Hot answers tagged

9

I was able to fix my problem by changing the postfix main.cf configuration to read: smtpd_relay_restrictions = permit_mynetworks permit_sasl_authenticated defer_unauth_destination instead of using smtpd_recipient_resrictions It turns out that after postfix 2.10.0, smtpd_relay_restrictions should be used instead of ...


6

I would expect it needs the < to tell it to set the config value to the contents of the file instead of to the actual string /etc/ssl/certs/dovecot.pem (which obviously isn't a valid SSL certificate).


3

IMAP, unlike its predecessor POP, is designed so that the "master" home of the email is on the server. Anything that may be stored by the IMAP client (whether it's Thunderbird or a webmail client or anything else) is treated as a cache for what's on the server. As such, it is completely discardable and non-valuable. If Thunderbird doesn't manage it well and ...


2

I would suggest you to make a backup of your email messages in the maildir format, (a single individual file for each message). You could save them as either EML or PDF. For security you could compress and encrypt them using the ZIP format, one ZIP file for each message because of the following: Why single files. They are easy to move around, copy ...


2

I think I actually worked it out. I found this page in the Dovecot documentation (not well highlighted I must admit! I completely missed the tab at the top of the page): http://wiki2.dovecot.org/Upgrading/2.0?highlight=%28unix_listener%29 I reverted to the original code block originally documented on the website: protocol lda { log_path = ...


2

Option a) Reinstall the package, and immediately afterwards remove it. Option b) tweak the post-rm script file so that it does not call doveconf. Option c) tweak doveconf itself so it is a clone of /bin/true.


2

From the Dovecot documentation: When Dovecot starts up for the first time, it generates new 512bit and 1024bit Diffie Hellman parameters and saves them into /var/lib/dovecot/ssl-parameters.ssl. After the initial creation they're by default regenerated every week. Most likely this is the case.


2

This has probably nothing to do with an open relay (which you can check with this tool), but rather you are getting backscatter mail. When a spammer or worm sends mail with forged sender addresses, innocent sites are flooded with undeliverable mail notifications. This is called backscatter mail. With Postfix, you know that you're a backscatter ...


1

It took some time, but I found a solution to my problem. Someone from outside used an existing account to log in (SASL Authentication) and then send mails with an invalid sender address something@example.com. To prohibit this behaviour I added some lines in my main.cf. #file / database in which valid emails, users and domains can be found ...


1

The iptables strategy is not the appropiate one IMHO, because you take for granted that the DELE command will be always sent as a whole in the same TCP packet, when it doesn't need to and the packet might be split into several packets. So that would result in some messages blocked and some not. I'd consider using the 'lazy expunge' plugin for Dovecot, which ...


1

Postfix and Dovecot do different things. Postfix is an MTA, or Mail Transfer Agent. It accepts mail from the outside world and from local sources, and routes it to its destination. This may involve an smtp connection to another machine, or it may involve delivering it to a local delivery agent or writing it directly to an mbox. When an MTA goes wrong, ...


1

anyof means that if any single header contains one of the alternative values, then the whole condition become true, nevertheless the rest headers contains something else. anyof ALSO becomes true when all the headers contains the predefined values. This is the relaxed condition. allof ONLY becomes true when all the headers contains the predefined values. ...


1

Dovecot is configured to listen for auth requests at private/auth: unix_listener /var/spool/postfix/private/auth However, you're telling Postfix to connect to an entirely different location: smtpd_sasl_path = smtpd – in fact, you're (almost) telling it to send the auth requests to its own SMTP daemon, which isn't going to understand them at all, much ...


1

I think the problem is that you are running your mail server only on loop back interface (I assume there are no other entries for :25 on your netstat output above) tcp 0 0 127.0.0.1:25 0.0.0.0:* ESCUTA 0 138498 18957/sendmail: MTA It is not reachable for anything outside of the host. It should run on ...


