Re: Sieve script not working
Is this a shared mailbox? Have you actually compiled the script or just put the plain text there? Did you install the file by hand or use something like timsieved? You haven’t really given us much to go on… Merlin -- Merlin Hartley Computer Officer MRC Mitochondrial Biology Unit University of Cambridge Cambridge, CB2 0XY United Kingdom > On 1 Mar 2019, at 09:02, Andrea Venturoli wrote: > > On 2/6/19 6:43 PM, Bron Gondwana wrote: > >> Yeah, it's just called test.c in the sieve directory. Here's our buildscript >> code: >> ... > > I'm giving up on this: I cannot get to build this test binary; besides, I'm > *sure* the script is correct, since it works for other 2 mailboxes. > > Thanks for your help anyway. > > bye > av. > > Cyrus Home Page: http://www.cyrusimap.org/ > List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ > To Unsubscribe: > https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus Cyrus Home Page: http://www.cyrusimap.org/ List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ To Unsubscribe: https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
Re: Cyrus imap and identity theft
fail2ban can do anything you want - including what you describe - you just have tell it what to look for in the logs! -- Merlin Hartley Computer Officer MRC Mitochondrial Biology Unit University of Cambridge Cambridge, CB2 0XY United Kingdom > On 26 Feb 2019, at 14:20, Stephane Branchoux > wrote: > > Hello, > > Thanks for the link to ipset-balcklist, i will try it. > > fail2ban is not interesting for me because with phishing, connexions are > succeded ! > > I would like to detect and block succeed connections when a user connects > from multiple > > countries the same day. > > Thanks > > Le 26/02/2019 à 12:00, Neil Price a écrit : >> >> On 22/02/2019 08:41 PM, Stéphane Branchoux wrote: >>> >>> Each week , few users respond to phishing mails. >>> I use rules on firewalls, DNS filters, training program for users , anti >>> spam products , anti virus …. >>> >>> I am looking for a way or tools to reduce identity theft on my Cyrus imap >>> server. >>> For example , scripts to geo localise ip requests , detect and reject bad >>> connexions ? >>> Is it possible to authorize few devices for a user and reject other devices >>> ? >>> >>> Which tools do you use on your Cyrus imap servers to protect them ? >>> >>> >> >> fail2ban and fail2ban-repeater >> https://stuffphilwrites.com/2013/03/permanently-ban-repeat-offenders-fail2ban/ >> ipset-blacklist https://github.com/trick77/ipset-blacklist (great for >> banning whole countries) >> password policies >> >> Plus the usual: SPF, clam, spamassassin, greylisting, etc >> Spam check outgoing mail too. >> >> Cyrus Home Page: http://www.cyrusimap.org/ >> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ >> To Unsubscribe: >> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus > > -- > Stephane BRANCHOUX > Centre de Ressources Informatiques de l'Université de Perpignan. > Systèmes/Réseaux - RSSI > mailto:stephane.branch...@univ-perp.fr > 04 68 66 21 24 / 07 60 73 38 42 > > > > Cyrus Home Page: http://www.cyrusimap.org/ > List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ > To Unsubscribe: > https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus Cyrus Home Page: http://www.cyrusimap.org/ List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ To Unsubscribe: https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
Re: Quotas
When you say ‘delete’ do you mean a client software that may actually be moving the messages to a Trash folder? This could have the effect you mention … M -- Merlin Hartley Computer Officer MRC Mitochondrial Biology Unit University of Cambridge Cambridge, CB2 0XY United Kingdom > On 7 Nov 2018, at 13:52, James B. Byrne via Info-cyrus > wrote: > > Cyrus-IMAPD-3.0.7 on FreeBSD-11.2p4 > > We have users who, having deleted email, evidently do not recover the > quota allocated to those messages. We do not believe that we have > enabled delayed deletion. All the user mailboxes previous had been > upgraded using: > > sudo -u cyrus /usr/local/cyrus/sbin/reconstruct -f -r -G -V max user > > We have also run reconstruct. None-the-less some users show that they > have exceeded their quota even when most of their email has been > deleted. Why? > > > > > -- > *** e-Mail is NOT a SECURE channel *** >Do NOT transmit sensitive data via e-Mail > Do NOT open attachments nor follow links sent by e-Mail > > James B. Byrnemailto:byrn...@harte-lyne.ca > Harte & Lyne Limited http://www.harte-lyne.ca > 9 Brockley Drive vox: +1 905 561 1241 > Hamilton, Ontario fax: +1 905 561 0757 > Canada L8E 3C3 > > > Cyrus Home Page: http://www.cyrusimap.org/ > List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ > To Unsubscribe: > https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus Cyrus Home Page: http://www.cyrusimap.org/ List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ To Unsubscribe: https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
Re: open port on firewall for sieve to enable vacation auto-response?
