Re: Proper way to enable statistics on Dovecot 2.3.20?

2023-07-11 Thread rixati6186--- via dovecot
And if possible, how to disable statistics completely and safely? Without the "0" trick, that leads getting; "Jul 12 02:20:55 mail dovecot: auth: Error: net_connect_unix(/var/dovecot/stats-writer) failed: No such file or directory Jul 12 02:20:55 mail dovecot: auth: Error: stats:

Proper way to enable statistics on Dovecot 2.3.20?

2023-07-11 Thread rixati6186--- via dovecot
Hi. I'm using Dovecot on OpenBSD OS. "dovecot --version" reports: 2.3.20 (80a5ac675d) and this is my configuration file: https://termbin.com/m4to How to properly set the statistics for the version I use? I have both "service stats" and "service old-stats" and i

Re: Motion for OCSP Support in Dovecot

2023-07-11 Thread help--- via dovecot
Sean Gallagher wrote: > On 11/07/2023 5:33 pm, novoMedia via dovecot wrote: > > I am not exactly sure what hosts have to do with this. The must-staple > > extension is a (cryptographically ensured) flag that is 'ingrained' > > into a certificate. It tells a client to only a

Re: Motion for OCSP Support in Dovecot

2023-07-11 Thread Sean Gallagher
ot; I mean figuratively. I have no say over the development of Dovecot. I'm just a user like almost everyone else on this list. -- This email has been checked for viruses by AVG antivirus software. www.avg.com _______ dovecot mailing list -- dovecot@d

Re: Motion for OCSP Support in Dovecot

2023-07-11 Thread Sean Gallagher
On 11/07/2023 5:33 pm, novoMedia via dovecot wrote: I am not exactly sure what hosts have to do with this. The must-staple extension is a (cryptographically ensured) flag that is 'ingrained' into a certificate. It tells a client to only accept the certificate if a valid and recent OCSP

Re: Motion for OCSP Support in Dovecot

2023-07-11 Thread novoMedia via dovecot
ges of the 'must-staple' extension? Just because Thunderbird or Outlook does not support it? What does John Doe using Chrome have to do with Thunderbird/Outlook? I am not trying to be obnoxious here but this point is crucial do understand: Lack of OCSP in Dovecot has security implications f

Re: Motion for OCSP Support in Dovecot

2023-07-10 Thread Sean Gallagher
in the loss of a valuable security feature. b) Issue must-staple certificates without an OCSP response in Dovecot, thereby breaking the TLS RFC (and “hope for the best” on the client side…). or c) use must-staple on a host-by-host basis Question) Do any popular email user agents validate

Motion for OCSP Support in Dovecot

2023-07-10 Thread novoMedia via dovecot
Currently, Dovecot does not offer any support for OCSP, leaving system administrators with a dilemma: choosing between security or compatibility. - What is OCSP? OCSP (Online Certificate Status Protocol) is a network protocol used to check the validity and revocation status of digital

Re: Fwd: dovecot and postfix, authentication issue

2023-07-06 Thread joe a
On 7/6/2023 10:30 AM, joe a wrote: On 7/6/2023 9:34 AM, jeremy ardley via dovecot wrote: On 6/7/23 20:49, joe a wrote: On 7/6/2023 8:12 AM, jeremy ardley via dovecot wrote: On 6/7/23 19:15, joe a wrote: If your example was meant to show the correct way, I cannot see any difference

Re: Fwd: dovecot and postfix, authentication issue

2023-07-06 Thread joe a
On 7/6/2023 9:34 AM, jeremy ardley via dovecot wrote: On 6/7/23 20:49, joe a wrote: On 7/6/2023 8:12 AM, jeremy ardley via dovecot wrote: On 6/7/23 19:15, joe a wrote: If your example was meant to show the correct way, I cannot see any difference between that and what my posted config

Fwd: dovecot and postfix, authentication issue

2023-07-06 Thread jeremy ardley via dovecot
On 6/7/23 20:49, joe a wrote: On 7/6/2023 8:12 AM, jeremy ardley via dovecot wrote: On 6/7/23 19:15, joe a wrote: If your example was meant to show the correct way, I cannot see any difference between that and what my posted config shows other than the sequential (contiguous?) in your

Re: dovecot and postfix, authentication issue

2023-07-06 Thread jeremy ardley via dovecot
auithentication method only. Jeremy -- ___ dovecot mailing list -- dovecot@dovecot.org To unsubscribe send an email to dovecot-le...@dovecot.org

