- dovecot - dovecot.org

[Dovecot] Configuring dovecot to use tcp wrappers
by Max Pyziur 11 Apr '13

11 Apr '13

Greetings, I am looking to implement tcp wrappers with dovecot; I am using the following two links as guides to configuration: http://blog.acsystem.sk/linux/brute-force-attack-dovecot-imap-server-blocki… http://wiki2.dovecot.org/LoginProcess (you need to go to the very bottom) I'm concerned in making the configuration correctly. If you set login_access_sockets = tcpwrap in /etc/dovecot/dovecot.conf Then everything accessing ports controlled by dovecot (and open by iptables) is blocked. So my question relates to the second part of the configuration examples in the links above: service tcpwrap { unix_listener login/tcpwrap { group = $default_login_user mode = 0600 user = $default_login_user } } Where does this code get placed (in dovecot.conf or in one of the files in /etc/dovecot/conf.d)? And regarding $default_login_user, it appears in a comment line in /etc/dovecot/conf.d/10-master.conf Should that line be uncommented? Much thanks. Max Pyziur pyz(a)brama.com Report of dovecot -n: pyz@pangea ~> dovecot -n # 2.1.1: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-358.2.1.el6.x86_64 x86_64 CentOS release 6.4 (Final) disable_plaintext_auth = no mail_location = mbox:~/mail:INBOX=/var/spool/mail/%u mbox_write_locks = fcntl namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } ssl = no ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { driver = passwd }

2 6

[Dovecot] [PATCHES] NetBSD support, authentication buffer size
by Emmanuel Dreyfus 11 Apr '13

11 Apr '13

Hi Here are a few unintegrated patches, just tested against 2.2rc7: 1) NetBSD's getmntinfo uses struct statvfs while other BSD use struct statfs http://ftp.espci.fr/shadow/manu/patch-ak 2) NetBSD 5.x net_getunixcred() support. Build on NetBSD, but not tested (I am testing on NetBSD 6.0): http://ftp.espci.fr/shadow/manu/patch-src_lib_net.c 3) Increase authentication buffer size so that it can cope with unusual authentication scheme. This patch was integrated in dovecot-1.x but did not make its way in dovecot-2.x http://ftp.espci.fr/shadow/manu/patch-src_lib-master_master-auth.h -- Emmanuel Dreyfus manu(a)netbsd.org

3 6

[Dovecot] Easy way to make all mailboxes of a user read-only
by Stephan von Krawczynski 11 Apr '13

11 Apr '13

Hello all, I try to configure dovecot to make all imap accesses read-only for a certain user. I thought this would be possible by creating a global acl file (here "global-acl") like: user=<username> lr and plugin { acl = vfile:/etc/dovecot/global-acls:cache_secs=300 } But that seems to be ignored. What is wrong with this idea, the docs are not really clear about a single acl file with global settings. -- Regards, Stephan

4 11

[Dovecot] v2.2.rc7 released
by Timo Sirainen 11 Apr '13

11 Apr '13

http://dovecot.org/releases/2.2/rc/dovecot-2.2.rc7.tar.gz http://dovecot.org/releases/2.2/rc/dovecot-2.2.rc7.tar.gz.sig OK, still not quite v2.2.0, but now it's definitely very close. :) * checkpasword: AUTH_PASSWORD environment is no longer set. * Running dsync no longer triggers quota warnings. + dsync: Commit large transactions every 100 new messages, so if a large sync crashes it doesn't have to be restarted from the beginning. - replicator: doveadm commands and user list export may have skipped some users. - Various fixes to mailbox_list_index=yes

2 4

[Dovecot] Dovecot distribution configuration files source
by Dave Gattis 11 Apr '13

11 Apr '13

Where can I find unaltered distribution config files (/etc/dovecot/ and /etc/dovecot/config.d/) for Dovecot 2.1.7? I upgraded from version 1 and had to butcher them to get it working. Now that I understand it better, I'd like to do it right. -- Dave

