- dovecot - dovecot.org

[Dovecot] Auth protocol and XMPP
by Kim Alvefur 17 Sep '11

17 Sep '11

Hello. I've written an authentication backend for the XMPP server Prosody, which makes it use Dovecots auth socket and protocol, and letting the client use any SASL mechanism Dovecot offers. However, setups using the full user@domain as authnid won't work, due to most XMPP clients assuming that the authnid is the localpart. I want to avoid hardcoding it to PLAIN, or otherwise doing MITM/rewrites if possible. (There exists an older auth backend that does just that already) Ideas? -- Kim Alvefur <zash(a)zash.se>

1 0

[Dovecot] Detecting duplicate messages with sieve
by Aleksandar Lazic 17 Sep '11

17 Sep '11

Dear Listmember, I use http://www.courier-mta.org/reformail.html for "Detecting duplicate messages" ### The -D option implements a simple way to delete duplicate messages in incoming mail. filename is a file that will be approximately 'len' bytes long. This file will be used by reformail to save message IDs seen in recent mail. reformail reads the message on standard input. If the message has a Message-ID: header that's already in the cache file, reformail terminates with the exit code set to 0. Otherwise, reformail terminates with the exit code set to 1. ### ### my entry in mailfilter `reformail -D 8192 $HOME/.msg.cache` if ($RETURNCODE == 0) { /^From: *!.*/ FROM1=${MATCH2} /^Subject: *!.*/ log "$FROM (${FROM1}) => Not Delivered duplicate MSG-ID. Subject ${MATCH2}\n" exit } ### Is there a similar feature in sieve or can I still use the upper setup? Another question is about to add this header line in every mail. xfilter "${REFORMAIL} -a\"Lines: $LINES\"" Thanks for your help. BR Aleks

2 2

[Dovecot] Sieve envelope :detail "to" "extention" does not deliver to fileinto destination
by Aleksandar Lazic 17 Sep '11

17 Sep '11

Dear Listmember. I resend this with different Subject so that the spamfilter does not drop the mail, I hope ;-) I try to migrate from my current courier-mta setup fo postfix dovecot setup. I use the following scirpt to filter to the destination mailbox. ### /var/vmail/none.at/al/.dovecot.sieve # from http://wiki.dovecot.org/LDA/Sieve require ["fileinto", "envelope", "subaddress", "include"]; include "lists.sieve"; if envelope :detail "to" "work" { fileinto "INBOX.work"; } ### ### /var/vmail/none.at/al/sieve/lists.sieve require ["fileinto", "subaddress", "envelope" ]; if envelope :detail "to" "pdnsusers" { fileinto "Lists.pdnsusers"; } ### postfix/master ### dovecot unix - n n - - pipe flags=DRhu user=vmail:vmail argv=/usr/lib/dovecot/deliver -f ${sender} -d ${user}@${nexthop} -a ${original_recipient} # flags=DRhu user=vmail:vmail argv=/usr/lib/dovecot/deliver -f ${sender} -d ${user}@${nexthop} -m ${extension} -a ${original_recipient} ### Log ### Sep 11 21:47:48 lvps46-163-74-15 postfix/smtpd[7788]: connect from Sep 11 21:48:12 lvps46-163-74-15 postfix/smtpd[7788]: 495EF9FECAF9: Sep 11 21:48:27 lvps46-163-74-15 postfix/cleanup[7795]: 495EF9FECAF9: message-id=<> Sep 11 21:48:27 lvps46-163-74-15 postfix/qmgr[7785]: 495EF9FECAF9: from=<al(a)bitrace.net>, size=268, nrcpt=1 (queue active) Sep 11 21:48:27 lvps46-163-74-15 dovecot: lda: Debug: Loading modules from directory: /usr/lib/dovecot/modules Sep 11 21:48:27 lvps46-163-74-15 dovecot: lda: Debug: Module loaded: /usr/lib/dovecot/modules/lib90_sieve_plugin.so Sep 11 21:48:27 lvps46-163-74-15 dovecot: lda: Debug: auth input: al(a)none.at uid=5000 gid=5000 home=/var/vmail/none.at/al Sep 11 21:48:27 lvps46-163-74-15 dovecot: lda(al(a)none.at): Debug: Effective uid=5000, gid=5000, home=/var/vmail/none.at/al Sep 11 21:48:27 lvps46-163-74-15 dovecot: lda(al(a)none.at): Debug: maildir: root exists (/var/vmail/none.at/al/Maildir) Sep 11 21:48:27 lvps46-163-74-15 dovecot: lda(al(a)none.at): Debug: maildir++: root=/var/vmail/none.at/al/Maildir, index=, control=, inbox=/var/vmail/none.at/al/Maildir, alt= Sep 11 21:48:27 lvps46-163-74-15 dovecot: lda(al(a)none.at): Debug: none: root=, index=, control=, inbox=, alt= Sep 11 21:48:27 lvps46-163-74-15 dovecot: lda(al(a)none.at): Debug: Destination address: al-pdnsuser(a)none.at (source: -a parameter) Sep 11 21:48:27 lvps46-163-74-15 dovecot: lda(al(a)none.at): Debug: sieve: using sieve path for user's script: /var/vmail/none.at/al/.dovecot.sieve Sep 11 21:48:27 lvps46-163-74-15 dovecot: lda(al(a)none.at): Debug: sieve: opening script /var/vmail/none.at/al/.dovecot.sieve Sep 11 21:48:27 lvps46-163-74-15 dovecot: lda(al(a)none.at): Debug: sieve: script binary /var/vmail/none.at/al/.dovecot.svbin successfully loaded Sep 11 21:48:27 lvps46-163-74-15 dovecot: lda(al(a)none.at): Debug: sieve: binary save: not saving binary /var/vmail/none.at/al/.dovecot.svbin, because it is already stored Sep 11 21:48:27 lvps46-163-74-15 dovecot: lda(al(a)none.at): Debug: sieve: executing script from /var/vmail/none.at/al/.dovecot.svbin Sep 11 21:48:27 lvps46-163-74-15 dovecot: lda(al(a)none.at): sieve: msgid=unspecified: stored mail into mailbox 'INBOX' Sep 11 21:48:27 lvps46-163-74-15 postfix/pipe[7797]: 495EF9FECAF9: to=<al-pdnsuser(a)none.at>, relay=dovecot, delay=28, delays=28/0.02/0/0.22, dsn=2.0.0, status=sent (delivered via dovecot service) Sep 11 21:48:27 lvps46-163-74-15 postfix/qmgr[7785]: 495EF9FECAF9: removed Sep 11 21:48:28 lvps46-163-74-15 postfix/smtpd[7788]: disconnect from xxx ### dovecot -n => attachment dovecot_-n ~#: egrep -v '^(#|$)' /etc/dovecot/dovecot-sql.conf #### driver = mysql connect = host=127.0.0.1 dbname=mailserver user=$USER \ password=$PASSWORD default_pass_scheme = PLAIN-MD5 password_query = SELECT user_email AS user, \ user_password AS password \ FROM virtual_users WHERE user_email='%u'; #### Due to the fact that I'am new to dovecot and sieve I hope anybody can help the solve this issue. My target is to filter the mailinglists based on address extention or is it better to filter on to header? Is there a 'log' or 'print' command in the sieve filter or how can I write a message to the log file? Many thanks for your help BR Aleks

