- dovecot - dovecot.org

[Dovecot] Dovecot SASL for postfix: Client host rejected: when relaying using POP mail client
by Nad 03 May '07

03 May '07

Hi everyone I have setup an ISP style mail system using postfix, dovecot, squirrelmail and mysql on ubuntu server 7.04. Everything seems to be working fine with sending recieving emails but relaying on submission service (port 587). I want to allow any client to be able to relay as long as they AUTH using dovecot SASL and are valid users regardless of what IP/host they come in from. I have a feeling that the submission service is not able to make use of dovecot sasl-auth. Here is what I have in my master.cf to enable submission service: submission inet n - - - - smtpd -o smtpd_enforce_tls=no -o smtpd_sasl_auth_enable=yes -o smtpd_client_restrictions=permit_sasl_authenticated,reject My main.cf file looks like this: queue_directory = /var/spool/postfix command_directory = /usr/sbin daemon_directory = /usr/lib/postfix mail_owner = postfix myhostname = mail.domainname.tld mydomain = domainname.tld myorigin = $myhostname inet_interfaces = $myhostname inet_protocols = ipv4 mydestination = $myhostname unknown_local_recipient_reject_code = 550 mynetworks_style = host mynetworks = aa.bb.cc.dd relay_domains = $mydestination alias_maps = hash:/etc/aliases alias_database = hash:/etc/aliases sendmail_path = /usr/sbin/sendmail newaliases_path = /usr/bin/newaliases mailq_path = /usr/bin/mailq setgid_group = postdrop transport_maps = proxy:mysql:/etc/postfix/mysql/transports.cf virtual_mailbox_domains = proxy:mysql:/etc/postfix/mysql/domains.cf virtual_mailbox_base = /srv/mail virtual_mailbox_maps = proxy:mysql:/etc/postfix/mysql/accounts.cf virtual_alias_maps = proxy:mysql:/etc/postfix/mysql/forwardings.cf, proxy:mysql:/etc/postfix/mysql/emails.cf virtual_minimum_uid = 8 virtual_uid_maps = static:8 virtual_gid_maps = static:8 dovecot_destination_recipient_limit = 1 smtpd_use_tls = no smtpd_sasl_auth_enable = yes smtpd_sasl_security_options = noanonymous broken_sasl_auth_clients = yes smtpd_sasl_type = dovecot smtpd_sasl_path = private/auth strict_rfc821_envelopes = yes smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination, reject_non_fqdn_recipient, reject_unknown_recipient_domain When I try to relay using Outlook, I see the following message in the mail.log: May 3 00:36:33 mail postfix/smtpd[10004]: connect from cable.company.client.hostname.com[12.34.56.78] May 3 00:36:33 mail postfix/smtpd[10004]: NOQUEUE: reject: RCPT from cable.company.client.hostname.com[12.34.56.78]: 554 5.7.1 <cable.company.client.hostname.com[12.34.56.78]>: Client host rejected: Access denied; from=<postfixuser(a)domainname.tld> to=<someone(a)anotherdomainname.tld> proto=ESMTP helo=<mycomputer> May 3 00:36:33 mail postfix/smtpd[10004]: disconnect from cable.company.client.hostname.com[12.34.56.78] May 3 00:36:33 mail dovecot: pop3-login: Login: user=<postfixuser(a)domainname.tld>, method=PLAIN, rip=12.34.56.78, lip=aa.bb.cc.dd May 3 00:36:33 mail dovecot: POP3(postfixuser(a)domainname.tld): Disconnected: Logged out top=0/0, retr=0/0, del=0/626, size=27305010 I have tried several options for the last 2 days but have not been able to get past in relaying email for valid-users from any/all client hosts. Any help is much appreciated. Thanks in advance. N

