Advertisement
Guest User

Untitled

a guest
Jun 16th, 2017
128
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 17.89 KB | None | 0 0
  1. protocols = imap pop3 imaps pop3s
  2. listen = *
  3. disable_plaintext_auth = no
  4. shutdown_clients = yes
  5. log_path = /var/log/dovecot.log
  6. log_timestamp = ""
  7. ssl_cert_file = /var/easypush/etc/certificates/server.crt
  8. ssl_key_file = /var/easypush/etc/certificates/server.key
  9. #ssl_key_password =
  10. #ssl_ca_file =
  11. #ssl_verify_client_cert = no
  12. #ssl_parameters_regenerate = 168
  13. #ssl_cipher_list = ALL:!LOW
  14. #verbose_ssl = no
  15. login_user = dovecot
  16. login_process_size = 32
  17. login_process_per_connection = yes
  18. login_processes_count = 3
  19. # Read this in from Easypush settings
  20. #login_max_processes_count = 128
  21. #login_max_connections = 256
  22.  
  23. # Greeting message for clients.
  24. login_greeting = Namaskar (hello) deepOfix Mail Server Welcomes you.
  25.  
  26. # Space-separated list of elements we want to log. The elements which have
  27. # a non-empty variable value are joined together to form a comma-separated
  28. # string.
  29. #login_log_format_elements = user=<%u> method=%m rip=%r lip=%l %c
  30.  
  31. # Login log format. %$ contains login_log_format_elements string, %s contains
  32. # the data we want to log.
  33. #login_log_format = %$: %s
  34.  
  35. ##
  36. ## Mailbox locations and namespaces
  37. ##
  38.  
  39.  
  40. mail_location = maildir:~/Maildir
  41.  
  42. # REMEMBER: If you add any namespaces, the default namespace must be added
  43. # explicitly, ie. mail_location does nothing unless you have a namespace
  44. # without a location setting. Default namespace is simply done by having a
  45. # namespace with empty prefix.
  46. namespace private {
  47. # Hierarchy separator to use. You should use the same separator for all
  48. # namespaces or some clients get confused. '/' is usually a good one.
  49. # The default however depends on the underlying mail storage format.
  50. separator = .
  51.  
  52. # Prefix required to access this namespace. This needs to be different for
  53. # all namespaces. For example "Public/".
  54. prefix = INBOX.
  55.  
  56. # Physical location of the mailbox. This is in same format as
  57. # mail_location, which is also the default for it.
  58. location = maildir:~/Maildir
  59.  
  60. # There can be only one INBOX, and this setting defines which namespace
  61. # has it.
  62. inbox = yes
  63.  
  64. # If namespace is hidden, it's not advertised to clients via NAMESPACE
  65. # extension or shown in LIST replies. This is mostly useful when converting
  66. # from another server with different namespaces which you want to depricate
  67. # but still keep working. For example you can create hidden namespaces with
  68. # prefixes "~/mail/", "~%u/mail/" and "mail/".
  69. hidden = no
  70.  
  71. }
  72.  
  73. # Grant access to these extra groups for mail processes. Typical use would be
  74. # to give "mail" group write access to /var/mail to be able to create dotlocks.
  75. # The dovecot processes get these groups' privileges in addition to the dovecot
  76. # ones; the list of groups must be separated by spaces.
  77. mail_extra_groups = mail
  78.  
  79. ##
  80. ## Mail processes
  81. ##
  82.  
  83. # Enable mail process debugging. This can help you figure out why Dovecot
  84. # isn't finding your mails.
  85. mail_debug = yes
  86.  
  87. # Don't use mmap() at all. This is required if you store indexes to shared
  88. # filesystems (NFS or clustered filesystem).
  89. #mmap_disable = no
  90.  
  91. # Don't write() to mmaped files. This is required for some operating systems
  92. # which use separate caches for them, such as OpenBSD.
  93. #mmap_no_write = no
  94.  
  95. # Don't use fsync() or fdatasync() calls. This makes the performance better
  96. # at the cost of potential data loss if the server (or the file server)
  97. # goes down.
