- dovecot - dovecot.org

[Dovecot] Zlib plugin - when does it make sense?
by Frerich Raabe 25 Nov '13

25 Nov '13

Hi, I run a small IMAP server for a dozen guys in the office, serving about 55GB of Maildir. I recently became aware of the Zlib plugin ( http://wiki2.dovecot.org/Plugins/Zlib ) and wondered 1. given that there is about zero CPU load on my IMAP server, is enabling the plugin a no-brainer or are there other things (except CPU load) to consider? 2. For enabling the plugin, I suppose you compress all the existing mail just once and then add 'zlib' to mail_plugins in order to have all future incoming mail saved? Any insight by people familiar with the plugin would be much appreciated - thanks! -- Frerich Raabe - raabe(a)froglogic.com www.froglogic.com - Multi-Platform GUI Testing

4 5

[Dovecot] prohibit deletion of Junk folder
by Alexandre Ellert 25 Nov '13

25 Nov '13

Hi, I have an issue with a sieve_before rule (the script move incoming email to Junk folder when DMARC=fail and policy is quarantine) because one of my user delete his Junk folder : dovecot: lda(myuser(a)domain.com): Error: sieve: execution of script /etc/dovecot/sieve_before/01-dmarc-fail.sieve failed, but implicit keep was successful: 1 Time(s) dovecot: lda(myuser(a)domain.com): Error: sieve: msgid=<20131124212217.5F346580D49(a)anotherdomain.com>: failed to store into mailbox 'Junk': Mailbox doesn't exist: Junk: 1 Time(s) How can I do to prohibit the deletion of Junk folder by end users ? Tell me if you need 'dovecot -n' and thanks for your advices. Alexandre.

2 2

[Dovecot] Dovecot 2.2.7/2.2.8 failing to call dspam with antispam
by Guillaume Hilt 25 Nov '13

25 Nov '13

Hello again, I'm running Gentoo AMD64 2013 with postfix, mysql, dovecot and dspam : dovecot 2.2.8 (it was working fine with 2.2.6 after doing a chmod 4511 on dspam binary), dspam 3.10.2-r1 and dovecot-antispam-2.0_pre20130429 (recompiled after each dovecot upgrade). I've set dspam to debug, and mail_debug to yes. uid 1001 is user vmail (dovecot is running under vmail) gid 12 is group mail (vmail is a member, with mail,postfix,dspam,dovecot,apache) All the necessary users are trusted in dspam configuration. Here's my plugin settings : antispam_verbose_debug = 1 antispam_debug_target = syslog antispam_backend = dspam antispam_allow_append_to_spam = NO antispam_skip_from_line = NO antispam_spam = Spam antispam_trash = Trash antispam_signature = X-DSPAM-Signature antispam_signature_missing = error antispam_dspam_binary = /usr/bin/dspam antispam_dspam_args = --user;%u;--deliver=;--source=error;--signature=%%s antispam_dspam_spam = --class=spam antispam_dspam_notspam = --class=innocent antispam_dspam_result_header = X-DSPAM-Result When i'm moving an email to the dspam folder, Thunderbird throw me an error : Failed to call dspam (email is dropped in the Spam folder anyway, but a copy stay on my INBOX) ==> /var/log/mail/mail/log <== Nov 25 13:01:04 srv1 dovecot: imap: Debug: Loading modules from directory: /usr/lib64/dovecot Nov 25 13:01:04 srv1 dovecot: imap: Debug: Module loaded: /usr/lib64/dovecot/lib90_antispam_plugin.so Nov 25 13:01:04 srv1 dovecot: imap: Debug: Added userdb setting: plugin/maildir=shadowprojects.org/ghilt/ Nov 25 13:01:04 srv1 dovecot: imap(ghilt(a)shadowprojects.org): Debug: Effective uid=1001, gid=12, home=/home/vmail/shadowprojects.org/ghilt/ Nov 25 13:01:04 srv1 dovecot: imap(ghilt(a)shadowprojects.org): Debug: Namespace inbox: type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:/home/vmail/shadowprojects.org/ghilt/.maildir Nov 25 13:01:04 srv1 dovecot: imap(ghilt(a)shadowprojects.org): Debug: maildir++: root=/home/vmail/shadowprojects.org/ghilt/.maildir, index=, indexpvt=, control=, inbox=/home/vmail/shadowprojects.org/ghilt/.maildir, alt= Nov 25 13:01:04 srv1 dovecot: imap(ghilt(a)shadowprojects.org): Debug: Namespace : Using permissions from /home/vmail/shadowprojects.org/ghilt/.maildir: mode=0770 gid=default Nov 25 13:01:04 srv1 dovecot: imap(ghilt(a)shadowprojects.org): Debug: dspam error:29764 prefix=imap(ghilt(a)shadowprojects.org): Nov 25 13:01:04 srv1 dovecot: imap(ghilt(a)shadowprojects.org): Debug: executing /usr/bin/dspam failed: 13 (uid=1001, gid=12) Nov 25 13:01:04 srv1 dovecot: imap: Error: Nov 25 13:01:04 srv1 dovecot: imap: Error: ==> /var/log/dspam/dspam.debug <== 9976: [11/25/2013 13:12:23] DSPAM Instance Startup 9976: [11/25/2013 13:12:23] input args: /usr/bin/dspam --user ghilt(a)shadowprojects.org --deliver= --source=error --signature=89,52900600118151560172939 --class=spam 9976: [11/25/2013 13:12:23] pass-thru args: 9976: [11/25/2013 13:12:23] processing user ghilt(a)shadowprojects.org 9976: [11/25/2013 13:12:23] uid = 1001, euid = 0, gid = 12, egid = 12 9976: [11/25/2013 13:12:23] loading preferences for user ghilt(a)shadowprojects.org ... 9976: [11/25/2013 13:06:08] DSPAM Instance Shutdown. Exit Code: 99 9976: [11/25/2013 13:06:08] process_users() failed on error 9 If i try to call dspam like this, it works : sudo -u vmail /usr/bin/dspam --source=error --class=spam --signature=4be87a9f953248352114216 --client --user vmail Any idea ? Thanks, -- Guillaume Hilt

