- dovecot - dovecot.org

[Dovecot] Dovecot pop3 and SonicWall?
by Brandon Lamb 29 Oct '08

29 Oct '08

Hello Has anyone else run into a problem with dovecot pop3 and sonicwall? A week after switching to dovecot we had two local customers call and report they could no longer download emails with attachments. It turned out to be the email macro filter on the router. After the first report I thought maybe the customer had just changed something or it was a fluke, but then a day later we had the second call with the same issue. For some reason, after us switching the sonicwall's email macro filter was catching any attachments as a threat. I couldnt see how changing pop3 servers could affect that, but I guess anything is possible. I just emailed sonicwall and am waiting for a response from them now as well. Hopefully maybe someone has heard of this before. Unfortunately, I dont know if this was pure coincidence, or if both customers happened to have updated their sonicwall software, or maybe it autoupdates, I have no information on it.Of course to them it looks like we broke it. We just had them both turn this rule off for now.

2 1

[Dovecot] Panic: pop3-login: file sasl-server.c: line 75 (authenticate_callback): assertion failed: (client->auth_request == request)
by Mike Abbott 29 Oct '08

29 Oct '08

Running Dovecot-1.1.5, I see this assertion failure: Panic: pop3-login: file sasl-server.c: line 75 (authenticate_callback): assertion failed: (client->auth_request == request) Error: pop3-login: Raw backtrace: 2 pop3-login 0x000000010000ac41 default_fatal_finish + 41 -> 3 pop3-login 0x000000010000acac i_syslog_fatal_handler + 0 -> 4 pop3-login 0x000000010000a446 i_info + 0 -> 5 pop3-login 0x00000001000053a2 authenticate_callback + 126 -> 6 pop3-login 0x000000010000841c auth_client_input_fail + 280 -> 7 pop3-login 0x0000000100007910 auth_client_input + 358 -> 8 pop3-login 0x000000010000e074 io_loop_handler_run + 272 -> 9 pop3-login 0x000000010000d449 io_loop_run + 38 -> 10 pop3-login 0x0000000100004864 main + 1572 -> 11 pop3-login 0x00000001000012fc start + 52 Error: child 1302 (login) killed with signal 6 This happens when I feed multiple user/pass lines to Dovecot all at once like this: $ telnet gromit 110 Connected. Escape character is '^]'. +OK Dovecot ready. user x pass y user x pass y +OK +OK Connection closed by foreign host. The four user/pass lines I pasted in all at once. IMAP login does not crash when presented with multiple login commands, but it does not read them all at once and needs prodding (in the form of extra command lines sent later on) to read them. Actually it appears to read the first two lines then stops reading until more data comes in: $ telnet gromit 143 Connected. Escape character is '^]'. * OK Dovecot ready. a login a b b login c d c login e f d login g h e login i j a NO Authentication failed. b NO Authentication failed. c NO Authentication failed. d NO Authentication failed. e NO Authentication failed. * BAD Error in IMAP command received by server. * BAD Error in IMAP command received by server. * BAD Error in IMAP command received by server. * BAD Error in IMAP command received by server. ^] telnet> q Connection closed. You probably don't care about the odd imap-login behavior, but I tried it and mentioned it just for completeness after seeing pop3-login crash.

2 1

[Dovecot] Best configuration of dovecot for limit Outlook problems with IMAP
by Alessio Cecchi 29 Oct '08

29 Oct '08

Hi, in some installation where users using IMAP and Outlook Express I have some problems. Outolook randomly presents problems in messages retrieving, for example: "Outlook Express is unable to retrieve the requested message because the server no longer has the message available.... server response: Fecth Completed" or "Message could not be displayed" error message when I try to view an Outlook Express e-mail message I'm using dovecot 1.1.4 with qmail and vpopmail. This is my dovecot configure options: ./configure --prefix=/usr --sysconfdir=/etc/dovecot --localstatedir=/var --with-ssldir=/etc/ssl and this my dovecot config: # dovecot -n # 1.1.4: /etc/dovecot/dovecot.conf log_path: /var/log/dovecot/dovecot-err.log info_log_path: /var/log/dovecot/dovecot.log ssl_cert_file: /etc/apache2/ssl/comun.crt ssl_key_file: /etc/apache2/ssl/comun.key disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable: /usr/libexec/dovecot/imap-login login_greeting: Ready login_process_per_connection: no first_valid_uid: 89 last_valid_uid: 89 first_valid_gid: 89 last_valid_gid: 89 mail_uid: 89 mail_gid: 89 mail_location: maildir:~/Maildir mail_debug: yes mail_plugins: quota imap_quota imap_client_workarounds: outlook-idle delay-newmail namespace: type: private separator: . prefix: INBOX. inbox: yes list: yes subscriptions: yes auth default: verbose: yes debug: yes passdb: driver: checkpassword args: /home/vpopmail/bin/vchkpw userdb: driver: prefetch args: uid=89 gid=89 home=/home/vpopmail/domains/%d/%u plugin: quota: maildir What further changes to the configuration of dovecot could I do? Do you have other suggestions? Thanks -- Alessio Cecchi is: @ ILS -> http://www.linux.it/~alessice/ Assistenza Sistemi GNU/Linux -> http://www.cecchi.biz/ @ PLUG -> ex-Presidente, adesso senatore a vita, http://www.prato.linux.it @ LOLUG -> neo-Socio http://www.lolug.net