Re: dovecot and postfix, authentication issue

2023-07-06 Thread joe a
... While this may be more properly asked on the postfix list, ll /var/spool/postfix/private/ shows, among other things: srw-rw-rw- 1 postfix postfix 0 Jul 5 21:50 dovecot srw--- 1 postfix postfix 0 Jul 5 21:37 dovecot-lmtp Is that correct

Re: dovecot and postfix, authentication issue

2023-07-06 Thread joe a
On 7/6/2023 1:09 AM, Paul Kudla wrote: just an fyi postfix runs it's own authenticaion especially with virtual users please note below is based on pgsql but the concept is the same for passwd - have not used that for a while simply put virtual users both with postfix & dovecot works

Re: dovecot and postfix, authentication issue

2023-07-06 Thread joe a
On 7/5/2023 11:26 PM, jeremy ardley via dovecot wrote: On 6/7/23 10:17, joe a wrote: Greetings from a new dovecot user. Have setup dovecot on openSuse 15.4 with postfix as the MTA. Both are the latest version in that distribution. Simple virtual user setup using /etc/dovecot/passwd

Re: dovecot and postfix, authentication issue

2023-07-05 Thread Paul Kudla
just an fyi postfix runs it's own authenticaion especially with virtual users please note below is based on pgsql but the concept is the same for passwd - have not used that for a while simply put virtual users both with postfix & dovecot works way better with a pgsql database run

Re: dovecot and postfix, authentication issue

2023-07-05 Thread jeremy ardley via dovecot
On 6/7/23 10:17, joe a wrote: Greetings from a new dovecot user. Have setup dovecot on openSuse 15.4 with postfix as the MTA. Both are the latest version in that distribution. Simple virtual user setup using /etc/dovecot/passwd Dovecot seems to be working and all the defined users

dovecot and postfix, authentication issue

2023-07-05 Thread joe a
Greetings from a new dovecot user. Have setup dovecot on openSuse 15.4 with postfix as the MTA. Both are the latest version in that distribution. Simple virtual user setup using /etc/dovecot/passwd Dovecot seems to be working and all the defined users are authenticating well enough

Re: configuring Dovecot submission service

2023-06-23 Thread Computerisms Corporation
to be pretty easy, as are most things after you figure them out. I am running a separate instance of dovecot for each submission port, 587 and 465. In each of the instance config files, I removed the userdb and passdb stanzas and replaced them with a single passdb stanza as documented in auth

Re: Dovecot reposting inactivity as auth failed

2023-06-20 Thread pedro
connection , probably to exploit some vulnerability in SSL1,2 and 3 in case of success ) dovecot: imap-login: Disconnected: Connection closed: SSL_accept() failed: error:0A00010B:SSL routines::wrong version number (disconnected before auth was ready, waited 0 secs): user=<&

Re: Dovecot reposting inactivity as auth failed

2023-06-20 Thread Eirik Rye
secured Best regards, Eirik _______ dovecot mailing list -- dovecot@dovecot.org To unsubscribe send an email to dovecot-le...@dovecot.org

Re: Dovecot reposting inactivity as auth failed

2023-06-19 Thread Shawn Heisey
say "auth failed." elyograg@bilbo:~$ sudo grep Inactivity /var/log/mail.log | grep -v "auth failed" Jun 18 04:20:18 bilbo dovecot: imap(elyog...@elyograg.org)<412591>: Disconnected: Inactivity - no input for 1800 secs in=38963 out=457431 deleted=0 expunged=0

Re: Dovecot reposting inactivity as auth failed

2023-06-19 Thread Shawn Heisey
-custom.conf file myself. You won't find it in a standard fail2ban install. It is my way of achieving the config I want without changing the main .conf files. This makes upgrades a lot cleaner. I believe dovecot does have a bug here. My user that shows those failed auth messages has not been

Re: Dovecot reposting inactivity as auth failed

2023-06-19 Thread Joseph Tam
From: pe...@netsecpt.pt > Hi , i am having an issue with dovecot , in log files of imap inactivity > lines have the word included "auth failed" , witch is not true , what happens > next is that fail2ban is looking for that word too in log file of dovecot > ,and when

Re: Dovecot reposting inactivity as auth failed

2023-06-19 Thread pedro
look too , but then 1 week ago i had to reinstall the mail server again due to a hdd failure , since iphone was conected to my lan using wifi then i got in mail server my public ip , this was the reason why auth failure was in log file , inactivity was probably because those clients hang too

Re: Dovecot reposting inactivity as auth failed

2023-06-17 Thread Shawn Heisey
On 6/16/23 10:53, pe...@netsecpt.pt wrote: Hi , i am having an issue with dovecot , in log files of imap inactivity lines have the word included "auth failed" , witch is not true , what happens next is that fail2ban is looking for that word too in log file of dovecot ,and whe