2 1

[Dovecot] connecting postfix with dovecot trouble
by André Höpner 03 May '07

03 May '07

Hello listmembers, we have some trouble connecting postfix to dovecot. after a lot of hours the transport and delivery is working but dovecot can't get the correct user. postmap -q some.user(a)domain.com ldap:/etc/postfix/ldap-aliases.cf first returns: someuser The mailbox someuser exists and i can login with this user on imap and i can deliver directly using deliver -d but on mail delivery thrue postfix dovecot is not looking for someuser. It looks for someuser(a)host.domain.com. ---8<------ May 3 16:18:42 mail postfix/pickup[24686]: C94251DB23E: uid=0 from=<root> May 3 16:18:42 mail postfix/cleanup[24769]: C94251DB23E: message-id=<20070503161842.C94251DB23E(a)host.domain.com> May 3 16:18:42 mail postfix/qmgr[24544]: C94251DB23E: from=<root(a)host.domain.com>, size=322, nrcpt=1 (queue active) May 3 16:18:42 mail dovecot: auth(default): master in: USER 1 someuser(a)host.domain.com service=deliver May 3 16:18:42 mail dovecot: auth(default): ldap(someuser(a)host.domain.com): user search: base=dc=domain,dc=com scope=subtree filter=(&(objectClass=posixAccount)(uid=someuser(a)host.domain.com)) fields=mail,homeDirectory May 3 16:18:42 mail dovecot: auth(default): master out: USER 1 someuser(a)host.domain.com home=/var/mail/dovecot/someuser uid=100 gid=12 May 3 16:18:42 mail postfix/pipe[24772]: C94251DB23E: to=<someuser(a)host.domain.com>, orig_to=<some.user(a)domain.com>, relay=dovecot, delay=0.04, delays=0.02/0.01/0/0.02, dsn=2.0.0, status=sent (delivered via dovecot service) May 3 16:18:42 mail postfix/qmgr[24544]: C94251DB23E: removed ---8<------ It seems that postfix or dovecot appends the hostname to the mailboxname. But i cant figure out which of both. If i change the uid to someuser(a)hostname.domain.com on ldap-server anything works fine. how can i fix this? i dont know if anyone needs config files for diagnostic. if so - please tell me and i post the needed informations. best regards Andre Hoepner

2 1

[Dovecot] upgrading to dovecot 1.0
by aza zel 03 May '07

03 May '07

hi, i'm using dovecot 1.0 rc26 and i want to upgrade to dovecot 1.0; i want to know if i must uninstall previus version or i can install overriding prevus install . Thanks in advance!!!

3 4

[Dovecot] Any plans for storing messages on a database?
by Francisco Reyes 03 May '07

03 May '07

Redudancy and recovering from a mailstore failure is one of the concerns I am trying to address where I work. Any plans to have Dovecot store emails in a database? NAS/SAN devices which do automatic replication to a second device are extremely expensive. I also don't see any distributed filesystem which is mature and available for the OS we use (FreeBSD). I recall at one point, many months back, Timo mentioned that perhaps storing the messages in the database was a possibility for the future. Any additional thoughts on this?

5 9

[Dovecot] usedb query
by M1 03 May '07

03 May '07

I can specified two passdb so I can mix auth source. Can I do similar thing with userdb? I would like to have uid, gid and home from static and quota from sql. Regards, Steve

