Re: Failing to archive many messages

2024-05-18 Thread Francis Augusto Medeiros-Logeay via dovecot
Today I realized that it was indeed the sa-learn that is slowing down my 
Archiving.

I added an «&» on the end of the line that calls the sa-learn (called by the 
report-ham.sieve script):

exec /usr/bin/sa-learn -u ${1} --ham  &

Does anyone thing this is a bad idea? I noticed that archiving got way faster 
this way…

Best,

Francis


> On 9 May 2024, at 23:09, dovecot-requ...@dovecot.org wrote:
> 
>> On 9 May 2024, at 19:45, dovecot-requ...@dovecot.org 
>>  wrote:
>> 
>> Francis Augusto Medeiros-Logeay via dovecot skrev den 2024-05-09 12:29:
>> 
 If you want to analyze emails, why not do it with scheduled crons 
 after they are archived?
>> 
>> maybe ask for skip older then one day in here 
>> https://github.com/isbg/isbg/tree/master
>> 
>> while roundcube just set the needed flag for retest ?
>> 
>>> wouldn't it reanalyze all archived messages anyway?
>> 
>> sometimes email is ham at recpt stage, while its spam later on test, 
>> this is why isbg is made imho :)
> 
> 
> I see.
> 
> But I wonder if there is something wrong with what I already have. It worked 
> fine for years, and it works fine for most of my users. I tested with a few 
> accounts, and Archving (with its sa-learn script) works blazingly fast. But 
> with one user - happens to be mine - it is super slow when archiving, most 
> likely due the sa-learn.
> 
> Best,
> 
> Francis

___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Sieve extprograms pipe :try cancels implicit keep

2024-05-17 Thread Sebastiaan Hoogeveen via dovecot
Hi,

When using the :try tag on the pipe command in the sieve_extprograms plugin 
Sieve’s implicit keep is cancelled if the executed command fails. The 
specification on 
https://raw.githubusercontent.com/dovecot/pigeonhole/master/doc/rfc/spec-bosch-sieve-extprograms.txt
 states:

“When the ":try" tag is specified, the "pipe" instruction will attempt 
execution of the external program, but failure will not cause the whole Sieve 
script execution to fail with an error. Instead, the Sieve processing continues 
as if the "pipe" action was never triggered."

However, using the :try tag marks the pip command as successful even if it 
fails and because pipe is a disposition-type action the implicit keep is 
cancelled, resulting in the piped message being discarded. If this is the 
intended behaviour then I would suggest amending the text of the specification 
to:

“When the ":try" tag is specified, the "pipe" instruction will attempt 
execution of the external program, but failure will not cause the whole Sieve 
script execution to fail with an error. Instead, the Sieve processing continues 
as if the "pipe" action was executed successfully and cancel implicit keep.”

If this is not the intended behaviour then please consider this a bug report, 
with my apologies for not adding a patch (it seems to be a bit more complex 
than just changing the return value of act_pipe_commit).

Kind regards,

-- 
Sebastiaan Hoogeveen

NederHost
https://www.nederhost.nl/
KvK: 34099781



___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Re: MySQL connection with SSL

2024-05-16 Thread Martin Behrens via dovecot

Have you tried to set the ssl_* parameters as stated in 
https://doc.dovecot.org/settings/plugin/sql-mysql?


Am 16.05.24, 12:53 schrieb "Gandalf Corvotempesta via dovecot" 
:

Hi all
is possible to tell dovecot to use a mysql connection with SSL ?

My new remote mysql server only allows ssl connections
___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org

___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Re: MySQL connection with SSL

2024-05-16 Thread Gandalf Corvotempesta via dovecot
Il giorno gio 16 mag 2024 alle ore 16:35 Stuart Henderson via dovecot
 ha scritto:
> Wrong bit of the manual. See the sample dovecot-sql.conf.ext or
> https://doc.dovecot.org/configuration_manual/authentication/sql/#id10

Seems much easier with this... I'll try tomorrow
___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Re: MySQL connection with SSL

2024-05-16 Thread Gandalf Corvotempesta via dovecot
Il giorno gio 16 mag 2024 alle ore 15:58 Aki Tuomi
 ha scritto:
> I don't think dovecot will read your .my.cnf̣.
>
> See supported options at https://doc.dovecot.org/settings/plugin/sql-mysql/

Probably "client_flags" is what i need to use but:
1. i don't know the int value for CLIENT_SSL (and mysql docs arent'
clear on this)
2. mysql docs tell to not set the CLIENT_SSL in a client application
___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Re: MySQL connection with SSL

2024-05-16 Thread Stuart Henderson via dovecot
On 2024-05-16, Christopher Wensink via dovecot  wrote:
> See here for the documentation for dovecot:
>
> https://doc.dovecot.org/admin_manual/ssl/

Wrong bit of the manual. See the sample dovecot-sql.conf.ext or
https://doc.dovecot.org/configuration_manual/authentication/sql/#id10


___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Re: MySQL connection with SSL

2024-05-16 Thread Benny Pedersen via dovecot

Christopher Wensink via dovecot skrev den 2024-05-16 15:34:

See here for the documentation for dovecot:

https://doc.dovecot.org/admin_manual/ssl/


this is not covering database connections

so above is for end-users connections, not dovecot connection to 
databases like mysql postgres, or other database backends


___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Re: MySQL connection with SSL

2024-05-16 Thread Aki Tuomi via dovecot

> On 16/05/2024 16:30 EEST Gandalf Corvotempesta via dovecot 
>  wrote:
> 
>  
> Il giorno gio 16 mag 2024 alle ore 15:12 Christopher Wensink via
> dovecot  ha scritto:
> > Yes.
> >
> > https://dev.mysql.com/doc/refman/8.3/en/using-encrypted-connections.html
> 
> This is for using ssl with native mysql client.
> Dovecot uses the native library or has a embedded mysql library ?
> 
> because my .my.cnf is already set to use ssl as preferred, but dovecot
> doesn't connect with ssl.

I don't think dovecot will read your .my.cnf̣.

See supported options at https://doc.dovecot.org/settings/plugin/sql-mysql/

Aki
___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Re: MySQL connection with SSL

2024-05-16 Thread Gandalf Corvotempesta via dovecot
Il giorno gio 16 mag 2024 alle ore 15:34 Christopher Wensink
 ha scritto:
>
> See here for the documentation for dovecot:
>
> https://doc.dovecot.org/admin_manual/ssl/

This has nothing to do with mysql connection.

What i've asked for is how to tell dovecot to connect to a mysql
server by using an ssl connection (the native mysql ssl connection),
not how to enable ssl in smtp/imap/pop3/whatever
___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Re: MySQL connection with SSL

2024-05-16 Thread Christopher Wensink via dovecot

See here for the documentation for dovecot:

https://doc.dovecot.org/admin_manual/ssl/

On 5/16/2024 8:30 AM, Gandalf Corvotempesta wrote:

Il giorno gio 16 mag 2024 alle ore 15:12 Christopher Wensink via
dovecot  ha scritto:

Yes.

https://dev.mysql.com/doc/refman/8.3/en/using-encrypted-connections.html

This is for using ssl with native mysql client.
Dovecot uses the native library or has a embedded mysql library ?

because my .my.cnf is already set to use ssl as preferred, but dovecot
doesn't connect with ssl.


--
Christopher Wensink
IS Administrator
Five Star Plastics, Inc
1339 Continental Drive
Eau Claire, WI 54701
Office:  715-831-1682
Mobile:  715-563-3112
Fax:  715-831-6075
cwens...@five-star-plastics.com
www.five-star-plastics.com

___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Re: MySQL connection with SSL

2024-05-16 Thread Gandalf Corvotempesta via dovecot
Il giorno gio 16 mag 2024 alle ore 15:12 Christopher Wensink via
dovecot  ha scritto:
> Yes.
>
> https://dev.mysql.com/doc/refman/8.3/en/using-encrypted-connections.html

This is for using ssl with native mysql client.
Dovecot uses the native library or has a embedded mysql library ?

because my .my.cnf is already set to use ssl as preferred, but dovecot
doesn't connect with ssl.
___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Re: MySQL connection with SSL

2024-05-16 Thread Christopher Wensink via dovecot

Gandalf,

Yes.

https://dev.mysql.com/doc/refman/8.3/en/using-encrypted-connections.html

It's common practice.  From my experience most LAMP stacks are built and 
with a web front end that's handling the SSL traffic via apache to 
secure the connection between the client browser and the web server.  
SSL is operating on layer 4 of the OSI model so theoretically all 
applications (and most do) have some support for encrypted connections.


On 5/16/2024 5:46 AM, Gandalf Corvotempesta via dovecot wrote:

Hi all
is possible to tell dovecot to use a mysql connection with SSL ?

My new remote mysql server only allows ssl connections
___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


--
Christopher Wensink
IS Administrator
Five Star Plastics, Inc
1339 Continental Drive
Eau Claire, WI 54701
Office:  715-831-1682
Mobile:  715-563-3112
Fax:  715-831-6075
cwens...@five-star-plastics.com
www.five-star-plastics.com

___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


MySQL connection with SSL

2024-05-16 Thread Gandalf Corvotempesta via dovecot
Hi all
is possible to tell dovecot to use a mysql connection with SSL ?

My new remote mysql server only allows ssl connections
___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Re: Pigeonhole Sieve only runs scripts if in users' home directories, or if Sieve is purposely broken

2024-05-15 Thread John Fawcett via dovecot

On 15/05/2024 18:27, Douglas Morse via dovecot wrote:

My apologies, a small inaccuracy:

Below where I mention .svbin files being created, I incorrectly described what 
is occurring. If the `sieve` is set to the default of users’ home directories 
etc., the file `.dovecot.svbin` is created in the user’s home directory. If 
`sieve` is set to the centralized location, then there is no `.dovecot.svbin` 
but rather a `sieve.svbin` created or updated there. Also a bit confusing.


maybe you have a sieve_default setting that is affecting this.


Am 15.05.2024 um 18:18 schrieb Douglas Morse:

Hi,


Dovecot version is 2.3.19.1 (9b53102964) running on fully up-to-date Debian 12 
(Bookworm) operating system.


For the life of me I cannot figure out how to get sieve scripts working 
correctly in a central directory location. Calling them from users’ home 
directories works fine (as described below).

(Note: This system has recently been migrated from Cyrus IMAP, so some of the 
directories for a central location are very similar to what would find in a 
standard Cyrus IMAP installation.)


If I set `sieve` to its default value of `file:~/sieve;active=~/.dovecot.sieve` 
in `conf.d/90-sieve.conf`, sieve works as expected. I have a file 
`~/sieve/default.sieve` and, as per documentation, I make a symbolic link 
`~/.dovecot.sieve` that points to that file. The sieve script runs, and I see a 
`default.svbin` either created or updated in the ~/sieve directories as emails 
arrive.

Setting `sieve` to `file:~/lib/sieve;active=~/.dovecot.sieve` also works as 
expected. So this verifies I can change the directory where sieve scripts are 
stored.

However, if I then set `sieve` to 
`file:/var/spool/dovecot/home/%1n/user/%n/sieve;active=file:/var/spool/dovecot/home/%1n/user/%n/.dovecot.sieve`,
 again a `default.sieve` in each of these user’s centralized `sieve` 
directories, sieve scripts silently fail to run. No messages of any kind found 
in any log files.


I don't believe that the active option can take the "file:" prefix.

John



So, with the same exact same configuration as one that is the default and as 
proven to working, with the single exception of changing the top-level 
directory (TLD) for the scripts, results in silent failure. Why?

What I find particularly odd is that if I keep `sieve` set to this central 
directory location (i.e., no config changes), and `mv sieve/default.sieve 
sieve.tmp; rmdir sieve; mv sieve.tmp`, that is, have a *file* called `sieve` 
where the setting `sieve` points to (which, per docs and experience, should be 
a *directory*), the users’ sieve scripts *do* run, but with a warning along the 
lines of `Warning: sieve: file storage: Explicitly specified active script path 
`file:/var/spool/dovecot/home/m/user/morse/.dovecot.sieve' is ignored; storage 
path `/var/spool/dovecot/home/m/user/morse/sieve' is not a directory`.

In the docs I see that `sieve` used to refer to a file (PidgeonHole Sieve 
v.0.31 or prior, I believe), and there is mention of a a `sieve_dir` setting 
(which I have *never* set or used). So my guess is that sieve working in this 
centralized TLD with `sieve` as a file rather than directory is due to support 
for some deprecated config / functionality.

I have fiddle around with this for some hours, including setting and not 
setting `mail_home` to the central directory location (i.e., `mail_home` in 
`conf.d/10-mail.conf` set to the same value as `sieve` in 
`conf.d/90-sieve.conf`),to no avail. No matter what I do, I cannot get sieve 
scripts to run in a centralized directory location as they do under `/home`. 
The only exception is as just described in the preceding paragraph. But the 
solution only allows a user to have a single sieve script, and I imagine 
`managesieve` will not work properly is sieve is set up as described in the 
preceding paragraph.

What am I missing or doing incorrectly?

Any and all assistance most appreciated.

Doug


___
dovecot mailing list --dovecot@dovecot.org
To unsubscribe send an email todovecot-le...@dovecot.org

___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Re: Pigeonhole Sieve only runs scripts if in users' home directories, or if Sieve is purposely broken

2024-05-15 Thread Douglas Morse via dovecot

Apologies, just to be completely explicit, I should have stated that of course 
in every configuration I mentioned the `.dovecot.sieve` file always pointed to 
the user’s main sieve script, wherever I may have placed it at the time.

So for example my centralized configuration is as follows when mirroring the 
default configuration but in a non-home top-level-directory (TLD):

/var/spool/dovecot/home/m/user/morse/.dovecot.sieve -> 
/var/spool/dovecot/home/m/user/morse/sieve/default.sieve

which does not work, and as follows when it does (with the warning that 
specified sieve location is a file rather than a script):

/var/spool/dovecot/home/m/user/morse/.dovecot.sieve -> 
/var/spool/dovecot/home/m/user/morse/sieve


> Am 15.05.2024 um 18:18 schrieb Douglas Morse via dovecot 
> :
> 
> However, if I then set `sieve` to 
> `file:/var/spool/dovecot/home/%1n/user/%n/sieve;active=file:/var/spool/dovecot/home/%1n/user/%n/.dovecot.sieve`,
>  again a `default.sieve` in each of these user’s centralized `sieve` 
> directories, sieve scripts silently fail to run. No messages of any kind 
> found in any log files.

___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Re: Pigeonhole Sieve only runs scripts if in users' home directories, or if Sieve is purposely broken

2024-05-15 Thread Douglas Morse via dovecot

My apologies, a small inaccuracy:

Below where I mention .svbin files being created, I incorrectly described what 
is occurring. If the `sieve` is set to the default of users’ home directories 
etc., the file `.dovecot.svbin` is created in the user’s home directory. If 
`sieve` is set to the centralized location, then there is no `.dovecot.svbin` 
but rather a `sieve.svbin` created or updated there. Also a bit confusing.



> Am 15.05.2024 um 18:18 schrieb Douglas Morse :
> 
> Hi,
> 
> 
> Dovecot version is 2.3.19.1 (9b53102964) running on fully up-to-date Debian 
> 12 (Bookworm) operating system.
> 
> 
> For the life of me I cannot figure out how to get sieve scripts working 
> correctly in a central directory location. Calling them from users’ home 
> directories works fine (as described below).
> 
> (Note: This system has recently been migrated from Cyrus IMAP, so some of the 
> directories for a central location are very similar to what would find in a 
> standard Cyrus IMAP installation.)
> 
> 
> If I set `sieve` to its default value of 
> `file:~/sieve;active=~/.dovecot.sieve` in `conf.d/90-sieve.conf`, sieve works 
> as expected. I have a file `~/sieve/default.sieve` and, as per documentation, 
> I make a symbolic link `~/.dovecot.sieve` that points to that file. The sieve 
> script runs, and I see a `default.svbin` either created or updated in the 
> ~/sieve directories as emails arrive.
> 
> Setting `sieve` to `file:~/lib/sieve;active=~/.dovecot.sieve` also works as 
> expected. So this verifies I can change the directory where sieve scripts are 
> stored.
> 
> However, if I then set `sieve` to 
> `file:/var/spool/dovecot/home/%1n/user/%n/sieve;active=file:/var/spool/dovecot/home/%1n/user/%n/.dovecot.sieve`,
>  again a `default.sieve` in each of these user’s centralized `sieve` 
> directories, sieve scripts silently fail to run. No messages of any kind 
> found in any log files.
> 
> So, with the same exact same configuration as one that is the default and as 
> proven to working, with the single exception of changing the top-level 
> directory (TLD) for the scripts, results in silent failure. Why? 
> 
> What I find particularly odd is that if I keep `sieve` set to this central 
> directory location (i.e., no config changes), and `mv sieve/default.sieve 
> sieve.tmp; rmdir sieve; mv sieve.tmp`, that is, have a *file* called `sieve` 
> where the setting `sieve` points to (which, per docs and experience, should 
> be a *directory*), the users’ sieve scripts *do* run, but with a warning 
> along the lines of `Warning: sieve: file storage: Explicitly specified active 
> script path `file:/var/spool/dovecot/home/m/user/morse/.dovecot.sieve' is 
> ignored; storage path `/var/spool/dovecot/home/m/user/morse/sieve' is not a 
> directory`.
> 
> In the docs I see that `sieve` used to refer to a file (PidgeonHole Sieve 
> v.0.31 or prior, I believe), and there is mention of a a `sieve_dir` setting 
> (which I have *never* set or used). So my guess is that sieve working in this 
> centralized TLD with `sieve` as a file rather than directory is due to 
> support for some deprecated config / functionality.
> 
> I have fiddle around with this for some hours, including setting and not 
> setting `mail_home` to the central directory location (i.e., `mail_home` in 
> `conf.d/10-mail.conf` set to the same value as `sieve` in 
> `conf.d/90-sieve.conf`),to no avail. No matter what I do, I cannot get sieve 
> scripts to run in a centralized directory location as they do under `/home`. 
> The only exception is as just described in the preceding paragraph. But the 
> solution only allows a user to have a single sieve script, and I imagine 
> `managesieve` will not work properly is sieve is set up as described in the 
> preceding paragraph.
> 
> What am I missing or doing incorrectly?
> 
> Any and all assistance most appreciated.
> 
> Doug
> 

___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Pigeonhole Sieve only runs scripts if in users' home directories, or if Sieve is purposely broken

2024-05-15 Thread Douglas Morse via dovecot
Hi,


Dovecot version is 2.3.19.1 (9b53102964) running on fully up-to-date Debian 12 
(Bookworm) operating system.


For the life of me I cannot figure out how to get sieve scripts working 
correctly in a central directory location. Calling them from users’ home 
directories works fine (as described below).

(Note: This system has recently been migrated from Cyrus IMAP, so some of the 
directories for a central location are very similar to what would find in a 
standard Cyrus IMAP installation.)


