- dovecot - dovecot.org

[Dovecot] Integrating with Drupal SQL db
by info＠stos.se 19 Mar '13

19 Mar '13

Hi I'm trying to get Dovecot to use Drupal users password for authenticating IMAP users. But I just cant figure out how to make Dovecot understand the password hash type that Drupal 7 is using. My example user with password Teacher1 looks like this in Drupal database: $S$DZwJa.U8HXT2PvTmwCK13rGEYEvnx5DB6/hlqnfCBum4s4U7MVWU Dovecot retrieves this hash but complains that its not a recognized hash type, or that the hash is wrong, depending on if I change the default hash type in Dovecot config. Any help appreciated. root@SSiS:/etc/postfix# dovecot --version 1.2.15 root@SSiS:/etc/postfix# dovecot -n # 1.2.15: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-12-pve i686 Debian 6.0.7 simfs log_timestamp: %Y-%m-%d %H:%M:%S login_dir: /var/run/dovecot/login login_executable: /usr/lib/dovecot/imap-login mail_privileged_group: mail mail_location: maildir:/home/vmail/ mbox_write_locks: fcntl dotlock auth default: verbose: yes debug: yes debug_passwords: yes passdb: driver: pam passdb: driver: sql args: /etc/dovecot/dovecot-sql.conf userdb: driver: passwd root@SSiS:/etc/postfix# root@SSiS:/etc/postfix# grep -v '^ *$#.*$\?$' /etc/dovecot/dovecot-sql.conf driver = mysql connect = host=127.0.0.1 dbname=Drupal user=Dru_Adm password=localu default_pass_scheme = CRYPT password_query = SELECT name AS user, pass AS password FROM users WHERE name='%n' user_query = SELECT CONCAT(SUBSTRING_INDEX(mail,'@',-1),'/',SUBSTRING_INDEX(mail,'@',1),'/') AS mail FROM users WHERE name='%n' root@SSiS:/etc/postfix# tail /var/log/mail.log Mar 11 16:17:42 SSiS dovecot: auth(default): new auth connection: pid=8593 Mar 11 16:17:51 SSiS dovecot: auth(default): client in: AUTH#0111#011PLAIN#011service=imap#011secured#011lip=127.0.0.1#011rip=127.0.0.1#011lport=143#011rport=52316#011resp=AFRlYWNoZXIxAFRlYWNoZXIx Mar 11 16:17:51 SSiS dovecot: auth-worker(default): pam(Teacher1,127.0.0.1): lookup service=dovecot Mar 11 16:17:51 SSiS dovecot: auth-worker(default): pam(Teacher1,127.0.0.1): #1/1 style=1 msg=Password: Mar 11 16:17:54 SSiS dovecot: auth-worker(default): pam(Teacher1,127.0.0.1): pam_authenticate() failed: Authentication failure (password mismatch?) (given password: Teacher1) Mar 11 16:17:54 SSiS dovecot: auth-worker(default): sql(Teacher1,127.0.0.1): query: SELECT name AS user, pass AS password FROM users WHERE name='Teacher1' Mar 11 16:17:54 SSiS dovecot: auth-worker(default): sql(Teacher1,127.0.0.1): Password mismatch Mar 11 16:17:54 SSiS dovecot: auth-worker(default): md5_verify(Teacher1): Not a valid MD5-CRYPT or PLAIN-MD5 password Mar 11 16:17:54 SSiS dovecot: auth-worker(default): Invalid OTP data in passdb Mar 11 16:17:54 SSiS dovecot: auth-worker(default): Invalid OTP data in passdb Mar 11 16:17:54 SSiS dovecot: auth-worker(default): sql(Teacher1,127.0.0.1): CRYPT(Teacher1) != '$S$DZwJa.U8HXT2PvTmwCK13rGEYEvnx5DB6/hlqnfCBum4s4U7MVWU' Mar 11 16:17:56 SSiS dovecot: auth(default): client out: FAIL#0111#011user=Teacher1 Mar 11 16:18:01 SSiS dovecot: imap-login: Disconnected: Too many invalid commands (auth failed, 1 attempts): user=<Teacher1>, method=PLAIN, rip=127.0.0.1, lip=127.0.0.1, secured Mar 11 16:32:36 SSiS dovecot: auth(default): new auth connection: pid=9075 Mar 11 16:32:41 SSiS dovecot: imap-login: Disconnected: Too many invalid commands (no auth attempts): rip=127.0.0.1, lip=127.0.0.1, secured root@SSiS:/etc/postfix#

5 8

[Dovecot] Random LDA failure to access auth socket
by Chris Richards 19 Mar '13

19 Mar '13

Greetings all. Please forgive me if I'm posting something that has already been addressed, but my google-foo is not strong enough to find the solution. I've got a dovecot server running version 2.0.19 on Gentoo Hardened. I have Postfix as my MTA, and it is calling the Dovecot LDA to deliver the mail. Everything is working great, mail is being delivered, and the users are happy. However, I am noticing that I have random entries like this: Mar 1 20:19:23 hermes dovecot: lda: Error: userdb lookup: connect(/var/run/dovecot/auth-userdb) failed: Permission denied (euid=97(dovecot) egid=97(dovecot) missing +r perm: /var/run/dovecot/auth-userdb, dir owned by 0:0 mode=0755) Mar 1 20:19:23 hermes dovecot: lda: Fatal: Internal error occurred. Refer to server log for more information. Since these messages came from the server log, looking in the server log for more information is rather pointless. I have 10-master.conf configured as follows: service auth { unix_listener auth-userdb { mode = 0600 user = vmail group = vmail } In 15-lda.conf I have: protocol lda { mail_plugins = $mail_plugins sieve quota } In Postfix master.cf, I have the following: dovecot unix - n n - - pipe flags=DRhu user=vmail:users argv=/usr/libexec/dovecot/deliver -f ${sender} -d ${user}@${nexthop} Permissions on the socket are: srw------- 1 vmail vmail 0 Feb 24 23:43 auth-userdb Judging from the log, my problem is that the LDA appears to be trying to access the socket as the dovecot user (rather than the vmail user), but my question is why? What logging can I use to tell me if postfix is calling with the wrong permissions or if the lda is somehow getting confused? Any help or suggestions greatly appreciated. Thanks, Gizmo

2 6

[Dovecot] SASL + Postfix woes
by Jerry 18 Mar '13

18 Mar '13

Okay, I wasn't going to try and fix up the messed up mail server I was given; however, I decided that I might as well try. Situation: The system has a Postfix MTA and uses Dovecot for LDA and Cyrus-SASL for SASL. That works fine. I decided that I wanted to switch over to Dovecot for SASL. dovecot is presently using MySQL for its database. I make the (I thought) necessary changes in Postfix and restarted it. Big problem. SASL is now broken. I turned on logging in Dovecot to see what was happening, but apparently nothing is happening. There are no entries regarding Postfix attempting to negotiate an SASL request with Dovecot. This is the "dovecot -n" outout (yes, I know it is an old version) # 1.2.17: /usr/local/etc/dovecot.conf # OS: FreeBSD 8.3-STABLE amd64 ufs log_path: /var/log/dovecot.log login_dir: /var/run/dovecot/login login_executable: /usr/local/libexec/dovecot/imap-login verbose_proctitle: yes first_valid_uid: 1000 first_valid_gid: 1000 mail_privileged_group: mail mail_location: maildir:/var/mail/vhost/seibercom.net/gerard mail_plugins: expire imap_client_workarounds: delay-newmail netscape-eoh tb-extra-mailbox-sep lda: postmaster_address: postmaster(a)seibercom.net mail_plugins: sieve sieve_global_path: /usr/local/etc/dovecot/sieve/gerard.sieve sendmail_path: /usr/sbin/sendmail auth default: mechanisms: plain login digest-md5 cram-md5 username_format: %Lu verbose: yes debug: yes debug_passwords: yes passdb: driver: sql args: /usr/local/etc/dovecot-sql.conf userdb: driver: sql args: /usr/local/etc/dovecot-sql.conf socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix master: path: /var/run/dovecot/auth-master mode: 384 user: vmail group: vmail plugin: expire: Trash 2 Spam/* 2 expire_dict: proxy::expire dict: expire: mysql:/usr/local/etc/dovecot-dict-expire.conf This is the "dovecot-sql.conf" file: driver = mysql connect = host=localhost dbname=Dovecot user=root password=xxxxxxxx password_query = SELECT concat(userid, '@', domain) AS user, password \ FROM users WHERE userid = '%n' AND domain = '%d' user_query = SELECT uid, gid, home FROM users WHERE userid = '%n' AND domain = '%d' This is the pertinent part of the postconf -fn output: broken_sasl_auth_clients = yes smtp_sasl_auth_enable = yes smtp_sasl_password_maps = hash:/usr/local/etc/postfix/sasl_password_maps smtp_sasl_security_options = noanonymous smtp_sasl_type = dovecot smtpd_client_restrictions = reject_unauth_pipelining permit_sasl_authenticated smtpd_relay_restrictions = permit_mynetworks permit_sasl_authenticated smtpd_sasl_auth_enable = yes smtpd_sasl_authenticated_header = yes smtpd_sasl_local_domain = $mydomain smtpd_sasl_path = private/auth smtpd_sasl_security_options = noanonymous, noplaintext smtpd_sasl_tls_security_options = noanonymous I have tried using "dovecot" in place of "private/auth", but it doesn't make any difference. This is the only output from the postfix maillog: Mar 18 08:13:02 scorpio postfix/smtpd[65217]: connect from localhost[127.0.0.1] Mar 18 08:13:02 scorpio postfix/smtpd[65217]: warning: localhost[127.0.0.1]: SASL CRAM-MD5 authentication failed: authentication failure Mar 18 08:13:02 scorpio postfix/smtpd[65217]: lost connection after AUTH from localhost[127.0.0.1] Again, it doesn't appear that Postfix ever actually makes contact with Dovecot. I am probably doing something extremely stupid, but I just cannot figure out what it is. -- Jerry ♔ Disclaimer: off-list followups get on-list replies or get ignored. Please do not ignore the Reply-To header. __________________________________________________________________

2 2

[Dovecot] Dovecot with sasl/imaps/postfix and thunderbird
by Alex 18 Mar '13

18 Mar '13

Hi, I have an fc18 system with postfix and dovecot-2.1.13 and have configured them to use sasl for SMTP Auth and Maildir with imaps. The system is running now, so I'm trying to set up thunderbird to autodetect all settings during the initial account setup. However, it seems to want to use port 143 and STARTTLS, and not port 993, which is what I would expect. When I force it to use 993, I receive a certificate failure message: Mar 12 23:20:45 propnew postfix/submission/smtpd[14423]: initializing the server-side TLS engine Mar 12 23:20:45 propnew postfix/tlsmgr[14425]: open smtpd TLS cache btree:/var/lib/postfix/smtpd_tls_session_cache Mar 12 23:20:45 propnew postfix/tlsmgr[14425]: tlsmgr_cache_run_event: start TLS smtpd session cache cleanup Mar 12 23:20:45 propnew postfix/submission/smtpd[14423]: connect from unknown[192.168.1.43] Mar 12 23:20:45 propnew dovecot: imap-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=192.168.1.43, lip=66.111.222.101, TLS: SSL_read() failed: error:14094412:SSL routines:SSL3_READ_BYTES:sslv3 alert bad certificate: SSL alert number 42, session=<BGBS5MXXhQDAqAEr> Mar 12 23:20:45 propnew postfix/submission/smtpd[14423]: lost connection after CONNECT from unknown[192.168.1.43] These are self-signed certs created using dovecot's mkcert.sh script. Is this a problem with the cert or with the dovecot configuration? Is it conventional to use port 143 for encrypted IMAP connections these days, and not just 993? I'm finding that port 25 works with TLS and postfix now too, not just port 587, so I'm really confused. I've included my doveconf output below. I'd appreciate it if someone could review it for me to be sure. # 2.1.13: /etc/dovecot/dovecot.conf # OS: Linux 3.8.1-201.fc18.x86_64 x86_64 Fedora release 18 (Spherical Cow) ext4 auth_debug = yes auth_mechanisms = plain login auth_verbose = yes default_client_limit = 2000 disable_plaintext_auth = no lda_mailbox_autocreate = yes lda_mailbox_autosubscribe = yes mail_debug = yes mail_location = maildir:/home/%u/Maildir mail_privileged_group = mail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } passdb { driver = pam } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } } service imap-login { inet_listener imaps { port = 993 ssl = yes } process_min_avail = 20 service_count = 0 } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd } userdb { driver = passwd } protocol lda { info_log_path = /var/log/dovecot-lda.log log_path = /var/log/dovecot-lda-errors.log } protocol imap { mail_max_userip_connections = 100 } protocol pop3 { pop3_uidl_format = %08Xu%08Xv } Thanks, Alex

9 18

Re: [Dovecot] Dovecot - Sieve script loaded but filtering doesn't works ?
by Clement PAULET 18 Mar '13