2 1

[Dovecot] dovecot 1.0, namespace & mbox
by Stefan Klatt 03 May '07

03 May '07

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, >i try to use a new namespace with mbox parallel to my working maildir >configuration. > >With this i have a few interesting effects: > >- dovecot doesn't use the CONTROL statement and generate a >.subscriptions file at the namespace directory. The INDEX statement is >used. > >- dovecot can work with subdirectories even mbox is used > >- I can't work with namespaces under Thunderbird till i have a mbox >filemanually there. an subscription or construction of a new mbox >file isn't possible :-( but this seems like one of the (handling?) bugs >of Thunderbird > >- Why can't i delete a Folder at an namespace? Dovecot complains "Can't >rename mailbox to another storage type". Probably this is only a config >issue. > >- if i use as the first character for the prefix an # like #Archiv >dovecot dosen't recognize the complete prefix statement at this >namespace. The output of "dovecot -n" is the same except the prefix >statement. >I thought # is a legal character? A folder can start with it. > >Any ideas ?? Has really nobody any idea for this? Has anybody read my emails on this lists? Mfg. Stefan Klatt - -- CaC, Computer and Communication Inhaber Stefan Klatt Triftstrasse 9 60528 Frankfurt Germany Tel.: +49-(0)172-6807809 Tel.: +49-(0)69-67808-900 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFGOSFR+AkeCg4UPr4RApZHAKC4Qtt85CHeabB+Piz/Qwd7M7jFqgCfbuUP zG/8WufZz/juw2oO5A4qfz8= =aO1B -----END PGP SIGNATURE-----

1 0

[Dovecot] 200 pop3-login processes
by Zbigniew Szalbot 03 May '07

03 May '07

Dear all, I am using dovecot 1.0.0 and have only 5 pop3 users. However, I have counted over 200 pop3-loging processes. I just wonder if it is normal for dovecot (has been running maybe for 2-3 weeks after installing the stable verion). Thanks! -- Zbigniew Szalbot

2 1

[Dovecot] Migrate from mlbox to maildir, lock problem
by Sylvain Nemtua 02 May '07

02 May '07

Hi We've been using dovecot successufly for few month. Previous setup : solaris 8, postfix+LDA, mbox + index on NFS (Netapp), 2500 accounts Everything shared overs NFS, multiple servers connect to index, mbox. mail_location = mbox:/var/mail/mbox/%u:INBOX=/var/mail/%u:INDEX=/var/mail/indexes_dovecot/%u We had at first some issue with mbox locking, using lock_method = dotlock solve the issue. The problem seemed to be with fcntl. I Migrate to maildir to ease administration to use maildir quota I use mb2md-3.20.pl to migrate the mbox everything works smooth. Actual setup : solaris 8, postfix+LDA, maildir + index + control on NFS (Netapp) I change the mail_location settings to mail_location = maildir:/var/mail/maildir/%u:INDEX=/var/mail/indexes_dovecot/%u:CONTROL=/var/mail/dovecot_control/%u And now I'm facing new locking issue : Errors on user loging, users leaving mail on server downloading the same mail over and over. Numerous entries in log files : May 2 11:19:03 gregorie dovecot: [ID 107833 mail.error] POP3(carini): Maildir /var/mail/maildir/carini sync: UID inserted in the middle of mailbox (13 > 1, file = 1178097228.P16222Q0M452645.yder,S=22935:2,) May 2 11:19:03 gregorie dovecot: [ID 107833 mail.info] POP3(carini): Disconnected: Mailbox is in inconsistent state. top=0/0, retr=0/0, del=0/0, s ize=0 May 2 11:19:03 gregorie dovecot: [ID 107833 mail.error] POP3(carini): Couldn't init INBOX: Internal error occurred. Refer to server log for more i nformation. [2007-05-02 11:19:01] Seems to be locking issue, numerous .nfs files in INDEX & CONTROL location The maildirsize & dovecot-uidlist files aren't update properly Does the patch posted here still apply ? http://dovecot.org/list/dovecot/2006-December/018145.html Is the any ls -lai ../dovecot_control/carini total 168 1241498 drwx------ 3 carini 10008 4096 May 2 08:38 . 2194825 drwxrwxrwx 890 root mail 69632 May 2 12:02 .. 2272724 drwx------ 2 carini 10008 4096 May 2 12:09 .INBOX 1600612 -rw------- 1 carini 10008 31 May 1 00:16 .nfs70B454 874201 -rw------- 1 carini 10008 31 May 2 05:02 .nfs976604 257061 -rw------- 1 carini 10008 30 May 1 10:15 .nfsB57E54 319327 -rw------- 1 carini 10008 31 Apr 30 13:03 .nfsD66BD3 319326 -rw------- 1 carini 10008 25 Apr 30 11:58 .nfsDA3144 874204 -rw------- 1 carini 10008 144 May 2 12:09 maildirsize root@gregorie-/var/mail/maildir# ls -lai ../dovecot_control/carini/.INBOX/ total 72 2272724 drwx------ 2 carini 10008 4096 May 2 12:09 . 1241498 drwx------ 3 carini 10008 4096 May 2 08:38 .. 1648711 -rw------- 1 carini 10008 369 May 2 09:38 .nfs05BB04 1539511 -rw------- 1 carini 10008 58 Apr 30 13:03 .nfs076BD3 1648718 -rw------- 1 carini 10008 101 May 2 12:04 .nfs16A114 1648715 -rw------- 1 carini 10008 101 May 2 11:13 .nfs4A5F04 1539510 -rw------- 1 carini 10008 56 Apr 30 11:58 .nfs8B3144 1648714 -rw------- 1 carini 10008 149 May 2 11:45 .nfs97B014 1648716 -rw------- 1 carini 10008 100 May 2 11:23 .nfs9EAF04 2165940 -rw------- 1 carini 10008 58 May 1 00:16 .nfsA0B454 1648710 -rw------- 1 carini 10008 56 May 2 05:02 .nfsC76604 1648713 -rw------- 1 carini 10008 105 May 2 09:44 .nfsCF0D74 1648712 -rw------- 1 carini 10008 154 May 2 09:55 .nfsD62C04 1654025 -rw------- 1 carini 10008 57 May 1 10:15 .nfsF67E54 1648717 -rw------- 1 carini 10008 58 May 2 12:04 dovecot-uidlist thanks for your help sylvain nemtua