2 3

[Dovecot] Checkpassword interface for custom password check and home mounting
by Jouko Nikula 25 Nov '13

25 Nov '13

Hi, I'm trying to use the checkpassword interface to do a password check and if the check succeeds I mount the user home directory (including mail) using the users login password and uid. My password check seems to work, but when I add the home directory mounting things seem to stop. Dovecot never logs the result of the password check and nothing happens until the client gets bored and tries again. I added trace to the dovecot's checkpassword-reply and I see that it's really executed, it writes the reply and returns 0 for successful authentication. My dovecot version is 2.1.7. My checkpassword is a setuid binary and the mount is a self made fuse-fs. Any ideas what happens? Are there better ways to do this? Thanks, - Jouko

2 2

[Dovecot] Checkpassword interface for custom password check and home mounting
by Jouko Nikula 25 Nov '13

25 Nov '13

Hi, I'm trying to use the checkpassword interface to do a password check and if the check succeeds I mount the user home directory (including mail) using the users login password and uid. Things work well if I do the mount manually, but when I add the home directory mounting to checkpassword things seem to stop. Dovecot logs the result of the password check, but doesn't send the result to client. Here's the log: Nov 25 10:32:05 jlaptop dovecot: auth: Debug: Loading modules from directory: /usr/lib/dovecot/modules/auth Nov 25 10:32:05 jlaptop dovecot: auth: Debug: auth client connected (pid=27551) Nov 25 10:32:05 jlaptop dovecot: auth: Debug: client in: AUTH#0111#011PLAIN#011service=imap#011secured#011session=8HsMAvjrvgB/AAAB#011lip=127.0.0.1#011rip=127.0.0.1#011lport=143#011rport=39614 Nov 25 10:32:05 jlaptop dovecot: auth: Debug: client out: CONT#0111#011 Nov 25 10:32:05 jlaptop dovecot: auth: Debug: client in: CONT<hidden> Nov 25 10:32:05 jlaptop dovecot: auth: Debug: checkpassword(jouko.nikula,127.0.0.1,<8HsMAvjrvgB/AAAB>): execute: /usr/sbin/gpgfusemount /usr/lib/dovecot/checkpassword-reply Nov 25 10:32:05 jlaptop dovecot: auth: Debug: checkpassword(jouko.nikula,127.0.0.1,<8HsMAvjrvgB/AAAB>): exit_status=0 My dovecot version is 2.1.7. My checkpassword is a setuid binary and the mount is a self made fuse-fs. Any ideas what happens? Are there better ways to do this? Thanks, - Jouko

