Sample Header Ad - 728x90

Unix & Linux Stack Exchange

Q&A for users of Linux, FreeBSD and other Unix-like operating systems

Latest Questions

5 votes
1 answers
2083 views
SMTP Server Dovecot / Exim Authentication error
Recently, I've installed the centOS 6. The purpose of the installation to use this server as Mail server. Where I've installed **Exim version 4.84_2 #1** and **Dovecot**. I've followed this blog [post][1] and I've tried to solve the below given error, however I do not have luck to resolve it. 2017-0...
Recently, I've installed the centOS 6. The purpose of the installation to use this server as Mail server. Where I've installed **Exim version 4.84_2 #1** and **Dovecot**. I've followed this blog post and I've tried to solve the below given error, however I do not have luck to resolve it. 2017-02-06 07:07:27 no host name found for IP address x.x.x.x 2017-02-06 07:07:32 dovecot_plain authenticator failed for ([x.x.x.x]) [x.x.x.x]: 535 Incorrect authentication data (set_id=mailclown@com-supportnet.work) 2017-02-06 07:07:40 dovecot_plain authenticator failed for ([x.x.x.x]) [x.x.x.x]: 535 Incorrect authentication data (set_id=mailclown@com-supportnet.work) 2017-02-06 07:07:48 dovecot_login authenticator failed for ([x.x.x.x]) [x.x.x.x]: 535 Incorrect authentication data (set_id=mailclown@com-supportnet.work) 2017-02-06 07:07:52 dovecot_login authenticator failed for ([x.x.x.x]) [x.x.x.x]: 535 Incorrect authentication data (set_id=mailclown@com-supportnet.work) Following is the output the configuration which I used from the above blog post. [root@com-supportnet ~]# dovecot -n # 2.0.9: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-642.11.1.el6.x86_64 x86_64 CentOS release 6.8 (Final) auth_mechanisms = plain login auth_socket_path = /var/run/dovecot/auth-userdb mail_location = maildir:~/mail mbox_write_locks = fcntl passdb { driver = pam } service auth { unix_listener auth-client { mode = 0777 user = exim } } ssl_cert = /etc/ssl/mail.com-supportnet.work.crt ssl_key = /etc/ssl/mail.com-supportnet.work.key userdb { driver = passwd } Please let me know, how I can resolve this error.
jacqueline fernandez (93 rep)
Feb 6, 2017, 06:15 AM • Last activity: Jun 19, 2025, 09:05 PM
1 votes
2 answers
2405 views
IMAP Dovecot cannot connect
I am trying to set up my own mail server (for 'fun'). I followed [this tutorial][1] to the bone. But I get this error message: imap-login: Disconnected (auth failed, 2 attempts in 9 secs): user= , method=PLAIN, rip=203.210.7.43, lip=1.2.3.4, TLS: Disconnected, session= I am using the SSL certificate...
I am trying to set up my own mail server (for 'fun'). I followed this tutorial to the bone. But I get this error message: imap-login: Disconnected (auth failed, 2 attempts in 9 secs): user=, method=PLAIN, rip=203.210.7.43, lip=1.2.3.4, TLS: Disconnected, session= I am using the SSL certificate and key I have for my nginx web server, on the same machine. I disabled plaintext authentication by adding these two lines (as per tutorial) to /etc/dovecot/conf.d/10-auth.conf: disable_plaintext_auth = yes auth_mechanisms = plain login But the method in the log entry still says PLAIN, and TLS is Disconnected. Could that be an issue? There're too many configurations to post them all here. if you think you need more information, please tell me which parts and I will update my question.
dayuloli (537 rep)
Jan 28, 2015, 08:19 AM • Last activity: May 21, 2025, 03:01 PM
0 votes
2 answers
2004 views
Unable to Open SMTP Port (25, 587) on Vultr
I'm using Vultr for Web Hosting and according to them they have unblocked all SMTP Ports (25, 465, 587, 2525). Now after setting up apache server and installing Postfix, Dovecot and SpamAssassin when I tested it by sending the mail I got this error: Connection could not be established. getaddrinfo f...
I'm using Vultr for Web Hosting and according to them they have unblocked all SMTP Ports (25, 465, 587, 2525). Now after setting up apache server and installing Postfix, Dovecot and SpamAssassin when I tested it by sending the mail I got this error: Connection could not be established. getaddrinfo for mail.domain.com failed: Temporary failure in name resolution When I run nslookup against the domain I get a valid IP but when I run it against mail.domain.com I get this error message: ** server can't find mail.domain.com: SERVFAIL I have allow both port 25 and 587 in the ufw. I checked the status of both port 25 and 587 using different technique that I found on the internet (nmap, netstat, iptables). These are the result: enter image description here Does anyone know what I'm doing wrong and how can I open port 25 and 587 so that I will be able to send and receive emails. Thanks
MAY (101 rep)
Nov 19, 2022, 02:12 AM • Last activity: May 18, 2025, 11:01 AM
0 votes
1 answers
2542 views
Cannot send email via postfix / dovecot error status=deferred (mail transport unavailable)
