Ubuntu 13.04 + Dovecot + Postfix = FAIL

Discussion in 'Installation/Configuration' started by typoworx-de, Sep 18, 2013.

  1. typoworx-de

    typoworx-de New Member

    We recently upgraded our Rootserver from Ubuntu 12.10 to Ubuntu 13.04.

    We had the same set-up on Ubuntu 12.10 and a perfectly working configuration of Postfix + Dovecot as Mailserver.

    After doing a clean install of Ubuntu 13.04 we initially tried to do the same setup (installed all packages well that have been set-up on Ubuntu 12.10 previously) and we tried to use the service-configurations we used successfully on Ubuntu 12.04 for Postfix and Dovecot.

    This won't work.

    Then we re-tried the set-up for Postfix + Dovecot after removing/reinstalling the packages using aptitude and tried to do the setup using IspConfig (we also used it on Ubuntu 12 and as well on Ubuntu 13).

    But this also fails.

    The main problem is that we don't find a working set-up for Dovecot to provide a working Imap/Pop3-Daemon.

    With all configurations we tried Dovecot is starting up. But we have a bunch of errors/warnings in Syslog.

    The main-problem is that we have either a reachable imap/pop3, but our Mailbox-Namespace is ignored (only Inbox working, but Sub-Folders are ignored).

    Other configurations we tested as well result in a non-reachable pop3/imap (daemon does not appear to provide the listening ports).


    Does anyone have a clue what is going wrong here? I feel like Dovecot isn't able to be set-up in the given version on Ubuntu 13 with this set-up?

    We are afraid of having to downgrade again to Ubuntu 12 (as the Server is already Hosting Websites).


    Our Dovecot-Namespace (Mailbox Directory Namespace) looks like this:
    Code:
    namespace {
      # Namespace type: private, shared or public
      type = private
    
      # Hierarchy separator to use. You should use the same separator for all
      # namespaces or some clients get confused. '/' is usually a good one.
      # The default however depends on the underlying mail storage format.
      separator = /
    
      # Prefix required to access this namespace. This needs to be different for
      # all namespaces. For example "Public/".
    #-  prefix =
      
      # Physical location of the mailbox. This is in same format as
      # mail_location, which is also the default for it.
    #  location = maildir:/var/vmail/%d/Maildir/%n:LAYOUT=fs
      location = maildir:/var/vmail/%d/%n/Maildir/:LAYOUT=fs
    
      # There can be only one INBOX, and this setting defines which namespace
      # has it.
      inbox = yes
    
      # If namespace is hidden, it's not advertised to clients via NAMESPACE
      # extension. You'll most likely also want to set list=no. This is mostly
      # useful when converting from another server with different namespaces which
      # you want to deprecate but still keep working. For example you can create
      # hidden namespaces with prefixes "~/mail/", "~%u/mail/" and "mail/".
      hidden = no
    
      # Show the mailboxes under this namespace with LIST command. This makes the
      # namespace visible for clients that don't support NAMESPACE extension.
      # "children" value lists child mailboxes, but hides the namespace prefix.
      #list = children
      list = yes
    
      # Namespace handles its own subscriptions. If set to "no", the parent
      # namespace handles them (empty prefix should always have this as "yes")
      subscriptions = yes
    }
    
    In the Filesystem it looks as follows (currently provided by our Mailbox-Backup of the previous Ubuntu 12 backup):

    Code:
    /var/vmail/[DOMAIN]/[MAIL]/Maildir/
    
    Within Maildir it looks like this:
    .Drafts/
    [...]
    INBOX/
      AnyFolderInInbox/
    