3 9

Re: [Dovecot] v2.0.15 released
by Eduardo M KALINOWSKI 17 Sep '11

17 Sep '11

On Sex, 16 Set 2011, Simon Brereton wrote: > I'll bite.. But it's probably not your concern. When will we be > able to get stable 2.x packages for Debian? Apt installs 1.2.15-7 In Debian stable? Only when the next stable version (wheezy) is released. Not in squeeze. Though perhaps a backport might appear. -- Colors may fade in time. Eduardo M KALINOWSKI eduardo(a)kalinowski.com.br

3 3

Re: [Dovecot] imapc and imap_acl
by Lutz Preßler 16 Sep '11

16 Sep '11

On Tue, 13 Sep 2011, Lutz Preßler wrote: > On Di, 13 Sep 2011, Timo Sirainen wrote: > > You mean you'd want local ACLs that apply to imapc mailboxes? > Yes, exactly. Great for "integrating" legacy IMAP servers without e.g. > ACL support. ... but as long as imapc parameters are global that's of no real use, I just realized... > > I think that should work. For example if you set: > > > > mail_location = imapc:~/imapc > > Then for mailbox foo/bar the ACL file should be in ~/imapc/.foo.bar/dovecot-acl > It almost works: > Sep 13 18:37:58 hhh dovecot: imap(4482, uuu): Error: file_dotlock_open(/home/uuu/Maildir/gmail/.[Gmail].Alle Nachrichten > /dovecot-acl) failed: No such file or directory > After manually creating the ".[Gmail].Alle Nachrichten" directory, SETACL > succeeds. ... so this does not really matter yet. Lutz

1 0

[Dovecot] sharing of non-INBOX namespaces? Re: imapc and imap_acl
by Lutz Preßler 16 Sep '11

16 Sep '11

Hi, On Tue, 13 Sep 2011, Lutz Preßler wrote: > On Di, 13 Sep 2011, Timo Sirainen wrote: > > You mean you'd want local ACLs that apply to imapc mailboxes? > Yes, exactly. Great for "integrating" legacy IMAP servers without e.g. > ACL support. > > I think that should work. For example if you set: > > > > mail_location = imapc:~/imapc > Oh, had not realized that a path argument is possible for imapc:. There are > even index file then... > > > > Then for mailbox foo/bar the ACL file should be in ~/imapc/.foo.bar/dovecot-acl > It almost works: > Sep 13 18:37:58 hhh dovecot: imap(4482, uuu): Error: file_dotlock_open(/home/uuu/Maildir/gmail/.[Gmail].Alle Nachrichten > /dovecot-acl) failed: No such file or directory > After manually creating the ".[Gmail].Alle Nachrichten" directory, SETACL > succeeds. Ok, I thought I tested accessing the mailbox afterwards, too - but I probably had not. I have a more general problem now: shared mailboxes from any "non-INBOX" namespace are not available to other users. That's not only with virtual or imapc namespaces, but also tested with two Maildir ones: namespace personal { inbox = yes location = maildir:~/Maildir prefix = INBOX. type = private } namespace second { inbox = no location = maildir:~/Maildir2 prefix = INBOX.second. type = private } namespace others { type = shared separator = . prefix = INBOX.shared.%%u. location = maildir:%%h/Maildir:INDEX=~/Maildir/shared/%%u #location = maildir:/home/%%n/Maildir:INDEX=~/Maildir/shared/%%u subscriptions = no list = children } [...] I can as user1 SETACL INBOX.second.box ~user1/Maildir2/dovecot-acl-list contains "1316082286 box" ~user1/Maildir2/.box/dovecot-acl contains "user=testuser lrs" (as does ~user1/Maildir/.in2007/dovecot-acl) The shared mailboxes dict contains shared/shared-boxes/user/testuser/user1 1 But - as testuser - 0 list "" "*" * LIST (\HasChildren) "." "INBOX" * LIST (\HasNoChildren) "." "INBOX.test" * LIST (\HasNoChildren) "." "INBOX.second" * LIST (\Noselect \HasChildren) "." "INBOX.shared.user1" * LIST (\HasNoChildren) "." "INBOX.virtual" * LIST (\HasNoChildren) "." "INBOX.shared.user1.in2007" 0 OK List completed. INBOX.shared.user1.second.box is missing. Also 0 select INBOX.shared.user1.second.box * OK [CLOSED] Previous mailbox closed. 0 NO Mailbox doesn't exist: second.box Log shows then: Sep 15 12:39:48 host dovecot: imap(8796, testuser): Debug: acl vfile: file /etc/dovecot/global-acls/INBOX.shared.user1.second.box not found Sep 15 12:39:48 host dovecot: imap(8796, testuser): Debug: acl vfile: file /home/user1/Maildir/.second.box/dovecot-acl not found ... not searching for the acl file correctly. Thought I tested this with earlier (2.0) versions. Changed group set up inbetween, but this does not seem relevant. Regards, Lutz

2 4

Re: [Dovecot] v2.0.15 released
by Odhiambo Washington 16 Sep '11

16 Sep '11

I think someone else is responsible for the Debianization of Dovecot, not Timo. On Fri, Sep 16, 2011 at 19:05, Simon Brereton <simon.brereton(a)buongiorno.com > wrote: > -----Original Message----- > From: dovecot-bounces(a)dovecot.org [mailto:dovecot-bounces@dovecot.org] On > Behalf Of Timo Sirainen > > http://dovecot.org/releases/2.0/dovecot-2.0.15.tar.gz > http://dovecot.org/releases/2.0/dovecot-2.0.15.tar.gz.sig > > + doveadm altmove: Added -r parameter to move mails back to primary > storage. > - v2.0.14: Index reading could have eaten a lot of memory in some > situations > - doveadm index no longer affects future caching decisions > - mbox: Fixed crash during mail delivery when mailbox didn't yet > have > GUID assigned to it. > - zlib+mbox: Fetching last message from compressed mailboxes > crashed. > - lib-sql: Fixed load balancing and error handling when multiple > hosts > are used. > > > ----------- > > I'll bite.. But it's probably not your concern. When will we be able to > get stable 2.x packages for Debian? Apt installs 1.2.15-7 > > Thanks. > > Simon > (Sorry about breaking the quotes) > > -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254733744121/+254722743223 _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ I can't hear you -- I'm using the scrambler. Please consider the environment before printing this email.

1 0

[Dovecot] v2.0.15 released
by Timo Sirainen 16 Sep '11

16 Sep '11

http://dovecot.org/releases/2.0/dovecot-2.0.15.tar.gz http://dovecot.org/releases/2.0/dovecot-2.0.15.tar.gz.sig + doveadm altmove: Added -r parameter to move mails back to primary storage. - v2.0.14: Index reading could have eaten a lot of memory in some situations - doveadm index no longer affects future caching decisions - mbox: Fixed crash during mail delivery when mailbox didn't yet have GUID assigned to it. - zlib+mbox: Fetching last message from compressed mailboxes crashed. - lib-sql: Fixed load balancing and error handling when multiple hosts are used.