I am trying to setup a mail server with postfix/dovecot/maria DB on centos 7 and have seem to hit a roadblock. I am not able to send emails to internal users and the logs suggest "mail transport unavailable". I checked few resources online and dont seem to find help, the services are up and running....
I am trying to setup a mail server with postfix/dovecot/maria DB on centos 7 and have seem to hit a roadblock. I am not able to send emails to internal users and the logs suggest "mail transport unavailable". I checked few resources online and dont seem to find help, the services are up and running. /var/log/maillog Mar 9 21:30:41 server postfix/qmgr: 2222637E93F: from=, size=472, nrcpt=1 (queue active) Mar 9 21:30:41 server postfix/qmgr: warning: connect to transport private/dovecot: No such file or directory Mar 9 21:30:41 server postfix/error: 2222637E93F: to=, relay=none, delay=0.14, delays=0.09/0.03/0/0.02, dsn=4.3.0, status=deferred (mail transport unavailable) Mar 9 21:34:53 server postfix/pickup: 59F6E2D66A4: uid=0 from= Mar 9 21:34:53 server postfix/cleanup: 59F6E2D66A4: message-id= Mar 9 21:34:53 server postfix/qmgr: 59F6E2D66A4: from=, size=472, nrcpt=1 (queue active) Mar 9 21:34:53 server postfix/qmgr: warning: connect to transport private/dovecot: No such file or directory Mar 9 21:34:53 server postfix/error: 59F6E2D66A4: to=, relay=none, delay=0.17, delays=0.12/0.03/0/0.03, dsn=4.3.0, status=deferred (mail transport unavailable) Mar 9 21:35:22 server postfix/qmgr: C47911FB57A: from=, size=476, nrcpt=1 (queue active) Mar 9 21:35:22 server postfix/error: C47911FB57A: to=, relay=none, delay=540, delays=540/0/0/0, dsn=4.3.0, status=deferred (mail transport unavailable) I need to find out the source of the error.
Atul (1911 rep)
Mar 10, 2017, 05:42 AM • Last activity: May 9, 2025, 12:04 PM
0 votes
0 answers
128 views
Postfix/Dovecot configuration to gmail as relay
Does any one have a complete configuration of using Dovecot to handle OAuth2 tokens to allow Postfix to send mail to gmail? Most use cases found are either too old or not complete. I have done the required steps from the google api and received a credential in json format. Thanks in advance, Dean
Does any one have a complete configuration of using Dovecot to handle OAuth2 tokens to allow Postfix to send mail to gmail? Most use cases found are either too old or not complete. I have done the required steps from the google api and received a credential in json format. Thanks in advance, Dean
Dean Allard (1 rep)
Jan 31, 2025, 09:00 PM
16 votes
2 answers
21607 views
How can I add subdomains to letsencrypt using certbots?
I have certbot installed and successfully use it to encrypt my homepage. Now I tried to set up an email system for my website using dovecot and postfix. I got it mostly running; the only problem is that thunderbird gives me a warning about the address being fraudulent because I use the SSL key of my...
I have certbot installed and successfully use it to encrypt my homepage. Now I tried to set up an email system for my website using dovecot and postfix. I got it mostly running; the only problem is that thunderbird gives me a warning about the address being fraudulent because I use the SSL key of mysite.com for imap.mysite.com (same for SMTP). How can I add imap.mysite.com and smtp.mysite.com to the existing mysite.com certificate using certbot in order to avoid the warning?
user2741831 (323 rep)
Jan 3, 2020, 10:05 AM • Last activity: Jan 26, 2025, 09:08 PM
1 votes
1 answers
984 views
How can I manage services running in a FreeBSD jail?
I’ve inherited some systems that runs on the FreeBSD operating system and inside jails. Basically the services running are old versions of `qmail`, `spamd`, Dovecot, etc. None of the versions are up to date or even maintainable any more. At present we can’t move from these systems but I would at lea...
I’ve inherited some systems that runs on the FreeBSD operating system and inside jails. Basically the services running are old versions of qmail, spamd, Dovecot, etc. None of the versions are up to date or even maintainable any more. At present we can’t move from these systems but I would at least like to be able to troubleshoot them. My question: Normally I would be able to run for example service qmail status and get some info about the top level process. How do I do this inside a jail? In the case of the qmail process I can use qmailctl but what would be the equivalent for spamd or Dovecot? Also how do you go about troubleshooting these types of services? The logs don’t really give a very good steer on what could be going wrong.
MB. (145 rep)
Jan 7, 2020, 05:53 PM • Last activity: Jan 16, 2025, 01:13 PM
0 votes
1 answers
69 views
What DNS records are needed to ensure pop3 delivery from external mail senders succeeds?