If I set `sieve` to its default value of `file:~/sieve;active=~/.dovecot.sieve` 
in `conf.d/90-sieve.conf`, sieve works as expected. I have a file 
`~/sieve/default.sieve` and, as per documentation, I make a symbolic link 
`~/.dovecot.sieve` that points to that file. The sieve script runs, and I see a 
`default.svbin` either created or updated in the ~/sieve directories as emails 
arrive.

Setting `sieve` to `file:~/lib/sieve;active=~/.dovecot.sieve` also works as 
expected. So this verifies I can change the directory where sieve scripts are 
stored.

However, if I then set `sieve` to 
`file:/var/spool/dovecot/home/%1n/user/%n/sieve;active=file:/var/spool/dovecot/home/%1n/user/%n/.dovecot.sieve`,
 again a `default.sieve` in each of these user’s centralized `sieve` 
directories, sieve scripts silently fail to run. No messages of any kind found 
in any log files.

So, with the same exact same configuration as one that is the default and as 
proven to working, with the single exception of changing the top-level 
directory (TLD) for the scripts, results in silent failure. Why? 

What I find particularly odd is that if I keep `sieve` set to this central 
directory location (i.e., no config changes), and `mv sieve/default.sieve 
sieve.tmp; rmdir sieve; mv sieve.tmp`, that is, have a *file* called `sieve` 
where the setting `sieve` points to (which, per docs and experience, should be 
a *directory*), the users’ sieve scripts *do* run, but with a warning along the 
lines of `Warning: sieve: file storage: Explicitly specified active script path 
`file:/var/spool/dovecot/home/m/user/morse/.dovecot.sieve' is ignored; storage 
path `/var/spool/dovecot/home/m/user/morse/sieve' is not a directory`.

In the docs I see that `sieve` used to refer to a file (PidgeonHole Sieve 
v.0.31 or prior, I believe), and there is mention of a a `sieve_dir` setting 
(which I have *never* set or used). So my guess is that sieve working in this 
centralized TLD with `sieve` as a file rather than directory is due to support 
for some deprecated config / functionality.

I have fiddle around with this for some hours, including setting and not 
setting `mail_home` to the central directory location (i.e., `mail_home` in 
`conf.d/10-mail.conf` set to the same value as `sieve` in 
`conf.d/90-sieve.conf`),to no avail. No matter what I do, I cannot get sieve 
scripts to run in a centralized directory location as they do under `/home`. 
The only exception is as just described in the preceding paragraph. But the 
solution only allows a user to have a single sieve script, and I imagine 
`managesieve` will not work properly is sieve is set up as described in the 
preceding paragraph.

What am I missing or doing incorrectly?

Any and all assistance most appreciated.

Doug

___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


lda-dupes-file not updated, when user over quota and sieve vacation enabled

2024-05-14 Thread Christian Rößner via dovecot
Hi,

we have encountered an interesting behavior with users that have their 
mailboxes over quota while having sieve-vacation enabled. We do a temp fail, if 
a mailbox is over quota.

Problem:


If a remote sender sends an email to such a user (over quota + vacation), 
Dovecot directly creates a response message and sends it back to the sender. So 
far so good. At the same time the original email cannot be stored in the users 
INBOX, which leads to a temp fail action. Now the email remains in a queue and 
whenever the queue manager tries to deliver the email again, the behavior 
starts again. Send vacation response and temp fail, until either the queue life 
time exceeds or the user has cleaned up his/her mailbox and the message can be 
stored.

For the remote sender it means getting lots of vacation emails from the same 
recipient. For each retry one vacation message.

Tracing:


We dig a little bit deeper and turned on logging to see what happens.

Because the email cannot be put into the users INBOX, it keeps in a failure 
state. And because of this, the dupes-file is not updated for this particular 
sender.

We are not sure, if this is a wanted behavior or not. But for a sender, it is 
really annoying to receive vacation messages on and on.

Solution:
-

Unfortunately we could not find any settings to change this. So I come here and 
ask for your kindly help. At the moment of this writing I can not provide a 
doveconf -n output, but I hope you trust me that we have not done too many 
things wrong ;-)

Christian Rößner
-- 
Rößner-Network-Solutions
Zertifizierter ITSiBe / CISO
Karl-Bröger-Str. 10, 36304 Alsfeld
Fax: +49 6631 78823409, Mobil: +49 171 9905345
USt-IdNr.: DE225643613, https://roessner.website
PGP fingerprint: 658D 1342 B762 F484 2DDF 1E88 38A5 4346 D727 94E5 

___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Re: sieve duplicate with 2.3.16

2024-05-13 Thread Jean-Max Reymond via dovecot

Le 09/05/2024 à 12:07, Jean-Max Reymond a écrit :

Hi,
I was running dovecot 2.3.7.2 with ubuntu 20.04
Lastweek, I upgrade to Ubuntu 22.04 and dovecot 2.3.16
My configuration was migrated and all is fine expected the sieve 
duplicate. It does notwork and i don't understand why.


sorry for the duplicate post


trace dovecot for debug



It seems that Pigeonhole has detected multiple messages with 
msgid=<00fb2844-f7b0-47af-8684-bcb090ec9...@ik.me>
Is it possible that it is two separate processes running in parallel 
mode without interactions ?

Thanks for your tips.

___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Re: Sieve: Avoiding duplicates in a folder while keeping in Inbox

2024-05-13 Thread Paul Kudla via dovecot


ok here are the basics

see example plugins below

plugin {
  mail_log_events = delete undelete expunge copy mailbox_delete 
mailbox_rename

  mail_log_fields = uid, box, msgid, from, subject, size, vsize, flags
  push_notification_driver = dlog

  sieve = file:~/sieve/sieve;active=~/sieve/.dovecot.sieve
  sieve_duplicate_default_period = 1h
  sieve_duplicate_max_period = 1d


  mail_replica = tcp:10.221.0.7:12345
  #mail_replica = tcps:10.221.0.7
  #mail_replica = remote:vmail@10.221.0.7
  #replication_sync_timeout = 2

  fts = lucene
  fts_lucene = whitespace_chars=@.


}

&

protocol sieve {
  managesieve_implementation_string = Dovecot Pigeonhole
  managesieve_max_line_length = 65536
}



basically

sieve_duplicate_default_period = 1h
  sieve_duplicate_max_period = 1d

handles the duplicate supression

see :

https://doc.dovecot.org/configuration_manual/sieve/extensions/duplicate/







Thanks - Paul Kudla (Manager SCOM.CA Internet Services Inc.)

Have A Happy Monday !!!

Scom.ca Internet Services 
004-1009 Byron Street South
Whitby, Ontario - Canada
L1N 4S3

Toronto 416.642.7266
Main 1.866.411.7266
Fax 1.888.892.7266
Email p...@scom.ca

On 5/13/2024 9:48 AM, Stephan Bosch via dovecot wrote:


Op 13-5-2024 om 14:14 schreef Nick Urbanik via dovecot:

On Thu, 2024-04-25 at 14:36 +1000, Nick Urbanik via dovecot wrote:

On Tue, 2024-04-23 at 09:42 +1000, Nick Urbanik via dovecot wrote:

Dear Folks,

I am in the process of learning Sieve, and want to be able to keep
an
email in Inbox, while also keeping *one* copy in another folder.
However, the same mail is copied from Inbox multiple times when I
run
sieve-filter -Wev .dovecot.sieve Inbox

My attempt to prevent this fails:
...
} elsif header :comparator "i;octet" :contains "From"
"pay...@paypal.com.au"  {
 if not duplicate {
 fileinto "paypal";
 }
 keep;
}

Please can anyone enlighten me?

If there is a Dovecot Sieve mailing list, please point me to it.


OK, let me rephrase the problem:

I want to keep a copy of an email in Inbox and put a copy into another
folder, but only once, even if I run sieve-filter as above multiple
times. I know there are many who know how to do this and I would really
appreciate your generous suggestions.


The sieve-filter tool was mainly created to mend mailboxes after 
failures in sieve execution at delivery time. It currently does not 
provide access to the duplicate database and any actions that operate on 
it are ignored.


What exactly are you using sieve-filter for? Why are the Dovecot LDA or 
the Dovecot LMTP service with the Sieve plugin not fulfilling your needs?


Regards,

Stephan.
___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Re: Sieve: Avoiding duplicates in a folder while keeping in Inbox

2024-05-13 Thread Stephan Bosch via dovecot


Op 13-5-2024 om 14:14 schreef Nick Urbanik via dovecot:

On Thu, 2024-04-25 at 14:36 +1000, Nick Urbanik via dovecot wrote:

On Tue, 2024-04-23 at 09:42 +1000, Nick Urbanik via dovecot wrote:

Dear Folks,

I am in the process of learning Sieve, and want to be able to keep
an
email in Inbox, while also keeping *one* copy in another folder.
However, the same mail is copied from Inbox multiple times when I
run
sieve-filter -Wev .dovecot.sieve Inbox

My attempt to prevent this fails:
...
} elsif header :comparator "i;octet" :contains "From"
"pay...@paypal.com.au"  {
     if not duplicate {
     fileinto "paypal";
     }
     keep;
}

Please can anyone enlighten me?

If there is a Dovecot Sieve mailing list, please point me to it.


OK, let me rephrase the problem:

I want to keep a copy of an email in Inbox and put a copy into another
folder, but only once, even if I run sieve-filter as above multiple
times. I know there are many who know how to do this and I would really
appreciate your generous suggestions.


The sieve-filter tool was mainly created to mend mailboxes after 
failures in sieve execution at delivery time. It currently does not 
provide access to the duplicate database and any actions that operate on 
it are ignored.


What exactly are you using sieve-filter for? Why are the Dovecot LDA or 
the Dovecot LMTP service with the Sieve plugin not fulfilling your needs?


Regards,

Stephan.
___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Re: Sieve: Avoiding duplicates in a folder while keeping in Inbox

2024-05-13 Thread Nick Urbanik via dovecot
On Thu, 2024-04-25 at 14:36 +1000, Nick Urbanik via dovecot wrote:
> On Tue, 2024-04-23 at 09:42 +1000, Nick Urbanik via dovecot wrote:
> > Dear Folks,
> > 
> > I am in the process of learning Sieve, and want to be able to keep
> > an
> > email in Inbox, while also keeping *one* copy in another folder. 
> > However, the same mail is copied from Inbox multiple times when I
> > run
> > sieve-filter -Wev .dovecot.sieve Inbox
> > 
> > My attempt to prevent this fails:
> > ...
> > } elsif header :comparator "i;octet" :contains "From"
> > "pay...@paypal.com.au" {
> >     if not duplicate {
> >     fileinto "paypal";
> >     }
> >     keep;
> > }
> > 
> > Please can anyone enlighten me?
> 
> If there is a Dovecot Sieve mailing list, please point me to it.
> 

OK, let me rephrase the problem:

I want to keep a copy of an email in Inbox and put a copy into another
folder, but only once, even if I run sieve-filter as above multiple
times. I know there are many who know how to do this and I would really
appreciate your generous suggestions.
___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Re: Failing to archive many messages

2024-05-09 Thread Francis Augusto Medeiros-Logeay via dovecot



> On 9 May 2024, at 19:45, dovecot-requ...@dovecot.org wrote:
> 
> Francis Augusto Medeiros-Logeay via dovecot skrev den 2024-05-09 12:29:
> 
>>> If you want to analyze emails, why not do it with scheduled crons 
>>> after they are archived?
> 
> maybe ask for skip older then one day in here 
> https://github.com/isbg/isbg/tree/master
> 
> while roundcube just set the needed flag for retest ?
> 
>> wouldn't it reanalyze all archived messages anyway?
> 
> sometimes email is ham at recpt stage, while its spam later on test, 
> this is why isbg is made imho :)


I see.

But I wonder if there is something wrong with what I already have. It worked 
fine for years, and it works fine for most of my users. I tested with a few 
accounts, and Archving (with its sa-learn script) works blazingly fast. But 
with one user - happens to be mine - it is super slow when archiving, most 
likely due the sa-learn.

Best,

Francis
___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Re: Authentication questions

2024-05-09 Thread Christopher Wensink via dovecot

This may help, see the post from 9/9/2021:
https://github.com/goauthentik/authentik/issues/1234

On 5/9/2024 2:50 PM, Francis Augusto Medeiros-Logeay via dovecot wrote:



On 9 May 2024, at 19:45, Aki Tuomi  wrote:

  

On 09/05/2024 20:15 EEST Francis Augusto Medeiros-Logeay via dovecot 
mailto:dovecot@dovecot.org>> wrote:
  
  
Hi,
  
I was wondering:
  
1 - Is it possible to configure authentication methods per user? For example, oauth2 for most users, but plain for others?

2 - I had a feeling that when oauth2 authentication fails, dovecot tries to 
authenticate via plain with the received token. Doesn’t seem logical, but I get 
my user blocked on my directory server (freeipa) after a few failed oath 
authentications. If so, can this be prevented?
  
Best,
  
Francis

___
dovecot mailing list -- dovecot@dovecot.org 
To unsubscribe send an email to dovecot-le...@dovecot.org 


Yep. See 
https://doc.dovecot.org/configuration_manual/authentication/password_databases_passdb/#passdb-setting
  
you can filter by mechanism.
  
Aki

The weird thing is that I get this still:

May 09 21:45:47 auth: Error: oauth2(myu...@mydomain.com,48.237.124.127): oauth2 
failed: Introspection failed: No username returned
May 09 21:45:47 auth: Error: ldap(myu...@mydomain.com,48.237.124.127): 
ldap_bind() failed: Constraint violation

Even when I have my configuration like this:

auth_mechanisms = $auth_mechanisms xoauth2 oauthbearer


passdb {
   driver = oauth2
   mechanisms = xoauth2 oauthbearer
   args = /etc/dovecot/dovecot-oauth2.conf.ext
   result_failure=return-fail
}

What could be the cause?

Best,
Francis


___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org



--
Christopher Wensink
IS Administrator
Five Star Plastics, Inc
1339 Continental Drive
Eau Claire, WI 54701
Office:  715-831-1682
Mobile:  715-563-3112
Fax:  715-831-6075
cwens...@five-star-plastics.com
www.five-star-plastics.com

___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Re: Authentication questions

2024-05-09 Thread Francis Augusto Medeiros-Logeay via dovecot


> On 9 May 2024, at 19:45, Aki Tuomi  wrote:
> 
>  
>> On 09/05/2024 20:15 EEST Francis Augusto Medeiros-Logeay via dovecot 
>> mailto:dovecot@dovecot.org>> wrote:
>>  
>>  
>> Hi,
>>  
>> I was wondering:
>>  
>> 1 - Is it possible to configure authentication methods per user? For 
>> example, oauth2 for most users, but plain for others?
>> 2 - I had a feeling that when oauth2 authentication fails, dovecot tries to 
>> authenticate via plain with the received token. Doesn’t seem logical, but I 
>> get my user blocked on my directory server (freeipa) after a few failed oath 
>> authentications. If so, can this be prevented?
>>  
>> Best,
>>  
>> Francis
>> ___
>> dovecot mailing list -- dovecot@dovecot.org 
>> To unsubscribe send an email to dovecot-le...@dovecot.org 
>>  
> Yep. See 
> https://doc.dovecot.org/configuration_manual/authentication/password_databases_passdb/#passdb-setting
>  
> you can filter by mechanism.
>  
> Aki

The weird thing is that I get this still: 

May 09 21:45:47 auth: Error: oauth2(myu...@mydomain.com,48.237.124.127): oauth2 
failed: Introspection failed: No username returned
May 09 21:45:47 auth: Error: ldap(myu...@mydomain.com,48.237.124.127): 
ldap_bind() failed: Constraint violation

Even when I have my configuration like this:

auth_mechanisms = $auth_mechanisms xoauth2 oauthbearer


passdb {
  driver = oauth2
  mechanisms = xoauth2 oauthbearer
  args = /etc/dovecot/dovecot-oauth2.conf.ext
  result_failure=return-fail
}

What could be the cause? 

Best,
Francis 


___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Re: Authentication questions

2024-05-09 Thread Francis Augusto Medeiros-Logeay via dovecot


> On 9 May 2024, at 19:45, Aki Tuomi  wrote:
> 
>  
>> On 09/05/2024 20:15 EEST Francis Augusto Medeiros-Logeay via dovecot 
>> mailto:dovecot@dovecot.org>> wrote:
>>  
>>  
>> Hi,
>>  
>> I was wondering:
>>  
>> 1 - Is it possible to configure authentication methods per user? For 
>> example, oauth2 for most users, but plain for others?
>> 2 - I had a feeling that when oauth2 authentication fails, dovecot tries to 
>> authenticate via plain with the received token. Doesn’t seem logical, but I 
>> get my user blocked on my directory server (freeipa) after a few failed oath 
>> authentications. If so, can this be prevented?
>>  
>> Best,
>>  
>> Francis
>> ___
>> dovecot mailing list -- dovecot@dovecot.org 
>> To unsubscribe send an email to dovecot-le...@dovecot.org 
>>  
> Yep. See 
> https://doc.dovecot.org/configuration_manual/authentication/password_databases_passdb/#passdb-setting
>  
> you can filter by mechanism.
>  
> Aki

Thanks, this is great!

Best,
Francis

___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Re: Authentication questions

2024-05-09 Thread Aki Tuomi via dovecot
 
 On 09/05/2024 20:15 EEST Francis Augusto Medeiros-Logeay via dovecot
  wrote:
  
  
 Hi,
  
 I was wondering:
  
 1 - Is it possible to configure authentication methods per user? For
 example, oauth2 for most users, but plain for others?
 2 - I had a feeling that when oauth2 authentication fails, dovecot
 tries to authenticate via plain with the received token. Doesn’t seem
 logical, but I get my user blocked on my directory server (freeipa)
 after a few failed oath authentications. If so, can this be
 prevented?
  
 Best,
  
 Francis
 ___
 dovecot mailing list -- dovecot@dovecot.org
 To unsubscribe send an email to dovecot-le...@dovecot.org
 
Yep. See https://doc.dovecot.org/configuration_manual/authentication/
password_databases_passdb/#passdb-setting
 
you can filter by mechanism.
 
Aki
___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Re: Failing to archive many messages

2024-05-09 Thread Francis Augusto Medeiros-Logeay via dovecot


> On 9 May 2024, at 12:55, dovecot-requ...@dovecot.org wrote:
> 
> Francis Augusto Medeiros-Logeay via dovecot skrev den 2024-05-09 11:28:
> 
>> Actually, I don’t know here if that’s the sieve that’s slowing down the 
>> process, or if it is something else.
>> I see that yeah, sa-learn takes a little while to execute. But maybe 
>> the issue is that Dovecot doesn’t seem to
>> release the IMAP connection until each message went through sieve. This 
>> gives me some timeout on
>> Roundcube (it says just «server error»). All the messages are indeed 
>> archived.
>> 
>> Is that something here I could do better?
> 
> use tmpfs to store tmp content, or try solve it without pipe with imho 
> creates tmp files
> 
> https://doc.dovecot.org/configuration_manual/howto/antispam_with_sieve/
> 
> try spamc

Thanks Benny. Using spamc and sa-learn isn’t a bit the same? But I’ll check the 
docs.