1 0

[Dovecot] quota warning by script fails
by Jimmy Koerting 24 Nov '13

24 Nov '13

Hello! I looked around all online resources I found, but I'm not able to find my failure. So any help would be welcome! The problem arises with an dovecot 2.2.6 on a 9.2 FreeBSD RELEASE in a jailed environment. I have the following config settings regarding quota (which works in general, but just without calling the script): /etc/dovecot/conf.d/90-quota.conf: ... plugin { quota_warning = storage=95%% quota-warning 95 %u quota_warning2 = storage=80%% quota-warning 80 %u } service quota-warning { executable = script /usr/sbin/quota-warning.sh unix_listener quota-warning { mode = 0666 } } ... script: -rwxrwxrwx 1 root wheel 580 23 Nov 17:14 /usr/sbin/quota-warning.sh* socket: [root@testfbsd ~]# ll /var/run/dovecot/quota-warning srw-rw-rw- 1 root wheel 0 23 Nov 17:06 /var/run/dovecot/quota-warning= Calling the 'quota-warning.sh' script from the console works: Nov 23 17:00:42 testfbsd dovecot: lda(admin(a)testfbsd.XXXXXXXXX.net): msgid=<Ne509YyBcF4pRuYBSyaSfTuUquS9YW@testfbsd>: saved mail to INBOX But when I force dovecot to call it with sending to much mails to the server, the following log comes up (which show, that dovecot at least wants to call the script :"Debug: quota: Executing warning: quota-warning 95 admin@testfbxxxxxxxxxxxxnet" in my understanding): (no further errors or messages about non existing sockets or wrong perms etc. comes up) ==> /var/log/maillog <== Nov 23 18:19:15 testfbsd sm-mta[75486]: STARTTLS=server, relay= mail-wi0-f196.google.com [209.85.212.196], version=TLSv1/SSLv3, verify=NOT, cipher=RC4-SHA, bits=128/128 Nov 23 18:19:15 testfbsd sm-mta[75486]: rANHJEOP075486: from=< jtxxxxxxxx(a)gmail.com>, size=288072, class=0, nrcpts=1, msgid=<CAJeXgQBj7VvTqKGDTNE-PCXKf28X3fSQ3R=zp+L2cPEjVLN-7g(a)mail.gmail.com>, proto=ESMTP, daemon=MTA, relay=mail-wi0-f196.google.com [209.85.212.196] ==> /var/log/debug.log <== Nov 23 18:19:17 testfbsd dovecot: lda: Debug: Loading modules from directory: /usr/iports/lib/dovecot Nov 23 18:19:17 testfbsd dovecot: lda: Debug: Module loaded: /usr/iports/lib/dovecot/lib10_quota_plugin.so Nov 23 18:19:17 testfbsd dovecot: auth: Debug: master in: USER 1 admin@testfbxxxxxxxxxxxxnet service=lda Nov 23 18:19:17 testfbsd dovecot: auth: Debug: passwd-file(admin@testfbxxxxxxxxxxxxnet): lookup: user=admin@testfbxxxxxxxxxxxxnet file=/etc/mail/mailuser Nov 23 18:19:17 testfbsd dovecot: auth: Debug: userdb out: USER 1 admin@testfbxxxxxxxxxxxxnet uid=1000 gid=1000 home=/home/admin@testfbxxxxxxxxxxxxnet quota_rule=*:storage=2M Nov 23 18:19:17 testfbsd dovecot: lda: Debug: auth input: admin@testfbxxxxxxxxxxxxnet uid=1000 gid=1000 home=/home/admin@testfbxxxxxxxxxxxxnet quota_rule=*:storage=2M Nov 23 18:19:17 testfbsd dovecot: lda: Debug: Added userdb setting: plugin/quota_rule=*:storage=2M Nov 23 18:19:17 testfbsd dovecot: lda(admin@testfbxxxxxxxxxxxxnet): Debug: Effective uid=1000, gid=1000, home=/home/admin@testfbxxxxxxxxxxxxnet Nov 23 18:19:17 testfbsd dovecot: lda(admin@testfbxxxxxxxxxxxxnet): Debug: Quota root: name=User quota backend=maildir args= Nov 23 18:19:17 testfbsd dovecot: lda(admin@testfbxxxxxxxxxxxxnet): Debug: Quota rule: root=User