sieve service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } unix_listener auth-userdb { mode = 0777 } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } service quota-status { client_limit = 1 executable = quota-status -p postfix inet_listener { port = 10001 } } service quota-warning { executable = script /usr/local/bin/quota-warning.sh group = dovecot unix_listener quota-warning { mode = 0666 user = dovecot } user = vmail } ssl_cert = </certs/fullchain.pem ssl_key = # hidden, use -P to show it ssl_protocols = !SSLv2 !SSLv3 userdb { args = /etc/dovecot/dovecot-mysql.conf.ext driver = sql } protocol imap { mail_plugins = " quota imap_quota" } protocol lmtp { mail_plugins = " quota sieve" }

2 2

How to check which version of openssl is getting compiled in into dovecot?
by krzf83＠gmail.com 27 Oct '17

27 Oct '17

I got multiple versions of openssl in my system. I compile dovecot with PKG_CONFIG_PATH=/usr/openssl-1.0.2l-fpic/lib/pkgconfig ./configure How do I check which version of openssl got compiled in? configure script does not show version. There seem to be no way to check it in compiled binary (?) My dovecot is still seen vulnerable by tls testing tools so I'm guessing wrong version of openssl got compiled it but there seem to be no way to check it.

3 7

secure setup for imap hibernation
by Arkadiusz Miśkiewicz 27 Oct '17

27 Oct '17

Hi. What's the approach for securely enabling imap hibernation in case when each user uses different uid and gid? Looks like none and 0666 on hibernation and imap master sockets is the only way? Thanks, -- Arkadiusz Miśkiewicz, arekm / ( maven.pl | pld-linux.org )

2 3

Re: Password encription
by Aki Tuomi 27 Oct '17

27 Oct '17

SHA512-CRYPT and PLAIN/LOGIN with SSL. ---Aki TuomiDovecot oy -------- Original message --------From: "j.emerlik" <j.emerlik(a)gmail.com> Date: 25/10/2017 12:07 (GMT+02:00) To: Aki Tuomi <aki.tuomi(a)dovecot.fi> Cc: Dovecot Mailing List <dovecot(a)dovecot.org> Subject: Re: Password encription What scheme and mechanism do you recommend? 2017-10-25 11:01 GMT+02:00 Aki Tuomi <aki.tuomi(a)dovecot.fi>: > CRAM-MD5 should not be used. Its not terribly secure. > > > ---Aki TuomiDovecot oy > -------- Original message --------From: "j.emerlik" <j.emerlik(a)gmail.com> > Date: 25/10/2017 11:58 (GMT+02:00) To: Aki Tuomi <aki.tuomi(a)dovecot.fi> > Cc: Dovecot Mailing List <dovecot(a)dovecot.org> Subject: Re: Password > encription > Thx Aki, > with CRAP-MD5 as scheme and mechanism it's works corretlly. > > 2017-10-25 10:52 GMT+02:00 Aki Tuomi <aki.tuomi(a)dovecot.fi>: > > > PLAIN and LOGIN. > > > > > > > > --- > > Aki Tuomi > > Dovecot oy > > > > -------- Original message -------- > > From: "j.emerlik" <j.emerlik(a)gmail.com> > > Date: 25/10/2017 11:41 (GMT+02:00) > > To: Dovecot Mailing List <dovecot(a)dovecot.org> > > Subject: Password encription > > > > Hi, > > which authentication mechanism should I use for SHA-256 password schama ? > > Regards, > > Jack > > >

3 6

Looking for NTLM config example
by Mark Foley 26 Oct '17

26 Oct '17

Now that I am running Thunderbird on Linux and away from Windows/Outlook, I'd like to take another run at setting up NTLM authentication from Thunderbird to my Samba4 AC/DC. With the help of the samba maillist folks I was able to set up NTLM authentication for domain user login. I should be able to do the same for email! But, I need help. I went to http://wiki2.dovecot.org/Authentication/Mechanisms/NTLM and got lost immediately. Are "authenticaion submethods" synonymous with "password schemes"? The 7th line down says, "NTLM password scheme is required for NTLM, NTLM2 and NTLMv2.", but in the referenced link I found no reference to "NTLM password scheme". The links http://wiki2.dovecot.org/Authentication/Mechanisms/NTLM and http://wiki2.dovecot.org/Authentication/PasswordSchemes, tell you what the 4 NTLM authentication submethods are, tells you what password schemes are, tells you what the NTLM client/server handshake is, but doesn't actually tell you how to configure dovecot config files. I'm much more interested in the "how to" than in: "NTLMv2: server and client nonce, MITM can't force downgrade" ... whatever that means. Anyway, probably it's my lack of understanding terminology. I don't even know what a "nonce" is. But, I learn well from examples! Can somone please give me a sample 10-auth.conf for NTML and any other supporting settings or configs I need? My current/working dovecot settings, which have been running perfectly for well over a year now, are: $ dovecot -n # 2.2.15: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 3.10.17 x86_64 Slackware 14.1 auth_debug_passwords = yes auth_mechanisms = plain login auth_verbose = yes auth_verbose_passwords = plain disable_plaintext_auth = no info_log_path = /var/log/dovecot_info mail_location = maildir:~/Maildir passdb { driver = shadow } protocols = imap ssl_cert = </etc/ssl/certs/OHPRS/GoDaddy/Apache/2015-08-14/57aa6ed6ae98b4c7.crt ssl_key = </etc/ssl/certs/OHPRS/GoDaddy/my.server.name.key userdb { driver = passwd } verbose_ssl = yes Here's what I've tried so far as 10-auth.conf: disable_plaintext_auth = no auth_use_winbind = yes info_log_path = /var/log/dovecot_info auth_verbose = yes auth_debug_passwords = yes auth_verbose_passwords= plain auth_winbind_helper_path = /usr/bin/ntlm_auth auth_mechanisms = ntlm plain login userdb { driver = passwd args = username_format=%n allow_all_users=yes } Which gives me a dovecot -n of: $ dovecot -n # 2.2.15: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 3.10.17 x86_64 Slackware 14.1 auth_debug_passwords = yes auth_mechanisms = ntlm plain login auth_use_winbind = yes auth_verbose = yes auth_verbose_passwords = plain disable_plaintext_auth = no info_log_path = /var/log/dovecot_info mail_location = maildir:~/Maildir protocols = imap ssl_cert = </etc/ssl/certs/OHPRS/GoDaddy/Apache/2015-08-14/57aa6ed6ae98b4c7.crt ssl_key = </etc/ssl/certs/OHPRS/GoDaddy/my.server.name.key userdb { args = username_format=%n allow_all_users=yes driver = passwd } verbose_ssl = yes I configured Thunderbird for NTLM authentication, then tried sending a message, I got the following in /var/log/dovecot_info: Apr 22 01:37:57 imap-login: Debug: SSL: elliptic curve secp384r1 will be used for ECDH and ECDHE key exchanges Apr 22 01:37:57 imap-login: Debug: SSL: elliptic curve secp384r1 will be used for ECDH and ECDHE key exchanges Apr 22 01:37:57 auth: Debug: Loading modules from directory: /usr/local/lib/dovecot/auth Apr 22 01:37:57 imap-login: Info: Disconnected: Auth process broken (disconnected before auth was ready, waited 0 secs): user=<>, rip=192.168.0.58, lip=98.102.63.107, session=<xFuyOgwx9wDAqAA6> On Thunderbird I got the error, "Sending of the message failed. The Outlgoing server (SMTP) my.server.name does not support the selected authentication method. Please change the 'Autnentication method' in 'Account Settings | Outgoing Server (SMTP)'." Clearly, something is configured wrong, but I've no clue what. Can I get some advice? THX --Mark

8 19

Initialization failed: Namespace '': mkdir(/var/www/mail) failed: Permission denied
by trash＠skrilnetz.net 26 Oct '17

26 Oct '17

Hi, I'm running dovecot (v 2.2.9) on ubuntu 14.04 since a long time. I did not change any configuration lately and I'm getting the below error message. /dovecot: lda(www-data): Error: user www-data: Initialization failed: Namespace '': MKDIR(/VAR/WWW/MAIL) failed: Permission denied (euid=33(www-data) egid=33(www-data) missing +w perm: /var/www, dir owned by 1001:1001 mode=0755//) / I did some troubleshooting and I don't understand where the MKDIR(/VAR/WWW/MAIL) is coming from. Mailboxes are in /var/mail and sending/receiving emails is working as it always did. mail_location is still setup to be MAIL_LOCATION = MBOX:~/MAIL:INBOX=/VAR/MAIL/%U Why is it trying a mkdir in /var/www? Any help would be appreciated. Rgs,