1 1

[Dovecot] How to use option allow_nets?
by Bernd Kuhls 02 May '07

02 May '07

Hi, according to http://wiki.dovecot.fi/PasswordDatabase/ExtraFields/AllowNets there exists an option allow_nets to restrict IP ranges from where users are allowed to login to Dovecot. I am using Debian Etch with the official Dovecot packages: # dpkg -l | grep dovecot ii dovecot-common 1.0.rc15-2 ii dovecot-imapd 1.0.rc15-2 ii dovecot-pop3d 1.0.rc15-2 using a mostly unchanged dovecot.conf. I tried to add the line allow_nets=127.0.0.0/8,192.168.0.0/16 in the block passdb pam { which is the default enabled auth code in Debian. When starting Dovecot I get this error message: # /etc/init.d/dovecot start Starting mail server: dovecot Error: Error in configuration file /etc/dovecot/dovecot.conf line 777: Unknown setting: allow_nets According to the Dovecot changelog > 2006-02-27 18:46 Timo Sirainen <timo.sirainen(a)movial.fi> > > * src/auth/: auth-request.c, auth-request.h: Added "allow_nets" > extra field. If set, the user can log in only from within the > given networks (hope the code is correct...) the option exists since February 2006, while the Debian package was released in December 2006. What I am doing wrong? Using TCP wrappers instead seems not to be an option according to http://dovecot.org/list/dovecot/2006-April/012476.html Greetings, Bernd Kuhls

2 1

[Dovecot] Best authentication option
by Eric 02 May '07

02 May '07

Dear Dovecot experts, I have a small home server debian based, with postfix/dovecot/squirrelmail installed locally and working. Dovecot is used non-secured (no imaps) but only on the 192.168.0.100 address (address of the server on the local network). I want to use squirrelmail to read my email from outside. Squirrelmail can configured to access it in particular, either through cram-md5 or login auths. In that situation, is it better (I mean more secure) to use : 1) auth mechanim = cram-md5 or 2) auth mechanism = plain (using PAM authentication for dovecot) ? That will determine my dovecot configuration. Thank you Eric

3 3