Seconded. We also use roundcube+managesieve with the vacation pane enabled. -- Merlin Hartley > On 14 Dec 2017, at 09:31, Vladislav Kurz wrote: > >> On 12/13/17 23:21, Patrick Goetz wrote: >> I'm trying to set up a vacation auto-response utility for my users, and >> it appears that the path of least resistance is to use the sieverules >> plugin for roundcube (since roundcube is already installed as their >> webmail client alternative to Thunderbird). >> >> In reading through some online hints it appears that I need to open up >> port 4190 on the firewall in order for sieve to work, is this correct? > > Hello Patrick, > > you do not need to open the sieve port to the whole world. Only allow > the connection from the webmail server - which may (or may not) be > localhost. > > I have tried various sieve plugins for mail clients (thunderbird, > kmail), and I could not find anything comparable to managesieve plugin > for roundcube. Usually it was just a text editor for uploading hand > written sive scripts... So most users will be using webmail to configure > sieve. > >> Also, is there anything special I need to do with my cyrus configuration >> to allow for roundcube to notify imapd about sieve rules being >> activated/deactivated? > > Just uncomment the sieve line in cyrus.conf > >> BTW, if anyone has a better solution for this, let me know. The >> criteria are the users need to be able to activate and deactivate the >> vacation auto-response themselves, so writing a sieve script is not an >> option. > > I think roundcube+managesieve plugin is the best. I think that there is > even an option in managesieve to enable a simplified "vacation only" > interface. (But I'm not sure in which version it is). > > > -- > Best Regards > Vladislav Kurz > > > Cyrus Home Page: http://www.cyrusimap.org/ > List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ > To Unsubscribe: > https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus Cyrus Home Page: http://www.cyrusimap.org/ List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ To Unsubscribe: https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
Re: strange behaviour authenticating to IMAP server with squirrelmail
Why would you want to, you are already using TLS so what do you expect to gain? plaintext+TLS md5 suffers from multiple inadequacies - so it seems pretty pointless to me. M -- Merlin Hartley Computer Officer MRC Mitochondrial Biology Unit Cambridge, CB2 0XY United Kingdom > On 8 Oct 2017, at 21:21, Walter H. via Info-cyrus > wrote: > > Hello, > > when setting in squirrelmail > $imap_auth_mech = 'cram-md5'; > or > $imap_auth_mech = 'digest-md5'; > then the following is logged in /etc/maillog > > Oct 8 14:59:41 imap-host imaps[2042]: accepted connection > Oct 8 14:59:41 imap-host imaps[2042]: imapd:Loading DH parameters from file > Oct 8 14:59:41 imap-host imaps[2042]: SSL_accept() incomplete -> wait > Oct 8 14:59:41 imap-host imaps[2042]: SSL_accept() succeeded -> done > Oct 8 14:59:41 imap-host imaps[2042]: starttls: TLSv1 with cipher > DHE-RSA-AES256-SHA (256/256 bits new) no authentication > Oct 8 14:59:42 imap-host imaps[2042]: badlogin: host-running-squirrel > [IPv6-running-squirrel] DIGEST-MD5 [SASL(-13): user not found: no secret in > database] > > but, when setting in squirrelmail > $imap_auth_mech = 'login'; > then the following is logged and it works ... > > Oct 8 18:37:16 imap-host imaps[10530]: accepted connection > Oct 8 18:37:16 imap-host imaps[10530]: imapd:Loading DH parameters from file > Oct 8 18:37:16 imap-host imaps[10530]: SSL_accept() incomplete -> wait > Oct 8 18:37:16 imap-host imaps[10530]: SSL_accept() succeeded -> done > Oct 8 18:37:16 imap-host imaps[10530]: starttls: TLSv1 with cipher > DHE-RSA-AES256-SHA (256/256 bits new) no authentication > Oct 8 18:37:17 imap-host imaps[10530]: login: host-running-squirrel > [IPv6-running-squirrel] walter plaintext+TLS User logged in > > even /etc/imapd.conf is this: > > allowanonymouslogin: no > allowplaintext: no <-- > altnamespace: no > configdirectory: /var/lib/imap > partition-default: /var/spool/imap > admins: cyrus > sievedir: /var/lib/imap/sieve > sendmail: /usr/sbin/sendmail > servername: storage.mail > hashimapspool: true > sasl_pwcheck_method: saslauthd > sasl_mech_list: PLAIN LOGIN CRAM-MD5 DIGEST-MD5 > tls_cert_file: /etc/pki/cyrus-imapd/tls.crt/mail-host.crt > tls_key_file: /etc/pki/cyrus-imapd/tls.key/mail-host.key > tls_ca_file: /etc/pki/cyrus-imapd/tls.crt/server-chain-sslca.crt > quotawarn: 95 > > sasldblistusers2 shows this: > > cyrus@imap-host: userPassword > > why I am unable to use digest-md5 or cram-md5? > or: what do I have to do to use digest-md5? > adding a user with saslpasswd2? > what is the 'appname'? > > Im using Centos 6 and the RPM packages of CentOS > > Thanks, > Walter > > > > Cyrus Home Page: http://www.cyrusimap.org/ > List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ > To Unsubscribe: > https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus Cyrus Home Page: http://www.cyrusimap.org/ List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ To Unsubscribe: https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