3 11

haproxy ssl support
by Rok Potočnik 26 Oct '17

26 Oct '17

Even though it seems dovecot (using 2.2.33.1) supports haproxy's send-proxy-v2, it seems to lack send-proxy-v2-ssl (which also sends client's ssl state). It would be a nice feature for the backend server to identify clients so one wouldn't have to use disable_plaintext_auth on a production environment. --- haproxy.cfg frontend pop3 bind [::]:110 v4v6 bind [::]:995 v4v6 ssl crt /etc/pki/tls/private/haproxy.pem mode tcp default_backend pop3 backend pop3 mode tcp balance leastconn stick store-request src stick-table type ip size 200k expire 30m timeout connect 5000 timeout server 50000 server proxy1 [2001:db8::11]:10110 send-proxy-v2-ssl server proxy2 [2001:db8::22]:10110 send-proxy-v2-ssl --- --- dovecot.conf haproxy_trusted_networks = [2001:db8::]/64 service pop3-login { inet_listener pop3_haproxy { port = 10110 haproxy = yes } } --- It would also be nice if haproxy would support STARTTLS offloading but that's a subject for a different mailing list ;) -- BR, Rok

3 3

fts-solr: fresh start or reindex large mailboxes
by Anton Borovoy 26 Oct '17

26 Oct '17

Hi, Install solr (in the end 7.1.0) there were errors: Caused by: org.eclipse.jetty.io.EofException: Early EOF and from dovecot: Error: Mailbox INBOX: Transaction commit failed: FTS transaction commit failed: backend I could not find for a long time what the problem was and set the nginx as a proxy, and see that dovecot breaks the connect after 60 seconds. After examining the code, I found the fixed connection time: http_set.request_timeout_msecs = 60 * 1000; which is clearly not enough for large data. After searching, he also found this post https://dovecot.org/pipermail/dovecot-cvs/2015-March/025551.html 1. I think it would be a good idea to remove these settings in the configuration file dovecot.conf A bit of statistics from nginx, solr and nginx on same server (req_len == post body): 60 seconds, requests do not pass: [25 / Oct / 2017: 23: 07: 11 +0700] POST / solr / dovecot / update HTTP / 1.1 resp_time - msec 1508947631.364 req_time 86.863 req_len 171401961 499 [25 / Oct / 2017: 23: 07: 25 +0700] POST / solr / dovecot / update HTTP / 1.1 resp_time - msec 1508947645.149 req_time 74.657 req_len 70140598 499 [25 / Oct / 2017: 23: 11: 28 +0700] POST / solr / dovecot / update HTTP / 1.1 resp_time - msec 1508947888.834 req_time 90.776 req_len 205474676 499 600 seconds, requests do not pass: [26 / Oct / 2017: 04: 50: 50 +0700] POST / solr / dovecot / update HTTP / 1.1 resp_time - msec 1508968250.522 req_time 811.480 req_len 3083215798 499 [26 / Oct / 2017: 04: 51: 06 +0700] POST / solr / dovecot / update HTTP / 1.1 resp_time - msec 1508968266.432 req_time 666.089 req_len 556157906 499 [26 / Oct / 2017: 05: 06: 18 +0700] POST / solr / dovecot / update HTTP / 1.1 resp_time - msec 1508969178.612 req_time 797.983 req_len 3083215798 499 2. the index is more than 3g is transmitted painfully, can U make a queue limit on the size of the request, segment them, adjust max size of post body in the configuration file dovecot.conf thx solr: 7.1.0 dovecot: 2.2.32 server: Intel(R) Xeon(TM) CPU 2.93GHz x24, 72G RAM

1 0

authenticate as userA, but get authorization to user userB's account
by Heiko Schlittermann 26 Oct '17

26 Oct '17

Hello, given a small organization. There are *personal* mailboxes (mailbox per user, incl. subfolders et cetera). The users can share specic folders via the ACL (we call it "other users/", Dovecot calls it "shared" folder. Additionally there are mailboxes Dovecot calls "public" (we use the term "groups/"). They are not associated with a specific account, but acessible via ACL only. (Good example for the latter is "info(a)example.com") But now they're seeking for a way to implement "role" Accounts. We could create new "role" users, share the password and create an additional account within the mail client (thunderbird) they use. From users perspective it is exactly what they want. But I dislike the idea of sharing the password. Question: Is there any way to split the authentication from the authorization within common mail clients (as Thunderbird) in combination with Dovecot. That is, doing something like logging in to the account sales(a)example.com, using the credentials of the very own account (say hans(a)example.com)? - how to do it in Dovecot? (We use LDAP) - how to set up this in Thunderbird? - how to set up this in a generic MUA, as some webmail client? Thanks in advance, best regards from Dresden/Germany Heiko Schlittermann -- SCHLITTERMANN.de ---------------------------- internet & unix support - Heiko Schlittermann, Dipl.-Ing. (TU) - {fon,fax}: +49.351.802998{1,3} - gnupg encrypted messages are welcome --------------- key ID: F69376CE - ! key id 7CBF764A and 972EAC9F are revoked since 2015-01 ------------ -

5 9

Re: STAT command failure
by Joseph Tam 25 Oct '17

25 Oct '17

Andrew Charnley <ac(a)igaro.com> writes: >> It's also telling that it works for some accounts, and not for others. >> Try rebuilding the user's index cache by removing it (save a copy!) >> and see if that makes it work. If it does, you can send the buggy >> caches to the developer and see if they can figure it out. > > Which user index file to you refer to? If you're using INDEX= in your mail_location, that one. I think it suffices to remove the indices for the user's INBOX, since that's the only mailbox POP3 is aware of. I'm not sure where the default index location is if you don't specify INDEX, so maybe look in your mail spool or personal mail folder for $WHATEVER/.imap/INBOX. Caches are regenerated if they go missing (unless you use mdbox/sdbox formats: *don't* do this if you're using them.) Joseph Tam <jtam.home(a)gmail.com>

1 0

Replication Issue
by Jorge Canto E. 25 Oct '17

25 Oct '17

Hello, I've been trying to set up replication, Server A is dovecot 2.2.32 (upgrade from 2.0.9) and Server B is dovecot 2.2.10, I use mysql as userdb, I don't want to replicate every user on my database only especific users so I set my iterate_query on dovecot-sql.conf.ext file; my problem: doveadm replication is not "reading" my iterate_query, it tries to replicate every user. Diagnosis: - I removed iterate_query from dovecot-sql.conf.ext, on the log file I can see the doveadm replication is still trying to replicate. - doveadm user '*' shows error (obvious) there is not iterate_query but, on the log files I can see replication is trying, why doveadm replication is trying to replicate? what userdb is reading from? doveconf -n # 2.2.32 (dfbe293d4): /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-696.1.1.el6.x86_64 x86_64 CentOS release 6.9 (Final) ext3 auth_debug = yes auth_socket_path = /var/run/dovecot/auth-userdb doveadm_password = # hidden, use -P to show it first_valid_uid = 150 last_valid_uid = 150 mail_debug = yes mail_location = maildir:/var/vmail/%d/%n mail_plugins = notify replication mail_privileged_group = mail mbox_write_locks = fcntl passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { mail_replica = tcp:x.x.x.x:61800 } postmaster_address = postmaster(a)email.com service aggregator { fifo_listener replication-notify-fifo { mode = 0666 user = vmail } unix_listener replication-notify { mode = 0666 user = vmail } } service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 user = postfix } unix_listener auth-userdb { group = mail mode = 0600 user = vmail } } service config { unix_listener config { user = vmail } } service doveadm { inet_listener { port = 61800 } user = vmail } service replicator { process_min_avail = 1 unix_listener replicator-doveadm { mode = 0666 } } ssl = required ssl_cert = </etc/pki/tls/certs/mailnew.crt ssl_key = # hidden, use -P to show it userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } I really appreciate your help Jorge C.