**My setup:** ---------------- * **Network:** Low spec vps server, * **Mail server**: postfix + dovecot + mysql, * **OS**: ubuntu 16.04 (to be upgraded once mail config is complete). I have a single domain (call it `mydomain1.com`) successfully configured for sending/receiving email. I achieved this...
**My setup:** ---------------- * **Network:** Low spec vps server, * **Mail server**: postfix + dovecot + mysql, * **OS**: ubuntu 16.04 (to be upgraded once mail config is complete). I have a single domain (call it mydomain1.com) successfully configured for sending/receiving email. I achieved this by following one of the many guides available through an internet search. Now I have a second domain (call it mydomain2.com) I'd like to include on the same VPS server (same IP address), and the same email service. I'm currently working out how to configure this 2nd domain within the existing setup, from DNS settings to postfix, dovecot, mysql and virtual mailbox OS-level folder structure. What DNS records are needed to ensure POP3 delivery from external mail senders succeeds? Currently: * mydomain1.com is working (receiving and sending) * mydomain2.com is not working (sending but not receiving) * Only email sent from mydomain1.com is arriving at mydomain2.com addresses. * The 'returned to sender' error msg says:
: host C.secondary-mx.nl[00.000.00.00] said: 550 Unknown
    user. Unrouteable address (in reply to RCPT TO command)
Jim (101 rep)
Jan 5, 2025, 04:21 PM • Last activity: Jan 8, 2025, 02:00 PM
1 votes
0 answers
70 views
Where to find textstring in Linux/Dovecot
I have installed the [iRedMail][1] email server script on an Ubuntu 22.04 with Nginx. Now, when I create a new email account, the user gets an email when he logs in the first time.  It’s a welcome email with a link to where you should login, but the link is totally wrong.  I have...
I have installed the iRedMail email server script on an Ubuntu 22.04 with Nginx. Now, when I create a new email account, the user gets an email when he logs in the first time.  It’s a welcome email with a link to where you should login, but the link is totally wrong.  I have asked in the iRedMail forum, but all answer I got is that the installation doesn’t install anything to send out welcome messages.  I have tried to find the text string using grep, but it seems to hang and doesn’t show anything.  Can anyone hint about a better way to find this string?
root@mail:~# grep -r -i 'Welcome and thank you' /
grep: /proc/sys/fs/binfmt_misc/register: Invalid argument
grep: /proc/sys/net/ipv4/route/flush: Permission denied
grep: /proc/sys/net/ipv6/conf/all/stable_secret: Input/output error
grep: /proc/sys/net/ipv6/conf/default/stable_secret: Input/output error
grep: /proc/sys/net/ipv6/conf/eth0/stable_secret: Input/output error
grep: /proc/sys/net/ipv6/conf/lo/stable_secret: Input/output error
grep: /proc/sys/net/ipv6/route/flush: Permission denied
grep: /proc/sys/vm/compact_memory: Permission denied
grep: /proc/sys/vm/drop_caches: Permission denied
grep: /proc/kmsg: Resource temporarily unavailable
>... explain – or even show – what’s wrong with the link. Well, in the first place, there should not be a welcome message at all.  It’s nothing I have configured.  The welcome plugin in Dovecot is not enabled.  And, if it was to be correct, it should lead to the roundcube login mail.mxmail.pro/mail. This is the text: >Welcome and thank you for registering at Mx Mail! Your account has now been created and you can log in by using your email address and password by visiting our website or at the following URL: **https://mxmail.pro/index.php ? route-account/login&language=en-gb**
Mxmail (11 rep)
Jun 5, 2024, 07:40 AM • Last activity: Jun 5, 2024, 04:38 PM
0 votes
1 answers
269 views
Postfix - Exclude user from sending and receiving to-from some domains
In postfix or dovecot, it's possible exclude an user from sending and receiving mail to and from some domains by creating a rule that the user cannot deactivate?
In postfix or dovecot, it's possible exclude an user from sending and receiving mail to and from some domains by creating a rule that the user cannot deactivate?
ancoling67 (109 rep)
Nov 4, 2021, 07:59 AM • Last activity: May 22, 2024, 09:20 AM
2 votes
2 answers
688 views
Is there an exhaustive list of plugins for Dovecot?
**Background** I am looking for plugins for Dovecot (specifically authentication plugins) because I would like to look at source code for reference as to how to make an authentication plugin for Dovecot. I have search through the official list on the [Dovecot website][1] as well as a [Google search]...
**Background** I am looking for plugins for Dovecot (specifically authentication plugins) because I would like to look at source code for reference as to how to make an authentication plugin for Dovecot. I have search through the official list on the Dovecot website as well as a Google search for a list of plugins available. Unfortunately I haven't been able to find anything that fits what I am looking for. **Questions** Are there more plugins available than in the official list? Where can I find these plugins? Are there any authentication plugins available for Dovecot? I am looking for a response that answers all of the questions above. Thank you for your assistance.
Dodzi Dzakuma (255 rep)