Dovecot reposting inactivity as auth failed

2023-06-16 Thread pedro
Hi , i am having an issue with dovecot , in log files of imap inactivity lines have the word included "auth failed" , witch is not true , what happens next is that fail2ban is looking for that word too in log file of dovecot ,and when it finds it it bans my public ip address . Is

Re: Migration dovecot server with local users to dovecot with virtual mailboxes

2023-06-12 Thread t Seeger
Paul thx for your time and help! After a long time of testing i noticed something... probably a small thing for a dovecot expert... The seen mails of the old server have a ",S" at the end of the filename. The seen mails of the new server have a ",:2,S". If I rename the mai

Re: dovecot with sieve vacation plugin

2023-06-12 Thread spi
ther single header to let postfix filter for that (by header_checks FILTER) and choose the right relay host based on the information set in the new header - but currently I don't need that. Thx everybody so far! -- Cheers spi _______ dovecot mailing list --

Re: dovecot with sieve vacation plugin

2023-06-11 Thread dovecot--- via dovecot
g if it's a vacation response or not. But if you ask Wietse on the postfix-us...@postfix.org list he would know if there are any workarounds to do what you want. ___ dovecot mailing list -- dovecot@dovecot.org To unsubscribe send an email to dovecot-le...@dovecot.org

Re: dovecot with sieve vacation plugin

2023-06-11 Thread spi
Why convert/alias a...@aaa.com to b@bbb.local? Why not setup dovecot to have a mailbox and receive mail for a...@aaa.com, allowing sieve to run for a...@aaa.com, and users login as a...@aaa.com on IMAP to check their mail? That would work if users only had one alias, but they don't

Re: No-novice with Dovecot, but need novice-like advice (was Dovecot cracked?!)

2023-06-10 Thread Richard Troy
ord scheme. Maybe I'll just finish it. Time is my issue! (Yes, it'd be better to have it seamlessly integrated into the IMAP protocol, but don't forget that you'd need the *MUAs* to start supporting it as well before the general public will ever even learn about the new feature ...) Yes, ag

Re: dovecot with sieve vacation plugin

2023-06-10 Thread dovecot--- via dovecot
Why convert/alias a...@aaa.com to b@bbb.local? Why not setup dovecot to have a mailbox and receive mail for a...@aaa.com, allowing sieve to run for a...@aaa.com, and users login as a...@aaa.com on IMAP to check their mail? That would work if users only had one alias, but they don't - they have

Re: dovecot with sieve vacation plugin

2023-06-10 Thread spi
Why convert/alias a...@aaa.com to b@bbb.local? Why not setup dovecot to have a mailbox and receive mail for a...@aaa.com, allowing sieve to run for a...@aaa.com, and users login as a...@aaa.com on IMAP to check their mail? That would work if users only had one alias, but they don't

Re: dovecot with sieve vacation plugin

2023-06-10 Thread spi
Am 09.06.23 um 20:13 schrieb dovecot--- via dovecot: postfix (*) presents the right "rcpt to a...@aaa.com" to the milter filter, but sieve only sees the internal b@bbb.local. Why convert/alias a...@aaa.com to b@bbb.local? Why not setup dovecot to have a mailbox and re

Re: dovecot with sieve vacation plugin

2023-06-09 Thread dovecot--- via dovecot
postfix (*) presents the right "rcpt to a...@aaa.com" to the milter filter, but sieve only sees the internal b@bbb.local. Why convert/alias a...@aaa.com to b@bbb.local? Why not setup dovecot to have a mailbox and receive mail for a...@aaa.com, allowing sieve to run for a...@aaa.com,

Re: dovecot with sieve vacation plugin

2023-06-09 Thread spi
responses correctly? I did some more digging in my "mail process chain": incoming mail --> postfix (*) --> milter --> postfix --> lmtp/dovecot --> sieve postfix (*) presents the right "rcpt to a...@aaa.com" to the milter filter, but sieve only sees the internal b@bb

Re: Migration dovecot server with local users to dovecot with virtual mailboxes

2023-06-09 Thread Aki Tuomi via dovecot
Also came to mind that if you have the maildirs in place, you can just point dovecot to those maildirs, there is no need to import/convert them. Aki > On 09/06/2023 14:08 EEST Aki Tuomi via dovecot wrote: > > > Yes, the trick is to use doveadm sync/backup, not do