4 4

[Dovecot] Dovecot and quota enforcement - only reporting?
by dovecot＠corwyn.net 29 Oct '08

29 Oct '08

I'm currently setting up postfix and dovecot with virtual users (mysql), imap, and quotas. I'm setting the quotas using mysql. I have quotas working correctly, and I can telnet into the imap server, and submit . getquotaroot inbox and get back valid quota information. I get a maildirsize file in the Maildir directory. Very cool. When I delete mail and expunge it, the quota updates. However, inbound email doesn't appear to update the quota. Two questions, probably related: What causes the quota (which I presume is the maildirsize file) to update? Is there any actual quota enforcement, or just reporting? Because if I send mail to an account, even if it currently reporting (via maildirsize or . getquotaroot) that the user is over quota, they still can send and receive email. Thanks! Rick Rick Steeves http://www.sinister.net "The journey is the destination"

4 7

[Dovecot] mail_location: mbox: mkdir failed
by Albert E. Whale 29 Oct '08

29 Oct '08

Is there an automatic solution to this? Oct 27 08:00:48 192.168.50.5 dovecot: POP3(evelina2): mail_location: mbox: mkdir(/home/popuser_evelina2/mail) failed: Permission denied Oct 27 08:00:48 192.168.50.5 dovecot: Fatal: POP3(evelina2): Namespace initialization failed Oct 27 08:00:51 192.168.50.5 dovecot: POP3(evelina2): mail_location: mbox: mkdir(/home/popuser_evelina2/mail) failed: Permission denied Oct 27 08:00:51 192.168.50.5 dovecot: Fatal: POP3(evelina2): Namespace initialization failed -- Albert E. Whale, CHS CISA CISSP Sr. Security, Network, Risk Assessment and Systems Consultant ------------------------------------------------------------------------ ABS Computer Technology, Inc. <http://www.ABS-CompTech.com> - Email, Internet and Security Consultants SPAMZapper <http://www.Spam-Zapper.com> - No-JunkMail.com <http://www.No-JunkMail.com> - *True Spam Elimination*.

2 5

[Dovecot] Authentication Error Message formats
by Albert E. Whale 29 Oct '08

29 Oct '08

I have been using UW's IMAP server and I am converting to Dovecot for Maildir support. When a user fails authentication, or a user does not exist, it appears that the same message is used for these events. Is there a way to indicate that the user does not exist (Invalid user), and authentication Failure (Failed Password)? Clearly these two failures indicate a different error in the system. One that some forgot their password, the other indicates a dictionary attack. -- Albert E. Whale, CHS CISA CISSP Sr. Security, Network, Risk Assessment and Systems Consultant ------------------------------------------------------------------------ ABS Computer Technology, Inc. <http://www.ABS-CompTech.com> - Email, Internet and Security Consultants SPAMZapper <http://www.Spam-Zapper.com> - No-JunkMail.com <http://www.No-JunkMail.com> - *True Spam Elimination*.

3 5

[Dovecot] Empty/corrupt mail leads to duplicate delivery
by Marc Herbrechter 29 Oct '08

29 Oct '08

Hi, when the attached mail was stored in a maildir, fetching mail via POP3 lead to multiple delivery of mails in that maildir to the client (Outlook). I replaced the domain with dots. This is the dovecot configuration: --snip-- protocols = imap imaps pop3 pop3s listen = * disable_plaintext_auth = no ssl_cert_file = /etc/ssl/dovecot/server.pem ssl_key_file = /etc/ssl/dovecot/server.key mail_location = maildir:~/.maildir protocol pop3 { pop3_uidl_format = %08Xu%08Xv } auth default { mechanisms = plain passdb pam { args = "*" } userdb passwd { } user = root socket listen { client { path = /var/spool/postfix/private/auth mode = 0660 user = postfix group = postfix } } } --snip-- Version: dovecot-1.1.4-r1 (Gentoo) Gentoo applies the attached "expire" patch. I tried to reproduce the behavior, but when I send an empty mail via telnet, nothing happens. The box is running Amavis, don't know if that helps. -- Mit freundlichen Grüßen, with kind regards, Marc Herbrechter <mh(a)zebroc.de>