2 1

[Dovecot] My old email is not stored
by HylkeB 11 Apr '13

11 Apr '13

Hi, Im have not much experience with dovecot, postfix or debian, which i am using for my email server. But the thing is, everything worked just fine, until I found out that old emails were missing, only emails of a few months old exist on my server. I have no idea if this is a setting in dovecot, postfix or debian, or that something weird happened. But my question is, is there a setting in either dovecot, postfix or debian that i should check that could cause this behaviour, and if so, how do i check that? (opening and checking a conf file for example, or executing some commands in PuTTy). And if this is somehow default behaviour that cannot be changed, is there some other way to store all emails ever entered my inbox? Sincerely, Hylke Bron -- View this message in context: http://dovecot.2317879.n4.nabble.com/My-old-email-is-not-stored-tp41478.html Sent from the Dovecot mailing list archive at Nabble.com.

6 11

[Dovecot] Proxying, pertinent values and features, SNI
by Christian Balzer 11 Apr '13

11 Apr '13

Hello, I'm looking into deploying dovecot as a proxy, currently using perdition. Have been using dovecot on the actual servers for years, nearly a decade. So far just 1.x, but for the proxy it will have to be 2.x (2.1.7 is the current Debian version), as the trigger for this change is the need to support multiple SSL certificates. All that happens on the proxy seems to be handled by the login processes, so that is why we're not seeing anything useful in the process titles or with doveadm, right? And from past comments by Timo I guess that adding such functionality isn't on his to-do list at all. A configurable capabilities string for POP would be quite welcome, but at least nothing is different between the 1.x backends and the 2.x proxy in that protocol. Speaking of 1.x versus 2.x, the feature to pass on the remote IP from the proxy to the backend is a 2.x thing only, correct? So I suppose any parameters really affecting this setup are default_process_limit and default_client_limit as well as the settings in service-imap-login and service pop-login. In particular mail_max_userip_connections never is looked at on the proxy as this check happens in the respective protocol AFTER login, rite? I presume to best support all(?) clients out there is to have "local_name" sections for SNI first and then "local" sections for IP address based certs. It is my understanding that SNI needs to be requested by the client, so aside from client bugs (nah, those don't exist ^o^) every client should get an appropriate response for TLS. Has anybody done a setup like that already? Regards, Christian -- Christian Balzer Network/Systems Engineer chibi(a)gol.com Global OnLine Japan/Fusion Communications http://www.gol.com/

3 5

[Dovecot] [PATCH proposal] make dsync preserve pop3_uidl_format
by Mark Zealey 11 Apr '13

11 Apr '13

Hi there, I ran into an issue yesterday (dovecot 2.0) whereby when we dsync messages from a local machine (sdbox) to a remote (Maildir) which have different pop3_uidl_formats configured, the uidl format is not preserved. There doesn't seem to be any way to force this in the code, although I suspect that Maildir sources with saved pop3 uidls would pass them correctly. Attached is a rough patch against 2.0.21 dsync which will generate the uidls on the client before passing them over to the destination. This only works for %u and %v currently, also because dsync doesn't read the whole config file you need to specify -o pop3_uidl_format=... to dsync. Mark

2 1

[Dovecot] Postfix/Dovecot/lmtp with virtual and local users
by David Obando 11 Apr '13

11 Apr '13

Hi all, I'm about to change my Debian mailserver setup from Postfix/dovecot1/procmail to Postfix/dovecot2/sieve with lmtp enabled. After enabling lmtp the virtual users can receive e-mails but not the local users: Mar 21 14:21:40 orange postfix/lmtp[4119]: DE62226216: to=<user(a)orange.domain.de>, relay=orange.domain.de[private/dovecot-lmtp], delay=7627, delays=7627/0/0/0.02, dsn=5.1.1, status=bounced (host orange.domain.de[private/dovecot-lmtp] said: 550 5.1.1 <user(a)orange.domain.de> User doesn't exist: user(a)orange.domain.de (in reply to RCPT TO command)) In 10-auth.conf I have the setting "auth_username_format = %Lu". When changing it to "auth_username_format = %n" the local users can be found but not the virtual users anymore. Is there a way to define "if <user> is local then auth_username_format = %n else auth_username_format = %Lu"? Thanks and best regards, David -- The day microsoft makes something that doesn't suck is the day they start making vacuum cleaners. gpg --keyserver pgp.mit.edu --recv-keys 1920BD87 Key fingerprint = 3326 32CE 888B DFF1 DED3 B8D2 105F 29CB 1920 BD87