quota mailbox=* bytes=2097152 messages=0 Nov 23 18:19:17 testfbsd dovecot: lda(admin@testfbxxxxxxxxxxxxnet): Debug: Quota rule: root=User quota mailbox=Trash bytes=+10485760 messages=0 Nov 23 18:19:17 testfbsd dovecot: lda(admin@testfbxxxxxxxxxxxxnet): Debug: Quota rule: root=User quota mailbox=Deleted Messages bytes=+10485760 messages=0 Nov 23 18:19:17 testfbsd dovecot: lda(admin@testfbxxxxxxxxxxxxnet): Debug: Quota warning: bytes=1992294 (95%) messages=0 reverse=no command=quota-warning 95 admin@testfbxxxxxxxxxxxxnet Nov 23 18:19:17 testfbsd dovecot: lda(admin@testfbxxxxxxxxxxxxnet): Debug: Quota warning: bytes=1677721 (80%) messages=0 reverse=no command=quota-warning 80 admin@testfbxxxxxxxxxxxxnet Nov 23 18:19:17 testfbsd dovecot: lda(admin@testfbxxxxxxxxxxxxnet): Debug: Quota warning: bytes=1048576 (50%) messages=0 reverse=no command=quota-warning 50 admin@testfbxxxxxxxxxxxxnet Nov 23 18:19:17 testfbsd dovecot: lda(admin@testfbxxxxxxxxxxxxnet): Debug: Quota grace: root=User quota bytes=209715 (10%) Nov 23 18:19:17 testfbsd dovecot: lda(admin@testfbxxxxxxxxxxxxnet): Debug: Namespace inbox: type=private, prefix=, sep=, inbox=yes, hidden=no, list=yes, subscriptions=yes location=maildir:/home/admin@testfbxxxxxxxxxxxxnet/mail Nov 23 18:19:17 testfbsd dovecot: lda(admin@testfbxxxxxxxxxxxxnet): Debug: maildir++: root=/home/admin@testfbxxxxxxxxxxxxnet/mail, index=, indexpvt=, control=, inbox=/home/admin@testfbxxxxxxxxxxxxnet/mail, alt= Nov 23 18:19:17 testfbsd dovecot: lda(admin@testfbxxxxxxxxxxxxnet): Debug: Quota root: name=User quota backend=maildir args= Nov 23 18:19:17 testfbsd dovecot: lda(admin@testfbxxxxxxxxxxxxnet): Debug: Quota warning: bytes=0 (95%) messages=0 reverse=no command=quota-warning 95 raw mail user Nov 23 18:19:17 testfbsd dovecot: lda(admin@testfbxxxxxxxxxxxxnet): Debug: Quota warning: bytes=0 (80%) messages=0 reverse=no command=quota-warning 80 raw mail user Nov 23 18:19:17 testfbsd dovecot: lda(admin@testfbxxxxxxxxxxxxnet): Debug: Quota warning: bytes=0 (50%) messages=0 reverse=no command=quota-warning 50 raw mail user Nov 23 18:19:17 testfbsd dovecot: lda(admin@testfbxxxxxxxxxxxxnet): Debug: Quota grace: root=User quota bytes=0 (10%) Nov 23 18:19:17 testfbsd dovecot: lda(admin@testfbxxxxxxxxxxxxnet): Debug: none: root=, index=, indexpvt=, control=, inbox=, alt= Nov 23 18:19:17 testfbsd dovecot: lda(admin@testfbxxxxxxxxxxxxnet): Debug: Destination address: admin@testfbxxxxxxxxxxxxnet (source: user@hostname) Nov 23 18:19:18 testfbsd dovecot: lda(admin@testfbxxxxxxxxxxxxnet): Debug: Namespace : Using permissions from /home/admin@testfbxxxxxxxxxxxxnet/mail: mode=0700 gid=default Nov 23 18:19:18 testfbsd dovecot: lda(admin@testfbxxxxxxxxxxxxnet): Debug: quota: Executing warning: quota-warning 95 admin@testfbxxxxxxxxxxxxnet ==> /var/log/maillog <== Nov 23 18:19:18 testfbsd dovecot: lda(admin@testfbxxxxxxxxxxxxnet): msgid=<CAJeXgQBj7VvTqKGDTNE-PCXKf28X3fSQ3R=zp+L2cPEjVLN-7g(a)mail.gmail.com>: saved mail to INBOX Nov 23 18:19:18 testfbsd sm-mta[75487]: rANHJEOP075486: to=<admin@testfbxxxxxxxxxxxxnet>, delay=00:00:03, xdelay=00:00:03, mailer=local, pri=318436, dsn=2.0.0, stat=Sent So, please advice, what I miss here! Thanks a lot! Kind regards, jimmy