Re: Migration dovecot server with local users to dovecot with virtual mailboxes

2023-06-09 Thread Paul Kudla (SCOM.CA Internet Services Inc.)
I don't get them imported properly all mails are displayed as unseen. i tried with simple pasting and the doveadm import command. Is there a trick to preserve the flags? Maybe it is because the old dovecot server uses short username without the @ and the domain name and the new one uses

Re: Migration dovecot server with local users to dovecot with virtual mailboxes

2023-06-09 Thread Aki Tuomi via dovecot
ported properly all > mails are displayed as unseen. i tried with simple pasting and the doveadm > import command. Is there a trick to preserve the flags? Maybe it is because > the old dovecot server uses short username without the @ and the domain name > and the new one uses the mail a

Re: Migration dovecot server with local users to dovecot with virtual mailboxes

2023-06-09 Thread t Seeger
it is because the old dovecot server uses short username without the @ and the domain name and the new one uses the mail address to identify the user. On Thu, Jun 8, 2023 at 3:26 PM aki.tuomi via dovecot wrote: > Please see https://doc.dovecot.org/admin_manual/migrating_mailboxes/ >

Re: No-novice with Dovecot, but need novice-like advice (was Dovecot cracked?!)

2023-06-09 Thread Jochen Bern
a white-list of the ONLY accounts that can relay; NOTHING ELSE can relay. ... THAT would do it! But no! Neither in Postfix nor dovecot is there such a thing! I'm afraid that that's not *entirely* true ... : /etc/postfix# grep senderauth main.cf smtpd_sender_login_maps = hash:/etc/postfix/senderauth

Re: No-novice with Dovecot, but need novice-like advice (was Dovecot cracked?!)

2023-06-08 Thread jeremy ardley via dovecot
On 9/6/23 09:17, Richard Troy wrote: However if your dovecot SASL is broken, say always permitting access with or without correct password, then there will be a problem I DID find a discrepancy: smtpd_helo_restrictions did NOT have permit_sasl_authenticated. I made the change, of course

Re: No-novice with Dovecot, but need novice-like advice (was Dovecot cracked?!)

2023-06-08 Thread Sean Gallagher
Useful, thanks. ... May I then presume that port 587 should be going to Dovecot only and not Postfix? Otherwise, how was I supporting users with this configuration: No, you should not assume port 587 (or port 465) goes to Dovecot. Postfix has enough smarts to handle the authentication

Re: No-novice with Dovecot, but need novice-like advice (was Dovecot cracked?!)

2023-06-08 Thread Richard Troy
However if your dovecot SASL is broken, say always permitting access with or without correct password, then there will be a problem I DID find a discrepancy: smtpd_helo_restrictions did NOT have permit_sasl_authenticated. I made the change, of course and with that done, am now going

Re: No-novice with Dovecot, but need novice-like advice (was Dovecot cracked?!)

2023-06-08 Thread Richard Troy
The problem will likely be postfix. I actually doubt it but am VERY grateful for this remark: However if your dovecot SASL is broken, say always permitting access with or without correct password, then there will be a problem IT COULD BE?! I don't know (or maybe recall ATM) enough

Re: No-novice with Dovecot, but need novice-like advice (was Dovecot cracked?!)

2023-06-08 Thread Richard Troy
On Thu, 8 Jun 2023, dove...@x9p.org wrote: Logs? Send the relevant logs so people can analyze the problem. ...The logs in full are HUGE, but I have some excerpts - Hope I caught the right stuff! I'll send along soon. Richard ___ dovecot

Re: No-novice with Dovecot, but need novice-like advice (was Dovecot cracked?!)

2023-06-08 Thread jeremy ardley via dovecot
On 9/6/23 07:25, Richard Troy wrote: The relaying only started and stopped when Dovecot was turned on or off. Isn't it true that Dovecot performs an authentication function for inbound connect requests, the successful of which then may use the submission mechanism from what Postfix takes

Re: No-novice with Dovecot, but need novice-like advice (was Dovecot cracked?!)

2023-06-08 Thread Sean Gallagher
The relaying only started and stopped when Dovecot was turned on or off. Isn't it true that Dovecot performs an authentication function for inbound connect requests, the successful of which then may use the submission mechanism from what Postfix takes to be an internal connection to send

Re: No-novice with Dovecot, but need novice-like advice (was Dovecot cracked?!)

2023-06-08 Thread dovecot
background will surely help: A 27 or so year old Fedora / Postfix / Dovecot site I built had a major disaster in January and I've not yet been able to fully recover because Dovecot has let the damned spammers in again and again and again and again! OH, sure, I got it down to a trickle

Re: No-novice with Dovecot, but need novice-like advice (was Dovecot cracked?!)