2 1

[Dovecot] Dsync Permissions Issue
by Asai 16 Sep '11

16 Sep '11

Greetings, I recently upgraded Dovecot from 1.2 to 2.0.14, for purposes of using Dsync to migrate emails from one server to another. I'm using MySQL for authentication. However I get this error message when I try to run Dsync, and after looking around for an answer, I'm at a bit of a loss: [root@triata ~]# dsync -v -u asai(a)globalchangemusic.org backup ssh -p22222 vmail(a)xx.xxx.xx.xxx dsync -u asai(a)globalchangemusic.org vmail(a)xx.xxx.xx.xxx's password: dsync(vmail): Error: userdb lookup: connect(/var/run/dovecot/auth-userdb) failed: Permission denied (euid=1001(vmail) egid=1001(vmail) missing +r perm: /var/run/dovecot/auth-userdb, euid is not dir owner) dsync(vmail): Fatal: User lookup failed: Internal error occurred. Refer to server log for more information. dsync-local(asai(a)globalchangemusic.org): Error: read() from worker server failed: EOF Config as follows: [root@triata ~]# doveconf -n # 2.0.14: /etc/dovecot/dovecot.conf # OS: Linux 2.6.18-92.1.10.el5.xs5.0.0.39xen x86_64 CentOS release 5 (Final) ext3 auth_mechanisms = plain login mail_home = /vmail/%d/%n/home mail_location = maildir:/vmail/%d/%n managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date namespace { inbox = yes location = prefix = separator = / type = private } passdb { args = /etc/dovecot-mysql.conf driver = sql } plugin { sieve = /vmail/%d/%n/sievescript } service auth { unix_listener /var/spool/postfix/private/auth { group = postfix mode = 0660 user = postfix } unix_listener auth-master { group = vmail mode = 0660 user = vmail } unix_listener auth-userdb { group = vmail mode = 0666 user = vmail } user = root } ssl_cert = </etc/ssl/triata.globalchangemultimedia.net/mailserver/smtpd.pem ssl_key = </etc/ssl/triata.globalchangemultimedia.net/mailserver/smtpd.pem userdb { driver = passwd } userdb { args = /etc/dovecot-mysql.conf driver = sql } protocol lda { hostname = triata.globalchangemultimedia.net mail_plugin_dir = /usr/lib64/dovecot/ mail_plugins = sieve postmaster_address = postmaster(a)globalchangemultimedia.net } --

2 2

[Dovecot] unexpected LSUB / LIST (SUBSCRIBED) output Re: Panic: file mailbox-list-subscriptions.c: line 66 (mailbox_list_subscription_fill_one): assertion failed: (ns!= NULL && (ns->flags & NAMESPACE_FLAG_AUTOCREATED) != 0)
by Lutz Preßler 16 Sep '11

16 Sep '11

On Thu, 15 Sep 2011, Timo Sirainen wrote: > On Wed, 2011-09-14 at 12:10 +0200, Lutz Preßler wrote: > > imap(2717, testuser): Panic: file mailbox-list-subscriptions.c: line > > 66 (mailbox_list_subscription_fill_one): assertion failed: (ns!= NULL > > && (ns->flags & NAMESPACE_FLAG_AUTOCREATED) != 0) > > > Fixed: http://hg.dovecot.org/dovecot-2.1/rev/309a707c22c0 No assertion anymore. 0 login testuser password [...] 0 list "" "*" * LIST (\HasChildren) "." "INBOX" * LIST (\HasNoChildren) "." "INBOX.test" * LIST (\Noselect \HasChildren) "." "INBOX.shared.user1" * LIST (\HasNoChildren) "." "INBOX.virtual" * LIST (\HasNoChildren) "." "INBOX.shared.user1.in2007" 0 OK List completed. 0 lsub "" "*" * LSUB (\Noselect) "." "INBOX.shared.user1" 0 OK Lsub completed. 0 list (subscribed) "" "*" * LIST (\NonExistent) "." "INBOX.shared.user1" 0 OK List completed. >>> ~testuser/Maildir/subscription is empty here 0 subscribe INBOX.shared.user1.in2007 0 OK Subscribe completed. 0 lsub "" "*" * LSUB (\Noselect) "." "INBOX.shared.user1" * LSUB () "." "INBOX.shared.user1.in2007" 0 OK Lsub completed. 0 list (subscribed) "" "*" * LIST (\NonExistent) "." "INBOX.shared.user1" * LIST (\Subscribed) "." "INBOX.shared.user1.in2007" 0 OK List completed. >>> ~testuser/Maildir/subscription now contains "shared.user1.in2007" Is this "INBOX.shared.user1" LSUB/LIST output correct? Lutz

2 1

[Dovecot] Shared folder not listing
by Tom Clark 16 Sep '11

16 Sep '11

Hi Timo, I've got a weird problem on our dovecot. We're trying to setup private shared folder access. I have 2 users. tom(a)mailbox.com and system(a)mailbox.com. I have set the ACL's on all the folders (and subfolders) on system(a)mailbox.com. However, I'm not getting any of them listed when I check tom(a)mailbox.com <mailto:tom@mailbox.com's> 's IMAP folders. Our configuration is below (we're migrating from Courier hence the INBOX.): In 10-mail.conf: namespace { type = private prefix = INBOX. separator = . inbox = yes list = yes hidden = yes } namespace { type = shared separator = . prefix = INBOX.Shared.%%u location = maildir:%%h/Maildir:INDEX=~/Maildir/Shared/%%u subscriptions = no list = children } mail_plugins = acl protocol imap { mail_plugins = $mail_plugins imap_acl } In 90-acl.conf: plugin { #acl = vfile:/etc/dovecot/acls:cache_secs=300 acl = vfile } # To let users LIST mailboxes shared by other users, Dovecot needs a # shared mailbox dictionary. For example: plugin { acl_shared_dict = file:/var/vpopmail/domains/%d/shared-mailboxes } Have I missed anthing!?!? Thanks in advance! Tom

3 4

Re: [Dovecot] dovecot Digest, Vol 101, Issue 26
by Alan Brown 15 Sep '11

15 Sep '11

> From: Timo Sirainen <tss(a)iki.fi> > Subject: Re: [Dovecot] general advice sought > Message-ID: <1315830847.7326.48.camel@hurina> > Content-Type: text/plain; charset="ISO-8859-15" > > On Mon, 2011-09-12 at 13:11 +0100, Alan Brown wrote: >> I'd like to hear the thoughts of list members on which type of storage >> method seems "best" for inboxes and for folders. >> >> The filesystem is GFS2 and for various reasons I can't change it. > .. >> If I migrate to other formats (eg mdbox), then it needs to be able to be >> done on the fly. (Taking the mailservers down for a day won't go down >> well, even an hour raises howls). > > Have you had any trouble with Dovecot's index files in your current > setup? Any errors at all? Zero. The issues which have arisen are: 1: Really slow access to messages in large folders (GFS2 issue) 2: Users trashing their inbox then demanding we drop everything to restore "all my important mail" > If not, I'd think mdbox will work fine. You > can do it incrementally per-user (and you really should try it first > with only a few users). http://wiki2.dovecot.org/Tools/Dsync explains > how to do it on the fly. I thought so too, just wanted to hear opinions on doing it vs other approaches. :)

