Re: Simple backup of maildir folder

2020-05-31 Thread Admin Beckspaced
My questions are: - How much to I need to configure this new server? Do I need to setup user by user, or even install postfix (that's where my users are configured) to get it all backed up? I tried to install dovecot and running doveadm backup, but it complains the users are not there. -

Re: I can no longer use TLS for Windows7 and Outlook

2020-05-31 Thread Christian Kivalo
On May 31, 2020 6:36:52 AM GMT+02:00, Mark Constable wrote: >I currently use Ubuntu 20.04 with Dovecot 2.3.7.2 and OpenSSL 1.1.1f. > >A few months ago there was an update to all these systems and since >then I've had to talk W7 and old Mac clients through disabling ports >993/995 with TLS

Re: I can no longer use TLS for Windows7 and Outlook

2020-05-31 Thread Aki Tuomi
On 31/05/2020 07:36 Mark Constable wrote: I currently use Ubuntu 20.04 with Dovecot 2.3.7.2 and OpenSSL 1.1.1f. A few months ago there was an update to all these systems and since

Re: I can no longer use TLS for Windows7 and Outlook

2020-05-31 Thread Kostya Vasilyev
On 5/31/20 11:54 AM, Aki Tuomi wrote: On 31/05/2020 07:36 Mark Constable > wrote: I currently use Ubuntu 20.04 with Dovecot 2.3.7.2 and OpenSSL 1.1.1f. A few months ago there was an update to all these systems and since then I've had to talk W7 and old Mac clients

Re: identify 143 vs 993 clients

2020-05-31 Thread Jean-Daniel
> Le 31 mai 2020 à 06:09, Peter a écrit : > > On 29/05/20 11:27 pm, mj wrote: >> Thanks to all who participated in the interesting discussion. >> It seems my initial thought might have been best after all, and >> discontinuing port 143 might be the safest way proceed. > > Yes and no. Some

Re: Simple backup of maildir folder

2020-05-31 Thread @lbutlr
On 29 May 2020, at 23:49, Admin Beckspaced wrote: > I also have maildir as mailbox format and use the following script to do > daily backups > > https://github.com/tachtler/dovecot-backup A couple of notes on this quite useful script: My mktemp does not support -p (FreeBSD 12.1) is I had to

Re: identify 143 vs 993 clients

2020-05-31 Thread Peter
On 31/05/20 6:50 pm, Jean-Daniel wrote: Yes and no. Some of the attack vectors mentioned are not reasonable and it really depends on the client. Thunderbird, for example, used to have settings for plain text, TLS and "TLS if available", but the latter setting has not been available for some

Re: I can no longer use TLS for Windows7 and Outlook

2020-05-31 Thread @lbutlr
On 30 May 2020, at 22:36, Mark Constable wrote: > 993/995 with TLS enabled back to ports 143/110 without SSL or they > could not pick up email. Thunderbird users (ie; me) were unaffected. Insecure mail login is far too risky to allow. I don't even allow it within a LAN. > Could anyone share a

Re: Simple backup of maildir folder

2020-05-31 Thread Laura Smith
Sent with ProtonMail Secure Email. ‐‐‐ Original Message ‐‐‐ On Sunday, 31 May 2020 09:35, @lbutlr wrote: > > A couple of notes on this quite useful script: > > My mktemp does not support -p (FreeBSD 12.1) is I had to change the script to: > In my scripts I tend to create a

auth_policy_server vs client_id and x-originating-ip

2020-05-31 Thread Zdeněk Zámečník
I run into troubles when trying to set up auth_policy_server in Dovecot 2.3.10.1. It works almost as expected but I cannot get client ID in this process. By setting up "imap_id_log=*" I see in log that Dovecot gets details about mail client like name and version: May 31 14:20:58 mail

Re: Simple backup of maildir folder

2020-05-31 Thread Francis Augusto Medeiros-Logeay
> On 31 May 2020, at 11:13, Laura Smith > wrote: > >  > > > Sent with ProtonMail Secure Email. > > ‐‐‐ Original Message ‐‐‐ >> On Sunday, 31 May 2020 09:35, @lbutlr wrote: >> >> >> >> A couple of notes on this quite useful script: >> >> My mktemp does not support -p (FreeBSD

Re: identify 143 vs 993 clients

2020-05-31 Thread Joseph Tam
On Sun, 31 May 2020, Jean-Daniel wrote: So yes the safest way to go is to just use port 993, but as long as the client is not set to a "TLS if available" option then port 143 is also safe. I don?t think you can call an option safe if it relies on the users to properly configure their client.

Re: I can no longer use TLS for Windows7 and Outlook

2020-05-31 Thread Benny Pedersen
On 2020-05-31 11:11, Kostya Vasilyev wrote: In terms of Dovecot ciphers config, Windows should be happy with TLS_RSA_WITH_3DES_EDE_CBC_SHA which is less broken than the other older ciphers. lets hope that dovecot allow tls1 and still can disable tls1.1, tls 1.1 is weaker then tls 1.0

Re: Running doveadm without config file?

2020-05-31 Thread Joseph Tam
Sami Ketola writes: I tried this with /dev/null and /tmp/empty.conf but ran into another wall doveadm(root): Fatal: execv(/usr/bin/doveconf) failed: No such file or directory How did you install dovecot on that system since /usr/bin/doveconf is part of the base package? Manual

Re: Simple backup of maildir folder

2020-05-31 Thread Joseph Tam
On Sun, 31 May 2020, Laura Smith wrote: A couple of notes on this quite useful script: My mktemp does not support -p (FreeBSD 12.1) is I had to change the script to: In my scripts I tend to create a tempdir and then tempfiles within that. It makes the cleanup routine neater, e.g. at the

2.3.10 + lazy expunge

2020-05-31 Thread Matt Bryant
Hi, so currently run dovecot 2.2.x on CentOS 7 box and was looking to upgrade to 2.3.10. I use lazy expunge atm into a different namespace but saw on the new doco pages that is is depracted in 2.3.0. Have tested and still seems to work so question is more around why ? Why would this be