Apr 7, 2014, 12:55 AM • Last activity: Mar 6, 2024, 04:05 PM
0 votes
1 answers
102 views
How to get dovecot to use postfix mailbox?
I try to get postfix and dovecot up and running. I have a little problem with the mail-box path that connects both. **Postfix** virtual_mailbox_base = /var/vmail virtual_mailbox_domains = mydom.org This creates a file /var/vmail/mydom.org/sam as an mbox-file if I send to sam@mydom.org. The sent mail...
I try to get postfix and dovecot up and running. I have a little problem with the mail-box path that connects both. **Postfix** virtual_mailbox_base = /var/vmail virtual_mailbox_domains = mydom.org This creates a file /var/vmail/mydom.org/sam as an mbox-file if I send to sam@mydom.org. The sent mail is inside of that file. So far - so good. But in dovecot I have this for a virtual user. sam@mydom.org:{PLAIN}mysecret:5000:5000::/var/vmail/mydom.org::userdb_mail=mbox:~/%u That creates /var/vmail/mydom.org/sam@mydom.org/inbox after successful login. So my POP3-client finds always an empty mailbox. If I copy the postfix-mailbox to the inbox-file, then POP3 gets the message. How do I get dovecot to use the postfix-mailbox or postfix to use the dovecot-file? I tried several settings in dovecot but I did not get it going to use the posfix-file as it is. Thanks!
chris01 (869 rep)
Feb 13, 2024, 10:56 AM • Last activity: Feb 13, 2024, 12:27 PM
1 votes
1 answers
376 views
In dovecot, what syntax to use if I have a space in mysql password?
I'm trying to configure Dovecot to access mysql, but it's not working because there is a space in the mysql password. driver = mysql connect = "host=localhost dbname=postfix user=postfix password=blah bluh blih" When I'm trying to access a mailbox from Thunderbird / Evoution, I'm getting this error...
I'm trying to configure Dovecot to access mysql, but it's not working because there is a space in the mysql password. driver = mysql connect = "host=localhost dbname=postfix user=postfix password=blah bluh blih" When I'm trying to access a mailbox from Thunderbird / Evoution, I'm getting this error : Jan 05 14:41:11 mx1 dovecot: auth: Fatal: mysql: Missing value in connect string: bluh I can't find the proper syntax to make it work. Has someone an idea ?
setenforce 1 (700 rep)
Jan 5, 2018, 01:47 PM • Last activity: Feb 12, 2024, 10:53 AM
0 votes
1 answers
296 views
Can we use bi-key authentication with dovecot & thunderbird?
I run the dovecot imap server and use thunderbird as frontend. The access is password protected, and I see zillion login attempts with leaked passwords. I would like to switch to bi-key authentication and if possible with a FIDO2 physical key too. Is this possible ? I currently use bi-keys for ssh a...
I run the dovecot imap server and use thunderbird as frontend. The access is password protected, and I see zillion login attempts with leaked passwords. I would like to switch to bi-key authentication and if possible with a FIDO2 physical key too. Is this possible ? I currently use bi-keys for ssh authentication and start to use a FIDO2 physical key.
chmike (231 rep)
Jan 23, 2024, 02:47 PM • Last activity: Jan 26, 2024, 01:19 AM
0 votes
0 answers
358 views
Apple iPad cannot access IMAP via Dovecot -- SSL unsupported protocol
I have a mail server that has been running for quite some time. Most of my clients use non-Apple devices or are okay with web-clients. I am only now running into this roadblock, because a new client prefers using the Apple app to read email. They have an older iPad, which maxes out at iOS 9.3.5 . Ju...
I have a mail server that has been running for quite some time. Most of my clients use non-Apple devices or are okay with web-clients. I am only now running into this roadblock, because a new client prefers using the Apple app to read email. They have an older iPad, which maxes out at iOS 9.3.5. Just found out this is rather old. Will my set up run on a more modern iOS? * When that older iOS device attempts IMAP connection, I am getting the following errors.
Jan  8 17:59:40 host dovecot: imap-login: Debug: SSL: where=0x10, ret=1: before SSL initialization
    Jan  8 17:59:40 host dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: before SSL initialization
    Jan  8 17:59:40 host dovecot: imap-login: Debug: SSL: where=0x2002, ret=-1: before SSL initialization
    Jan  8 17:59:40 host dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: before SSL initialization
    Jan  8 17:59:40 host dovecot: imap-login: Debug: SSL alert: where=0x4008, ret=582: fatal protocol version
    Jan  8 17:59:40 host dovecot: imap-login: Debug: SSL: where=0x2002, ret=-1: error
    Jan  8 17:59:40 host dovecot: imap-login: Debug: SSL error: SSL_accept() failed: error:0A000102:SSL routines::unsupported protocol
