Re: Unable to disable TLSv1.3 or fallback to TLSv1.2 when 1 cipher is disabled

2020-05-09 Thread Steve Egbert
I have an operational need to disable TLSv1.3 due to inadequate support to exclude certain ciphers. There is no need to disable TLSv1.3 and attempts to do so will be flagged as “downgrade attacks”. Let us ignore TLSv1.2 as a downgrade option. And focus on TLSv1.3 for its entirety of this th

Re: Unable to disable TLSv1.3 or fallback to TLSv1.2 when 1 cipher is disabled

2020-05-08 Thread Steve Egbert
I cannot even reorder the server-side TLSv1.3 such that CHACHA20 has first-order before AES. https://github.com/openssl/openssl/issues/7562

Re: Unable to disable TLSv1.3 or fallback to TLSv1.2 when 1 cipher is disabled

2020-05-08 Thread Steve Egbert
Also, more testimony to the same problem (by others) is posted over at ServerFault (StackOverflow): https://serverfault.com/questions/975871/forcing-dovecot-2-3-4-1-to-use-tlsv1-2 On 5/8/20 11:50 AM, Steve Egbert wrote: I have an operational need to disable TLSv1.3 due to inadequate support

Unable to disable TLSv1.3 or fallback to TLSv1.2 when 1 cipher is disabled

2020-05-08 Thread Steve Egbert
I have an operational need to disable TLSv1.3 due to inadequate support to exclude certain ciphers. Much to my dismay, the `ssl_protocols` had been renamed and re-functionalized into `ssl_min_protocol`. Now, there is no way to exclude a specific group of one or more TLS versions. For a new

Unable to disable TLSv1.3 or fallback to TLSv1.2 when 1 cipher is disabled

2020-05-08 Thread Steve Egbert
I have an operational need to disable TLSv1.3 due to inadequate support to exclude certain ciphers. Much to my dismay, the `ssl_protocols` had been renamed and re-functionalized into `ssl_min_protocol`. Now, there is no way to exclude a specific group of one or more TLS versions. For a new

autoupdate broke

2020-01-11 Thread Steve Egbert
When attempting to perform autoupdate after my 'autogen.sh' broke, it says that there is missing a file called: dovecot/core/doc/wiki/Makefile.am But in the Github repository, there is a misnamed file named "Makefile.am.in". I think this file is misnamed and should be renamed to "Makefi

Re: Server administration

2019-09-01 Thread Egbert via dovecot
t GUI interface for Dovecot administration? > >   > > With kind regards, > > Alex > Have a look at Postfixadmin. We administer 700+ club members with that tool Egbert Jan, NL

Re: MikroTik Users Contact List

2019-03-17 Thread Egbert via dovecot
nd sample file. > >   > > Do let me know if you have any questions for me. > >   > > Regards, > > *Kathleen Brown* > > *Database Executive* > > *If you do not wish to receive these emails. Please respond Exit.* > MikroTik is already informed about this. Egbert

Re: Post-login scripting

2017-10-20 Thread Egbert
$@" And for pop3_wrapper.sh: #! /bin/sh touch /disk/mail/login/pop3/$USER touch /disk/mail/login/$USER exec "$@" This gives me empty files in /login, /login/imap and /login/pop3 with the username as filename. The timestamp of the filwe is the lat login time. HTH Egbert Jan, NL

Re: config best practice

2014-06-20 Thread Egbert
Thanks all who replied with good advice. I think I'll go for the (short) local.conf solution. I don't like messing around with all separate files in conf.d. As long as they don't conflict with my settings, it will be OK. Egbert Jan Charles Marcus schreef op 19-6-2014 15:55: >

config best practice

2014-06-18 Thread Egbert
hen I'll better stick to the way of working with the dovecot.conf with the !includes and local.conf and assume that all files in conf.d are default settings. TNX for any advise! Egbert Jan, HCC!hobbynet, NL

[Dovecot] imap / IPv6 problems?

