- dovecot - dovecot.org

Re: [Dovecot] mail_max_userip_connections exceeded.
by Joseph Tam 21 Jan '12

21 Jan '12

Simon Brereton <simon.brereton(a)buongiorno.com> writes: > /var/log/mail.log.1:2490:Jan 19 12:02:55 mail dovecot: imap-login: > Maximum number of connections from user+IP exceeded > (mail_max_userip_connections): user=<user(a)example.com>, method=PLAIN, > rip=127.0.0.1, secured > > I never changed this from the default 10. When I googled this error > there was a thread on this list from May 2011 that indicated one would > need one connection per user per subscribed folder. However, I know > that user doesn't have 10 folders, let alone 10 subscribed folders! I > can increase, it but it's not going to scale well. And there are > people on this list with many 1000x users than I have - so how do they > deal with that? > > 127.0.0.1 is obviously webmail (IMP5). IMAP proxy or lack of proxy? IMAP proxy could be a problem if the user had opened more than 10 (unique) mailboxes. The proxy would keep this connection open until a timeout, and after some time, could accumulate more connections than your limit. The lack of proxy could solve your problem if for some reason your webmail software is not closing the IMAP connection properly (I assume IMP does a connect/authenticate/IMAP command/logout for every webmail operation). Every connection (even to the same mailbox) would open up a new connection. The proxy software will recognize the reconnnection and funnel it through its cached connection. You can lsof the user's IMAP processes (or troll through /proc/{imap-process} or what you have) to figure out which mailboxes it has opened. On my system, file descriptor 9 and 11 gives you the names of the index files that indicate which mailboxes are being accessed. Joseph Tam <jtam.home(a)gmail.com>

2 1

[Dovecot] Clients show .subscriptions folder
by Mark Sapiro 21 Jan '12

21 Jan '12

Since upgrading from dovecot-2.1.rc1 to dovecot-2.1.rc3, some clients are showing a .subscriptions file in the user's mbox path as a folder. Some clients such as T'bird on Mac OS X create this file listing subscribed mbox files. Other clients such as T'bird on Windows XP show this file as a folder in the folder list even though it cannot be accessed as a folder (dovecot returns CANNOT Mailbox is not a valid mbox file). I think this may be a result of uncommenting the inbox namespace in conf.d/10-mail.conf <http://hg.dovecot.org/dovecot-2.1/rev/2c8d39467f21>. Is there a way to supress exposing this file to clients that don't use it? # dovecot -n # 2.1.rc3: /usr/local/etc/dovecot/dovecot.conf # OS: Linux 2.6.18-8.1.14.el5 i686 CentOS release 5 (Final) auth_mechanisms = plain apop login auth_worker_max_count = 5 mail_location = mbox:~/Mail:INBOX=/var/spool/mail/%u mail_privileged_group = mail mbox_write_locks = fcntl dotlock namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { args = /usr/local/etc/dovecot.passwd driver = passwd-file } passdb { driver = pam } protocols = imap pop3 service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 } } ssl_cert = </etc/httpd/conf/ssl/combined.crt ssl_key = </etc/httpd/conf/ssl/www.grizz.org.key userdb { driver = passwd } protocol imap { mail_max_userip_connections = 30 } # -- Mark Sapiro <mark(a)msapiro.net> The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan

2 3

[Dovecot] Performance of Maildir vs sdbox/mdbox
by Lee Standen 20 Jan '12

20 Jan '12

Hi Guys, I've been desperately trying to find some comparative performance information about the different mailbox formats supported by Dovecot in order to make an assessment on which format is right for our environment. This is a brand new build, with customer mailboxes to be migrated in over the course of 3-4 months. Some details on our new environment: * Approximately 1.6M+ mailboxes once all legacy systems are combined * NetApp FAS6280 storage w/ 120TB usable for mail storage, 1TB of FlashCache in each controller * All mail storage presented via NFS over 10Gbps Ethernet (Jumbo Frames) * Postfix will feed new email to Dovecot via LMTP * Dovecot servers have been split based on their role - Dovecot LDA Servers (running LMTP protocol) - Dovecot POP/IMAP servers (running POP/IMAP protocols) - LDA & POP/IMAP servers are segmented into geographically split groups (so no server sees every single mailbox) - Nginx proxy used to terminate customer connections, connections are redirected to the appropriate geographic servers * Apache Lucene indexes will be used to accelerate IMAP search for users Our closest current live configuration (Qmail SMTP, Courier IMAP, Maildir) has 600K mailboxes and pushes ~ 35,000 NFS operations per second at peak Some of the things I would like to know: * Are we likely to see a reduction in IOPS/User by using Maildir alone under Dovecot? * What kind of IOPS/User reduction could we expect to see under mdbox? * If someone can give some technical reasoning behind why mdbox does less IOPS than Maildir? I understand some of the reasons for the mdbox IOPS question, but I need some more information so we can discuss internally and make a decision as to whether we're comfortable going with mdbox from day one. We're very familiar with Maidlir, and there's just some uneasiness internally around going to a new mail storage format. Thanks!