1 1

[Dovecot] dovecot patch: do scanf correctly
by Jann Horn 24 Nov '13

24 Nov '13

As far as I can tell, there are two places in which dovecot does not use scanf properly. This patch should fix that. -------------------------------------------------------------------------------- diff -r 8a3d0426f514 src/lib-dns/dns-lookup.c --- a/src/lib-dns/dns-lookup.c Sat Nov 23 23:22:09 2013 +0000 +++ b/src/lib-dns/dns-lookup.c Sun Nov 24 06:30:12 2013 +0100 @@ -102,7 +102,7 @@ } /* first line: <ret> <ip count> */ if (sscanf(line, "%d %u", &result->ret, - &result->ips_count) == 0) + &result->ips_count) != 2) return -1; if (result->ret != 0) { result->error = net_gethosterror(result->ret); diff -r 8a3d0426f514 src/lib-settings/settings.c --- a/src/lib-settings/settings.c Sat Nov 23 23:22:09 2013 +0000 +++ b/src/lib-settings/settings.c Sun Nov 24 06:30:12 2013 +0100 @@ -44,7 +44,7 @@ { int num; - if (!sscanf(value, "%i", &num) || num < 0) + if (sscanf(value, "%i", &num) != 1 || num < 0) return t_strconcat("Invalid number: ", value, NULL); *result = num; return NULL; -------------------------------------------------------------------------------- Specifically, both invocations disregard that sscanf("", "%d", &num) and similar make sscanf return EOF (-1 on my system) and the first invocation also does not account for the case that the second argument is not matched.

1 0

Re: [Dovecot] 2.2.9
by Rick Romero 23 Nov '13

23 Nov '13

Thanks for providing and maintaining a great piece of software. Rick

1 0

[Dovecot] Dict client unescaping sieve script
by Joshua Perry 22 Nov '13

22 Nov '13

I've created a dict service that listens on a unix socket and answers queries for sieve scripts (among other things). As I understand it (from the source code at http://hg.dovecot.org/dovecot-2.2/file/tip/src/lib-dict/dict-client.c) the dict client will unescape \001n, \001t, and \0011 to line feeds, tabs, and the \001 character respectively. In my service I am escaping those three characters in my response (if I don't escape them the line-oriented nature of the protocol causes a failure for multiline sieve scripts) but every time LDA attempts to process a sieve script I get an error in the logs (see below) showing sieve choking on \001 characters. Is there some configuration value I've missed or something? *dovecot log* Nov 8 23:04:54 www dovecot: lmtp(29940, josh(a)redacted.com) pxg7JxZufVL0dAAAPhZyyg: sieve: failed to compile script dict:proxy:/var/run/dovecot-auth.sock:sieve;name=main script (view user logfile /var/mail/vhosts/redacted.com/josh/.dovecot.sieve.log for more information) *.dovecot.sieve.log* sieve: info: started log at Nov 08 16:14:38. main script: line 1: error: unexpected character(s) starting with 0x01. main script: line 1: error: unexpected unknown characters found at (the presumed) end of file. main script: error: parse failed.

2 2

[Dovecot] dovecot + sieve redirect failed
by Tibor Korocz 22 Nov '13

22 Nov '13

Hi Guys, I have a strange problem and I couldn't find any solution, I hope somebody could help me. I'm using postfix+dovecot+sieve combination and I tried to set up redirect. .sieve: require ["fileinto", "regex", "date", "relational", "vacation"]; redirect "xxxx(a)gmail.com"; keep; But I get some error in the mail.log: sieve: msgid=<1562626302.336239.1385116787283>: failed to redirect message to <xxxxx(a)gmail.com> (refer to server log for more information) Nov 22 11:39:50 server dovecot: lda(xxx@xxxx): sieve: msgid=<1562626302.336239.1385116787283>: stored mail into mailbox 'INBOX' Nov 22 11:39:50 server dovecot: lda(xxx@xxxx): Error: sieve: execution of script /var/vmail/xxxx/.sieve failed, but implicit keep was successful (user logfile /var/vmail/xxxx/.sieve.log may reveal additional details) .sieve.log: error: msgid=<1562626302.336239.1385116787283>: failed to redirect message to <xxxx(a)gmail.com> (refer to server log for more information). I couldn't find any other details in the logs. Any idea what is the problem and what is the solution? Thanks, Tibi

2 1