3 6

[Dovecot] crash with dovecot 2.2: Panic: Buffer full
by tonio＠starbridge.org 11 Apr '13

11 Apr '13

Hi Timo, I've got a crash with dovecot 2.2 dovecot --version 2.2.rc2 (69c26a9e3be5) It's occured when accessing with imap on a large mailbox (around 50k messages) imap(clean-quarantine(a)spamguard.fr): Panic: Buffer full (4254 > 4248, pool <none>) Error: Raw backtrace: /usr/lib/dovecot/libdovecot.so.0(+0x6089a) [0x7f9d1bcde89a] -> /usr/lib/dovecot/libdovecot.so.0(+0x608de) [0x7f9d1bcde8de] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7f9d1bca039b] -> /usr/lib/dovecot/libdovecot.so.0(+0x5d148) [0x7f9d1bcdb148] -> /usr/lib/dovecot/libdovecot.so.0(+0x56ba8) [0x7f9d1bcd4ba8] -> /usr/lib/dovecot/libdovecot.so.0(+0x4fa77) [0x7f9d1bccda77] -> /usr/lib/dovecot/libdovecot.so.0(+0x4faf2) [0x7f9d1bccdaf2] -> /usr/lib/dovecot/libdovecot.so.0(i_stream_read+0x69) [0x7f9d1bce6de9] -> /usr/lib/dovecot/libdovecot.so.0(+0x6dcac) [0x7f9d1bcebcac] -> /usr/lib/dovecot/libdovecot.so.0(+0x6de59) [0x7f9d1bcebe59] -> /usr/lib/dovecot/libdovecot.so.0(+0x6df4b) [0x7f9d1bcebf4b] -> /usr/lib/dovecot/libdovecot.so.0(i_stream_read+0x69) [0x7f9d1bce6de9] -> /usr/lib/dovecot/libdovecot.so.0(i_stream_read_data+0x3d) [0x7f9d1bce765d] -> /usr/lib/dovecot/libdovecot-storage.so.0(+0x9af84) [0x7f9d1bfd4f84] -> /usr/lib/dovecot/libdovecot-storage.so.0(index_mail_get_binary_stream+0x77) [0x7f9d1bfd5417] -> /usr/lib/dovecot/libdovecot-storage.so.0(mail_get_binary_stream+0x60) [0x7f9d1bfae5c0] -> /usr/lib/dovecot/libdovecot-storage.so.0(imap_msgpart_open+0x9f) [0x7f9d1c00a3df] -> dovecot/imap() [0x418f55] -> dovecot/imap() [0x4175fd] -> dovecot/imap(imap_fetch_more+0x34) [0x418554] -> dovecot/imap(cmd_fetch+0x309) [0x40e2c9] -> dovecot/imap(command_exec+0x3c) [0x41623c] -> dovecot/imap() [0x4152a0] -> dovecot/imap() [0x41535a] -> dovecot/imap(client_handle_input+0x115) [0x415615] -> dovecot/imap(client_input+0x72) [0x4159c2] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x36) [0x7f9d1bcee086] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0xd7) [0x7f9d1bceeed7] Mar 16 13:37:19 mx2 dovecot: imap(clean-quarantine(a)spamguard.fr): Fatal: master: service(imap): child 9983 killed with signal 6 (core dumped) backtrace: #0 0x00007f9d1b926475 in raise () from /lib/x86_64-linux-gnu/libc.so.6 No symbol table info available. #1 0x00007f9d1b9296f0 in abort () from /lib/x86_64-linux-gnu/libc.so.6 No symbol table info available. #2 0x00007f9d1bcde8a8 in default_fatal_finish (type=<optimized out>, status=status@entry=0) at failures.c:191 backtrace = 0x62d5f0 "/usr/lib/dovecot/libdovecot.so.0(+0x6089a) [0x7f9d1bcde89a] -> /usr/lib/dovecot/libdovecot.so.0(+0x608de) [0x7f9d1bcde8de] -> /usr/lib/dovecot/libdovecot.so.0(i_fatal+0) [0x7f9d1bca039b] -> /usr/lib/d"... #3 0x00007f9d1bcde8de in i_internal_fatal_handler (ctx=0x7fff68422000, format=<optimized