Bestm

Francis 

___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Authentication questions

2024-05-09 Thread Francis Augusto Medeiros-Logeay via dovecot
Hi,

I was wondering:

1 - Is it possible to configure authentication methods per user? For example, 
oauth2 for most users, but plain for others?
2 - I had a feeling that when oauth2 authentication fails, dovecot tries to 
authenticate via plain with the received token. Doesn’t seem logical, but I get 
my user blocked on my directory server (freeipa) after a few failed oath 
authentications. If so, can this be prevented?

Best,

Francis 
___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Re: Failing to archive many messages

2024-05-09 Thread Benny Pedersen via dovecot

Francis Augusto Medeiros-Logeay via dovecot skrev den 2024-05-09 12:29:

If you want to analyze emails, why not do it with scheduled crons 
after they are archived?


maybe ask for skip older then one day in here 
https://github.com/isbg/isbg/tree/master


while roundcube just set the needed flag for retest ?


wouldn't it reanalyze all archived messages anyway?


sometimes email is ham at recpt stage, while its spam later on test, 
this is why isbg is made imho :)

___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


sieve duplicate with 2.3.16

2024-05-09 Thread Jean-Max Reymond via dovecot

Hi,
I was running dovecot 2.3.7.2 with ubuntu 20.04
Lastweek, I upgrade to Ubuntu 22.04 and dovecot 2.3.16
My configuration was migrated and all is fine expected the sieve 
duplicate. It does notwork and i don't understand why.


% doveconf -n
# 2.3.16 (7e2e900c1a): /etc/dovecot/dovecot.conf
# Pigeonhole version 0.5.16 (09c29328)
managesieve(ubuntu): Debug: sieve: Pigeonhole version 0.5.16 (09c29328) 
initializing
managesieve(ubuntu): Debug: sieve: include: sieve_global is not set; it 
is currently not possible to include `:global' scripts.

# OS: Linux 5.15.0-105-generic x86_64 Ubuntu 22.04.4 LTS ext4
# Hostname: 2D17911.online-server.cloud
auth_mechanisms = plain login
first_valid_uid = 8
log_debug = category=sieve
mail_fsync = never
mail_location = maildir:/home/Mails/%u
managesieve_notify_capability = mailto
managesieve_sieve_capability = fileinto reject envelope 
encoded-character vacation subaddress comparator-i;ascii-numeric 
relational regex imap4flags copy include variables body enotify 
environment mailbox date index ihave duplicate mime foreverypart extracttext

namespace inbox {
  inbox = yes
  location =
  mailbox Drafts {
special_use = \Drafts
  }
  mailbox Junk {
special_use = \Junk
  }
  mailbox Sent {
special_use = \Sent
  }
  mailbox "Sent Messages" {
special_use = \Sent
  }
  mailbox Trash {
special_use = \Trash
  }
  prefix =
}
passdb {
  args = /etc/dovecot/dovecot-sql.conf.ext
  driver = sql
}
plugin {
  sieve = ~/.dovecot.sieve
  sieve_before = /var/lib/dovecot/sieve/default.sieve
  sieve_dir = ~/sieve
}
postmaster_address = postmas...@ckr-solutions.com
protocols = imap sieve
service auth {
  unix_listener /var/spool/postfix/private/dovecot-auth {
group = postfix
mode = 0660
user = postfix
  }
}
service stats {
  unix_listener stats-writer {
mode = 0666
  }
}
ssl_cert = ssl_cipher_list = 
ALL:!LOW:!SSLv2:ALL:!aNULL:!ADH:!eNULL:!EXP:RC4+RSA:+HIGH:+MEDIUM

ssl_key = # hidden, use -P to show it
userdb {
  driver = passwd
}
userdb {
  args = /etc/dovecot/dovecot-sql.conf.ext
  driver = sql
}
protocol imap {
  imap_client_workarounds = delay-newmail
  mail_max_userip_connections = 10
}
protocol lmtp {
  mail_fsync = optimized
}
protocol lda {
  deliver_log_format = msgid=%m: %$
  mail_fsync = optimized
  mail_plugins = sieve
  postmaster_address = postmas...@ckr-solutions.com
  quota_full_tempfail = yes
  rejection_reason = Your message to <%t> was automatically rejected:%n%r
}
protocol pop3 {
  mail_max_userip_connections = 10
  pop3_client_workarounds = outlook-no-nuls oe-ns-eoh
}

trace dovecot for debug

...
May  9 12:04:50 2D17911 dovecot: 
lda(jmreym...@ckr-solutions.com)<2292077><8XgtAcKfPGZt+SIA4rRGvA>: 
sieve: msgid=<00fb2844-f7b0-47af-8684-bcb090ec9...@ik.me>: stored mail 
into mailbox 'INBOX'
May  9 12:04:50 2D17911 dovecot: 
lda(jmreym...@ckr-solutions.com)<2292077><8XgtAcKfPGZt+SIA4rRGvA>: 
Debug: sieve: msgid=<00fb2844-f7b0-47af-8684-bcb090ec9...@ik.me>: Finish 
implicit keep action
May  9 12:04:50 2D17911 dovecot: 
lda(jmreym...@ckr-solutions.com)<2292077><8XgtAcKfPGZt+SIA4rRGvA>: 
Debug: sieve: msgid=<00fb2844-f7b0-47af-8684-bcb090ec9...@ik.me>: 
Finishing actions
May  9 12:04:50 2D17911 dovecot: 
lda(jmreym...@ckr-solutions.com)<2292077><8XgtAcKfPGZt+SIA4rRGvA>: 
Debug: sieve: msgid=<00fb2844-f7b0-47af-8684-bcb090ec9...@ik.me>: Finish 
duplicate_mark action
May  9 12:04:50 2D17911 dovecot: 
lda(jmreym...@ckr-solutions.com)<2292077><8XgtAcKfPGZt+SIA4rRGvA>: 
Debug: sieve: msgid=<00fb2844-f7b0-47af-8684-bcb090ec9...@ik.me>: 
Finished executing result (final, status=ok, keep=yes)
May  9 12:04:50 2D17911 dovecot: 
lda(jmreym...@ckr-solutions.com)<2292077><8XgtAcKfPGZt+SIA4rRGvA>: 
Debug: sieve: multi-script: Sequence finished (status=ok, keep=yes)
May  9 12:04:50 2D17911 dovecot: 
lda(jmreym...@ckr-solutions.com)<2292077><8XgtAcKfPGZt+SIA4rRGvA>: 
Debug: sieve: multi-script: Destroy
May  9 12:04:50 2D17911 postfix/pipe[2292075]: DE15D396023E: 
to=, orig_to=, 
relay=dovecot, delay=0.35, delays=0.09/0.01/0/0.25, dsn=2.0.0, 
status=sent (delivered via dovecot service)

May  9 12:04:50 2D17911 postfix/qmgr[1855785]: DE15D396023E: removed
___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


sieve duplicate with 2.3.16

2024-05-09 Thread Jean-Max Reymond via dovecot

Hi,
I was running dovecot 2.3.7.2 with ubuntu 20.04
Lastweek, I upgrade to Ubuntu 22.04 and dovecot 2.3.16
My configuration was migrated and all is fine expected the sieve 
duplicate. It does notwork and i don't understand why.


% doveconf -n
# 2.3.16 (7e2e900c1a): /etc/dovecot/dovecot.conf
# Pigeonhole version 0.5.16 (09c29328)
managesieve(ubuntu): Debug: sieve: Pigeonhole version 0.5.16 (09c29328) 
initializing
managesieve(ubuntu): Debug: sieve: include: sieve_global is not set; it 
is currently not possible to include `:global' scripts.

# OS: Linux 5.15.0-105-generic x86_64 Ubuntu 22.04.4 LTS ext4
# Hostname: 2D17911.online-server.cloud
auth_mechanisms = plain login
first_valid_uid = 8
log_debug = category=sieve
mail_fsync = never
mail_location = maildir:/home/Mails/%u
managesieve_notify_capability = mailto
managesieve_sieve_capability = fileinto reject envelope 
encoded-character vacation subaddress comparator-i;ascii-numeric 
relational regex imap4flags copy include variables body enotify 
environment mailbox date index ihave duplicate mime foreverypart extracttext

namespace inbox {
  inbox = yes
  location =
  mailbox Drafts {
special_use = \Drafts
  }
  mailbox Junk {
special_use = \Junk
  }
  mailbox Sent {
special_use = \Sent
  }
  mailbox "Sent Messages" {
special_use = \Sent
  }
  mailbox Trash {
special_use = \Trash
  }
  prefix =
}
passdb {
  args = /etc/dovecot/dovecot-sql.conf.ext
  driver = sql
}
plugin {
  sieve = ~/.dovecot.sieve
  sieve_before = /var/lib/dovecot/sieve/default.sieve
  sieve_dir = ~/sieve
}
postmaster_address = postmas...@ckr-solutions.com
protocols = imap sieve
service auth {
  unix_listener /var/spool/postfix/private/dovecot-auth {
group = postfix
mode = 0660
user = postfix
  }
}
service stats {
  unix_listener stats-writer {
mode = 0666
  }
}
ssl_cert = ssl_cipher_list = 
ALL:!LOW:!SSLv2:ALL:!aNULL:!ADH:!eNULL:!EXP:RC4+RSA:+HIGH:+MEDIUM

ssl_key = # hidden, use -P to show it
userdb {
  driver = passwd
}
userdb {
  args = /etc/dovecot/dovecot-sql.conf.ext
  driver = sql
}
protocol imap {
  imap_client_workarounds = delay-newmail
  mail_max_userip_connections = 10
}
protocol lmtp {
  mail_fsync = optimized
}
protocol lda {
  deliver_log_format = msgid=%m: %$
  mail_fsync = optimized
  mail_plugins = sieve
  postmaster_address = postmas...@ckr-solutions.com
  quota_full_tempfail = yes
  rejection_reason = Your message to <%t> was automatically rejected:%n%r
}
protocol pop3 {
  mail_max_userip_connections = 10
  pop3_client_workarounds = outlook-no-nuls oe-ns-eoh
}

trace dovecot for debug

May  9 12:04:49 2D17911 postfix/qmgr[1855785]: DE15D396023E: 
from=, size=2313, nrcpt=3 (queue active)
May  9 12:04:50 2D17911 amavis[2290921]: (2290921-01) Passed CLEAN 
{RelayedOpenRelay}, [185.125.25.11]:58641 [185.125.25.11] 
 -> 
,, Queue-ID: 
91D2E3960097, Message-ID: <00fb2844-f7b0-47af-8684-bcb090ec9...@ik.me>, 
mail_id: lukXw6VSEsMW, Hits: -2.821, size: 1854, queued_as: 
DE15D396023E, dkim_sd=20200325:ik.me, 5242 ms
May  9 12:04:50 2D17911 postfix/smtp[2292055]: 91D2E3960097: 
to=, orig_to=, 
relay=127.0.0.1[127.0.0.1]:10024, delay=5.4, delays=0.16/0.01/0.09/5.2, 
dsn=2.0.0, status=sent (250 2.0.0 from MTA(smtp:[127.0.0.1]:10025): 250 
2.0.0 Ok: queued as DE15D396023E)
May  9 12:04:50 2D17911 postfix/smtp[2292055]: 91D2E3960097: 
to=, relay=127.0.0.1[127.0.0.1]:10024, 
delay=5.4, delays=0.16/0.01/0.09/5.2, dsn=2.0.0, status=sent (250 2.0.0 
from MTA(smtp:[127.0.0.1]:10025): 250 2.0.0 Ok: queued as DE15D396023E)

May  9 12:04:50 2D17911 postfix/qmgr[1855785]: 91D2E3960097: removed
May  9 12:04:50 2D17911 dovecot: 
lda(jmreym...@ckr-solutions.com)<2292074>: 
Debug: sieve: Pigeonhole version 0.5.16 (09c29328) initializing
May  9 12:04:50 2D17911 dovecot: 
lda(jmreym...@ckr-solutions.com)<2292074>: 
Debug: sieve: include: sieve_global is not set; it is currently not 
possible to include `:global' scripts.
May  9 12:04:50 2D17911 dovecot: 
lda(jmreym...@ckr-solutions.com)<2292074>: 
Debug: sieve: file storage: Using active Sieve script path: 
/home/Mails/jmreym...@ckr-solutions.com/.dovecot.sieve
May  9 12:04:50 2D17911 dovecot: 
lda(jmreym...@ckr-solutions.com)<2292074>: 
Debug: sieve: file storage: Using script storage path: 
/home/Mails/jmreym...@ckr-solutions.com//sieve
May  9 12:04:50 2D17911 dovecot: 
lda(jmreym...@ckr-solutions.com)<2292074>: 
Debug: sieve: file storage: Relative path to sieve storage in active 
link: sieve/
May  9 12:04:50 2D17911 dovecot: 
lda(jmreym...@ckr-solutions.com)<2292074>: 
Debug: sieve: file storage: Using Sieve script path: 
/home/Mails/jmreym...@ckr-solutions.com/.dovecot.sieve
May  9 12:04:50 2D17911 dovecot: 
lda(jmreym...@ckr-solutions.com)<2292074>: 
Debug: sieve: file storage: Storage path 
`/home/Mails/jmreym...@ckr-solutions.com/.dovecot.sieve' not found
May  9 12:04:50 2D17911 dovecot: 
lda(jmreym...@ckr-solutions.com)<2292074>: 
Debug: sieve: User has no active script in storage 

RE: Failing to archive many messages

2024-05-09 Thread Marc via dovecot
> On 2024-05-09 12:03, Marc wrote:
> > I see report-ham, instead of archiving? I am not entirely sure if this
> > is an efficient approach to archiving. My users can only set a flag for
> > 'auto archiving' via sieve and then 3 months after every year messages
> > are being moved by cron jobs, and modification logs are put into their
> > accounts. This all is only happening in 'dead hours'.
> >
> > If you want to analyze emails, why not do it with scheduled crons after
> > they are archived?
> >
> 
> wouldn't it reanalyze all archived messages anyway?

No you should add search filter for messages like from today, this week or so.

___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Re: Failing to archive many messages

2024-05-09 Thread Francis Augusto Medeiros-Logeay via dovecot




=

On 2024-05-09 12:03, Marc wrote:
I see report-ham, instead of archiving? I am not entirely sure if this 
is an efficient approach to archiving. My users can only set a flag for 
'auto archiving' via sieve and then 3 months after every year messages 
are being moved by cron jobs, and modification logs are put into their 
accounts. This all is only happening in 'dead hours'.


If you want to analyze emails, why not do it with scheduled crons after 
they are archived?




wouldn't it reanalyze all archived messages anyway?
___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Re: Failing to archive many messages

2024-05-09 Thread Benny Pedersen via dovecot

Francis Augusto Medeiros-Logeay via dovecot skrev den 2024-05-09 11:28:

Actually, I don’t know here if that’s the sieve that’s slowing down the 
process, or if it is something else.
I see that yeah, sa-learn takes a little while to execute. But maybe 
the issue is that Dovecot doesn’t seem to
release the IMAP connection until each message went through sieve. This 
gives me some timeout on
Roundcube (it says just «server error»). All the messages are indeed 
archived.


Is that something here I could do better?


use tmpfs to store tmp content, or try solve it without pipe with imho 
creates tmp files


https://doc.dovecot.org/configuration_manual/howto/antispam_with_sieve/

try spamc
___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


RE: Failing to archive many messages

2024-05-09 Thread Marc via dovecot
I see report-ham, instead of archiving? I am not entirely sure if this is an 
efficient approach to archiving. My users can only set a flag for 'auto 
archiving' via sieve and then 3 months after every year messages are being 
moved by cron jobs, and modification logs are put into their accounts. This all 
is only happening in 'dead hours'.

If you want to analyze emails, why not do it with scheduled crons after they 
are archived?


> I noticed that my sieve rules are taking a very long time when archiving
> messages. I can see on my logs that every message takes about two-three
> seconds to be evaluated.
> 
> My sieve for the Archive is this:
> 
> cat /var/mail/vmail/mail/sieve/global/report-ham.sieve
> require ["vnd.dovecot.pipe", "copy", "imapsieve", "environment",
> "variables"];
> 
> if environment :matches "imap.mailbox" "*" {
>   set "mailbox" "${1}";
> }
> 
> if string "${mailbox}" "Trash" {
>   stop;
> }
> 
> if environment :matches "imap.user" "*" {
>   set "username" "${1}";
> }
> 
> pipe :copy "sa-learn-ham.sh" [ "${username}" ];
> 
> And my sa-learn-ham.sh is this:
> 
> #!/bin/sh
> export PATH="/usr/sbin:/usr/bin:/usr/local/bin:/usr/local/sbin:$PATH"
> exec /usr/bin/sa-learn -u ${1} —ham
> 
> 
> 
> 
> May 09 09:17:10 imap(fran...@med-lo.eu)<9349><4gm6NAAYsagKCige>: Debug:
> sieve: multi-script: Start execute sequence
> May 09 09:17:10 imap(fran...@med-lo.eu)<9349><4gm6NAAYsagKCige>: Debug:
> 
> I also noticed this happens for a few accounts. Do you know what could be
> causing this?
> 
> Best,
> Francis
> ___
> dovecot mailing list -- dovecot@dovecot.org
> To unsubscribe send an email to dovecot-le...@dovecot.org
___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Re: Failing to archive many messages

2024-05-09 Thread Francis Augusto Medeiros-Logeay via dovecot
> I noticed that my sieve rules are taking a very long time when archiving 
> messages. I can see on my logs that every message takes about two-three 
> seconds to be evaluated.
> 
> I also noticed this happens for a few accounts. Do you know what could be 
> causing this?
> 
> Best,
> Francis
> 

Actually, I don’t know here if that’s the sieve that’s slowing down the 
process, or if it is something else.
I see that yeah, sa-learn takes a little while to execute. But maybe the issue 
is that Dovecot doesn’t seem to release the IMAP connection until each message 
went through sieve. This gives me some timeout on Roundcube (it says just 
«server error»). All the messages are indeed archived.

Is that something here I could do better?

Best,
Francis 
___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Re: OAUTH2 problem when migrating to Ubuntu 24.04

2024-05-09 Thread Francis Augusto Medeiros-Logeay via dovecot




---
Francis Augusto Medeiros-Logeay
Oslo, Norway

On 2024-05-09 10:11, Aki Tuomi wrote:
On 09/05/2024 10:46 EEST Francis Augusto Medeiros-Logeay via dovecot 
 wrote:



Hi,

I have a Dovecot server on Ubuntu 22.04, which works fine with Oauth2. 
I am building a new container based on Ubuntu 24.04. IMAP seems to 
work fine with plain authentication, but oauth2 fails (Dovecot 
v2.3.21). Same configuration as before.


However, I got this message:

May 09 09:41:57 auth: Error: 
oauth2(f...@mydomain.eu,10.110.41.32,): oauth2 
failed: Introspection failed: No username returned


Weird, as it does indeed seems to get the username (as seen on the 
log).


Any clue on why this fails?

Best,

Francis


It means that introspection did not return username for the token. This 
is important, because if the token is not validated to belong to the 
user attempting to log in, anyone could login as anyone with any token.