Re: 2.4.12 vs 3.0.2 different protocol behaviour
Just a quickie: Are you sure these mailboxes migrated properly? M -- Merlin Hartley Computer Officer MRC Mitochondrial Biology Unit Cambridge, CB2 0XY United Kingdom > On 23 Aug 2017, at 15:55, Gabriele Bulfon wrote: > > I would add that both systems returns the same list of folders with : > > . LIST "" % > > including the "Other Users" : > > * LIST (\HasNoChildren) "/" INBOX > * LIST (\HasChildren) "/" Archive > ... > * LIST (\Noselect \HasChildren) "/" "Other Users" > > but then the java code just tries a "folder.list()" on each of them, to see > for subfolders. > Here the javamail code, before issuing the list command, tries the > "checkExistance" using : > > . LIST "" "Other Users" > > and 3.0.2 returns an empty result. > > Also trying by hand : > > . LIST "Other Users" * > > returns all the subtree on 2.4.12, while it's empty on 3.0.2. > > Any idea? > > Gabriele > > > Sonicle S.r.l. : http://www.sonicle.com <http://www.sonicle.com/> > Music: http://www.gabrielebulfon.com <http://www.gabrielebulfon.com/> > Quantum Mechanics : http://www.cdbaby.com/cd/gabrielebulfon > <http://www.cdbaby.com/cd/gabrielebulfon> > > > From: Gabriele Bulfon > To: info-cyrus@lists.andrew.cmu.edu > Date: August 23, 2017 4:41:36 PM CEST > Subject: 2.4.12 vs 3.0.2 different protocol behaviour > > > Hi, > > I found a problem while scanning the imap tree through our java web app, > behaving differently from a 2.4.12 to a 3.0.2 upgraded. > Looking at the protocol I find these differences: > > ==2.4.12== > . LIST "" "Other Users" > * LIST (\Noselect \HasChildren) "/" "Other Users" > . OK Completed (0.000 secs 192 calls) > > ==3.0.2== > . LIST "" "Other Users" > . OK Completed (0.000 secs) > > So, what happens is that while the java code is checking existence of a > folder in the tree, on 3.0.2 it receives an error. > Systems are same, replicated, but one upgraded to 3.0.2, so imap base and > configuration is the same, but for the 3.0.2 trimmings. > > Is there any setting for compatibility in this case? > > Thanx! > Gabriele > > Sonicle S.r.l. : http://www.sonicle.com <http://www.sonicle.com/> > Music: http://www.gabrielebulfon.com <http://www.gabrielebulfon.com/> > Quantum Mechanics : http://www.cdbaby.com/cd/gabrielebulfon > <http://www.cdbaby.com/cd/gabrielebulfon> > > Cyrus Home Page: http://www.cyrusimap.org/ > List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ > To Unsubscribe: > https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus > > Cyrus Home Page: http://www.cyrusimap.org/ > List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ > To Unsubscribe: > https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus Cyrus Home Page: http://www.cyrusimap.org/ List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ To Unsubscribe: https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
Re: Message remains in spool after expunge
https://www.cyrusimap.org/imap/download/release-notes/2.5/x/2.5.0.html?highlight=expunge_mode#default-change-expunge-mode <https://www.cyrusimap.org/imap/download/release-notes/2.5/x/2.5.0.html?highlight=expunge_mode#default-change-expunge-mode> expuge_mode default has changed… -- Merlin Hartley Computer Officer MRC Mitochondrial Biology Unit Cambridge, CB2 0XY United Kingdom > On 22 Aug 2017, at 13:48, Arnaldo Viegas de Lima > wrote: > > Hi, > > We have just migrated from 2.4.17 to 3.0.3 and we are having a problem with > one of our scripts that perform actions on a SPAM folder for retraining > purposes. > All files placed by the user there are used for retaining. At the end Cyrus > is called to remove the files: we mark all files for deletion and then > expunge the mailbox. We have been using this script since 2007, flawlessly. > > I’ve set Cyrus chatty mode on and I can see the commands being sent to the > server and there is a confirmation log message for the expunge, with the > correct number of files. > Checking the SPAM mailbox with Cyrus (or any IMAP client), show it as empty. > But looking at the mailbox directory in the filesystem, the actual files are > still there. > > Am I missing something on 3.0.3 that may be the cause for this problem? > > Thanks in advance. > > Arnaldo. > > Cyrus Home Page: http://www.cyrusimap.org/ > List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ > To Unsubscribe: > https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus Cyrus Home Page: http://www.cyrusimap.org/ List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ To Unsubscribe: https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
Re: 421 4.3.0 deliver: Trying to unput wrong character