7 16

[Dovecot] mail_max_userip_connections exceeded.
by Simon Brereton 20 Jan '12

20 Jan '12

Hi I'm using Dovecot version 1:1.2.15-7 installed on Debian Squeeze via apt-get.. I have this error in the logs. /var/log/mail.log.1:2490:Jan 19 12:02:55 mail dovecot: imap-login: Maximum number of connections from user+IP exceeded (mail_max_userip_connections): user=<user(a)example.com>, method=PLAIN, rip=127.0.0.1, secured I never changed this from the default 10. When I googled this error there was a thread on this list from May 2011 that indicated one would need one connection per user per subscribed folder. However, I know that user doesn't have 10 folders, let alone 10 subscribed folders! I can increase, it but it's not going to scale well. And there are people on this list with many 1000x users than I have - so how do they deal with that? 127.0.0.1 is obviously webmail (IMP5). So, how/why am I seeing this, and should I be concerned? Simon

2 1

[Dovecot] Notify plugin: segmentation fault
by Ewald Dieterich 20 Jan '12

20 Jan '12

I'm trying to develop a plugin that uses the hooks provided by the notify plugin. The notify plugin segfaults if you don't set the mailbox_rename hook. I attached a patch to notify-plugin.c from Dovecot 2.0.16 that should fix this. Ewald

2 1

[Dovecot] shared folder files not displaying in thunderbird
by Eric Broch 19 Jan '12

19 Jan '12

Hello, I have dovecot installed with the configuration below. One of the subfolders created (using the email client) under the '/home/vpopmail/domains/mydomain.com/shared/projects' share no longer (it used to) displays the files located in it. There are about 150 folders under the '/home/vpopmail/domains/mydomain.com/shared/projects' share all of which display the files located in them, the one mentioned used to display the contents but no longer does. What would be the reason that one folder would no longer display existing files in the email client (Thunderbird) and the other folders would? And, how do I fix this? I've already tried unsubscribing and resubscribing the folder. This did not work. Would it now be simply a matter of unsubscribing the folder, deleting the dovecot files, and resubscribing to the folder? Eric # 2.0.11: /etc/dovecot/dovecot.conf # OS: Linux 2.6.18-238.19.1.el5 i686 CentOS release 5.7 (Final) auth_cache_size = 32 M auth_mechanisms = plain login digest-md5 cram-md5 auth_username_format = %Lu disable_plaintext_auth = no first_valid_uid = 89 log_path = /var/log/dovecot.log login_greeting = Dovecot toaster ready. namespace { inbox = yes location = prefix = INBOX. separator = . type = private } namespace { location = maildir:/home/vpopmail/domains/mydomain.com/shared/projects prefix = projects. separator = . type = public } passdb { args = cache_key=%u webmail=127.0.0.1 driver = vpopmail } plugin/quota = maildir protocols = imap ssl_cert = </var/qmail/control/servercert.pem ssl_key = </var/qmail/control/servercert.pem userdb { args = cache_key=%u quota_template=quota_rule=*:backend=%q driver = vpopmail } protocol imap { imap_client_workarounds = delay-newmail }

2 3

[Dovecot] Problems sending email direct into publich folders
by Bohlken, Henning 19 Jan '12