Aki


Actually, the problem was not that. It was some change on Dovecot where 
suddenly I need to add "clientid:client_secret@" on the url (googled it, 
and saw that you advised that before). Now it works.




Best,
Francis
___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Re: OAUTH2 problem when migrating to Ubuntu 24.04

2024-05-09 Thread Aki Tuomi via dovecot


> On 09/05/2024 10:46 EEST Francis Augusto Medeiros-Logeay via dovecot 
>  wrote:
> 
>  
> Hi,
> 
> I have a Dovecot server on Ubuntu 22.04, which works fine with Oauth2. I am 
> building a new container based on Ubuntu 24.04. IMAP seems to work fine with 
> plain authentication, but oauth2 fails (Dovecot v2.3.21). Same configuration 
> as before.
> 
> However, I got this message:
> 
> May 09 09:41:57 auth: Error: 
> oauth2(f...@mydomain.eu,10.110.41.32,): oauth2 failed: 
> Introspection failed: No username returned
> 
> Weird, as it does indeed seems to get the username (as seen on the log). 
> 
> Any clue on why this fails? 
> 
> Best,
> 
> Francis

It means that introspection did not return username for the token. This is 
important, because if the token is not validated to belong to the user 
attempting to log in, anyone could login as anyone with any token.

Aki
___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


OAUTH2 problem when migrating to Ubuntu 24.04

2024-05-09 Thread Francis Augusto Medeiros-Logeay via dovecot
Hi,

I have a Dovecot server on Ubuntu 22.04, which works fine with Oauth2. I am 
building a new container based on Ubuntu 24.04. IMAP seems to work fine with 
plain authentication, but oauth2 fails (Dovecot v2.3.21). Same configuration as 
before.

However, I got this message:

May 09 09:41:57 auth: Error: 
oauth2(f...@mydomain.eu,10.110.41.32,): oauth2 failed: 
Introspection failed: No username returned

Weird, as it does indeed seems to get the username (as seen on the log). 

Any clue on why this fails? 

Best,

Francis
___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Re: Failing to archive many messages

2024-05-09 Thread Francis Augusto Medeiros-Logeay via dovecot
I noticed that my sieve rules are taking a very long time when archiving 
messages. I can see on my logs that every message takes about two-three seconds 
to be evaluated. 

My sieve for the Archive is this:

cat /var/mail/vmail/mail/sieve/global/report-ham.sieve
require ["vnd.dovecot.pipe", "copy", "imapsieve", "environment", "variables"];

if environment :matches "imap.mailbox" "*" {
  set "mailbox" "${1}";
}

if string "${mailbox}" "Trash" {
  stop;
}

if environment :matches "imap.user" "*" {
  set "username" "${1}";
}

pipe :copy "sa-learn-ham.sh" [ "${username}" ];

And my sa-learn-ham.sh is this:

#!/bin/sh
export PATH="/usr/sbin:/usr/bin:/usr/local/bin:/usr/local/sbin:$PATH"
exec /usr/bin/sa-learn -u ${1} —ham




May 09 09:17:10 imap(fran...@med-lo.eu)<9349><4gm6NAAYsagKCige>: Debug: sieve: 
multi-script: Start execute sequence
May 09 09:17:10 imap(fran...@med-lo.eu)<9349><4gm6NAAYsagKCige>: Debug: sieve: 
Executing script from `/var/mail/vmail/mail/sieve/global/report-ham.svbin'
May 09 09:17:10 imap(fran...@med-lo.eu)<9349><4gm6NAAYsagKCige>: Debug: sieve: 
multi-script: Run script `/var/mail/vmail/mail/sieve/global/report-ham.svbin'
May 09 09:17:10 imap(fran...@med-lo.eu)<9349><4gm6NAAYsagKCige>: Debug: sieve: 
Started running script `/var/mail/vmail/mail/sieve/global/report-ham.svbin'
May 09 09:17:10 imap(fran...@med-lo.eu)<9349><4gm6NAAYsagKCige>: Debug: sieve: 
Finished running script `ok' 
(status=/var/mail/vmail/mail/sieve/global/report-ham.svbin, resource usage: no 
usage recorded)
May 09 09:17:10 imap(fran...@med-lo.eu)<9349><4gm6NAAYsagKCige>: Debug: sieve: 
multi-script: Execute result
May 09 09:17:10 imap(fran...@med-lo.eu)<9349><4gm6NAAYsagKCige>: Debug: sieve: 
uid=191458: Executing result (status=ok, commit=no)
May 09 09:17:10 imap(fran...@med-lo.eu)<9349><4gm6NAAYsagKCige>: Debug: sieve: 
uid=191458: Starting execution of actions
May 09 09:17:10 imap(fran...@med-lo.eu)<9349><4gm6NAAYsagKCige>: Debug: sieve: 
uid=191458: Executing actions
May 09 09:17:10 imap(fran...@med-lo.eu)<9349><4gm6NAAYsagKCige>: Debug: sieve: 
uid=191458: Executing pipe action
May 09 09:17:10 imap(fran...@med-lo.eu)<9349><4gm6NAAYsagKCige>: Debug: sieve: 
action pipe: running program: sa-learn-ham.sh
May 09 09:17:10 imap(fran...@med-lo.eu)<9349><4gm6NAAYsagKCige>: Debug: program 
exec:/var/mail/vmail/mail/sieve/global/scripts/sa-learn-ham.sh: Created
May 09 09:17:10 imap(fran...@med-lo.eu)<9349><4gm6NAAYsagKCige>: Debug: program 
exec:/var/mail/vmail/mail/sieve/global/scripts/sa-learn-ham.sh: Pass 
environment: USER=fran...@med-lo.eu
May 09 09:17:10 imap(fran...@med-lo.eu)<9349><4gm6NAAYsagKCige>: Debug: program 
exec:/var/mail/vmail/mail/sieve/global/scripts/sa-learn-ham.sh: Pass 
environment: HOME=/var/mail/vmail/med-lo.eu/francis
May 09 09:17:10 imap(fran...@med-lo.eu)<9349><4gm6NAAYsagKCige>: Debug: program 
exec:/var/mail/vmail/mail/sieve/global/scripts/sa-learn-ham.sh: Pass 
environment: HOST=fb58607074fd
May 09 09:17:10 imap(fran...@med-lo.eu)<9349><4gm6NAAYsagKCige>: Debug: Mailbox 
Archive: UID 191458: Opened mail because: mail stream
May 09 09:17:10 imap(fran...@med-lo.eu)<9349><4gm6NAAYsagKCige>: Debug: sieve: 
uid=191458: Finished executing pipe action (status=ok, keep=implicit)
May 09 09:17:10 imap(fran...@med-lo.eu)<9349><4gm6NAAYsagKCige>: Debug: sieve: 
uid=191458: Finished executing actions (status=ok, keep=implicit)
May 09 09:17:10 imap(fran...@med-lo.eu)<9349><4gm6NAAYsagKCige>: Debug: sieve: 
uid=191458: Finished executing result (no commit, status=ok, keep=yes)
May 09 09:17:10 imap(fran...@med-lo.eu)<9349><4gm6NAAYsagKCige>: Debug: sieve: 
multi-script: Sequence active
May 09 09:17:10 imap(fran...@med-lo.eu)<9349><4gm6NAAYsagKCige>: Debug: sieve: 
multi-script: Finishing sequence (status=ok)
May 09 09:17:10 imap(fran...@med-lo.eu)<9349><4gm6NAAYsagKCige>: Debug: sieve: 
uid=191458: Executing result (status=ok, commit=yes)
May 09 09:17:10 imap(fran...@med-lo.eu)<9349><4gm6NAAYsagKCige>: Debug: sieve: 
uid=191458: Starting execution of actions
May 09 09:17:10 imap(fran...@med-lo.eu)<9349><4gm6NAAYsagKCige>: Debug: sieve: 
uid=191458: Executing actions
May 09 09:17:10 imap(fran...@med-lo.eu)<9349><4gm6NAAYsagKCige>: Debug: sieve: 
uid=191458: Finished executing actions (status=ok, keep=implicit)
May 09 09:17:10 imap(fran...@med-lo.eu)<9349><4gm6NAAYsagKCige>: Debug: sieve: 
uid=191458: Execute implicit keep (failure=no)
May 09 09:17:10 imap(fran...@med-lo.eu)<9349><4gm6NAAYsagKCige>: Debug: sieve: 
uid=191458: Start storing into mailbox Archive
May 09 09:17:10 imap(fran...@med-lo.eu)<9349><4gm6NAAYsagKCige>: Debug: sieve: 
uid=191458: Executing implicit keep action
May 09 09:17:10 imap(fran...@med-lo.eu)<9349><4gm6NAAYsagKCige>: Debug: sieve: 
uid=191458: Execute storing into mailbox 'Archive'
May 09 09:17:10 imap(fran...@med-lo.eu)<9349><4gm6NAAYsagKCige>: Debug: sieve: 
uid=191458: Updated existing mail in mailbox 'Archive'
May 09 09:17:10 imap(fran...@med-lo.eu)<9349><4gm6NAAYsagKCige>: 

Re: Namespace configuration for archive in different storage

2024-05-06 Thread George Kontostanos via dovecot
On Mon, May 6, 2024 at 4:28 PM Daniele Rinaldi via dovecot
 wrote:
>
> Hi guys any help for that?
>
> On 12/04/24 12:30, Daniele Rinaldi via dovecot wrote:
> > Hi guys,
> > At the moment i was able to configure the namespace for reading mails in the
> > second storage.
> > However, Thunderbird cannot access the 'cur' folder inside the user's 
> > Maildir
> > (inside the second storage); instead, it only sees a ghost folder with the
> > namespace prefix.
> > So, currently, the client can view all subfolders inside the Maildir folder,
> > including Trash and Drafts, but not 'cur'.
> > To be more specific, my plan is to obtain a clone of the Inbox for archiving
> > mails on a different storage where the Inbox is hosted.
> > Is my namespace configuration right?
> > Thank you.
> > Daniele
> > this is my doveconf -n:
> > namespace Archivio {
> >disabled = no
> >hidden = no
> >ignore_on_failure = no
> >inbox = no
> >list = yes
> >location =maildir:/mnt/mail-storage-archivio/%u/Maildir
> >prefix = Archivio esterno.
> >separator = .
> >subscriptions = no
> >type = private
> > }
> > namespace inbox {
> >inbox = yes
> >location =
> >mailbox Drafts {
> >  special_use = \Drafts
> >}
> >mailbox Junk {
> >  special_use = \Junk
> >}
> >mailbox "Posta inviata" {
> >  special_use = \Sent
> >}
> >mailbox Sent {
> >  special_use = \Sent
> >}
> >mailbox "Sent Messages" {
> >  special_use = \Sent
> >}
> >mailbox Trash {
> >  special_use = \Trash
> >}
> >prefix =
> > }
> > passdb {
> >args = /etc/dovecot/dovecot-ldap.conf
> >driver = ldap
> > }
> > plugin {
> >sieve =file:/var/www/html/ooo/%n;active=/var/www/html/ooo/%n/script
> >sieve_default = /var/www/html/ooo/default.sieve
> >sieve_duplicate_default_period = 14d
> >sieve_duplicate_max_period = 7d
> >sieve_extensions = +duplicate +notify +imapflags +vacation-seconds
> >sieve_user_log = /var/www/html/ooo/%n/sieve_error.log
> > }
> > protocols = " imap lmtp sieve pop3"
> > replication_max_conns = 1
> > service aggregator {
> >fifo_listener replication-notify-fifo {
> >  user = vmail
> >}
> >unix_listener replication-notify {
> >  user = vmail
> >}
> > }
> > service auth {
> >unix_listener /var/spool/postfix/private/auth {
> >  group = postfix
> >  mode = 0660
> >  user = postfix
> >}
> >unix_listener auth-master {
> >  group = vmail
> >  mode = 0660
> >  user = vmail
> >}
> > }
> > service dict {
> >unix_listener dict {
> >  group = vmail
> >  mode = 0600
> >  user = vmail
> >}
> > }
> > service doveadm {
> >inet_listener {
> >  port = 12345
> >}
> > }
> > service imap-login {
> >process_limit = 200
> > }
> > service imap {
> >vsz_limit = 1 G
> > }
> > service lmtp {
> >process_min_avail = 5
> >unix_listener /var/spool/postfix/private/dovecot-lmtp {
> >  group = postfix
> >  mode = 0600
> >  user = postfix
> >}
> >user = vmail
> > }
> > service managesieve-login {
> >inet_listener sieve {
> >  port = 4190
> >}
> >process_min_avail = 10
> >service_count = 1
> > }
> > service replicator {
> >process_min_avail = 1
> >unix_listener replicator-doveadm {
> >  mode = 0666
> >  user = vmail
> >}
> > }
> > service stats {
> >unix_listener stats-reader {
> >  group = vmail
> >  mode = 0666
> >  user = vmail
> >}
> >unix_listener stats-writer {
> >  group = vmail
> >  mode = 0666
> >  user = vmail
> >}
> > }
> > ssl_cert = ***(removed for privacy)
> > ssl_cipher_list =ALL:!LOW:!aNULL:!eNULL:!SSLv2:!RC4:!MD5:!DES:!EXP:!SEED:
> > !IDEA:!3DES
> > ssl_dh = # hidden, use -P to show it
> > ssl_key = # hidden, use -P to show it
> > userdb {
> >args = /etc/dovecot/dovecot-ldap.conf
> >driver = ldap
> > }
> > protocol lda {
> >auth_socket_path = /var/run/dovecot/auth-master
> >hostname = ganimede-dev-rm.secer.it
> >mail_plugins = " notify replication sieve quota"
> > }
> > protocol imap {
> >mail_plugins = " notify replication zlib"
> > }
> > protocol sieve {
> >mail_max_userip_connections = 10
> >managesieve_implementation_string = Dovecot Pigeonhole
> >managesieve_logout_format = bytes=%i/%o
> >managesieve_max_compile_errors = 5
> >managesieve_max_line_length = 64 k
> > }
> > protocol pop3 {
> >mail_plugins = " notify replication zlib"
> > }
> >
> > On 10/04/24 14:47, Daniele Rinaldi via dovecot wrote:
> >   Hello,
> >   i made this namespace configuration inside "10-mail.conf":
> >
> >   namespace Archives {
> >   type = private
> >   disabled = no
> >   hidden = no
> >   list = yes
> >   ignore_on_failure = no
> >   inbox = no
> >   location =maildir:/mnt/archive-mail-storage/%n/Maildir
> >   prefix = "Archive."
> >   subscriptions = yes

Re: Namespace configuration for archive in different storage

2024-05-06 Thread Daniele Rinaldi via dovecot

Hi guys any help for that?

On 12/04/24 12:30, Daniele Rinaldi via dovecot wrote:

Hi guys,
At the moment i was able to configure the namespace for reading mails in the
second storage.
However, Thunderbird cannot access the 'cur' folder inside the user's Maildir
(inside the second storage); instead, it only sees a ghost folder with the
namespace prefix.
So, currently, the client can view all subfolders inside the Maildir folder,
including Trash and Drafts, but not 'cur'.
To be more specific, my plan is to obtain a clone of the Inbox for archiving
mails on a different storage where the Inbox is hosted.
Is my namespace configuration right?
Thank you.
Daniele
this is my doveconf -n:
namespace Archivio {
   disabled = no
   hidden = no
   ignore_on_failure = no
   inbox = no
   list = yes
   location =maildir:/mnt/mail-storage-archivio/%u/Maildir
   prefix = Archivio esterno.
   separator = .
   subscriptions = no
   type = private
}
namespace inbox {
   inbox = yes
   location =
   mailbox Drafts {
     special_use = \Drafts
   }
   mailbox Junk {
     special_use = \Junk
   }
   mailbox "Posta inviata" {
     special_use = \Sent
   }
   mailbox Sent {
     special_use = \Sent
   }
   mailbox "Sent Messages" {
     special_use = \Sent
   }
   mailbox Trash {
     special_use = \Trash
   }
   prefix =
}
passdb {
   args = /etc/dovecot/dovecot-ldap.conf
   driver = ldap
}
plugin {
   sieve =file:/var/www/html/ooo/%n;active=/var/www/html/ooo/%n/script
   sieve_default = /var/www/html/ooo/default.sieve
   sieve_duplicate_default_period = 14d
   sieve_duplicate_max_period = 7d
   sieve_extensions = +duplicate +notify +imapflags +vacation-seconds
   sieve_user_log = /var/www/html/ooo/%n/sieve_error.log
}
protocols = " imap lmtp sieve pop3"
replication_max_conns = 1
service aggregator {
   fifo_listener replication-notify-fifo {
     user = vmail
   }
   unix_listener replication-notify {
     user = vmail
   }
}
service auth {
   unix_listener /var/spool/postfix/private/auth {
     group = postfix
     mode = 0660
     user = postfix
   }
   unix_listener auth-master {
     group = vmail
     mode = 0660
     user = vmail
   }
}
service dict {
   unix_listener dict {
     group = vmail
     mode = 0600
     user = vmail
   }
}
service doveadm {
   inet_listener {
     port = 12345
   }
}
service imap-login {
   process_limit = 200
}
service imap {
   vsz_limit = 1 G
}
service lmtp {
   process_min_avail = 5
   unix_listener /var/spool/postfix/private/dovecot-lmtp {
     group = postfix
     mode = 0600
     user = postfix
   }
   user = vmail
}
service managesieve-login {
   inet_listener sieve {
     port = 4190
   }
   process_min_avail = 10
   service_count = 1
}
service replicator {
   process_min_avail = 1
   unix_listener replicator-doveadm {
     mode = 0666
     user = vmail
   }
}
service stats {
   unix_listener stats-reader {
     group = vmail
     mode = 0666
     user = vmail
   }
   unix_listener stats-writer {
     group = vmail
     mode = 0666
     user = vmail
   }
}
ssl_cert = ***(removed for privacy)
ssl_cipher_list =ALL:!LOW:!aNULL:!eNULL:!SSLv2:!RC4:!MD5:!DES:!EXP:!SEED:
!IDEA:!3DES
ssl_dh = # hidden, use -P to show it
ssl_key = # hidden, use -P to show it
userdb {
   args = /etc/dovecot/dovecot-ldap.conf
   driver = ldap
}
protocol lda {
   auth_socket_path = /var/run/dovecot/auth-master
   hostname = ganimede-dev-rm.secer.it
   mail_plugins = " notify replication sieve quota"
}
protocol imap {
   mail_plugins = " notify replication zlib"
}
protocol sieve {
   mail_max_userip_connections = 10
   managesieve_implementation_string = Dovecot Pigeonhole
   managesieve_logout_format = bytes=%i/%o
   managesieve_max_compile_errors = 5
   managesieve_max_line_length = 64 k
}
protocol pop3 {
   mail_plugins = " notify replication zlib"
}

On 10/04/24 14:47, Daniele Rinaldi via dovecot wrote:
  Hello,
  i made this namespace configuration inside "10-mail.conf":

  namespace Archives {
  type = private
  disabled = no
  hidden = no
  list = yes
  ignore_on_failure = no
  inbox = no
  location =maildir:/mnt/archive-mail-storage/%n/Maildir
  prefix = "Archive."
  subscriptions = yes
  separator = .