  98. #fsync_disable = no
  99.  
  100. # Show more verbose process titles (in ps). Currently shows user name and
  101. # IP address. Useful for seeing who are actually using the IMAP processes
  102. # (eg. shared mailboxes or if same uid is used for multiple accounts).
  103. verbose_proctitle = yes
  104.  
  105. # Valid UID range for users, defaults to 500 and above. This is mostly
  106. # to make sure that users can't log in as daemons or other system users.
  107. # Note that denying root logins is hardcoded to dovecot binary and can't
  108. # be done even if first_valid_uid is set to 0.
  109. first_valid_uid = 1000
  110. #last_valid_uid = 0
  111.  
  112. # Valid GID range for users, defaults to non-root/wheel. Users having
  113. # non-valid GID as primary group ID aren't allowed to log in. If user
  114. # belongs to supplementary groups with non-valid GIDs, those groups are
  115. # not set.
  116. #first_valid_gid = 1
  117. #last_valid_gid = 0
  118.  
  119. # Maximum number of running mail processes. When this limit is reached,
  120. # new users aren't allowed to log in.
  121. #max_mail_processes = 1024
  122.  
  123. # Set max. process size in megabytes. Most of the memory goes to mmap()ing
  124. # files, so it shouldn't harm much even if this limit is set pretty high.
  125. #mail_process_size = 256
  126.  
  127. # When copying a message, do it with hard links whenever possible. This makes
  128. # the performance much better, and it's unlikely to have any side effects.
  129. #maildir_copy_with_hardlinks = no
  130.  
  131. # When copying a message, try to preserve the base filename. Only if the
  132. # destination mailbox already contains the same name (ie. the mail is being
  133. # copied there twice), a new name is given. The destination filename check is
  134. # done only by looking at dovecot-uidlist file, so if something outside
  135. # Dovecot does similar filename preserving copies, you may run into problems.
  136. # NOTE: This setting requires maildir_copy_with_hardlinks = yes to work.
  137. #maildir_copy_preserve_filename = no
  138.  
  139. protocol imap {
  140. # Login executable location.
  141. #login_executable = /usr/lib/dovecot/imap-login
  142.  
  143. # IMAP executable location. Changing this allows you to execute other
  144. # binaries before the imap process is executed.
  145. #
  146. # This would write rawlogs into ~/dovecot.rawlog/ directory:
  147. # mail_executable = /usr/lib/dovecot/rawlog /usr/lib/dovecot/imap
  148. #
  149. # This would attach gdb into the imap process and write backtraces into
  150. # /tmp/gdbhelper.* files:
  151. # mail_executable = /usr/libexec/dovecot/gdbhelper /usr/libexec/dovecot/imap
  152. #
  153. #mail_executable = /usr/lib/dovecot/imap
  154.  
  155. # Maximum IMAP command line length in bytes. Some clients generate very long
  156. # command lines with huge mailboxes, so you may need to raise this if you get
  157. # "Too long argument" or "IMAP command line too large" errors often.
  158. #imap_max_line_length = 65536
  159.  
  160. # Support for dynamically loadable plugins. mail_plugins is a space separated
  161. # list of plugins to load.
  162. mail_plugins = quota imap_quota
  163. #mail_plugin_dir = /usr/lib/dovecot/modules/imap
  164.  
  165. # Send IMAP capabilities in greeting message. This makes it unnecessary for
  166. # clients to request it with CAPABILITY command, so it saves one round-trip.
  167. # Many clients however don't understand it and ask the CAPABILITY anyway.
  168. #login_greeting_capability = no
  169.  
  170. # Override the IMAP CAPABILITY response.
  171. #imap_capability =
  172.  
  173. # Workarounds for various clien/t bugs:
  174. # delay-newmail:
  175. # Send EXISTS/RECENT new mail notifications only when replying to NOOP
  176. # and CHECK commands. Some clients ignore them otherwise, for example OSX
  177. # Mail (<v2.1). Outlook Express breaks more badly though, without this it
  178. # may show user "Message no longer in server" errors. Note that OE6 still
  179. # breaks even with this workaround if synchronization is set to
  180. # "Headers Only".