1 0

Disconnected: Inactivity (no auth attempts in 180 secs)
by Alexandre 25 Oct '17

25 Oct '17

Hi, I hope you guys can understand me since english is not my nativelanguage. I am trying setup dovecot for imap and pop3 on FreeBSD 10.3 and is notworking on IMAPS or POP3S, currently My setup is: OS = FreeBSD 10.3 ( I did not get enough time for update to 11) Postfix = 3.2.3 Dovecot = 2.2.33.2 (d6601f4ec) OpenSSL =1.0.1s-freebsd SSL Certificate = Let's Encrypt I can send and receive mails using: IMAP 143 with TLS SMTP 587 with TLS Usually on Linux distros works pretty easy, when I don't forgetsomething this should be working on first try, but, after spend 2 weeks workingon it after arrive from job without found any solution, I am trying the luckasking for help from your guys expert on dovecot. The hangup occours inside of my LAN using Outlook 2016, and Outside also trying access on 4G from my Android smartphone. My goal is enable also POP3s and IMAPs using TLS. This is my data: Dovecot –n: #2.2.33.2 (d6601f4ec): /usr/local/etc/dovecot/dovecot.conf # Pigeonhole version 0.4.21 (92477967) # OS: FreeBSD 10.3-RELEASE-p22 amd64 zfs auth_debug = yes auth_debug_passwords = yes auth_mechanisms = plain login auth_verbose = yes auth_verbose_passwords = yes hostname = mail.mydomain.com imap_client_workarounds = delay-newmail tb-extra-mailbox-septb-lsub-flags lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes lda_original_recipient_header = X-Original-To mail_attachment_fs = sis-queue posix mail_attachment_hash = %{sha512} mail_debug = yes mail_location = maildir:/usr/local/vmail/%d/%n:LAYOUT=fs mail_plugins = quota acl mail_privileged_group = vmail mailbox_list_index = yes managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelopeencoded-character vacation subaddress comparator-i;ascii-numeric relationalregex imap4flags copy include variables body enotify environment mailbox dateindex ihave duplicate mime foreverypart extracttext mbox_write_locks = fcntl namespace inbox { inbox = yes location = mailbox Archives { auto = subscribe special_use = \Archive } mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { auto = subscribe special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "SentMessages" { auto = subscribe special_use = \Sent } mailbox Trash { auto = subscribe special_use = \Trash } mailbox virtual/All { auto = subscribe comment = All my messages special_use = \All } mailbox virtual/Flagged { auto = subscribe comment = All my flaggedmessages special_use = \Flagged } prefix = } passdb { args =/usr/local/etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { acl = vfile quota = maildir:User quota quota_max_mail_size = 100M quota_rule = *:storage=1G quota_rule2 =Archive:storage=+1G quota_rule3 =Trash:storage=+100M quota_warning = storage=80%%quota-warning 80 %u sieve =/usr/local/vmail/%d/%n/.dovecot.sieve sieve_before =/usr/local/vmail/sieve/before.d/ sieve_dir = /usr/local/vmail/%d/%n sieve_global_dir =/usr/local/vmail/sieve/%d sieve_global_path =/usr/local/vmail/sieve/%d/default.sieve } pop3_client_workarounds = outlook-no-nuls oe-ns-eoh postmaster_address = postmaster(a)mydomain.com protocols = imap pop3 lmtp sieve quota_full_tempfail = yes service auth-worker { user = vmail } service auth { unix_listener/var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = vmail mode = 0600 user = vmail } } service dict { unix_listener dict { mode = 0600 user = vmail } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 993 ssl = yes } process_min_avail = 2 } service lmtp { unix_listener/var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } service managesieve-login { inet_listener sieve { port = 4190 } process_min_avail = 0 service_count = 1 vsz_limit = 64 M } service pop3-login { inet_listener pop3 { port = 110 } inet_listener pop3s { port = 995 ssl = yes } } service quota-warning { executable = script/usr/local/bin/quota-warning.sh unix_listener quota-warning { user = vmail } user = dovecot } ssl = required ssl_ca = </etc/ssl/cert.pem ssl_cert = </usr/local/etc/dovecot/private/mail.mydomain.com.crt ssl_cipher_list =ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA ssl_dh_parameters_length = 4096 ssl_key = # hidden, use -P toshow it ssl_options = no_compression ssl_parameters_regenerate = 6 hours ssl_prefer_server_ciphers = yes ssl_protocols = TLSv1.2 userdb { driver = prefetch } verbose_ssl = yes protocollda { mail_plugins = quota acl sieve postmaster_address = root } protocol lmtp { deliver_log_format = msgid=%m:%s mail_plugins = quota acl sieve postmaster_address =postmaster(a)mydomain.com } protocol sieve { managesieve_implementation_string = Dovecot Pigeonhole managesieve_max_compile_errors =5 managesieve_max_line_length =65536 } protocolpop3 { mail_plugins = quota } protocolimap { mail_plugins = quota acl imap_quota imap_acl } Dovecot-sql driver = mysql connect = host=127.0.0.1 dbname=mailserver user=mail password=***** default_pass_scheme = SHA512-CRYPT user_query = \ SELECT \ email asuser, \ maildir ashome, \ uid, \ gid, \ CONCAT('*:storage=',quota, 'B') AS quota_rule, \ CONCAT(maildir,'./sieve')as sieve \ FROM \ virtual_users\ WHERE \ email ='%u' \ AND \ active= '1' password_query = \ SELECT \ email asuser, \ password, \ maildir asuserdb_home, \ uid asuserdb_uid, \ gid asuserdb_gid, \ CONCAT('*:storage=',quota, 'B') AS userdb_quota_rule, \ CONCAT(maildir,'./sieve')as userdb_sieve \ FROM \ virtual_users\ WHERE \ email ='%u' \ AND \ active= '1' iterate_query = \ SELECT \ email ASuser \ FROM \ virtual_users\ WHERE \ active ='1' maillog with Disconnected: Inactivity (no auth attempts in 180 secs) Oct 25 06:46:38 mail dovecot: imap-login: Debug: SSL: where=0x10, ret=1:before/accept initialization [192.168.0.95] Oct 25 06:46:38 mail dovecot: imap-login: Debug: SSL: where=0x2001,ret=1: before/accept initialization [192.168.0.95] Oct 25 06:46:38 mail dovecot: imap-login: Debug: SSL: where=0x2002,ret=-1: SSLv2/v3 read client hello A [192.168.0.95] Oct 25 06:46:38 mail dovecot: auth: Debug: auth client connected(pid=9371) Oct 25 06:49:38 mail dovecot: imap-login: Disconnected: Inactivity (noauth attempts in 180 secs): user=<>, rip=192.168.0.95, lip=10.0.0.32, TLShandshaking, session=<+XXXXXXXXXXXXXf> Oct 25 06:49:38 mail postfix/submission/smtpd[9400]: connect fromunknown[192.168.0.95]:50860 Oct 25 06:49:38 mail postfix/submission/smtpd[9400]: Anonymous TLSconnection established from unknown[192.168.0.95]:50860: TLSv1.2 with cipherECDHE-RSA-AES256-SHA384 (256/256 bits) Oct 25 06:49:38 mail dovecot: auth: Debug: auth client connected (pid=0) Oct 25 06:49:38 mail dovecot: auth: Debug: client in: AUTH 1 LOGIN service=smtp nologin lip=10.0.0.32 rip=192.168.0.95 secured Oct 25 06:49:38 mail dovecot: auth: Debug: client passdb out: CONT 1 VXXXXXXXXXX6 Oct 25 06:49:38 mail dovecot: auth: Debug: client in: CONT 1 cXXXXXXXXXXXXXXXXXXXXXXXXXXt(previous base64 data may contain sensitive data) Oct 25 06:49:38 mail