  I need to set up the storage for archive on a different storage than
  the inbox is located.
  Thunderbird, now seems that can see the subfolders inside the archive
  that start with dot but cannot access the "cur" folder where inbox
  mail are stored.

  Can you help me?
  ___
  dovecot mailing list --dovecot@dovecot.org
  To unsubscribe send an email todovecot-le...@dovecot.org
--
Daniele Rinaldi
Junior System Administrator
[Trust_Italia_S.p.A.]

[https://www.trustitalia.it/immagini/
DigiCertSymantecWebsiteSecurity_LockupLogo_H.png]

Via Po, 22 - 00198 Roma
tel.: +39 06332287238
fax: +39 063336145
e-mail:drina...@trustitalia.it
website:www.trustitalia.it
br=""> Le modalità 

Re: Password storage

2024-05-06 Thread Benny Pedersen via dovecot

Rupert Gallagher via dovecot skrev den 2024-05-06 09:42:
What is dovecot's state of the art on password storage? Can we use 
bcrypt instead of plain text?


yes if argon2 is compiled in dovecot

[I] net-mail/dovecot
 Available versions:  2.3.20-r1{tbz2} ~2.3.20-r2(0/2.3.20) 
~2.3.20-r3(0/2.3.20) ~2.3.21(0/2.3.21) ~2.3.21-r1(0/2.3.21) {argon2 caps 
doc kerberos ldap lua lucene lz4 managesieve mysql pam postgres rpc 
selinux sieve solr sqlite static-libs stemmer suid systemd tcpd textcat 
unwind zstd LUA_SINGLE_TARGET="lua5-1 lua5-3"}
 Installed versions:  2.3.20-r1{tbz2}(00:57:56 04/29/24)(caps lua 
managesieve pam postgres sieve -argon2 -doc -kerberos -ldap -lucene -lz4 
-mysql -rpc -selinux -solr -sqlite -static-libs -stemmer -suid -systemd 
-tcpd -textcat -unwind -zstd LUA_SINGLE_TARGET="lua5-1 -lua5-3")

 Homepage:https://www.dovecot.org/
 Description: An IMAP and POP3 server written with security 
primarily in mind


is what i have in gentoo

___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Re: Password storage

2024-05-06 Thread Aki Tuomi via dovecot
 
 On 06/05/2024 10:42 EEST Rupert Gallagher via dovecot
  wrote:
  
  
 What is dovecot's state of the art on password storage? Can we use
 bcrypt instead of plain text?
 ___
 dovecot mailing list -- dovecot@dovecot.org
 To unsubscribe send an email to dovecot-le...@dovecot.org
 
Please have a look at the documentation about possible schemes:
 
https://doc.dovecot.org/configuration_manual/authentication/password_schemes/
 
Aki
___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Password storage

2024-05-06 Thread Rupert Gallagher via dovecot
What is dovecot's state of the art on password storage? Can we use bcrypt 
instead of plain text?
___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Pigeonhole : how to automatically subscribe to newly created folders

2024-05-06 Thread Erwan David via dovecot

Hello,

In my sieve script I use

fileinto :create "mailbox"

Is it possible that the created mailbox is then automatically added to 
the subsccribe list for the account ?



--
Erwan David

___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


RE: temporary auth errors

2024-05-02 Thread Michael Slusarz via dovecot
> On 05/02/2024 7:48 AM MDT Marc via dovecot  wrote:
> 
> > auth_failure_delay = 2 secs ?
> > 
> > That will still simply wait before *rejecting* the login, compared to
> > *dropping the connection*.
> > 
> > We are thus looking for three different behaviours:
> > 
> > 1.  If backend confrims auth, ACK auth + proceed (grant access) to email.
> > 
> > 2.  If backend confirm "no such user" or "invalid creds", wait for
> > auth_failure_delay and then *reject* the login.
> > 
> > 3.  If the backend fails (ie, can neither confirm nor deny), simply drop
> > the connection.
> > 
> > I hope this is more clear.
> > 
> 
> Yes that is more clear, but no idea (seems a little out of scope to support 
> by design)

In complicated, localized authentication scenarios, Lua auth is likely the best 
answer.  
https://doc.dovecot.org/configuration_manual/authentication/lua_based_authentication/

michael
___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


RE: temporary auth errors

2024-05-02 Thread Marc via dovecot
> 
>   auth_failure_delay = 2 secs ?
> 
> That will still simply wait before *rejecting* the login, compared to
> *dropping the connection*.
> 
> We are thus looking for three different behaviours:
> 
> 1.  If backend confrims auth, ACK auth + proceed (grant access) to email.
> 
> 2.  If backend confirm "no such user" or "invalid creds", wait for
> auth_failure_delay and then *reject* the login.
> 
> 3.  If the backend fails (ie, can neither confirm nor deny), simply drop
> the connection.
> 
> I hope this is more clear.
> 

Yes that is more clear, but no idea (seems a little out of scope to support by 
design)
___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Re: temporary auth errors

2024-05-02 Thread Jaco Kroon via dovecot

Hi Marc,

On 2024/05/02 15:31, Marc wrote:

Looking for some advise.

Hmmm, I am glad I took the time to arrange a proper ldap infrastructure. What 
ever gets hammered stays local


Hahaha, yea well, galera served us well until now, and assuming no DDL 
changes on large tables we believe it will continue to do so.  That 
aside, I do like ldap indeed, but unfortunately that's not a feasible 
option at this stage.



What I'm hoping is that dovecot has some way to in case of such
"authentication backend" problem scenarios to ignore protocol and
politeness and simply disconnect the client, ie, just shut the
connection without saying anything, this could even be with a small
delay (I'd say 1 second or so, just to avoid tight auth retry loops, up
to 4 or 5 seconds IMHO would be fine).

auth_failure_delay = 2 secs ?


That will still simply wait before *rejecting* the login, compared to 
*dropping the connection*.


We are thus looking for three different behaviours:

1.  If backend confrims auth, ACK auth + proceed (grant access) to email.

2.  If backend confirm "no such user" or "invalid creds", wait for 
auth_failure_delay and then *reject* the login.


3.  If the backend fails (ie, can neither confirm nor deny), simply drop 
the connection.


I hope this is more clear.

Kind regards,
Jaco
___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


RE: temporary auth errors

2024-05-02 Thread Marc via dovecot
> Looking for some advise.

Hmmm, I am glad I took the time to arrange a proper ldap infrastructure. What 
ever gets hammered stays local

> 
> What I'm hoping is that dovecot has some way to in case of such
> "authentication backend" problem scenarios to ignore protocol and
> politeness and simply disconnect the client, ie, just shut the
> connection without saying anything, this could even be with a small
> delay (I'd say 1 second or so, just to avoid tight auth retry loops, up
> to 4 or 5 seconds IMHO would be fine).

auth_failure_delay = 2 secs ?


___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


temporary auth errors

2024-05-02 Thread Jaco Kroon via dovecot

Hi All,

Looking for some advise.

We ran into a situation yesterday where our SQL cluster (mariadb-galera) 
stopped serving requests due to some DDL queries locking the wsrep 
provider.  We're addressing this separately, so just background as to 
the cause of the problem.


As far as I know both POP3 and IMAP protocols only have two possible 
responses when a user tries to authenticate, either ACK (yes, you're 
fine let's proceed) and NACK (no, something with authentication failed, 
and either you've got credential issues, or something is wrong with the 
backend).


An ACK results in granting the user access.

A NACK results in the user having to retry.

This is all good and well, but the *typical* response by a MUA is to 
re-prompt the user for credentials, to which the response is usually to 
retry random passwords until it works again (confirmed with Outlook and 
Thunderbird).


What I'm hoping is that dovecot has some way to in case of such 
"authentication backend" problem scenarios to ignore protocol and 
politeness and simply disconnect the client, ie, just shut the 
connection without saying anything, this could even be with a small 
delay (I'd say 1 second or so, just to avoid tight auth retry loops, up 
to 4 or 5 seconds IMHO would be fine).


The hope is that this will result in the mail client treating this like 
a connection error rather than an authentication error, and hopefully 
not prompt for new credentials, but simply an alert of the "there has 
been a problem communicating with your mail server please retry or 
contact your service provider" kind of error messages.


For reference, the errors in dovecot logs looks like:

May  1 04:42:25 uriel dovecot[352]: auth-worker(11615): Warning: 
sqlpool(mysql): Query failed, retrying: WSREP has not yet prepared node 
for application use
May  1 04:42:25 uriel dovecot[352]: auth-worker(11615): Error: conn 
unix:auth-worker (pid=11453,uid=76): auth-worker<68>: 
sql(user@domain,a.b.c.d,): Password query failed: WSREP has not 
yet prepared node for application use
May  1 04:42:27 uriel dovecot[352]: pop3-login: Disconnected: Aborted 
login by logging out (auth service reported temporary failure): 
user=, method=PLAIN, rip=a.b.c.d, lip=e.f.g.h, TLS, 
session=


Kind regards,
Jaco

___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Re: Failing to archive many messages

2024-05-01 Thread Francis Augusto Medeiros-Logeay via dovecot


It is weird. At first, it seems that the logs are going fine. It goes 
like this for many minutes:


May 01 14:20:04 imap(fran...@mydomain.com)<226>: 
Debug: Mailbox Archive: UID 25719: Looked up field hdr.IN-REPLY-TO from 
mail cache
May 01 14:20:04 imap(fran...@mydomain.com)<226>: 
Debug: Mailbox Archive: UID 25719: Looked up field hdr.MESSAGE-ID from 
mail cache
May 01 14:20:04 imap(fran...@mydomain.com)<226>: 
Debug: Mailbox Archive: UID 25719: Looked up field hdr.SUBJECT from mail 
cache
May 01 14:20:04 imap(fran...@mydomain.com)<226>: 
Debug: Mailbox Archive: UID 25719: Looked up field hdr.TO from mail 
cache
May 01 14:20:04 imap(fran...@mydomain.com)<226>: 
Debug: Mailbox Archive: UID 25719: Looked up field hdr.X-PRIORITY from 
mail cache
May 01 14:20:04 imap(fran...@mydomain.com)<226>: 
Debug: Mailbox Archive: UID 25719: Looked up field hdr.BCC from mail 
cache
May 01 14:20:04 imap(fran...@mydomain.com)<226>: 
Debug: Mailbox Archive: UID 25719: Looked up field hdr.REPLY-TO from 
mail cache
May 01 14:20:04 imap(fran...@mydomain.com)<226>: 
Debug: Mailbox Archive: UID 25719: Looked up field 
hdr.DISPOSITION-NOTIFICATION-TO from mail cache
May 01 14:20:04 imap(fran...@mydomain.com)<226>: 
Debug: Mailbox Archive: UID 25719: Looked up field hdr.LIST-POST from 
mail cache
May 01 14:20:04 imap(fran...@mydomain.com)<226>: 
Debug: sieve: multi-script: Start execute sequence
May 01 14:20:04 imap(fran...@mydomain.com)<226>: 
Debug: sieve: Executing script from 
`/var/mail/vmail/mail/sieve/global/report-ham.svbin'
May 01 14:20:04 imap(fran...@mydomain.com)<226>: 
Debug: sieve: multi-script: Run script 
`/var/mail/vmail/mail/sieve/global/report-ham.svbin'
May 01 14:20:04 imap(fran...@mydomain.com)<226>: 
Debug: sieve: Started running script 
`/var/mail/vmail/mail/sieve/global/report-ham.svbin'
May 01 14:20:04 imap(fran...@mydomain.com)<226>: 
Debug: sieve: Finished running script `ok' 
(status=/var/mail/vmail/mail/sieve/global/report-ham.svbin, resource 
usage: no usage recorded)
May 01 14:20:04 imap(fran...@mydomain.com)<226>: 
Debug: sieve: multi-script: Execute result
May 01 14:20:04 imap(fran...@mydomain.com)<226>: 
Debug: sieve: uid=25719: Executing result (status=ok, commit=no)
May 01 14:20:04 imap(fran...@mydomain.com)<226>: 
Debug: sieve: uid=25719: Starting execution of actions
May 01 14:20:04 imap(fran...@mydomain.com)<226>: 
Debug: sieve: uid=25719: Executing actions
May 01 14:20:04 imap(fran...@mydomain.com)<226>: 
Debug: sieve: uid=25719: Executing pipe action
May 01 14:20:04 imap(fran...@mydomain.com)<226>: 
Debug: sieve: action pipe: running program: sa-learn-ham.sh
May 01 14:20:04 imap(fran...@mydomain.com)<226>: 
Debug: program 
exec:/var/mail/vmail/mail/sieve/global/scripts/sa-learn-ham.sh: Created
May 01 14:20:04 imap(fran...@mydomain.com)<226>: 
Debug: program 
exec:/var/mail/vmail/mail/sieve/global/scripts/sa-learn-ham.sh: Pass 
environment: USER=fran...@mydomain.com
May 01 14:20:04 imap(fran...@mydomain.com)<226>: 
Debug: program 
exec:/var/mail/vmail/mail/sieve/global/scripts/sa-learn-ham.sh: Pass 
environment: HOME=/var/mail/vmail/med-lo.eu/francis
May 01 14:20:04 imap(fran...@mydomain.com)<226>: 
Debug: program 
exec:/var/mail/vmail/mail/sieve/global/scripts/sa-learn-ham.sh: Pass 
environment: HOST=fb58607074fd
May 01 14:20:04 imap(fran...@mydomain.com)<226>: 
Debug: Mailbox Archive: UID 25719: Opened mail because: mail stream
May 01 14:20:04 imap(fran...@mydomain.com)<226>: 
Debug: sieve: uid=25719: Finished executing pipe action (status=ok, 
keep=implicit)
May 01 14:20:04 imap(fran...@mydomain.com)<226>: 
Debug: sieve: uid=25719: Finished executing actions (status=ok, 
keep=implicit)
May 01 14:20:04 imap(fran...@mydomain.com)<226>: 
Debug: sieve: uid=25719: Finished executing result (no commit, 
status=ok, keep=yes)
May 01 14:20:04 imap(fran...@mydomain.com)<226>: 
Debug: sieve: multi-script: Sequence active
May 01 14:20:04 imap(fran...@mydomain.com)<226>: 
Debug: sieve: multi-script: Finishing sequence (status=ok)
May 01 14:20:04 imap(fran...@mydomain.com)<226>: 
Debug: sieve: uid=25719: Executing result (status=ok, commit=yes)
May 01 14:20:04 imap(fran...@mydomain.com)<226>: 
Debug: sieve: uid=25719: Starting execution of actions
May 01 14:20:04 imap(fran...@mydomain.com)<226>: 
Debug: sieve: uid=25719: Executing actions
May 01 14:20:04 imap(fran...@mydomain.com)<226>: 
Debug: sieve: uid=25719: Finished executing actions (status=ok, 
keep=implicit)
May 01 14:20:04 imap(fran...@mydomain.com)<226>: 
Debug: sieve: uid=25719: Execute implicit keep (failure=no)
May 01 14:20:04 imap(fran...@mydomain.com)<226>: 
Debug: sieve: uid=25719: Start storing into mailbox Archive
May 01 14:20:04 imap(fran...@mydomain.com)<226>: 
Debug: sieve: uid=25719: Executing implicit keep action
May 01 14:20:04 imap(fran...@mydomain.com)<226>: 
Debug: sieve: uid=25719: Execute storing into mailbox 'Archive'
May 01 14:20:04 imap(fran...@mydomain.com)<226>: 
Debug: sieve: uid=25719: Updated existing mail in 

Re: ENV{"PATH"}. errors on my log

2024-05-01 Thread Francis Augusto Medeiros-Logeay via dovecot

Thanks!

I actually had a bash script that calls sa-learn, so I added `export 
PATH ...` there, and it worked.


Best,

Francis

---
Francis Augusto Medeiros-Logeay
Oslo, Norway

On 2024-05-01 13:23, Aki Tuomi wrote:

On 01/05/2024 13:59 EEST Francis Augusto Medeiros-Logeay via dovecot 
 wrote:


Hi,

I'm getting this error a lot on my logs:

May 01 12:57:03 imap: Error: Use of uninitialized value $ENV{"PATH"} 
in
split at /usr/lib/x86_64-linux-gnu/perl-base/File/Spec/Unix.pm line 
136.


I googled a bit and the only reference I found was related to the
possibility of imapsieve scripts that could be generating this. I
haven't found any perl script on my install, but I momentarily turned
off spamassassin, but the logs continued.

Any hint on how I can debug this? Turning the debug logs on dovecot
didn't bring me any extra information of what the source of this could
be.

Best,
Francis

--
Francis Augusto Medeiros-Logeay
Oslo, Norway
___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Try adding `import_environment = $import_environment PATH` to your 
config.


Aki

___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Re: ENV{"PATH"}. errors on my log

2024-05-01 Thread Aki Tuomi via dovecot
 
 On 01/05/2024 13:59 EEST Francis Augusto Medeiros-Logeay via dovecot
  wrote:
  
  
 Hi,
  
 I'm getting this error a lot on my logs:
  
 May 01 12:57:03 imap: Error: Use of uninitialized value $ENV{"PATH"}
 in
 split at /usr/lib/x86_64-linux-gnu/perl-base/File/Spec/Unix.pm line
 136.
  
 I googled a bit and the only reference I found was related to the
 possibility of imapsieve scripts that could be generating this. I
 haven't found any perl script on my install, but I momentarily turned
 off spamassassin, but the logs continued.
  
 Any hint on how I can debug this? Turning the debug logs on dovecot
 didn't bring me any extra information of what the source of this
 could
 be.
  
 Best,
 Francis
  
 --
 Francis Augusto Medeiros-Logeay
 Oslo, Norway
 ___
 dovecot mailing list -- dovecot@dovecot.org
 To unsubscribe send an email to dovecot-le...@dovecot.org
 
Try adding `import_environment = $import_environment PATH` to your config.
 
Aki
___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Failing to archive many messages

2024-05-01 Thread Francis Augusto Medeiros-Logeay via dovecot
Hi,

When I archive one or two messages, the messages are correctly moved to the 
Archive.

However, when I archive more messages - like 50 or more, dovecot seems to fail. 
The error I get is this one:

 Warning: Failed to do incremental sync for mailbox Archive, retry with a full 
sync (Modseq 17277 no longer in transaction log (highest=17323, 
last_common_uid=12216, nextuid=15767))

No messages end up being moved to the Archive folder. I tried to do this both 
from a mail client and from roundcube.

What could be the problem here? 
___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


ENV{"PATH"}. errors on my log

2024-05-01 Thread Francis Augusto Medeiros-Logeay via dovecot

Hi,

I'm getting this error a lot on my logs:

May 01 12:57:03 imap: Error: Use of uninitialized value $ENV{"PATH"} in 
split at /usr/lib/x86_64-linux-gnu/perl-base/File/Spec/Unix.pm line 136.


I googled a bit and the only reference I found was related to the 
possibility of imapsieve scripts that could be generating this. I 
haven't found any perl script on my install, but I momentarily turned 
off spamassassin, but the logs continued.


Any hint on how I can debug this? Turning the debug logs on dovecot 
didn't bring me any extra information of what the source of this could 
be.


Best,
Francis

--
Francis Augusto Medeiros-Logeay
Oslo, Norway
___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Re: Dovecot, migrating mailboxes from old to new server and from old to new format?

2024-04-30 Thread Aki Tuomi via dovecot
 
 On 01/05/2024 04:39 EEST David Mehler via dovecot
  wrote:
  
  
 Hello,
  
 I've got a task to migrate a Dovecot mailstore, mailboxes, public
 folders, etc from an older server (it runs Dovecot 2.2.x) to a new
 server (running Dovecot 2.3.x). At the same time I'm needing to
 change
 mailbox storage formats, going from Mbox (on old server) to Maildir
 (on
 new server). I'm not sure if any of the mailboxes are compressed with
 zlib or encrypted, there's a lot of them, is there a way to find out
 compression or encryption and decompress/decrypt them prior to
 migration?
  
 Suggestions welcome.
 Thanks.
 Dave.
  
 --
 Sent from Mozilla Thunderbird 91.13.1
 ___
 dovecot mailing list -- dovecot@dovecot.org
 To unsubscribe send an email to dovecot-le...@dovecot.org
 
We have a migration guide at https://doc.dovecot.org/admin_manual/
migrating_mailboxes/
 
This should help you out. If mailboxes are compressed/encrypted and they work
today, no need to do anything about them.
 
Important thing is to try out with test account(s) first.
 
Aki
___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Dovecot, migrating mailboxes from old to new server and from old to new format?

2024-04-30 Thread David Mehler via dovecot

Hello,

I've got a task to migrate a Dovecot mailstore, mailboxes, public 
folders, etc from an older server (it runs Dovecot 2.2.x) to a new 
server (running Dovecot 2.3.x). At the same time I'm needing to change 
mailbox storage formats, going from Mbox (on old server) to Maildir (on 
new server). I'm not sure if any of the mailboxes are compressed with 
zlib or encrypted, there's a lot of them, is there a way to find out 
compression or encryption and decompress/decrypt them prior to migration?


Suggestions welcome.
Thanks.
Dave.

--
Sent from Mozilla Thunderbird 91.13.1
___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Re: Time moved forwards

2024-04-30 Thread Param via dovecot
There is already ntpd configured and working properly. 
___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Re: Time moved forwards

2024-04-30 Thread Aki Tuomi via dovecot
 
 On 30/04/2024 18:15 EEST Hanns Mattes via dovecot
  wrote:
  
  
 Hi,
  
 Am 26.04.24 um 14:04 schrieb Param via dovecot:
  Is there any solution for this?
  I am on FreeBSD 13.3 with dovecot-2.3.21_4 built from ports
  and have noticed warnings:
   
  Apr 26 08:42:29 mstore17 dovecot[41779]: master: Warning:
  Time moved forwards by 0.181936 seconds - adjusting
  timeouts.
  Apr 26 08:43:39 mstore17 dovecot[41779]: master: Warning:
  Time moved forwards by 0.146834 seconds - adjusting
  timeouts.
  Apr 26 08:48:40 mstore17 dovecot[41779]: master: Warning:
  Time moved forwards by 0.489300 seconds - adjusting
  timeouts.
   
  The more emails coming in, the more often warning.
   
  dovecot --version
  2.3.21 (47349e2482)
   
  FreeBSD 13.3-RELEASE
  ___
  dovecot mailing list -- dovecot@dovecot.org
  To unsubscribe send an email to dovecot-le...@dovecot.org
 ignore it. AFAIR dovecot is using some linux-mechanism (epoll?),
 which
 is no part of freebsd.
  
 Regards Hanns
 ___
 dovecot mailing list -- dovecot@dovecot.org
 To unsubscribe send an email to dovecot-le...@dovecot.org
 
Has nothing to do with epoll. Dovecot uses kqueue on FreeBSD. This indicates
clock issues, you should use ntpd to avoid this, alternatively your VM/machine
is lagging and clock is jumping forward.
 
Aki
___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Re: Time moved forwards

2024-04-30 Thread Hanns Mattes via dovecot

Hi,

Am 26.04.24 um 14:04 schrieb Param via dovecot:

Is there any solution for this?
I am on FreeBSD 13.3 with dovecot-2.3.21_4 built from ports and have noticed 
warnings:

Apr 26 08:42:29 mstore17 dovecot[41779]: master: Warning: Time moved forwards 
by 0.181936 seconds - adjusting timeouts.
Apr 26 08:43:39 mstore17 dovecot[41779]: master: Warning: Time moved forwards 
by 0.146834 seconds - adjusting timeouts.
Apr 26 08:48:40 mstore17 dovecot[41779]: master: Warning: Time moved forwards 
by 0.489300 seconds - adjusting timeouts.

The more emails coming in, the more often warning.

dovecot --version
2.3.21 (47349e2482)

FreeBSD 13.3-RELEASE
___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


ignore it. AFAIR dovecot is using some linux-mechanism (epoll?), which 
is no part of freebsd.


Regards Hanns
___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Re: doveadm backup empties the remote host? SERIOUSLY???

2024-04-29 Thread Public via dovecot

On 4/27/24 16:30, Nils via dovecot wrote:
I have a file backup and since that backup, new emails have been 
received. Also, not all of the emails were deleted - many folders 
weren't affected. Additionally I was able to restore a few of the 
deleted emails with ext4magic.


So now I have three sources:

1. MAIN (new dovecot) contains the emails in the folders that weren't
   deleted and the emails received after the incident.
2. BACKUP (of mail directory) contains all emails from last backup date
   (including those still in the folders that weren't deleted).
3. RECOVER (directory) contains deleted email files that were recovered.

How can I join these sources into MAIN,

 * without deleting any emails from MAIN (for example those that have
   been received today) and
 * with only reading and not writing into BACKUP and RECOVER?

Is there any more or less convenient way to achieve that?
If not, can I just dump all the files together and make dovecot 
recreate the indexes?

___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Will doveadm-import automatically detect if a message already exists or 
could I end up with duplicates? Or is it unnecessary to worry about that 
because of the unique filename each message has?

___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Re: doveadm backup empties the remote host? SERIOUSLY???

2024-04-29 Thread Aki Tuomi via dovecot

> On 29/04/2024 12:02 EEST Nils via dovecot  wrote:
> 
>  
> On 4/27/24 16:30, Nils via dovecot wrote:
> > I have a file backup and since that backup, new emails have been 
> > received. Also, not all of the emails were deleted - many folders 
> > weren't affected. Additionally I was able to restore a few of the 
> > deleted emails with ext4magic.
> >
> > So now I have three sources:
> >
> > 1. MAIN (new dovecot) contains the emails in the folders that weren't
> >    deleted and the emails received after the incident.
> > 2. BACKUP (of mail directory) contains all emails from last backup date
> >    (including those still in the folders that weren't deleted).
> > 3. RECOVER (directory) contains deleted email files that were recovered.
> >
> > How can I join these sources into MAIN,
> >
> >  * without deleting any emails from MAIN (for example those that have
> >    been received today) and
> >  * with only reading and not writing into BACKUP and RECOVER?
> >
> > Is there any more or less convenient way to achieve that?
> > If not, can I just dump all the files together and make dovecot 
> > recreate the indexes?
> > ___
> > dovecot mailing list -- dovecot@dovecot.org
> > To unsubscribe send an email to dovecot-le...@dovecot.org
> 
> Will doveadm-import automatically detect if a message already exists or 
> could I end up with duplicates? Or is it unnecessary to worry about that 
> because of the unique filename each message has?

doveadm import will happily import same emails over & over again. It has no 
such check. You should use doveadm sync -1 instead. (-1 = one way)

Aki
___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Re: doveadm backup empties the remote host? SERIOUSLY???

2024-04-29 Thread Nils via dovecot

On 4/27/24 16:30, Nils via dovecot wrote:
I have a file backup and since that backup, new emails have been 
received. Also, not all of the emails were deleted - many folders 
weren't affected. Additionally I was able to restore a few of the 
deleted emails with ext4magic.


So now I have three sources:

1. MAIN (new dovecot) contains the emails in the folders that weren't
   deleted and the emails received after the incident.
2. BACKUP (of mail directory) contains all emails from last backup date
   (including those still in the folders that weren't deleted).
3. RECOVER (directory) contains deleted email files that were recovered.

How can I join these sources into MAIN,

 * without deleting any emails from MAIN (for example those that have
   been received today) and
 * with only reading and not writing into BACKUP and RECOVER?

Is there any more or less convenient way to achieve that?
If not, can I just dump all the files together and make dovecot 
recreate the indexes?

___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Will doveadm-import automatically detect if a message already exists or 
could I end up with duplicates? Or is it unnecessary to worry about that 
because of the unique filename each message has?

___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Re: doveadm backup has problems with some accounts

2024-04-29 Thread roger.meier--- via dovecot
Because, that perhaps the version missmatch of the servers coul'd be the issue 
, and centos 7 eol comes in two months, i setup a complete new main mailserver, 
based on
ubuntu 22.04 (24.04 was not out on starting to setup the stuff) so now both 
servers had dovecot 2.3.16.

But it doesn't help, still the backup jobs abort in the middle of the transfer, 
now with complete different error messages.

On the destination server i started it with the following command ( the 
corresponding user folder & files is deleted under /var/spool/vmail and 
/var/indexes )

/usr/bin/doveadm -D -v backup -t 1200 -Ru user1 tcp:mua02.domain.intra:12345

The first run is finished with the following:

Apr 29 09:36:26 doveadm(user1)<56317>: Debug: brain M: 
Import Sent Messages: Saved UIDs: 3127:3144
Apr 29 09:36:26 doveadm(user1)<56317>: Debug: brain M: 
Import Sent Messages: Finish update: min_next_uid=3145 
min_first_recent_uid=3145 min_highest_modseq=8 min_highest_pvt_modseq=0
Apr 29 09:36:26 doveadm(user1)<56317>: Debug: brain M: 
Import Sent Messages: Reassign UIDs: 
5,15:16,56,79:82,90,97,138,158,168,173,176,183:185,201,207,218:220,250:252,254:257,281,285,289,333,336:337,348,351:366,370,389,414,431:432,437:441,444:446,461,534,577:584,610:611,628,632,646,653,655:657,665:668,671:674,701,704,720:721,743:749,808:809,835,844:845,868,870,872:873,878:879,888:894,909:910,921,955:958,1055:1076,1104:1106,1115:1120,1135,1175,1179,1181,1184:1187,1193:1195,1205,1222:1224,1272:1273,1276:1279,1282:1284,1287,1294,1298,1306:1309,1312,1351,1374,1380:1384,1395,1408,1416,1419:1420,1448,1450:1456,1473:1476,1478:1479,1488:1491,1507:1509,1511:1512,1517:1520,1535:1540,1550,1559:1563,1565:1567,1570:1571,1576,1578:1582,1585:1590,1596:1598,1600:1602,1607:1609,1620:1622,1624:1630,1633,1641,1646:1649,1672:1673,1676:1680,1688,1712:1715,1727:1728,1733,1741,1754:1755,1766,1775:1776,1778:1792,1795,1811:1825,1838:1846,1848:1849,1851,1854,1856,1858,1861,1863,1865:18
 
70,1886:1892,1898:1904,1916:1919,1924,1927,1929:1931,1937,1969:1984,1991,1993,2000:2002,2007:2022,2024,2036,2039,2044:2047,2052:2074,2078:2080,2092,2108,2117:2120,2124,2126,2130:2153,2163:2165,2170,2177:2178,2181:2184,2186,2189,2192,2194:2195,2200:2205,2208,2219:2246,2258,2269:2270,2273,2281:2287,2292:2298,2300:2301,2305:2323,2325:2326,2344,2346:2350,2378:2382,2386,2388,2390:2393,2395,2400,2409,2416:2417,2425:2429,2439,2443:2447,2460,2468:2470,2476,2494,2496,2504,2521:2526,2536,2546:2547,2552:2555,2608,2616,2618,2621,2631:2632,2637:2638,2663,2676:2679,2718:2721,2728:2730,2746,2748:2749,2756:2759,2764:2765,2767,2770:2779,2781,2790:2794,2819,2825,2838,2842:2843,2854,2860,2862:2866,2871,2887,2897:2900,2939,2972:2976,2986,3001:3004,3014:3015,3024:3026,3030:3035,3048,3076:3079,3113:3116

And when i start the second run (for update the changes):

r 29 09:39:38 doveadm(user1)<56385>: Panic: file 
dsync-mailbox-import.c: line 1368 (dsync_mailbox_import_want_change): assertion 
failed: (change->received_timestamp > 0)
Apr 29 09:39:38 doveadm(user1)<56385>: Error: Raw 
backtrace: /usr/lib/dovecot/libdovecot.so.0(backtrace_append+0x46) 
[0x7f5f6d233de6] -> /usr/lib/dovecot/libdovecot.so.0(backtrace_get+0x22) 
[0x7f5f6d233f02] -> /usr/lib/dovecot/libdovecot.so.0(+0x109cdb) 
[0x7f5f6d240cdb] -> /usr/lib/dovecot/libdovecot.so.0(+0x109d17) 
[0x7f5f6d240d17] -> /usr/lib/dovecot/libdovecot.so.0(+0x5cf73) [0x7f5f6d193f73] 
-> /usr/bin/doveadm(+0x24475) [0x55cfe91a4475] -> 
/usr/bin/doveadm(dsync_mailbox_import_change+0x25b) [0x55cfe91d715b] -> 
/usr/bin/doveadm(dsync_brain_sync_mails+0x2ac) [0x55cfe91d25ec] -> 
/usr/bin/doveadm(dsync_brain_run+0x228) [0x55cfe91ce358] -> 
/usr/bin/doveadm(+0x4e96d) [0x55cfe91ce96d] -> /usr/bin/doveadm(+0x5fdf3) 
[0x55cfe91dfdf3] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_call_io+0x6d) 
[0x7f5f6d256f8d] -> 
/usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run_internal+0x13a) 
[0x7f5f6d25868a] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_handler_run+0x54) 
[0x7f5f6d2
 57034] -> /usr/lib/dovecot/libdovecot.so.0(io_loop_run+0x40) [0x7f5f6d2571f0] 
-> /usr/bin/doveadm(+0x356ac) [0x55cfe91b56ac] -> /usr/bin/doveadm(+0x3665d) 
[0x55cfe91b665d] -> /usr/bin/doveadm(+0x37112) [0x55cfe91b7112] -> 
/usr/bin/doveadm(doveadm_mail_try_run+0x24a) [0x55cfe91b7a9a] -> 
/usr/bin/doveadm(main+0x4dc) [0x55cfe91a6f8c] -> 
/lib/x86_64-linux-gnu/libc.so.6(+0x29d90) [0x7f5f6cdf8d90] -> 
/lib/x86_64-linux-gnu/libc.so.6(__libc_start_main+0x80) [0x7f5f6cdf8e40] -> 
/usr/bin/doveadm(_start+0x25) [0x55cfe91a70a5]
Aborted (core dumped)

Both servers are synced with the same ntp servers and have the same time when i 
check it.
___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Dovecot Server issue, cache corruption

2024-04-28 Thread David Mehler via dovecot

Hello,

I'm using Thunderbird 102 to atempt to retrieve my messages via imap 
(have tried both 143 and 993) first I wasn't getting any error messages 
now I am. This is with Dovecot 2.3 on Debian 12.5. Here's the error 
messages. I do not believe the first set related to public mailboxes is 
related but I'm not sure what it's problem is either, the problem seems 
to be corrupted cache.


2024-04-26T02:01:47.832997-04:00 hostname dovecot: 
imap(usern...@example.com)<586617>: Error: Mailbox 
public/example-1: mkdir(/var/vmail/public/.example-1/cur) failed: 
Permission denied (euid=999(vmail) egid=992(vmail) missing +w perm: 
/var/vmail/public/.example-1, dir owned by 0:0 mode=0755)
2024-04-26T02:01:48.742111-04:00 hostname dovecot: 
imap(usern...@example.com)<586617>: Error: Mailbox 
INBOX: Deleting corrupted cache record uid=34640: UID 34640: Broken 
physical size in mailbox INBOX: 
read(/var/vmail/mailboxes/example.com/username/mail/mailboxes/INBOX/dbox-Mails/u.34640) 
failed: Cached message size smaller than expected (1376 < 1647, 
box=INBOX, UID=34640)
2024-04-26T02:01:48.742239-04:00 hostname dovecot: 
imap(usern...@example.com)<586617>: Error: Mailbox 
INBOX: UID=34640: 
read(/var/vmail/mailboxes/example.com/username/mail/mailboxes/INBOX/dbox-Mails/u.34640) 
failed: Cached message size smaller than expected (1376 < 1647, 
box=INBOX, UID=34640) (read reason=)
2024-04-26T02:01:48.742308-04:00 hostname dovecot: 
imap(usern...@example.com)<586617>: Disconnected: 
FETCH failed: Mailbox INBOX: UID=34640: 
read(/var/vmail/mailboxes/example.com/username/mail/mailboxes/INBOX/dbox-Mails/u.34640) 
failed: Cached message size smaller than expected (1376 < 1647, 
box=INBOX, UID=34640) (read reason=) in=889 out=6253 deleted=0 
expunged=0 trashed=0 hdr_count=5 hdr_bytes=10 body_count=0 body_bytes=0


Here is a doveconf -n output:

# doveconf -n
# 2.3.19.1 (9b53102964): /etc/dovecot/dovecot.conf
# Pigeonhole version 0.5.19 (4eae2f79)
# OS: Linux 4.19.0 x86_64 Debian 12.5
# Hostname: hostname.example.com
auth_mechanisms = plain login
dict {
  lastlogin = mysql:/etc/dovecot/dovecot-last-login.conf
}
imap_client_workarounds = tb-extra-mailbox-sep tb-lsub-flags
listen = *
lmtp_rcpt_check_quota = yes
mail_attribute_dict = file:%h/Maildir/dovecot-attributes
mail_gid = vmail
mail_home = /var/vmail/mailboxes/%d/%n
mail_location = dbox:~/mail:LAYOUT=fs
mail_plugins = acl quota welcome
mail_privileged_group = vmail
mail_uid = vmail
managesieve_notify_capability = mailto
managesieve_sieve_capability = fileinto reject envelope 
encoded-character vacation subaddress comparator-i;ascii-numeric 
relational regex imap4flags copy include variables body enotify 
environment mailbox date index ihave duplicate mime foreverypart 
extracttext imapsieve vnd.dovecot.imapsieve

namespace {
  list = children
  location = maildir:/var/vmail/public:INDEXPVT=~/public
  prefix = public/
  separator = /
  subscriptions = no
  type = public
}
namespace inbox {
  inbox = yes
  location =
  mailbox Drafts {
auto = subscribe
special_use = \Drafts
  }
  mailbox Sent {
auto = subscribe
special_use = \Sent
  }
  mailbox Spam {
auto = subscribe
special_use = \Junk
  }
  mailbox Trash {
auto = subscribe
special_use = \Trash
  }
  prefix =
}
passdb {
  args = /etc/dovecot/dovecot-sql.conf
  driver = sql
}
plugin {
  acl = vfile:/etc/dovecot/dovecot-acl
  imapsieve_mailbox1_before = file:/var/vmail/sieve/global/learn-spam.sieve
  imapsieve_mailbox1_causes = COPY
  imapsieve_mailbox1_name = Spam
  imapsieve_mailbox2_before = file:/var/vmail/sieve/global/learn-ham.sieve
  imapsieve_mailbox2_causes = COPY
  imapsieve_mailbox2_from = Spam
  imapsieve_mailbox2_name = *
  last_login_dict = proxy::lastlogin
  last_login_key = # hidden, use -P to show it
  quota = count:User quota
  quota2 = maildir:Shared quota:ns=public/
  quota_exceeded_message = User %u has exhausted allowed storage space.
  quota_grace = 10%%
  quota_max_mail_size = 100M
  quota_rule = *:storage=1G
  quota_rule2 = Trash:storage=+100M
  quota_rule3 = SPAM:ignore
  quota_status_nouser = DUNNO
  quota_status_overquota = 552 5.2.2 Mailbox is full
  quota_status_success = DUNNO
  quota_vsizes = yes
  quota_warning = storage=100%% quota-warning +100 %u
  quota_warning2 = storage=95%% quota-warning +95 %u
  quota_warning3 = storage=80%% quota-warning +80 %u
  quota_warning4 = -storage=100%% quota-warning -100 %u
  sieve = 
file:/var/vmail/sieve/%d/%n/scripts;active=/var/vmail/sieve/%d/%n/active-script.sieve

  sieve_before = /var/vmail/sieve/global/spam-global.sieve
  sieve_global_extensions = +vnd.dovecot.pipe
  sieve_pipe_bin_dir = /usr/bin
  sieve_plugins = sieve_imapsieve sieve_extprograms
  stats_refresh = 30 secs
  stats_track_cmds = yes
  welcome_script = welcome %u
  welcome_wait = no
}
protocols = imap lmtp sieve
service auth-worker {
  vsz_limit = 0
}
service auth {
  unix_listener /var/spool/postfix/private/auth {
group = postfix
mode = 0660
user 

Re: doveadm backup empties the remote host? SERIOUSLY???