  181. # outlook-idle:
  182. # Outlook and Outlook Express never abort IDLE command, so if no mail
  183. # arrives in half a hour, Dovecot closes the connection. This is still
  184. # fine, except Outlook doesn't connect back so you don't see if new mail
  185. # arrives.
  186. # netscape-eoh:
  187. # Netscape 4.x breaks if message headers don't end with the empty "end of
  188. # headers" line. Normally all messages have this, but setting this
  189. # workaround makes sure that Netscape never breaks by adding the line if
  190. # it doesn't exist. This is done only for FETCH BODY[HEADER.FIELDS..]
  191. # commands. Note that RFC says this shouldn't be done.
  192. # tb-extra-mailbox-sep:
  193. # With mbox storage a mailbox can contain either mails or submailboxes,
  194. # but not both. Thunderbird separates these two by forcing server to
  195. # accept '/' suffix in mailbox names in subscriptions list.
  196. # The list is space-separated.
  197. imap_client_workarounds = outlook-idle
  198. }
  199.  
  200. ##
  201. ## POP3 specific settings
  202. ##
  203.  
  204. protocol pop3 {
  205. # Login executable location.
  206. #login_executable = /usr/lib/dovecot/pop3-login
  207.  
  208. # POP3 executable location. See IMAP's mail_executable above for examples
  209. # how this could be changed.
  210. #mail_executable = /usr/lib/dovecot/pop3
  211.  
  212. # Don't try to set mails non-recent or seen with POP3 sessions. This is
  213. # mostly intended to reduce disk I/O. With maildir it doesn't move files
  214. # from new/ to cur/, with mbox it doesn't write Status-header.
  215. #pop3_no_flag_updates = no
  216.  
  217. # Support LAST command which exists in old POP3 specs, but has been removed
  218. # from new ones. Some clients still wish to use this though. Enabling this
  219. # makes RSET command clear all \Seen flags from messages.
  220. #pop3_enable_last = no
  221.  
  222. # If mail has X-UIDL header, use it as the mail's UIDL.
  223. #pop3_reuse_xuidl = no
  224.  
  225. # Keep the mailbox locked for the entire POP3 session.
  226. #pop3_lock_session = no
  227. pop3_uidl_format = UID%u-%v
  228.  
  229. # POP3 logout format string:
  230. # %t - number of TOP commands
  231. # %p - number of bytes sent to client as a result of TOP command
  232. # %r - number of RETR commands
  233. # %b - number of bytes sent to client as a result of RETR command
  234. # %d - number of deleted messages
  235. # %m - number of messages (before deletion)
  236. # %s - mailbox size in bytes (before deletion)
  237. #pop3_logout_format = top=%t/%p, retr=%r/%b, del=%d/%m, size=%s
  238.  
  239. # Support for dynamically loadable plugins. mail_plugins is a space separated
  240. # list of plugins to load.
  241. mail_plugins = quota
  242. #mail_plugin_dir = /usr/lib/dovecot/modules/pop3
  243.  
  244. # Workarounds for various client bugs:
  245. # outlook-no-nuls:
  246. # Outlook and Outlook Express hang if mails contain NUL characters.
  247. # This setting replaces them with 0x80 character.
  248. # oe-ns-eoh:
  249. # Outlook Express and Netscape Mail breaks if end of headers-line is
  250. # missing. This option simply sends it if it's missing.
  251. # The list is space-separated.
  252. #pop3_client_workarounds =
  253. }
  254.  
  255. # Executable location
  256. #auth_executable = /usr/lib/dovecot/dovecot-auth
  257.  
  258. # Set max. process size in megabytes.
  259. #auth_process_size = 256
  260.  
  261. # Authentication cache size in kilobytes. 0 means it's disabled.
  262. # Note that bsdauth, PAM and vpopmail require cache_key to be set for caching
  263. # to be used.