1 0

[Dovecot] Warning: Subscriptions file .. Removing invalid entry:
by Jan-Frode Myklebust 15 Sep '11

15 Sep '11

One of our dovecot-servers (v2.0.14) got a bit too busy last evening: Sep 13 20:39:18 popimap1 dovecot: master: Warning: service(pop3-login): process_limit reached, client connections are being dropped then logged a few: Sep 13 20:39:20 popimap1 dovecot: pop3(XXXXXXXXX(a)YYYYY.YY): Warning: I/O leak: 0x3829233d20 (10) Sep 13 20:39:20 popimap1 dovecot: pop3(XXXXXXXXX(a)YYYYY.YY): Warning: Timeout leak: 0x3829233ce0 Sep 13 20:39:20 popimap1 dovecot: pop3(ZZZZZ.ZZZZZ(a)ZZZZZZ.ZZ): Warning: I/O leak: 0x3829233d20 (10) Sep 13 20:39:20 popimap1 dovecot: pop3(ZZZZZ.ZZZZZ(a)ZZZZZZ.ZZ): Warning: Timeout leak: 0x3829233ce0 Sep 13 20:39:20 popimap1 dovecot: pop3(YYYYYYY(a)YYYY.YYY): Warning: I/O leak: 0x3829233d20 (10) Sep 13 20:39:20 popimap1 dovecot: pop3(YYYYYYY(a)YYYY.YYY): Warning: Timeout leak: 0x3829233ce0 Sep 13 20:39:20 popimap1 dovecot: pop3-postlogin: Error: Fatal: fd_send() failed: Broken pipe Sep 13 20:39:20 popimap1 dovecot: pop3-postlogin: Error: Fatal: fd_send() failed: Broken pipe and: Error: net_connect_unix(/var/run/dovecot/pop3-postlogin) failed: Resource temporarily unavailable but what has me a bit worried is these: imap(user(a)xxx.xxx): Warning: Subscriptions file /path/to/user(a)xxx.xxx/subscriptions: Removing invalid entry: .Sent imap(user(a)xxx.xxx): Warning: Subscriptions file /path/to/user(a)xxx.xxx/subscriptions: Removing invalid entry: .Spam imap(user(a)xxx.xxx): Warning: Subscriptions file /path/to/user(a)xxx.xxx/subscriptions: Removing invalid entry: .Drafts imap(user(a)xxx.xxx): Warning: Subscriptions file /path/to/user(a)xxx.xxx/subscriptions: Removing invalid entry: .Trash which happened for a two users during this high load periode. Looking at their mail directory I can't see why these should be invalid? They're there, has sane permissions and contains messages.. -jf

2 3

[Dovecot] multiple "imapc namespaces" Re: imapc and imap_acl
by Lutz Preßler 15 Sep '11

15 Sep '11

On Tue, 13 Sep 2011, Lutz Preßler wrote: > On Di, 13 Sep 2011, Timo Sirainen wrote: > > mail_location = imapc:~/imapc > Oh, had not realized that a path argument is possible for imapc:. There are > even index file then... What about taking imapc parameters/credentials optionally from a file in this directory (like dovecot-virtual)? Lutz

2 1

[Dovecot] LDA panics without sieve script
by Jürgen Obermann 15 Sep '11

15 Sep '11

The dovecot lda panics with "Trying to sync mailbox INBOX with open transactions" if a user has no sieve script defined. Debugging shows: Sep 14 19:49:26 server dovecot: [ID 583609 local0.debug] lda(userxx): Debug: sieve: user's script path /home/grp/userxx/.dovecot.sieve doesn't exist (using global script path in stead) Sep 14 19:49:26 server dovecot: [ID 583609 local0.debug] lda(userxx): Debug: sieve: user has no valid personal script Sep 14 19:49:26 server dovecot: [ID 583609 local0.debug] lda(userxx): Debug: sieve: no scripts to execute: reverting to default delivery. Sep 14 19:49:26 server dovecot: [ID 583609 local0.crit] lda(userxx): Panic: Trying to sync mailbox INBOX with open transactions Sep 14 19:49:26 server dovecot: [ID 583609 local0.error] lda(userxx): Error: Raw backtrace: 0xff1cc2ac -> 0xff1cbb70 -> 0xff2a6474 -> 0xff2a668c -> 0xff2fa444 -> 0xff2a63c8 -> 0xff2668ec -> 0xff266f74 -> 0xff26741c -> 0x12720 -> 0x11948 I then did create an empty sieve script file with touch /home/grp/userxx/.dovecot.sieve and after that lda worked: Sep 14 19:50:55 server dovecot: [ID 583609 local0.debug] lda(userxx): Debug: sieve: using sieve path for user's script: /home/grp/userxx/.dovecot.sieve Sep 14 19:50:55 server dovecot: [ID 583609 local0.debug] lda(userxx): Debug: sieve: opening script /home/grp/userxx/.dovecot.sieve Sep 14 19:50:55 server dovecot: [ID 583609 local0.debug] lda(userxx): Debug: sieve: script /home/grp/userxx/.dovecot.sieve successfully compiled Sep 14 19:50:55 server dovecot: [ID 583609 local0.debug] lda(userxx): Debug: sieve: executing script from /home/grp/userxx/.dovecot.sieve Sep 14 19:50:56 server dovecot: [ID 583609 local0.info] lda(userxx): save: box=INBOX, uid=6, msgid=<201109141750.p8EHotbE015854(a)server.hrz.uni-giessen.de>, size=1035 Sep 14 19:50:56 server dovecot: [ID 583609 local0.debug] lda(userxx): Debug: box=/var/mail/userxx mount=/var/mail match=yes Sep 14 19:50:56 server dovecot: [ID 583609 local0.info] lda(userxx): sieve: msgid=<201109141750.p8EHotbE015854(a)server.hrz.uni-giessen.de>: stored mail into mailbox 'INBOX' I think the lda worked in previous releases without a sieve script file in the users home directory. dovecot -n output is: # 2.0.14: /opt/local/etc/dovecot/dovecot.conf # OS: SunOS 5.10 sun4v auth_debug = yes auth_debug_passwords = yes auth_verbose = yes disable_plaintext_auth = no listen = server.hrz.uni-giessen.de localhost mail_debug = yes mail_fsync = always mail_location = mbox:~/Mail:INBOX=/var/mail/%u mail_nfs_index = yes mail_nfs_storage = yes mail_plugins = mail_log notify quota mail_privileged_group = mail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave mmap_disable = yes namespace { inbox = yes location = prefix = separator = / type = private } namespace { hidden = yes list = no location = prefix = Mail/ separator = / subscriptions = yes type = private } passdb { driver = pam } passdb { args = /opt/local/etc/dovecot/dovecot-ldap.conf.ext driver = ldap } plugin { autocreate = Trash autocreate2 = caughtspam autocreate3 = Sent autosubscribe = Trash autosubscribe2 = caughtspam autosubscribe3 = Sent mail_log_events = delete undelete expunge copy mailbox_delete mailbox_rename mail_log_fields = uid box msgid size quota = fs:Home-Verzeichnis:noenforcing quota2 = fs:INBOX:noenforcing:mount=/var/mail sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } postmaster_address = postmaster(a)hrz.uni-giessen.de protocols = imap pop3 lmtp sieve sendmail_path = /usr/lib/sendmail service auth { client_limit = 11120 } service imap-login { process_min_avail = 16 service_count = 0 vsz_limit = 640 M } service imap { process_limit = 4096 vsz_limit = 1 G } ssl_cert = </etc/ssl/server.crt ssl_key = </etc/ssl/server.key syslog_facility = local0 userdb { driver = passwd } version_ignore = yes protocol lda { info_log_path = log_path = mail_plugins = mail_log notify quota sieve } protocol imap { imap_client_workarounds = delay-newmail tb-extra-mailbox-sep mail_max_userip_connections = 20 mail_plugins = mail_log notify quota autocreate imap_quota } protocol lmtp { mail_plugins = mail_log notify quota sieve } protocol pop3 { pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = %08Xv%08Xu } -- Hochschulrechenzentrum der | Mail: Juergen.Obermann(a)hrz.uni-giessen.de Justus-Liebig-Universitaet | WWW: http://www.uni-giessen.de/obermann/ Heinrich-Buff-Ring 44 | Tel: 0641-99-13054 (0641-99-13001) D-35392 Giessen, Germany | Fax: 0641-99-13009