2023-06-08 Thread Richard Troy
On Fri, 9 Jun 2023, Sean Gallagher wrote: It feels like you are conflating Dovecot with Postfix. Dovecot doesn't actually "relay" anything. (ignoring sieve and submission proxy). Relaying is the job of the "Mail Transfer Agent" or MTA. This is often Postfix but Dovecot

Re: No-novice with Dovecot, but need novice-like advice (was Dovecot cracked?!)

2023-06-08 Thread Richard Troy
On Thu, 8 Jun 2023, Antonio Leding wrote: Just curious - the first thing the hit me was “27 or so year-old…” Fedora was released 19 years ago and Dovecot 20 — what am I missing? And are you saying this box has been unchanged since ’03? Hi Antonio, I had a lot of that in the eamil

Re: No-novice with Dovecot, but need novice-like advice (was Dovecot cracked?!)

2023-06-08 Thread Sean Gallagher
It feels like you are conflating Dovecot with Postfix. Dovecot doesn't actually "relay" anything. (ignoring sieve and submission proxy). Relaying is the job of the "Mail Transfer Agent" or MTA. This is often Postfix but Dovecot could probably work with just about any standa

Re: No-novice with Dovecot, but need novice-like advice (was Dovecot cracked?!)

2023-06-08 Thread Antonio Leding
Just curious - the first thing the hit me was “27 or so year-old…” Fedora was released 19 years ago and Dovecot 20 — what am I missing? And are you saying this box has been unchanged since ’03? - - - On 8 Jun 2023, at 15:36, Richard Troy wrote: Hi All, This is my first posting here

No-novice with Dovecot, but need novice-like advice (was Dovecot cracked?!)

2023-06-08 Thread Richard Troy
Hi All, This is my first posting here, and maybe I should have found this WAY back in January, '23, if not LONG before. I want to be but I find it difficult here to be brief. ... Surely background will surely help: A 27 or so year old Fedora / Postfix / Dovecot site I built had a major

RE: Migration dovecot server with local users to dovecot with virtual mailboxes

2023-06-08 Thread aki.tuomi via dovecot
Please see https://doc.dovecot.org/admin_manual/migrating_mailboxes/Aki Original message From: tseeger...@gmail.com Date: 6/8/23 16:10 (GMT+02:00) To: dovecot@dovecot.org Subject: Migration dovecot server with local users to dovecot with virtual mailboxes Hello, we

Migration dovecot server with local users to dovecot with virtual mailboxes

2023-06-08 Thread tseegerkrb
Hello, we are using a dovecot server with NIS, we want to transfer it to a new setup. As backend a mysql server will be used in the future. My problem is, if I just copy the maildir or use "doveadm import" all mails are flagged as "unseen". How can i preserve the flags?

dovecot with sieve vacation plugin

2023-06-07 Thread spi
in postfix or for user authentication in dovecot). Emails for a...@aaa.com get stored in the b@bbb.local mailbox. Postfix uses an external relay to transfer emails from a...@aaa.com. Sending and receiving emails works as a charm. In received emails I see headers for    Return-Path:    Delivered-To: b

Re: Outlook fails to connect to Dovecot submission server

2023-05-28 Thread Nikolaos Pyrgiotis
Hi Ralf, We had the same problem few months back and i remember that was the action we took to mitigate the issue. I will state our dovecot `s submission proxy relevant config and hope that it will help. ``` auth_mechanisms = plain login submission_max_mail_size = 3072

dovecot indexer-workers

2023-05-26 Thread Nikolay Zlatkov via dovecot
Hi, I have a problem with dovecot indexer-workers starting at the same time everyday and using too much disk io and cpu. I have limited indexer-workers to 2, but  i am not sure this is the solution. Can you help me to configure this automatic reindex to be in the night for example. Best

Re: configuring Dovecot submission service

2023-05-25 Thread Aki Tuomi via dovecot
> On 25/05/2023 02:01 EEST Computerisms Corporation > wrote: > > > Hi Dovecot Gurus, > > I have been playing around with the submission service. I have managed > to get all the things working that I want working with two exceptions. > I have not found (or

Re: configuring Dovecot submission service

2023-05-24 Thread Computerisms Corporation
Hi Again, Second; I am wondering about the possibility of having multiple submission_relay_host entries.  For example if I have dovecot submission services running on my standard port 587 and 465 connect to a relay on the same box through localhost, but could I have another submission

configuring Dovecot submission service

2023-05-24 Thread Computerisms Corporation
Hi Dovecot Gurus, I have been playing around with the submission service. I have managed to get all the things working that I want working with two exceptions. I have not found (or possibly I have overlooked) solutions in the documentation or discussions on the 'net. First; I would like