    Jan  8 17:59:40 host dovecot: imap-login: Disconnected: Connection closed: SSL_accept() failed: error:0A000102:SSL routines::unsupported protocol (no auth attempts in 0 secs): user=, rip=x.x.x.x, lip=y.y.y.y, TLS handshaking: SSL_accept() failed: error:0A000102:SSL routines::unsupported protocol, session=
    Jan  8 17:59:40 host dovecot: imap-login: Debug: SSL error: SSL_accept() syscall failed: Invalid argument
* With Roundcube and Outlook, here are the log results (similar for both) where client IMAP access works:
Jan  8 18:19:14 host dovecot: imap-login: Debug: SSL: where=0x10, ret=1: before SSL initialization
    Jan  8 18:19:14 host dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: before SSL initialization
    Jan  8 18:19:14 host dovecot: imap-login: Debug: SSL: where=0x2002, ret=-1: before SSL initialization
    Jan  8 18:19:14 host dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: before SSL initialization
    Jan  8 18:19:14 host dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS read client hello
    Jan  8 18:19:14 host dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write server hello
    Jan  8 18:19:14 host dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write change cipher spec
    Jan  8 18:19:14 host dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: TLSv1.3 write encrypted extensions
    Jan  8 18:19:14 host dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write certificate
    Jan  8 18:19:14 host dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: TLSv1.3 write server certificate verify
    Jan  8 18:19:14 host dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write finished
    Jan  8 18:19:14 host dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: TLSv1.3 early data
    Jan  8 18:19:14 host dovecot: imap-login: Debug: SSL: where=0x2002, ret=-1: TLSv1.3 early data
    Jan  8 18:19:14 host dovecot: message repeated 2 times: [ imap-login: Debug: SSL: where=0x2002, ret=-1: TLSv1.3 early data]
    Jan  8 18:19:14 host dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: TLSv1.3 early data
    Jan  8 18:19:14 host dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS read finished
    Jan  8 18:19:14 host dovecot: imap-login: Debug: SSL: where=0x20, ret=1: SSLv3/TLS write session ticket
    Jan  8 18:19:14 host dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write session ticket
    Jan  8 18:19:14 host dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write session ticket
    Jan  8 18:19:14 host dovecot: imap-login: Debug: SSL: where=0x2002, ret=1: SSL negotiation finished successfully
    Jan  8 18:19:14 host dovecot: imap-login: Login: user=, method=PLAIN, rip=x.x.x.x, lip=x.x.x.x, mpid=421260, TLS, session=
    Jan  8 18:19:14 host dovecot: imap-login: Debug: SSL: where=0x10, ret=1: before SSL initialization
    Jan  8 18:19:14 host dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: before SSL initialization
    Jan  8 18:19:14 host dovecot: imap-login: Debug: SSL: where=0x2002, ret=-1: before SSL initialization
    Jan  8 18:19:14 host dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: before SSL initialization
    Jan  8 18:19:14 host dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS read client hello
    Jan  8 18:19:14 host dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write server hello
    Jan  8 18:19:14 host dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write change cipher spec
    Jan  8 18:19:14 host dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: TLSv1.3 write encrypted extensions
    Jan  8 18:19:14 host dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write certificate
    Jan  8 18:19:14 host dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: TLSv1.3 write server certificate verify
    Jan  8 18:19:14 host dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write finished
    Jan  8 18:19:14 host dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: TLSv1.3 early data
    Jan  8 18:19:14 host dovecot: imap-login: Debug: SSL: where=0x2002, ret=-1: TLSv1.3 early data
    Jan  8 18:19:14 host dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: TLSv1.3 early data
    Jan  8 18:19:14 host dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS read finished
    Jan  8 18:19:14 host dovecot: imap-login: Debug: SSL: where=0x20, ret=1: SSLv3/TLS write session ticket
    Jan  8 18:19:14 host dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write session ticket
    Jan  8 18:19:14 host dovecot: imap-login: Debug: SSL: where=0x2001, ret=1: SSLv3/TLS write session ticket
    Jan  8 18:19:14 host dovecot: imap-login: Debug: SSL: where=0x2002, ret=1: SSL negotiation finished successfully
    Jan  8 18:19:14 host dovecot: imap-login: Debug: SSL alert: close notify
    Jan  8 18:19:14 host dovecot: imap-login: Debug: SSL alert: close notify
    Jan  8 18:19:14 host dovecot: imap(user@domain.net): Disconnected: Logged out in=316 out=1699 deleted=0 expunged=0 trashed=0 hdr_count=1 hdr_bytes=250 body_count=0 body_bytes=0