19 Jan '12

Hi, i want to send mails direct into a public folder. If i send an email via my local postfix the mail will be handled as a normal private mail. Dovecot does create a mailbox in the private Namespace and do use not the mailbox in public one. I hope you can help me with my little problem. Here sone informations about my configuration: [root@imap1 etc]# ls -la /var/dovecot/imap/public/ insgesamt 16 drwxr-x--- 3 vmail vmail 4096 19. Jan 10:12 . drwxr-x--- 5 vmail vmail 4096 18. Jan 08:41 .. -rw-r----- 1 vmail vmail 0 19. Jan 10:11 dovecot-acl-list -rw-r----- 1 vmail vmail 8 19. Jan 10:12 dovecot-uidvalidity -r--r--r-- 1 vmail vmail 0 19. Jan 10:12 dovecot-uidvalidity.4f17de84 drwx------ 5 vmail vmail 4096 19. Jan 10:12 .hrztest and here is me configuration: # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-220.2.1.el6.i686 i686 Red Hat Enterprise Linux Server release 6.2 (Santiago) auth_username_format = %Ln disable_plaintext_auth = no login_greeting = Dovecot IMAP der Jade Hochschule. mail_access_groups = vmail mail_debug = yes mail_gid = vmail mail_plugins = quota acl mail_uid = vmail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date imapflags notify mbox_write_locks = fcntl namespace { inbox = yes location = maildir:/var/dovecot/imap/%1n/%n prefix = separator = / type = private } namespace { list = children location = maildir:/var/dovecot/imap/public/ prefix = public/ separator = / subscriptions = no type = public } passdb { args = /etc/dovecot/dovecot-ldap.conf driver = ldap } passdb { driver = pam } plugin { acl = vfile acl_shared_dict = file:/var/lib/dovecot/shared-mailboxes mail_log_fields = uid box msgid size quota = dict:user::file:/var/dovecot/imap/%1n/%n/dovecot-quota quota_rule = *:storage=50MB quota_rule2 = Trash:storage=+10% sieve = /var/dovecot/imap/%1n/%n/.dovecot.sieve sieve_dir = /var/dovecot/imap/%1n/%n/sieve sieve_extensions = +notify +imapflags sieve_quota_max_scripts = 2 } postmaster_address = postmaster(a)jade-hs.de protocols = imap pop3 lmtp sieve service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { group = postfix mode = 0660 user = postfix } } service managesieve-login { inet_listener sieve { port = 4190 } } ssl_cert = </etc/pki/dovecot/certs/dovecot.pem ssl_key = </etc/pki/dovecot/private/dovecot.pem userdb { args = uid=501 gid=502 home=/home/vmail/%n allow_all_users=yes driver = static } userdb { driver = passwd } protocol lmtp { mail_plugins = quota acl sieve } protocol imap { mail_plugins = quota acl imap_quota } protocol pop3 { pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_uidl_format = %08Xu%08Xv } -- HS Wilhelmshaven/Oldenburg/Elsfleth Jade Hochschule Hochschulrechenzentrum Dipl.-Ing. Henning Bohlken Friedrich-Paffrath-Str. 101 26389 Wilhelmshaven

2 1

[Dovecot] Storing passwords encrypted... bcrypt?
by Charles Marcus 19 Jan '12

19 Jan '12

Hi everyone, Was just perusing this article about how trivial it is to decrypt passwords that are stored using most (standard) encryption methods (like MD5), and was wondering - is it possible to use bcrypt with dovecot+postfix+mysql (or posgres)? -- Best regards, Charles

12 39

[Dovecot] MASTER_AUTH_MAX_DATA_SIZE
by Mike Abbott 19 Jan '12

19 Jan '12

In 2.0.17 you increased LOGIN_MAX_INBUF_SIZE from 1024 to 4096. Should you also have increased MASTER_AUTH_MAX_DATA_SIZE from (1024*2) to (4096*2)? /* This should be kept in sync with LOGIN_MAX_INBUF_SIZE. Multiply it by two to make sure there's space to transfer the command tag */

2 2

Re: [Dovecot] shared folder files not displaying in thunderbird
by Eric Broch 19 Jan '12

19 Jan '12

Can anyone help me figure out why email in a sub-folder (created using Thunderbird) of a dovecot namespace will not display in Thunderbird? ... Hello, I have dovecot installed with the configuration below. One of the subfolders created (using the email client) under the '/home/vpopmail/domains/mydomain.com/shared/projects' share no longer (it used to) displays the files located in it. There are about 150 folders under the '/home/vpopmail/domains/mydomain.com/shared/projects' share all of which display the files located in them, the one mentioned used to display the contents but no longer does. What would be the reason that one folder would no longer display existing files in the email client (Thunderbird) and the other folders would? And, how do I fix this? I've already tried unsubscribing and resubscribing the folder. This did not work. Would it now be simply a matter of unsubscribing the folder, deleting the dovecot files, and resubscribing to the folder? Eric # 2.0.11: /etc/dovecot/dovecot.conf # OS: Linux 2.6.18-238.19.1.el5 i686 CentOS release 5.7 (Final) auth_cache_size = 32 M auth_mechanisms = plain login digest-md5 cram-md5 auth_username_format = %Lu disable_plaintext_auth = no first_valid_uid = 89 log_path = /var/log/dovecot.log login_greeting = Dovecot toaster ready. namespace { inbox = yes location = prefix = INBOX. separator = . type = private } namespace { location = maildir:/home/vpopmail/domains/mydomain.com/shared/projects prefix = projects. separator = . type = public } passdb { args = cache_key=%u webmail=127.0.0.1 driver = vpopmail } plugin/quota = maildir protocols = imap ssl_cert = </var/qmail/control/servercert.pem ssl_key = </var/qmail/control/servercert.pem userdb { args = cache_key=%u quota_template=quota_rule=*:backend=%q driver = vpopmail } protocol imap { imap_client_workarounds = delay-newmail }

1 0