18 Mar '13

Hello Steffen, Thanks for your reply, This is my script (using for my test) : require "fileinto"; if address "To" "info(a)info.xx.com" { fileinto "Test"; } Clement ------------------------------ Message: 7 Date: Mon, 18 Mar 2013 13:23:33 +0100 (CET) From: Steffen Kaiser <skdovecot(a)smail.inf.fh-brs.de> To: Dovecot Mailing List <dovecot(a)dovecot.org> Subject: Re: [Dovecot] Dovecot - Sieve script loaded but filtering doesn't works ? Message-ID: <alpine.DEB.2.02.1303181322430.3303(a)pc-2m63.inf.fh-bonn-rhein-sieg.de> Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Mon, 18 Mar 2013, Clement PAULET wrote: When I use a Sieve script, it 's loaded but actions are not respect with this logs : The sieve script just trying to redirect to INBOX.Test folder but doesn't works.. First of all, how does your script looks like? - -- Steffen Kaiser -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iQEVAwUBUUcHRl3r2wJMiz2NAQKoswf/WczI0q9k0WqWzRPr7lwuBEeiQQlYBDaq Lap8YNnbxDsczxgYZ/i0gDrq7f612A0nKWHBC806DxH4dHNyUwBPYVqFAT7edvk4 ns99f4bNh6GsufC1CY5tY/1DjT5ykEzkTmaV443YH50jQ4iPnDohOMsBBRlhoWN4 8KCLCNafCYXf48QjnAfoLt4TjaxyYb//7otYJN2CqLOGbvWoJwrpNgmuhvST+PNm RQXLG1lpxzt7QMP++fTMXa6A/SwVsglhAUS6xFdAuoOBsx1jPtvA+mot9gqpi02I j2WquMsycviWprYD2FsET903TWU/5+boxg2UBOettsTqhfwABkIcvQ== =ygun -----END PGP SIGNATURE-----

2 1

[Dovecot] Dovecot not obeying disable_plaintext_auth = yes and how to force/disable encryption
by Darren Pilgrim 18 Mar '13

18 Mar '13

I'm using Dovecot 2.1.15. I need to require encryption and only secure auth on public addresses, but allow plaintext auth over an unencrypted connection on localhost. I have so far (excerpts from `doveconf -a`): auth_mechanisms = cram-md5 plain disable_plaintext_auth = yes listen = service imap-login { inet_listener imap-local { address = ::1 port = 143 ssl = no } inet_listener imap-pub { address = 2001:db8::1 port = 993 ssl = yes } } service managesieve-login { inet_listener sieve-local { address = ::1 port = 4190 ssl = no } inet_listener sieve-pub { address = 2001:db8::1 port = 4190 ssl = no } } The ssl option only seems to switch the inet_listener between using a secure socket and using STARTTLS. How do I tell a given inet_listener to do neither? How do I tell a given inet_listener to require STARTTLS before allowing AUTH/SASL? I would prefer to offer only CRAM-MD5 on the UGA/public ports, and only PLAIN or at least also PLAIN on localhost. I tried adding auth_mechanisms lines to each inet_listener block, but got parse errors. How do I do this? Dovecot seems to ignore disable_plaintext_auth = yes: # telnet 2001:db8::1 4190 Trying 2001:db8::1... Connected to host.example.com. Escape character is '^]'. "IMPLEMENTATION" "Dovecot Pigeonhole" "SIEVE" "fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave" "NOTIFY" "mailto" "SASL" "CRAM-MD5 PLAIN" "STARTTLS" "VERSION" "1.0" OK "Dovecot ready." -- Please reply on list.

1 1

[Dovecot] Dovecot as LDA with Postfix and virtual users
by Christian Benke 17 Mar '13

17 Mar '13

Hello! I've been trying to configure Dovecot to work as LDA for file-based virtual users with Postfix. Some part in the configuration seems to miss though, as mails are received by Postfix, but instead of giving it to Dovecot for delivery, it delivers the mails itself. Postfix drops the mail in /var/mail/<user>/mbox, if Dovecot would be called, it should deliver it to /var/vmail/<domain>/<user>/Maildir. I've made sure to add the dovecot-service to postfix/master.cf according to http://wiki2.dovecot.org/LDA/Postfix and tried all kinds of settings and did quadruple checks for errors. I'm using Debian 6.0 with Dovecot 2.1.7(From backports) and Postfix 2.7.1 I've been trying to figure out what's missing for a few hours now and have to give up for today. I hope someone can help me with a hint what's missing or wrong :-/ Here's an excerpt from my mail.log, my postconf -n and dovecot -n: Mar 17 00:02:46 poab postfix/smtpd[15333]: connect from mail-wg0-f47.google.com[74.125.82.47] Mar 17 00:02:46 poab postfix/smtpd[15333]: setting up TLS connection from mail-wg0-f47.google.com[74.125.82.47] Mar 17 00:02:46 poab postfix/smtpd[15333]: Anonymous TLS connection established from mail-wg0-f47.google.com[74.125.82.47]: TLSv1 with cipher RC4-SHA (128/128 bits) Mar 17 00:02:46 poab dovecot: auth: Debug: Loading modules from directory: /usr/lib/dovecot/modules/auth Mar 17 00:02:46 poab dovecot: auth: Debug: Module loaded: /usr/lib/dovecot/modules/auth/libdriver_mysql.so Mar 17 00:02:46 poab dovecot: auth: Debug: Module loaded: /usr/lib/dovecot/modules/auth/libdriver_pgsql.so Mar 17 00:02:46 poab dovecot: auth: Debug: Module loaded: /usr/lib/dovecot/modules/auth/libdriver_sqlite.so Mar 17 00:02:46 poab dovecot: auth: Debug: passwd-file /etc/dovecot/users: Read 1 users in 0 secs Mar 17 00:02:46 poab dovecot: auth: Debug: auth client connected (pid=0) Mar 17 00:02:46 poab postfix/smtpd[15333]: 66AD04E23EE: client=mail-wg0-f47.google.com[74.125.82.47] Mar 17 00:02:46 poab postfix/cleanup[15340]: 66AD04E23EE: message-id=<CAAMQ8bSEetcSYKKHKhbAqWxJwRewaPB_wA2DK8J4N-q5Y+dG7w(a)mail.gmail.com> Mar 17 00:02:46 poab postfix/qmgr[14844]: 66AD04E23EE: from=<benkkk AT wheemail.com>, size=1611, nrcpt=1 (queue active) Mar 17 00:02:46 poab postfix/smtpd[15333]: disconnect from mail-wg0-f47.google.com[74.125.82.47] Mar 17 00:02:46 poab postfix/local[15341]: 66AD04E23EE: to=<benkkk AT example.com>, relay=local, delay=0.35, delays=0.3/0.01/0/0.04, dsn=2.0.0, status=sent (delivered to mailbox) Mar 17 00:02:46 poab postfix/qmgr[14844]: 66AD04E23EE: removed # postconf -n alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases append_dot_mydomain = no biff = no broken_sasl_auth_clients = yes config_directory = /etc/postfix debug_peer_level = 3 inet_interfaces = all inet_protocols = all mailbox_size_limit = 5120000000 myhostname = example.com mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128 myorigin = /etc/mailname readme_directory = no recipient_delimiter = + relayhost = smtp_tls_CAfile = /etc/ssl/certs/ca-certificates.crt smtp_tls_note_starttls_offer = yes smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache smtp_use_tls = yes smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU) smtpd_helo_required = yes smtpd_helo_restrictions = reject_invalid_helo_hostname smtpd_recipient_restrictions = reject_unknown_recipient_domain, reject_unauth_pipelining, permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination smtpd_reject_unlisted_recipient = yes smtpd_sasl_auth_enable = yes smtpd_sasl_local_domain = $myhostname smtpd_sasl_path = private/auth smtpd_sasl_security_options = noanonymous smtpd_sasl_tls_security_options = $smtpd_sasl_security_options smtpd_sasl_type = dovecot smtpd_sender_login_maps = hash:/etc/postfix/sender_login_maps smtpd_sender_restrictions = reject_authenticated_sender_login_mismatch smtpd_tls_CAfile = /etc/ssl/certs/ca-certificates.crt smtpd_tls_auth_only = yes smtpd_tls_cert_file = /etc/ssl/certs/postfix.pem smtpd_tls_key_file = /etc/ssl/private/postfix.key smtpd_tls_loglevel = 1 smtpd_tls_received_header = yes smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache smtpd_tls_session_cache_timeout = 3600s smtpd_use_tls = yes tls_random_source = dev:/dev/urandom virtual_alias_maps = hash:/etc/postfix/virtual_alias_maps virtual_mailbox_domains = hash:/etc/postfix/virtual_mailbox_domains virtual_mailbox_maps = hash:/etc/postfix/virtual_mailbox_maps virtual_transport = dovecot # dovecot -n # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-5-openvz-amd64 x86_64 Debian 6.0.7 auth_debug = yes auth_debug_passwords = yes auth_mechanisms = plain login auth_socket_path = /var/run/dovecot/auth-master auth_verbose = yes auth_verbose_passwords = sha1 first_valid_gid = 5000 first_valid_uid = 5000 last_valid_gid = 5000 last_valid_uid = 5000 lda_mailbox_autocreate = yes log_timestamp = "%Y-%m-%d %H:%M:%S " mail_debug = yes mail_gid = 5000 mail_home = /var/vmail/%d/%n mail_location = maildir:~/Maildir mail_privileged_group = vmail mail_uid = 5000 namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = scheme=SHA1 /etc/dovecot/users driver = passwd-file } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = " imap" service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0666 user = postfix } } service imap-login { inet_listener imap { port = 143 } inet_listener imaps { port = 0 } } ssl_cert = </etc/ssl/certs/postfix.pem ssl_key = </etc/ssl/private/postfix.key userdb { args = uid=5000 gid=5000 home=/var/vmail/%d/%n allow_all_users=yes driver = static } verbose_ssl = yes protocol lda { mail_plugins = } Thanks & good night, Christian -- Central Asia by bike, starting May 2013 - http://poab.org

2 4

[Dovecot] Dovecot SASL & Postfix
by Jerry 17 Mar '13

17 Mar '13

This is probably a dumb question, but I'll ask anyway. I am currently using Postfix with Dovecot and Cyrus-SASL. I want to switch over to Dovecot SASL. The regular Dovecot user/password file is not the same as the file used by cyrus-sasl. Usewr names and passwords are different. I created a flat file that dovecot can use for SASL look-ups; however, exactly where in the Dovecot config file to I place the entry. -- Jerry ♔ Disclaimer: off-list followups get on-list replies or get ignored. Please do not ignore the Reply-To header. __________________________________________________________________

3 5

[Dovecot] Connection to PGSQL fails?
by Bjørn T Johansen 17 Mar '13

17 Mar '13

I have configured a new server and copied the dovecot-sql.conf file that works a different server to the new server... But when Dovecot tries to connect to the database, the following error appears..: Mar 16 22:28:25 smtp dovecot: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/auth Mar 16 22:28:25 smtp dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libauthdb_ldap.so Mar 16 22:28:25 smtp dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_pgsql.so Mar 16 22:28:25 smtp dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libdriver_sqlite.so Mar 16 22:28:25 smtp dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/auth/libmech_gssapi.so Mar 16 22:28:25 smtp dovecot: auth: Error: pgsql: Connect failed to serviceadmin: could not connect to server: Permission denied Mar 16 22:28:25 smtp dovecot: auth: Error: #011Is the server running on host "10.50.150.35" and accepting Mar 16 22:28:25 smtp dovecot: auth: Error: #011TCP/IP connections on port 5432? Mar 16 22:28:25 smtp dovecot: auth: Debug: auth client connected (pid=1768) But if I use psql and connects to the same db server with the same username and password, I can successfully connect... What am I missing? Regards, BTJ -- ----------------------------------------------------------------------------------------------- Bjørn T Johansen btj(a)havleik.no ----------------------------------------------------------------------------------------------- Someone wrote: "I understand that if you play a Windows CD backwards you hear strange Satanic messages" To which someone replied: "It's even worse than that; play it forwards and it installs Windows" -----------------------------------------------------------------------------------------------

3 7

[Dovecot] sieve: seconds-extension for vacation
by Peer Heinlein 16 Mar '13

16 Mar '13

Hi, looks like Dovecot-Sieve doesn't know the seconds-extension for vacation: main script: line 5: error: unknown tagged argument ':seconds' for the vacation command (reported only once at first occurence). main script: error: validation failed. http://tools.ietf.org/html/rfc6131 Could this be added during the next releases? Regards, Peer -- Treffen Sie uns auf den Chemnitzer Linux-Tagen vom 16. bis 17. März 2013! Heinlein Support GmbH Schwedter Str. 8/9b, 10119 Berlin http://www.heinlein-support.de Tel: 030 / 405051-42 Fax: 030 / 405051-19 Zwangsangaben lt. §35a GmbHG: HRB 93818 B / Amtsgericht Berlin-Charlottenburg, Geschäftsführer: Peer Heinlein -- Sitz: Berlin

3 2

[Dovecot] Dovecot error wuth MySQL
by Cesar 16 Mar '13

16 Mar '13

Hello PeopleCan anybody help me?My scenario:- One computer with:a) postfix-2.6.6-2.2.el6_1.x86_64b) mysql-5.1.66-2.el6_3.x86_64c) dovecot-2.0.9-2.el6_1.1.x86_64d) dovecot-mysql-2.0.9-2.el6_1.1.x86_64Postfix and Dovecot auth over MySQLThe Problem:- logwatch show me: Dovecot disconnects: auth failed, 1 attempts: 1 Time(s) in IDLE: 2 Time(s) no auth attempts: 6 Time(s) no reason: 6 Time(s) **Unmatched Entries** dovecot: auth: Error: mysql: Query failed, retrying: MySQL server has gone away: 125 Time(s)(125 Times Wow)For example part of maillog show me:About MySQL auth failed:Mar 10 03:55:05 gateway dovecot: auth: Error: mysql: Query failed, retrying: MySQL server has gone awayMar 10 03:55:05 gateway dovecot: auth: mysql: Connected to localhost (mail)Mar 10 03:55:05 gateway dovecot: pop3-login: Login: user=user-name(a)domain.com>, method=PLAIN, rip=192.168.100.31, lip=190.128.232.2, mpid=16352Mar 10 03:55:05 gateway dovecot: pop3(user-name(a)domain.com): Disconnected: Logged out top=0/0, retr=0/0, del=0/0, size=0The Question:How to fix it? (i don't want to see the dovecot auth error mysql)I will be very grateful to anyone who can help me ----- Best Regards Cesar -- View this message in context: http://dovecot.2317879.n4.nabble.com/Dovecot-error-wuth-MySQL-tp40765.html Sent from the Dovecot mailing list archive at Nabble.com.