dovecot: auth: Debug: client passdb out: CONT 1 UXXXXXXXXXX6 Oct 25 06:49:38 mail dovecot: auth: Debug: client in: CONT 1 dXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX=(previous base64 data may contain sensitive data) Oct 25 06:49:38 mail dovecot: auth-worker(9402): Debug: Loading modulesfrom directory: /usr/local/lib/dovecot/auth Oct 25 06:49:38 mail dovecot: auth-worker(9402): Debug: Module loaded:/usr/local/lib/dovecot/auth/lib20_auth_var_expand_crypt.so Oct 25 06:49:39 mail dovecot: auth-worker(9402): Debug:sql(test@domain.com,192.168.0.95): query: SELECT email as user, password,maildir as userdb_home, uid as userdb_uid, gid as userdb_gid,CONCAT('*:storage=', quota, 'B') AS userdb_quota_rule,CONCAT(maildir,'./sieve') as userdb_sieve FROM virtual_users WHERE email ='test(a)domain.com' AND active = '1' Oct 25 06:49:39 mail dovecot: auth: Debug: client passdb out: OK 1 user=test(a)domain.com Oct 25 06:49:39 mail postfix/submission/smtpd[9400]: 3XXXXXXXXXXXt:client=unknown[192.168.0.95]:50860, sasl_method=LOGIN,sasl_username=test(a)domain.com Oct 25 06:49:39 mail postfix/cleanup[9404]: 3XXXXXXXXXXXt:message-id=<3XXXXXXXXXXXt(a)mail.domain.com> Oct 25 06:49:39 mail opendkim[945]: 3XXXXXXXXXXXt: DKIM-Signature fieldadded (s=201710, d=domain.com) Oct 25 06:49:39 mail postfix/qmgr[8504]: 3XXXXXXXXXXXt:from=<test(a)domain.com>, size=1446, nrcpt=1 (queue active) Oct 25 06:49:39 mail postfix/submission/smtpd[9400]: disconnect fromunknown[192.168.0.95]:50860 ehlo=2 starttls=1 auth=1 mail=1 rcpt=1 data=1commands=7 Oct 25 06:49:49 mail postfix/smtpd[9408]: connect from localhost[127.0.0.1]:23696 Oct 25 06:49:49 mail opendmarc[949]: ignoring connection from localhost Oct 25 06:49:49 mail postfix/smtpd[9408]: 3YYYYYYYYYYY1:client=localhost[127.0.0.1]:23696 Oct 25 06:49:49 mail postfix/cleanup[9404]: 3YYYYYYYYYYY1:message-id=<3XXXXXXXXXXXt(a)mail.domain.com> Oct 25 06:49:49 mail opendkim[945]: 3YYYYYYYYYYY1: DKIM-Signature fieldadded (s=201710, d=domain.com) Oct 25 06:49:49 mail postfix/qmgr[8504]: 3YYYYYYYYYYY1:from=<test(a)domain.com>, size=2918, nrcpt=1 (queue active) Oct 25 06:49:49 mail postfix/smtpd[9408]: disconnect fromlocalhost[127.0.0.1]:23696 ehlo=1 mail=1 rcpt=1 data=1 quit=1 commands=5 Oct 25 06:49:49 mail amavis[913]: (00913-03) Passed CLEAN {RelayedInternal},MYNETS LOCAL [192.168.0.95]:50860 <test(a)domain.com> -><test(a)domain.com>, Queue-ID: 3XXXXXXXXXXXt, Message-ID:<3XXXXXXXXXXXt(a)mail.domain.com>, mail_id: SuyWDTSHlDWx, Hits: -1.099,size: 2315, queued_as: 3YYYYYYYYYYY1, dkim_sd=201710:domain.com, 9815 ms Oct 25 06:49:49 mail postfix/lmtp[9405]: 3XXXXXXXXXXXt:to=<test(a)domain.com>, relay=127.0.0.1[127.0.0.1]:10024, delay=10,delays=0.3/0.03/0.01/9.8, dsn=2.0.0, status=sent (250 2.0.0 fromMTA(smtp:[127.0.0.1]:10025): 250 2.0.0 Ok: queued as 3YYYYYYYYYYY1) Oct 25 06:49:49 mail postfix/lmtp[9409]: warning: smtp_connect_local:opportunistic TLS encryption is not appropriate for unix-domain destinations. Oct 25 06:49:49 mail postfix/qmgr[8504]: 3XXXXXXXXXXXt: removed Oct 25 06:49:49 mail dovecot: lmtp(9410): Debug: none: root=, index=,indexpvt=, control=, inbox=, alt= Oct 25 06:49:49 mail dovecot: lmtp(9410): Connect from local Oct 25 06:49:49 mail dovecot: lmtp(test(a)domain.com): Debug: Loadingmodules from directory: /usr/local/lib/dovecot Oct 25 06:49:49 mail dovecot: lmtp(test(a)domain.com): Debug: Moduleloaded: /usr/local/lib/dovecot/lib01_acl_plugin.so Oct 25 06:49:49 mail dovecot: lmtp(test(a)domain.com): Debug: Moduleloaded: /usr/local/lib/dovecot/lib10_quota_plugin.so Oct 25 06:49:49 mail dovecot: lmtp(test(a)domain.com): Debug: Moduleloaded: /usr/local/lib/dovecot/lib90_sieve_plugin.so Oct 25 06:49:49 mail dovecot: auth: Debug: master in: USER 1 test(a)domain.com service=lmtp Oct 25 06:49:49 mail dovecot: auth: Debug: prefetch(test(a)domain.com): passdbdidn't return userdb entries, trying the next userdb Oct 25 06:49:49 mail dovecot: auth-worker(9402): Debug:sql(test@domain.com): SELECT email as user, maildir as home, uid, gid,CONCAT('*:storage=', quota, 'B') AS quota_rule, CONCAT(maildir,'./sieve') assieve FROM virtual_users WHERE email = 'test(a)domain.com' AND active = '1' Oct 25 06:49:49 mail dovecot: auth: Debug: userdb out: USER 1 test(a)domain.com home=/usr/local/vmail/domain.com/security uid=5000 gid=5000 quota_rule=*:storage=100000000B sieve=/usr/local/vmail/domain.com/security./sieve Oct 25 06:49:49 mail dovecot: lmtp(test(a)domain.com): Debug: auth USERinput: test(a)domain.com home=/usr/local/vmail/domain.com/security uid=5000gid=5000 quota_rule=*:storage=100000000B sieve=/usr/local/vmail/domain.com/security./sieve Oct 25 06:49:49 mail dovecot: lmtp(test(a)domain.com): Debug: Added userdbsetting: plugin/quota_rule=*:storage=100000000B Oct 25 06:49:49 mail dovecot: lmtp(test(a)domain.com): Debug: Added userdbsetting: plugin/sieve=/usr/local/vmail/domain.com/security./sieve Oct 25 06:49:49 mail dovecot: lmtp(9410, test(a)domain.com) Debug:Effective uid=5000, gid=5000, home=/usr/local/vmail/domain.com/security Oct 25 06:49:49 mail dovecot: lmtp(9410, test(a)domain.com) Debug: acl:No acl_shared_dict setting - shared mailbox listing is disabled Oct 25 06:49:49 mail dovecot: lmtp(9410, test(a)domain.com) Debug: Quotaroot: name=User quota backend=maildir args= Oct 25 06:49:49 mail dovecot: lmtp(9410, test(a)domain.com) Debug: Quotarule: root=User quota mailbox=* bytes=100000000 messages=0 Oct 25 06:49:49 mail dovecot: lmtp(9410, test(a)domain.com) Debug: Quotarule: root=User quota mailbox=Archive bytes=+1073741824 messages=0 Oct 25 06:49:49 mail dovecot: lmtp(9410, test(a)domain.com) Debug: Quotarule: root=User quota mailbox=Trash bytes=+104857600 messages=0 Oct 25 06:49:49 mail dovecot: lmtp(9410, test(a)domain.com) Debug: Quotawarning: bytes=80000000 (80%) messages=0 reverse=no command=quota-warning 80test(a)domain.com Oct 25 06:49:49 mail dovecot: lmtp(9410, test(a)domain.com) Debug: Quotagrace: root=User quota bytes=10000000 (10%) Oct 25 06:49:49 mail dovecot: lmtp(9410, test(a)domain.com) Debug:Namespace inbox: type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes,subscriptions=yeslocation=maildir:/usr/local/vmail/domain.com/secu… Oct 25 06:49:49 mail dovecot: lmtp(9410, test(a)domain.com) Debug: fs:root=/usr/local/vmail/domain.com/security, index=, indexpvt=, control=,inbox=/usr/local/vmail/domain.com/security, alt= Oct 25 06:49:49 mail dovecot: lmtp(9410, test(a)domain.com) Debug: acl:initializing backend with data: vfile Oct 25 06:49:49 mail dovecot: lmtp(9410, test(a)domain.com) Debug: acl:acl username = test(a)domain.com Oct 25 06:49:49 mail dovecot: lmtp(9410, test(a)domain.com) Debug: acl:owner = 1 Oct 25 06:49:49 mail dovecot: lmtp(9410, test(a)domain.com) Debug: aclvfile: Global ACLs disabled Oct 25 06:49:49 mail dovecot: lmtp(9410, test(a)domain.com) Debug: quota:quota_over_flag check: quota_over_script unset - skipping Oct 25 06:49:49 mail dovecot: lmtp(test(a)domain.com): Debug: Mailbox<lmtp DATA>: Opened mail UID=1 because: header X-Original-To (Cache fileis unusable) Oct 25 06:49:49 mail dovecot: lmtp(test(a)domain.com): Debug: sieve:Pigeonhole version 0.4.21 (92477967) initializing Oct 25 06:49:49 mail dovecot: lmtp(test(a)domain.com): Debug: 4ZZZZZZZZZZZZZZZZZZZZQ:sieve: file storage: Failed to normalize active script directory(path=/usr/local/vmail/domain.com/security.): Part of the path does not exist(yet) Oct 25 06:49:49 mail dovecot: lmtp(test(a)domain.com): Debug:4ZZZZZZZZZZZZZZZZZZZZQ: sieve: file storage: Using active Sieve script path:/usr/local/vmail/domain.com/security./sieve Oct 25 06:49:49 mail dovecot: lmtp(test(a)domain.com): Debug:4ZZZZZZZZZZZZZZZZZZZZQ: sieve: file storage: Using script storage path:/usr/local/vmail/domain.com/security Oct 25 06:49:49 mail dovecot: lmtp(test(a)domain.com): Debug:4ZZZZZZZZZZZZZZZZZZZZQ: sieve: file storage: Relative path to sieve storage inactive link: /usr/local/vmail/domain.com/security/ Oct 25 06:49:49 mail dovecot: lmtp(test(a)domain.com): Debug: 4ZZZZZZZZZZZZZZZZZZZZQ:sieve: file storage: Failed to normalize active script directory(path=/usr/local/vmail/domain.com/security.): Part of the path does not exist(yet) Oct 25 06:49:49 mail dovecot: lmtp(test(a)domain.com): Debug:4ZZZZZZZZZZZZZZZZZZZZQ: sieve: file storage: Using Sieve script path:/usr/local/vmail/domain.com/security./sieve Oct 25 06:49:49 mail dovecot: lmtp(test(a)domain.com): Debug:4ZZZZZZZZZZZZZZZZZZZZQ: sieve: file storage: Storage path`/usr/local/vmail/domain.com/security./sieve' not found Oct 25 06:49:49 mail dovecot: lmtp(test(a)domain.com): Debug:4ZZZZZZZZZZZZZZZZZZZZQ: sieve: file storage: Storage path`/usr/local/vmail/sieve/domain.com/default.sieve' not found Oct 25 06:49:49 mail dovecot: lmtp(test(a)domain.com): Debug:4ZZZZZZZZZZZZZZZZZZZZQ: sieve: User has no active script in storage`/usr/local/vmail/domain.com/security' Oct 25 06:49:49 mail dovecot: lmtp(test(a)domain.com): Debug:4ZZZZZZZZZZZZZZZZZZZZQ: sieve: User has no personal script Oct 25 06:49:49 mail dovecot: lmtp(test(a)domain.com): Debug:4ZZZZZZZZZZZZZZZZZZZZQ: sieve: file storage: Storage path`/usr/local/vmail/sieve/before.d/' not found Oct 25 06:49:49 mail dovecot: lmtp(test(a)domain.com): Debug:4ZZZZZZZZZZZZZZZZZZZZQ: sieve: Location for sieve_before not found: /usr/local/vmail/sieve/before.d/ Oct 25 06:49:49 mail dovecot: lmtp(test(a)domain.com): Debug:4ZZZZZZZZZZZZZZZZZZZZQ: sieve: No scripts to execute: reverting to defaultdelivery. Oct 25 06:49:49 mail dovecot: lmtp(test(a)domain.com): Debug: INBOX:Mailbox opened because: lib-lda delivery Oct 25 06:49:49 mail dovecot: lmtp(test(a)domain.com): Debug: Mailbox<lmtp DATA>: Opened mail UID=1 because: copying Oct 25 06:49:49 mail dovecot: lmtp(test(a)domain.com): Debug: acl vfile:file /usr/local/vmail/domain.com/security/dovecot-acl not found Oct 25 06:49:49 mail dovecot: lmtp(test@domain.com):msgid=<3XXXXXXXXXXXt(a)mail.domain.com>: Microsoft Outlook Test Message Oct 25 06:49:49 mail postfix/lmtp[9409]: 3YYYYYYYYYYY1:to=<test(a)domain.com>, relay=mail.domain.com[private/dovecot-lmtp],delay=0.48, delays=0.26/0.03/0.13/0.06, dsn=2.0.0, status=sent (250 2.0.0<test(a)domain.com> 4ZZZZZZZZZZZZZZZZZZZZQ Saved) Oct 25 06:49:49 mail dovecot: lmtp(9410): Disconnect from local:Successful quit Oct 25 06:49:49 mail postfix/qmgr[8504]: 3YYYYYYYYYYY1: removed Testing from another computer with openssl s_client -host 10.0.0.32 -port 993 -verify –debug verify depth is 0 CONNECTED(00000003) depth=2 O = Digital Signature Trust Co., CN = DST Root CA X3 verify return:1 depth=1 C = US, O = Let's Encrypt, CN = Let's Encrypt Authority X3 verify return:1 depth=0 CN = domain.com verify return:1 --- Certificate chain 0 s:/CN=domain.com i:/C=US/O=Let'sEncrypt/CN=Let's Encrypt Authority X3 1 s:/C=US/O=Let's Encrypt/CN=Let'sEncrypt Authority X3 i:/O=Digital Signature TrustCo./CN=DST Root CA X3 --- Server certificate -----BEGIN CERTIFICATE----- MIIGDjCCBPagAwIBAgISA71fShBIzBs0jj8E7L/XmHyjMA0GCSqGSIb3DQEBCwUA BzzGusiZmPR/KpKnHmRXThgo -----END CERTIFICATE----- subject=/CN=domain.com issuer=/C=US/O=Let's Encrypt/CN=Let's Encrypt Authority X3 --- No client certificate CA names sent Peer signing digest: SHA512 Server Temp Key: ECDH, P-256, 256 bits --- SSL handshake has read 3702 bytes and written 457 bytes --- New, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES256-SHA384 Server public key is 4096 bit Secure Renegotiation IS supported Compression: NONE Expansion: NONE No ALPN negotiated SSL-Session: Protocol : TLSv1.2 Cipher : ECDHE-RSA-AES256-SHA384 Session-ID:548A93EA5A644C15EBA4B8335274B3091D33DD8C1741292BA4C0650E7171EF9F Session-ID-ctx: Master-Key:3DA8713979CA918E62C6E2DDB24F25050545390A031AAEEF82208300911D13C1B850FD78771F2046CAF0484F64A9C7A2 Key-Arg : None PSK identity: None PSK identity hint: None SRP username: None TLS session ticket lifetimehint: 300 (seconds) TLS session ticket: 0000 - 63 99 b8 dc b6 5a ca49-4c 35 62 47 95 a6 59 7e c....Z.IL5bG..Y~ 0010 - 2b 6e 64 a6 bf 06 fd a1-85 e5 6d f8 79 4b 762c +nd.......m.yKv, 0020 - 26 12 c9 8d cd da da 6c-5e 1e 4e 6963 30 b7 90 &......l^.Nic0.. 0030 - 45 ce 70 b5 14 01 ba60-d9 85 df f9 a7 66 1d 58 E.p....`.....f.X 0040 - 0d 36 f3 41 29 0b 43 f6-60 c1 0a 5e 2d db b438 .6.A).C.`..^-..8 0050- 31 0b 8e 05 e4 5f f7 30-d6 4f 34 10 3f 4f a6 e2 1...._.0.O4.?O.. 0060 - 17 d3 36 34 14 5a 3a 91-99 25 96 4f5c 82 d8 f0 ..64.Z:..%.O\... 0070 - ee 82 ef eb 77 ad c1 37-9a 6d 60 796f a3 1f 2e ....w..7.m`yo... 0080 - 0c 5a 40 bc 02 de 92 ff-cf 37 e1 df95 41 30 8c .Z@......7...A0. 0090 - 1d 3d e1 cd 1b 3f 78d4-86 d1 ac ad 3a 23 16 85 .=...?x.....:#.. Start Time: 1508923307 Timeout : 300 (sec) Verify return code: 0 (ok) --- * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLEIDLE AUTH=PLAIN AUTH=LOGIN] Dovecot ready. a login test(a)domain.com XXXXXXXXXXXXXXXXXXXXXXXX a OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLEIDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS THREAD=ORDEREDSUBJECTMULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN NAMESPACE UIDPLUSLIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHINCONTEXT=SEARCH LIST-STATUS BINARY MOVE NOTIFY QUOTA ACL RIGHTS=texk] Logged in a select inbox * FLAGS (\Answered \Flagged \Deleted \Seen \Draft $Forwarded) * OK [PERMANENTFLAGS (\Answered \Flagged \Deleted \Seen \Draft$Forwarded \*)] Flags permitted. * 9 EXISTS * 0 RECENT * OK [UNSEEN 6] First unseen. * OK [UIDVALIDITY 1508179896] UIDs valid * OK [UIDNEXT 62] Predicted next UID a OK [READ-WRITE] Select completed (0.003 + 0.000 + 0.002 secs). a logout * BYE Logging out a OK Logout completed (0.002 + 0.000 + 0.001 secs). closed I have removed the certificate and sensitive data. I am out of ideas what else to config to get this working, and wannathank in advice for everyone who can try help me. Regards, PS.: I am going to work now, and as soon as possible, I can test anyadvice and report the results. Alexandre