    MyCustomFolder/
    

    Dovecot setup is as follows (extracted using $> doveconf -c /etc/dovecot/dovecot.conf)
    Code:
    # 2.1.7: /etc/dovecot/dovecot.conf
    # OS: Linux 3.8.0-27-generic x86_64 Ubuntu 13.04 
    auth_anonymous_username = anonymous
    auth_cache_negative_ttl = 1 hours
    auth_cache_size = 0
    auth_cache_ttl = 1 hours
    auth_debug = no
    auth_debug_passwords = no
    auth_default_realm = 
    auth_failure_delay = 2 secs
    auth_first_valid_uid = 500
    auth_gssapi_hostname = 
    auth_krb5_keytab = 
    auth_last_valid_uid = 0
    auth_master_user_separator = 
    auth_mechanisms = plain login
    auth_proxy_self = 
    auth_realms = 
    auth_socket_path = auth-userdb
    auth_ssl_require_client_cert = no
    auth_ssl_username_from_cert = no
    auth_use_winbind = no
    auth_username_chars = abc[email protected]
    auth_username_format = %Lu
    auth_username_translation = 
    auth_verbose = no
    auth_verbose_passwords = no
    auth_winbind_helper_path = /usr/bin/ntlm_auth
    auth_worker_max_count = 30
    base_dir = /var/run/dovecot
    config_cache_size = 1 M
    debug_log_path = 
    default_client_limit = 1000
    default_idle_kill = 1 mins
    default_internal_user = dovecot
    default_login_user = dovenull
    default_process_limit = 100
    default_vsz_limit = 256 M
    deliver_log_format = msgid=%m: %$
    dict_db_config = 
    director_doveadm_port = 0
    director_mail_servers = 
    director_servers = 
    director_user_expire = 15 mins
    director_username_hash = %u
    disable_plaintext_auth = yes
    dotlock_use_excl = yes
    doveadm_allowed_commands = 
    doveadm_password = 
    doveadm_proxy_port = 0
    doveadm_socket_path = doveadm-server
    doveadm_worker_count = 0
    dsync_alt_char = _
    dsync_remote_cmd = ssh -l%{login} %{host} doveadm dsync-server -u%u -l%{lock_timeout} -n%{namespace}
    first_valid_gid = 1
    first_valid_uid = 500
    hostname = 
    imap_capability = 
    imap_client_workarounds = 
    imap_id_log = 
    imap_id_send = 
    imap_idle_notify_interval = 2 mins
    imap_logout_format = in=%i out=%o
    imap_max_line_length = 64 k
    imapc_features = 
    imapc_host = 
    imapc_list_prefix = 
    imapc_master_user = 
    imapc_password = 
    imapc_port = 143
    imapc_rawlog_dir = 
    imapc_ssl = no
    imapc_ssl_ca_dir = 
    imapc_ssl_verify = yes
    imapc_user = %u
    import_environment = TZ
    info_log_path = 
    instance_name = dovecot
    last_valid_gid = 0
    last_valid_uid = 0
    lda_mailbox_autocreate = no
    lda_mailbox_autosubscribe = no
    lda_original_recipient_header = 
    libexec_dir = /usr/lib/dovecot
    listen = *,[::]
    lmtp_proxy = no
    lmtp_save_to_detail_mailbox = no
    lock_method = fcntl
    log_path = syslog
    log_timestamp = "%Y-%m-%d %H:%M:%S "
    login_access_sockets = 
    login_greeting = Dovecot ready.
    login_log_format = %$: %s
    login_log_format_elements = user=<%u> method=%m rip=%r lip=%l mpid=%e %c session=<%{session}>
    login_trusted_networks = 
    mail_access_groups = 
    mail_attachment_dir = 
    mail_attachment_fs = sis posix
    mail_attachment_hash = %{sha1}
    mail_attachment_min_size = 128 k
    mail_cache_fields = flags
    mail_cache_min_mail_count = 0
    mail_chroot = 
    mail_debug = no
    mail_fsync = optimized
    mail_full_filesystem_access = no
    mail_gid = 5000
    mail_home = 
    mail_location = maildir:~/Maildir
    mail_log_prefix = "%s(%u): "
    mail_max_keyword_length = 50
    mail_max_lock_timeout = 0