3 2

[Dovecot] Maildir "locking"
by Attila Nagy 15 Sep '11

15 Sep '11

Hello, I'm looking for the alternative of qmail's chmod -t (sticky bit on the maildir root) for Dovecot. What I'm trying to achieve with this lock: - Dovecot lmtp should give back a temporary error (so the email will be deferred and re-delivered later) - all other Dovecot daemons (pop, imap) should work as usual, but should not alter maildir contents (they can modify their own files, like indexes, logs etc) What is the best way to do this? If there is no such thing currently, would it be hard to implement the sticky bit checking on the root? Thanks,

2 6

[Dovecot] imapc vs auth-userdb security
by Lutz Preßler 15 Sep '11

15 Sep '11

Hello, with imapc settings coming from userdb (individual configuration necessary) there exists a security problem if access to auth-userdb socket is given to normal (shell) users: testuser@host:~$ doveadm user user1 userdb: lpmail uid : 1000 gid : 1111 home : /home/user1 namespace : gmail namespace/gmail/list: yes namespace/gmail/subscriptions: no namespace/gmail/separator: . namespace/gmail/prefix: INBOX.gmail. namespace/gmail/location: imapc:~/Maildir/gmail imapc_host: imap.gmail.com imapc_user: someuser(a)gmail.com imapc_password: cleartextpassword! imapc_ssl : imaps imapc_ssl_ca_dir: /etc/ssl/certs imapc_port: 993 Lutz

2 3

[Dovecot] Which dovecot-antispam with dovecot 2?
by Svoop 14 Sep '11

14 Sep '11

Hi I'm a little confused as there are two repos for the dovecot-antispam plugin. Eugene's hg repo is explicitly labeled "for Dovecot 2", but the Johannes' git repo has commits later in date: hg: http://wiki2.dovecot.org/Plugins/Antispam git: http://git.sipsolutions.net/?p=dovecot-antispam.git I guess the unrelease hg code ist the one for Dovecot 2, but what is Eugene's 1.4 code for? Thanks!

2 1

[Dovecot] Shredding instead of deleting
by Mike Cardwell 14 Sep '11

14 Sep '11

Hi, I have a wishlist item. Is there an appropriate place for me to post it? Basically, I would like to know that my email isn't recoverable from the local disk on the mail server after I delete it. So instead of just deleting the file from my Maildir, I'd like the option to exist for Dovecot to shred it.. Ie, overwrite the file with random data and/or null bytes before deletion. In the same way that GNU shred behaves: https://www.gnu.org/software/coreutils/manual/html_node/shred-invocation.ht… -- Mike Cardwell https://grepular.com/ https://twitter.com/mickeyc Professional http://cardwellit.com/ http://linkedin.com/in/mikecardwell PGP.mit.edu 0018461F/35BC AF1D 3AA2 1F84 3DC3 B0CF 70A5 F512 0018 461F

