Re: How to temporarily make all mailboxes read-only for backup purposes?

2023-11-24 Thread Bernardo Reino
On Wed, 22 Nov 2023, Matthias Nagel wrote: Dear all, I am using Dovecot sdbox format for mailboxes. Is there an option to temporarily make Dovecot read-only while the mailboxes are being backed-up such that a consistent state is backed-up? I am looking for some command which I can use as

Re: Avoiding POODLE vulnerability

2023-11-19 Thread Bernardo Reino
On Sun, 19 Nov 2023, Steve Litt wrote: Michael Orlitzky said on Sat, 18 Nov 2023 17:31:49 -0500 On Sat, 2023-11-18 at 16:54 -0500, Steve Litt wrote: I forgot to say: I'm using Dovecot 2.3.21 on an up to date 64 bit x86_64 Void Linux computer using runit for its init system. I populate

Re: Possible hack via doveadm

2023-05-14 Thread Bernardo Reino
On Sun, 14 May 2023, Daniel Miller via dovecot wrote: I only allow explicit service traffic through. IMAPS, SMTPS, etc. If doveadm is communicating via the IMAP(S) ports then all I can do via firewall is block countries. Which of course I can but I'm asking about any additional hardening for

Re: SPF DNS Error / R_SPF_DNSFAIL

2022-12-19 Thread Bernardo Reino
On Mon, 19 Dec 2022, Carlos Mogas da Silva wrote: Hi list. My incoming messages are getting R_SPF_DNSFAIL and an error on the Authentication-Results header: spf=temperror (mail01.r3pek.org: error in processing during lookup of no-re...@cttexpresso.pt: DNS error) I see the DNS request on my

Re: mdbox vs. maildir format

2022-10-18 Thread Bernardo Reino
On 18/10/2022 12:17, Michael wrote: > > [...] so, raid is mandatory, which is already the case, but what about backup? how can i achieve a backup/snapshot of both, the mdbox (nfs share) and the index files (local raid) and assure they are consistent? You can use doveadm to backup the

Re: Dovecot mail-crypt webmail can't read encrypted messages

2022-10-11 Thread Bernardo Reino
need to run ./autogen.sh first. ^^ This is from the instructions in git (INSTALL.md). This generates, among others, the file I mentioned. On 2022-10-11 22:15, Bernardo Reino wrote: Please please stop top-posting. Makes a mess of everything! On Tue, 11 Oct 2022, Serveria Support wrote: Ok

Re: Dovecot mail-crypt webmail can't read encrypted messages

2022-10-11 Thread Bernardo Reino
k I'll stop (I used to be good with C, now I'm read/only, and my time is very limited). (I do make a mental note of having a statically linked dovecot binary with forced password debugging. You never know when/where you might need it ;-) Cheers and good luck, Bernardo On 2022-10-11 17:0

Re: Dovecot mail-crypt webmail can't read encrypted messages

2022-10-11 Thread Bernardo Reino
On Mon, 10 Oct 2022, Serveria Support wrote: I checked the source code on Github and discussed this with a C developer. There seem to be too many files... perhaps somebody can guide me where should I look? Aki? You should search for "given password" in the source. Hint:

Re: Dovecot mail-crypt webmail can't read encrypted messages

2022-10-09 Thread Bernardo Reino
On Sun, 9 Oct 2022, Serveria Support wrote: So this means passwords cannot be masked/hidden in the logs? You realize that it actually defeats the whole idea of encrypted storage? It's useless. I can think of lots of scenarios: malicious system administrator reading users mails and

Re: Force TCP socket disconnect on imap login failure?

2022-05-26 Thread Bernardo Reino
On Thu, 26 May 2022, Hippo Man wrote: [...] I also read your other message where you referred to a stackexchange conversation about killing existing connections. That conversation confirms what I have observed in my own environment: that iptables offers no way to terminate an already

Re: doveadm pw usage

2022-04-24 Thread Bernardo Reino
On Sun, 24 Apr 2022, ミユナ (alice) wrote: Hello when i want to assign a password to a user, I need to write the plain passwd to a text file then do: # doveadm pw -p input.txt {CRAM-MD5}77180880... it's not that convenient to write to a file first. does it support the format below? doveadm

Re: Unable to connect from macOS mail client

2022-02-19 Thread Bernardo Reino
On Sat, 19 Feb 2022, necktwi wrote: After adding “<“ before ssl_ca file path, macOS mail client complained no more. Why do we need “<“ before file paths? — Necktwi Because the manual says so? :) "The < is mandatory. It indicates that the variable should contain contents of the file, instead

