got a listener on 993

Ivo c.e4ed1a035298f9021dcfbca4d511c303 at ultra.hr
Tue Apr 14 11:23:38 EEST 2020


Maybe this thread can help you with your first question :
https://dovecot.org/pipermail/dovecot/2014-August/097488.html


On 13.4.2020. 20:52, David Mehler wrote:
> Hello,
>
> Before I get in to my question is ssl on 993 or starttls on 143 better
> from a security perspective?
>
> I've noticed that I've got a dovecot listener on port 993, below is my
> doveconf -n output I don't have an imaps listener uncommented should I
> do so and set it's port to 0? Will that disable the 993 listener?
> Thanks.
> Dave.
>
> # 2.3.10 (0da0eff44): /usr/local/etc/dovecot/dovecot.conf
> # Pigeonhole version 0.5.10 (bf8ef1c2)
> # OS: FreeBSD 12.1-RELEASE-p2 amd64
> # Hostname: hostname.example.com
> auth_cache_size = 10 M
> auth_default_realm = example.com
> auth_mechanisms = plain login
> auth_realms = example.com
> dict {
>    lastlogin = mysql:/usr/local/etc/dovecot/dovecot-last-login.conf
> }
> first_valid_gid = 2100
> first_valid_uid = 2100
> hostname = hostname.example.com
> imap_client_workarounds = delay-newhostname tb-extra-hostnamebox-sep
> tb-lsub-flags
> imap_idle_notify_interval = 1 mins
> last_valid_gid = 2100
> last_valid_uid = 2100
> lda_hostnamebox_autocreate = yes
> lda_hostnamebox_autosubscribe = yes
> lda_original_recipient_header = X-Original-To
> listen = xxx.xxx.xxx.xxx
> lmtp_rcpt_check_quota = yes
> log_timestamp = "%Y-%m-%d %H:%M:%S "
> hostname_access_groups = vhostname
> hostname_fsync = never
> hostname_gid = vhostname
> hostname_home = /var/vhostname/hostnameboxes/%d/%n
> hostname_location = dbox:~/hostname
> hostname_plugins = acl fts fts_lucene mail_log notify quota trash
> virtual welcome zlib mail_crypt
> hostname_privileged_group = vhostname
> hostname_server_admin = hostnameto:postmaster at example.com
> hostname_uid = vhostname
> managesieve_notify_capability = hostnameto
> managesieve_sieve_capability = fileinto reject envelope
> encoded-character vacation subaddress comparator-i;ascii-numeric
> relational regex imap4flags copy include variables body enotify
> environment hostnamebox date index ihave duplicate mime foreverypart
> extracttext spamtest spamtestplus virustest editheader imapflags
> notify imapsieve vnd.dovecot.imapsieve
> namespace {
>    location = sdbox:/var/vhostname/public/:CONTROL=~/hostname/public:INDEX=~/hostname/public
>    prefix = Public/
>    separator = /
>    subscriptions = yes
>    type = public
> }
> namespace {
>    hidden = no
>    list = yes
>    location = hostnamedir:/var/vhostname/shared/office/.hostnamedir:CONTROL=~/.hostnamedir/control/office:INDEX=~/.hostnamedir/index/office
>    prefix = shared/%%u/
>    separator = /
>    subscriptions = yes
>    type = shared
> }
> namespace inbox {
>    inbox = yes
>    location =
>    hostnamebox Drafts {
>      auto = subscribe
>      special_use = \Drafts
>    }
>    hostnamebox Sent {
>      auto = subscribe
>      special_use = \Sent
>    }
>    hostnamebox Spam {
>      auto = subscribe
>      autoexpunge = 30 days
>      special_use = \Junk
>    }
>    hostnamebox Trash {
>      auto = subscribe
>      autoexpunge = 30 days
>      special_use = \Trash
>    }
>    prefix =
>    separator = /
>    type = private
> }
> passdb {
>    args = /usr/local/etc/dovecot/dovecot-sql.conf.ext
>    driver = sql
> }
> plugin {
>    acl = vfile:/usr/local/etc/dovecot/global-acls:cache_secs=300
>    fts = lucene
>    fts_autoindex = yes
>    fts_autoindex_exclude = \Junk
>    fts_autoindex_exclude2 = \Trash
>    fts_autoindex_exclude3 = \Spam
>    fts_autoindex_max_recent_msgs = 80
>    fts_index_timeout = 90
>    fts_lucene = whitespace_chars=@. normalize no_snowball
>    imapsieve_hostnamebox1_before =
> file:/var/vhostname/sieve/global/learn-spam.sieve
>    imapsieve_hostnamebox1_causes = COPY
>    imapsieve_hostnamebox1_name = Spam
>    imapsieve_hostnamebox2_before =
> file:/var/vhostname/sieve/global/learn-ham.sieve
>    imapsieve_hostnamebox2_causes = COPY
>    imapsieve_hostnamebox2_from = Spam
>    imapsieve_hostnamebox2_name = *
>    last_login_dict = proxy::lastlogin
>    last_login_key = # hidden, use -P to show it
>    hostname_crypt_curve = prime256v1
>    hostname_crypt_global_private_key = # hidden, use -P to show it
>    hostname_crypt_global_public_key = # hidden, use -P to show it
>    hostname_crypt_save_version = 2
>    hostname_log_events = delete undelete expunge copy
> hostnamebox_delete hostnamebox_rename
>    hostname_log_fields = uid box msgid size
>    quota = count:User quota
>    quota_exceeded_message = Storage quota for this account has been
> exceeded, please try again later.
>    quota_grace = 10%%