Here is my setup

* Ubuntu 22.04.3 LTS * Kernel 5.15.0-91-generic * Dovecot 2.3.16 (7e2e900c1a) * OpenSSL 3.0.2 * Certbot 2.8.0

Config Files

* SSL-configuration
-shellsession
    $ cat /etc/dovecot/conf.d/10-ssl.conf
    ssl = yes
    verbose_ssl = yes
    ssl_cert = 
* Dovecot:
lang-shellsession $ cat /etc/dovecot/conf.d/10-master.conf service imap-login { inet_listener imap { port = 0 } inet_listener imaps { port = 993 ssl = yes } } service pop3-login { inet_listener pop3 { port = 0 } inet_listener pop3s { port = 995 ssl = yes } } service lmtp { unix_listener /var/spool/postfix/private/dovecot-lmtp { mode = 0600 user = postfix group = postfix } } service imap { } service pop3 { } service auth { unix_listener /var/spool/postfix/private/auth { mode = 0666 user = postfix group = postfix } unix_listener auth-userdb { mode = 0600 user = vmail } user = dovecot } service auth-worker { user = vmail } service dict { unix_listener dict { } } ```

SSL Labs Test Results

Overall A Rating. A few highlights from the Configuration section.
| Protocols | | | --------- | --- | | TLS1.3 | Yes | | TLS1.2 | Yes | | TLS1.1 | No | | TLS1.0 | No | | SSL 3 | No | | SSL 2 | No | | Cipher Suites - TLS 1.3 (server has no preference) | | | ------------------------------------------------------------------------ | --- | | TLS_AES_128_GCM_SHA256 (0x1301) ECDH x25519 (eq. 3072 bits RSA) FS | 128 | | TLS_AES_256_GCM_SHA384 (0x1302) ECDH x25519 (eq. 3072 bits RSA) FS | 256 | | TLS_CHACHA20_POLY1305_SHA256 (0x1303) ECDH x25519 (eq. 3072 bits RSA) FS | 256 | | Cipher Suites - TLS 1.2 (server has no preference) | | | ------------------------------------------------------------------------------------------------- | --- | | TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 (0xc02b) ECDH secp521r1 (eq. 15360 bits RSA) FS 128 | 128 | | TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 (0xc02c) ECDH secp521r1 (eq. 15360 bits RSA) FS 256 | 256 | | TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 (0xcca9) ECDH secp521r1 (eq. 15360 bits RSA) FS 256 | 256 |
pollyPaul (1 rep)
Jan 8, 2024, 07:08 PM • Last activity: Jan 9, 2024, 09:12 AM
1 votes
2 answers
1301 views
Simple way to send email to Dovecot mailbox from Unix scripts?
I'm looking to send emails to myself from various scripts on my Linux (Debian 10) system. My thought was to install just Dovecot, and not an MTA like Postfix, to avoid the complexity of configuring the MTA. All I want to do is drop myself the odd email from a script, and then connect to my mail serv...
I'm looking to send emails to myself from various scripts on my Linux (Debian 10) system. My thought was to install just Dovecot, and not an MTA like Postfix, to avoid the complexity of configuring the MTA. All I want to do is drop myself the odd email from a script, and then connect to my mail server with Thunderbird and pull those emails. I used to run my own email server, however, and the way I sent scripts on there was to use /usr/sbin/sendmail. This binary seems to have been supplied by Postfix, because it isn't there with just a Dovecot install. Assuming I have already set up Dovecot to successfully allow retrieval of email from local user mailboxes via eg. POP3, what's the simplest way (least configuration, basically) for me to send email to those local mailboxes from a unix script? I'd like to avoid installing a full-on MTA, or ideally, anything else at all. I'd like some sort of equivalent to:
/usr/sbin/sendmail "to@address.com" <
Jez (1026 rep)
Jan 20, 2022, 10:31 AM • Last activity: Jan 6, 2024, 02:15 PM
0 votes
2 answers
3106 views
Ubuntu server 22.04 Postfix/Dovecot error: postfix/smtpd fatal: no SASL authentication mechanisms
Following the Ubuntu's official guide [Install and configure Postfix][1], when I run telnet localhost 25 I get ```none Trying 127.0.0.1... Connected to localhost. Escape character is '^]'. Connection closed by foreign host. ``` When I look into the logs I get ```none $ sudo tail /var/log/mail.err De...
Following the Ubuntu's official guide Install and configure Postfix , when I run telnet localhost 25 I get
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
Connection closed by foreign host.
When I look into the logs I get
$ sudo tail /var/log/mail.err
Dec  7 11:38:17  postfix/smtpd: fatal: no SASL authentication mechanisms
___ The above example is running in a virtual machine, but the same happens in a server in the cloud, and running telnet remotely to the domain. (I tried to replicate the process in the VM to see if I could spot what happens more easily). I've read every post, blog, article, old and new, tried every configuration I could think of, and yet the error persists. I can't figure what is wrong. My configurations: **/etc/postfix/main.cf**
# See /usr/share/postfix/main.cf.dist for a commented, more complete version