4 8

Re: [Dovecot] Mails repopping
by Michael M Slusarz 14 Sep '11

14 Sep '11

Quoting Simon Brereton <simon.brereton(a)buongiorno.com>: >> -----Original Message----- >> From: dovecot-bounces(a)dovecot.org [mailto:dovecot- >> bounces(a)dovecot.org] On Behalf Of Simon Brereton >> > -----Original Message----- >> > From: Timo Sirainen [mailto:tss@iki.fi] On Fri, 2011-09-09 at 13:07 >> > -0400, Simon Brereton wrote: >> > >> > > I have a server that's been running Courier for about 6 years and >> > in >> > > all that time I think I've only ever had 1 issues where an entire >> > mail >> > > box was repopped by a webmail client. However, since moving to a >> > new >> > > server and dovecot 4 weeks ago, I've now had the webmail client >> > repop >> > > this account 4 times (there are about 230 mails in the account). >> > > >> > > Is there a setting I need to tighten to prevent/remedy this? I >> > have >> > > no idea if it's happening on other accounts, but this is one that >> I >> > > see. The format is maildir. There has been no changes to the >> > webmail >> > > client. >> > >> > dovecot -n output would have been nice. Also do you see anything in >> > error logs? >> >> Ah. My apologies of course. Here it is.. >> >> mail:~# dovecot -n >> # 1.2.15: /etc/dovecot/dovecot.conf >> # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0.2 ext3 >> log_timestamp: %Y-%m-%d %H:%M:%S >> protocols: imap imaps pop3 pop3s >> ssl_ca_file: /etc/ssl/keys/rhodes-ca.crt >> ssl_cert_file: /etc/ssl/keys/mail.domain.net.crt >> ssl_key_file: /etc/ssl/private/mail.domain.net.key >> disable_plaintext_auth: no >> login_dir: /var/run/dovecot/login >> login_executable(default): /usr/lib/dovecot/imap-login >> login_executable(imap): /usr/lib/dovecot/imap-login >> login_executable(pop3): /usr/lib/dovecot/pop3-login >> mail_privileged_group: mailsystem >> mail_location: maildir:/var/spool/mail/virtual/%d/%n >> maildir_very_dirty_syncs: yes >> mbox_write_locks: fcntl dotlock >> mail_executable(default): /usr/lib/dovecot/imap >> mail_executable(imap): /usr/lib/dovecot/imap >> mail_executable(pop3): /usr/lib/dovecot/pop3 >> mail_plugins(default): quota imap_quota >> mail_plugins(imap): quota imap_quota >> mail_plugins(pop3): quota >> mail_plugin_dir(default): /usr/lib/dovecot/modules/imap >> mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap >> mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 >> imap_client_workarounds(default): outlook-idle delay-newmail >> imap_client_workarounds(imap): outlook-idle delay-newmail >> imap_client_workarounds(pop3): >> pop3_client_workarounds(default): >> pop3_client_workarounds(imap): >> pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh >> lda: >> postmaster_address: postmaster(a)domain.net >> mail_plugins: quota >> log_path: >> info_log_path: >> deliver_log_format: msgid=%m: %f: %$ >> auth default: >> mechanisms: plain login >> user: mailsystem >> verbose: yes >> passdb: >> driver: sql >> args: /etc/dovecot/dovecot-sql.conf >> userdb: >> driver: prefetch >> userdb: >> driver: static >> args: uid=999 gid=115 home=/var/spool/mail/virtual/%d/%n >> allow_all_users=yes >> socket: >> type: listen >> client: >> path: /var/spool/postfix/private/auth >> mode: 432 >> user: postfix >> group: mailsystem >> master: >> path: /var/run/dovecot/auth-master >> mode: 432 >> user: mailsystem >> group: mailsystem >> plugin: >> quota: maildir >> >> Could you make dovecot -n munge the certificate and postmaster email >> addresses? I'm not comfortable with that floating on the internet.. >> >> The only thing I have in the logs is 2 sessions where mail was popped >> (note, it doesn't even add up to the 183 messages in the mail box). >> But those sessions are vastly longer than the regular ones (tens of >> minutes compared to a few seconds). Since both IPs are on the back- >> bone, that's quite a while to download 100 mails (none of which are >> over >> >> Sep 11 21:36:25 mail dovecot: pop3-login: Login: >> user=<user(a)domain.com>, method=PLAIN, rip=64.88.168.84, >> lip=83.170.65.xxx, TLS Sep 11 21:36:34 mail dovecot: >> POP3(user(a)domain.com): Disconnected: Logged out top=0/0, retr=0/0, >> del=0/183, size=14025971 Sep 11 21:43:44 mail dovecot: pop3-login: >> Login: user=<user(a)domain.com>, method=PLAIN, rip=64.88.168.84, >> lip=83.170.65.xxx, TLS Sep 11 21:44:54 mail dovecot: >> POP3(user(a)domain.com): Disconnected: Logged out top=0/0, retr=0/0, >> del=0/183, size=14025971 Sep 11 21:52:31 mail dovecot: pop3-login: >> Login: user=<user(a)domain.com>, method=PLAIN, rip=64.88.168.84, >> lip=83.170.65.xxx, TLS Sep 11 22:56:01 mail dovecot: >> POP3(user(a)domain.com): Disconnected: Logged out top=0/0, >> retr=100/9182678, del=0/183, size=14025971 Sep 11 23:08:58 mail >> dovecot: pop3-login: Login: user=<user(a)domain.com>, method=PLAIN, >> rip=64.88.168.84, lip=83.170.65.xxx, TLS Sep 11 23:37:57 mail >> dovecot: POP3(user(a)domain.com): Disconnected: Logged out top=0/0, >> retr=75/4748674, del=0/183, size=14025971 Sep 12 00:04:11 mail >> dovecot: pop3-login: Login: user=<user(a)domain.com>, method=PLAIN, >> rip=64.88.168.84, lip=83.170.65.xxx, TLS Sep 12 00:04:26 mail >> dovecot: POP3(user(a)domain.com): Disconnected: Logged out top=0/0, >> retr=0/0, del=0/183, size=14025971 Sep 12 00:07:40 mail dovecot: >> pop3-login: Login: user=<user(a)domain.com>, method=PLAIN, >> rip=64.88.168.84, lip=83.170.65.xxx, TLS Sep 12 00:07:53 mail >> dovecot: POP3(user(a)domain.com): Disconnected: Logged out top=0/0, >> retr=0/0, del=0/183, size=14025971 >> >> >> > If you're using the default pop3_uidl_format it'll rely on IMAP >> UIDs >> > to stay the same, and I guess it's possible that due to some other >> > problem they change (that should be logged as an error/warning >> > though). >> > >> > You could try setting pop3_uidl_format=%f, but it will cause >> everyone >> > to redownload mails. With newer Dovecot versions you could set >> > pop3_save_uidl=yes and when you think everyone's downloaded mails >> once >> > you can safely change the pop3_uidl_format. >> >> Sorry, I'm very new to dovecot and I'm not sure I understand. I >> presume because neither of those keys are in the dovecot -n output >> that they are as the defaults, yes? The account is indeed accessed >> by IMAP as well (from a mobile device mostly), but I don't see >> anything fishy there either. How could I see if the IMAP UIDs have >> changed? >> >> Sep 11 21:20:32 mail dovecot: IMAP(user(a)domain.com): Connection >> closed bytes=1095/8292 >> >> Sep 11 21:26:03 mail dovecot: imap-login: Login: >> user=<user(a)domain.com>, method=PLAIN, rip=174.252.83.244, >> lip=83.170.65.xxx, TLS Sep 11 22:11:20 mail dovecot: >> IMAP(user(a)domain.com): Disconnected for inactivity bytes=725/5638 Sep >> 11 22:17:10 mail dovecot: imap-login: Login: user=<user(a)domain.com>, >> method=PLAIN, rip=174.252.83.244, lip=83.170.65.xxx, TLS Sep 11 >> 23:12:06 mail dovecot: IMAP(user(a)domain.com): Disconnected for >> inactivity bytes=1471/11025 Sep 11 23:23:22 mail dovecot: imap-login: >> Login: user=<user(a)domain.com>, method=PLAIN, rip=174.252.83.244, >> lip=83.170.65.xxx, TLS Sep 11 23:52:52 mail dovecot: >> IMAP(user(a)domain.com): Connection closed bytes=1841/13679 Sep 12 >> 00:08:47 mail dovecot: imap-login: Login: user=<user(a)domain.com>, >> method=PLAIN, rip=174.252.83.244, lip=83.170.65.xxx, TLS Sep 12 >> 01:19:05 mail dovecot: imap-login: Login: user=<user(a)domain.com>, >> method=PLAIN, rip=174.252.83.244, lip=83.170.65.xxx, TLS Sep 12 >> 02:57:01 mail dovecot: IMAP(user(a)domain.com): Connection closed >> bytes=2713/60026 Sep 12 02:57:01 mail dovecot: IMAP(user(a)domain.com): >> Connection closed bytes=2688/18635 >> >> >> There are no errors or warnings in the mail log (I have one shared >> log file for postfix, amavis and dovecot). Reading the notes for >> pop3_save_uidl it doesn't seem to be a dangerous option - should I >> turn that on? Why will it force everyone to redownload mails >> (there's nothing about it on the wiki)? >> >> Thanks! >> >> Simon > > Any help would be appreciated. What do you mean by "repopped"? You mean downloading the entire data of the messages from the POP3 server? This is expected behavior when using a stateless (e.g. webmail) client. Kind of the whole reason you don't use POP3 in the first place. Although caching can help. e.g., Here's what the first connection to the server looks like (this is using IMP 5 on a mailstore with 82 messages): S (1315951197.4976): +OK Dovecot ready. C (1315951197.513): [AUTH PLAIN Command - username: slusarz] S (1315951197.5319): +OK Logged in. C (1315951197.5325): STAT S (1315951197.5328): +OK 82 482351 C (1315951197.5348): UIDL S (1315951197.5354): +OK S (1315951197.5354): 1 000000014935d409 S (1315951197.5354): 2 000000024935d409 S (1315951197.5354): 3 000000114935d409 [...] S (1315951197.5363): 82 000000824935d409 S (1315951197.5363): . C (1315951197.9582): TOP 1 0 S (1315951198.0411): From user(a)domain.com Thu Jun 22 11:16:26 2006 [...] S (1315951198.0416): . [...] C (1315951199.0607): LIST S (1315951199.061): +OK 82 messages: S (1315951199.061): 1 118630 [...] S (1315951199.0619): . We need to grab all headers so we can build the envelope information (needed to produce the mailbox listing). And the LIST command grabs the size information (also used in the mailbox listing). But remember that the full headers will need to be redownloaded *EVERY* time you reload the page unless some sort of caching is enabled in the client. That's just the nature of POP3. (IMAP has the same sort of issues - if the stateless client does not cache, the envelope information must be downloaded on every access. However, with IMAP, the network traffic is reduced - you can download only the needed information, not all header text - and IMAP servers have the ability to cache this information behind the scenes due to the abstraction of the API.). This is where caching is pretty much essential on the webmail side. If caching is enabled, the best-case scenario is that the the webmail server only needs to grab the list of UIDLs on every POP3 server access going forward - if the UIDL list has not changed, we know the mailbox hasn't changed and the cached information is still valid. (CONDSTORE/QRESYNC extensions for IMAP make this synchronization check even more efficient in IMAP) michael

2 1

[Dovecot] General IMAP Question
by Gerald LaMontagne 14 Sep '11

14 Sep '11

Hi- I'm developing an IMAP client library in lua and tried using a literal form of the STATUS command. Dovecot rejected the command. I was successfully able to use a literal form of the LOGIN command, so I have some confidence in my code working properly. Is this correct and, if so, is there a list of IMAP commands that don't support the literal form? I searched hi and lo for something, but have been unable to find an answer. Thanks for your time. Regards- Gerry LaMontagne

2 1

[Dovecot] IMAP delete logs
by James isolder 14 Sep '11

14 Sep '11

Version - 1.2.17 Is there a way to include message or folder deletion logs in the dovecot log files. Thanks in advance. ____________________________________________________________ South Africas premier free email service - www.webmail.co.za For super low premiums, click here. http://www.dialdirect.co.za/?vdn=15828

2 1

[Dovecot] New plugin for Pigeonhole Sieve: sieve_pipe
by Stephan Bosch 14 Sep '11

14 Sep '11

Hello, I've finished up work on a new plugin for Pigeonhole Sieve: sieve_pipe. It adds a new Sieve extension (vnd.dovecot.pipe) providing a new action command that provides the possibility to pipe messages to external programs (e.g. shell scripts). The programs available to this command are explicitly limited and subject to administrator configuration. The plugin can currently only be downloaded from the Mercurial repository: http://hg.rename-it.nl/pigeonhole-0.2-sieve-pipe Check the README/INSTALL files in the repository or the new wiki page for more information: http://hg.rename-it.nl/pigeonhole-0.2-sieve-pipe/raw-file/tip/README http://hg.rename-it.nl/pigeonhole-0.2-sieve-pipe/raw-file/tip/INSTALL http://master.wiki2.dovecot.org/Pigeonhole/Sieve/Plugins/Pipe The specification of the vnd.dovecot.pipe extension can be found here: http://hg.rename-it.nl/pigeonhole-0.2-sieve-pipe/raw-file/tip/doc/rfc/spec-… I'd still call this thing very much experimental, so be sure to test it extensively first. Don't hesitate to notify me when there are any problems. Regards, Stephan.