out>, args=<optimized out>) at failures.c:652 status = 0 #4 0x00007f9d1bca039b in i_panic (format=format@entry=0x7f9d1bd0d510 "Buffer full (%lu > %lu, pool %s)") at failures.c:263 ctx = {type = LOG_TYPE_PANIC, exit_status = 0, timestamp = 0x0} args = {{gp_offset = 32, fp_offset = 48, overflow_arg_area = 0x7fff684220f0, reg_save_area = 0x7fff68422030}} #5 0x00007f9d1bcdb148 in buffer_check_limits (data_size=75, pos=4179, buf=<optimized out>) at buffer.c:65 extra = <optimized out> new_size = 4254 #6 buffer_write (_buf=0x7fff684221b0, pos=4179, data=0x679010, data_size=75) at buffer.c:178 buf = <optimized out> #7 0x00007f9d1bcd4ba8 in quoted_printable_decode_full ( src=src@entry=0x677eb0 "enter\" bgcolor=3D\"#ffffff\" width=3D\"560\">\n <table cellspacing=3D\"0\" border=3D\"0\" align=3D\"center\" style=3D\"margin: 0=\n auto;\" cellpadding=3D\"0\" width=3D\"520\"><tr>\n<td align=3D\"left\" width=3D\"520\">\n "..., src_size=5570, src_pos_r=src_pos_r@entry=0x7fff684221a8, dest=dest@entry=0x7fff684221b0, eof=eof@entry=false) at quoted-printable.c:60 hexbuf = "3D" src_pos = <optimized out> pos = <optimized out> next = <optimized out> errors = <optimized out> #8 0x00007f9d1bcd4d38 in quoted_printable_decode ( src=src@entry=0x677eb0 "enter\" bgcolor=3D\"#ffffff\" width=3D\"560\">\n <table cellspacing=3D\"0\" border=3D\"0\" align=3D\"center\" style=3D\"margin: 0=\n auto;\" cellpadding=3D\"0\" width=3D\"520\"><tr>\n<td align=3D\"left\" width=3D\"520\">\n "..., src_size=<optimized out>, src_pos_r=src_pos_r@entry=0x7fff684221a8, dest=dest@entry=0x7fff684221b0) at quoted-printable.c:108 No locals. #9 0x00007f9d1bccda77 in i_stream_qp_try_decode_block (bstream=bstream@entry=0x66dd50, eof=eof@entry=false) at istream-qp-decoder.c:63 stream = 0x66dd50 data = 0x677eb0 "enter\" bgcolor=3D\"#ffffff\" width=3D\"560\">\n <table cellspacing=3D\"0\" border=3D\"0\" align=3D\"center\" style=3D\"margin: 0=\n auto;\" cellpadding=3D\"0\" width=3D\"520\"><tr>\n<td align=3D\"left\" width=3D\"520\">\n "... size = 6 avail = 4248 buffer_avail = <optimized out> pos = <optimized out> buf = {data = 0x682e38, used = 4179, priv = {0x682e38, 0x0, 0x1098, 0x0, 0x0}} ret = <optimized out> #10 0x00007f9d1bccdaf2 in i_stream_qp_decoder_read (stream=0x66dd50) at istream-qp-decoder.c:103 bstream = 0x66dd50 pre_count = 0 post_count = <optimized out> ret = <optimized out> prev_size = 5570 __FUNCTION__ = "i_stream_qp_decoder_read" #11 0x00007f9d1bce6de9 in i_stream_read (stream=0x66ddb0) at istream.c:135 _stream = 0x66dd50 old_size = 0 ret = <optimized out> __FUNCTION__ = "i_stream_read" #12 0x00007f9d1bcebcac in read_more (sstream=0x66df30) at istream-seekable.c:140 size = <optimized out> ret = <optimized out> #13 0x00007f9d1bcebe59 in read_from_buffer (sstream=sstream@entry=0x66df30, ret_r=ret_r@entry=0x7fff684222c8) at istream-seekable.c:182 stream = 0x66df30 data = <optimized