# Debian specific:  Specifying a file name will cause the first
# line of that file to be used as the name.  The Debian default
# is /etc/mailname.
#myorigin = /etc/mailname

smtpd_banner = $myhostname ESMTP $mail_name (Ubuntu)
biff = no

# appending .domain is the MUA's job.
append_dot_mydomain = no

# Uncomment the next line to generate "delayed mail" warnings
#delay_warning_time = 4h

readme_directory = no

# See http://www.postfix.org/COMPATIBILITY_README.html  -- default to 3.6 on
# fresh installs.
compatibility_level = 3.6



# TLS parameters
smtpd_tls_cert_file = /etc/ssl/certs/server.crt
smtpd_tls_key_file = /etc/ssl/private/server.key
smtpd_tls_security_level = may

smtp_tls_CApath=/etc/ssl/certs
smtp_tls_security_level = may
smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache


smtpd_relay_restrictions = permit_mynetworks permit_sasl_authenticated defer_unauth_destination
myhostname = 
alias_maps = hash:/etc/aliases
alias_database = hash:/etc/aliases
myorigin = /etc/mailname
mydestination = , .local, , localhost.localdomain, localhost
relayhost =
mynetworks = 127.0.0.0/8 [::1]/128 [::ffff:127.0.0.0]/104 [::1]/128 192.168.30.0/24
mailbox_size_limit = 0
recipient_delimiter = +
inet_interfaces = all
inet_protocols = all
home_mailbox = Maildir/
smtpd_sasl_type = dovecot
smtpd_sasl_path = private/auth
smtpd_sasl_local_domain =
smtpd_sasl_security_options = noanonymous,noplaintext
smtpd_sasl_tls_security_options = noanonymous
broken_sasl_auth_clients = yes
smtpd_sasl_auth_enable = yes
smtpd_recipient_restrictions = permit_sasl_authenticated,permit_mynetworks,reject_unauth_destination
smtp_tls_note_starttls_offer = yes
smtpd_tls_loglevel = 4
smtpd_tls_received_header = yes
**/etc/dovecot/conf.d/10-master.conf**
service auth {
  unix_listener auth-userdb {
    #mode = 0666
    #user = 
    #group = 
  }

  # Postfix smtp-auth
  unix_listener /var/spool/postfix/private/auth {
    mode = 0660
    user = postfix
    group = postfix
  }

  # Auth process is run as this user.
  #user = $default_internal_user
}
___ The SSL files in the VM I created following the official guide Security - Certificates . In my cloud server I tried with Let's encrypt/Certbot files. I added them in the **/etc/dovecot/conf.d/10-ssl.conf** file
ssl_cert =  systemd[1] : Starting Postfix Mail Transport Agent...
dic 07 12:26:07  systemd[1] : Finished Postfix Mail Transport Agent.
**Dovecot**
● dovecot.service - Dovecot IMAP/POP3 email server
     Loaded: loaded (/lib/systemd/system/dovecot.service; enabled; vendor preset: enabled)
     Active: active (running) since Thu 2023-12-07 12:26:08 UTC; 12min ago
       Docs: man:dovecot(1)
             https://doc.dovecot.org/ 
   Main PID: 3372 (dovecot)
     Status: "v2.3.16 (7e2e900c1a) running"
      Tasks: 5 (limit: 2220)
     Memory: 3.1M
        CPU: 44ms
     CGroup: /system.slice/dovecot.service
             ├─3372 /usr/sbin/dovecot -F
             ├─3373 dovecot/anvil
             ├─3374 dovecot/log
             ├─3375 dovecot/config
             └─3381 dovecot/stats