2 1

[Dovecot] Keep the email on the server
by Rubens A. Mascari 29 Oct '08

29 Oct '08

Hello, I migrate my server POP3/IMAP recently the Courier-IMAP for Dovecot and am having problems when the user configures your e-mail client to leave a copy of mail on the server. All mail in the inbox, are brought all the time that you check your mailbox input via POP3, causing a large traffic of unnecessary data every time. In my opinion you should bring only the new mail, unread. Can you tell me if this is a configuration issue on Dovecot? Thank you all -- Att. Rubens Aurelio Mascari ..................................... _ Linux & Internet Developer .... ICQ# 2730907 ............... °v° Odara Internet LTDA............ (44) 3226-3662 ............. /(_)\ Maringá - Paraná .............. http://www.odara.com.br .... ^ ^ ______.-""-.__ QuEm TeM o CoNhEcImEnTo TeM o PoDeR __.-""-._______

3 3

[Dovecot] POP3 auth failures
by CJ Keist 29 Oct '08

29 Oct '08

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Have a strange problem with just POP3 users. Their email clients will fail every so often with the following: Logging into POP Server, PASS [09:16:29 PM] There has been an error transferring your mail. I said PASS <shhhh! Don't tell anyone.> and then the POP server (user(a)mail.engr.colostate.edu) said: ERR Authentication failed. This example is from a Eudora client, but same things happen with Thunderbird and Outlook. Here are logs. This user has his client checking every 10 minutes. First log entry here is last good one before it fails: Oct 28 21:06:27 goku dovecot: [ID 107833 mail.info] auth(default): client in: AUTH 1 PLAIN service=pop3 secured lip=129.82.224.16 rip=129.82.224.206 lport=110 rport=3716 resp=<hidden>Oct 28 21:06:27 goku dovecot: [ID 107833 mail.info] auth-worker(default): pam(us er,129.82.224.206): lookup service=dovecotOct 28 21:06:27 goku dovecot: [ID 107833 mail.info] auth-worker(default): pam(us er,129.82.224.206): #1/1 style=1 msg=Password:Oct 28 21:06:27 goku dovecot: [ID 107833 mail.info] auth(default): client out: O K 1 user=user Oct 28 21:06:27 goku dovecot: [ID 107833 mail.info] auth(default): master in: REQUEST 387983 2809 1 Oct 28 21:06:27 goku dovecot: [ID 107833 mail.info] auth-worker(default): passwd(user,129.82.224.206): lookup Oct 28 21:06:27 goku dovecot: [ID 107833 mail.info] auth(default): master out: USER 387983 user system_user=user uid=12550 gid=32 home=/to p/admin/ENS/people/user/home Oct 28 21:06:27 goku dovecot: [ID 107833 mail.info] pop3-login: Login: user=<use r>, method=PLAIN, rip=129.82.224.206, lip=129.82.224.16, TLS Oct 28 21:06:27 goku dovecot: [ID 107833 mail.info] POP3(user): Effective uid=12 550, gid=32 Everything went fine here, then the next auth attempt fails: Oct 28 21:16:27 goku dovecot: [ID 107833 mail.info] auth(default): client in: AUTH 1 PLAIN service=pop3 secured lip=129.82.224.16 rip=129.82.224.206 lport=110 rport=3757 resp=<hidden>Oct 28 21:16:27 goku dovecot: [ID 107833 mail.info] auth-worker(default): pam(user,129.82.224.206): lookup service=dovecotOct 28 21:16:27 goku dovecot: [ID 107833 mail.info] auth-worker(default): pam(user,129.82.224.206): #1/1 style=1 msg=Password:Oct 28 21:16:27 goku dovecot: [ID 107833 mail.error] auth-worker(default): pam(user,129.82.224.206): pam_authenticate() failed: No account present for user Oct 28 21:16:27 goku dovecot: [ID 107833 mail.info] auth-worker(default): passwd(user,129.82.224.206): lookup Oct 28 21:16:27 goku dovecot: [ID 107833 mail.info] auth-worker(default): passwd(user,129.82.224.206): Password mismatch Running dovecot 1.1.3 on Solaris 10 goku % ./dovecot -n # 1.1.3: /userM/mail-services/dovecot/etc/dovecot.conf Warning: fd limit 256 is lower than what Dovecot can use under full load (more than 3072). Either grow the limit or change login_max_processes_count and max_mail_processes settings base_dir: /userM/mail-services/dovecot/var/run/dovecot/ protocols: imap imaps pop3 pop3s ssl_cert_file: /userM/mail-services/dovecot/etc/ssl/dovecot.pem ssl_key_file: /userM/mail-services/dovecot/etc/ssl/privkey.pem ssl_parameters_regenerate: 0 ssl_cipher_list: MEDIUM:!LOW disable_plaintext_auth: no login_dir: /userM/mail-services/dovecot/var/run/dovecot/login login_executable(default): /userM/mail-services/dovecot/libexec/dovecot/imap-login login_executable(imap): /userM/mail-services/dovecot/libexec/dovecot/imap-login login_executable(pop3): /userM/mail-services/dovecot/libexec/dovecot/pop3-login login_greeting: Cyrus ready. login_max_processes_count: 1024 max_mail_processes: 1024 mail_location: mbox:~/:INBOX=/userM/mail/%u mail_debug: yes mmap_disable: yes mail_nfs_index: yes mbox_write_locks: fcntl dotlock mbox_dotlock_change_timeout: 60 mail_executable(default): /userM/mail-services/dovecot/libexec/dovecot/imap mail_executable(imap): /userM/mail-services/dovecot/libexec/dovecot/imap mail_executable(pop3): /userM/mail-services/dovecot/libexec/dovecot/pop3 mail_plugins(default): convert mail_plugins(imap): convert mail_plugins(pop3): mail_plugin_dir(default): /userM/mail-services/dovecot/lib/dovecot/imap mail_plugin_dir(imap): /userM/mail-services/dovecot/lib/dovecot/imap mail_plugin_dir(pop3): /userM/mail-services/dovecot/lib/dovecot/pop3 auth default: mechanisms: plain login verbose: yes debug: yes worker_max_count: 1024 worker_max_request_count: 20000 passdb: driver: pam passdb: driver: passwd args: blocking=yes userdb: driver: passwd args: blocking=yes socket: type: listen client: path: /var/lib/postfix/private/auth mode: 438 user: postfix group: postfix master: path: /userM/mail-services/dovecot/var/run/dovecot//auth-master mode: 384 plugin: convert_mail: Maildir:~/Maildir:INBOX=/userM/mail/%u - -- C. J. Keist Email: cj.keist(a)colostate.edu UNIX/Network Manager Phone: 970-491-0630 Engineering Network Services Fax: 970-491-5569 College of Engineering, CSU Ft. Collins, CO 80523-1301 All I want is a chance to prove 'Money can't buy happiness' -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFJCHr3A29OFr7C6jcRAsBrAJ4h5f0naC1N4VHIlz4Z9rTWucicNACgxCJx 4lF8xzzBITsoboppIZD37n8= =TIUR -----END PGP SIGNATURE-----