    mail_max_userip_connections = 10
    mail_never_cache_fields = imap.envelope
    mail_nfs_index = no
    mail_nfs_storage = no
    mail_plugin_dir = /usr/lib/dovecot/modules
    mail_plugins = quota listescape
    mail_prefetch_count = 0
    mail_privileged_group = vmail
    mail_save_crlf = no
    mail_shared_explicit_inbox = yes
    mail_temp_dir = /tmp
    mail_temp_scan_interval = 1 weeks
    mail_uid = 5000
    mailbox_idle_check_interval = 30 secs
    mailbox_list_index = no
    maildir_broken_filename_sizes = no
    maildir_copy_with_hardlinks = yes
    maildir_stat_dirs = no
    maildir_very_dirty_syncs = no
    managesieve_client_workarounds = 
    managesieve_implementation_string = Dovecot Pigeonhole
    managesieve_logout_format = bytes=%i/%o
    managesieve_max_compile_errors = 5
    managesieve_max_line_length = 65536
    managesieve_notify_capability = mailto
    managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave
    master_user_separator = 
    mbox_dirty_syncs = yes
    mbox_dotlock_change_timeout = 2 mins
    mbox_lazy_writes = yes
    mbox_lock_timeout = 5 mins
    mbox_md5 = apop3d
    mbox_min_index_size = 0
    mbox_read_locks = fcntl
    mbox_very_dirty_syncs = no
    mbox_write_locks = dotlock fcntl
    mdbox_preallocate_space = no
    mdbox_rotate_interval = 0
    mdbox_rotate_size = 2 M
    mmap_disable = no
    namespace {
      hidden = no
      ignore_on_failure = no
      inbox = yes
      list = yes
      location = maildir:/var/vmail/%d/%n/Maildir/:LAYOUT=fs
      prefix = 
      separator = /
      subscriptions = yes
      type = private
    }
    passdb {
      args = /etc/dovecot/dovecot-sql.conf
      default_fields = 
      deny = no
      driver = sql
      master = no
      override_fields = 
      pass = no
    }
    plugin {
      listescape_char = \
      quota = dict:user::file:/var/vmail/%d/%n/.quotausage
      sieve = ~/.dovecot.sieve
      sieve_dir = ~/sieve
      sieve_global_path = /var/lib/dovecot/sieve/default.sieve
      sieve_max_actions = 32
      sieve_max_redirects = 4
      sieve_max_script_size = 1M
    }
    pop3_client_workarounds = 
    pop3_enable_last = no
    pop3_fast_size_lookups = no
    pop3_lock_session = no
    pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s
    pop3_no_flag_updates = no
    pop3_reuse_xuidl = no
    pop3_save_uidl = no
    pop3_uidl_duplicates = allow
    pop3_uidl_format = %08Xu%08Xv
    pop3c_host = 
    pop3c_password = 
    pop3c_port = 110
    pop3c_rawlog_dir = 
    pop3c_ssl = no
    pop3c_ssl_ca_dir = 
    pop3c_ssl_verify = yes
    pop3c_user = %u
    postmaster_address = 
    protocols = imap pop3 sieve
    quota_full_tempfail = no
    recipient_delimiter = +
    rejection_reason = Your message to <%t> was automatically rejected:%n%r
    rejection_subject = Rejected: %s
    replication_full_sync_interval = 12 hours
    replication_max_conns = 10
    replicator_host = replicator
    replicator_port = 0
    sendmail_path = /usr/sbin/sendmail
    service aggregator {
      chroot = .
      client_limit = 0
      drop_priv_before_exec = no
      executable = aggregator
      extra_groups = 
      fifo_listener replication-notify-fifo {
        group = 
        mode = 0600
        user = 
      }
      group = 
      idle_kill = 0
      privileged_group = 
      process_limit = 0
      process_min_avail = 0
      protocol = 
      service_count = 0
      type = 
      unix_listener replication-notify {
        group = 
        mode = 0600
        user = 