5 6

[Dovecot] Question regarding Postfix and Dovecot
by Daniel Reinhardt 16 Mar '13

16 Mar '13

All, Thank you for having this list, and I have a question regarding why postfix is not handing off delivery to Dovecot to virtual users. Here is all I can offer since I am not at my server: *Here is the debug information for my postfix setup:* [code] Mar 13 20:23:55 andromeda postfix/smtpd[15316]: name_mask: ipv4 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: inet_addr_local: configured 2 IPv4 addresses Mar 13 20:23:55 andromeda postfix/smtpd[15316]: process generation: 3 (3) Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_string: mynetworks ~? debug_peer_list Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_string: mynetworks ~? fast_flush_domains Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_string: mynetworks ~? mynetworks Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_string: relay_domains ~? debug_peer_list Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_string: relay_domains ~? fast_flush_domains Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_string: relay_domains ~? mynetworks Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_string: relay_domains ~? permit_mx_backup_networks Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_string: relay_domains ~? qmqpd_authorized_clients Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_string: relay_domains ~? smtpd_access_maps Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_list_match: relay_domains: no match Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_string: permit_mx_backup_networks ~? debug_peer_list Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_string: permit_mx_backup_networks ~? fast_flush_domains Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_string: permit_mx_backup_networks ~? mynetworks Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_string: permit_mx_backup_networks ~? permit_mx_backup_networks Mar 13 20:23:55 andromeda postfix/smtpd[15316]: connect to subsystem private/proxymap Mar 13 20:23:55 andromeda postfix/smtpd[15316]: send attr request = open Mar 13 20:23:55 andromeda postfix/smtpd[15316]: send attr table = unix:passwd.byname Mar 13 20:23:55 andromeda postfix/smtpd[15316]: send attr flags = 0 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: private/proxymap socket: wanted attribute: status Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute name: status Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute value: 0 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: private/proxymap socket: wanted attribute: flags Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute name: flags Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute value: 16 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: private/proxymap socket: wanted attribute: (list terminator) Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute name: (end) Mar 13 20:23:55 andromeda postfix/smtpd[15316]: dict_proxy_open: connect to map=unix:passwd.byname status=0 server_flags=fixed Mar 13 20:23:55 andromeda postfix/smtpd[15316]: dict_open: proxy:unix:passwd.byname Mar 13 20:23:55 andromeda postfix/smtpd[15316]: Compiled against Berkeley DB: 5.1.25? Mar 13 20:23:55 andromeda postfix/smtpd[15316]: Run-time linked against Berkeley DB: 5.1.25? Mar 13 20:23:55 andromeda postfix/smtpd[15316]: dict_open: hash:/etc/aliases Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_va_maps.cf: user = mail Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_va_maps.cf: password = hidden Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_va_maps.cf: dbname = mail Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_va_maps.cf: result_format = %s Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_int: /etc/postfix/ mysql_va_maps.cf: expansion_limit = 0 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_va_maps.cf: query = <NULL> Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_va_maps.cf: table = alias Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_va_maps.cf: select_field = goto Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_va_maps.cf: where_field = address Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_va_maps.cf: additional_conditions = and active = '1' Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_va_maps.cf: domain = Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_va_maps.cf: hosts = 127.0.0.1 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: dict_open: mysql:/etc/postfix/mysql_va_maps.cf Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_virtual_alias_domainaliases_maps.cf: user = mail Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_virtual_alias_domainaliases_maps.cf: password = hidden Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_virtual_alias_domainaliases_maps.cf: dbname = mail Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_virtual_alias_domainaliases_maps.cf: result_format = %s Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_int: /etc/postfix/ mysql_virtual_alias_domainaliases_maps.cf: expansion_limit = 0 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_virtual_alias_domainaliases_maps.cf: query = SELECT goto FROM alias,alias_domain WHERE alias_domain.alias_domain = '%d' AND alias.address=concat('%u', '@', alias_domain.target_domain) AND alias.active = 1 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_virtual_alias_domainaliases_maps.cf: domain = Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_virtual_alias_domainaliases_maps.cf: hosts = 127.0.0.1 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: dict_open: mysql:/etc/postfix/mysql_virtual_alias_domainaliases_maps.cf Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_vmb_maps.cf: user = mail Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_vmb_maps.cf: password = hidden Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_vmb_maps.cf: dbname = mail Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_vmb_maps.cf: result_format = %s Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_int: /etc/postfix/ mysql_vmb_maps.cf: expansion_limit = 0 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_vmb_maps.cf: query = <NULL> Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_vmb_maps.cf: table = mailbox Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_vmb_maps.cf: select_field = CONCAT(domain, '/', local_part) Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_vmb_maps.cf: where_field = username Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_vmb_maps.cf: additional_conditions = and active = '1' Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_vmb_maps.cf: domain = Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_vmb_maps.cf: hosts = 127.0.0.1 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: dict_open: mysql:/etc/postfix/mysql_vmb_maps.cf Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_virtual_mailbox_domainaliases_maps.cf: user = mail Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_virtual_mailbox_domainaliases_maps.cf: password = hidden Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_virtual_mailbox_domainaliases_maps.cf: dbname = mail Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_virtual_mailbox_domainaliases_maps.cf: result_format = %s Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_int: /etc/postfix/ mysql_virtual_mailbox_domainaliases_maps.cf: expansion_limit = 0 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_virtual_mailbox_domainaliases_maps.cf: query = SELECT maildir FROM mailbox, alias_domain \ WHERE alias_domain.alias_domain = '%d' \ AND mailbox.username=concat('%u', '@', alias_domain.target_domain ) \ AND mailbox.active = 1 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_virtual_mailbox_domainaliases_maps.cf: domain = Mar 13 20:23:55 andromeda postfix/smtpd[15316]: cfg_get_str: /etc/postfix/ mysql_virtual_mailbox_domainaliases_maps.cf: hosts = 127.0.0.1 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: dict_open: mysql:/etc/postfix/mysql_virtual_mailbox_domainaliases_maps.cf Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_string: smtpd_access_maps ~? debug_peer_list Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_string: smtpd_access_maps ~? fast_flush_domains Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_string: smtpd_access_maps ~? mynetworks Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_string: smtpd_access_maps ~? permit_mx_backup_networks Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_string: smtpd_access_maps ~? qmqpd_authorized_clients Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_string: smtpd_access_maps ~? smtpd_access_maps Mar 13 20:23:55 andromeda postfix/smtpd[15316]: unknown_helo_hostname_tempfail_action = defer_if_permit Mar 13 20:23:55 andromeda postfix/smtpd[15316]: unknown_address_tempfail_action = defer_if_permit Mar 13 20:23:55 andromeda postfix/smtpd[15316]: unverified_recipient_tempfail_action = defer_if_permit Mar 13 20:23:55 andromeda postfix/smtpd[15316]: unverified_sender_tempfail_action = defer_if_permit Mar 13 20:23:55 andromeda postfix/smtpd[15316]: name_mask: 0 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: auto_clnt_create: transport=local endpoint=private/tlsmgr Mar 13 20:23:55 andromeda postfix/smtpd[15316]: auto_clnt_open: connected to private/tlsmgr Mar 13 20:23:55 andromeda postfix/smtpd[15316]: send attr request = seed Mar 13 20:23:55 andromeda postfix/smtpd[15316]: send attr size = 32 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: private/tlsmgr: wanted attribute: status Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute name: status Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute value: 0 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: private/tlsmgr: wanted attribute: seed Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute name: seed Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute value: AHVrzbFVvc2OBJm0YrMwfr0jnTbg7Iomx767MU6gr+4= Mar 13 20:23:55 andromeda postfix/smtpd[15316]: private/tlsmgr: wanted attribute: (list terminator) Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute name: (end) Mar 13 20:23:55 andromeda postfix/smtpd[15316]: send attr request = policy Mar 13 20:23:55 andromeda postfix/smtpd[15316]: send attr cache_type = smtpd Mar 13 20:23:55 andromeda postfix/smtpd[15316]: private/tlsmgr: wanted attribute: status Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute name: status Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute value: 0 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: private/tlsmgr: wanted attribute: cachable Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute name: cachable Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute value: 1 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: private/tlsmgr: wanted attribute: (list terminator) Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute name: (end) Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_string: fast_flush_domains ~? debug_peer_list Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_string: fast_flush_domains ~? fast_flush_domains Mar 13 20:23:55 andromeda postfix/smtpd[15316]: auto_clnt_create: transport=local endpoint=private/anvil Mar 13 20:23:55 andromeda postfix/smtpd[15316]: connection established Mar 13 20:23:55 andromeda postfix/smtpd[15316]: master_notify: status 0 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: name_mask: resource Mar 13 20:23:55 andromeda postfix/smtpd[15316]: name_mask: software Mar 13 20:23:55 andromeda postfix/smtpd[15316]: connect from mail-ve0-f174.google.com[209.85.128.174] Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_list_match: mail-ve0-f174.google.com: no match Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_list_match: 209.85.128.174: no match Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_list_match: mail-ve0-f174.google.com: no match Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_list_match: 209.85.128.174: no match Mar 13 20:23:55 andromeda postfix/smtpd[15316]: smtp_stream_setup: maxtime=300 enable_deadline=0 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_hostname: mail-ve0-f174.google.com ~? 127.0.0.0/8 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_hostaddr: 209.85.128.174 ~? 