1 0

Re: Password encription
by Aki Tuomi 25 Oct '17

25 Oct '17

CRAM-MD5 should not be used. Its not terribly secure. ---Aki TuomiDovecot oy -------- Original message --------From: "j.emerlik" <j.emerlik(a)gmail.com> Date: 25/10/2017 11:58 (GMT+02:00) To: Aki Tuomi <aki.tuomi(a)dovecot.fi> Cc: Dovecot Mailing List <dovecot(a)dovecot.org> Subject: Re: Password encription Thx Aki, with CRAP-MD5 as scheme and mechanism it's works corretlly. 2017-10-25 10:52 GMT+02:00 Aki Tuomi <aki.tuomi(a)dovecot.fi>: > PLAIN and LOGIN. > > > > --- > Aki Tuomi > Dovecot oy > > -------- Original message -------- > From: "j.emerlik" <j.emerlik(a)gmail.com> > Date: 25/10/2017 11:41 (GMT+02:00) > To: Dovecot Mailing List <dovecot(a)dovecot.org> > Subject: Password encription > > Hi, > which authentication mechanism should I use for SHA-256 password schama ? > Regards, > Jack >

2 1

Re: Password encription
by j.emerlik 25 Oct '17

25 Oct '17

Thx Aki, with CRAP-MD5 as scheme and mechanism it's works corretlly. 2017-10-25 10:52 GMT+02:00 Aki Tuomi <aki.tuomi(a)dovecot.fi>: > PLAIN and LOGIN. > > > > --- > Aki Tuomi > Dovecot oy > > -------- Original message -------- > From: "j.emerlik" <j.emerlik(a)gmail.com> > Date: 25/10/2017 11:41 (GMT+02:00) > To: Dovecot Mailing List <dovecot(a)dovecot.org> > Subject: Password encription > > Hi, > which authentication mechanism should I use for SHA-256 password schama ? > Regards, > Jack >

1 0

Re: Password encription
by Aki Tuomi 25 Oct '17

25 Oct '17

PLAIN and LOGIN. ---Aki TuomiDovecot oy -------- Original message --------From: "j.emerlik" <j.emerlik(a)gmail.com> Date: 25/10/2017 11:41 (GMT+02:00) To: Dovecot Mailing List <dovecot(a)dovecot.org> Subject: Password encription Hi, which authentication mechanism should I use for SHA-256 password schama ? Regards, Jack

1 0

Password encription
by j.emerlik 25 Oct '17

25 Oct '17

Hi, which authentication mechanism should I use for SHA-256 password schama ? Regards, Jack

1 0

Re: STAT command failure
by Joseph Tam 25 Oct '17

25 Oct '17

Andrew Charnley <ac(a)igaro.com> writes: >>> Regarding STAT which appears to have an issue with Dovecot:- >>> >>> [23:50:46] POP< +OK Dovecot ready. >>> [23:50:46] POP> USER xxxxx >>> [23:50:46] POP< +OK >>> [23:50:46] POP> PASS ******** >>> [23:50:46] POP< +OK Logged in. >>> [23:50:46] POP> STAT >>> [23:50:46] POP< -ERR Unknown command: >> >> user xxxxx >> pass *** >> stat > > I can confirm this works. > 2. Likely an issue with CLAWS email. If you can arrange a network capture of a non-SSL remote CLAWS connection, try checking whether there's a hidden character (NULL, .etc.) being sent. It's also telling that it works for some accounts, and not for others. Try rebuilding the user's index cache by removing it (save a copy!) and see if that makes it work. If it does, you can send the buggy caches to the developer and see if they can figure it out. Joseph Tam <jtam.home(a)gmail.com>

2 1

Fwd: master/master replications v. 2.2.32
by Jorge Canto E. 24 Oct '17

24 Oct '17

doveconf -n # 2.2.32 (dfbe293d4): /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-696.1.1.el6.x86_64 x86_64 CentOS release 6.9 (Final) ext3 auth_socket_path = /var/run/dovecot/auth-userdb doveadm_password = # hidden, use -P to show it doveadm_port = 61800 first_valid_uid = 150 last_valid_uid = 150 mail_location = maildir:/var/vmail/%d/%n mail_plugins = notify replication mail_privileged_group = mail mbox_write_locks = fcntl passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { mail_replica = tcp:xxx.xxx.xxx.xxx } postmaster_address = postmaster(a)it911.mx service aggregator { fifo_listener replication-notify-fifo { mode = 0666 user = vmail } unix_listener replication-notify { mode = 0666 user = vmail } } service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 user = postfix } unix_listener auth-userdb { group = mail mode = 0600 user = vmail } } service config { unix_listener config { user = vmail } } service doveadm { inet_listener { port = 61800 } user = vmail } service replicator { process_min_avail = 1 unix_listener replicator-doveadm { mode = 0666 } } ssl = required ssl_cert = </etc/pki/tls/certs/mailnew.it911.crt ssl_key = # hidden, use -P to show it userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } Thank you Jorge C. On Mon, Oct 23, 2017 at 1:19 PM, Jorge Canto E. <jorge.canto(a)gmail.com> wrote: > Hi, here is doveconf -n > > # 2.2.32 (dfbe293d4): /etc/dovecot/dovecot.conf > # OS: Linux 2.6.32-696.1.1.el6.x86_64 x86_64 CentOS release 6.9 (Final) > ext3 > auth_socket_path = /var/run/dovecot/auth-userdb > first_valid_uid = 150 > last_valid_uid = 150 > mail_location = maildir:/var/vmail/%d/%n > mail_privileged_group = mail > mbox_write_locks = fcntl > passdb { > args = /etc/dovecot/dovecot-sql.conf.ext > driver = sql > } > postmaster_address = postmaster(a)it911.mx > service auth { > unix_listener /var/spool/postfix/private/auth { > mode = 0666 > user = postfix > } > unix_listener auth-userdb { > group = mail > mode = 0600 > user = vmail > } > } > ssl = required > ssl_cert = </etc/pki/tls/certs/mailnew.it911.crt > ssl_key = # hidden, use -P to show it > userdb { > args = /etc/dovecot/dovecot-sql.conf.ext > driver = sql > } > > > Thank you > > Jorge C. > > On Mon, Oct 23, 2017 at 1:07 PM, Aki Tuomi <aki.tuomi(a)dovecot.fi> wrote: > >> >> > On October 23, 2017 at 7:29 PM "Jorge Canto E." <jorge.canto(a)gmail.com> >> wrote: >> > >> > >> > Hi, in the past I set up a master/master replication through TCP using >> > dovecot 2.2.10 on both servers and everything is running fine, I filter >> the >> > users to replicate using the iterate_query on file dovecot-sql.con.ext; >> now >> > I want to set up a new replication between two new servers running >> dovecot >> > 2.2.32 but the replicator service tries to replicate every user on my >> > database even when the iterate_query is correctly set up and the command >> > "doveadm user '*' " shows only the users I want to replicate, I think >> I am >> > missing something but I do not know what. >> > >> > Thank you so much for your help. >> > >> > Jorge C. >> >> Please provide doveconf -n >> >> Aki >> > >

1 0

Post-login scripting
by j.emerlik 24 Oct '17

24 Oct '17

Hi , I would like to save every authentication IP addresses to database, for IMAP and POP3 everything working correct but I don't know how to configure Post-login script for SMTP AUTH. Can you help me ? Regards, Jack

5 11

STAT command failure
by Andrew Charnley 24 Oct '17

24 Oct '17

Hi, Regarding STAT which appears to have an issue with Dovecot:- [23:50:46] POP< +OK Dovecot ready. [23:50:46] POP> USER xxxxx [23:50:46] POP< +OK [23:50:46] POP> PASS ******** [23:50:46] POP< +OK Logged in. [23:50:46] POP> STAT [23:50:46] POP< -ERR Unknown command: I have enabled the logging as previously instructed for pop3 however this is only up to the point of login. After this there is no further information. Login is successful. Other commands are working fine, I can use Evolution which doesn't use STAT and access email fine. The issue only came to light due to an attempt to change to Claws email. Strangely one of my four accounts on the same server does work. There is no difference in the settings and I've tried recreating them on both Claws and the server. The Claws team are 100% sure it's a Dovecot issue. This is the latest version available with Centos 7 so not the most up-to-date but I can't see anything in the logs which would suggest a change for 2.2. Regards, Andrew

2 2

master/master replications v. 2.2.32
by Jorge Canto E. 23 Oct '17

23 Oct '17

Hi, in the past I set up a master/master replication through TCP using dovecot 2.2.10 on both servers and everything is running fine, I filter the users to replicate using the iterate_query on file dovecot-sql.con.ext; now I want to set up a new replication between two new servers running dovecot 2.2.32 but the replicator service tries to replicate every user on my database even when the iterate_query is correctly set up and the command "doveadm user '*' " shows only the users I want to replicate, I think I am missing something but I do not know what. Thank you so much for your help. Jorge C.