out> size = 0 pos = <optimized out> offset = <optimized out> __FUNCTION__ = "read_from_buffer" #14 0x00007f9d1bcebf4b in i_stream_seekable_read (stream=0x66df30) at istream-seekable.c:240 sstream = 0x66df30 data = <optimized out> size = <optimized out> pos = <optimized out> ret = <optimized out> __FUNCTION__ = "i_stream_seekable_read" #15 0x00007f9d1bce6de9 in i_stream_read (stream=stream@entry=0x66df90) at istream.c:135 _stream = 0x66df30 old_size = 0 ret = <optimized out> __FUNCTION__ = "i_stream_read" #16 0x00007f9d1bce765d in i_stream_read_data (stream=stream@entry=0x66df90, data_r=data_r@entry=0x7fff684223b0, size_r=size_r@entry=0x7fff684223b8, threshold=threshold@entry=0) at istream.c:464 ret = <optimized out> read_more = false __FUNCTION__ = "i_stream_read_data" #17 0x00007f9d1bfd4f84 in blocks_count_lines (full_input=0x66df90, ctx=0x7fff684223c0) at index-mail-binary.c:319 block_idx = 0 p = <optimized out> size = 0 data = 0x0 ret = <optimized out> cur_block = 0x62d410 block_count = 1 cur_offset = 3944 skip = <optimized out> #18 index_mail_read_binary_to_cache (_mail=_mail@entry=0x66fc00, part=part@entry=0x671ed0, include_hdr=include_hdr@entry=false, binary_r=binary_r@entry=0x7fff68422476, converted_r=converted_r@entry=0x7fff68422477) at index-mail-binary.c:393 mail = 0x66fc00 cache = 0x657a20 ctx = {mail = 0x66fc00, input = 0x66d900, has_nuls = false, converted = true, blocks = {arr = {buffer = 0x62d3d8, element_size = 24}, v = 0x62d3d8, v_modifiable = 0x62d3d8}, copy_start_offset = 13762} __FUNCTION__ = "index_mail_read_binary_to_cache" #19 0x00007f9d1bfd5417 in index_mail_get_binary_stream (_mail=0x66fc00, part=0x671ed0, include_hdr=false, size_r=0x7fff68422538, lines_r=<optimized out>, binary_r=0x7fff6842252e, stream_r=0x7fff68422600) at index-mail-binary.c:556 mail = 0x66fc00 cache = 0x657a20 input = <optimized out> binary = <optimized out> converted = <optimized out> __FUNCTION__ = "index_mail_get_binary_stream" #20 0x00007f9d1bfae5c0 in mail_get_binary_stream (mail=mail@entry=0x66fc00, part=part@entry=0x671ed0, include_hdr=include_hdr@entry=false, size_r=size_r@entry=0x7fff68422538, binary_r=binary_r@entry=0x7fff6842252e, stream_r=stream_r@entry=0x7fff68422600) at mail.c:243 _data_stack_cur_id = 5 p = 0x66fc00 ret = <optimized out> #21 0x00007f9d1c00a3df in imap_msgpart_open (mail=mail@entry=0x66fc00, msgpart=0x669920, result_r=result_r@entry=0x7fff68422600) at imap-msgpart.c:644 part = 0x671ed0 part_size = {physical_size = 6681664, virtual_size = 0, lines = 6684952} size = <optimized out> include_hdr = false binary = <optimized out> use_partial_cache = <optimized out> ret = 0 #22 0x0000000000418f55 in fetch_body_msgpart (ctx=0x660118, mail=0x66fc00, body=0x660748) at imap-fetch-body.c:164 result = {input = 0x0, size = 0, size_field = 0, binary_decoded_input_has_nuls = false} str = <optimized out> #23 