~ubuntu-dev/ubuntu/lucid/dovecot/lucid-201002101901

« back to all changes in this revision

Viewing changes to doc/wiki/LDA.Sieve.txt

  • Committer: Chuck Short
  • Date: 2010-01-21 20:21:25 UTC
  • mfrom: (4.1.11 squeeze)
  • Revision ID: zulcss@ubuntu.com-20100121202125-pme73o491kfwj5nc
* Merge from debian testing, remaining changes:
  + Add new binary pkg dovecot-postfix that integrates postfix and dovecot
    automatically: (LP: #164837)
  + debian/control:
    - add new binary with short description
    - set Architecture all for dovecot-postfix (LP: #329878)
  + debian/dovecot-postfix.postinst:
    - create initial certificate symlinks to snakeoil.
    - set up postfix with postconf to:
      - use Maildir/ as the default mailbox.
      - use dovecot as the sasl authentication server.
      - use dovecot LDA (deliver).
      - use tls for smtp{d} services.
    - fix certificates paths in postfix' main.cf
    - add reject_unauth_destination to postfix' recipient restrictions
    - add reject_unknown_sender_domain to postfix' sender restriction
    - rename configuration name on remove, delete on purge
    - restart dovecot after linking certificates
    - handle use case when postfix is unconfigurated
  + debian/dovecot-postfix.dirs: create backup directory for postfix's config
    configuration
  + restart postfix and dovecot.
  + debian/dovecot-postfix.postrm:
    - remove all dovecot related configuration from postfix.
    - restart postfix and dovecot.
  + debian/dovecot-common.init:
    - check if /etc/dovecot/dovecot-postfix.conf exists and use it
      as the configuration file if so.
  + debian/patches/warning-ubuntu-postfix.dpatch
    - add warning about dovecot-postfix.conf in dovecot default
      configuration file
  + debian/patches/dovecot-postfix.conf.diff:
    - Ubuntu server custom changes to the default dovecot configuration for
      better interfation with postfix.
    - enable sieve plugin.
    - Ubuntu server custom changes to the default dovecot configuration for
      better integration with postfix:
      - enable imap, pop3, imaps, pop3s and managesieve by default.
      - enable dovecot LDA (deliver).
      - enable SASL auth socket in postfix private directory
   + debian/rules:
     - copy, patch and install dovecot-postfix.conf in /etc/dovecot/.
     - build architecure independent packages too
   + Use Snakeoil SSL certificates by default.
     - debian/control: Depend on ssl-cert.
     - debian/patches/ssl-cert-snakeoil.dpatch: Change default SSL cert
       paths to snakeoil.
     - debian/dovecot-common.postinst: Relax grep for SSL_* a bit.
   + Add autopkgtest to debian/tests/*.
   + Fast TearDown: Update the lsb init header to not stop in level 6.
   + Add ufw integration:
     - Created debian/dovecot-common.ufw.profile.
     - debian/rules: install profile.
     - debian/control: suggest ufw.
   + debian/{control,rules}: enable PIE hardening.
   + dovecot-imapd, dovecot-pop3: Replaces dovecot-common (<< 1:1.1). (LP: #254721)
   + debian/control: Update Vcs-* headers.
   + Add SMTP-AUTH support for Outlook (login auth mechanism)
* New upstream release.
* debian/patches/gold-fix.patch: Removed. Fixed upstream.
* Moved libexec to lib corrections in dovecot-managesieve.patch and
  dovecot-managesieve-dist.patch to dovecot-example.patch
* debian/patches/dovecot-mboxlocking.patch: Regenerated to avoid FTBFS
  when quilt isn't installed.
* debian/patches/quota-mountpoint.patch: Removed. Not needed anymore.
* debian/patches/dovecot-quota.patch: Removed. Quotas aren't properly
  enabled unless mail_plugins = quota imap_quota.
* debian/patches/gold-fix.patch: Fixed configure script to build even
  with binutils-gold or --no-add-needed linker flag (Closes: #554306)
* debian/dovecot-common.init: fixed LSB headers. Thanks to Pascal Volk.
  (Closes: #558040)
* debian/changelog: added CVE references to previous changelog entry.
* debian/rules: checked up the build system. It's not fragile anymore.
  (Closes: 493803)
* debian/dovecot-common.postinst: Now invoking dpkg-reconfigure
  on dovecot-common is enough to generate new certificates
  if the previous ones were removed. (Closes: #545582)
* debian/rules: No longer install convert-tool in /usr/bin.
  It isn't an user utility and it should stay in /usr/lib/dovecot
  like all other similar tool.
* New upstream release. (Closes: #557601)
* [SECURITY] Fixes local information disclosure and denial of service.
  (see: http://www.dovecot.org/list/dovecot-news/2009-November/000143.html
  and CVE-2009-3897)
* Added myself to uploaders.
* Switched to the new source format "3.0 (quilt)":
  - removed dpatch from build-depends
  - removed debian/README.source because now we use only standard
    dpkg features
  - regenerated all patches
* Prepared to switch to multi-origin source:
  - recreated dovecot-libsieve.patch and dovecot-managesieve-dist.patch
    starting from the upstream tarball
  - removed all autotools related build-depends and build-conflict
  - renamed dovecot-libsieve and dovecot-managesieve directories
    to libsieve and managesieve.
* debian/rules: Moved the configuration of libsieve and managesieve from
  the build phase to the configuration phase
* Added dovecot-dbg package  with debugging symbols.  Thanks Stephan Bosch.
  (Closes: #554710)
* Fixed some stray libexec'isms in the default configuration.
* New upstream release.
* debian/dovecot-common.init:
  - use $CONF when starting the daemon. (Closes: #549944)
  - always output start/stop messages. (Closes: #523810)