1

I do not think you can possibly have followed the tutorial you link to, since (a) sendmail is running as your MTA, and (b) it's only listening on 127.0.0.1. That latter is why you can't connect to port 25 from anywhere else. To change this, look for the line DAEMON_OPTIONS(`Port=smtp,Addr=127.0.0.1, Name=MTA')dnl in /etc/mail/sendmail.mc, change it to ...


1

Finally found the answer for this: I had to change a small configuration in /etc/dovecot/dovecot.conf (on Ubuntu Server 14.04) mail_location = maildir:~/Maildir:LAYOUT=fs Source: http://wiki2.dovecot.org/MailLocation/Maildir


1

Problem solved by using correct spacing like so: smtps inet n - - - - smtpd -o syslog_name=postfix/smtps # <<< line 23 -o smtpd_tls_wrappermode=yes -o smtpd_sasl_auth_enable=yes -o smtpd_client_restrictions=permit_sasl_authenticated,reject


1

Maybe you have the disable_plaintext_auth directive set somewhere in your configuration.


1

Your line from the log file and your regex differ in the word after dovecot. Your log has the term dict, but your regex has the term auth instead. So you want to adjust your rule maybe to the following: ^\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ dovecot: (dict|auth): pgsql\([[:digit:]]{1,3}\.[[:digit:]]{1,3}\.[[:digit:]]{1,3}\.[[:digit:]]{1,3}\): Connected to ...


1

You haven't define appropriate listeners for protocols. Try to begin from the single-file config like that: ## Dovecot configuration file mail_location = maildir:/var/mail/%d/%n protocols = imap pop3 listen = * mail_uid = mailnull mail_gid = mail first_valid_uid = 26 ...


1

Reinstalling / uninstalling/ purging did not work for me. This did: This worked for me: sudo nano /etc/init.d/dovecot put exit 0 in the top line (you may put it on 2nd line after comment) save, and try to aptitude-remove to remove your broken installation :-)


1

Nearly all services with authentication can work with LDAP while this isn't the case for SQL databases. So if you are not sure all your services can work with MySQL or PostgreSQL, chose LDAP.


1

Found the problems: There is a whitespace before the scan unix line. There should be a linebreak between the -o disable_dns_lookups=yes and 127.0.0.1:10026 lines. Correct format: # Must begin with NO SPACES scan unix - - n - 16 smtp -o smtp_data_done_timeout=1200 -o smtp_send_xforward_command=yes -o ...


1

The answer ended up being as simple as also adding recipient_delimiter = - to the /etc/dovecot/dovecot.conf


1

According to the docs mentioned by Stefan this is now possible but disabled by default. You can add internal_mail_filter_classes = bounce to your config for bounces to be filtered just as any other mail (including signing filter). This will work well if you only have signing filter. Though you may encounter problems when you have other filters. You should ...


1

I'm afraid that according to the docs you're out of luck trying to make it work with Postfix: Postfix currently does not apply content filters to mail that is forwarded or aliased internally, or to mail that is generated internally such as bounces or Postmaster notifications. This may be a problem when you want to apply a signing Milter to such mail.


1

While it is possible to do this unnatural thing you are asking for (i.e. rerunning dovecot local delivery on messages in a Maildir folder to force reprocessing of those messages by Sieve), the "elegant approach" would be getting rid of Popfile altogether and replacing it with spamassassin for spam detection and Sieve scripts for the rest of your sorting ...


1

The problem is with openssl, not dovecot. There is a bug in openssl which stops it looking for the default CApath, so you need to tell it where to find the list of root CA certs by adding -CApath to your command line. For example: sudo openssl s_client -connect localhost:143 -starttls imap -CApath /dev/null If you have not populated your certs folder ...


1

Secure password authentication in outlook express uses Windows NTLM/Kerberos auth. Is in not simple SSL/TLS. Do not enable it on linux unless you have GSSAPI/Kerberos configured. Error 0x800CCC18 => http://support.microsoft.com/kb/202061 Reason is simple, you can not use secured login on unsecured connection. Turn off "Log on using secure password ...



Only top voted, non community-wiki answers of a minimum length are eligible