127.0.0.0/8 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_list_match: mail-ve0-f174.google.com: no match Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_list_match: 209.85.128.174: no match Mar 13 20:23:55 andromeda postfix/smtpd[15316]: auto_clnt_open: connected to private/anvil Mar 13 20:23:55 andromeda postfix/smtpd[15316]: send attr request = connect Mar 13 20:23:55 andromeda postfix/smtpd[15316]: send attr ident = smtp:209.85.128.174 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: private/anvil: wanted attribute: status Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute name: status Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute value: 0 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: private/anvil: wanted attribute: count Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute name: count Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute value: 1 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: private/anvil: wanted attribute: rate Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute name: rate Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute value: 1 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: private/anvil: wanted attribute: (list terminator) Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute name: (end) Mar 13 20:23:55 andromeda postfix/smtpd[15316]: report connect to all milters Mar 13 20:23:55 andromeda postfix/smtpd[15316]: milter_macro_lookup: "j" Mar 13 20:23:55 andromeda postfix/smtpd[15316]: milter_macro_lookup: result "andromeda.home" Mar 13 20:23:55 andromeda postfix/smtpd[15316]: milter_macro_lookup: "{daemon_name}" Mar 13 20:23:55 andromeda postfix/smtpd[15316]: milter_macro_lookup: result "andromeda.home" Mar 13 20:23:55 andromeda postfix/smtpd[15316]: milter_macro_lookup: "v" Mar 13 20:23:55 andromeda postfix/smtpd[15316]: milter_macro_lookup: result "Postfix 2.9.6" Mar 13 20:23:55 andromeda postfix/smtpd[15316]: milter8_connect: non-protocol events for protocol version 6: Mar 13 20:23:55 andromeda postfix/smtpd[15316]: milter8_connect: transport=inet endpoint=127.0.0.1:8891 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: trying... [127.0.0.1] Mar 13 20:23:55 andromeda postfix/smtpd[15316]: vstream_tweak_tcp: TCP_MAXSEG 16384 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: milter8_connect: my_version=0x6 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: milter8_connect: my_actions=0x1ff SMFIF_ADDHDRS SMFIF_CHGBODY SMFIF_ADDRCPT SMFIF_DELRCPT SMFIF_CHGHDRS SMFIF_QUARANTINE SMFIF_CHGFROM SMFIF_ADDRCPT_PAR SMFIF_SETSYMLIST Mar 13 20:23:55 andromeda postfix/smtpd[15316]: milter8_connect: my_events=0x1fffff SMFIP_NOCONNECT SMFIP_NOHELO SMFIP_NOMAIL SMFIP_NORCPT SMFIP_NOBODY SMFIP_NOHDRS SMFIP_NOEOH SMFIP_NR_HDR SMFIP_NOUNKNOWN SMFIP_NODATA SMFIP_SKIP SMFIP_RCPT_REJ SMFIP_NR_CONN SMFIP_NR_HELO SMFIP_NR_MAIL SMFIP_NR_RCPT SMFIP_NR_DATA SMFIP_NR_UNKN SMFIP_NR_EOH SMFIP_NR_BODY SMFIP_HDR_LEADSPC Mar 13 20:23:55 andromeda postfix/smtpd[15316]: milter8_connect: milter inet:127.0.0.1:8891 version 6 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: milter8_connect: events SMFIP_NOHELO SMFIP_NOUNKNOWN SMFIP_NODATA SMFIP_SKIP SMFIP_HDR_LEADSPC Mar 13 20:23:55 andromeda postfix/smtpd[15316]: milter8_connect: requests SMFIF_ADDHDRS SMFIF_CHGHDRS SMFIF_SETSYMLIST Mar 13 20:23:55 andromeda postfix/smtpd[15316]: milter8_conn_event: milter inet:127.0.0.1:8891: connect mail-ve0-f174.google.com/209.85.128.174 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: event: SMFIC_CONNECT; macros: j=andromeda.home {daemon_name}=andromeda.home v=Postfix 2.9.6 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: reply: SMFIR_CONTINUE data 0 bytes Mar 13 20:23:55 andromeda postfix/smtpd[15316]: > mail-ve0-f174.google.com[209.85.128.174]: 220 andromeda.home ESMTP Postfix (Ubuntu) Mar 13 20:23:55 andromeda postfix/smtpd[15316]: < mail-ve0-f174.google.com[209.85.128.174]: EHLO mail-ve0-f174.google.com Mar 13 20:23:55 andromeda postfix/smtpd[15316]: report helo to all milters Mar 13 20:23:55 andromeda postfix/smtpd[15316]: milter_macro_lookup: "{tls_version}" Mar 13 20:23:55 andromeda postfix/smtpd[15316]: milter_macro_lookup: "{cipher}" Mar 13 20:23:55 andromeda postfix/smtpd[15316]: milter_macro_lookup: "{cipher_bits}" Mar 13 20:23:55 andromeda postfix/smtpd[15316]: milter_macro_lookup: "{cert_subject}" Mar 13 20:23:55 andromeda postfix/smtpd[15316]: milter_macro_lookup: "{cert_issuer}" Mar 13 20:23:55 andromeda postfix/smtpd[15316]: milter8_helo_event: milter inet:127.0.0.1:8891: helo mail-ve0-f174.google.com Mar 13 20:23:55 andromeda postfix/smtpd[15316]: event: SMFIC_HELO; macros: (none) Mar 13 20:23:55 andromeda postfix/smtpd[15316]: skipping event SMFIC_HELO for milter inet:127.0.0.1:8891 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_list_match: mail-ve0-f174.google.com: no match Mar 13 20:23:55 andromeda postfix/smtpd[15316]: match_list_match: 209.85.128.174: no match Mar 13 20:23:55 andromeda postfix/smtpd[15316]: > mail-ve0-f174.google.com[209.85.128.174]: 250-andromeda.home Mar 13 20:23:55 andromeda postfix/smtpd[15316]: > mail-ve0-f174.google.com[209.85.128.174]: 250-PIPELINING Mar 13 20:23:55 andromeda postfix/smtpd[15316]: > mail-ve0-f174.google.com[209.85.128.174]: 250-SIZE 10240000 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: > mail-ve0-f174.google.com[209.85.128.174]: 250-VRFY Mar 13 20:23:55 andromeda postfix/smtpd[15316]: > mail-ve0-f174.google.com[209.85.128.174]: 250-ETRN Mar 13 20:23:55 andromeda postfix/smtpd[15316]: > mail-ve0-f174.google.com[209.85.128.174]: 250-STARTTLS Mar 13 20:23:55 andromeda postfix/smtpd[15316]: > mail-ve0-f174.google.com[209.85.128.174]: 250-ENHANCEDSTATUSCODES Mar 13 20:23:55 andromeda postfix/smtpd[15316]: > mail-ve0-f174.google.com[209.85.128.174]: 250-8BITMIME Mar 13 20:23:55 andromeda postfix/smtpd[15316]: > mail-ve0-f174.google.com[209.85.128.174]: 250 DSN Mar 13 20:23:55 andromeda postfix/smtpd[15316]: < mail-ve0-f174.google.com[209.85.128.174]: STARTTLS Mar 13 20:23:55 andromeda postfix/smtpd[15316]: query milter states for other event Mar 13 20:23:55 andromeda postfix/smtpd[15316]: milter8_other_event: milter inet:127.0.0.1:8891 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: > mail-ve0-f174.google.com[209.85.128.174]: 220 2.0.0 Ready to start TLS Mar 13 20:23:55 andromeda postfix/smtpd[15316]: abort all milters Mar 13 20:23:55 andromeda postfix/smtpd[15316]: milter8_abort: abort milter inet:127.0.0.1:8891 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: send attr request = seed Mar 13 20:23:55 andromeda postfix/smtpd[15316]: send attr size = 32 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: private/tlsmgr: wanted attribute: status Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute name: status Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute value: 0 Mar 13 20:23:55 andromeda postfix/smtpd[15316]: private/tlsmgr: wanted attribute: seed Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute name: seed Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute value: Yq65+voc3LQNVdBh7hwpJK7T0kNDyGKblUpQTyAY8oA= Mar 13 20:23:55 andromeda postfix/smtpd[15316]: private/tlsmgr: wanted attribute: (list terminator) Mar 13 20:23:55 andromeda postfix/smtpd[15316]: input attribute name: (end) Mar 13 20:23:55 andromeda postfix/cleanup[15325]: D43E610006A: message-id=< CADUOTo1h8zkNH-Pi-xpZ03Ko+n1_GqbhEdW23MN-npSYVyjYPA(a)mail.gmail.com> Mar 13 20:23:55 andromeda opendkim[28129]: D43E610006A: mail-ve0-f174.google.com [209.85.128.174] not internal Mar 13 20:23:55 andromeda opendkim[28129]: D43E610006A: not authenticated Mar 13 20:23:55 andromeda opendkim[28129]: D43E610006A: no signing domain match for 'gmail.com' Mar 13 20:23:55 andromeda opendkim[28129]: D43E610006A: no signing subdomain match for 'gmail.com' Mar 13 20:23:55 andromeda postfix/qmgr[15301]: D43E610006A: from=< cryptodan(a)gmail.com>, size=6398, nrcpt=1 (queue active) Mar 13 20:23:55 andromeda postfix/local[15327]: D43E610006A: to=< cryptodan(a)cryptodan.net>, relay=local, delay=0.16, delays=0.15/0.01/0/0, dsn=2.0.0, status=sent (delivered to maildir) Mar 13 20:23:55 andromeda postfix/qmgr[15301]: D43E610006A: removed Mar 13 20:24:01 andromeda postfix/smtpd[15316]: proxymap stream disconnect Mar 13 20:24:01 andromeda postfix/smtpd[15316]: auto_clnt_close: disconnect private/tlsmgr stream Mar 13 20:24:01 andromeda postfix/smtpd[15316]: rewrite stream disconnect Mar 13 20:25:35 andromeda postfix/smtpd[15316]: idle timeout -- exiting Mar 13 20:27:12 andromeda dovecot: auth-worker: mysql(localhost): Connected to database mail Mar 13 20:27:12 andromeda dovecot: pop3-login: Login: user=< cryptodan(a)cryptodan.net>, method=PLAIN, rip=96.244.76.114, lip=192.168.1.8, mpid=15341, TLS Mar 13 20:27:12 andromeda dovecot: pop3(cryptodan(a)cryptodan.net): Disconnected: Logged out top=0/0, retr=0/0, del=0/0, size=0 Mar 13 20:27:15 andromeda postfix/anvil[15319]: statistics: max connection rate 1/60s for (smtp:209.85.128.174) at Mar 14 00:23:55 Mar 13 20:27:15 andromeda postfix/anvil[15319]: statistics: max connection count 1 for (smtp:209.85.128.174) at Mar 14 00:23:55 Mar 13 20:27:15 andromeda postfix/anvil[15319]: statistics: max cache size 1 at Mar 14 00:23:55 [/code] *Here is the output of postconf -d:* [code] root@andromeda:/etc/postfix# postconf -d 2bounce_notice_recipient = postmaster access_map_defer_code = 450 access_map_reject_code = 554 address_verify_cache_cleanup_interval = 12h address_verify_default_transport = $default_transport address_verify_local_transport = $local_transport address_verify_map = btree:$data_directory/verify_cache address_verify_negative_cache = yes address_verify_negative_expire_time = 3d address_verify_negative_refresh_time = 3h address_verify_poll_count = ${stress?1}${stress:3} address_verify_poll_delay = 3s address_verify_positive_expire_time = 31d address_verify_positive_refresh_time = 7d address_verify_relay_transport = $relay_transport address_verify_relayhost = $relayhost address_verify_sender = $double_bounce_sender address_verify_sender_dependent_default_transport_maps = $sender_dependent_default_transport_maps address_verify_sender_dependent_relayhost_maps = $sender_dependent_relayhost_maps address_verify_sender_ttl = 0s address_verify_service_name = verify address_verify_transport_maps = $transport_maps address_verify_virtual_transport = $virtual_transport alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases, nis:mail.aliases allow_mail_to_commands = alias, forward allow_mail_to_files = alias, forward allow_min_user = no allow_percent_hack = yes allow_untrusted_routing = no alternate_config_directories = always_add_missing_headers = no always_bcc = anvil_rate_time_unit = 60s anvil_status_update_time = 600s append_at_myorigin = yes append_dot_mydomain = yes application_event_drain_time = 100s authorized_flush_users = static:anyone authorized_mailq_users = static:anyone authorized_submit_users = static:anyone backwards_bounce_logfile_compatibility = yes berkeley_db_create_buffer_size = 16777216 berkeley_db_read_buffer_size = 131072 best_mx_transport = biff = yes body_checks = body_checks_size_limit = 51200 bounce_notice_recipient = postmaster bounce_queue_lifetime = 5d bounce_service_name = bounce bounce_size_limit = 50000 bounce_template_file = broken_sasl_auth_clients = no bsmtp_delivery_slot_cost = $default_delivery_slot_cost bsmtp_delivery_slot_discount = $default_delivery_slot_discount bsmtp_delivery_slot_loan = $default_delivery_slot_loan bsmtp_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit bsmtp_destination_concurrency_limit = $default_destination_concurrency_limit bsmtp_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback bsmtp_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback bsmtp_destination_rate_delay = $default_destination_rate_delay bsmtp_destination_recipient_limit = $default_destination_recipient_limit bsmtp_extra_recipient_limit = $default_extra_recipient_limit bsmtp_initial_destination_concurrency = $initial_destination_concurrency bsmtp_minimum_delivery_slots = $default_minimum_delivery_slots bsmtp_recipient_limit = $default_recipient_limit bsmtp_recipient_refill_delay = $default_recipient_refill_delay bsmtp_recipient_refill_limit = $default_recipient_refill_limit bsmtp_time_limit = $command_time_limit canonical_classes = envelope_sender, envelope_recipient, header_sender, header_recipient canonical_maps = cleanup_service_name = cleanup command_directory = /usr/sbin command_execution_directory = command_expansion_filter = 1234567890!