Show diffs side-by-side

added added

removed removed

Lines of Context:
82
82
The supported Sieve features are:
83
83
 
84
84
 *
85
 
+--------------------------------------------------------------------+-------+-----------+
86
 
| Extension                                                          | CMU   | Dovecot   |
87
 
|                                                                    | Sieve | Sieve     |
88
 
+--------------------------------------------------------------------+-------+-----------+
89
 
| fileinto [http://ietfreport.isoc.org/idref/rfc5228/]               | yes   | yes       |
90
 
+--------------------------------------------------------------------+-------+-----------+
91
 
| reject                                                             | yes   | yes       |
92
 
| [http://ietfreport.isoc.org/idref/draft-ietf-sieve-refuse-reject/] |       |           |
93
 
+--------------------------------------------------------------------+-------+-----------+
94
 
| envelope [http://ietfreport.isoc.org/idref/rfc5228/]               | yes   | yes       |
95
 
+--------------------------------------------------------------------+-------+-----------+
96
 
| vacation [http://ietfreport.isoc.org/idref/rfc5230/]               | yes   | yes       |
97
 
+--------------------------------------------------------------------+-------+-----------+
98
 
| imap4flags [http://ietfreport.isoc.org/idref/rfc5232/]             | no    | yes       |
99
 
+--------------------------------------------------------------------+-------+-----------+
100
 
| imapflags(old draft                                                | yes   | yes       |
101
 
| [http://tools.ietf.org/html/draft-melnikov-sieve-imapflags-03])    |       | (default  |
102
 
|                                                                    |       | disabled) |
103
 
+--------------------------------------------------------------------+-------+-----------+
104
 
| enotify [http://ietfreport.isoc.org/idref/rfc5435/]                | no    | yes       |
105
 
+--------------------------------------------------------------------+-------+-----------+
106
 
| notify (old draft                                                  | yes   | no        |
107
 
| [http://tools.ietf.org/html/draft-ietf-sieve-notify-00])           |       |           |
108
 
+--------------------------------------------------------------------+-------+-----------+
109
 
| regex [http://ietfreport.isoc.org/idref/draft-ietf-sieve-regex/]   | yes   | yes       |
110
 
+--------------------------------------------------------------------+-------+-----------+
111
 
| subaddress [http://ietfreport.isoc.org/idref/rfc5233/]             | yes   | yes       |
112
 
+--------------------------------------------------------------------+-------+-----------+
113
 
| relational [http://ietfreport.isoc.org/idref/rfc5231/]             | yes   | yes       |
114
 
+--------------------------------------------------------------------+-------+-----------+
115
 
| copy [http://ietfreport.isoc.org/idref/rfc3894/]                   | v1.1+ | yes       |
116
 
+--------------------------------------------------------------------+-------+-----------+
117
 
| body [http://ietfreport.isoc.org/idref/rfc5173/]                   | v1.1+ | yes       |
118
 
+--------------------------------------------------------------------+-------+-----------+
119
 
| include                                                            | v1.1+ | yes       |
120
 
| [http://ietfreport.isoc.org/idref/draft-daboo-sieve-include/]      |       |           |
121
 
+--------------------------------------------------------------------+-------+-----------+
122
 
| encoded-character [http://ietfreport.isoc.org/idref/rfc5228/]      | no    | yes       |
123
 
+--------------------------------------------------------------------+-------+-----------+
124
 
| variables [http://ietfreport.isoc.org/idref/rfc5229/]              | no    | yes       |
125
 
+--------------------------------------------------------------------+-------+-----------+
 
85
+-----------------------------------------------------------------+--------+-----------+----------------+
 
86
| *Extension*                                                     | *CMU   | *Dovecot  | *Purpose*      |
 
87
|                                                                 | Sieve* | Sieve*    |                |
 
88
+-----------------------------------------------------------------+--------+-----------+----------------+
 
89
| fileinto [http://ietfreport.isoc.org/idref/rfc5228/]            | yes    | yes       | Allows storing |
 
90
|                                                                 |        |           | messages in    |
 
91
|                                                                 |        |           | folders other  |
 
92
|                                                                 |        |           | than INBOX     |
 
93
+-----------------------------------------------------------------+--------+-----------+----------------+
 
94
| envelope [http://ietfreport.isoc.org/idref/rfc5228/]            | yes    | yes       | Allows         |
 
95
|                                                                 |        |           | evaluating     |
 
96
|                                                                 |        |           | envelope parts,|
 
97
|                                                                 |        |           | i.e. sender and|
 
98
|                                                                 |        |           | recipient      |
 
99
+-----------------------------------------------------------------+--------+-----------+----------------+
 
100
| encoded-character [http://ietfreport.isoc.org/idref/rfc5228/]   | no     | yes       | Allows encoding|
 
101
|                                                                 |        |           | special        |
 
102
|                                                                 |        |           | characters     |
 
103
|                                                                 |        |           | numerically    |
 
104
+-----------------------------------------------------------------+--------+-----------+----------------+
 
105
| copy [http://ietfreport.isoc.org/idref/rfc3894/]                | v1.1+  | yes       | Allows storing |
 
106
|                                                                 |        |           | and forwarding |
 
107
|                                                                 |        |           | messages       |
 
108
|                                                                 |        |           | without        |
 
109
|                                                                 |        |           | canceling the  |
 
110
|                                                                 |        |           | implicit keep  |
 
111
+-----------------------------------------------------------------+--------+-----------+----------------+
 
112
| body [http://ietfreport.isoc.org/idref/rfc5173/]                | v1.1+  | yes       | Allows         |
 
113
|                                                                 |        |           | evaluating the |
 
114
|                                                                 |        |           | body of a      |
 
115
|                                                                 |        |           | message        |
 
116
+-----------------------------------------------------------------+--------+-----------+----------------+
 
117
| variables [http://ietfreport.isoc.org/idref/rfc5229/]           | no     | yes       | Adds variables |
 
118
|                                                                 |        |           | support to the |
 
119
|                                                                 |        |           | language       |
 
120
+-----------------------------------------------------------------+--------+-----------+----------------+
 
121
| vacation [http://ietfreport.isoc.org/idref/rfc5230/]            | yes    | yes       | Provides       |
 
122
|                                                                 |        |           | auto-responder |
 
123
|                                                                 |        |           | functionality, |
 
124
|                                                                 |        |           | e.g. for when  |
 
125
|                                                                 |        |           | the user is on |
 
126
|                                                                 |        |           | vacation       |
 
127
+-----------------------------------------------------------------+--------+-----------+----------------+
 
128
| relational [http://ietfreport.isoc.org/idref/rfc5231/]          | yes    | yes       | Provides       |
 
129
|                                                                 |        |           | relational     |
 
130
|                                                                 |        |           | match support  |
 
131
+-----------------------------------------------------------------+--------+-----------+----------------+
 
132
| imap4flags [http://ietfreport.isoc.org/idref/rfc5232/]          | no     | yes       | Allows adding  |
 
133
|                                                                 |        |           | IMAP flags to  |
 
134
|                                                                 |        |           | stored messages|
 
135
+-----------------------------------------------------------------+--------+-----------+----------------+
 
136
| subaddress [http://ietfreport.isoc.org/idref/rfc5233/]          | yes    | yes       | Allows testing |
 
137
|                                                                 |        |           | against        |
 
138
|                                                                 |        |           | delimited      |
 
139
|                                                                 |        |           | elements of the|
 
140
|                                                                 |        |           | local part of  |
 
141
|                                                                 |        |           | addresses      |
 
142
+-----------------------------------------------------------------+--------+-----------+----------------+
 
143
| reject [http://ietfreport.isoc.org/idref/rfc5429/]              | yes    | yes       | Allows         |
 
144
|                                                                 |        |           | rejecting      |
 
145
|                                                                 |        |           | messages with a|
 
146
|                                                                 |        |           | rejection      |
 
147
|                                                                 |        |           | bounce message |
 
148
+-----------------------------------------------------------------+--------+-----------+----------------+
 
149
| enotify [http://ietfreport.isoc.org/idref/rfc5435/]             | no     | yes       | Provides the   |
 
150
|                                                                 |        |           | ability to send|
 
151
|                                                                 |        |           | notifications  |
 
152
|                                                                 |        |           | by various     |
 
153
|                                                                 |        |           | means          |
 
154
|                                                                 |        |           | (currently only|
 
155
|                                                                 |        |           | mailto)        |
 
156
+-----------------------------------------------------------------+--------+-----------+----------------+
 
157
| mailbox [http://ietfreport.isoc.org/idref/rfc5490/]             | no     | yes       | Provides a     |
 
158
|                                                                 |        |           | mailbox        |
 
159
|                                                                 |        |           | existence check|
 
160
|                                                                 |        |           | and allows     |
 
161
|                                                                 |        |           | creating       |
 
162
|                                                                 |        |           | mailboxes upon |
 
163
|                                                                 |        |           | fileinto       |
 
164
+-----------------------------------------------------------------+--------+-----------+----------------+
 
165
| environment [http://ietfreport.isoc.org/idref/rfc5183/]         | no     | basic     | Allows testing |
 
166
|                                                                 |        |           | against various|
 
167
|                                                                 |        |           | labeled values |
 
168
|                                                                 |        |           | from the       |
 
169
|                                                                 |        |           | execution      |
 
170
|                                                                 |        |           | environment    |
 
171
+-----------------------------------------------------------------+--------+-----------+----------------+
 
172
| regex [http://ietfreport.isoc.org/idref/draft-ietf-sieve-regex/]| yes    | yes       | Provides       |
 
173
|                                                                 |        |           | regular        |
 
174
|                                                                 |        |           | expression     |
 
175
|                                                                 |        |           | match support  |
 
176
+-----------------------------------------------------------------+--------+-----------+----------------+
 
177
| include                                                         | v1.1+  | yes       | Allows         |
 
178
| [http://ietfreport.isoc.org/idref/draft-daboo-sieve-include/]   |        |           | including other|
 
179
|                                                                 |        |           | Sieve scripts  |
 
180
+-----------------------------------------------------------------+--------+-----------+----------------+
 
181
| imapflags(old draft                                             | yes    | yes       | Old version of |
 
182
| [http://tools.ietf.org/html/draft-melnikov-sieve-imapflags-03]) |        | (default  | imap4flags     |
 
183
|                                                                 |        | disabled) |                |
 
184
+-----------------------------------------------------------------+--------+-----------+----------------+
 
185
| notify (old draft                                               | yes    | almost    | Old version of |
 
186
| [http://tools.ietf.org/html/draft-martin-sieve-notify-01])      |        |           | enotify        |
 
187
|                                                                 |        |           | ("$text$" not  |
 
188
|                                                                 |        |           | supported)     |
 
189
+-----------------------------------------------------------------+--------+-----------+----------------+
126
190
 
127
191
Note that the CMU Sieve plugin implements an older specification of the
128
192
*enotify* extension which was called *notify*. Something similar is true for
136
200
------------------
137
201
 
138
202
To give users the ability to upload their own Sieve scripts to your server,
139
 
i.e. without the need for shell or FTP access, you can use the Manage ''Sieve
 
203
i.e. without the need for shell or FTP access, you can use the<ManageSieve.txt>
140
204
protocol. Two alternatives are available for Dovecot:
141
205
 
142
206
 * <Dovecot's native ManageSieve implementation> [ManageSieve.txt]
143
207
 * Python implementation [http://woozle.org/~neale/src/pysieved/]. Ensure if
144
208
   using TLS that the tlslite library used this patch
145
 
   [http://sourceforge.net/mailarchive/message.php?msg_name=1173243373.1225.TMDA%40tmda.severn.wwwdotorg.org]
 
209
   [http://sourceforge.net/mailarchive/message.php?msg_name=1173243373.1225.TMDA@tmda.severn.wwwdotorg.org]
146
210
 
147
211
Validate your script
148
212
--------------------
261
325
  -f ${sender} -d ${user}@${nexthop} -a ${recipient}
262
326
---%<-------------------------------------------------------------------------
263
327
 
 
328
or
 
329
 
 
330
---%<-------------------------------------------------------------------------
 
331
mailbox_command = /usr/lib/dovecot/deliver -a "$RECIPIENT"
 
332
---%<-------------------------------------------------------------------------
 
333
 
264
334
Mail filtering by various headers
265
335
---------------------------------
266
336
 
301
371
Some mail readers use these flags:
302
372
 
303
373
---%<-------------------------------------------------------------------------
 
374
# CMUsieve
304
375
require "imapflags";
 
376
# dovecot 1.2
 
377
# require "imap4flags";
 
378
require "regex";
305
379
if anyof (exists "X-Cron-Env",
306
380
          header :regex    ["subject"] [".* security run output",
307
381
                                        ".* monthly run output",
412
486
Here's the original post announcing it:
413
487
http://dovecot.org/list/dovecot/2007-March/020895.html 
414
488
 
415
 
(This file was created from the wiki on 2009-07-10 04:42)
 
489
(This file was created from the wiki on 2009-10-16 04:42)