2 1

[Dovecot] Dovecot failing to save email
by toneeedavis＠googlemail.com 29 Oct '08

29 Oct '08

Hi, Just wondered if anyone could help me with an issue im having with a new email server im setting up. These are the errors i have been getting: deliver(user(a)example.com): Oct 29 13:32:13 Info: msgid=< 20081029133208.23302C887A(a)mail.example.com>: save failed to INBOX: Quota exceeded deliver(user(a)example.com): Oct 29 13:32:13 Info: msgid=< 20081029133208.23302C887A(a)mail.example.com>: Rejected: Quota exceeded Dovecot Version - 1.0.15 Using MySQL # 1.0.15: /etc/dovecot.conf ssl_ca_file: /etc/pki/tls/certs/ca-bundle.crt login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login first_valid_uid: 5000 last_valid_uid: 5000 mail_access_groups: mail mail_location: maildir:/var/vmail/%d/%u maildir_copy_with_hardlinks: yes mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugins(default): quota imap_quota mail_plugins(imap): quota imap_quota mail_plugins(pop3): quota mail_plugin_dir(default): /usr/lib/dovecot/imap mail_plugin_dir(imap): /usr/lib/dovecot/imap mail_plugin_dir(pop3): /usr/lib/dovecot/pop3 imap_client_workarounds(default): outlook-idle delay-newmail imap_client_workarounds(imap): outlook-idle delay-newmail imap_client_workarounds(pop3): outlook-idle pop3_client_workarounds(default): pop3_client_workarounds(imap): pop3_client_workarounds(pop3): outlook-no-nuls oe-ns-eoh auth default: mechanisms: plain login user: nobody passdb: driver: sql args: /etc/dovecot/sql.conf userdb: driver: sql args: /etc/dovecot/sql.conf userdb: driver: prefetch socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: mail master: path: /var/run/dovecot/auth-master mode: 432 user: vmail group: mail plugin: #quota: maildir:storage=1000000:messages=1000 acl: vfile:/etc/dovecot/acls trash: /etc/dovecot/trash.conf Kind Regards Tony

2 1