>    quota_rule2 = Trash:ignore
>    quota_status_nouser = DUNNO
>    quota_status_overquota = 552 5.2.2 hostnamebox is full
>    quota_status_success = DUNNO
>    quota_vsizes = true
>    quota_warning = storage=100%% quota-exceeded 100 %u
>    quota_warning2 = storage=95%% quota-warning 95 %u
>    quota_warning3 = storage=90%% quota-warning 90 %u
>    quota_warning4 = storage=85%% quota-warning 85 %u
>    quota_warning5 = storage=75%% quota-warning 75 %u
>    sieve = file:/var/vhostname/sieve/%d/%n/scripts;active=/var/vhostname/sieve/%d/%n/active-script.sieve
>    sieve_before = /var/vhostname/sieve/global/spam-global.sieve
>    sieve_extensions = +notify +imapflags +spamtest +spamtestplus
> +virustest +editheader
>    sieve_global_extensions = +vnd.dovecot.pipe +vnd.dovecot.execute
> +vnd.dovecot.environment
>    sieve_max_redirects = 30
>    sieve_max_script_size = 1M
>    sieve_pipe_bin_dir = /usr/bin
>    sieve_plugins = sieve_imapsieve sieve_extprograms
>    sieve_spamtest_max_header = X-Spamd-Result: default: [[:alnum:]]+
> \[-?[[:digit:]]+\.[[:digit:]]+ / (-?[[:digit:]]+\.[[:digit:]]+)\]
>    sieve_spamtest_status_header = X-Spamd-Result: default: [[:alnum:]]+
> \[(-?[[:digit:]]+\.[[:digit:]]+) / -?[[:digit:]]+\.[[:digit:]]+\]
>    sieve_spamtest_status_type = score
>    sieve_user_log = /var/vhostname/sieve/sieve_error.log
>    sieve_virustest_status_header = X-Virus-Scan: Found to be (.+)\.
>    sieve_virustest_status_type = text
>    sieve_virustest_text_value1 = clean
>    sieve_virustest_text_value5 = infected
>    trash = /usr/local/etc/dovecot/trash.conf
>    welcome_script = welcome %n postmaster@%d
>    welcome_wait = yes
> }
> postmaster_address = postmaster at example.com
> protocols = imap lmtp sieve
> sendhostname_path = /usr/local/sbin/sendhostname
> service auth-worker {
>    user = vhostname
> }
> service auth {
>    unix_listener /var/spool/postfix/private/auth {
>      group = postfix
>      mode = 0660
>      user = postfix
>    }
>    unix_listener auth-userdb {
>      group = vhostname
>      mode = 0666
>      user = vhostname
>    }
> }
> service dict {
>    unix_listener dict {
>      mode = 0600
>      user = vhostname
>    }
>    user = root
> }
> service imap-login {
>    inet_listener imap {
>      port = 143
>    }
>    process_min_avail = 1
> }
> service imap {
>    executable = imap
> }
> service lmtp {
>    executable = lmtp
>    unix_listener /var/spool/postfix/private/dovecot-lmtp {
>      group = postfix
>      mode = 0660
>      user = postfix
>    }
> }
> service managesieve-login {
>    inet_listener sieve {
>      address = 172.16.21.3
>      port = 4190
>    }
> }
> service quota-status {
>    client_limit = 1
>    executable = quota-status -p postfix
>    unix_listener /var/spool/postfix/private/dovecot-quota {
>      group = postfix
>      mode = 0660
>      user = postfix
>    }
> }
> service quota-warning {
>    executable = script /usr/local/etc/dovecot/quota-warning.sh
>    unix_listener quota-warning {
>      group = vhostname
>      mode = 0660
>      user = vhostname
>    }
>    user = vhostname
> }
> service stats {
>    unix_listener stats-reader {
>      group = vhostname
>      mode = 0660
>      user = vhostname
>    }
>    unix_listener stats-writer {
>      group = vhostname
>      mode = 0660
>      user = vhostname
>    }
> }
> service welcome {
>    executable = script /usr/local/etc/dovecot/welcome.sh
>    unix_listener welcome {
>      user = vhostname
>    }
>    user = vhostname
> }
> ssl = required
> ssl_cert = </usr/local/etc/ssl/acme.sh/example.com/fullchain.crt
> ssl_cipher_list = EECDH+AESGCM:EDH+AESGCM
> ssl_curve_list = P-256
> ssl_dh = # hidden, use -P to show it
> ssl_key = # hidden, use -P to show it
> ssl_min_protocol = TLSv1.2
> ssl_options = no_ticket
> ssl_prefer_server_ciphers = yes
> userdb {
>    args = /usr/local/etc/dovecot/dovecot-sql.conf.ext
>    driver = sql
> }
> protocol lmtp {
>    hostname_fsync = optimized
>    hostname_plugins = acl fts fts_lucene hostname_log notify quota
> trash virtual welcome zlib hostname_crypt sieve
> }
> protocol lda {
>    hostname_fsync = optimized
>    hostname_plugins = acl fts fts_lucene hostname_log notify quota
> trash virtual welcome zlib hostname_crypt sieve
> }
> protocol imap {
>    hostname_max_userip_connections = 20
>    hostname_plugins = acl fts fts_lucene hostname_log notify quota
> trash virtual welcome zlib hostname_crypt imap_acl imap_quota
> imap_sieve imap_zlib last_login quota welcome
> }
> protocol sieve {
>    info_log_path = /var/log/dovecot/dovecot-sieve.log
>    log_path = /var/log/dovecot/dovecot-sieve-errors.log
> }
>



More information about the dovecot mailing list