Re: Outlook fails to connect to Dovecot submission server

2023-05-22 Thread Ralf Becker via dovecot
EGroupware GmbH [www.egroupware.org] Handelsregister HRB Kaiserslautern 3587 Geschäftsführer Birgit und Ralf Becker Leibnizstr. 17, 67663 Kaiserslautern, Germany Telefon +49 631 31657-0 ___ dovecot mailing list -- dovecot@dovecot.org To unsubscribe send

Outlook fails to connect to Dovecot submission server

2023-05-22 Thread Nikolaos Pyrgiotis
Have you tried adding the line below to your submision config? submission_client_workarounds = whitespace-before-path___ dovecot mailing list -- dovecot@dovecot.org To unsubscribe send an email to dovecot-le...@dovecot.org

Re: Outlook fails to connect to Dovecot submission server

2023-05-21 Thread Gerard E. Seibert
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On Fri, 19 May 2023 09:53:02 +0200, Ralf Becker via dovecot stated: >Am 17.05.23 um 20:03 schrieb dovecot--- via dovecot: >>> Dovecot ... submission server works well with all sorts of clients, >>> but Outlook. >> >

Re: Outlook fails to connect to Dovecot submission server

2023-05-19 Thread Ralf Becker via dovecot
alf Becker via dovecot wrote: Dovecot 2.3.20 including it's submission server works well with all sorts of clients, but Outlook. Outlook works / can connect to Dovecot IMAP service with same certificate TLS config, but it fails to connect using SMTPs on port 465. Oth

Re: Outlook fails to connect to Dovecot submission server

2023-05-19 Thread Andrzej Milewski
Hello, I may be mistaken, but I don't see "auth_mechanism = plain login" in your configuration. It's possible that you are using something different for authentication, but I don't see it in the configuration. On Wed, May 17, 2023 at 4:04 PM Ralf Becker via dovecot wrote: > D

Re: Outlook fails to connect to Dovecot submission server

2023-05-19 Thread Ralf Becker via dovecot
Am 17.05.23 um 20:03 schrieb dovecot--- via dovecot: Dovecot ... submission server works well with all sorts of clients, but Outlook. I thought that was M$ intent. They purposefully design their ecosystem to not play well with others so the average person will think something is wrong

Re: Outlook fails to connect to Dovecot submission server

2023-05-17 Thread dovecot--- via dovecot
Dovecot ... submission server works well with all sorts of clients, but Outlook. I thought that was M$ intent. They purposefully design their ecosystem to not play well with others so the average person will think something is wrong with the competitor's software, give up and just continue

Outlook fails to connect to Dovecot submission server

2023-05-17 Thread Ralf Becker via dovecot
Dovecot 2.3.20 including it's submission server works well with all sorts of clients, but Outlook. Outlook works / can connect to Dovecot IMAP service with same certificate TLS config, but it fails to connect using SMTPs on port 465. Other clients connect and send mails without problem, also

Re: dovecot for plus address

2023-05-13 Thread Jim Popovitch via dovecot
On Sat, 2023-05-13 at 17:55 +0300, Aki Tuomi via dovecot wrote: > > On 13/05/2023 17:50 EEST Jim Popovitch via dovecot < > > dovecot@dovecot.org> wrote: > > > >   > > On Sat, 2023-05-13 at 16:59 +0300, Aki Tuomi via dovecot wrote: > > &g

Re: dovecot for plus address

2023-05-13 Thread Aki Tuomi via dovecot
> On 13/05/2023 17:50 EEST Jim Popovitch via dovecot > wrote: > > > On Sat, 2023-05-13 at 16:59 +0300, Aki Tuomi via dovecot wrote: > > > On 13/05/2023 14:38 EEST Tom Reed wrote: > > > > > > How to setup dovecot to accept the plus

Re: dovecot for plus address

2023-05-13 Thread Jim Popovitch via dovecot
On Sat, 2023-05-13 at 16:59 +0300, Aki Tuomi via dovecot wrote: > > On 13/05/2023 14:38 EEST Tom Reed wrote: > > > > How to setup dovecot to accept the plus address? > > such as user+...@sample.com will be delivered into u...@sample.com > > > > h

Re: dovecot for plus address

2023-05-13 Thread Aki Tuomi via dovecot
> On 13/05/2023 14:38 EEST Tom Reed wrote: > > > Hello > > How to setup dovecot to accept the plus address? > such as user+...@sample.com will be delivered into u...@sample.com > > Thank you. > Tom R. > > _________

dovecot for plus address

2023-05-13 Thread Tom Reed
Hello How to setup dovecot to accept the plus address? such as user+...@sample.com will be delivered into u...@sample.com Thank you. Tom R. ___ dovecot mailing list -- dovecot@dovecot.org To unsubscribe send an email to dovecot-le...@dovecot.org