  264. #auth_cache_size = 0
  265. # Time to live in seconds for cached data. After this many seconds the cached
  266. # record is no longer used, *except* if the main database lookup returns
  267. # internal failure. We also try to handle password changes automatically: If
  268. # user's previous authentication was successful, but this one wasn't, the
  269. # cache isn't used. For now this works only with plaintext authentication.
  270. #auth_cache_ttl = 3600
  271.  
  272. # Space separated list of realms for SASL authentication mechanisms that need
  273. # them. You can leave it empty if you don't want to support multiple realms.
  274. # Many clients simply use the first one listed here, so keep the default realm
  275. # first.
  276. #auth_realms =
  277.  
  278. # Default realm/domain to use if none was specified. This is used for both
  279. # SASL realms and appending @domain to username in plaintext logins.
  280. #auth_default_realm =
  281.  
  282. # List of allowed characters in username. If the user-given username contains
  283. # a character not listed in here, the login automatically fails. This is just
  284. # an extra check to make sure user can't exploit any potential quote escaping
  285. # vulnerabilities with SQL/LDAP databases. If you want to allow all characters,
  286. # set this value to empty.
  287. auth_username_chars = abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567890.-_@
  288.  
  289. # Username character translations before it's looked up from databases. The
  290. # value contains series of from -> to characters. For example "#@/@" means
  291. # that '#' and '/' characters are translated to '@'.
  292. #auth_username_translation =
  293.  
  294. # Username formatting before it's looked up from databases. You can use
  295. # the standard variables here, eg. %Lu would lowercase the username, %n would
  296. # drop away the domain if it was given, or "%n-AT-%d" would change the '@' into
  297. # "-AT-". This translation is done after auth_username_translation changes.
  298. #auth_username_format =
  299.  
  300. # If you want to allow master users to log in by specifying the master
  301. # username within the normal username string (ie. not using SASL mechanism's
  302. # support for it), you can specify the separator character here. The format
  303. # is then <username><separator><master username>. UW-IMAP uses "*" as the
  304. # separator, so that could be a good choice.
  305. #auth_master_user_separator =
  306.  
  307. # Username to use for users logging in with ANONYMOUS SASL mechanism
  308. #auth_anonymous_username = anonymous
  309.  
  310. # More verbose logging. Useful for figuring out why authentication isn't
  311. # working.
  312. #auth_verbose = no
  313.  
  314. # Even more verbose logging for debugging purposes. Shows for example SQL
  315. # queries.
  316. auth_debug = yes
  317.  
  318. # In case of password mismatches, log the passwords and used scheme so the
  319. # problem can be debugged. Requires auth_debug=yes to be set.
  320. #auth_debug_passwords = no
  321.  
  322. # Maximum number of dovecot-auth worker processes. They're used to execute
  323. # blocking passdb and userdb queries (eg. MySQL and PAM). They're
  324. # automatically created and destroyed as needed.
  325. #auth_worker_max_count = 30
  326.  
  327. # Host name to use in GSSAPI principal names. The default is to use the
  328. # name returned by gethostname().
  329. #auth_gssapi_hostname =
  330.  
  331. # Kerberos keytab to use for the GSSAPI mechanism. Will use the system
  332. # default (usually /etc/krb5.keytab) if not specified.
  333. #auth_krb5_keytab =
  334.  
  335. auth default {
  336. # Space separated list of wanted authentication mechanisms:
  337. # plain login digest-md5 cram-md5 ntlm rpa apop anonymous gssapi
  338. mechanisms = plain
  339.  
  340. #
  341. # Password database is used to verify user's password (and nothing more).
  342. # You can have multiple passdbs and userdbs. This is useful if you want to
  343. # allow both system users (/etc/passwd) and virtual users to login without
  344. # duplicating the system users into virtual database.
  345. #
  346. # <doc/wiki/PasswordDatabase.txt>
  347. #
  348. # checkpassword executable authentication
  349. # NOTE: You will probably want to use "userdb prefetch" with this.
  350. # <doc/wiki/PasswordDatabase.CheckPassword.txt>
  351. passdb checkpassword {
  352. # Path for checkpassword binary
  353. args = /var/qmail/bin/auth_pop
  354. }
  355.  