2 1

Panic: file index-mail-binary.c
by grupo correo 23 Oct '17

23 Oct '17

Hi, i have Dovecot Director and Dovecot Backends with 2.2.32. i have found a email that my web server send with only one character "=" in the body of the email and it generate a log error in Dovecot log like this: Oct 23 13:16:50 dovecot_2.2.32 dovecot: imap(user@domain): Panic: file index-mail-binary.c: line 358 (blocks_count_lines): assertion failed: (block_count == 0 || block_idx+1 == block_count) Oct 23 13:16:50 dovecot_2.2.32 dovecot: imap(user@domain): Error: Raw backtrace: /usr/local/lib/dovecot/libdovecot.so.0(+0x9a340) [0x7fc22c186340] -> /usr/local/lib/dovecot/libdovecot.so.0(+0x9a41e) [0x7fc22c18641e] -> /usr/local/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7fc22c11c04b] -> /usr/local/lib/dovecot/libdovecot-storage.so.0(+0xaeaab) [0x7fc22c4c4aab] -> /usr/local/lib/dovecot/libdovecot-storage.so.0(index_mail_get_binary_stream+0x3c2) [0x7fc22c4c4f32] -> /usr/local/lib/dovecot/libdovecot-storage.so.0(mail_get_binary_size+0x4b) [0x7fc22c45349b] -> /usr/local/lib/dovecot/libdovecot-storage.so.0(imap_msgpart_size+0x70) [0x7fc22c504ca0] -> dovecot/imap() [0x41d6ea] -> dovecot/imap() [0x41b8d2] -> dovecot/imap(imap_fetch_more+0x35) [0x41cbf5] -> dovecot/imap(cmd_fetch+0x2fb) [0x40f76b] -> dovecot/imap(command_exec+0x5c) [0x41a4ac] -> dovecot/imap() [0x418c6f] -> dovecot/imap() [0x418cff] -> dovecot/imap(client_handle_input+0x175) [0x419085] -> dovecot/imap(client_input+0x72) [0x419552] -> /usr/local/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x52) [0x7fc22c19a432] -> /usr/local/lib/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0xe7) [0x7fc22c19b977] -> /usr/local/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0x3c) [0x7fc22c19a4cc] -> /usr/local/lib/dovecot/libdovecot.so.0(io_loop_run+0x38) [0x7fc22c19a688] -> /usr/local/lib/dovecot/libdovecot.so.0(master_service_run+0x13) [0x7fc22c125eb3] -> dovecot/imap(main+0x2e7) [0x40cb37] -> /lib64/libc.so.6(__libc_start_main+0xf5) [0x7fc22bd4cb15] -> dovecot/imap() [0x40ccb9] Oct 23 13:16:50 dovecot_2.2.32 dovecot: imap(user@domain): Fatal: master: service(imap): child 1636 killed with signal 6 (core dumps disabled) Oct 23 13:16:50 imapintranetmol1v dovecot: imap-login: proxy(user@domain): disconnecting 10.1.21.253 (Disconnected by server(0s idle, in=303, out=869)): user=<user@domain>, method=PLAIN, rip=xxx.xxx.xxx.xxx, lip=xxx.xxx.xxx.xxx, TLS, session=<fJRD8zRc4PwKARX9> The error happens when the client sends this comnand to the Director or to the Backends directly: C: 34 UID FETCH 7059 (BINARY.PEEK[1] BINARY.SIZE[1]) Thank you

1 0

dovecot, winbind and user folders
by Kristian Rink 23 Oct '17

23 Oct '17

Folks; I'm in the process of migrating an existing IMAP infrastructure to something that should be dovecot based. We live inside a Windows AD 2012 realm and the servers use winbind for user authentication as well as pam configurations to automatically create user home dirs whenever the user logs in first. Can something like this (mailbox is automatically generated whenever user logs in first) be done with dovecot too? Any best practises on how to work in such setups? I want to keep setup effort required for new users as low as possible... ;) Thanks in advance and all the best, Kristian

2 1

postfix -1 read errors
by Alef Veld 23 Oct '17

23 Oct '17

Hi all. I’m a bit worried about the following read errors i see in my log lately. Mails still arrive and get sent fine, but what is going on with this? It doesn’t look good. Nothing has change on server side and i restarted all services (dovecot, postfix, saslauthd, sql ). Maybe it’s a temporary iPhone thing (the device im using to read and send mails, not the first time that happened. Maybe changing the port will do the trick). Thanks for looking. Oct 22 20:19:00 www postfix/smtpd[16117]: SSL_accept:SSLv3 flush data Oct 22 20:19:00 www postfix/smtpd[16117]: read from 58130D3F70 [58130FDA83] (5 bytes => -1 (0xFFFFFFFFFFFFFFFF)) Oct 22 20:19:00 www postfix/smtpd[16117]: read from 58130D3F70 [58130FDA83] (5 bytes => 5 (0x5)) Oct 22 20:19:00 www postfix/smtpd[16117]: 0000 16 03 03 00 86 ..... Oct 22 20:19:00 www postfix/smtpd[16117]: read from 58130D3F70 [58130FDA88] (134 bytes => -1 (0xFFFFFFFFFFFFFFFF)) Oct 22 20:19:00 www postfix/smtpd[16117]: read from 58130D3F70 [58130FDA88] (134 bytes => 134 (0x86)) Oct 22 20:19:00 www postfix/smtpd[16117]: 0000 10 00 00 82 00 80 6d 90|41 c3 d3 9f 15 ea 8f 1c ......m. A....... Oct 22 20:19:00 www postfix/smtpd[16117]: 0010 a8 1c 08 ed a9 65 dc 5b|29 87 73 86 31 0e a9 d8 .....e.[ ).s.1... Oct 22 20:19:00 www postfix/smtpd[16117]: 0020 72 54 84 63 5f 9c 59 3e|cd aa da e7 a3 1f a9 b3 rT.c_.Y> ........ Oct 22 20:19:00 www postfix/smtpd[16117]: 0030 eb 0a 62 2b a4 26 65 d5|9d 63 2b c2 e2 8c a2 31 ..b+.&e. .c+....1 Oct 22 20:19:00 www postfix/smtpd[16117]: 0040 51 be ba a2 1e 73 45 7f|be 71 40 46 b9 01 bf 76 Q....sE. .q@F...v Oct 22 20:19:00 www postfix/smtpd[16117]: 0050 6e 77 a5 f5 c0 40 81 11|fa 95 57 e0 06 36 36 a8 nw...@.. ..W..66. Oct 22 20:19:00 www postfix/smtpd[16117]: 0060 21 c4 08 51 d5 d1 a5 98|6d dd f8 0b 79 a0 16 54 !..Q.... m...y..T Oct 22 20:19:00 www postfix/smtpd[16117]: 0070 4f 38 08 14 ab da a9 99|b7 69 b2 dc 81 4d aa 2e O8...... .i...M.. Oct 22 20:19:00 www postfix/smtpd[16117]: 0080 e8 26 57 8d 08 ea .&W... Oct 22 20:19:00 www postfix/smtpd[16117]: SSL_accept:SSLv3 read client key exchange A Oct 22 20:19:00 www postfix/smtpd[16117]: read from 58130D3F70 [58130FDA83] (5 bytes => -1 (0xFFFFFFFFFFFFFFFF)) Oct 22 20:19:00 www postfix/smtpd[16117]: read from 58130D3F70 [58130FDA83] (5 bytes => 5 (0x5)) Oct 22 20:19:00 www postfix/smtpd[16117]: 0000 14 03 03 00 01 ..... Oct 22 20:19:00 www postfix/smtpd[16117]: read from 58130D3F70 [58130FDA88] (1 bytes => -1 (0xFFFFFFFFFFFFFFFF)) Oct 22 20:19:00 www postfix/smtpd[16117]: read from 58130D3F70 [58130FDA88] (1 bytes => 1 (0x1)) Oct 22 20:19:00 www postfix/smtpd[16117]: 0000 01 . Oct 22 20:19:00 www postfix/smtpd[16117]: read from 58130D3F70 [58130FDA83] (5 bytes => -1 (0xFFFFFFFFFFFFFFFF)) Oct 22 20:19:00 www postfix/smtpd[16117]: read from 58130D3F70 [58130FDA83] (5 bytes => 5 (0x5)) Oct 22 20:19:00 www postfix/smtpd[16117]: 0000 16 03 03 00 28 ....( Oct 22 20:19:00 www postfix/smtpd[16117]: read from 58130D3F70 [58130FDA88] (40 bytes => -1 (0xFFFFFFFFFFFFFFFF)) Oct 22 20:19:00 www postfix/smtpd[16117]: read from 58130D3F70 [58130FDA88] (40 bytes => 40 (0x28)) Oct 22 20:19:00 www postfix/smtpd[16117]: 0000 89 eb f1 52 0c 38 5a 84|f8 ab 93 00 f4 ce dc c0 ...R.8Z. ........ Oct 22 20:19:00 www postfix/smtpd[16117]: 0010 04 6f 20 0b 55 d6 ea 85|15 d4 f0 85 c0 13 78 f4 .o .U... ......x. Oct 22 20:19:00 www postfix/smtpd[16117]: 0020 5c 87 1c ed 2a a0 51 56| \...*.QV Oct 22 20:19:00 www postfix/smtpd[16117]: SSL_accept:SSLv3 read finished A Oct 22 20:19:00 www postfix/smtpd[16117]: SSL_accept:SSLv3 write change cipher spec A Oct 22 20:19:00 www postfix/smtpd[16117]: SSL_accept:SSLv3 write finished A Oct 22 20:19:00 www postfix/smtpd[16117]: write to 58130D3F70 [581310B440] (51 bytes => 51 (0x33)) Oct 22 20:19:00 www postfix/smtpd[16117]: 0000 14 03 03 00 01 01 16 03|03 00 28 56 47 45 d2 74 ........ ..(VGE.t Oct 22 20:19:00 www postfix/smtpd[16117]: 0010 69 b8 8d f3 06 30 10 7e|64 42 a3 5b c8 bc a3 18 i....0.~ dB.[.... Oct 22 20:19:00 www postfix/smtpd[16117]: 0020 35 eb cc 50 f6 2e 9c 72|2e 3b 1f 8d 56 1e 1e 80 5..P...r .;..V... Oct 22 20:19:00 www postfix/smtpd[16117]: 0030 fa c7 6b ..k Oct 22 20:19:00 www postfix/smtpd[16117]: SSL_accept:SSLv3 flush data Oct 22 20:19:00 www postfix/smtpd[16117]: Anonymous TLS connection established from cpc98338-croy25-2-0-cust350.19-2.cable.virginm.net<http://cpc98338-croy25-2-0-cust350.19-2.cable.virginm.net>[82.45.65.95]: TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits) Oct 22 20:19:00 www postfix/smtpd[16117]: read from 58130D3F70 [58130FDA83] (5 bytes => -1 (0xFFFFFFFFFFFFFFFF)) Oct 22 20:19:00 www postfix/smtpd[16117]: read from 58130D3F70 [58130FDA83] (5 bytes => 5 (0x5)) Oct 22 20:19:00 www postfix/smtpd[16117]: 0000 17 03 03 00 2d ....- Oct 22 20:19:00 www postfix/smtpd[16117]: read from 58130D3F70 [58130FDA88] (45 bytes => -1 (0xFFFFFFFFFFFFFFFF)) Oct 22 20:19:00 www postfix/smtpd[16117]: read from 58130D3F70 [58130FDA88] (45 bytes => 45 (0x2D))

2 2

Proxy lmtps
by Matthias Kueth 22 Oct '17

22 Oct '17

Hi, when proxying lmtp from director to backend, director does not use STARTTLS. Delivering mails with postfix via lmtps to backend or director works encrypted. Is there a way to force the use of STARTTLS on dovecot director lmtp proxy? Regards, Matthias -- BOFH excuse #446: Mailer-daemon is busy burning your message in hell. (hbox storage?)

2 2

Question regarding replication - duplicate emails
by Remko Lodder 21 Oct '17

21 Oct '17

Dear Dovecot and community, We run a small email service for our customers, based on two machines that are made “redundant or clustered” by using the replication feature of Dovecot. This works well, for most emails. Sometimes the following happends: Email to our support database arrives at the inbox. Every period a cronjob looks into that mailbox and parses the information and makes a support ticket from that message. The cronjob deletes the email afterwards and sees whether there are more new mails or not. In between the deletion and the (next) check, the email gets “resynced” again from the “other machine”, and is seen as a new email by the cronjob and gets handled again. So basically we get two tickets for one email. After that second run the email is no longer replicated. This behaviour can also be seen via webmail and email clients, this suggests that the replication might not be aware (enough) that the replication is occurring or that an item already had been synced from A to B (and does not need to get back from B to A after A deleted it). Is there a way to fiddle with the acknowledgement timing or give the processes some more space/time to get on par with eachother? Below is the configuration of machine B, they are synchronised through puppet, so only the hostname and IP addresses are different. (so for replication, A has: tcps:hostname_of_b:12346 and B has tcps:hostname_of_a:12346). Also note that HAproxy is prepared but not in use at all. # 2.2.33.1 (e9afa7f18): /usr/local/etc/dovecot/dovecot.conf # Pigeonhole version 0.4.20 (7cd71ba) # OS: FreeBSD 11.1-RELEASE amd64 auth_mechanisms = plain login disable_plaintext_auth = no doveadm_password = # hidden, use -P to show it haproxy_trusted_networks = IPv4_Haproxy IPv6_Haproxy lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes lmtp_save_to_detail_mailbox = yes mail_fsync = always mail_location = sdbox:~/sdbox mail_plugins = " quota notify replication" managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext imapsieve vnd.dovecot.imapsieve namespace { inbox = yes location = mailbox Drafts { auto = subscribe special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { auto = subscribe special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Spam { auto = subscribe special_use = \Junk } mailbox Trash { auto = subscribe special_use = \Trash } prefix = separator = . } passdb { driver = pam } plugin { imapsieve_mailbox1_before = file:/usr/local/lib/dovecot/sieve/report-spam.sieve imapsieve_mailbox1_causes = COPY imapsieve_mailbox1_name = Spam imapsieve_mailbox2_before = file:/usr/local/lib/dovecot/sieve/report-ham.sieve imapsieve_mailbox2_causes = COPY imapsieve_mailbox2_from = Spam imapsieve_mailbox2_name = * mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size mail_replica = tcps:hostname_of_machine_a:12346 sieve = ~/.dovecot.sieve sieve_after = /usr/local/etc/dovecot/sieve/after/ sieve_before = /usr/local/etc/dovecot/sieve/global/ sieve_pipe_bin_dir = /usr/local/lib/dovecot/sieve sieve_plugins = sieve_imapsieve sieve_extprograms sieve_vacation_dont_check_recipient = yes } postmaster_address = postmaster(a)ourdomain.tld protocols = imap pop3 lmtp sieve replication_max_conns = 100 service aggregator { fifo_listener replication-notify-fifo { mode = 0666 } unix_listener replication-notify { mode = 0666 } } service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } } service doveadm { inet_listener { port = 12346 ssl = yes } } service imap-login { inet_listener imap_haproxy { haproxy = yes port = 10143 } inet_listener imaps_haproxy { haproxy = yes port = 10144 ssl = yes } service_count = 1 } service imap { process_limit = 1024 } service lmtp { inet_listener lmtp { address = IPv4, IPv6, 127.0.0.1 ::1 port = 24 } unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0600 user = postfix } } service pop3 { process_limit = 1024 } service replicator { process_min_avail = 1 unix_listener replicator-doveadm { mode = 0666 } } ssl_ca = </usr/local/etc/letsencrypt/live/host.ourdomain.tld/fullchain.pem ssl_cert = </usr/local/etc/letsencrypt/live/host.ourdomain.tld/cert.pem ssl_client_ca_file = /usr/local/certificates/letsencrypt-ca.pem ssl_key = # hidden, use -P to show it ssl_protocols = !SSLv2 !SSLv3 userdb { driver = passwd } verbose_proctitle = yes protocol lmtp { auth_username_format = %n mail_plugins = quota sieve replication notify postmaster_address = postmaster(a)ourdomain.tld } protocol lda { mail_plugins = " quota notify replication sieve replication notify" } protocol imap { imap_client_workarounds = delay-newmail mail_max_userip_connections = 50 mail_plugins = " quota notify replication imap_quota imap_sieve" }

2 3