RE: Best practice for Dovecot with LDAP and Postfix

2023-05-09 Thread Marc
lated to each component of the system: > if > > > the system has less components the probability to have issues is > > > smaller. > > > > Yes but this is reasoning backwards, and even then, it is not complete > because you have multiple layers of security. Eg only dove

RE: Best practice for Dovecot with LDAP and Postfix

2023-05-09 Thread Aki Tuomi via dovecot
ponent of the system: if > > the system has less components the probability to have issues is > > smaller. > > Yes but this is reasoning backwards, and even then, it is not complete > because you have multiple layers of security. Eg only dovecot is public > facing and

RE: Best practice for Dovecot with LDAP and Postfix

2023-05-09 Thread Marc
t this is reasoning backwards, and even then, it is not complete because you have multiple layers of security. Eg only dovecot is public facing and can have an exploit that would be limited to just by os uid environment. If you are proficient with selinux you could even enhance the os rules for ac

Re: Best practice for Dovecot with LDAP and Postfix

2023-05-09 Thread Sean Gallagher
It should also be mentioned that dovecot can act as a SMTP relay in "front" of Postfix (or any other MTA) and handle the authentication part of the transaction. This of course implies use of the dovecot authentication machinery for mail submissions. I don't know much about it b

Re: Best practice for Dovecot with LDAP and Postfix

2023-05-09 Thread Sean Gallagher
postfix can use LDAP for authentication (i.e. SASL) and for validation("ldap" table). As best I can tell, postfix cannot use dovecot to validate addresses, if you want that you will need postfix to talk directly to ldap. GOTCHA: use the "postconf -m" command to check t

Re: Best practice for Dovecot with LDAP and Postfix

2023-05-09 Thread Mihai Badici
On 2023-05-09 11:14, Marc wrote: so far I had a setup where Dovecot was using a passwd file as userdb and passdb. Postfix was then authenticating with Dovecot via SASL to validate user accounts. Now I added an LDAP backend

RE: Best practice for Dovecot with LDAP and Postfix

2023-05-09 Thread Marc
> > > so far I had a setup where Dovecot was using a passwd file as > userdb and > passdb. Postfix was then authenticating with Dovecot via SASL > to > validate user accounts. > > Now I added an LDAP ba

Re: Best practice for Dovecot with LDAP and Postfix

2023-05-09 Thread Kees van Vloten
t; scope=2 deref=0 filter="(&(objectClass=posixAccount)(uid=mor...@example.com))" Why is dovecot still using the default filter setting even though my config now looks like this: hosts = openldap:1389 base = ou=users,dc=example,dc=com auth_bind = yes auth_bind_userdn = uid=%n,ou

Re: Best practice for Dovecot with LDAP and Postfix

2023-05-09 Thread dovecot--- via dovecot
The question about best practices was more a conceptual one. Should dovecot and postfix talk independently to the LDAP database? Or should dovecot be the gateway for postfix to get the information out of the LDAP database? Just my 2 cents, id have postfix talk directly to LDAP to see

RE: Best practice for Dovecot with LDAP and Postfix

2023-05-09 Thread Aki Tuomi via dovecot
s. I already followed that guide. > > The question about best practices was more a conceptual one. Should dovecot > and postfix talk independently to the LDAP database? Or should dovecot be the > gateway for postfix to get the information out of the LDAP database? > > Cheers,

RE: Best practice for Dovecot with LDAP and Postfix

2023-05-09 Thread Moritz Pflanzer
Thanks for the hints. I already followed that guide. The question about best practices was more a conceptual one. Should dovecot and postfix talk independently to the LDAP database? Or should dovecot be the gateway for postfix to get the information out of the LDAP database? Cheers, Moritz

Re: Best practice for Dovecot with LDAP and Postfix

2023-05-09 Thread Moritz Pflanzer
s=posixAccount)(uid=mor...@example.com))" Why is dovecot still using the default filter setting even though my config now looks like this: hosts = openldap:1389 base = ou=users,dc=example,dc=com auth_bind = yes auth_bind_userdn = uid=%n,ou=users,dc=example,dc=com pass_attrs = \ =user=%

RE: Best practice for Dovecot with LDAP and Postfix

2023-05-09 Thread Aki Tuomi via dovecot
> On 08/05/2023 23:06 EEST Marc wrote: > > > > > > so far I had a setup where Dovecot was using a passwd file as userdb and > > passdb. Postfix was then authenticating with Dovecot via SASL to > > validate user accounts. > > > > Now