  356. # vpopmail authentication <doc/wiki/AuthDatabase.VPopMail.txt>
  357. #passdb vpopmail {
  358. # [cache_key=<key>] - See cache_key in PAM for explanation.
  359. #args =
  360. #}
  361.  
  362. #
  363. # User database specifies where mails are located and what user/group IDs
  364. # own them. For single-UID configuration use "static".
  365. #
  366. # <doc/wiki/UserDatabase.txt>
  367. #
  368.  
  369. # /etc/passwd or similar, using getpwnam(). In many systems nowadays this
  370. # uses Name Service Switch, which is configured in /etc/nsswitch.conf.
  371. # <doc/wiki/AuthDatabase.Passwd.txt>
  372. #}
  373.  
  374. # "prefetch" user database means that the passdb already provided the
  375. # needed information and there's no need to do a separate userdb lookup.
  376. # This can be made to work with SQL and LDAP databases, see their example
  377. # configuration files for more information how to do it.
  378. # <doc/wiki/UserDatabase.Prefetch.txt>
  379. userdb prefetch {
  380. }
  381.  
  382. # User to use for the process. This user needs access to only user and
  383. # password databases, nothing else. Only shadow and pam authentication
  384. # requires roots, so use something else if possible. Note that passwd
  385. # authentication with BSDs internally accesses shadow files, which also
  386. # requires roots. Note that this user is NOT used to access mails.
  387. # That user is specified by userdb above.
  388. user = root
  389. #passdb pam {
  390. # use /etc/pam.d/imap and /etc/pam.d/pop3
  391. # args = args = failure_show_msg=yes
  392. #}
  393.  
  394. }
  395.  
  396. plugin {
  397. # Here you can give some extra environment variables to mail processes.
  398. # This is mostly meant for passing parameters to plugins. %variable
  399. # expansion is done for all values.
  400.  
  401. # Quota plugin. Multiple backends are supported:
  402. # dirsize: Find and sum all the files found from mail directory.
  403. # Extremely SLOW with Maildir. It'll eat your CPU and disk I/O.
  404. # dict: Keep quota stored in dictionary (eg. SQL)
  405. # maildir: Maildir++ quota
  406. # fs: Read-only support for filesystem quota
  407. quota = maildir
  408.  
  409. # ACL plugin. vfile backend reads ACLs from "dovecot-acl" file from maildir
  410. # directory. You can also optionally give a global ACL directory path where
  411. # ACLs are applied to all users' mailboxes. The global ACL directory contains
  412. # one file for each mailbox, eg. INBOX or sub.mailbox.
  413. #acl = vfile:/etc/dovecot-acls
  414.  
  415. # Convert plugin. If set, specifies the source storage path which is
  416. # converted to destination storage (mail_location) when the user logs in.
  417. # The existing mail directory is renamed to <dir>-converted.
  418. #convert_mail = mbox:%h/mail
  419. # Skip mailboxes which we can't open successfully instead of aborting.
  420. #convert_skip_broken_mailboxes = no
  421.  
  422. # Trash plugin. When saving a message would make user go over quota, this
  423. # plugin automatically deletes the oldest mails from configured mailboxes
  424. # until the message can be saved within quota limits. The configuration file
  425. # is a text file where each line is in format: <priority> <mailbox name>
  426. # Mails are first deleted in lowest -> highest priority number order
  427. #trash = /etc/dovecot-trash.conf
  428.  
  429. # Lazy expunge plugin. Currently works only with maildirs. When a user
  430. # expunges mails, the mails are moved to a mailbox in another namespace
  431. # (1st). When a mailbox is deleted, the mailbox is moved to another namespace
  432. # (2nd) as well. Also if the deleted mailbox had any expunged messages,
  433. # they're moved to a 3rd namespace. The mails won't be counted in quota,
  434. # and they're not deleted automatically (use a cronjob or something).
  435. #lazy_expunge = .EXPUNGED/ .DELETED/ .DELETED/.EXPUNGED/
  436. }
  437. auth_debug=yes
  438. auth_debug_passwords=yes
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement