RE: [External] Help - Permissions issue with new mail

2023-05-16 Thread Marc
> > I tried to copy my "old" mailbox to see how postfix regenerated it when > I logged in and this is what I got - Does it look right? > I think you can judge better if it is right. Did you configured it like this? Having everything stored on the disk with same userid/groupid would be the

Re: [feature request] SSL handshake rejection for non-SNI clients

2023-05-16 Thread Sean Gallagher
It gets worse! If you request a client certificate, Dovecot will not check the name on the certificate, only that it is signed by a known CA. I raised this issue on this list some time ago and got no response. I'm not sure anyone is listening. On 16/05/2023 7:54 pm, Serg via dovecot wrote: I

[feature request] SSL handshake rejection for non-SNI clients

2023-05-16 Thread Serg via dovecot
I would like to offer to implement a feature to reject SSL handshakes for a default certificate-key pair for efficiently discarding bot requests (i.e. such requests that provide invalid/not configured hostname or do not specify at all, like when doing request to the IP address directly).

Re: [feature request] SSL handshake rejection for non-SNI clients

2023-05-16 Thread Aki Tuomi via dovecot
Hi! We are indeed listening. And Dovecot actually can check the name on the certificate, if you ask it to do so. https://doc.dovecot.org/settings/core/#core_setting-auth_ssl_username_from_cert Aki > On 16/05/2023 14:58 EEST Sean Gallagher wrote: > > > It gets worse! If you request a

LMTP server client certificate validation

2023-05-16 Thread Sean Gallagher
A new thread so as not to hijack Serg's request. In my config, I forward deliveries to Dovecot over LMTPS. The machine (there is just one for now) forwarding the mail has a certificate from a well known and trusted CA. How can I configure Dovecot to accept mail deliveries from that one

Re: LMTP server client certificate validation

2023-05-16 Thread Jochen Bern
On 16.05.23 14:27, Sean Gallagher wrote: I have a created a CA for the sole purpose of signing the certificate of the LMTPS client. I regard this as a horrible horrible kludge. ... how do you figure that? *Someone*, and that means you, has to specify which clients are allowed to connect.

bug report: fd-util.c: line 102 (fd_set_nonblock): assertion failed: (fd > -1)

2023-05-16 Thread Moritz Orbach via dovecot
Hi all, Our Dovecot replication crashes because an assertion in dovecot-core/src/lib/fd-util.c fails: #6 0x7fd5ac89b08e in fd_set_nonblock (fd=-1, nonblock=true) at fd-util.c:102 102 i_assert(fd > -1); This only happens if dovecot starts the replication by itself, i.e. not

Incorrect saved dates in mailboxes

2023-05-16 Thread Chris Szilagyi
Hello: We have a server (Debian 11) using Dovecot 2.3 which has been in place for about a year. We are using mbox format for our mailboxes, and do not use MySQL, just plain user directories under /home. Recently, I noticed that our expunge script is not working, and I don't think it ever

Re: [PATCH] [WIP]: thunderbird mboxrd to mbox

2023-05-16 Thread Aki Tuomi via dovecot
> On 16/05/2023 20:26 EEST Randy Li via dovecot wrote: > > > I was trying to restore email from local thunderbird download data. > None of the script I found could work. > This script is modified from > superuser.com/questions/105653/how-to-convert-mboxo-mboxrd-to-mboxcl-mboxcl2 > > Which

pigeonhole: sieve: float score failed for comparator-i ascii-numeric

2023-05-16 Thread Randy Li via dovecot
Hello Following the sieve_spamtest_status_header from the document, I think I could extract the score from the spamassassin (which is from spampd lmtp). But sieve script can't never work properly with comparator "i;ascii-numeric". I have used sieve-test several times, once I remove the dot

Re: bug report: fd-util.c: line 102 (fd_set_nonblock): assertion failed: (fd > -1)

2023-05-16 Thread Aki Tuomi via dovecot
> On 16/05/2023 16:24 EEST Moritz Orbach via dovecot > wrote: > > > Hi all, > > Our Dovecot replication crashes because an assertion in > dovecot-core/src/lib/fd-util.c fails: > > #6 0x7fd5ac89b08e in fd_set_nonblock (fd=-1, nonblock=true) at > fd-util.c:102 > 102

Re: pigeonhole: sieve: float score failed for comparator-i ascii-numeric

2023-05-16 Thread Aki Tuomi via dovecot
> On 16/05/2023 20:43 EEST Randy Li via dovecot wrote: > > > Hello > > Following the sieve_spamtest_status_header from the document, I think I > could extract the score from the spamassassin (which is from spampd lmtp). > > But sieve script can't never work properly with comparator >

Re: Incorrect saved dates in mailboxes

2023-05-16 Thread Christian Kivalo
On 2023-05-16 15:55, Chris Szilagyi wrote: Hello: We have a server (Debian 11) using Dovecot 2.3 which has been in place for about a year. We are using mbox format for our mailboxes, and do not use MySQL, just plain user directories under /home. Recently, I noticed that our expunge

[PATCH] [WIP]: thunderbird mboxrd to mbox

2023-05-16 Thread Randy Li via dovecot
I was trying to restore email from local thunderbird download data. None of the script I found could work. This script is modified from superuser.com/questions/105653/how-to-convert-mboxo-mboxrd-to-mboxcl-mboxcl2 Which works for me, using this script I could use doveadm import to restore my

Re: LMTP server client certificate validation

2023-05-16 Thread Sean Gallagher
<> In my config, I forward deliveries to Dovecot over LMTPS. The machine (there is just one for now) forwarding the mail has a certificate from a well known and trusted CA. How can I configure Dovecot to accept mail deliveries from that one machine? Currently I have: protocol lmtp{