Re: Backup procedures

2022-02-13 Thread Bernardo Reino
On Sat, 12 Feb 2022, Stephane Magnier wrote: I've just tried doveadm backup /var/spool2/mail/user1 /home/backup/ doveadm(user1): *Error: Index is read-only*, can't write-lock /var/spool2/mail/user1/dovecot.list.index.log doveadm(user1): Fatal: execvp(/var/spool2/mail/user1) failed:

Re: Backup procedures

2022-02-12 Thread Bernardo Reino
On Fri, 11 Feb 2022, Stephane Magnier wrote: OK , so I can see that there is this doveadm backup.. I don't use any MailDir on each account.. but all the emails are stored into the folder /var/www/mail  ( user 1 , user2, etc... ) in that case, a very basic backup would be  : *doveadm backup

Re: LMTP error on trying to find passwd-file for Postfix recipient validation

2022-01-28 Thread Bernardo Reino
On Fri, 28 Jan 2022, Narcis Garcia wrote: Hello everyone, I have following configurations (and more) at /etc/dovecot/local.conf in a "/VirtualUserFlatFilesPostfix/" setup : [partial file content begins] [snip] When incoming mail goes to a mailbox that does not exist, an error is logged

Re: Non-user logins?

2022-01-09 Thread Bernardo Reino
On Fri, 7 Jan 2022, Ken Wright wrote: [...] I'll post about the second issue later; right now I wonder why I'm getting so many non-users trying to log in. Am I the subject of concerted hacking attacks, or is there something else going on? Some of the attempted logins are more-or-less random

Re: Dovecot v2.3.17 released

2021-11-04 Thread Bernardo Reino
On Thu, 4 Nov 2021, Rupert Gallagher wrote: Please convert all source code to ASCII. If it fails to compile, then it may have a trojan hiding in Unicode clothing. Did you check yourself? The only source code files which contain non-7-bit-ASCII characters are 1.

Re: v2.3.17 - dsync says invalid option -- E

2021-10-31 Thread Bernardo Reino
On Sun, 31 Oct 2021, Bernardo Reino wrote: On Fri, 29 Oct 2021, Daniel J. Luke wrote: Hello, I've got some scripts that archive off mail that stopped working with 2.3.17. Specifically this worksin 2.3.16: sudo -n /usr/local/bin/dsync -u dluke -m Sent -o mail_location=mbox:~/tmp/ mirror

Re: v2.3.17 - dsync says invalid option -- E

2021-10-31 Thread Bernardo Reino
On Fri, 29 Oct 2021, Daniel J. Luke wrote: Hello, I've got some scripts that archive off mail that stopped working with 2.3.17. Specifically this worksin 2.3.16: sudo -n /usr/local/bin/dsync -u dluke -m Sent -o mail_location=mbox:~/tmp/ mirror maildir:~/Maildir/ but fails on 2.3.17 with

Re: Design Check

2021-10-28 Thread Bernardo Reino
On Wed, 27 Oct 2021, Felix Ingram wrote: [...] People would be able to send email to addresses that match the following format: us...@foobar.mydomain.com us...@foobar.mydomain.com us...@barbaz.mydomain.com us...@barbaz.mydomain.com [...] I will be creating a web interface for users to

Re: Piping to doveadm pw

2021-06-16 Thread Bernardo Reino
On Wed, 16 Jun 2021, Kevin N. wrote: Thanks. Reading the manual was the first thing I did before posting to the list. I'm not sure if this is relevant for the question, but I forgot to mention that the user enters it's password through a 'dialog --passwordbox'. I guess my question is: it

Re: sieve filter bevor.spam, arnt take effect

2021-04-13 Thread Bernardo Reino
On Mon, 12 Apr 2021, mau...@gmx.ch wrote: Hi again, Your dovecot.conf neither contains the sieve settings nor includes the conf.d/90-sieve.conf file, which means that you only get whatever default config dovecot includes. Good luck.. Now i put everyting that I "need" for forward spam to

Re: AW: sieve filter bevor.spam, arnt take effect

2021-04-12 Thread Bernardo Reino
} } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { mode = 0600 user = postfix group = postfix } } ssl = required ssl_key = Im Auftrag von Bernardo Reino Gesendet: Montag, 12. April 2021 16:01 An: Dovecot Mailing List Betreff: Re: sieve filter bevor.spam, arnt take

Re: sieve filter bevor.spam, arnt take effect

2021-04-12 Thread Bernardo Reino
Hello, (Excuse me for top-posting, but the message below is too messy) Your sieve config according to "dovecot -n" does not match what you have in 90-sieve.conf. Have you deleted the line "!include conf.d/*.conf" in doveconf.conf? Please double check that, as your config may not be what