1 0

Re: [Dovecot] Mails repopping
by Simon Brereton 14 Sep '11

14 Sep '11

> -----Original Message----- > From: dovecot-bounces(a)dovecot.org [mailto:dovecot- > bounces(a)dovecot.org] On Behalf Of Simon Brereton > > -----Original Message----- > > From: Timo Sirainen [mailto:tss@iki.fi] On Fri, 2011-09-09 at 13:07 > > -0400, Simon Brereton wrote: > > > > > I have a server that's been running Courier for about 6 years and > > in > > > all that time I think I've only ever had 1 issues where an entire > > mail > > > box was repopped by a webmail client. However, since moving to a > > new > > > server and dovecot 4 weeks ago, I've now had the webmail client > > repop > > > this account 4 times (there are about 230 mails in the account). > > > > > > Is there a setting I need to tighten to prevent/remedy this? I > > have > > > no idea if it's happening on other accounts, but this is one that > I > > > see. The format is maildir. There has been no changes to the > > webmail > > > client. > > > > dovecot -n output would have been nice. Also do you see anything in > > error logs? > > Ah. My apologies of course. Here it is.. > > mail:~# dovecot -n > # 1.2.15: /etc/dovecot/dovecot.conf > # OS: Linux 2.6.32-5-amd64 x86_64 Debian 6.0.2 ext3 > log_timestamp: %Y-%m-%d %H:%M:%S > protocols: imap imaps pop3 pop3s > ssl_ca_file: /etc/ssl/keys/rhodes-ca.crt > ssl_cert_file: /etc/ssl/keys/mail.domain.net.crt > ssl_key_file: /etc/ssl/private/mail.domain.net.key > disable_plaintext_auth: no > login_dir: /var/run/dovecot/login > login_executable(default): /usr/lib/dovecot/imap-login > login_executable(imap): /usr/lib/dovecot/imap-login > login_executable(pop3): /usr/lib/dovecot/pop3-login > mail_privileged_group: mailsystem > mail_location: maildir:/var/spool/mail/virtual/%d/%n > maildir_very_dirty_syncs: yes > mbox_write_locks: fcntl dotlock > mail_executable(default): /usr/lib/dovecot/imap > mail_executable(imap): /usr/lib/dovecot/imap > mail_executable(pop3): /usr/lib/dovecot/pop3 > mail_plugins(default): quota imap_quota > mail_plugins(imap): quota imap_quota > mail_plugins(pop3): quota > mail_plugin_dir(default): /usr/lib/dovecot/modules/imap > mail_plugin_dir(imap): /usr/lib/dovecot/modules/imap > mail_plugin_dir(pop3): /usr/lib/dovecot/modules/pop3 > imap_client_workarounds(default): outlook-idle delay-newmail > imap_client_workarounds(imap): outlook-idle delay-newmail > imap_client_workarounds(pop3): > pop3_client_workarounds(default): > pop3_client_workarounds(imap): > pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh > lda: > postmaster_address: postmaster(a)domain.net > mail_plugins: quota > log_path: > info_log_path: > deliver_log_format: msgid=%m: %f: %$ > auth default: > mechanisms: plain login > user: mailsystem > verbose: yes > passdb: > driver: sql > args: /etc/dovecot/dovecot-sql.conf > userdb: > driver: prefetch > userdb: > driver: static > args: uid=999 gid=115 home=/var/spool/mail/virtual/%d/%n > allow_all_users=yes > socket: > type: listen > client: > path: /var/spool/postfix/private/auth > mode: 432 > user: postfix > group: mailsystem > master: > path: /var/run/dovecot/auth-master > mode: 432 > user: mailsystem > group: mailsystem > plugin: > quota: maildir > > Could you make dovecot -n munge the certificate and postmaster email > addresses? I'm not comfortable with that floating on the internet.. > > The only thing I have in the logs is 2 sessions where mail was popped > (note, it doesn't even add up to the 183 messages in the mail box). > But those sessions are vastly longer than the regular ones (tens of > minutes compared to a few seconds). Since both IPs are on the back- > bone, that's quite a while to download 100 mails (none of which are > over > > Sep 11 21:36:25 mail dovecot: pop3-login: Login: > user=<user(a)domain.com>, method=PLAIN, rip=64.88.168.84, > lip=83.170.65.xxx, TLS Sep 11 21:36:34 mail dovecot: > POP3(user(a)domain.com): Disconnected: Logged out top=0/0, retr=0/0, > del=0/183, size=14025971 Sep 11 21:43:44 mail dovecot: pop3-login: > Login: user=<user(a)domain.com>, method=PLAIN, rip=64.88.168.84, > lip=83.170.65.xxx, TLS Sep 11 21:44:54 mail dovecot: > POP3(user(a)domain.com): Disconnected: Logged out top=0/0, retr=0/0, > del=0/183, size=14025971 Sep 11 21:52:31 mail dovecot: pop3-login: > Login: user=<user(a)domain.com>, method=PLAIN, rip=64.88.168.84, > lip=83.170.65.xxx, TLS Sep 11 22:56:01 mail dovecot: > POP3(user(a)domain.com): Disconnected: Logged out top=0/0, > retr=100/9182678, del=0/183, size=14025971 Sep 11 23:08:58 mail > dovecot: pop3-login: Login: user=<user(a)domain.com>, method=PLAIN, > rip=64.88.168.84, lip=83.170.65.xxx, TLS Sep 11 23:37:57 mail > dovecot: POP3(user(a)domain.com): Disconnected: Logged out top=0/0, > retr=75/4748674, del=0/183, size=14025971 Sep 12 00:04:11 mail > dovecot: pop3-login: Login: user=<user(a)domain.com>, method=PLAIN, > rip=64.88.168.84, lip=83.170.65.xxx, TLS Sep 12 00:04:26 mail > dovecot: POP3(user(a)domain.com): Disconnected: Logged out top=0/0, > retr=0/0, del=0/183, size=14025971 Sep 12 00:07:40 mail dovecot: > pop3-login: Login: user=<user(a)domain.com>, method=PLAIN, > rip=64.88.168.84, lip=83.170.65.xxx, TLS Sep 12 00:07:53 mail > dovecot: POP3(user(a)domain.com): Disconnected: Logged out top=0/0, > retr=0/0, del=0/183, size=14025971 > > > > If you're using the default pop3_uidl_format it'll rely on IMAP > UIDs > > to stay the same, and I guess it's possible that due to some other > > problem they change (that should be logged as an error/warning > > though). > > > > You could try setting pop3_uidl_format=%f, but it will cause > everyone > > to redownload mails. With newer Dovecot versions you could set > > pop3_save_uidl=yes and when you think everyone's downloaded mails > once > > you can safely change the pop3_uidl_format. > > Sorry, I'm very new to dovecot and I'm not sure I understand. I > presume because neither of those keys are in the dovecot -n output > that they are as the defaults, yes? The account is indeed accessed > by IMAP as well (from a mobile device mostly), but I don't see > anything fishy there either. How could I see if the IMAP UIDs have > changed? > > Sep 11 21:20:32 mail dovecot: IMAP(user(a)domain.com): Connection > closed bytes=1095/8292 > > Sep 11 21:26:03 mail dovecot: imap-login: Login: > user=<user(a)domain.com>, method=PLAIN, rip=174.252.83.244, > lip=83.170.65.xxx, TLS Sep 11 22:11:20 mail dovecot: > IMAP(user(a)domain.com): Disconnected for inactivity bytes=725/5638 Sep > 11 22:17:10 mail dovecot: imap-login: Login: user=<user(a)domain.com>, > method=PLAIN, rip=174.252.83.244, lip=83.170.65.xxx, TLS Sep 11 > 23:12:06 mail dovecot: IMAP(user(a)domain.com): Disconnected for > inactivity bytes=1471/11025 Sep 11 23:23:22 mail dovecot: imap-login: > Login: user=<user(a)domain.com>, method=PLAIN, rip=174.252.83.244, > lip=83.170.65.xxx, TLS Sep 11 23:52:52 mail dovecot: > IMAP(user(a)domain.com): Connection closed bytes=1841/13679 Sep 12 > 00:08:47 mail dovecot: imap-login: Login: user=<user(a)domain.com>, > method=PLAIN, rip=174.252.83.244, lip=83.170.65.xxx, TLS Sep 12 > 01:19:05 mail dovecot: imap-login: Login: user=<user(a)domain.com>, > method=PLAIN, rip=174.252.83.244, lip=83.170.65.xxx, TLS Sep 12 > 02:57:01 mail dovecot: IMAP(user(a)domain.com): Connection closed > bytes=2713/60026 Sep 12 02:57:01 mail dovecot: IMAP(user(a)domain.com): > Connection closed bytes=2688/18635 > > > There are no errors or warnings in the mail log (I have one shared > log file for postfix, amavis and dovecot). Reading the notes for > pop3_save_uidl it doesn't seem to be a dangerous option - should I > turn that on? Why will it force everyone to redownload mails > (there's nothing about it on the wiki)? > > Thanks! > > Simon Any help would be appreciated. Thanks. Simon

1 0

[Dovecot] quota percents
by Micah Anderson 13 Sep '11

13 Sep '11

I've noticed that http://wiki2.dovecot.org/Quota/Configuration is out of date, it says: plugin { quota = maildir:User quota quota_rule = *:storage=1GB # 10% of 1GB = 100MB quota_rule2 = Trash:storage=10%% # 20% of 1GB = 200MB quota_rule3 = Spam:storage=20%% } but if you use the '10%%' notation, dovecot complains, and *also* incorrectly: dovecot: imap(test(a)example.net): Warning: quota root mail quota rule Trash:bytes=10%: obsolete configuration for rule 'bytes=10%' should be changed to 'bytes=+10%' its incorrect because if you change it to what it suggests ('+10%') it wont work because that wont be 10% more, rather, it is set to bytes=+10: dovecot: imap(test(a)example.net): Debug: Quota rule: root=mail quota mailbox=Trash bytes=+10 messages=0 clearly, that isn't right... so I guess it needs to be changed to '+10%%', setting that provides: dovecot: imap(test(a)example.net): Debug: Quota rule: root=mail quota mailbox=* bytes=2211724 messages=0 dovecot: imap(test(a)example.net): Debug: Quota rule: root=mail quota mailbox=Trash bytes=+221172 (10%) messages=0 that seems ok, its saying the Trash mailbox is set to have 221172bytes (215 kilobytes) of quota. So, clearly http://wiki2.dovecot.org/Quota/Configuration needs to be updated. However, it doesn't seem to work in practice, because I have a user that is at 99% of quota, with nothing in the Trash who cannot move a 77KB message into the Trash without getting the quota_exceeded message and refusing to move it. so... how do I get this to work? thanks! micah --

2 4