2024-04-27 Thread Nils via dovecot

On 4/27/24 12:31, Aki Tuomi via dovecot wrote:

Yeah. Backup command, without -R backs to location, not from location.
  
Mailman archive is athttps://www.dovecot.org/mailman3/mailman3/lists/
  
Aki

___
dovecot mailing list --dovecot@dovecot.org
To unsubscribe send an email todovecot-le...@dovecot.org
I have a file backup and since that backup, new emails have been 
received. Also, not all of the emails were deleted - many folders 
weren't affected. Additionally I was able to restore a few of the 
deleted emails with ext4magic.


So now I have three sources:

1. MAIN (new dovecot) contains the emails in the folders that weren't
   deleted and the emails received after the incident.
2. BACKUP (of mail directory) contains all emails from last backup date
   (including those still in the folders that weren't deleted).
3. RECOVER (directory) contains deleted email files that were recovered.

How can I join these sources into MAIN,

 * without deleting any emails from MAIN (for example those that have
   been received today) and
 * with only reading and not writing into BACKUP and RECOVER?

Is there any more or less convenient way to achieve that?
If not, can I just dump all the files together and make dovecot recreate 
the indexes?

___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Re: doveadm backup empties the remote host? SERIOUSLY???

2024-04-27 Thread Aki Tuomi via dovecot
 
 On 27/04/2024 12:57 EEST Nils via dovecot 
 wrote:
  
  
 On 4/26/24 14:04, Aki Tuomi wrote:
  We have migration guide, see
  https://doc.dovecot.org/admin_manual/migrating_mailboxes/
  Aki
 regarding this guide:
 I am supposed to set up doveadm service on the old server and then
 call
 "doveadm backup -Ru username tcp:host:port"
 on the new server? So the reason that doveadm deleted everything
 yesterday was that I forgot the -R option?
  
 "The doveadm backup command forces the destination to look exactly
 like
 the source, deleting mails and mailboxes if necessary."
 Why did doveadm backup create (empty) mailboxes on the new server,
 when
 I mistakably used it in the wrong direction?
  
 -
  
 Had to switch of the email server for over 10 hours yesterday. any
 messages might not have reached me. is there a mailman archive?
 ___
 dovecot mailing list -- dovecot@dovecot.org
 To unsubscribe send an email to dovecot-le...@dovecot.org
Yeah. Backup command, without -R backs to location, not from location.
 
Mailman archive is at https://www.dovecot.org/mailman3/mailman3/lists/
 
Aki
___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Re: doveadm backup empties the remote host? SERIOUSLY???

2024-04-27 Thread Nils via dovecot

On 4/26/24 14:04, Aki Tuomi wrote:
We have migration guide, see 
https://doc.dovecot.org/admin_manual/migrating_mailboxes/

Aki


regarding this guide:
I am supposed to set up doveadm service on the old server and then call
"doveadm backup -Ru username tcp:host:port"
on the new server? So the reason that doveadm deleted everything 
yesterday was that I forgot the -R option?


"The doveadm backup command forces the destination to look exactly like 
the source, deleting mails and mailboxes if necessary."
Why did doveadm backup create (empty) mailboxes on the new server, when 
I mistakably used it in the wrong direction?


-

Had to switch of the email server for over 10 hours yesterday. any 
messages might not have reached me. is there a mailman archive?

___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


doveadm backup empties the remote host? SERIOUSLY???

2024-04-26 Thread Christopher X. Candreva via dovecot
This is the magic incantation I use:

#> doveadm -o mail_fsync=never -R -u u...@foo.bar imapc:
___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


RE: doveadm backup empties the remote host? SERIOUSLY???

2024-04-26 Thread Marc via dovecot



> 
> Sure it's my own fault - no discussion about that, but seriously? How
> dangerously unintuitive it that?
> 

I don't really get what is going on with remote host. How is a host name even 
relevant other than setting up the initial connection. I don't even see it in 
my storage mail files.
___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Re: doveadm backup empties the remote host? SERIOUSLY???

2024-04-26 Thread Aki Tuomi via dovecot
 
 On 26/04/2024 14:46 EEST Nils via dovecot 
 wrote:
  
  
 Sure it's my own fault - no discussion about that, but seriously? How
 dangerously unintuitive it that?
  
 I found it when I was searching for a good practice to migrate a mail
 server with rsync and I mistakably assumed it works in the same
 direction as rsync.
  
 Luckily i have a backup from all mails except today's.
  
 Please, someone tell me what's the best procedure to migrate dovecot.
 ___
 dovecot mailing list -- dovecot@dovecot.org
 To unsubscribe send an email to dovecot-le...@dovecot.org
 
We have migration guide, see https://doc.dovecot.org/admin_manual/
migrating_mailboxes/
 
Aki
___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Time moved forwards

2024-04-26 Thread Param via dovecot
Is there any solution for this?
I am on FreeBSD 13.3 with dovecot-2.3.21_4 built from ports and have noticed 
warnings:

Apr 26 08:42:29 mstore17 dovecot[41779]: master: Warning: Time moved forwards 
by 0.181936 seconds - adjusting timeouts.
Apr 26 08:43:39 mstore17 dovecot[41779]: master: Warning: Time moved forwards 
by 0.146834 seconds - adjusting timeouts.
Apr 26 08:48:40 mstore17 dovecot[41779]: master: Warning: Time moved forwards 
by 0.489300 seconds - adjusting timeouts.

The more emails coming in, the more often warning.

dovecot --version
2.3.21 (47349e2482)

FreeBSD 13.3-RELEASE
___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


doveadm backup empties the remote host? SERIOUSLY???

2024-04-26 Thread Nils via dovecot
Sure it's my own fault - no discussion about that, but seriously? How 
dangerously unintuitive it that?


I found it when I was searching for a good practice to migrate a mail 
server with rsync and I mistakably assumed it works in the same 
direction as rsync.


Luckily i have a backup from all mails except today's.

Please, someone tell me what's the best procedure to migrate dovecot.
___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Re: Is it possible to setup ntlm authentication then proxy it to the mail server ?

2024-04-26 Thread Aki Tuomi via dovecot
 
 On 26/04/2024 13:00 EEST karl.l--- via dovecot 
 wrote:
  
  
 Hi Aki
  
 We would like NTLM support so customers that have enabled it in
 outlook and other email clients can continue to authenticate when we
 update our dovecot server. We are not running kerberos/samba/active
 directory or any other directory system. I am not sure how GSSAPI
 would assist us with this requirement.
  
 Given that we are using an sql passdb, will this work and if so any
 pointers would be appreciated.
  
 Thanks
  
 
For the behaviour youre seeing, it does sound like a bug, but NTLM support is
not been in since 2.3.14 anymore because Microsoft recommends not implementing
it anymore and the implementation was unsafe.
 
Aki
___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Re: Is it possible to setup ntlm authentication then proxy it to the mail server ?

2024-04-26 Thread karl.l--- via dovecot
Hi Aki

We would like NTLM support so customers that have enabled it in outlook and 
other email clients can continue to authenticate when we update our dovecot 
server. We are not running kerberos/samba/active directory or any other 
directory system. I am not sure how GSSAPI would assist us with this 
requirement. 

Given that we are using an sql passdb, will this work and if so any pointers 
would be appreciated.

Thanks
___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


using keycloak

2024-04-25 Thread A. Schulze via dovecot

Hello,

I'm relative new to oauth2. I like to understand a setup for dovecot but 
https://doc.dovecot.org/configuration_manual/authentication/oauth2/ is not 
enough for me.
Could anybody describe a simple setup where dovecot uses keycloak. For 
simplification I would start with keycloak's builtin user management only.

- how to configure dovecot
- how to configure keycloak
- how to test with 'curl --verbose --some-magic-options imap://dovecot-server'

Thanks,
Andreas
___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Re: Which DKIM application for postfix 3.9.0

2024-04-25 Thread Peter via dovecot

On 25/04/24 14:34, Benny Pedersen via dovecot wrote:

+1, thanks for dovecot maillist do it right, postfix maillist fails on spf


You make a confusing, factually incomplete post with claims that are 
incorrect and then complain about a lack of clear response on a 
different list?  If you're going to run down the postfix list for your 
own failure at least have the decency to do it *on* the postfix list.



Peter
___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Re: HELP with email attachments ONLY clean up

2024-04-25 Thread Benny Pedersen via dovecot

Narcis Garcia via dovecot skrev den 2024-04-25 07:32:

Better place for CPanel support and/or feature requests:

https://support.cpanel.net/

This is a Dovecot mailing list.


so it is ?

free:

https://addons.thunderbird.net/en-US/thunderbird/addon/attachment-extractor/
https://www.softaken.com/guide/extract-attachments-from-multiple-emails-thunderbird/

Commercial:

https://www.aid4mail.com/

if cpanal was on gentoo i would recommend cpanel, sorry just kidding :)





___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Re: Debian, Postfix, Dovecot, MySQL, and argon2 password hashing scheme?

2024-04-24 Thread Benny Pedersen via dovecot

David Mehler via dovecot skrev den 2024-04-25 06:49:

Hello,

I have a quick question. Can Debian, and/or it's 
Postfix/Dovecot/MySQL/MariaDB packages support the argon2 password 
hashing scheme? I had a previously-working e-mail setup on a *BSD 
system, utilizing the argon2ID scheme with Dovecot, Postfix, and MySQL. 
Since changing systems to Debian 12.5 I can't send, though checking the 
password with a manual login to Dovecot works fine. I'm wondering if I 
have to migrate the passwords from argon2ID to SHA512-CRYPT?


tux ~ # euse -I argon2
global use flags (searching: argon2)

no matching entries found

local use flags (searching: argon2)

[- c] argon2 (dev-lang/php):
Enable password hashing algorithm from app-crypt/argon2

[- c] argon2 (net-mail/dovecot):
Add support for ARGON2 password schemes

[- c] argon2 (sys-fs/cryptsetup):
Enable password hashing algorithm from app-crypt/argon2

is what i see in gentoo

___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Re: HELP with email attachments ONLY clean up

2024-04-24 Thread Narcis Garcia via dovecot

Better place for CPanel support and/or feature requests:

https://support.cpanel.net/

This is a Dovecot mailing list.


El 25/4/24 a les 0:44, INFO @ TRIMLINE via dovecot ha escrit:

Hello Dovecot Dev team,

  


In my cpanel, we use your email management. This is what my hosting provider
has allowed.

  


Our problem:

Since the introduction of "hi def cameras on mobile phones", we are getting
emails with "huge attachments". The email which comes with the attachments
is also important. However, once we download the email (imap), using any of
the email clients (outlook, bluemail etc.) the mailbox still has these huge
attachments. Because of this, our mailbox storage gets filled up quickly. In
our email client software, we can delete (attachments only), and leave the
email in our mailbox. So this work around helps us keep our mailbox size
manageable. Unfortunately, not everyone does this "email attachment cleanup"
regularly and end up being locked out of email storage space and probably
lost a few hours of productive time.

  


Our dev Request:

Would it be possible to create a setting for end users in our Cpanel, in
which we can delete the attachments without deleting the actual message?

So query should have:

 (drop down selection, like you have it now)

*   Filter 01: Select Messages older than nnn days (where nnn would be
100 to 999 days) (so for the first 99 days, every imap client would have the
opportunity to download the email and the attachments)
*   From Filter 01 = Filter 02: Select messages which are >xxx Mb (where
xxx could be 001 to 999 Mb)
*   From Filter 02 = Filter 03: Select only messages which contain
attachments (Yes)
*   From Filter 03: Permanently Delete the attachments ONLY, So not
deleting the actual email msg (OK).

So on day 100 (or after the clean up is done), the imap email client will
now only get the email but not the attachments (in the event they need to
refresh their email setup).

  


If such a query can be created and installed on our Cpanel, we can run this
"clean up attachments" query regularly and as such reduce our mailbox size.

  


Q: Would it be possible to create such a clean up tool (pre-defined) so that
the cpanel web service admin user only has to enter (nnn and xxx and Yes) to
finally click on "OK" to delete the attachments?

  


If this would be possible, what will it cost us to have it installed on our
Cpanel?

  


There is so much information/documentation already on your website
(doc.dovecot.org) and I spent about 60 min looking for such a "clean up
tool" documentation, but started getting dizzy reading all that script
language etc. Not my cup of tea.

  


Please help.

  


Thank you for considering and reading this request.

  


Kind regards

  


M. Akil Walji

  


___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


--

Narcis Garcia

__
I'm using this dedicated address because personal addresses aren't 
masked enough at this mail public archive. Public archive administrator 
should remove and omit any @, dot and mailto combinations against 
automated addresses collectors.

___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Debian, Postfix, Dovecot, MySQL, and argon2 password hashing scheme?

2024-04-24 Thread David Mehler via dovecot

Hello,

I have a quick question. Can Debian, and/or it's 
Postfix/Dovecot/MySQL/MariaDB packages support the argon2 password 
hashing scheme? I had a previously-working e-mail setup on a *BSD 
system, utilizing the argon2ID scheme with Dovecot, Postfix, and MySQL. 
Since changing systems to Debian 12.5 I can't send, though checking the 
password with a manual login to Dovecot works fine. I'm wondering if I 
have to migrate the passwords from argon2ID to SHA512-CRYPT?


Thanks.
Dave.

--
Sent from Mozilla Thunderbird 91.13.1
___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Re: Sieve: Avoiding duplicates in a folder while keeping in Inbox

2024-04-24 Thread Nick Urbanik via dovecot
On Tue, 2024-04-23 at 09:42 +1000, Nick Urbanik via dovecot wrote:
> Dear Folks,
> 
> I am in the process of learning Sieve, and want to be able to keep an
> email in Inbox, while also keeping *one* copy in another folder. 
> However, the same mail is copied from Inbox multiple times when I run
> sieve-filter -Wev .dovecot.sieve Inbox
> 
> My attempt to prevent this fails:
> ...
> } elsif header :comparator "i;octet" :contains "From"
> "pay...@paypal.com.au" {
>     if not duplicate {
>     fileinto "paypal";
>     }
>     keep;
> }
> 
> Please can anyone enlighten me?

If there is a Dovecot Sieve mailing list, please point me to it.
> ___
> dovecot mailing list -- dovecot@dovecot.org
> To unsubscribe send an email to dovecot-le...@dovecot.org

___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Re: Which DKIM application for postfix 3.9.0

2024-04-24 Thread Benny Pedersen via dovecot

Rupert Gallagher via dovecot skrev den 2024-04-23 15:46:
The developers of DKIM moved on to ARC, then they stopped working on 
ARC also.


No, score=-3.158 tagged_above=-999 required=5 
tests=[AUTHRES_DKIM_PASS=-0.5, AUTHRES_DMARC_PASS=-0.5, 
AUTHRES_SPF_PASS=-0.5, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, 
DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, KAM_ASCII_DIVIDERS=0.64, 
KAM_NUMSUBJECT=0.4, MAILING_LIST_MULTI=-0.1, RCVD_IN_DNSWL_MED=-2.3, 
RCVD_IN_MSPIKE_H4=0.001, RCVD_IN_MSPIKE_WL=0.001, SPF_HELO_PASS=-0.1, 
SPF_PASS=-0.1, URIBL_SBL_A=0.1] autolearn=unavailable autolearn_force=no


+1, thanks for dovecot maillist do it right, postfix maillist fails on 
spf



https://github.com/fastmail/authentication_milter


no gentoo ebuild yet sadly

___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


HELP with email attachments ONLY clean up

2024-04-24 Thread INFO @ TRIMLINE via dovecot
Hello Dovecot Dev team,

 

In my cpanel, we use your email management. This is what my hosting provider
has allowed. 

 

Our problem: 

Since the introduction of "hi def cameras on mobile phones", we are getting
emails with "huge attachments". The email which comes with the attachments
is also important. However, once we download the email (imap), using any of
the email clients (outlook, bluemail etc.) the mailbox still has these huge
attachments. Because of this, our mailbox storage gets filled up quickly. In
our email client software, we can delete (attachments only), and leave the
email in our mailbox. So this work around helps us keep our mailbox size
manageable. Unfortunately, not everyone does this "email attachment cleanup"
regularly and end up being locked out of email storage space and probably
lost a few hours of productive time.

 

Our dev Request:

Would it be possible to create a setting for end users in our Cpanel, in
which we can delete the attachments without deleting the actual message? 

So query should have: 

 (drop down selection, like you have it now)

*   Filter 01: Select Messages older than nnn days (where nnn would be
100 to 999 days) (so for the first 99 days, every imap client would have the
opportunity to download the email and the attachments)
*   From Filter 01 = Filter 02: Select messages which are >xxx Mb (where
xxx could be 001 to 999 Mb)
*   From Filter 02 = Filter 03: Select only messages which contain
attachments (Yes)
*   From Filter 03: Permanently Delete the attachments ONLY, So not
deleting the actual email msg (OK).

