- dovecot - dovecot.org

[Dovecot] problems with postfix->procmail->deliver
by Andy Greenwood 19 Mar '08

19 Mar '08

Hi all. I'm relatively new to Dovecot, but I really like what I'm seeing so far. I have one problem that I was hoping you could help me with though. I use Postfix for my mail server, then pass that on to procmail for filtering, and finally to deliver to put the mail in the appropriate Maildir folder. However, this isn't working. Postfix passes the mail to procmail correctly, but procmail is failing when it tries to call deliver. My system-wide procmailrc matches the lower one shown here: http://wiki.dovecot.org/procmail?highlight=%28procmail%29 which uses deliver. My personal ~/.procmailrc is of similar format :0 * ^List-id:.<beginners.perl.org> #.perl/ | $DELIVER -m perl :0 * ^Sender:.owner.freebsd-\/[^@]+@FreeBSD.ORG { LISTNAME=${MATCH} :0 * LISTNAME??^\/[^@]+ # .freebsd-${MATCH}/ | $DELIVER -m freebsd-${MATCH} } :0 * ^Sender:.owner-cvs-all@freebsd.org #.cvs-all/ | $DELIVER -m cvs-all :0 * ^Delivered-To: greenwood.andy+combackup(a)gmail.com #.work/ | $DELIVER -m work :0 #$HOME/Maildir/ | $DELIVER However, my procmail logs show this error message for every message that comes through: Fatal: destination user parameter (-d user) not given I can see that the variable $DELIVER doesn't use the -d parameter, but I'm not sure on how I would specify the value in a multi-user system. I know I could just use deliver directly from Postfix, but I really want to use the filtering capabilities of procmail. If you need any additional information, just let me know. Thanks in advance for any help you can give, and big thanks for this great piece of software! Andy Greenwood

2 2

[Dovecot] max connects per host?
by subscriber＠viliar.net.ru 19 Mar '08

19 Mar '08

Message: 3 Date: Wed, 19 Mar 2008 09:48:34 +0100 From: Johan Fredin <johan(a)spelaroll.se> Subject: Re: [Dovecot] max connects per host? To: dovecot(a)dovecot.org Message-ID: <47E0D362.9070206(a)spelaroll.se> Content-Type: text/plain; charset=windows-1251; format=flowed I would personally use the operating systems firewall software for this. Seems redundant that every piece of software accepting connections should duplicate the functionality of a firewall. /Johan Yes. In some cases it could be good choice. But in _general_ it's not. It's about functionality of a mail server, isn't so? And how your users will know, what they reached limits and it's not case of broken connection/firewall/network related problems and so on?

1 0

[Dovecot] deliver to namespace using "deliver"
by Nikolay Shopik 19 Mar '08

19 Mar '08

Hi list, I would like to test new functionality in latest 1.1 release, but can't find information on wiki. How can I deliver messages to different namespaces using "deliver"?

2 3

[Dovecot] max connects per host?
by subscriber＠viliar.net.ru 19 Mar '08

19 Mar '08

Hi everyone! I want to manage mail server resource part (like it can CGP) and with it I have one question. Is any way to limit overall max simultaneous connections to imap/pop3 server from one(each) host, except use iptables/ipfw and so on? Like a patch to dovecot or, maybe, it can be released in future versions? I know about mail_max_userip_connections in dovecot 1.1 but it can't limit hosts this way. Thank you.

5 4

[Dovecot] Invalid quota rule using "backend"
by Laurento Frittella 19 Mar '08

19 Mar '08

Using a quota rule like "quota_rule = *:backend=1073741824S" (I'm testing it statically but the value is on LDAP) I receive an an error: Fatal: IMAP(...): Quota root QUOTA: Invalid rule: *:backend=1073741824S Accordingly with the wiki page http://wiki.dovecot.org/Quota/New "Backend-specific configuration currently is used only with Maildir++ quota backend. It means you can have the quota in Maildir++ format (e.g. "10000000S")." so I think it should work. What's wrong? Cheers, Laurento