      }
      user = $default_internal_user
      vsz_limit = 18446744073709551615 B
    }
    service anvil {
      chroot = empty
      client_limit = 0
      drop_priv_before_exec = no
      executable = anvil
      extra_groups = 
      group = 
      idle_kill = 4294967295 secs
      privileged_group = 
      process_limit = 1
      process_min_avail = 1
      protocol = 
      service_count = 0
      type = anvil
      unix_listener anvil-auth-penalty {
        group = 
        mode = 0600
        user = 
      }
      unix_listener anvil {
        group = 
        mode = 0600
        user = 
      }
      user = $default_internal_user
      vsz_limit = 18446744073709551615 B
    }
    service auth-worker {
      chroot = 
      client_limit = 1
      drop_priv_before_exec = no
      executable = auth -w
      extra_groups = 
      group = 
      idle_kill = 0
      privileged_group = 
      process_limit = 0
      process_min_avail = 0
      protocol = 
      service_count = 1
      type = 
      unix_listener auth-worker {
        group = 
        mode = 0600
        user = $default_internal_user
      }
      user = root
      vsz_limit = 18446744073709551615 B
    }
    service auth {
      chroot = 
      client_limit = 0
      drop_priv_before_exec = no
      executable = auth
      extra_groups = 
      group = 
      idle_kill = 0
      privileged_group = 
      process_limit = 1
      process_min_avail = 0
      protocol = 
      service_count = 0
      type = 
      unix_listener /var/spool/postfix/private/auth {
        group = postfix
        mode = 0666
        user = postfix
      }
      unix_listener /var/spool/postfix/private/dovecot-auth {
        group = postfix
        mode = 0660
        user = postfix
      }
      unix_listener auth-client {
        group = 
        mode = 0600
        user = 
      }
      unix_listener auth-login {
        group = 
        mode = 0600
        user = $default_internal_user
      }
      unix_listener auth-master {
        group = 
        mode = 0600
        user = 
      }
      unix_listener auth-userdb {
        group = vmail
        mode = 0660
        user = vmail
      }
      unix_listener login/login {
        group = 
        mode = 0666
        user = 
      }
      user = $default_internal_user
      vsz_limit = 18446744073709551615 B
    }
    service config {
      chroot = 
      client_limit = 0
      drop_priv_before_exec = no
      executable = config
      extra_groups = 
      group = 
      idle_kill = 0
      privileged_group = 
      process_limit = 0
      process_min_avail = 0
      protocol = 
      service_count = 0
      type = config
      unix_listener config {
        group = 
        mode = 0600
        user = 
      }
      user = 
      vsz_limit = 18446744073709551615 B
    }
    service dict {
      chroot = 
      client_limit = 1
      drop_priv_before_exec = no
      executable = dict
      extra_groups = 
      group = 
      idle_kill = 0
      privileged_group = 
      process_limit = 0
      process_min_avail = 0
      protocol = 
      service_count = 0
      type = 
      unix_listener dict {
        group = vmail
        mode = 0660
        user = vmail
      }
      user = $default_internal_user
      vsz_limit = 18446744073709551615 B
    }
    service director {
      chroot = .
      client_limit = 0
      drop_priv_before_exec = no
      executable = director
      extra_groups = 
      fifo_listener login/proxy-notify {
        group = 
        mode = 00
        user = 