2014-04-04 Thread Egbert
n to think that the IPv 6 connecition itself is the problem. Any advise to investigate this problem is welcome. Egbert Jan, NL

[Dovecot] XMLRPC anyone?

2012-11-21 Thread Egbert
Hi, Is there any code around that lets Dovecot (2.x) aauthenticate via a XMLRPC server (which connects to a LDAP server) instead of going directly to a LDAP server? It could give much more flexibility. TIA Egbert Jan, NL

Re: [Dovecot] failed: Too many levels of symbolic links

2012-01-09 Thread David Egbert
On 1/6/2012 3:30 PM, Timo Sirainen wrote: On 7.1.2012, at 0.10, David Egbert wrote: Anyway, readdir() is failing with ELOOP. Does it always fail with "Too many levels of symbolic links" or is it sometimes different? This sounds like a bug in Linux NFS client code. You can repr

Re: [Dovecot] failed: Too many levels of symbolic links

2012-01-06 Thread David Egbert
On 1/6/2012 2:51 PM, Timo Sirainen wrote: On 6.1.2012, at 23.41, David Egbert wrote: On 1/6/2012 2:16 PM, Timo Sirainen wrote: On 6.1.2012, at 22.44, David Egbert wrote: dovecot: imap(xx...@x.com): Error: readdir(///X/X/XXX/XXX/XXX) failed: Too

Re: [Dovecot] failed: Too many levels of symbolic links

2012-01-06 Thread David Egbert
On 1/6/2012 2:16 PM, Timo Sirainen wrote: On 6.1.2012, at 22.44, David Egbert wrote: dovecot: imap(xx...@x.com): Error: readdir(///X/X/XXX/XXX/XXX) failed: Too many levels of symbolic links You have a symlink loop. Either a symlink that points to

[Dovecot] failed: Too many levels of symbolic links

2012-01-06 Thread David Egbert
. Is the problem related to an internal limit with Dovecot v2.0.15 or with my Debian (3.1.0-1-amd64)? Thanks --- dovecot: imap(xx...@x.com): Error: readdir(///X/X/XXX/XXX/XXX) failed: Too many levels of symbolic links David Egbert Paperclip Systems

[Dovecot] high number of processes

2011-06-14 Thread Egbert Jan van den Bussche
2bd800 0t0 13565904 /var/run/dovecot/login/default dovecot-a 12941 root 19u unix 0x8800a68a9800 0t0 13610586 /var/run/dovecot/login/default TNX for any advise! Egbert Jan HCC!Hobbynet, NL

Re: [Dovecot] rotate logs ?

2011-01-18 Thread Egbert Jan van den Bussche
Same advise. Works flawlessly. Egbert Jan Op 18-1-2011 10:41, Nick Lunt schreef: -Original Message- From: dovecot-bounces+nick.lunt=patech-solutions@dovecot.org [mailto:dovecot-bounces+nick.lunt=patech-solutions@dovecot.org] On Behalf Of Frank Bonnet Sent: 18 January 2011 09

Re: [Dovecot] Web Based User Management

2011-01-14 Thread Egbert Jan van den Bussche
160 domains, 5000 aliases and 900 mailboxes. All virtual offcause. Postfix, Dovecot, Roundcube, Mailman, All server side virus and spam software. Egbert Jan

Re: [Dovecot] Last login

2011-01-10 Thread Egbert Jan van den Bussche
Op 9-1-2011 23:55, Jan-Frode Myklebust schreef: On Sun, Jan 09, 2011 at 09:19:39PM +0100, Egbert Jan van den Bussche wrote: I'm trying to find a way to find inactive users. What we do is to touch a file upon every login: protocol imap { mail_executable = /usr/local/do

[Dovecot] Last login

2011-01-09 Thread Egbert Jan van den Bussche
whole .../vmail/domain/user/Maildir tree. I'n running 1.2.9 on ububtu 10.04 LTS with posttfix and postfixadmin. The users (all are virtual) reside in the postfixadmin MySQL tables. TNX Egbert Jan (NL)

Re: [Dovecot] two mailboxes - sieve?

2010-11-23 Thread Egbert Jan van den Bussche
Op 24-11-2010 1:48, Daniel L. Miller schreef: On 11/23/2010 1:16 PM, Egbert Jan van den Bussche wrote: Op 23-11-2010 22:08, Charles Marcus schreef: On 2010-11-23 2:04 PM, Egbert Jan van den Bussche wrote: Hi helpful list! I have this user that has two different accounts om the mail server

Re: [Dovecot] two mailboxes - sieve?

2010-11-23 Thread Egbert Jan van den Bussche
Op 23-11-2010 22:08, Charles Marcus schreef: On 2010-11-23 2:04 PM, Egbert Jan van den Bussche wrote: Hi helpful list! I have this user that has two different accounts om the mail server. One is a system account, the other is a virtual account (for what it is worth...). This user would like to

[Dovecot] two mailboxes - sieve?

2010-11-23 Thread Egbert Jan van den Bussche
do I need to o apart from enabling the sieve plugin in dovecot.conf? Or is there another simple solution for this problem directly in Postfix or with fetchmail? A simple working example would be wonderful! TIA Egbert Jan (NL)

Re: [Dovecot] Confused about Maildir

2010-11-22 Thread Egbert Jan van den Bussche
y /home/ for real system users. Virtuial users still should have a home dir. On my system that is a NFS share on /disk/mail/vmail// and the Maildir is in /disk/mail/vmail///Maildir. It could had been something colmpletely different! Egbert Jan

[Dovecot] local users and virtual users

2010-11-16 Thread Egbert Jan van den Bussche
ocreate3: Drafts autocreate4: Spam autosubscribe: Trash autosubscribe2: Sent autosubscribe3: Drafts autosubscribe4: Spam Pse help. TIA! Egbert Jan

Re: [Dovecot] Convert plugin

2010-10-15 Thread Egbert Jan van den Bussche
Op 15-10-2010 20:15, Donny Brooks schreef: On 10/15/2010 1:10 PM, Timo Sirainen wrote: On Wed, 2010-10-06 at 22:01 +0200, Egbert Jan van den Bussche wrote: I'm trying the example from the wiki: plugin { convert_mail = mbox:~/mail:INBOX=/var/mail/%n } but have still not succeded. Di

Re: [Dovecot] Convert plugin

2010-10-15 Thread Egbert Jan van den Bussche
Op 15-10-2010 20:15, Donny Brooks schreef: On 10/15/2010 1:10 PM, Timo Sirainen wrote: On Wed, 2010-10-06 at 22:01 +0200, Egbert Jan van den Bussche wrote: I'm trying the example from the wiki: plugin { convert_mail = mbox:~/mail:INBOX=/var/mail/%n } but have still not succeded. Di

[Dovecot] Convert plugin

2010-10-06 Thread Egbert Jan van den Bussche
t the right maildir++ info is composed. I'm in vor any advise! TIA Egbert Jan (NL) Here is dovecot -n: # 1.2.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-25-server x86_64 Ubuntu 10.04.1 LTS log_path: /var/log/dovecot/error.log info_log_path: /var/log/dovecot/info.log log_timestamp: %Y-%m-%d

Re: [Dovecot] How to add the missing maildir folders SOLVED

2010-10-06 Thread Egbert Jan van den Bussche
Op 5-10-2010 23:13, Ralf Hildebrandt schreef: * Egbert Jan van den Bussche: Hi fellow list members, What would be the best way to add the .Sent,.Draft, etc. folders to the maildir tree? It seems not Dovecots task to do that but of the MUA. http://wiki2.dovecot.org/Plugins/Autocreate Thanks

[Dovecot] How to add the missing maildir folders

2010-10-05 Thread Egbert Jan van den Bussche
pop3, imap and web (Roundcube) but I cannot ask them to use Roundcube first, just to create the folders. I have no such thing as maildrop, which seems to be able to create folders. Should I run some script during login? How? TIA Egbert Jan (NL)

Re: [Dovecot] Migrating mail from mbox to maildir using dovecot

2010-09-14 Thread Egbert Jan van den Bussche
the mb2md.pl script and all takes place when a user logs in. The fact that $@ is destroyed by the awk does not seem to harm. YMMV! I used the hooks provided in the dovecot config file (thanks Timo) where you can call a script instead of the IMAP exec. Details are in the 1.x dovecot wiki.

Re: [Dovecot] Running auth as root

2010-08-31 Thread Egbert Jan van den Bussche
Op 31-8-2010 21:10, Timo Sirainen schreef: On Tue, 2010-08-31 at 21:07 +0200, Egbert Jan van den Bussche wrote: If your /etc/shadow is readable by "shadow" group, you can use auth_user=something that uses shadow group as the primary group (maybe create a new "doveauth" u

Re: [Dovecot] Running auth as root

2010-08-31 Thread Egbert Jan van den Bussche
Op 31-8-2010 20:04, Timo Sirainen schreef: On Mon, 2010-08-30 at 14:15 +0200, Egbert Jan van den Bussche wrote: Hi, I seem to be forced to run the auth proces as root because I want to use pam for local users. My gut feeling says that this is Not Good. Is there another way? For the virtual

Re: [Dovecot] permissions on auth-userdb

2010-08-31 Thread Egbert Jan van den Bussche
the group 'shadow' (if /etc/shadow is owned by group shadow). Or run auth under the default user 'root'. In your case it has to do with the passdb and/or userdb you use. In my case I had the problems with local users via pam. HTH Egbert Jan

[Dovecot] Running auth as root

2010-08-30 Thread Egbert Jan van den Bussche
er 10.04.1 and Dovecot 1.2.9. TIA, Egbert Jan

Re: [Dovecot] PAM authentication fails

2010-08-29 Thread Egbert Jan van den Bussche
Op 29-8-2010 20:51, Egbert Jan van den Bussche schreef: Hi, I'm fighting all weekend on with auth and pam to authenticate local system users. testuser is such local user and is in passwd and shadow. I want to have local system users (testuser is one of them) and virtual users. The virtual

[Dovecot] PAM authentication fails

2010-08-29 Thread Egbert Jan van den Bussche
ere such a thing as pam debugging? TIA Egbert Jan

[Dovecot] How to pipe to external program

2010-08-26 Thread Egbert
--url http://bla.bal/ In /etc/postfix/aliases. That does not work for me becase my local delivery agent is dovecot. The Sieve plugin seems not capable to forward to a external program. What is the right way to achieve that mail to r...@mydomain is sent to the pipe? TIA Egbert Jan

Re: [Dovecot] Pure virtual user and RT3.x

2010-08-25 Thread Egbert
Op 25-8-2010 22:13, Julio C. Ortega schreef: El 25/08/10 15:20, Egbert escribió: Hi, I have mailsystem with virtual users only (/home/vmail/domain/user). I need to integrate RT3.x (a ticketing system). I have installed the client but I need to send mail to a pipe. Rt wants me to insert: |/usr

[Dovecot] Pure virtual user and RT3.x

2010-08-25 Thread Egbert
/aliases. That does not work for me. What is the right way to achieve that mail to r...@mydomain is sent to the pipe? Should I install, configure and use a Sieve filter? I have none installed at the moment. Or are there other (simpler?) ways? TIA Egbert Jan

Re: [Dovecot] Convert plugin

2010-08-03 Thread Egbert
correct). The /var/mail/ IS converted though. Cannot find any hint where to look in the logs... A second attempt logs the user in and the converted messages are displayed as unread. In dovecot.conf: protocol imap { #mail_executable = /usr/lib/dovecot/imap mail_executable = /home/egbert/script.sh

Re: [Dovecot] Convert plugin

2010-07-31 Thread Egbert
runs as root which might simplifiy things ;-) Are things like %d, %u, %n also available? I have to build the argument list for mb2md.pl in that script. Egbert Jan

Re: [Dovecot] Convert plugin

2010-07-30 Thread Egbert
Op 30-7-2010 17:32, Timo Sirainen schreef: On Fri, 2010-07-30 at 17:01 +0200, Egbert wrote: The renaming of the maildir fails, wrong user. I can fiddle this out. Perhaps the /var/mail tree should be owned by user dovecot. No. It's never dovecot user. It's the mail user uid, as r

Re: [Dovecot] Convert plugin

2010-07-30 Thread Egbert
Op 30-7-2010 14:45, Daniel Luttermann schreef: Egbert wrote on 30.07.2010: Op 30-7-2010 0:07, Daniel Luttermann schreef: Egbert wrote on 29.07.2010: Hi, I'm trying to convert users from a sendmail server to a postfix/dovecot server. All works fine but one of the last things is to rescu

Re: [Dovecot] Convert plugin

2010-07-30 Thread Egbert
Op 30-7-2010 16:27, Timo Sirainen schreef: On Fri, 2010-07-30 at 12:36 +0200, Egbert wrote: So things finally start to work. Only the rename of the /var/mail/ directory doesn't work yet. Wrong owner. I made /var/mail owned by vmail:vmail but that is not good. Maybe it should be own

Re: [Dovecot] Convert plugin

2010-07-30 Thread Egbert
Op 30-7-2010 0:07, Daniel Luttermann schreef: Egbert wrote on 29.07.2010: Hi, I'm trying to convert users from a sendmail server to a postfix/dovecot server. All works fine but one of the last things is to rescue the messages in /var/mail/ on the old server. This seems very straitfo

[Dovecot] Convert plugin

2010-07-29 Thread Egbert
ead' users. TIA Egbert Jan

Re: [Dovecot] dovecot/deliver ... Can't open logfile /var/log/dovecot/error.log: Permission denied

2010-05-10 Thread Egbert Jan
Could it be that selinux or apparmor are playing games with you??? just my 2 $cents Egbert Jan (NL) > -Oorspronkelijk bericht- > Van: dovecot-bounces+egbert=vandenbussche...@dovecot.org > [mailto:dovecot-bounces+egbert=vandenbussche...@dovecot.org] > Namens Romer Ventura

Re: [Dovecot] Using MySQL For Mailboxes?

2010-03-08 Thread Egbert Jan van den Bussche
> -Oorspronkelijk bericht- > Van: dovecot-bounces+egbert=vandenbussche...@dovecot.org > [mailto:dovecot-bounces+egbert=vandenbussche...@dovecot.org] > Namens Bradley Giesbrecht > Verzonden: maandag 8 maart 2010 17:06 > Aan: Carlos Mennens > CC: Dovecot Mailing

Re: [Dovecot] First time Dovecot user, really impressed so far. What is best IMAP enabled webmail package to go with Dovecot?

2010-01-04 Thread Egbert Jan van den Bussche
Welcome! Have a look at RoundCube webmail. I used to use squirrelmail but had the same issues as you. RoundCube is very nice. Egbert Jan > -Oorspronkelijk bericht- > Van: dovecot-bounces+egbert=vandenbussche...@dovecot.org > [mailto:dovecot-bounces+egbert=vandenbussche...@do

Re: [Dovecot] For the record: Postfix+Spamassassin+ClamAV+Dovecot

2009-06-01 Thread Egbert Jan van den Bussche
> -Oorspronkelijk bericht- > Van: dovecot-bounces+egbert=vandenbussche...@dovecot.org > [mailto:dovecot-bounces+egbert=vandenbussche...@dovecot.org] > Namens James Butler > Verzonden: vrijdag 17 april 2009 20:58 > Aan: Dovecot Mailing List > Onderwerp: [Do

Re: [Dovecot] I've moved to US

2009-02-07 Thread Egbert Jan van den Bussche
That sounds like a very nice challenge, Timo! Don't forget to enjoy your stay abroad too! Egbert Jan (NL) > -Oorspronkelijk bericht- > Van: dovecot-bounces+egbert=vandenbussche...@dovecot.org > [mailto:dovecot-bounces+egbert=vandenbussche...@dovecot.org] > Nam

Re: [Dovecot] SSL cert problems.

2008-12-29 Thread Egbert Jan van den Bussche
your problem is that the ---BEGIN CERTIFICATE--- line should be on a line by its own. It is a far shot but maybe it helps. We are dealing with security stuff and all files (and permissions!) are very strict. Your key file should be on 600. Egbert Jan -Oorspronkelijk bericht- Van: dovecot-bo

Re: [Dovecot] SSL cert problems.

2008-12-26 Thread Egbert Jan van den Bussche
-Oorspronkelijk bericht- Van: dovecot-bounces+egbert=vandenbussche...@dovecot.org [mailto:dovecot-bounces+egbert=vandenbussche...@dovecot.org] Namens Sahil Tandon Verzonden: donderdag 25 december 2008 18:01 Aan: dovecot@dovecot.org Onderwerp: Re: [Dovecot] SSL cert problems. Geoff Sweet

Re: [Dovecot] spamassassin, postfix with dovecot lda?

2008-06-02 Thread Egbert Jan van den Bussche
vial but I had all sort of issues with amavisd missing perl modules. Well, finally solved that one again. Egbert Jan (NL)

Re: [Dovecot] SSL certificate?

2008-01-31 Thread Egbert Jan van den Bussche
when used... 2007112vbs ssl_ca_file = /etc/pki/tls/certs/cacert_class3.crt So I kind of 'misused' ssl_ca_file' for it. Egbert Jan

Re: [Dovecot] Dovecot + virtual users

2007-09-13 Thread Egbert Jan
What was wrong? I will run the same set of programs on Linux and don't want to run in the same problem. Do you mind sharing your solution? TNX Egbert Jan > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] > On Behalf Of bichumo > Sent: Th

[Dovecot] Dovecot 1.0.0 packed fot Mandive Linux

2007-05-01 Thread Egbert Jan
Dovecot 1.0.0 has been compiled vor Mandriva 2008.0 in the contrib/release tree. Hopefully a backport to the current mdv releases (2007.1 and 2007.0) will follow soon! Thanks Michael! Egbert Jan NL Name: dovecot Relocations: (not relocatable) Version : 1.0.0

Re: [Dovecot] Rpm builders: Dovecot spec file

2007-03-26 Thread Egbert Jan
> -Original Message- > From: Axel Thimm [mailto:[EMAIL PROTECTED] On Behalf Of Axel Thimm > Sent: Monday, March 26, 2007 11:35 AM > To: [EMAIL PROTECTED]; Dovecot Mailing List > Subject: Re: Rpm builders: Dovecot spec file > > > On Mon, Mar 26, 2007 at 11:03:01AM

[Dovecot] Rpm builders: Dovecot spec file

2007-03-26 Thread Egbert Jan
riva (I'm running 2007.0) is rc7 and I never succeeded getting in contact with the Mandriva maintainer to ask the same question. In the Axel's AT rpm I still see some patches included but others than in the Mandriva rc7 spec file. Are those patches not already applied to the latest sources by Timo? Tnx Egbert Jan NL

Re: [Dovecot] Wiki needs updating: Dovecot LDA + Dovecot Sieve + Exim

2007-03-20 Thread Egbert Jan
work. > > Steve The nice thing of Wiki's is that you can update pages YOURSELF. Just register (if needed at all) and add/change what you want. Me think Timo can spend his time better on patching the source. CU Egbert Jan

Re: [Dovecot] wiki -> txt

2007-03-16 Thread Egbert Jan
Please include AS MUCH AS examples/scenarios as you can!!! My experience as newby is that those 'real world configs' are very important to get the grip of things. It does not matter where they are (wiki or ../doc) as long as they are accessable somewhere. Thanks! Egbert Jan NL >