Re: Best practice for Dovecot with LDAP and Postfix

2023-05-08 Thread Mihai Badici
On 5/8/23 23:06, Marc wrote: so far I had a setup where Dovecot was using a passwd file as userdb and passdb. Postfix was then authenticating with Dovecot via SASL to validate user accounts. Now I added an LDAP backend and would like to use that for Dovecot and Postfix. My first approach

Re: Best practice for Dovecot with LDAP and Postfix

2023-05-08 Thread Kees van Vloten
On 08-05-2023 16:43, Moritz Pflanzer wrote: Hi all, so far I had a setup where Dovecot was using a passwd file as userdb and passdb. Postfix was then authenticating with Dovecot via SASL to validate user accounts. Now I added an LDAP backend and would like to use that for Dovecot

RE: Best practice for Dovecot with LDAP and Postfix

2023-05-08 Thread Marc
> > so far I had a setup where Dovecot was using a passwd file as userdb and > passdb. Postfix was then authenticating with Dovecot via SASL to > validate user accounts. > > Now I added an LDAP backend and would like to use that for Dovecot and > Postfix. My first a

Best practice for Dovecot with LDAP and Postfix

2023-05-08 Thread Moritz Pflanzer
Hi all, so far I had a setup where Dovecot was using a passwd file as userdb and passdb. Postfix was then authenticating with Dovecot via SASL to validate user accounts. Now I added an LDAP backend and would like to use that for Dovecot and Postfix. My first approach was to change the passdb

Re: dovecot sasl with postfix, smtp auth not available

2023-04-24 Thread Michael Peddemors
On 2023-04-23 11:53, Benny Pedersen wrote: dovecot--- via dovecot skrev den 2023-04-23 20:25: I tried to enable it on postfix smtp_sasl_auth_enable, but it is was not advertise. That is because "smtp" is not the same as "smtpd".     http://www.postfix

Re: dovecot-fts-solr Solr9 support

2023-04-24 Thread deano-dovecot
Shawn - You had mentioned in another email (somewhere) that were hopefully going to do a write-up of setting up Solr 9.x with Dovecot. Any chance you've had time for that ? Thanks - On 2022-09-30 1:52 pm, Shawn Heisey wrote: > On 9/27/22 19:32, Nathanael Anderson wrote: >

Re: dovecot sasl with postfix, smtp auth not available

2023-04-24 Thread Markus Winkler
[...] smtpd_sasl_auth_enable = yes smtpd_sasl_path = private/auth smtpd_sasl_type = dovecot As Benny already wrote: delete them from your main.cf as port 25 should not be used for authentication. 2. postconf -M [...] smtps inet n - - - -       smtpd [...] -o smtpd_client_restrictions

Re: dovecot sasl with postfix, smtp auth not available

2023-04-23 Thread Badli Al Rashid
_sasl_authenticated reject_unauth_destination smtpd_sasl_auth_enable = yes smtpd_sasl_path = private/auth smtpd_sasl_type = dovecot smtpd_timeout = 30s smtpd_tls_cert_file = $tcert smtpd_tls_key_file = $tkey smtpd_tls_security_level = encrypt strict_rfc821_envelopes = yes tcert = /etc/letsencrypt/live/www.zystro.xyz

Re: dovecot sasl with postfix, smtp auth not available

2023-04-23 Thread Badli Al Rashid
HI Benny, master.cf already have enteries for 465 and 587 as I followed the guide. Noted and thank you. Regards, -badli From: Benny Pedersen Sent: Monday, April 24, 2023, 02:54 To: dovecot@dovecot.org Subject: Re: dovecot sasl with postfix, smtp auth

Re: dovecot sasl with postfix, smtp auth not available

2023-04-23 Thread Markus Winkler
Hi Badli, On 23.04.23 05:15, Badli Al Rashid wrote: Anybody got any ideas ? please post the output of: 1) postconf -n 2) postconf -M Regards, Markus ___ dovecot mailing list -- dovecot@dovecot.org To unsubscribe send an email to dovecot-le

Re: dovecot sasl with postfix, smtp auth not available

2023-04-23 Thread Benny Pedersen
dovecot--- via dovecot skrev den 2023-04-23 20:25: I tried to enable it on postfix smtp_sasl_auth_enable, but it is was not advertise. That is because "smtp" is not the same as "smtpd". http://www.postfix.org/postconf.5.html#smtpd_sasl_auth_enable port 25 should n

<    1   2   3   4   5   6   7   8   9   10   >