3 6

[Dovecot] Maildir delete folder error
by Peter Tambach 18 Mar '08

18 Mar '08

I'm getting errors when I try to delete a maildir folder. Dovecot versions 1.0.10, 1.0.13, 1.1.rc1, 1.1,rc3 Error received: "dovecot: Mar 15 15:20:29 Error: IMAP(test(a)mydomain.com): unlink_directory(/home/mail/mydomain.com/test/..DOVECOT-TRASHED) failed: Permission denied" dovecot -n: "# 1.1.rc3: /etc/dovecot/dovecot.conf base_dir: /var/run/dovecot/ log_path: /var/log/dovecot info_log_path: /var/log/dovecot.info protocols: imap pop3 ssl_disable: yes disable_plaintext_auth: no login_dir: /var/run/dovecot/login login_executable(default): /usr/libexec/dovecot/imap-login login_executable(imap): /usr/libexec/dovecot/imap-login login_executable(pop3): /usr/libexec/dovecot/pop3-login login_greeting: Dovecot DA ready. verbose_proctitle: yes first_valid_uid: 100 mail_location: maildir:/home/mail/%d/%n mail_debug: yes mail_executable(default): /usr/libexec/dovecot/imap mail_executable(imap): /usr/libexec/dovecot/imap mail_executable(pop3): /usr/libexec/dovecot/pop3 mail_plugin_dir(default): /usr/lib64/dovecot/imap mail_plugin_dir(imap): /usr/lib64/dovecot/imap mail_plugin_dir(pop3): /usr/lib64/dovecot/pop3 auth default: mechanisms: plain digest-md5 verbose: yes debug: yes passdb: driver: sql args: /etc/dovecot/dovecot-sql.conf userdb: driver: prefetch socket: type: listen client: path: /var/spool/postfix/private/auth mode: 432 user: postfix group: postfix " dovecot-sql.conf: "password_query = SELECT email as user, crypt as password, homedir as userdb_home, uid as userdb_uid, gid as userdb_gid FROM postfix_users WHERE email = '%u'" Directory owners / perms: /home/mail: mail mail 0710 /home/mail/mydomain.com: mydomain mail 0710 /home/mail/mydomain.com/test/ and all contents: mydomain mail, dirs 0700, files 0600 Tried all kinds of things, problem got me stuck for weeks. doesn't want to remove directory. Any help would be appreciated. Greetings, Peter

2 1

[Dovecot] xexec and dovecot 1.1
by subscriber＠viliar.net.ru 18 Mar '08

18 Mar '08

I'll test very interesting plugin xexec. It seems very nice and can be used in many things. It's compiled perfect with dovecot 1.0, but certanly not with dovecot 1.1. It's stopped with next error: In file included from cmd-xexec.c:30: xexec.h:8: error: expected specifier-qualifier-list before 'array_t' cmd-xexec.c: In function 'cmd_xexec': cmd-xexec.c:134: error: 'array_t' undeclared (first use in this function) cmd-xexec.c:134: error: (Each undeclared identifier is reported only once cmd-xexec.c:134: error: for each function it appears in.) cmd-xexec.c:134: error: expected ';' before 'union' I found, that in dovecot 1.1 has been changed some of functions of array init and so on. I'm not programmer :(, just a system admin., but first of all have to check it and trying to resolve by myself. According examples in ../../lib/array.h I removed array_t and this code is seems ok: xexec.h struct xexec { ARRAY_DEFINE(setups, struct xexec_setups *); }; and also here: cmd-xexec.c ARRAY_DEFINE(command, char *); After, errors cames with cmd-xexec.c: In function 'cmd_xexec': cmd-xexec.c:144: warning: passing argument 4 of 'client_read_args' from incompatible pointer type cmd-xexec.c:159: warning: assignment from incompatible pointer type cmd-xexec.c:180: warning: implicit declaration of function 'ARRAY_CREATE' cmd-xexec.c:180: error: expected expression before 'char' As I understand, it is because of (from changelog) Replaced ARRAY_CREATE() macro with [ipt]_array_init() macros. The macro has no side effects so it might as well be lowercased. I have look at the array.h, but can't find appropriate function in list of array_create,i_array_init,p_array_init,t_array_init. Should I just forget about it, until someone adapts code for dovecot 1.1, or maybe it no so complex, as looks? Thank you.