So on day 100 (or after the clean up is done), the imap email client will
now only get the email but not the attachments (in the event they need to
refresh their email setup).

 

If such a query can be created and installed on our Cpanel, we can run this
"clean up attachments" query regularly and as such reduce our mailbox size.

 

Q: Would it be possible to create such a clean up tool (pre-defined) so that
the cpanel web service admin user only has to enter (nnn and xxx and Yes) to
finally click on "OK" to delete the attachments?

 

If this would be possible, what will it cost us to have it installed on our
Cpanel?

 

There is so much information/documentation already on your website
(doc.dovecot.org) and I spent about 60 min looking for such a "clean up
tool" documentation, but started getting dizzy reading all that script
language etc. Not my cup of tea.

 

Please help.

 

Thank you for considering and reading this request.

 

Kind regards

 

M. Akil Walji

 

___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Re: Uppercase username emails are rejected

2024-04-24 Thread Simon B via dovecot
On Wed, 17 Apr 2024 at 05:42, Peter via dovecot  wrote:
>
> On 17/04/24 00:51, John Stoffel via dovecot wrote:
> >> "Peter" == Peter via dovecot  writes:
> >
> >> On 14/04/24 12:09, John Stoffel via dovecot wrote:
> >>> I think you need to update both places, so that your username and
> >>> password checks are done with lowercase usernames.
> >
> >> Generally speaking you want auth to be case-sensitive, but go ahead and
> >> try it to see if it fixes the issue.
> >
> > Umm... not for emails you don't.  Since the j...@stoffel.org and
> > j...@stoffel.org and j...@stoffel.org are all the same email
> > address... should they be different logins?  Not for email...
>
> There is a difference between expecting $random_stranger to get the case
> correct on an email address and expecting a user to get his own email
> address correct for the purpose of logging in, also keeping in mind that
> the user will generally get it entered *once* in their MUA and the MUA
> will store it for future logins expecting the case to be correct is not
> a huge ask in this scenario.
>
> Also keep in mind that the username is not always going to be the same
> as the email address, in fact Dovecot is perfectly capable of having
> usernames that are entirely different to the email address that is
> associated with them.
>
> > In general, usernames should NOT be case sensitive, that way leads
> > madness.  Passwords on the other hand...
>
> Both usernames and passwords are part of the authentication credentials.
>   When you allow any authentication credential to be case-insensitive
> then you decrease the difficulty of any brute-force attack by quite a
> bit.  There is no good reason to make usernames case-insensitive and
> very good reasons not to.

I cannot semantically argue with your wording, they are indeed both
"part of the authentication credentials.",but usernames are
IDENTIFICATION, not AUTHENTICATION.

And in the same way you do not have a case sensitive name,  you should
not have a case sensitive username.   (Society's convention is that
your name is capitalised in Proper Noun format, from a information
technology perspective, all lowercase is the same convention).

Regards

Simon
___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Re: Which DKIM application for postfix 3.9.0

2024-04-24 Thread Jack Raats via dovecot

I'm using dkimproxy together with postfix/dovecot

Gr.,
Jack

Op 24-04-2024 om 11:03 schreef Jean-Daniel Dupas via dovecot:

Talking about completeness, you can also use rspamd (https://www.rspamd.com 
).
While it it design to to more than DKIM, it can be use for it.

I have an internal mailer relay based on postfix and rspamd that works great.



Le 24 avr. 2024 à 09:40, infoomatic via dovecot  a écrit :

Just for completeness sake I will throw some in:

*) https://launchpad.net/dkimpy-milter
*) https://lib.rs/crates/dkim-milter
*) https://github.com/fastmail/authentication_milter

I have not yet had time to look at them, so no comment on their usability.

regards,
Robert


On 24.04.24 00:06, Joseph Tam via dovecot wrote:

On Tue, Apr 23, 2024 at 7:33 AM  wrote:


I am upgrading to postfix 3.9.0. I have not used DKIM in previous postfix 
installs, but I
would like to start now with the new google rules. I have done some research 
and opendkim
  is the most recommended, however, other research states the opendkim has been
abandoned by it's maintainers. So I am looking for a good alternative dkim 
software
that will work with postfix that I can compile myself. I do not run on any linux
version, so therefore I can not just apt-get a new dkim application.
I run Solaris and therefore need to compile my applications, postfix and dkim.
Any good suggestions will be appreciated.

I just rolled out a locally compiled opendkim on my mail server. It
works, but there
are a few gotchas.

Although it seems like a moribund project, there is a late beta
version that includes
some important patches, most notably the "Header:\n LongHeaderValue" bug that
needs fixing.  You can look at

 https://sourceforge.net/p/opendkim/patches/

to find that patch, as well as others you deem important.  As DKIM standards
are not going to change soon, having end-of-line software is not as
bad as it seems
unless you need particular enhancements to make it work better in your
circumstances.
Once you get your setup dialed, you can probably set it and forget it.

Most of the headaches have actually been internal: local mail
injection via sendmail
would skip miltering, From header canonicalization by the MTA would not be
seen by the opendkim milter thereby creating messages with missing or invalid
signatures, and mailing list/auto reply/forwarder software mangling messages.

I think Postfix does a better job in this regard, so these issues may
not present itself.
(I did a Postfix/opendkim milter on an Ubuntu system and it was much
less hassle.)

You should look at *lots* of DMARC RUA reports.  People are doing crazy batsh*t
stuff with your mail domain.

Joseph Tam 
___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org

___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org

___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org

___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Re: Which DKIM application for postfix 3.9.0

2024-04-24 Thread Jean-Daniel Dupas via dovecot
Talking about completeness, you can also use rspamd (https://www.rspamd.com 
).
While it it design to to more than DKIM, it can be use for it.

I have an internal mailer relay based on postfix and rspamd that works great.


> Le 24 avr. 2024 à 09:40, infoomatic via dovecot  a écrit 
> :
> 
> Just for completeness sake I will throw some in:
> 
> *) https://launchpad.net/dkimpy-milter
> *) https://lib.rs/crates/dkim-milter
> *) https://github.com/fastmail/authentication_milter
> 
> I have not yet had time to look at them, so no comment on their usability.
> 
> regards,
> Robert
> 
> 
> On 24.04.24 00:06, Joseph Tam via dovecot wrote:
>> On Tue, Apr 23, 2024 at 7:33 AM  wrote:
>> 
 I am upgrading to postfix 3.9.0. I have not used DKIM in previous postfix 
 installs, but I
 would like to start now with the new google rules. I have done some 
 research and opendkim
  is the most recommended, however, other research states the opendkim has 
 been
 abandoned by it's maintainers. So I am looking for a good alternative dkim 
 software
 that will work with postfix that I can compile myself. I do not run on any 
 linux
 version, so therefore I can not just apt-get a new dkim application.
 I run Solaris and therefore need to compile my applications, postfix and 
 dkim.
 Any good suggestions will be appreciated.
>> 
>> I just rolled out a locally compiled opendkim on my mail server. It
>> works, but there
>> are a few gotchas.
>> 
>> Although it seems like a moribund project, there is a late beta
>> version that includes
>> some important patches, most notably the "Header:\n LongHeaderValue" bug that
>> needs fixing.  You can look at
>> 
>> https://sourceforge.net/p/opendkim/patches/
>> 
>> to find that patch, as well as others you deem important.  As DKIM standards
>> are not going to change soon, having end-of-line software is not as
>> bad as it seems
>> unless you need particular enhancements to make it work better in your
>> circumstances.
>> Once you get your setup dialed, you can probably set it and forget it.
>> 
>> Most of the headaches have actually been internal: local mail
>> injection via sendmail
>> would skip miltering, From header canonicalization by the MTA would not be
>> seen by the opendkim milter thereby creating messages with missing or invalid
>> signatures, and mailing list/auto reply/forwarder software mangling messages.
>> 
>> I think Postfix does a better job in this regard, so these issues may
>> not present itself.
>> (I did a Postfix/opendkim milter on an Ubuntu system and it was much
>> less hassle.)
>> 
>> You should look at *lots* of DMARC RUA reports.  People are doing crazy 
>> batsh*t
>> stuff with your mail domain.
>> 
>> Joseph Tam 
>> ___
>> dovecot mailing list -- dovecot@dovecot.org
>> To unsubscribe send an email to dovecot-le...@dovecot.org
> ___
> dovecot mailing list -- dovecot@dovecot.org
> To unsubscribe send an email to dovecot-le...@dovecot.org

___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Re: Which DKIM application for postfix 3.9.0

2024-04-24 Thread infoomatic via dovecot

Just for completeness sake I will throw some in:

*) https://launchpad.net/dkimpy-milter
*) https://lib.rs/crates/dkim-milter
*) https://github.com/fastmail/authentication_milter

I have not yet had time to look at them, so no comment on their usability.

regards,
Robert


On 24.04.24 00:06, Joseph Tam via dovecot wrote:

On Tue, Apr 23, 2024 at 7:33 AM  wrote:


I am upgrading to postfix 3.9.0. I have not used DKIM in previous postfix 
installs, but I
would like to start now with the new google rules. I have done some research 
and opendkim
  is the most recommended, however, other research states the opendkim has been
abandoned by it's maintainers. So I am looking for a good alternative dkim 
software
that will work with postfix that I can compile myself. I do not run on any linux
version, so therefore I can not just apt-get a new dkim application.
I run Solaris and therefore need to compile my applications, postfix and dkim.
Any good suggestions will be appreciated.


I just rolled out a locally compiled opendkim on my mail server. It
works, but there
are a few gotchas.

Although it seems like a moribund project, there is a late beta
version that includes
some important patches, most notably the "Header:\n LongHeaderValue" bug that
needs fixing.  You can look at

 https://sourceforge.net/p/opendkim/patches/

to find that patch, as well as others you deem important.  As DKIM standards
are not going to change soon, having end-of-line software is not as
bad as it seems
unless you need particular enhancements to make it work better in your
circumstances.
Once you get your setup dialed, you can probably set it and forget it.

Most of the headaches have actually been internal: local mail
injection via sendmail
would skip miltering, From header canonicalization by the MTA would not be
seen by the opendkim milter thereby creating messages with missing or invalid
signatures, and mailing list/auto reply/forwarder software mangling messages.

I think Postfix does a better job in this regard, so these issues may
not present itself.
(I did a Postfix/opendkim milter on an Ubuntu system and it was much
less hassle.)

You should look at *lots* of DMARC RUA reports.  People are doing crazy batsh*t
stuff with your mail domain.

Joseph Tam 
___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org

___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Logging e_debug messages

2024-04-23 Thread D S via dovecot
Is it possible to log the e_debug events in quota-status.c? 
[https://github.com/dovecot/core/blob/main/src/plugins/quota/quota-status.c]

Running: Dovecot 2.3.19.1 (9b53102964)

Here's the config I've tried:

log_path = /var/log/dovecot.log

event_exporter log {
  format = json
  format_args = time-rfc3339
  transport = log
}

metric everything {
  exporter = log
  filter = event=* OR category=*
}

log_debug = event=*
auth_verbose = yes
auth_debug = yes
mail_debug = yes


This seems to capture events at INFO level or higher, and some Debug log 
messages, but not the e_debug messages in quota-status.c.

Thanks,
Daniel
___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


RE: Which DKIM application for postfix 3.9.0

2024-04-23 Thread Joseph Tam via dovecot
On Tue, Apr 23, 2024 at 7:33 AM  wrote:

> > I am upgrading to postfix 3.9.0. I have not used DKIM in previous postfix 
> > installs, but I
>> would like to start now with the new google rules. I have done some research 
>> and opendkim
>>  is the most recommended, however, other research states the opendkim has 
>> been
>> abandoned by it's maintainers. So I am looking for a good alternative dkim 
>> software
>> that will work with postfix that I can compile myself. I do not run on any 
>> linux
>> version, so therefore I can not just apt-get a new dkim application.
>> I run Solaris and therefore need to compile my applications, postfix and 
>> dkim.
>> Any good suggestions will be appreciated.

I just rolled out a locally compiled opendkim on my mail server. It
works, but there
are a few gotchas.

Although it seems like a moribund project, there is a late beta
version that includes
some important patches, most notably the "Header:\n LongHeaderValue" bug that
needs fixing.  You can look at

https://sourceforge.net/p/opendkim/patches/

to find that patch, as well as others you deem important.  As DKIM standards
are not going to change soon, having end-of-line software is not as
bad as it seems
unless you need particular enhancements to make it work better in your
circumstances.
Once you get your setup dialed, you can probably set it and forget it.

Most of the headaches have actually been internal: local mail
injection via sendmail
would skip miltering, From header canonicalization by the MTA would not be
seen by the opendkim milter thereby creating messages with missing or invalid
signatures, and mailing list/auto reply/forwarder software mangling messages.

I think Postfix does a better job in this regard, so these issues may
not present itself.
(I did a Postfix/opendkim milter on an Ubuntu system and it was much
less hassle.)

You should look at *lots* of DMARC RUA reports.  People are doing crazy batsh*t
stuff with your mail domain.

Joseph Tam 
___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Re: Which DKIM application for postfix 3.9.0

2024-04-23 Thread Benny Pedersen via dovecot

Jeroen de Meijer via dovecot skrev den 2024-04-23 16:21:
I let rspamd do the DKIM (and DMARC-reporting) for me. It is actively 
maintained.


all in one basket only makes crumpled eggs :)

i do dkim signing in amavisd, and dkim reporting from spamassassin, lots 
more flexible then understanding bugs in rspamd


hope arc will be supported in next amavisd

maybe as a amavisd-custom hook





___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


RE: Which DKIM application for postfix 3.9.0

2024-04-23 Thread Marc via dovecot
I can remember looking at rspamd years ago. I thought it was a bit chaotic with 
all these rules. I can even remember asking developers some design questions 
which they could not answer. The fact that they generate their own graphs 
(still?) is also old fashioned. This Sergey that is working on mailfromd is an 
ace with mta's, even implemented for me an exporter endpoint, so now I can 
chart whatever I want.

> 
> I let rspamd do the DKIM (and DMARC-reporting) for me. It is actively
> maintained.
> 
> > On 23 Apr 2024, at 15:50, Rupert Gallagher via dovecot
>  wrote:
> >
> > The developers of DKIM moved on to ARC, then they stopped working on
> ARC also.
> >
> > Try this:
> >
> > https://github.com/fastmail/authentication_milter
> >
> >>
> >> I am upgrading to postfix 3.9.0. I have not used DKIM in previous
> postfix installs, but I would like to start now with the new google
> rules. I have done some research and opendkim is the most recommended,
> however, other research states the opendkim has been abandoned by it's
> maintainers. So I am looking for a good alternative dkim software that
> will work with postfix that I can compile myself. I do not run on any
> linux version, so therefore I can not just apt-get a new dkim
> application. I run Solaris and therefore need to compile my applications,
> postfix and dkim. Any good suggestions will be appreciated.

___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Re: Which DKIM application for postfix 3.9.0

2024-04-23 Thread Jeroen de Meijer via dovecot
I let rspamd do the DKIM (and DMARC-reporting) for me. It is actively 
maintained.

> On 23 Apr 2024, at 15:50, Rupert Gallagher via dovecot  
> wrote:
> 
> The developers of DKIM moved on to ARC, then they stopped working on ARC 
> also.
> 
> Try this:
> 
> https://github.com/fastmail/authentication_milter
> 
>  Original Message 
>> On Mar 11, 2024, 23:21, wrote:
>> 
>> I am upgrading to postfix 3.9.0. I have not used DKIM in previous postfix 
>> installs, but I would like to start now with the new google rules. I have 
>> done some research and opendkim is the most recommended, however, other 
>> research states the opendkim has been abandoned by it's maintainers. So I am 
>> looking for a good alternative dkim software that will work with postfix 
>> that I can compile myself. I do not run on any linux version, so therefore I 
>> can not just apt-get a new dkim application. I run Solaris and therefore 
>> need to compile my applications, postfix and dkim. Any good suggestions will 
>> be appreciated. ___ dovecot 
>> mailing list -- dovecot@dovecot.org To unsubscribe send an email to 
>> dovecot-le...@dovecot.org
> ___
> dovecot mailing list -- dovecot@dovecot.org
> To unsubscribe send an email to dovecot-le...@dovecot.org
___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


RE: Which DKIM application for postfix 3.9.0

2024-04-23 Thread Marc via dovecot
> > I am upgrading to postfix 3.9.0. I have not used DKIM in previous
> postfix installs, but I would like to start now with the new google
> rules. I have done some research and opendkim is the most recommended,
> however, other research states the opendkim has been abandoned by it's
> maintainers. So I am looking for a good alternative dkim software that
> will work with postfix that I can compile myself. I do not run on any
> linux version, so therefore I can not just apt-get a new dkim
> application. I run Solaris and therefore need to compile my applications,
> postfix and dkim. Any good suggestions will be appreciated.

I am super pleased with mailfromd! Running dkim for quite some time now.  
https://www.gnu.org.ua/software/mailfromd/manual/html_chapter/index.html#SEC_Contents

___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Setting compression to specific namespace

2024-04-23 Thread Filip Bartmann via dovecot
Hello,
is it possible to set compression for specific namespace or spefic
mailbox folder?

Thanks,
Filip Bartmann
___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Re: Which DKIM application for postfix 3.9.0

2024-04-23 Thread Rupert Gallagher via dovecot
The developers of DKIM moved on to ARC, then they stopped working on ARC also.

Try this:

https://github.com/fastmail/authentication_milter

 Original Message 
On Mar 11, 2024, 23:21, wrote:

> I am upgrading to postfix 3.9.0. I have not used DKIM in previous postfix 
> installs, but I would like to start now with the new google rules. I have 
> done some research and opendkim is the most recommended, however, other 
> research states the opendkim has been abandoned by it's maintainers. So I am 
> looking for a good alternative dkim software that will work with postfix that 
> I can compile myself. I do not run on any linux version, so therefore I can 
> not just apt-get a new dkim application. I run Solaris and therefore need to 
> compile my applications, postfix and dkim. Any good suggestions will be 
> appreciated. ___ dovecot mailing 
> list -- dovecot@dovecot.org To unsubscribe send an email to 
> dovecot-le...@dovecot.org
___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Sieve: Avoiding duplicates in a folder while keeping in Inbox

2024-04-22 Thread Nick Urbanik via dovecot
Dear Folks,

I am in the process of learning Sieve, and want to be able to keep an
email in Inbox, while also keeping *one* copy in another folder. 
However, the same mail is copied from Inbox multiple times when I run
sieve-filter -Wev .dovecot.sieve Inbox

My attempt to prevent this fails:
...
} elsif header :comparator "i;octet" :contains "From"
"pay...@paypal.com.au" {
if not duplicate {
fileinto "paypal";
}
keep;
}

Please can anyone enlighten me?
___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


Re: Question about line length limit in lmtp.

2024-04-22 Thread Jörg M . Schulz via dovecot
the issue is that some mail clients, namely apple mail on ios, send header 
lines that are too long for longer mail threads or while forwarding mails.
Didn't find a way to handle those clients yet. Did anyone?
___
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org


  1   2   3   4   5   6   7   8   9   10   >