@%-_=+:,./abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ command_time_limit = 1000s config_directory = /etc/postfix connection_cache_protocol_timeout = 5s connection_cache_service_name = scache connection_cache_status_update_time = 600s connection_cache_ttl_limit = 2s content_filter = cyrus_sasl_config_path = daemon_directory = /usr/lib/postfix daemon_table_open_error_is_fatal = no daemon_timeout = 18000s data_directory = /var/lib/postfix debug_peer_level = 2 debug_peer_list = debugger_command = default_database_type = hash default_delivery_slot_cost = 5 default_delivery_slot_discount = 50 default_delivery_slot_loan = 3 default_destination_concurrency_failed_cohort_limit = 1 default_destination_concurrency_limit = 20 default_destination_concurrency_negative_feedback = 1 default_destination_concurrency_positive_feedback = 1 default_destination_rate_delay = 0s default_destination_recipient_limit = 50 default_extra_recipient_limit = 1000 default_filter_nexthop = default_minimum_delivery_slots = 3 default_privs = nobody default_process_limit = 100 default_rbl_reply = $rbl_code Service unavailable; $rbl_class [$rbl_what] blocked using $rbl_domain${rbl_reason?; $rbl_reason} default_recipient_limit = 20000 default_recipient_refill_delay = 5s default_recipient_refill_limit = 100 default_transport = smtp default_verp_delimiters = += defer_code = 450 defer_service_name = defer defer_transports = delay_logging_resolution_limit = 2 delay_notice_recipient = postmaster delay_warning_time = 0h deliver_lock_attempts = 20 deliver_lock_delay = 1s destination_concurrency_feedback_debug = no detect_8bit_encoding_header = yes disable_dns_lookups = no disable_mime_input_processing = no disable_mime_output_conversion = no disable_verp_bounces = no disable_vrfy_command = no dnsblog_reply_delay = 0s dnsblog_service_name = dnsblog dont_remove = 0 double_bounce_sender = double-bounce dovecot_delivery_slot_cost = $default_delivery_slot_cost dovecot_delivery_slot_discount = $default_delivery_slot_discount dovecot_delivery_slot_loan = $default_delivery_slot_loan dovecot_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit dovecot_destination_concurrency_limit = $default_destination_concurrency_limit dovecot_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback dovecot_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback dovecot_destination_rate_delay = $default_destination_rate_delay dovecot_destination_recipient_limit = $default_destination_recipient_limit dovecot_extra_recipient_limit = $default_extra_recipient_limit dovecot_initial_destination_concurrency = $initial_destination_concurrency dovecot_minimum_delivery_slots = $default_minimum_delivery_slots dovecot_recipient_limit = $default_recipient_limit dovecot_recipient_refill_delay = $default_recipient_refill_delay dovecot_recipient_refill_limit = $default_recipient_refill_limit dovecot_time_limit = $command_time_limit duplicate_filter_limit = 1000 empty_address_default_transport_maps_lookup_key = <> empty_address_recipient = MAILER-DAEMON empty_address_relayhost_maps_lookup_key = <> enable_long_queue_ids = no enable_original_recipient = yes error_delivery_slot_cost = $default_delivery_slot_cost error_delivery_slot_discount = $default_delivery_slot_discount error_delivery_slot_loan = $default_delivery_slot_loan error_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit error_destination_concurrency_limit = $default_destination_concurrency_limit error_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback error_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback error_destination_rate_delay = $default_destination_rate_delay error_destination_recipient_limit = $default_destination_recipient_limit error_extra_recipient_limit = $default_extra_recipient_limit error_initial_destination_concurrency = $initial_destination_concurrency error_minimum_delivery_slots = $default_minimum_delivery_slots error_notice_recipient = postmaster error_recipient_limit = $default_recipient_limit error_recipient_refill_delay = $default_recipient_refill_delay error_recipient_refill_limit = $default_recipient_refill_limit error_service_name = error execution_directory_expansion_filter = 1234567890!@%-_=+:,./abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ expand_owner_alias = no export_environment = TZ MAIL_CONFIG LANG fallback_transport = fallback_transport_maps = fast_flush_domains = $relay_domains fast_flush_purge_time = 7d fast_flush_refresh_time = 12h fault_injection_code = 0 flush_service_name = flush fork_attempts = 5 fork_delay = 1s forward_expansion_filter = 1234567890!@%-_=+:,./abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ forward_path = $home/.forward${recipient_delimiter}${extension}, $home/.forward frozen_delivered_to = yes hash_queue_depth = 1 hash_queue_names = deferred, defer header_address_token_limit = 10240 header_checks = header_size_limit = 102400 helpful_warnings = yes home_mailbox = hopcount_limit = 50 html_directory = no ifmail_delivery_slot_cost = $default_delivery_slot_cost ifmail_delivery_slot_discount = $default_delivery_slot_discount ifmail_delivery_slot_loan = $default_delivery_slot_loan ifmail_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit ifmail_destination_concurrency_limit = $default_destination_concurrency_limit ifmail_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback ifmail_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback ifmail_destination_rate_delay = $default_destination_rate_delay ifmail_destination_recipient_limit = $default_destination_recipient_limit ifmail_extra_recipient_limit = $default_extra_recipient_limit ifmail_initial_destination_concurrency = $initial_destination_concurrency ifmail_minimum_delivery_slots = $default_minimum_delivery_slots ifmail_recipient_limit = $default_recipient_limit ifmail_recipient_refill_delay = $default_recipient_refill_delay ifmail_recipient_refill_limit = $default_recipient_refill_limit ifmail_time_limit = $command_time_limit ignore_mx_lookup_error = no import_environment = MAIL_CONFIG MAIL_DEBUG MAIL_LOGTAG TZ XAUTHORITY DISPLAY LANG=C in_flow_delay = 1s inet_interfaces = all inet_protocols = all initial_destination_concurrency = 5 internal_mail_filter_classes = invalid_hostname_reject_code = 501 ipc_idle = 5s ipc_timeout = 3600s ipc_ttl = 1000s line_length_limit = 2048 lmtp_address_preference = any lmtp_assume_final = no lmtp_bind_address = lmtp_bind_address6 = lmtp_body_checks = lmtp_cname_overrides_servername = no lmtp_connect_timeout = 0s lmtp_connection_cache_destinations = lmtp_connection_cache_on_demand = yes lmtp_connection_cache_time_limit = 2s lmtp_connection_reuse_time_limit = 300s lmtp_data_done_timeout = 600s lmtp_data_init_timeout = 120s lmtp_data_xfer_timeout = 180s lmtp_defer_if_no_mx_address_found = no lmtp_delivery_slot_cost = $default_delivery_slot_cost lmtp_delivery_slot_discount = $default_delivery_slot_discount lmtp_delivery_slot_loan = $default_delivery_slot_loan lmtp_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit lmtp_destination_concurrency_limit = $default_destination_concurrency_limit lmtp_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback lmtp_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback lmtp_destination_rate_delay = $default_destination_rate_delay lmtp_destination_recipient_limit = $default_destination_recipient_limit lmtp_discard_lhlo_keyword_address_maps = lmtp_discard_lhlo_keywords = lmtp_dns_resolver_options = lmtp_enforce_tls = no lmtp_extra_recipient_limit = $default_extra_recipient_limit lmtp_generic_maps = lmtp_header_checks = lmtp_host_lookup = dns lmtp_initial_destination_concurrency = $initial_destination_concurrency lmtp_lhlo_name = $myhostname lmtp_lhlo_timeout = 300s lmtp_line_length_limit = 998 lmtp_mail_timeout = 300s lmtp_mime_header_checks = lmtp_minimum_delivery_slots = $default_minimum_delivery_slots lmtp_mx_address_limit = 5 lmtp_mx_session_limit = 2 lmtp_nested_header_checks = lmtp_per_record_deadline = no lmtp_pix_workaround_delay_time = 10s lmtp_pix_workaround_maps = lmtp_pix_workaround_threshold_time = 500s lmtp_pix_workarounds = disable_esmtp,delay_dotcrlf lmtp_quit_timeout = 300s lmtp_quote_rfc821_envelope = yes lmtp_randomize_addresses = yes lmtp_rcpt_timeout = 300s lmtp_recipient_limit = $default_recipient_limit lmtp_recipient_refill_delay = $default_recipient_refill_delay lmtp_recipient_refill_limit = $default_recipient_refill_limit lmtp_reply_filter = lmtp_rset_timeout = 20s lmtp_sasl_auth_cache_name = lmtp_sasl_auth_cache_time = 90d lmtp_sasl_auth_enable = no lmtp_sasl_auth_soft_bounce = yes lmtp_sasl_mechanism_filter = lmtp_sasl_password_maps = lmtp_sasl_path = lmtp_sasl_security_options = noplaintext, noanonymous lmtp_sasl_tls_security_options = $lmtp_sasl_security_options lmtp_sasl_tls_verified_security_options = $lmtp_sasl_tls_security_options lmtp_sasl_type = cyrus lmtp_send_dummy_mail_auth = no lmtp_send_xforward_command = no lmtp_sender_dependent_authentication = no lmtp_skip_5xx_greeting = yes lmtp_skip_quit_response = no lmtp_starttls_timeout = 300s lmtp_tcp_port = 24 lmtp_tls_CAfile = lmtp_tls_CApath = lmtp_tls_block_early_mail_reply = no lmtp_tls_cert_file = lmtp_tls_ciphers = export lmtp_tls_dcert_file = lmtp_tls_dkey_file = $lmtp_tls_dcert_file lmtp_tls_eccert_file = lmtp_tls_eckey_file = $lmtp_tls_eccert_file lmtp_tls_enforce_peername = yes lmtp_tls_exclude_ciphers = lmtp_tls_fingerprint_cert_match = lmtp_tls_fingerprint_digest = md5 lmtp_tls_key_file = $lmtp_tls_cert_file lmtp_tls_loglevel = 0 lmtp_tls_mandatory_ciphers = medium lmtp_tls_mandatory_exclude_ciphers = lmtp_tls_mandatory_protocols = !SSLv2 lmtp_tls_note_starttls_offer = no lmtp_tls_per_site = lmtp_tls_policy_maps = lmtp_tls_protocols = !SSLv2 lmtp_tls_scert_verifydepth = 9 lmtp_tls_secure_cert_match = nexthop lmtp_tls_security_level = lmtp_tls_session_cache_database = lmtp_tls_session_cache_timeout = 3600s lmtp_tls_verify_cert_match = hostname lmtp_use_tls = no lmtp_xforward_timeout = 300s local_command_shell = local_delivery_slot_cost = $default_delivery_slot_cost local_delivery_slot_discount = $default_delivery_slot_discount local_delivery_slot_loan = $default_delivery_slot_loan local_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit local_destination_concurrency_limit = 2 local_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback local_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback local_destination_rate_delay = $default_destination_rate_delay local_destination_recipient_limit = 1 local_extra_recipient_limit = $default_extra_recipient_limit local_header_rewrite_clients = permit_inet_interfaces local_initial_destination_concurrency = $initial_destination_concurrency local_minimum_delivery_slots = $default_minimum_delivery_slots local_recipient_limit = $default_recipient_limit local_recipient_maps = proxy:unix:passwd.byname $alias_maps local_recipient_refill_delay = $default_recipient_refill_delay local_recipient_refill_limit = $default_recipient_refill_limit local_transport = local:$myhostname luser_relay = mail_name = Postfix mail_owner = postfix mail_release_date = 20130203 mail_spool_directory = /var/mail mail_version = 2.9.6 mailbox_command = mailbox_command_maps = mailbox_delivery_lock = fcntl, dotlock mailbox_size_limit = 51200000 mailbox_transport = mailbox_transport_maps = maildrop_delivery_slot_cost = $default_delivery_slot_cost maildrop_delivery_slot_discount = $default_delivery_slot_discount maildrop_delivery_slot_loan = $default_delivery_slot_loan maildrop_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit maildrop_destination_concurrency_limit = $default_destination_concurrency_limit maildrop_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback maildrop_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback maildrop_destination_rate_delay = $default_destination_rate_delay maildrop_destination_recipient_limit = $default_destination_recipient_limit maildrop_extra_recipient_limit = $default_extra_recipient_limit maildrop_initial_destination_concurrency = $initial_destination_concurrency maildrop_minimum_delivery_slots = $default_minimum_delivery_slots maildrop_recipient_limit = $default_recipient_limit maildrop_recipient_refill_delay = $default_recipient_refill_delay maildrop_recipient_refill_limit = $default_recipient_refill_limit maildrop_time_limit = $command_time_limit mailman_delivery_slot_cost = $default_delivery_slot_cost mailman_delivery_slot_discount = $default_delivery_slot_discount mailman_delivery_slot_loan = $default_delivery_slot_loan mailman_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit mailman_destination_concurrency_limit = $default_destination_concurrency_limit mailman_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback mailman_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback mailman_destination_rate_delay = $default_destination_rate_delay mailman_destination_recipient_limit = $default_destination_recipient_limit mailman_extra_recipient_limit = $default_extra_recipient_limit mailman_initial_destination_concurrency = $initial_destination_concurrency mailman_minimum_delivery_slots = $default_minimum_delivery_slots mailman_recipient_limit = $default_recipient_limit mailman_recipient_refill_delay = $default_recipient_refill_delay mailman_recipient_refill_limit = $default_recipient_refill_limit mailman_time_limit = $command_time_limit mailq_path = /usr/bin/mailq manpage_directory = /usr/share/man maps_rbl_domains = maps_rbl_reject_code = 554 masquerade_classes = envelope_sender, header_sender, header_recipient masquerade_domains = masquerade_exceptions = master_service_disable = max_idle = 100s max_use = 100 maximal_backoff_time = 4000s maximal_queue_lifetime = 5d message_reject_characters = message_size_limit = 10240000 message_strip_characters = milter_command_timeout = 30s milter_connect_macros = j {daemon_name} v milter_connect_timeout = 30s milter_content_timeout = 300s milter_data_macros = i milter_default_action = tempfail milter_end_of_data_macros = i milter_end_of_header_macros = i milter_header_checks = milter_helo_macros = {tls_version} {cipher} {cipher_bits} {cert_subject} {cert_issuer} milter_macro_daemon_name = $myhostname milter_macro_v = $mail_name $mail_version milter_mail_macros = i {auth_type} {auth_authen} {auth_author} {mail_addr} {mail_host} {mail_mailer} milter_protocol = 6 milter_rcpt_macros = i {rcpt_addr} {rcpt_host} {rcpt_mailer} milter_unknown_command_macros = mime_boundary_length_limit = 2048 mime_header_checks = $header_checks mime_nesting_limit = 100 minimal_backoff_time = 300s multi_instance_directories = multi_instance_enable = no multi_instance_group = multi_instance_name = multi_instance_wrapper = multi_recipient_bounce_reject_code = 550 mydestination = $myhostname, localhost.$mydomain, localhost mydomain = localdomain myhostname = andromeda.home mynetworks = 127.0.0.0/8 192.168.1.0/24 mynetworks_style = subnet myorigin = $myhostname nested_header_checks = $header_checks newaliases_path = /usr/bin/newaliases non_fqdn_reject_code = 504 non_smtpd_milters = notify_classes = resource, software owner_request_special = yes parent_domain_matches_subdomains = debug_peer_list,fast_flush_domains,mynetworks,permit_mx_backup_networks,qmqpd_authorized_clients,smtpd_access_maps permit_mx_backup_networks = pickup_service_name = pickup plaintext_reject_code = 450 postmulti_control_commands = reload flush postmulti_start_commands = start postmulti_stop_commands = stop abort drain quick-stop postscreen_access_list = permit_mynetworks postscreen_bare_newline_action = ignore postscreen_bare_newline_enable = no postscreen_bare_newline_ttl = 30d postscreen_blacklist_action = ignore postscreen_cache_cleanup_interval = 12h postscreen_cache_map = btree:$data_directory/postscreen_cache postscreen_cache_retention_time = 7d postscreen_client_connection_count_limit = $smtpd_client_connection_count_limit postscreen_command_count_limit = 20 postscreen_command_filter = postscreen_command_time_limit = ${stress?10}${stress:300}s postscreen_disable_vrfy_command = $disable_vrfy_command postscreen_discard_ehlo_keyword_address_maps = $smtpd_discard_ehlo_keyword_address_maps postscreen_discard_ehlo_keywords = $smtpd_discard_ehlo_keywords postscreen_dnsbl_action = ignore postscreen_dnsbl_reply_map = postscreen_dnsbl_sites = postscreen_dnsbl_threshold = 1 postscreen_dnsbl_ttl = 1h postscreen_enforce_tls = $smtpd_enforce_tls postscreen_expansion_filter = $smtpd_expansion_filter postscreen_forbidden_commands = $smtpd_forbidden_commands postscreen_greet_action = ignore postscreen_greet_banner = $smtpd_banner postscreen_greet_ttl = 1d postscreen_greet_wait = ${stress?2}${stress:6}s postscreen_helo_required = $smtpd_helo_required postscreen_non_smtp_command_action = drop postscreen_non_smtp_command_enable = no postscreen_non_smtp_command_ttl = 30d postscreen_pipelining_action = enforce postscreen_pipelining_enable = no postscreen_pipelining_ttl = 30d postscreen_post_queue_limit = $default_process_limit postscreen_pre_queue_limit = $default_process_limit postscreen_reject_footer = $smtpd_reject_footer postscreen_tls_security_level = $smtpd_tls_security_level postscreen_use_tls = $smtpd_use_tls postscreen_watchdog_timeout = 10s postscreen_whitelist_interfaces = static:all prepend_delivered_header = command, file, forward process_id_directory = pid propagate_unmatched_extensions = canonical, virtual proxy_interfaces = proxy_read_maps = $local_recipient_maps $mydestination $virtual_alias_maps $virtual_alias_domains $virtual_mailbox_maps $virtual_mailbox_domains $relay_recipient_maps $relay_domains $canonical_maps $sender_canonical_maps $recipient_canonical_maps $relocated_maps $transport_maps $mynetworks $sender_bcc_maps $recipient_bcc_maps $smtp_generic_maps $lmtp_generic_maps $alias_maps proxy_write_maps = $smtp_sasl_auth_cache_name $lmtp_sasl_auth_cache_name $address_verify_map $postscreen_cache_map proxymap_service_name = proxymap proxywrite_service_name = proxywrite qmgr_clog_warn_time = 300s qmgr_daemon_timeout = 1000s qmgr_fudge_factor = 100 qmgr_ipc_timeout = 60s qmgr_message_active_limit = 20000 qmgr_message_recipient_limit = 20000 qmgr_message_recipient_minimum = 10 qmqpd_authorized_clients = qmqpd_client_port_logging = no qmqpd_error_delay = 1s qmqpd_timeout = 300s queue_directory = /var/spool/postfix queue_file_attribute_count_limit = 100 queue_minfree = 0 queue_run_delay = 300s queue_service_name = qmgr rbl_reply_maps = readme_directory = /usr/share/doc/postfix receive_override_options = recipient_bcc_maps = recipient_canonical_classes = envelope_recipient, header_recipient recipient_canonical_maps = recipient_delimiter = reject_code = 554 reject_tempfail_action = defer_if_permit relay_clientcerts = relay_delivery_slot_cost = $default_delivery_slot_cost relay_delivery_slot_discount = $default_delivery_slot_discount relay_delivery_slot_loan = $default_delivery_slot_loan relay_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit relay_destination_concurrency_limit = $default_destination_concurrency_limit relay_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback relay_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback relay_destination_rate_delay = $default_destination_rate_delay relay_destination_recipient_limit = $default_destination_recipient_limit relay_domains = $mydestination relay_domains_reject_code = 554 relay_extra_recipient_limit = $default_extra_recipient_limit relay_initial_destination_concurrency = $initial_destination_concurrency relay_minimum_delivery_slots = $default_minimum_delivery_slots relay_recipient_limit = $default_recipient_limit relay_recipient_maps = relay_recipient_refill_delay = $default_recipient_refill_delay relay_recipient_refill_limit = $default_recipient_refill_limit relay_transport = relay relayhost = relocated_maps = remote_header_rewrite_domain = require_home_directory = no reset_owner_alias = no resolve_dequoted_address = yes resolve_null_domain = no resolve_numeric_domain = no retry_delivery_slot_cost = $default_delivery_slot_cost retry_delivery_slot_discount = $default_delivery_slot_discount retry_delivery_slot_loan = $default_delivery_slot_loan retry_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit retry_destination_concurrency_limit = $default_destination_concurrency_limit retry_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback retry_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback retry_destination_rate_delay = $default_destination_rate_delay retry_destination_recipient_limit = $default_destination_recipient_limit retry_extra_recipient_limit = $default_extra_recipient_limit retry_initial_destination_concurrency = $initial_destination_concurrency retry_minimum_delivery_slots = $default_minimum_delivery_slots retry_recipient_limit = $default_recipient_limit retry_recipient_refill_delay = $default_recipient_refill_delay retry_recipient_refill_limit = $default_recipient_refill_limit rewrite_service_name = rewrite sample_directory = /usr/share/doc/postfix/examples scalemail-backend_delivery_slot_cost = $default_delivery_slot_cost scalemail-backend_delivery_slot_discount = $default_delivery_slot_discount scalemail-backend_delivery_slot_loan = $default_delivery_slot_loan scalemail-backend_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit scalemail-backend_destination_concurrency_limit = $default_destination_concurrency_limit scalemail-backend_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback scalemail-backend_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback scalemail-backend_destination_rate_delay = $default_destination_rate_delay scalemail-backend_destination_recipient_limit = $default_destination_recipient_limit scalemail-backend_extra_recipient_limit = $default_extra_recipient_limit scalemail-backend_initial_destination_concurrency = $initial_destination_concurrency scalemail-backend_minimum_delivery_slots = $default_minimum_delivery_slots scalemail-backend_recipient_limit = $default_recipient_limit scalemail-backend_recipient_refill_delay = $default_recipient_refill_delay scalemail-backend_recipient_refill_limit = $default_recipient_refill_limit scalemail-backend_time_limit = $command_time_limit send_cyrus_sasl_authzid = no sender_bcc_maps = sender_canonical_classes = envelope_sender, header_sender sender_canonical_maps = sender_dependent_default_transport_maps = sender_dependent_relayhost_maps = sendmail_fix_line_endings = always sendmail_path = /usr/sbin/sendmail service_throttle_time = 60s setgid_group = postdrop show_user_unknown_table_name = yes showq_service_name = showq smtp_address_preference = any smtp_always_send_ehlo = yes smtp_bind_address = smtp_bind_address6 = smtp_body_checks = smtp_cname_overrides_servername = no smtp_connect_timeout = 30s smtp_connection_cache_destinations = smtp_connection_cache_on_demand = yes smtp_connection_cache_time_limit = 2s smtp_connection_reuse_time_limit = 300s smtp_data_done_timeout = 600s smtp_data_init_timeout = 120s smtp_data_xfer_timeout = 180s smtp_defer_if_no_mx_address_found = no smtp_delivery_slot_cost = $default_delivery_slot_cost smtp_delivery_slot_discount = $default_delivery_slot_discount smtp_delivery_slot_loan = $default_delivery_slot_loan smtp_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit smtp_destination_concurrency_limit = $default_destination_concurrency_limit smtp_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback smtp_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback smtp_destination_rate_delay = $default_destination_rate_delay smtp_destination_recipient_limit = $default_destination_recipient_limit smtp_discard_ehlo_keyword_address_maps = smtp_discard_ehlo_keywords = smtp_dns_resolver_options = smtp_enforce_tls = no smtp_extra_recipient_limit = $default_extra_recipient_limit smtp_fallback_relay = $fallback_relay smtp_generic_maps = smtp_header_checks = smtp_helo_name = $myhostname smtp_helo_timeout = 300s smtp_host_lookup = dns smtp_initial_destination_concurrency = $initial_destination_concurrency smtp_line_length_limit = 998 smtp_mail_timeout = 300s smtp_mime_header_checks = smtp_minimum_delivery_slots = $default_minimum_delivery_slots smtp_mx_address_limit = 5 smtp_mx_session_limit = 2 smtp_nested_header_checks = smtp_never_send_ehlo = no smtp_per_record_deadline = no smtp_pix_workaround_delay_time = 10s smtp_pix_workaround_maps = smtp_pix_workaround_threshold_time = 500s smtp_pix_workarounds = disable_esmtp,delay_dotcrlf smtp_quit_timeout = 300s smtp_quote_rfc821_envelope = yes smtp_randomize_addresses = yes smtp_rcpt_timeout = 300s smtp_recipient_limit = $default_recipient_limit smtp_recipient_refill_delay = $default_recipient_refill_delay smtp_recipient_refill_limit = $default_recipient_refill_limit smtp_reply_filter = smtp_rset_timeout = 20s smtp_sasl_auth_cache_name = smtp_sasl_auth_cache_time = 90d smtp_sasl_auth_enable = no smtp_sasl_auth_soft_bounce = yes smtp_sasl_mechanism_filter = smtp_sasl_password_maps = smtp_sasl_path = smtp_sasl_security_options = noplaintext, noanonymous smtp_sasl_tls_security_options = $smtp_sasl_security_options smtp_sasl_tls_verified_security_options = $smtp_sasl_tls_security_options smtp_sasl_type = cyrus smtp_send_dummy_mail_auth = no smtp_send_xforward_command = no smtp_sender_dependent_authentication = no smtp_skip_5xx_greeting = yes smtp_skip_quit_response = yes smtp_starttls_timeout = 300s smtp_tls_CAfile = smtp_tls_CApath = smtp_tls_block_early_mail_reply = no smtp_tls_cert_file = smtp_tls_ciphers = export smtp_tls_dcert_file = smtp_tls_dkey_file = $smtp_tls_dcert_file smtp_tls_eccert_file = smtp_tls_eckey_file = $smtp_tls_eccert_file smtp_tls_enforce_peername = yes smtp_tls_exclude_ciphers = smtp_tls_fingerprint_cert_match = smtp_tls_fingerprint_digest = md5 smtp_tls_key_file = $smtp_tls_cert_file smtp_tls_loglevel = 0 smtp_tls_mandatory_ciphers = medium smtp_tls_mandatory_exclude_ciphers = smtp_tls_mandatory_protocols = !SSLv2 smtp_tls_note_starttls_offer = no smtp_tls_per_site = smtp_tls_policy_maps = smtp_tls_protocols = !SSLv2 smtp_tls_scert_verifydepth = 9 smtp_tls_secure_cert_match = nexthop, dot-nexthop smtp_tls_security_level = smtp_tls_session_cache_database = smtp_tls_session_cache_timeout = 3600s smtp_tls_verify_cert_match = hostname smtp_use_tls = no smtp_xforward_timeout = 300s smtpd_authorized_verp_clients = $authorized_verp_clients smtpd_authorized_xclient_hosts = smtpd_authorized_xforward_hosts = smtpd_banner = $myhostname ESMTP $mail_name smtpd_client_connection_count_limit = 50 smtpd_client_connection_rate_limit = 0 smtpd_client_event_limit_exceptions = ${smtpd_client_connection_limit_exceptions:$mynetworks} smtpd_client_message_rate_limit = 0 smtpd_client_new_tls_session_rate_limit = 0 smtpd_client_port_logging = no smtpd_client_recipient_rate_limit = 0 smtpd_client_restrictions = smtpd_command_filter = smtpd_data_restrictions = smtpd_delay_open_until_valid_rcpt = yes smtpd_delay_reject = yes smtpd_discard_ehlo_keyword_address_maps = smtpd_discard_ehlo_keywords = smtpd_end_of_data_restrictions = smtpd_enforce_tls = no smtpd_error_sleep_time = 1s smtpd_etrn_restrictions = smtpd_expansion_filter = \t\40!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~ smtpd_forbidden_commands = CONNECT GET POST smtpd_hard_error_limit = ${stress?1}${stress:20} smtpd_helo_required = no smtpd_helo_restrictions = smtpd_history_flush_threshold = 100 smtpd_junk_command_limit = ${stress?1}${stress:100} smtpd_milters = smtpd_noop_commands = smtpd_null_access_lookup_key = <> smtpd_peername_lookup = yes smtpd_per_record_deadline = ${stress?yes}${stress:no} smtpd_policy_service_max_idle = 300s smtpd_policy_service_max_ttl = 1000s smtpd_policy_service_timeout = 100s smtpd_proxy_ehlo = $myhostname smtpd_proxy_filter = smtpd_proxy_options = smtpd_proxy_timeout = 100s smtpd_recipient_limit = 1000 smtpd_recipient_overshoot_limit = 1000 smtpd_recipient_restrictions = permit_mynetworks, reject_unauth_destination smtpd_reject_footer = smtpd_reject_unlisted_recipient = yes smtpd_reject_unlisted_sender = no smtpd_restriction_classes = smtpd_sasl_auth_enable = no smtpd_sasl_authenticated_header = no smtpd_sasl_exceptions_networks = smtpd_sasl_local_domain = smtpd_sasl_path = smtpd smtpd_sasl_security_options = noanonymous smtpd_sasl_tls_security_options = $smtpd_sasl_security_options smtpd_sasl_type = cyrus smtpd_sender_login_maps = smtpd_sender_restrictions = smtpd_service_name = smtpd smtpd_soft_error_limit = 10 smtpd_starttls_timeout = ${stress?10}${stress:300}s smtpd_timeout = ${stress?10}${stress:300}s smtpd_tls_CAfile = smtpd_tls_CApath = smtpd_tls_always_issue_session_ids = yes smtpd_tls_ask_ccert = no smtpd_tls_auth_only = no smtpd_tls_ccert_verifydepth = 9 smtpd_tls_cert_file = smtpd_tls_ciphers = export smtpd_tls_dcert_file = smtpd_tls_dh1024_param_file = smtpd_tls_dh512_param_file = smtpd_tls_dkey_file = $smtpd_tls_dcert_file smtpd_tls_eccert_file = smtpd_tls_eckey_file = $smtpd_tls_eccert_file smtpd_tls_eecdh_grade = strong smtpd_tls_exclude_ciphers = smtpd_tls_fingerprint_digest = md5 smtpd_tls_key_file = $smtpd_tls_cert_file smtpd_tls_loglevel = 0 smtpd_tls_mandatory_ciphers = medium smtpd_tls_mandatory_exclude_ciphers = smtpd_tls_mandatory_protocols = !SSLv2 smtpd_tls_protocols = smtpd_tls_received_header = no smtpd_tls_req_ccert = no smtpd_tls_security_level = smtpd_tls_session_cache_database = smtpd_tls_session_cache_timeout = 3600s smtpd_tls_wrappermode = no smtpd_use_tls = no soft_bounce = no stale_lock_time = 500s stress = strict_7bit_headers = no strict_8bitmime = no strict_8bitmime_body = no strict_mailbox_ownership = yes strict_mime_encoding_domain = no strict_rfc821_envelopes = no sun_mailtool_compatibility = no swap_bangpath = yes syslog_facility = mail syslog_name = ${multi_instance_name:postfix}${multi_instance_name?$multi_instance_name} tcp_windowsize = 0 tls_append_default_CA = no tls_daemon_random_bytes = 32 tls_disable_workarounds = tls_eecdh_strong_curve = prime256v1 tls_eecdh_ultra_curve = secp384r1 tls_export_cipherlist = aNULL:-aNULL:ALL:+RC4:@STRENGTH tls_high_cipherlist = aNULL:-aNULL:ALL:!EXPORT:!LOW:!MEDIUM:+RC4:@STRENGTH tls_legacy_public_key_fingerprints = no tls_low_cipherlist = aNULL:-aNULL:ALL:!EXPORT:+RC4:@STRENGTH tls_medium_cipherlist = aNULL:-aNULL:ALL:!EXPORT:!LOW:+RC4:@STRENGTH tls_null_cipherlist = eNULL:!aNULL tls_preempt_cipherlist = no tls_random_bytes = 32 tls_random_exchange_name = ${data_directory}/prng_exch tls_random_prng_update_period = 3600s tls_random_reseed_period = 3600s tls_random_source = dev:/dev/urandom tlsproxy_enforce_tls = $smtpd_enforce_tls tlsproxy_service_name = tlsproxy tlsproxy_tls_CAfile = $smtpd_tls_CAfile tlsproxy_tls_CApath = $smtpd_tls_CApath tlsproxy_tls_always_issue_session_ids = $smtpd_tls_always_issue_session_ids tlsproxy_tls_ask_ccert = $smtpd_tls_ask_ccert tlsproxy_tls_ccert_verifydepth = $smtpd_tls_ccert_verifydepth tlsproxy_tls_cert_file = $smtpd_tls_cert_file tlsproxy_tls_ciphers = $smtpd_tls_ciphers tlsproxy_tls_dcert_file = $smtpd_tls_dcert_file tlsproxy_tls_dh1024_param_file = $smtpd_tls_dh1024_param_file tlsproxy_tls_dh512_param_file = $smtpd_tls_dh512_param_file tlsproxy_tls_dkey_file = $smtpd_tls_dkey_file tlsproxy_tls_eccert_file = $smtpd_tls_eccert_file tlsproxy_tls_eckey_file = $smtpd_tls_eckey_file tlsproxy_tls_eecdh_grade = $smtpd_tls_eecdh_grade tlsproxy_tls_exclude_ciphers = $smtpd_tls_exclude_ciphers tlsproxy_tls_fingerprint_digest = $smtpd_tls_fingerprint_digest tlsproxy_tls_key_file = $smtpd_tls_key_file tlsproxy_tls_loglevel = $smtpd_tls_loglevel tlsproxy_tls_mandatory_ciphers = $smtpd_tls_mandatory_ciphers tlsproxy_tls_mandatory_exclude_ciphers = $smtpd_tls_mandatory_exclude_ciphers tlsproxy_tls_mandatory_protocols = $smtpd_tls_mandatory_protocols tlsproxy_tls_protocols = $smtpd_tls_protocols tlsproxy_tls_req_ccert = $smtpd_tls_req_ccert tlsproxy_tls_security_level = $smtpd_tls_security_level tlsproxy_tls_session_cache_timeout = $smtpd_tls_session_cache_timeout tlsproxy_use_tls = $smtpd_use_tls tlsproxy_watchdog_timeout = 10s trace_service_name = trace transport_maps = transport_retry_time = 60s trigger_timeout = 10s undisclosed_recipients_header = unknown_address_reject_code = 450 unknown_address_tempfail_action = $reject_tempfail_action unknown_client_reject_code = 450 unknown_helo_hostname_tempfail_action = $reject_tempfail_action unknown_hostname_reject_code = 450 unknown_local_recipient_reject_code = 550 unknown_relay_recipient_reject_code = 550 unknown_virtual_alias_reject_code = 550 unknown_virtual_mailbox_reject_code = 550 unverified_recipient_defer_code = 450 unverified_recipient_reject_code = 450 unverified_recipient_reject_reason = unverified_recipient_tempfail_action = $reject_tempfail_action unverified_sender_defer_code = 450 unverified_sender_reject_code = 450 unverified_sender_reject_reason = unverified_sender_tempfail_action = $reject_tempfail_action uucp_delivery_slot_cost = $default_delivery_slot_cost uucp_delivery_slot_discount = $default_delivery_slot_discount uucp_delivery_slot_loan = $default_delivery_slot_loan uucp_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit uucp_destination_concurrency_limit = $default_destination_concurrency_limit uucp_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback uucp_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback uucp_destination_rate_delay = $default_destination_rate_delay uucp_destination_recipient_limit = $default_destination_recipient_limit uucp_extra_recipient_limit = $default_extra_recipient_limit uucp_initial_destination_concurrency = $initial_destination_concurrency uucp_minimum_delivery_slots = $default_minimum_delivery_slots uucp_recipient_limit = $default_recipient_limit uucp_recipient_refill_delay = $default_recipient_refill_delay uucp_recipient_refill_limit = $default_recipient_refill_limit uucp_time_limit = $command_time_limit verp_delimiter_filter = -=+ virtual_alias_domains = $virtual_alias_maps virtual_alias_expansion_limit = 1000 virtual_alias_maps = $virtual_maps virtual_alias_recursion_limit = 1000 virtual_delivery_slot_cost = $default_delivery_slot_cost virtual_delivery_slot_discount = $default_delivery_slot_discount virtual_delivery_slot_loan = $default_delivery_slot_loan virtual_destination_concurrency_failed_cohort_limit = $default_destination_concurrency_failed_cohort_limit virtual_destination_concurrency_limit = $default_destination_concurrency_limit virtual_destination_concurrency_negative_feedback = $default_destination_concurrency_negative_feedback virtual_destination_concurrency_positive_feedback = $default_destination_concurrency_positive_feedback virtual_destination_rate_delay = $default_destination_rate_delay virtual_destination_recipient_limit = $default_destination_recipient_limit virtual_extra_recipient_limit = $default_extra_recipient_limit virtual_gid_maps = virtual_initial_destination_concurrency = $initial_destination_concurrency virtual_mailbox_base = virtual_mailbox_domains = $virtual_mailbox_maps virtual_mailbox_limit = 51200000 virtual_mailbox_lock = fcntl, dotlock virtual_mailbox_maps = virtual_minimum_delivery_slots = $default_minimum_delivery_slots virtual_minimum_uid = 100 virtual_recipient_limit = $default_recipient_limit virtual_recipient_refill_delay = $default_recipient_refill_delay virtual_recipient_refill_limit = $default_recipient_refill_limit virtual_transport = virtual virtual_uid_maps = [/code] *Here is the output of my dovecot -n:* [code] root@andromeda:/etc/postfix# dovecot -n # 2.0.19: /etc/dovecot/dovecot.conf # OS: Linux 3.2.0-38-generic-pae i686 Ubuntu 12.04.2 LTS ext4 disable_plaintext_auth = no first_valid_uid = 150 last_valid_uid = 150 mail_gid = mail mail_location = mbox:/var/vmail/%d/%n mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave passdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } postmaster_address = postmaster(a)cryptodan.net protocols = imap pop3 sieve service auth { unix_listener /var/spool/postfix/private/dovecot-auth { group = postfix mode = 0660 user = postfix } unix_listener auth-userdb { group = mail mode = 01224 user = vmail } } ssl_ca = </etc/ssl/certs/ca-certificates.crt ssl_cert = </etc/ssl/certs/dovecot.pem ssl_cipher_list = ALL:!LOW:!SSLv2:ALL:!aNULL:!ADH:!eNULL:!EXP:RC4+RSA:+HIGH:+MEDIUM ssl_key = </etc/ssl/private/dovecot.pem userdb { args = /etc/dovecot/dovecot-sql.conf.ext driver = sql } protocol imap { imap_client_workarounds = tb-extra-mailbox-sep mail_max_userip_connections = 10 } protocol pop3 { mail_max_userip_connections = 10 pop3_client_workarounds = outlook-no-nuls oe-ns-eoh } protocol lda { deliver_log_format = msgid=%m: %$ mail_plugins = sieve postmaster_address = postmaster quota_full_tempfail = yes rejection_reason = Your message to <%t> was automatically rejected:%n%r } [/code] I hope I provided enough information. Thanks, -- Daniel Reinhardt cryptodan(a)cryptodan.net http://www.cryptodan.net 301-875-7018(c) 410-455-0488(h)