2 1

[Dovecot] Remote resources in kde-pim
by Anne Wilson 18 Mar '08

18 Mar '08

For some time I have been using dovecot to serve imap mail on my LAN. Now I want to add my diary and addressbook in kde-pim. I have got the docs from the kde site, but they talk about cyrus, and I'm not able to translate some bits of the instructions into dovecot ones. For instance, "At cyrus level (in the PC that runs IMAP server cyrus, with cyrus tools), we first need to add the user mary, so it's an IMAP recognised user, and create an IMAP folder for her" Can anyone give me a kickstart on this? On the server box I can see the dimap calendar resource and addressbook resource, so I now need to be able to tell it to allow certain users to access it. This is where I'm coming unstuck, and it looks as though no-one on the kde-pim list has done this with dovecot. Anne

2 1

[Dovecot] [gentoo-announce] [ GLSA 200803-25 ] Dovecot: Multiple vulnerabilities
by Robert Buchholz 18 Mar '08

18 Mar '08

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200803-25 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: Dovecot: Multiple vulnerabilities Date: March 18, 2008 Bugs: #212336, #213030 ID: 200803-25 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======== Two vulnerabilities in Dovecot allow for information disclosure and argument injection. Background ========== Dovecot is a lightweight, fast and easy to configure IMAP and POP3 mail server. Affected packages ================= ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 net-mail/dovecot < 1.0.13-r1 >= 1.0.13-r1 Description =========== Dovecot uses the group configured via the "mail_extra_groups" setting, which should be used to create lockfiles in the /var/mail directory, when accessing arbitrary files (CVE-2008-1199). Dovecot does not escape TAB characters in passwords when saving them, which might allow for argument injection in blocking passdbs such as MySQL, PAM or shadow (CVE-2008-1218). Impact ====== Remote attackers can exploit the first vulnerability to disclose sensitive data, such as the mail of other users, or modify files or directories that are writable by group via a symlink attack. Please note that the "mail_extra_groups" setting is set to the "mail" group by default when the "mbox" USE flag is enabled. The second vulnerability can be abused to inject arguments for internal fields. No exploitation vectors are known for this vulnerability that affect previously stable versions of Dovecot in Gentoo. Workaround ========== There is no known workaround at this time. Resolution ========== All Dovecot users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose ">=net-mail/dovecot-1.0.13-r1" This version removes the "mail_extra_groups" option and introduces a "mail_privileged_group" setting which is handled safely. References ========== [ 1 ] CVE-2008-1199 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1199 [ 2 ] CVE-2008-1218 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1218 Availability ============ This GLSA and any updates to it are available for viewing at the Gentoo Security Website: http://security.gentoo.org/glsa/glsa-200803-25.xml Concerns? ========= Security is a primary focus of Gentoo Linux and ensuring the confidentiality and security of our users machines is of utmost importance to us. Any security concerns should be addressed to security(a)gentoo.org or alternatively, you may file a bug at http://bugs.gentoo.org. License ======= Copyright 2008 Gentoo Foundation, Inc; referenced text belongs to its owner(s). The contents of this document are licensed under the Creative Commons - Attribution / Share Alike license. http://creativecommons.org/licenses/by-sa/2.5

1 0

[Dovecot] A tail of joy...
by Curtis Maloney 17 Mar '08

17 Mar '08

So, I _finally_ got the time to upgrade from 0.99.14 ... which I told myself I'd upgrade from once 1.0 was released... (yep, I've been _that_ busy :) So I read the Wiki page on 0.99->1.0 transition, and went through the config file - for all of about 5 or 10 minutes. I logged in at 11pm when nobody else should be using it, restarted dovecot with the new version, and logged in. Snap snap snap went my folders opening.. wow, so fast! And as I got into work this morning... nobody knew a thing. If I hadn't asked a few people to let me know, nobody would have known a thing. My thanks to you, Timo. Thank you for making my life easier. -- Curtis Maloney cmaloney(a)cardgate.net

2 2