Re: letsencrypt

2017-03-03 Thread Mark Constable
On 04/03/17 04:07, David Mehler wrote: With the web it was easy just let apache serve the token that letsencrypt needed and I got certificates. How do I do this with regards email? I know there have been some answers to this already but FWIW I use dehydrated directly from Github and this script

Re: letsencrypt

2017-03-03 Thread Joseph Tam
Thanks. Is there another way of doing this? I've got a web server running on 80 and 443. Are there any other options? I'm getting this list in digest mode, so it's possible by the time this gets to you, I will have repeated someone else' suggestion. In this situation, where your dovecot serve

Re: letsencrypt

2017-03-03 Thread Jeff Kletsky
You can either drop the authentication token into /.wellknown on your running server, or take down the server for a minute to run certbot every couple months. I'm not a fan of symlinks out of config directories and certainly not across chroot / jail boundaries so I manually copy the certs into th

Re: letsencrypt

2017-03-03 Thread Joseph Tam
David Mehler writes: I'm wanting letsencrypt to take over as my CA, replacing existing self signed certificates. I've got web working, a certificate for https sites and one for webmail as they have different names. What I'm now wanting to do is get letsencrypt going for my email setup, the smt

Re: letsencrypt

2017-03-03 Thread dovecot
Hello, Have you considered running getssl bash script? It is well documented, self-updates automatically, supports https, imaps, pop3s, ... and can push validation tokens to your web server using rsync, ftp, ... See https://github.com/srvrco/getssl/blob/master/README.md Cheers On 03/03/2017 08

Re: letsencrypt

2017-03-03 Thread mj
Yes: I'm using the acme.sh client, and I can do: > acme.sh --issue --standalone -d example.com --httpport 88 It does what you'd expect: it runs using a small webserver on port 88 I only just discovered that option myself :-) MJ On 03/03/2017 08:22 PM, David Mehler wrote: Hello, Thanks. Is

Re: letsencrypt

2017-03-03 Thread David Mehler
Hello, Thanks. Is there another way of doing this? I've got a web server running on 80 and 443. Are there any other options? Thanks. Dave. On 3/3/17, Michael Neurohr wrote: > On 2017-03-03 19:07, David Mehler wrote: >> Hello, >> >> I know some users here are using letsencrypt for their CA. If

Re: letsencrypt

2017-03-03 Thread Michael Neurohr
On 2017-03-03 19:07, David Mehler wrote: > Hello, > > I know some users here are using letsencrypt for their CA. If this is > to off topic write me privately. > > I'm wanting letsencrypt to take over as my CA, replacing existing self > signed certificates. I've got web working, a certificate for

Re: letsencrypt

2017-03-03 Thread KSB
You can also setup web server to handle auth for particular domain or use certbot's standalone auth, but in that case, 80 or 443 port must be free to allow certbot's temporary web server to run on that port. -- KSB On 2017.03.03. 20:08, Larry Rosenman wrote: I have DNS setup as my auth, and

Re: letsencrypt

2017-03-03 Thread David Mehler
Hello, Thanks, should have mentioned dns tokens are not possible in my situation. Thanks. Dave. On 3/3/17, Larry Rosenman wrote: > I have DNS setup as my auth, and use nsupdate to let it get the token. > > > > On 3/3/17, 12:07 PM, "dovecot on behalf of David Mehler" > wrote: > > Hello, >

Re: welcome plugin

2017-03-03 Thread David Mehler
Hello, Perms are 775 on that folder. If you've got a working configuration can you do a doveconf -n and let me see it? I'd like to compare yours to mine. And if you've got a working welcome script i'd like to see that as well. Thanks. Dave. On 3/3/17, @lbutlr wrote: > On 2017-03-02 (17:51 MS

Re: letsencrypt

2017-03-03 Thread Larry Rosenman
I have DNS setup as my auth, and use nsupdate to let it get the token. On 3/3/17, 12:07 PM, "dovecot on behalf of David Mehler" wrote: Hello, I know some users here are using letsencrypt for their CA. If this is to off topic write me privately. I'm wanting letsencry

letsencrypt

2017-03-03 Thread David Mehler
Hello, I know some users here are using letsencrypt for their CA. If this is to off topic write me privately. I'm wanting letsencrypt to take over as my CA, replacing existing self signed certificates. I've got web working, a certificate for https sites and one for webmail as they have different

Re: Director+NFS Experiences

2017-03-03 Thread Alessio Cecchi
Il 23/02/2017 23:08, Mark Moseley ha scritto: As someone who is about to begin the process of moving from maildir to mdbox on NFS (and therefore just about to start the 'director-ization' of everything) for ~6.5m mailboxes, I'm curious if anyone can share any experiences with it. The list is surp

RE: Mailbox size in log file

2017-03-03 Thread Sergio Bastian Rodríguez
Wow, Teemu, it sounds great I am looking forward to seeing this point in your roadmap working. Thanks for the update. Sergio Bastián Rodríguez Arquitectura y servicios de red Tlf.: +34 984 19 12 65 Fax: +34 984 19 10 01 Móvil: +34 684 69 63 09 Parque Científico y Tecnológico de Gijón P

RE: Mailbox size in log file

2017-03-03 Thread Sergio Bastian Rodríguez
Hello Alessio, thanks for the information. This is the default information in Bytes in all logout POP session. In think that in the login we haven't anything about size information, at least I haven't found out any option on 20-pop3.conf file. But, is possible to have this info in IMAP sessions?