Re: Dovecot Mail Server - Cloud Compatibility

2021-01-28 Thread Bernardo Reino
On Thu, 28 Jan 2021, Michael Peddemors wrote: Given the reputation of the Azure IP space, be hesitant to start operating an email server there, UNLESS you can get MS to give you SWIP or 'rwhois' for your IP space. As long as it's only dovecot (IMAP) and not anything doing SMTP, there should

Re: At a loss with antispan and imap_sieve

2020-09-21 Thread Bernardo Reino
On Mon, 21 Sep 2020, Aki Tuomi wrote: On 21/09/2020 11:11 Bernardo Reino wrote: [...] You may want to check your sieve_pipe_bin_dir setting in dovecot.conf. AFAIK the program/script you call via "pipe :copy ..." must be located in the directory defined by sieve_pipe_bin_dir.

Re: At a loss with antispan and imap_sieve

2020-09-21 Thread Bernardo Reino
On Mon, 21 Sep 2020, Ferenc wrote: Thanks for your quick reply! I tried /tmp/debug.log, world-writeable, but no dice. https://doc.dovecot.org/configuration_manual/howto/antispam_with_sieve I followed the setup here. I think it works up until the external script is called (pipe :copy

Re: I need some help with my Dovecot and Postfix configs - I'm unable to log in on my mail server

2020-07-19 Thread Bernardo Reino
On Sun, 19 Jul 2020, Nils wrote: This is what my server logs (mail.info, mail.warn) tell me: root@bgrsld-mail0:~# tail /var/log/mail.info Jul 17 18:22:08 bgrsld-mail0 postfix/submission/smtpd[8472]: improper command pipelining after EHLO from unknown[192.168.2.110]: QUIT\r\n Jul 17 18:22:08

Re: Stuck here - help please

2020-07-17 Thread Bernardo Reino
On Fri, 17 Jul 2020, Gerald Galster wrote: You could try https://serverfault.com/questions/939418/how-do-i-configure-doveadm-a-with-passdb passdb { args = scheme=sha512-crypt /etc/mail/passwd driver = passwd-file } userdb { default_fields = uid=vmail gid=vmail home=/var/vmail/%d/%n

Re: Apple mail works but thunderbird unable to connect

2020-06-22 Thread Bernardo Reino
e resolved. And nobody cares :( If you use postfix a "workaround" is to temporarily disable postscreen, which IIRC is the one (rightly) complaining about the improper pipelining. Cheers, Bernardo Reino

Re: Doveadm Backup issues

2020-06-07 Thread Bernardo Reino
On Sat, 6 Jun 2020, @lbutlr wrote: On 05 Jun 2020, at 17:09, Bernardo Reino wrote: USERS=$(cat /etc/dovecot/virtual_passwd | cut -d: -f1) Is that a standard file? It's not one I have. No, of course not! :) That's just my userdb/passdb (passwd-file). I would use (not that I have

Re: Doveadm Backup issues

2020-06-05 Thread Bernardo Reino
On Fri, 5 Jun 2020, Francis Augusto Medeiros-Logeay wrote: Another related question: if backing up on another location on the same computer, using -A doesn't seem to recreate the structure of the original Maildir (for example, /var/mail/%d%n). Is there a way to do that? If I understand

Re: Question about noreplicate flag

2020-02-17 Thread Bernardo Reino
On Mon, 17 Feb 2020, Aki Tuomi wrote: I wonder if we are doing the noreplicate too late. Can you try adding one of the non-overlapping users to the other site with noreplicate=y and see if helps? Well that did it indeed! :) I created the rei...@bbmk.org at the other server (just the line in

Re: Question about noreplicate flag

2020-02-17 Thread Bernardo Reino
On Mon, 17 Feb 2020, Bernardo Reino wrote: On Mon, 17 Feb 2020, Aki Tuomi wrote: On 17.2.2020 12.48, Bernardo Reino wrote: Dear all, I've just setup replication between two servers. The e-mail accounts on both servers intersect but are not the same. In dovecot.conf (both are identical

Re: Question about noreplicate flag

2020-02-17 Thread Bernardo Reino
On Mon, 17 Feb 2020, Aki Tuomi wrote: On 17.2.2020 12.48, Bernardo Reino wrote: Dear all, I've just setup replication between two servers. The e-mail accounts on both servers intersect but are not the same. In dovecot.conf (both are identical except one user /var/mail and the other uses /srv

Question about noreplicate flag

2020-02-17 Thread Bernardo Reino
Dear all, I've just setup replication between two servers. The e-mail accounts on both servers intersect but are not the same. In dovecot.conf (both are identical except one user /var/mail and the other uses /srv/vmail) I have: --<<-- userdb { driver = passwd-file args =