      }
      group = 
      idle_kill = 4294967295 secs
      privileged_group = 
      process_limit = 1
      process_min_avail = 0
      protocol = 
      service_count = 0
      type = 
      unix_listener director-admin {
        group = 
        mode = 0600
        user = 
      }
      unix_listener login/director {
        group = 
        mode = 00
        user = 
      }
      user = $default_internal_user
      vsz_limit = 18446744073709551615 B
    }
    service dns_client {
      chroot = 
      client_limit = 1
      drop_priv_before_exec = no
      executable = dns-client
      extra_groups = 
      group = 
      idle_kill = 0
      privileged_group = 
      process_limit = 0
      process_min_avail = 0
      protocol = 
      service_count = 0
      type = 
      unix_listener dns-client {
        group = 
        mode = 0666
        user = 
      }
      unix_listener login/dns-client {
        group = 
        mode = 0666
        user = 
      }
      user = $default_internal_user
      vsz_limit = 18446744073709551615 B
    }
    service doveadm {
      chroot = 
      client_limit = 1
      drop_priv_before_exec = no
      executable = doveadm-server
      extra_groups = 
      group = 
      idle_kill = 0
      privileged_group = 
      process_limit = 0
      process_min_avail = 0
      protocol = 
      service_count = 1
      type = 
      unix_listener doveadm-server {
        group = 
        mode = 0600
        user = 
      }
      user = 
      vsz_limit = 18446744073709551615 B
    }
    service imap-login {
      chroot = login
      client_limit = 0
      drop_priv_before_exec = no
      executable = imap-login
      extra_groups = 
      group = 
      idle_kill = 0
      inet_listener imap {
        address = 
        port = 143
        ssl = no
      }
      inet_listener imaps {
        address = 
        port = 993
        ssl = yes
      }
      privileged_group = 
      process_limit = 0
      process_min_avail = 0
      protocol = imap
      service_count = 1
      type = login
      user = $default_login_user
      vsz_limit = 18446744073709551615 B
    }
    service imap {
      chroot = 
      client_limit = 1
      drop_priv_before_exec = no
      executable = imap
      extra_groups = 
      group = 
      idle_kill = 0
      privileged_group = 
      process_limit = 1024
      process_min_avail = 0
      protocol = imap
      service_count = 1
      type = 
      unix_listener login/imap {
        group = 
        mode = 0666
        user = 
      }
      user = 
      vsz_limit = 18446744073709551615 B
    }
    service indexer-worker {
      chroot = 
      client_limit = 1
      drop_priv_before_exec = no
      executable = indexer-worker
      extra_groups = 
      group = 
      idle_kill = 0
      privileged_group = 
      process_limit = 10
      process_min_avail = 0
      protocol = 
      service_count = 0
      type = 
      unix_listener indexer-worker {
        group = 
        mode = 0600
        user = $default_internal_user
      }
      user = 
      vsz_limit = 18446744073709551615 B
    }
    service indexer {
      chroot = 
      client_limit = 0
      drop_priv_before_exec = no
      executable = indexer
      extra_groups = 
      group = 
      idle_kill = 0
      privileged_group = 
      process_limit = 1
      process_min_avail = 0
      protocol = 
      service_count = 0
      type = 
      unix_listener indexer {
        group = 
        mode = 0666
        user = 
      }
      user = $default_internal_user
      vsz_limit = 18446744073709551615 B
    }
    service ipc {
      chroot = empty
      client_limit = 0
      drop_priv_before_exec = no
      executable = ipc
      extra_groups = 
      group = 
      idle_kill = 0
      privileged_group = 
      process_limit = 1
      process_min_avail = 0
      protocol = 
      service_count = 0
      type = 
      unix_listener ipc {
        group = 
        mode = 0600
        user = 
      }
      unix_listener login/ipc-proxy {
        group = 
        mode = 0600
        user = $default_login_user
      }
      user = $default_internal_user
      vsz_limit = 18446744073709551615 B
    }
    service lmtp {
      chroot = 
      client_limit = 1
      drop_priv_before_exec = no
      executable = lmtp
      extra_groups = 
      group = 
      idle_kill = 0
      privileged_group = 
      process_limit = 0
      process_min_avail = 0
      protocol = lmtp
      service_count = 0
      type = 
      unix_listener lmtp {
        group = 
        mode = 0666
        user = 
      }
      user = 
      vsz_limit = 18446744073709551615 B
    }
    service log {
      chroot = 
      client_limit = 0
      drop_priv_before_exec = no
      executable = log
      extra_groups = 
      group = 
      idle_kill = 4294967295 secs
      privileged_group = 
      process_limit = 1
      process_min_avail = 0
      protocol = 
      service_count = 0
      type = log
      unix_listener log-errors {
        group = 
        mode = 0600
        user = 
      }
      user = 
      vsz_limit = 18446744073709551615 B
    }
    service managesieve-login {
      chroot = login
      client_limit = 0
      drop_priv_before_exec = no
      executable = managesieve-login
      extra_groups = 
      group = 
      idle_kill = 0
      inet_listener sieve {
        address = 
        port = 4190
        ssl = no
      }
      privileged_group = 
      process_limit = 0
      process_min_avail = 0
      protocol = sieve
      service_count = 1
      type = login
      user = $default_login_user
      vsz_limit = 18446744073709551615 B
    }
    service managesieve {
      chroot = 
      client_limit = 1
      drop_priv_before_exec = no
      executable = managesieve
      extra_groups = 
      group = 
      idle_kill = 0
      privileged_group = 
      process_limit = 0
      process_min_avail = 0
      protocol = sieve
      service_count = 1
      type = 
      unix_listener login/sieve {
        group = 
        mode = 0666
        user = 
      }
      user = 
      vsz_limit = 18446744073709551615 B
    }
    service pop3-login {
      chroot = login
      client_limit = 0
      drop_priv_before_exec = no
      executable = pop3-login
      extra_groups = 
      group = 
      idle_kill = 0
      inet_listener pop3 {
        address = 
        port = 110
        ssl = no
      }
      inet_listener pop3s {
        address = 
        port = 995
        ssl = yes
      }
      privileged_group = 
      process_limit = 0
      process_min_avail = 0
      protocol = pop3
      service_count = 1
      type = login
      user = $default_login_user
      vsz_limit = 18446744073709551615 B
    }
    service pop3 {
      chroot = 
      client_limit = 1
      drop_priv_before_exec = no
      executable = pop3
      extra_groups = 
      group = 
      idle_kill = 0
      privileged_group = 
      process_limit = 1024
      process_min_avail = 0
      protocol = pop3
      service_count = 1
      type = 
      unix_listener login/pop3 {
        group = 
        mode = 0666
        user = 
      }
      user = 
      vsz_limit = 18446744073709551615 B
    }
    service replicator {
      chroot = 
      client_limit = 0
      drop_priv_before_exec = no
      executable = replicator
      extra_groups = 
      group = 
      idle_kill = 4294967295 secs
      privileged_group = 
      process_limit = 1
      process_min_avail = 0
      protocol = 
      service_count = 0
      type = 
      unix_listener replicator {
        group = 
        mode = 0600
        user = $default_internal_user
      }
      user = 
      vsz_limit = 18446744073709551615 B
    }
    service ssl-params {
      chroot = 
      client_limit = 0
      drop_priv_before_exec = no
      executable = ssl-params
      extra_groups = 
      group = 
      idle_kill = 0
      privileged_group = 
      process_limit = 0
      process_min_avail = 0
      protocol = 
      service_count = 0
      type = startup
      unix_listener login/ssl-params {
        group = 
        mode = 0666
        user = 
      }
      user = 
      vsz_limit = 18446744073709551615 B
    }
    service stats {
      chroot = empty
      client_limit = 0
      drop_priv_before_exec = no
      executable = stats
      extra_groups = 
      fifo_listener stats-mail {
        group = 
        mode = 0600
        user = 
      }
      group = 
      idle_kill = 4294967295 secs
      privileged_group = 
      process_limit = 1
      process_min_avail = 0
      protocol = 
      service_count = 0
      type = 
      unix_listener stats {
        group = 
        mode = 0600
        user = 
      }
      user = $default_internal_user
      vsz_limit = 18446744073709551615 B
    }
    shutdown_clients = yes
    ssl = yes
    ssl_ca = 
    ssl_cert = </etc/ssl/certs/ssl-mail.pem
    ssl_cert_username_field = commonName
    ssl_cipher_list = ALL:!LOW:!SSLv2:ALL:!aNULL:!ADH:!eNULL:!EXP:RC4+RSA:+HIGH:+MEDIUM
    ssl_client_cert = 
    ssl_client_key = 
    ssl_crypto_device = 
    ssl_key = </etc/ssl/private/ssl-mail.key
    ssl_key_password = 
    ssl_parameters_regenerate = 1 weeks
    ssl_protocols = !SSLv2
    ssl_require_crl = yes
    ssl_verify_client_cert = no
    stats_command_min_time = 1 mins
    stats_domain_min_time = 12 hours
    stats_ip_min_time = 12 hours
    stats_memory_limit = 16 M
    stats_session_min_time = 15 mins
    stats_user_min_time = 1 hours
    submission_host = 
    syslog_facility = mail
    userdb {
      args = /etc/dovecot/dovecot-sql.conf
      default_fields = 
      driver = sql
      override_fields = 
    }
    valid_chroot_dirs = 
    verbose_proctitle = no
    verbose_ssl = no
    version_ignore = no
    protocol imap {
      imap_client_workarounds = tb-extra-mailbox-sep tb-lsub-flags delay-newmail
      mail_max_userip_connections = 10
      mail_plugins = quota imap_quota listescape virtual
    }
    protocol pop3 {
      mail_max_userip_connections = 10
      mail_plugins = quota
      pop3_client_workarounds = outlook-no-nuls,oe-ns-eoh
      pop3_uidl_format = %08Xu%08Xv
    }
    protocol lda {
      auth_socket_path = /var/run/dovecot/auth-master
      deliver_log_format = msgid=%m: %$
      mail_plugins = quota listescape
      postmaster_address = [email protected]
      quota_full_tempfail = yes
      rejection_reason = Your message to <%t> was automatically rejected:%n%r
    }
    protocol sieve {
      mail_max_userip_connections = 10
      managesieve_implementation_string = Dovecot Pigeonhole
      managesieve_max_compile_errors = 5
    }
    

    Postfix Set-Up is as follows (extracted using $> postconf -n)
    Code:
    alias_database = hash:/etc/aliases, hash:/var/lib/mailman/data/aliases
    alias_maps = hash:/etc/aliases, hash:/var/lib/mailman/data/aliases
    append_dot_mydomain = no
    biff = no
    body_checks = regexp:/etc/postfix/body_checks
    broken_sasl_auth_clients = yes
    config_directory = /etc/postfix
    content_filter = amavis:[127.0.0.1]:10024
    disable_vrfy_command = yes
    dovecot_destination_recipient_limit = 1
    header_checks = regexp:/etc/postfix/header_checks
    home_mailbox = Maildir/
    html_directory = /usr/share/doc/postfix/html
    inet_interfaces = all
    inet_protocols = all
    invalid_hostname_reject_code = 554
    mailbox_command = /usr/lib/dovecot/deliver -c /etc/dovecot/conf.d/01-mail-stack-delivery.conf -m "${EXTENSION}"
    mailbox_size_limit = 0
    maildrop_destination_concurrency_limit = 1
    maildrop_destination_recipient_limit = 1
    mailman_destination_recipient_limit = 1
    message_size_limit = 0
    mime_header_checks = regexp:/etc/postfix/mime_header_checks
    multi_recipient_bounce_reject_code = 554
    mydestination = server01.typoworx.de, server02.typoworx.de, localhost, localhost.localdomain
    myhostname = server01.typoworx.de
    mynetworks = 127.0.0.0/8 [::1]/128
    myorigin = /etc/mailname
    nested_header_checks = regexp:/etc/postfix/nested_header_checks
    non_fqdn_reject_code = 554
    owner_request_special = no
    policy-spf_time_limit = 3600s
    proxy_read_maps = $local_recipient_maps $mydestination $virtual_alias_maps $virtual_alias_domains $virtual_mailbox_maps $virtual_mailbox_domains $relay_recipient_maps $relay_domains $canonical_maps $sender_canonical_maps $recipient_canonical_maps $relocated_maps $transport_maps $mynetworks $virtual_mailbox_limit_maps
    readme_directory = /usr/share/doc/postfix
    receive_override_options = no_address_mappings
    recipient_delimiter = +
    relay_domains = mysql:/etc/postfix/mysql-virtual_relaydomains.cf
    relay_domains_reject_code = 554
    relay_recipient_maps = mysql:/etc/postfix/mysql-virtual_relayrecipientmaps.cf
    relayhost =
    smtp_helo_timeout = 60s
    smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache
    smtp_use_tls = yes
    smtpd_banner = $myhostname ESMTP $mail_name (Ubuntu)
    smtpd_client_message_rate_limit = 100
    smtpd_client_restrictions = check_client_access mysql:/etc/postfix/mysql-virtual_client.cf
    smtpd_data_restrictions = reject_multi_recipient_bounce, reject_unauth_pipelining, permit
    smtpd_delay_reject = yes
    smtpd_hard_error_limit = 12
    smtpd_helo_required = yes
    smtpd_helo_restrictions = reject_invalid_hostname, permit_mynetworks, permit
    smtpd_recipient_limit = 16
    smtpd_recipient_restrictions = permit_mynetworks, check_recipient_access mysql:/etc/postfix/mysql-virtual_recipient.cf, permit_sasl_authenticated, reject_non_fqdn_recipient, reject_invalid_hostname, reject_unauth_destination, reject_unknown_recipient_domain, check_client_access hash:/etc/postfix/rbl_whitelist, check_recipient_access hash:/etc/postfix/rbl_whitelist, check_policy_service unix:private/policy-spf, reject_rbl_client zen.spamhaus.org, reject_rhsbl_sender dsn.rfc-ignorant.org, permit
    smtpd_sasl_auth_enable = yes
    smtpd_sasl_authenticated_header = yes
    smtpd_sasl_local_domain = $myhostname
    smtpd_sasl_path = private/auth
    smtpd_sasl_security_options = noanonymous
    smtpd_sasl_type = dovecot
    smtpd_sender_restrictions = check_sender_access mysql:/etc/postfix/mysql-virtual_sender.cf
    smtpd_soft_error_limit = 3
    smtpd_tls_auth_only = yes
    smtpd_tls_cert_file = /etc/dovecot/certs/dovecot.pem
    smtpd_tls_key_file = /etc/dovecot/private/dovecot.pem
    smtpd_tls_mandatory_ciphers = medium
    smtpd_tls_mandatory_protocols = SSLv3, TLSv1
    smtpd_tls_received_header = yes
    smtpd_tls_security_level = may
    smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
    smtpd_use_tls = yes
    soft_bounce = yes
    strict_rfc821_envelopes = yes
    tls_random_source = dev:/dev/urandom
    transport_maps = hash:/var/lib/mailman/data/transport-mailman, proxy:mysql:/etc/postfix/mysql-virtual_transports.cf
    unknown_address_reject_code = 554
    unknown_client_reject_code = 554
    unknown_hostname_reject_code = 554
    unknown_local_recipient_reject_code = 554
    unknown_relay_recipient_reject_code = 554
    unknown_virtual_alias_reject_code = 554
    unknown_virtual_mailbox_reject_code = 554
    unverified_recipient_reject_code = 554
    unverified_sender_reject_code = 554
    virtual_alias_domains =
    virtual_alias_maps = proxy:mysql:/etc/postfix/mysql-virtual_forwardings.cf, proxy:mysql:/etc/postfix/mysql-virtual_email2email.cf, hash:/var/lib/mailman/data/virtual-mailman
    virtual_gid_maps = static:5000
    virtual_mailbox_base = /srv/vmail
    virtual_mailbox_domains = proxy:mysql:/etc/postfix/mysql-virtual_domains.cf
    virtual_mailbox_maps = proxy:mysql:/etc/postfix/mysql-virtual_mailboxes.cf
    virtual_maps = hash:/var/lib/mailman/data/virtual-mailman
    virtual_transport = dovecot
    virtual_uid_maps = static:5000
    
     

Share This Page