0x00000000004175fd in imap_fetch_more_int (ctx=ctx@entry=0x660118, cancel=false) at imap-fetch.c:504 h = <optimized out> _data_stack_cur_id = 4 state = 0x660168 client = 0x65f440 handlers = 0x660448 count = 2 ret = <optimized out> __FUNCTION__ = "imap_fetch_more_int" #24 0x0000000000418554 in imap_fetch_more (ctx=0x660118, cmd=cmd@entry=0x660000) at imap-fetch.c:556 ret = <optimized out> __FUNCTION__ = "imap_fetch_more" #25 0x000000000040e2c9 in cmd_fetch (cmd=0x660000) at cmd-fetch.c:279 client = 0x65f440 ctx = 0x660118 args = 0x6388f8 next_arg = <optimized out> list_arg = 0x1bc79e60 search_args = 0x0 qresync_args = {qresync_sample_seqset = 0x638a58, qresync_sample_uidset = 0x0} messageset = 0x638a60 "1186590" send_vanished = <optimized out> ret = <optimized out> #26 0x000000000041623c in command_exec (cmd=cmd@entry=0x660000) at imap-commands.c:156 hook = 0x636d50 ret = <optimized out> #27 0x00000000004152a0 in client_command_input (cmd=0x660000) at imap-client.c:775 client = 0x65f440 command = <optimized out> __FUNCTION__ = "client_command_input" #28 0x000000000041535a in client_command_input (cmd=0x660000) at imap-client.c:836 client = 0x65f440 command = <optimized out> __FUNCTION__ = "client_command_input" #29 0x0000000000415615 in client_handle_next_command (remove_io_r=<synthetic pointer>, client=0x65f440) at imap-client.c:874 No locals. #30 client_handle_input (client=client@entry=0x65f440) at imap-client.c:886 _data_stack_cur_id = 3 ret = 240 remove_io = false handled_commands = false __FUNCTION__ = "client_handle_input" #31 0x00000000004159c2 in client_input (client=0x65f440) at imap-client.c:928 cmd = <optimized out> output = 0x65fe38 bytes = 37 __FUNCTION__ = "client_input" #32 0x00007f9d1bcee086 in io_loop_call_io (io=0x65ff00) at ioloop.c:387 ioloop = 0x6356f0 t_id = 2 #33 0x00007f9d1bceeed7 in io_loop_handler_run (ioloop=ioloop@entry=0x6356f0) at ioloop-epoll.c:215 ctx = 0x635a60 events = 0x0 event = 0x635ad0 list = 0x65ff50 io = <optimized out> tv = {tv_sec = 59, tv_usec = 738409} events_count = <optimized out> msecs = <optimized out> ret = 1 i = <optimized out> call = <optimized out> __FUNCTION__ = "io_loop_handler_run" #34 0x00007f9d1bcedbc8 in io_loop_run (ioloop=0x6356f0) at ioloop.c:406 No locals. #35 0x00007f9d1bca54e3 in master_service_run (service=0x635590, callback=callback@entry=0x41e790 <client_connected>) at master-service.c:550 No locals. #36 0x000000000040b940 in main (argc=1, argv=0x635390) at main.c:400 set_roots = {0x425ac0, 0x0} login_set = {auth_socket_path = 0x62d040 "\001", postlogin_socket_path = 0x0, postlogin_timeout_secs = 60, callback = 0x41e600 <login_client_connected>, failure_callback = 0x41e730 <login_client_failed>, request_auth_token = 1} service_flags = <optimized out> storage_service_flags = <optimized out> username = 0x0 c = <optimized out> Thanks for your help Tonio

3 8