Re: Dovecot + SpamAssassin through dovecot-antispam

2017-03-03 Thread Bernard
Hello Steffen, Dovecot version: v2.2.13 It seems there is no problem on mail reception step when piped through dovecot. However, running it afterwards is another story. SpamAssassin is run as debian-spamd and thus has its information stored in its own environment (isolation). As an exemple, if y

Re: Dovecot + SpamAssassin through dovecot-antispam

2017-03-03 Thread Steffen Kaiser
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Fri, 3 Mar 2017, Bernard wrote: On 01/03/2017 11:27, Bernard wrote: Hello, I am new to the list. /Waving at everyone/ I got a basic SpamAssassin working on a Debian setup (w/ debian-spamd user), running as a Postfix transport. I am currently

Do I need to configure director?

2017-03-03 Thread Angel L. Mateo
Hi, I'm configuring a farm of dovecot proxies redirecting users to backend servers. The decision of which backend server is used for a user is based in its ldap account information. In my previous configuration I was using an inherited director configuration in these proxy servers, but now

Re: Dovecot + SpamAssassin through dovecot-antispam

2017-03-03 Thread Matthew Broadhead
i recently had this problem. i am using centos 7. maybe these links will help you i reverted to the old antispam plugin as a package from https://copr.fedorainfracloud.org/coprs/cottsay/dovecot-antispam/ plus this to help configure http://www.iredmail.org/forum/topic8169-iredmail-support-antis

Re: Upgrade from 2.0. to 2.2

2017-03-03 Thread Aki Tuomi
On 2017-03-03 13:22, Jakob Curdes wrote: Hello, we have a centos 6 server running dovecot 2.0 provided with the OS, currently 2.0.9. We would like to upgrade to the 2.2.19 package provided by the mailserver.guru repo. I read the upgrading docs for 2.1 and 2.2 and found the following issues:

Re: Dovecot + SpamAssassin through dovecot-antispam

2017-03-03 Thread Aki Tuomi
On 2017-03-03 10:26, Bernard wrote: No help there? --- Bernard On 01/03/2017 11:27, Bernard wrote: Hello, I am new to the list. /Waving at everyone/ I got a basic SpamAssassin working on a Debian setup (w/ debian-spamd user), running as a Postfix transport. I am currently trying to switch

Re: passdb evaluation order

2017-03-03 Thread Aki Tuomi
On 2017-03-03 10:42, Angel L. Mateo wrote: Hello, I could have several password databases in dovecot. And according to http://wiki.dovecot.org/PasswordDatabase these passwdbs could allow or deny users and they could have different result_failure and result_sucess behaviors. So the order

Upgrade from 2.0. to 2.2

2017-03-03 Thread Jakob Curdes
Hello, we have a centos 6 server running dovecot 2.0 provided with the OS, currently 2.0.9. We would like to upgrade to the 2.2.19 package provided by the mailserver.guru repo. I read the upgrading docs for 2.1 and 2.2 and found the following issues: 2.0 - 2.1: - define namespace inbox or dele

Re: passdb evaluation order

2017-03-03 Thread Eirik Rye
Den 03.03.2017 09.42, skrev Angel L. Mateo: Hello, I could have several password databases in dovecot. And according to http://wiki.dovecot.org/PasswordDatabase these passwdbs could allow or deny users and they could have different result_failure and result_sucess behaviors. So the order in

passdb evaluation order

2017-03-03 Thread Angel L. Mateo
Hello, I could have several password databases in dovecot. And according to http://wiki.dovecot.org/PasswordDatabase these passwdbs could allow or deny users and they could have different result_failure and result_sucess behaviors. So the order in which they are evaluated may be significant.

Re: Dovecot + SpamAssassin through dovecot-antispam

2017-03-03 Thread Bernard
No help there? --- Bernard On 01/03/2017 11:27, Bernard wrote: > Hello, > > I am new to the list. /Waving at everyone/ > > I got a basic SpamAssassin working on a Debian setup (w/ debian-spamd > user), running as a Postfix transport. > > I am currently trying to switch it to a dovecot plugin in or