Hi Mikhail This is one of those weird inconsistencies between IMAP and SMTP protocols … as far as I remember, the NUL character restriction only applies to the IMAP protocol … so your MTA (e.g. sendmail) is not breaking the SMTP RFC by transferring them. In my Exim configuration I have some code which strips the NUL characters from externally received messages and prohibits my local users from submitting messages which contain them - you could probably come-up with a similar thing for sendmail. This may be useful: http://info-cyrus.andrew.cmu.narkive.com/Rro4Nn9M/554-message-contains-nul-characters Merlin -- Merlin Hartley Computer Officer MRC Mitochondrial Biology Unit Cambridge, CB2 0XY United Kingdom > On 24 Jul 2017, at 17:14, Mikhail T. wrote: > > On 24.07.2017 10:41, Merlin Hartley wrote: >> NUL characters are not permitted in e-mails … >> https://helpdesk.pscs.co.uk/690163-Data-stream-contained-NUL-character >> <https://helpdesk.pscs.co.uk/690163-Data-stream-contained-NUL-character> >> >> As the RFC for IMAP states: >> https://tools.ietf.org/html/rfc3501#section-9 >> <https://tools.ietf.org/html/rfc3501#section-9> >> (3) The ASCII NUL character, %x00, MUST NOT be used at any time. > But the message did go through sendmail... > > Ken Murchison wrote: >> What is the Content-Transfer-Encoding of the email? Was the message Base64 >> encoded, or is the PNG included as raw binary data? > Raw... Here are the full headers (the first line -- the From_ -- is removed > by sed before feeding the rest into deliver): > From m...@example.com <mailto:m...@example.com> Mon Jul 24 00:53:00 2017 > Received: from narawntapu.narawntapu (localhost [127.0.0.1]) > by narawntapu.narawntapu (8.15.2/8.15.2) with ESMTPS id v6O4r05T003160 > (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 > verify=NO) > for <mailto:mi@narawntapu.narawntapu>; > Mon, 24 Jul 2017 00:53:00 -0400 (EDT) > (envelope-from mi@narawntapu.narawntapu > <mailto:mi@narawntapu.narawntapu>) > Received: (from mi@localhost) > by narawntapu.narawntapu (8.15.2/8.15.2/Submit) id v6O4r0c9003159; > Mon, 24 Jul 2017 00:53:00 -0400 (EDT) > (envelope-from mi) > Date: Mon, 24 Jul 2017 00:53:00 -0400 (EDT) > Message-Id: <201707240453.v6O4r0c9003159@narawntapu.narawntapu> > <mailto:201707240453.v6O4r0c9003159@narawntapu.narawntapu> > From: Cron Daemon <mailto:m...@example.com> > To: mi@narawntapu.narawntapu <mailto:mi@narawntapu.narawntapu> > Mime-Version: 1.0 > Content-Type: image/png; charset=binary > Content-Transfer-Encoding: 8bit > Subject: Cron cat foo.png > Should sendmail have re-encoded with something other than 8bit? I don't like > doing that, because it increases the filesizes to no obvious benefit... > Thanks! > -mi Cyrus Home Page: http://www.cyrusimap.org/ List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ To Unsubscribe: https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
Re: Sieve RFC5490 checks user quota usage
You could do it with your MTA instead - you could write a filter/router/acl in exim for example - these can use arbitrary command output to decide on what to do with a message. M -- Merlin Hartley Computer Officer MRC Mitochondrial Biology Unit Cambridge, CB2 0XY United Kingdom > On 21 Mar 2017, at 15:59, Paolo Cravero wrote: > > > >> There is no mailbox annotation that exposes quota that could be used with >> the mboxmetadata extension (RFC5490) and there is no current Sieve extension >> for checking quota. >> > Thank you Ken. Given the double negative answer I guess that developing such > a feature would require a lot of work, or it is not possible at all. > > > > And for Nic, yes, I mean the "IMAP STORAGE quota". I would like to warn the > user that his quota is about to fill up through an email, triggered on new > mail arrival or login. Why? Because not all clients support reading the quota > over IMAP or handling an alert (think of some smartphone IMAP client or an > (active)sync system). > > Is there a way to achieve the same result somehow, with stock cyrus? > > Paolo > > > >> On 03/17/2017 11:01 AM, Paolo Cravero wrote: >>> Hello. >>> I am trying to figure out if sieve, with RFC5490 support, is able to read >>> user's disk quota (used) and act accordingly. >>> >>> I would like to trigger a mail to "self" if quota is above a given percent. >>> Something like a vacation message (so once a day or so), triggered on >>> arrival AND if quota is above X %. >>> >>> If sieve doesn't support this, is there another way to do it? >>> >>> Thanks and have a nice weekend, >>> Paolo >>> >>> >>> >>> Cyrus Home Page: http://www.cyrusimap.org/ <http://www.cyrusimap.org/> >>> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ >>> <http://lists.andrew.cmu.edu/pipermail/info-cyrus/> >>> To Unsubscribe: >>> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus >>> <https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus> > > Cyrus Home Page: http://www.cyrusimap.org/ > List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ > To Unsubscribe: > https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus Cyrus Home Page: http://www.cyrusimap.org/ List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ To Unsubscribe: https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
Re: Could not connect to socket /var/imap/socket/lmtp: Connection refused by localhost
Sounds like you could consider partitioning (if you aren’t already) - then you can scale-out the disk iops without needing fancy hardware/software: https://www.cyrusimap.org/docs/cyrus-imapd/2.4.7/overview.php#partitions <https://www.cyrusimap.org/docs/cyrus-imapd/2.4.7/overview.php#partitions> Hope this is useful! M -- Merlin Hartley IT Systems Engineer MRC Mitochondrial Biology Unit Cambridge, CB2 0XY United Kingdom > On 17 Jan 2017, at 16:43, Eugene M. Zheganin via Info-cyrus > wrote: > > Hi. > > On 17.01.2017 19:09, Andy Dorman via Info-cyrus wrote: >> >> I am not an expert by any means and I hope someone corrects me if I make a >> bad suggestion...but I have two questions: >> >> 1. It sounds like you have a heavily used server, so why do you have Cyrus >> listening on both "localhost:lmtp" AND a unix socket "/var/imap/socket/lmtp"? >> >> From the log entry it looks like your MTA uses a unix socket. Unless you >> have something else (mail clients or other MTAs running on your Cyrus >> server?) that need to communicate via the localhost:lmtp port, you could >> comment out the unneeded lmtp service line and save those resources. > Well, on one hand you are right, seems like noone uses network lmtp > connections, but on the other hand how can the idle processes save resources > ? They only can save the memory, which doesn't seem to be the problem. > However, I will try you advice. >> >> 2. You say "increasing this value can make the situation even worse". Which >> value? There are 5 values on those two lines that you could increase. And >> by "even worse" do you mean even more refused connections? > The maxchild number. >> >> While I am not a Cyrus guru, I have seen my share of overloaded mail servers >> and if you are running into a disk IO limit, adding more processes fighting >> over a limited resource is very likely to make things worse. So you should >> also confirm a hardware limitation is not at play here. > Yup, this is exaclty what happens when increasing the maxchild number: more > messages start to bounce. And yes, the disks iops seems to be the limiting > factor. So, are there any other approaches besides scaling out the disks iops > ? > > Thanks. > Eugene. > > > > Cyrus Home Page: http://www.cyrusimap.org/ > List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ > To Unsubscribe: > https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus Cyrus Home Page: http://www.cyrusimap.org/ List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ To Unsubscribe: https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
Re: CentOS 6 repo dissappeared?
Anyone? Am I the only person using this repo or something? This documentation needs updating if this is no longer supported! https://cyrusimap.org/imap/installation/obs.html#imap-installation-obs <https://cyrusimap.org/imap/installation/obs.html#imap-installation-obs> Perhaps I need to update my server to CentOS 7 - but I don’t really like forcing downtime on my users, so would need some planning :) Thanks all M -- Merlin Hartley IT Systems Engineer MRC Mitochondrial Biology Unit Cambridge, CB2 0XY United Kingdom > On 28 Nov 2016, at 11:39, Merlin Hartley via Info-cyrus > wrote: > > Greetings > > I’ve been successfully using the Kolab CentOS 6 repo for about a year now … > but suddenly since the latest Kolab build the old repos seem to have > disappeared… > As described here: > https://cyrusimap.org/imap/installation/obs.html#imap-installation-obs > <https://cyrusimap.org/imap/installation/obs.html#imap-installation-obs> > > Does anyone know of a working Yum repository for cyrus-imapd under CentOS 6? > > This folder now seems to be empty: > https://obs.kolabsys.com/repositories/cyrus-imapd:/ > <https://obs.kolabsys.com/repositories/cyrus-imapd:/> > > > Thanks > > > Merlin > > > > -- > Merlin Hartley > IT Systems Engineer > MRC Mitochondrial Biology Unit > Cambridge, CB2 0XY > United Kingdom > > > Cyrus Home Page: http://www.cyrusimap.org/ > List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ > To Unsubscribe: > https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus Cyrus Home Page: http://www.cyrusimap.org/ List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ To Unsubscribe: https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
CentOS 6 repo dissappeared?
Greetings I’ve been successfully using the Kolab CentOS 6 repo for about a year now … but suddenly since the latest Kolab build the old repos seem to have disappeared… As described here: https://cyrusimap.org/imap/installation/obs.html#imap-installation-obs Does anyone know of a working Yum repository for cyrus-imapd under CentOS 6? This folder now seems to be empty: https://obs.kolabsys.com/repositories/cyrus-imapd:/ Thanks Merlin -- Merlin Hartley IT Systems Engineer MRC Mitochondrial Biology Unit Cambridge, CB2 0XY United Kingdom Cyrus Home Page: http://www.cyrusimap.org/ List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ To Unsubscribe: https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
Re: sieve runtime error Fileinto: Permission denied
I wonder if this is an 'altnamespace' issue - are you specifying INBOX/folder?
--
Merlin Hartley
> On 23 May 2016, at 12:52, Sunny via Info-cyrus
> wrote:
>
> Hi,
>
> I'm seeing the following error logs with some users sieve filtering
> May 23 11:41:31 imap02 lmtpunix[26005]: sieve runtime error for test2 id
> <5742de5a.3040...@org.ac.uk>: Fileinto: Permission denied
>
> Essentially emails are not being put into the specific folders.
>
> Their cyrus:mail permissions are in place
>
> [root@imap02 test2]# ls -ls /var/spool/imap/t/user/test2/
> 4 -rw--- 1 cyrus mail 1663 May 23 10:36 747.
> 4 -rw--- 1 cyrus mail 1904 May 23 10:53 748.
> 4 -rw--- 1 cyrus mail 1661 May 23 10:54 749.
> 4 -rw--- 1 cyrus mail 1666 May 23 10:56 750.
> 4 -rw--- 2 cyrus mail 1613 May 23 11:00 751.
> 4 -rw--- 1 cyrus mail 1541 May 23 11:12 752.
> 4 -rw--- 1 cyrus mail 1541 May 23 11:20 753.
> 4 -rw--- 1 cyrus mail 1537 May 23 11:22 754.
> 4 -rw--- 1 cyrus mail 1537 May 23 11:23 755.
> 4 -rw--- 1 cyrus mail 1539 May 23 11:40 756.
> 4 -rw--- 1 cyrus mail 1541 May 23 11:41 757.
> 20 -rw--- 1 cyrus mail 16424 May 23 11:41 cyrus.cache
> 4 -rw--- 1 cyrus mail 184 May 23 11:41 cyrus.header
> 4 -rw--- 1 cyrus mail 1768 May 23 11:41 cyrus.index
> 4 drwx-- 2 cyrus mail 4096 May 23 11:41 Drafts
> 4 drwx-- 2 cyrus mail 4096 May 23 11:41 for-sale
> 4 drwx-- 2 cyrus mail 4096 May 23 11:41 hello
> 4 drwx-- 2 cyrus mail 4096 May 23 12:11 Sent
> 12 drwx-- 2 cyrus mail 12288 May 23 11:41 Trash
>
>
> cyrus permissions - (I changed user cyrus permission to full to see if it
> worked - but it didn't)
>
> localhost.localdomain> lam user.test2*
> user.test2:
> test2 lrswipkxtea
> cyrus lrswipkxtecda
> user.test2.Drafts:
> test2 lrswipkxtea
> cyrus lrswipkxtecda
> user.test2.Sent:
> test2 lrswipkxtea
> cyrus lrswipkxtecda
> user.test2.Trash:
> test2 lrswipkxtea
> cyrus lrswipkxtecda
> user.test2.for-sale:
> test2 lrswipkxtea
> cyrus lrswipkxtecda
> user.test2.hello:
> test2 lrswipkxtea
> cyrus lrswipkxtecda
> user.test2.ssn:
> test2 lrswipkxtea
> cyrus lrswipkxtecda
>
> cyrus.conf
> SERVICES {
> # add or remove based on preferences
> imapcmd="imapd" listen="imap" prefork=5
> imapscmd="imapd -s" listen="imaps" prefork=1
> pop3cmd="pop3d" listen="pop3" prefork=3
> pop3scmd="pop3d -s" listen="pop3s" prefork=1
> sievecmd="timsieved" listen="sieve" prefork=0
> oldsieve cmd="timsieved" listen="2000" prefork=0
>
>
> Other sieve functions work like "reject" "vacation" but not fileinto.
>
> Are there any other suggestions?
>
> Regards
>
> Cyrus Home Page: http://www.cyrusimap.org/
> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
> To Unsubscribe:
> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
Re: Sieve for shared mailboxes
Thanks Nic that looks useful
Unfortunately ‘info' doesn’t seem to function on our installation:
localhost> lm shared/mbujobs
shared/mbujobs (\HasChildren)
localhost> lam shared/mbujobs
jt lrswipkxtecda
merlin lrs
anonymous p
ij lrswipkxtecda
localhost> info shared/mbujobs
localhost>
localhost> exit
Also doesn’t seem able to set or retrieve info from the server:
localhost> setinfo comment MBU mail server
localhost> info
localhost>
For clarity I was using the local ‘cyrus’ user who is listed as an admin in
imapd.conf - I have also tried with ‘merlin’ (me) - no dice...
[root@mercury ~]# cyradm -U merlin localhost
verify error:num=19:self signed certificate in certificate chain
IMAP Password:
localhost> lam user/merlin
merlin lrswipcda
localhost> lam shared/mbujobs
jt lrswipkxtecda
merlin lrswipkxtecda
anonymous p
ij lrswipkxtecda
cyrus lrswipkxtecda
localhost> mboxcfg shared/mbujobs sieve mbujobs
localhost> info shared/mbujobs
localhost> info
localhost>
--
Merlin Hartley
IT Systems Engineer
MRC Mitochondrial Biology Unit
Cambridge, CB2 0XY
United Kingdom
> On 6 Apr 2016, at 12:41, Nic Bernstein <mailto:n...@onlight.com>> wrote:
>
> On 03/18/2016 05:48 AM, Merlin Hartley via Info-cyrus wrote:
>> ...
>> Of course, over-time more complexity is always required and I have recently
>> implemented a few shared mailboxes (rather than just sharing user mailboxes).
>> Inevitably, the users are now asking for an auto-reply to be configured for
>> some of these shared mailboxes…
>>
>> We are already using sieve scripts (managed with Roundcubemail talking
>> through the firewall to timsieved) so it seems natural to use this
>> technology here too...
>>
>> I have followed the instructions on this page:
>> https://cyrusimap.org/imap/admin/sieve.html?highlight=sieve#managing-sieve-scripts
>>
>> <https://cyrusimap.org/imap/admin/sieve.html?highlight=sieve#managing-sieve-scripts>
>>
>> But the last step doesn’t seem to do anything…
>>
>> So I have a few related questions:
>>
>> 1) how can I query a mailbox to read the flags set by mboxconfig?
>
> Use the 'info' command in cyradm, like so:
> root@mail:~# /usr/lib/cyrus/bin/cyradm -U cyrus localhost
> Password:
>
> localhost> info tech.support
> {tech.support}:
> duplicatedeliver: false
> lastpop:
> lastupdate: 6-Apr-2016 04:01:01 -0500
> partition: default
> pop3newuidl: true
> sharedseen: false
> sieve: global
> size: 801640500
>
> localhost> quit
> Note the "sieve: global" line.
>
>> 2) has anyone got sieve working with shared mailboxes?
>
> Yes, happily and consistently, currently with 2.4.10, and up, on various
> installations.
>
>> 3) is it possible to invoke a sieveshell in the context of a shared mailbox?
>
> "...context of a shared mailbox..." doesn't really mean anything here. You
> must do it as a user who has access to the shared mailbox, as the page on the
> website explains.
>
>> I seem to have successfully created the global scripts (a ‘global’ folder
>> has appeared in the sievedir) - just can’t seem to attach it to a shared
>> mailbox.
>
> Take a look at the output of the 'info' command in cyradm, and if it doesn't
> make sense, please post again.
>
> In my experience, the most common cause of problems with sieve and shared
> mailboxes is bad scripts.
>
> Cheers,
> -nic
> --
> Nic Bernstein n...@onlight.com
> <mailto:n...@onlight.com>
> Onlight Inc. www.onlight.com
> <http://www.onlight.com/>
> 6525 W Bluemound Rd., Ste 24v. 414.272.4477
> Milwaukee, Wisconsin 53213-4073f. 414.290.0335
Cyrus Home Page: http://www.cyrusimap.org/
List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/
To Unsubscribe:
https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
Re: Sieve for shared mailboxes
Sorry I wasn’t clear: we are using an alias with +plus addressing and lmtp to deliver into the shared mailbox I have the shared mailbox working just fine… it is only the sieve on shared mailboxes that is failing... aliases file: mbujobs: +shared/mbujobs exim router: imap_shared_accept: driver = accept local_parts = ^\\+[^/]+/.+ transport = local_delivery_cyrus cannot_route_message = Unknown user exit transport: local_delivery_cyrus: driver = lmtp socket = /var/lib/imap/socket/lmtp batch_max = 20 user = cyrus group = mail transport_filter = /usr/bin/tr -d \\000 delivery_date_add envelope_to_add return_path_add -- Merlin Hartley IT Systems Engineer MRC Mitochondrial Biology Unit Cambridge, CB2 0XY United Kingdom > On 18 Mar 2016, at 11:29, Alvin Starr via Info-cyrus > wrote: > > Sieve is run as part of the mail delivery into the mailbox. > That would either be deliver or the lmtp interface. > > If your users are dragging and dropping the messages into the shared > mailboxes then I don't believe that you can have sieve run on the mbox to > mbox transfer. > > > On 03/18/2016 06:48 AM, Merlin Hartley via Info-cyrus wrote: >> Greetings >> >> I have been managing our mail domain on a cyrus-imap (&exim) server since >> 2005 and it has always been great for our ~150 users. >> >> Of course, over-time more complexity is always required and I have recently >> implemented a few shared mailboxes (rather than just sharing user mailboxes). >> Inevitably, the users are now asking for an auto-reply to be configured for >> some of these shared mailboxes… >> >> We are already using sieve scripts (managed with Roundcubemail talking >> through the firewall to timsieved) so it seems natural to use this >> technology here too... >> >> I have followed the instructions on this page: >> https://cyrusimap.org/imap/admin/sieve.html?highlight=sieve#managing-sieve-scripts >> >> <https://cyrusimap.org/imap/admin/sieve.html?highlight=sieve#managing-sieve-scripts> >> >> But the last step doesn’t seem to do anything… >> >> So I have a few related questions: >> >> 1) how can I query a mailbox to read the flags set by mboxconfig? >> 2) has anyone got sieve working with shared mailboxes? >> 3) is it possible to invoke a sieveshell in the context of a shared mailbox? >> >> I seem to have successfully created the global scripts (a ‘global’ folder >> has appeared in the sievedir) - just can’t seem to attach it to a shared >> mailbox. >> >> Many thanks! >> >> >> Merlin >> >> >> P.S. Here is some relevant server info: >> >> [root@mercury merlin]# sieveshell -u cyrus -a cyrus localhost >> connecting to localhost >> Please enter your password: >> > list >> mbu_jobs <- active script >> >> [root@mercury ~]# ls /var/lib/imap/sieve/global/ >> defaultbc mbu_jobs.bc mu_jobs.script >> >> [root@mercury ~]# cyrus-admin >> verify error:num=19:self signed certificate in certificate chain >> localhost> mboxconfig shared/mbujobs sieve mbu_jobs >> localhost> >> >> [root@mercury ~]# yum list cyrus-imapd >> Installed Packages >> cyrus-imapd.x86_64 2.5.0-4.9 >> @cyrus-imapd_2.5.x >> (which is a Kolab repository I installed onto my CentOS 6 server) >> >> [root@mercury ~]# uname -a >> Linux mercury.mrc-mbu.cam.ac.uk <http://mercury.mrc-mbu.cam.ac.uk/> >> 2.6.32-573.18.1.el6.x86_64 #1 SMP Tue Feb 9 22:46:17 UTC 2016 x86_64 x86_64 >> x86_64 GNU/Linux >> >> -- >> Merlin Hartley >> IT Systems Engineer >> MRC Mitochondrial Biology Unit >> Cambridge, CB2 0XY >> United Kingdom >> >> >> >> >> Cyrus Home Page: http://www.cyrusimap.org/ <http://www.cyrusimap.org/> >> List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ >> <http://lists.andrew.cmu.edu/pipermail/info-cyrus/> >> To Unsubscribe: >> https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus >> <https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus> > -- > Alvin Starr || voice: (905)513-7688 > Netvel Inc. || Cell: (416)806-0133 > al...@netvel.net <mailto:al...@netvel.net> || > > Cyrus Home Page: http://www.cyrusimap.org/ > List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ > To Unsubscribe: > https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus Cyrus Home Page: http://www.cyrusimap.org/ List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ To Unsubscribe: https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
Sieve for shared mailboxes
Greetings I have been managing our mail domain on a cyrus-imap (&exim) server since 2005 and it has always been great for our ~150 users. Of course, over-time more complexity is always required and I have recently implemented a few shared mailboxes (rather than just sharing user mailboxes). Inevitably, the users are now asking for an auto-reply to be configured for some of these shared mailboxes… We are already using sieve scripts (managed with Roundcubemail talking through the firewall to timsieved) so it seems natural to use this technology here too... I have followed the instructions on this page: https://cyrusimap.org/imap/admin/sieve.html?highlight=sieve#managing-sieve-scripts But the last step doesn’t seem to do anything… So I have a few related questions: 1) how can I query a mailbox to read the flags set by mboxconfig? 2) has anyone got sieve working with shared mailboxes? 3) is it possible to invoke a sieveshell in the context of a shared mailbox? I seem to have successfully created the global scripts (a ‘global’ folder has appeared in the sievedir) - just can’t seem to attach it to a shared mailbox. Many thanks! Merlin P.S. Here is some relevant server info: [root@mercury merlin]# sieveshell -u cyrus -a cyrus localhost connecting to localhost Please enter your password: > list mbu_jobs <- active script [root@mercury ~]# ls /var/lib/imap/sieve/global/ defaultbc mbu_jobs.bc mu_jobs.script [root@mercury ~]# cyrus-admin verify error:num=19:self signed certificate in certificate chain localhost> mboxconfig shared/mbujobs sieve mbu_jobs localhost> [root@mercury ~]# yum list cyrus-imapd Installed Packages cyrus-imapd.x86_64 2.5.0-4.9 @cyrus-imapd_2.5.x (which is a Kolab repository I installed onto my CentOS 6 server) [root@mercury ~]# uname -a Linux mercury.mrc-mbu.cam.ac.uk 2.6.32-573.18.1.el6.x86_64 #1 SMP Tue Feb 9 22:46:17 UTC 2016 x86_64 x86_64 x86_64 GNU/Linux -- Merlin Hartley IT Systems Engineer MRC Mitochondrial Biology Unit Cambridge, CB2 0XY United Kingdom Cyrus Home Page: http://www.cyrusimap.org/ List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ To Unsubscribe: https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