dic 07 12:26:08  systemd[1] : Starting Dovecot IMAP/POP3 email server...
dic 07 12:26:08  dovecot: master: Dovecot v2.3.16 (7e2e900c1a) starting up without any protocols (core dumps disabled)
dic 07 12:26:08  systemd[1] : Started Dovecot IMAP/POP3 email server.
___ I followed the *Troubleshooting* section in the guide. I tried many permutations, but nothing works, and the logs don't give any detail I can work with. The question is already *too long*, and as I tried so many things I prefer not to make it longer, please ask in the comments and I will edit adding relevant information if needed. Maybe I'm missing something very basic.
schrodingerscatcuriosity (12812 rep)
Dec 11, 2023, 02:06 PM • Last activity: Dec 28, 2023, 01:48 PM
0 votes
1 answers
168 views
Dovecot not loading sieve or not filtering
root@debian11:/etc/dovecot# dovecot -n # 2.3.13 (89f716dc2): /etc/dovecot/dovecot.conf # Pigeonhole version 0.5.13 (cdd19fe3) # OS: Linux 5.10.0-26-amd64 x86_64 Debian 11.8 # Hostname: localhost auth_username_format = %n listen = 127.0.0.1, ::1 log_path = /var/log/dovecot.log mail_debug = yes mail_l...
root@debian11:/etc/dovecot# dovecot -n # 2.3.13 (89f716dc2): /etc/dovecot/dovecot.conf # Pigeonhole version 0.5.13 (cdd19fe3) # OS: Linux 5.10.0-26-amd64 x86_64 Debian 11.8 # Hostname: localhost auth_username_format = %n listen = 127.0.0.1, ::1 log_path = /var/log/dovecot.log mail_debug = yes mail_location = mbox:~/mail:INBOX=/var/mail/%u mail_privileged_group = mail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date index ihave duplicate mime foreverypart extracttext namespace inbox { inbox = yes location = mailbox Drafts { special_use = \Drafts } mailbox Junk { special_use = \Junk } mailbox Sent { special_use = \Sent } mailbox "Sent Messages" { special_use = \Sent } mailbox Trash { special_use = \Trash } prefix = } passdb { driver = pam } plugin { sieve = file:~/sieve;active=~/.dovecot.sieve sieve_default = /etc/dovecot/sieve/global/default.sieve sieve_global = /etc/dovecot/sieve/global/ sieve_max_redirects = 30 } protocols = " imap sieve pop3 sieve" ssl_cert = : Disconnected: Logged out bytes=54/518 Nov 6 23:01:29 localhost roundcube: S: OK "Dovecot (Debian) ready." roundcube creating new filters in WEB UI, but not working and roundcube creating roundcube.sieve and symlink.. I also created a global script, but it doesn't work.
No Name (3 rep)
Nov 6, 2023, 08:52 PM • Last activity: Nov 6, 2023, 09:27 PM
0 votes
1 answers
80 views
Which OS, SQL, Postfix and Dovecot files/folder need to be backup for disaster recovery?
I'm running an e-mail server (Postfix/Dovecot) on a Pi4, Buster OS. We want to setup a parallel Pi (same basic image) and use `rsync` to transfer critical files to this Pi using a `cron` job on a regular schedule (daily, hourly, ...). I know that the mail content files (`/var/vmail`) and the SQL fil...
I'm running an e-mail server (Postfix/Dovecot) on a Pi4, Buster OS. We want to setup a parallel Pi (same basic image) and use rsync to transfer critical files to this Pi using a cron job on a regular schedule (daily, hourly, ...). I know that the mail content files (/var/vmail) and the SQL files (/var/lib/mysql) are important, but are there other critical e-mail server files which need to be transferred? The goal here is to have a "backup" server up-to-date, ready and configured if the primary server has a serious failure.
RDK (25 rep)
Sep 18, 2023, 01:59 PM • Last activity: Sep 21, 2023, 10:51 AM
0 votes
1 answers
181 views
migrate courier on Debian 10 to dovecot on Debian 11 with Froxlor
I use [Froxlor][1] on a debian 10 server only to manage my customers email accounts. Installed is Courier 5.0.6 and postfix 3.4.23. I plan this to first upgrade to Debian 11 then migrate to dovecot. How do I proceed?
I use [Froxlor] on a debian 10 server only to manage my customers email accounts. Installed is Courier 5.0.6 and postfix 3.4.23. I plan this to first upgrade to Debian 11 then migrate to dovecot. How do I proceed?
rubo77 (30435 rep)
Sep 2, 2023, 07:44 AM • Last activity: Sep 5, 2023, 07:57 AM
Showing page 1 of 20 total questions