4 3

[Dovecot] Panic when indexing virtual folder with solr
by Andre Rodier 15 Mar '13

15 Mar '13

Hello Timo and everyone, I am using dovecot 2.1 on debian7 with the fts-solr plugin, and everything is working fine. I have a Virtual folder with all emails, and when I run a doveadm index, I have an error if I don't index real folders first. Example: doveadm -v index -u 'andre rodier' 'Search/*' => Panic: file solr-connection.c: line 416 (solr_connection_select): assertion failed: (!conn->posting) Now, if I rune the doveadm index on the real folders first, the next time I do the index on the virtual folder, everything is fine: doveadm -v index -u 'andre rodier' '*' doveadm -v index -u 'andre rodier' 'Search/*' I wonder if dovecot can run the index on the real folder instead of displaying this error? I hope that will help.

4 3

[Dovecot] problem with charset and encoding
by Héctor Moreno Blanco 15 Mar '13

15 Mar '13

Hello everyone, We are having some troubles since we updated dovecot from 2.0.10 to 2.1.6. With 2.0.10 with messages with this headers: Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Showed the special characters fine. However, with this new version, there are special characters that are not correctly showed. For example: "Su c=F3digo de activaci=F3n " must be "Su código de activación ", but in all email clients, even in webmail, is showed like the first way without decoding it. Maybe some configuration or libraries I missed? Could you please help us with this? Thank you very much in advanced. Kind regards, Héctor Moreno Blanco. P Please consider the environment before printing this e-mail. ______________________ This message including any attachments may contain confidential information, according to our Information Security Management System, and intended solely for a specific individual to whom they are addressed. Any unauthorised copy, disclosure or distribution of this message is strictly forbidden. If you have received this transmission in error, please notify the sender immediately and delete it. ______________________ Este mensaje, y en su caso, cualquier fichero anexo al mismo, puede contener informacion clasificada por su emisor como confidencial en el marco de su Sistema de Gestion de Seguridad de la Informacion siendo para uso exclusivo del destinatario, quedando prohibida su divulgacion copia o distribucion a terceros sin la autorizacion expresa del remitente. Si Vd. ha recibido este mensaje erroneamente, se ruega lo notifique al remitente y proceda a su borrado. Gracias por su colaboracion. ______________________

2 3

[Dovecot] Bare bones Debian vmWare appliance?
by Charles Marcus 15 Mar '13

15 Mar '13

Hi all, Does anyone know of a decent bare-bones debian vmWare appliance I can download to play with? Thanks, -- Best regards, Charles

3 3

[Dovecot] Converting from Cyrus -> Dovecot sdbox
by lst_hoe02＠kwsoft.de 14 Mar '13

14 Mar '13

Hello we like to convert a IMAP server with Cyrus 2.2 to Dovecot 2.0.19 and sdbox mail format. From what i have read until now this is a two stage process with converting first from Cyrus to (Dovecot) maildir with for example cyrus2dovecot and than with dsync from maildir to sdbox. Is this correct or are there other possibilities to go in one step from Cyrus format to sdbox? Regards Andreas

2 1

[Dovecot] stats plugins causing dns lookup per connection
by Kelsey Cummings 14 Mar '13

14 Mar '13

I noticed our imap servers were generating a lot of A record lookups for their own IP's the other day and just got around to tracking down the source. Seems like they are all being caused by guid_128_generate() - perhaps the lookup could be cached at start up or it could just use make use of the hostname rather than spending the effort to get the IP via gethostbyname() calls. The function is used in a few other places too, so this might help more than just the stats plugin. nscd and/or host entries mitigate the total time spent on the lookup of course, but it seems unnecessary. -- Kelsey Cummings - kgc(a)corp.sonic.net sonic.net, inc. System Architect 2260 Apollo Way 707.522.1000 Santa Rosa, CA 95407

2 2

[Dovecot] Sieve mark message as read
by Donny Brooks 13 Mar '13

13 Mar '13

I am trying to get the advanced functionality of managesieve working for our users. If this is not the proper place to ask this, please just say so. I have enabled sieve and it works just fine for basic moving messages to folders. However the problem comes in to play when a user selects something like "delete" or "mark as read" in the filter. It just simply does not do that function. I have installed the imapflags and imap4flags and added the needed parts to the dovecot config but it still does not seem to work. We are running Centos 6.3 with dovecot-2.0.9-2.el6_1.1.x86_64 and dovecot-pigeonhole-2.0.9-2.el6_1.1.x86_64 installed. What could I be missing to make this work? -- Donny B.

2 4

[Dovecot] Qmail-LDAP/Dovecot Cluster
by Jeff Hardy 13 Mar '13

13 Mar '13

Hello, I have worked with qmail-ldap and Dovecot for a number of years, and recently wrote up a piece going into great detail about all aspects of our environment. It currently supports a rather small installation of ~10K active users. If it should be of interest: http://fritz.potsdam.edu/projects/email It is intended primarily for system administrators or mail administrators interested in building mail infrastructure on top of open-source technologies, and is inspired by the likes of Life with qmail. Topics include storage, backup, directory integration, local and remote mail exchange, checkpassword SMTP-Auth and Dovecot login, RBLs, content-scanning and anti-spam, quarantine, webmail, etc. Full installation directions and configuration stanzas are provided for nearly every piece of the infrastructure. Comments/criticism welcome. Cheers. -Jeff -- Jeffrey M Hardy Network / Systems Administrator hardyjm(a)potsdam.edu

1 0

[Dovecot] mail_max_userip_connections
by Simon Brereton 13 Mar '13

13 Mar '13

Hi Sometimes, I hit mail_max_userip_connections limit. As far as I know I'm the only person that does, but I would like to find out why before someone else hits the limit. Is there a command available that can list the connections per IP? I'd like to find out which client is causing this. Or do you have a better suggestion? Should I just raise the limit (it's still at the default 10, which I never changed). What are the implications of this. Thanks. Simon

3 7

[Dovecot] Limiting size of stored emails
by Patrick Joy 13 Mar '13

13 Mar '13

Hi, Would appreciate some advice on this issue. I'm running dovecot version 1.0.10 on ubuntu 8.04 LTS. Recently a user created a draft email in their client (outlook) and added a 4GB attachment. The email was uploaded to the draft imap folder on the server. After this the client would then go into a endless synchronisation loop every time outlook was opened. For example in the most recent case 400GB of data was downloaded to the client when the user left outlook synchronising for 5 days. I know this may be a bug with the client or client os however I would like to know if there is a way to limit the size of individual emails that can be stored in the imap store to prevent users creating huge drafts. There is no reason they should need an email draft of this size as it can never be sent through SMTP. Thanks

3 7

[Dovecot] Documentation Clarification
by andreas＠cymail.eu 12 Mar '13

12 Mar '13

Can somebody please clarify the following in the documentation? I am actually looging at the 2.x docs: In the http://wiki2.dovecot.org/Authentication file there is a good effort to clarify between authentication mechanisms and password schemes. The authentication mechanisms are described in http://wiki2.dovecot.org/Authentication/Mechanisms. That is fine. But then looking at the http://wiki2.dovecot.org/Authentication/PasswordSchemes there is a section "Non-plaintext authentication mechanisms" which looks to me to be a repeat of what there is in the description of the authentication mechanisms. This section lists one more mechanism, LANMAN. Can somebody explain why this section is in this file? And which of the two is applicable. Thank you Andreas

2 1

Re: [Dovecot] Integrating with Drupal SQL db
by Andreas Meyer 12 Mar '13

12 Mar '13

Hello! I took the thread back to the list. Tobias Rådenholt <tobias.radenholt(a)stos.se> wrote: > I think it is ssha512 hashing. It's not stos.se that's affected. It's > swedishschoolinsydney.org.au Just found this: capabilities are 'IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE STARTTLS LOGINDISABLED' meaning you can log in via STARTTLS but not via plaintext authentication. Does it have something to do woth your problem? > Mar 11 16:18:01 SSiS dovecot: imap-login: Disconnected: Too many invalid > commands (auth failed, 1 attempts): user=<Teacher1>, method=PLAIN, > rip=127.0.0.1, lip=127.0.0.1, secured > Thanks! > /Tobias Andreas > <info(a)stos.se> wrote: > > > Hi > > > > I'm trying to get Dovecot to use Drupal users password for authenticating > > IMAP users. But I just cant figure out how to make Dovecot understand the > > password hash type that Drupal 7 is using. > > > > My example user with password Teacher1 looks like this in Drupal database: > > $S$DZwJa.U8HXT2PvTmwCK13rGEYEvnx5DB6/hlqnfCBum4s4U7MVWU > > This is not CRAM-MD5, is it? > > > Dovecot retrieves this hash but complains that its not a recognized hash > > type, or that the hash is wrong, depending on if I change the default hash > > type in Dovecot config. > > > > Any help appreciated. > > This is what I get connecting to your server: > Connected to stos.se. > Escape character is '^]'. > * OK [CAPABILITY IMAP4REV1 NAMESPACE ID AUTH=PLAIN AUTH=LOGIN UIDPLUS STARTTLS ACL METADATA] Debian-60-squeeze-64-minimal IMAP4rev1 Citadel 7.83 ready > > This is what I get connecting to mine: > * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE STARTTLS AUTH=PLAIN AUTH=CRAM-MD5] Dovecot ready. > > I see no AUTH=CRAM-MD5 in capabilites of your server. > > Andreas

2 1

[Dovecot] dovecot virtual user 'unknown'...
by Dr Michael Daly 12 Mar '13

12 Mar '13

Hi I have a problem whereby Dovecot 1.0.7 is reporting that a recently setup virtual user in /etc/dovecot_passdb is 'unknown'. I have been trying to setup the user 'info' in a plaintext passwd-file /etc/dovecot_passdb as a virtual user, ie non system user. I suspect I have not properly setup 'info' as a virtual imap user... if so, how should I do this? Existing system users are in '/etc/passdb' and authenticate without problems. System users have their home directory in /home/system_user1/mail/.imap eg /home/system_user1/mail/.imap/INBOX ...file is /var/spool/mail/systemuser1 /home/system_user1/mail/.imap/Sent ... file is in /home/system_user1/mail/Sent /home/system_user1/mail/.imap/Drafts... file is in /home/system_user1/mail/Drafts whereas the postfix virtual user's (username is 'info') mailbox is configured as... call it /var/spool/mail/virtualusersdomain1/info Postfix's virtual_mailbox_base = /var/spool/mail. The virtual_mailbox_domains, including that of user 'info', are a subdirectory of /var/spool/mail This is the log entry produced when user 'info' attempts to login via squirrelmail: PLAIN service=IMAP secured lip=::ffff:127.0.0.1 rip=::ffff:127.0.0.1 resp=<hidden> dovecot: Mar 12 00:32:40 Info: auth(default): passwd-file(info,::ffff:127.0.0.1): lookup: user=info file=/etc/dovecot_passdb dovecot: Mar 12 00:32:40 Info: auth(default): passwd-file(info,::ffff:127.0.0.1): unknown user dovecot: Mar 12 00:32:40 Info: auth(default): pam(info,::ffff:127.0.0.1): lookup service=dovecot dovecot: Mar 12 00:32:40 Info: auth(default): new auth connection: pid=569 dovecot: Mar 12 00:32:42 Info: auth(default): pam(info,::ffff:127.0.0.1): pam_authenticate() failed: Authentication failure dovecot: Mar 12 00:32:42 Info: imap-login: Aborted login: user=<info>, method=PLAIN, rip=::ffff:127.0.0.1, lip=::ffff:127.0.0.1, secured dovecot: Mar 12 00:32:42 Info: auth(default): client out: FAIL 1 user=info So, /etc/dovecot_passdb has ownership root:root, permissions 644 and only the contents: info:{PLAIN}Myplaintextpassword I have tried logging in both as info and also as info@virtualusersdomain1 dovecot -n shows: # 1.0.7: /etc/dovecot.conf log_path: /var/log/dovecot.log login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login login_processes_count: 2 mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/lib/dovecot/imap mail_plugin_dir(imap): /usr/lib/dovecot/imap mail_plugin_dir(pop3): /usr/lib/dovecot/pop3 auth default: verbose: yes debug: yes passdb: driver: passwd-file args: /etc/dovecot_passdb passdb: driver: pam userdb: driver: passwd-file args: home=/var/spool/mail/%d/%n mail=mbox:~/mail /etc/dovecot_passdb userdb: driver: passwd args: /etc/passwd This is all that was in orginally in /etc/dovecot.conf: protocols = imap imaps pop3 pop3s disable_plaintext_auth = no protocol imap { } protocol pop3 { } protocol lda { } auth default { mechanisms = plain } passdb pam { } userdb passwd { } user = root dict { } Dovecot runs as root. Anyway, any advice would be great! Thanks

1 0

[Dovecot] doveadm password check
by Thomas Pries 12 Mar '13

12 Mar '13

Hi, I want to write some php code that users can change there dovecot password via a roundcube plugin. I'm using php function crypt(...) to generate the hashes and everything works well so far. I'm using doveadm pw to generate testhashes e.g.: srv:~ # doveadm pw -r 5 -s BLF-CRYPT -p abc {BLF-CRYPT}$2a$05$W82/Vw4ZEcHBC00M8cNwe.g8fOHuAeV7L5Q/q4W6VWl9V5kjoiz8y I expected an "ok" when using -t the hash when entering abc as a password, but I got: srv:~ # doveadm pw -r 5 -s BLF-CRYPT -t \{BLF-CRYPT}$2a$05$W82/Vw4ZEcHBC00M8cNwe.g8fOHuAeV7L5Q/q4W6VWl9V5kjoiz8y Enter password to verify: doveadm(root): Fatal: reverse password verification check failed: Password mismatch What went wrong? Kind Regards Thomas

3 3