Differences

This shows you the differences between two versions of the page.

--- doc:appunti:linux:sa:postfix_spamassassin_clamav_dovecot [2023/05/02 13:05] – [Error Command output: Aborted] niccolo
+++ doc:appunti:linux:sa:postfix_spamassassin_clamav_dovecot [2026/11/06 12:21] (current) – [dovecot-lda logging] niccolo
@@ Line 2: / Line 2: @@
 Tested on **Debian 9 Stretch**.
+:!: **WARNING**: The configuration of **Dovecot 2.2.27** (Debian 9 Stretch) is still valid in Dovecot 2.3.19 (Debian 12 Bookworm), but **it changes in Dovecot 2.4.1** (Debian 13 Trixie), requiring several **changes to the configuration files**. You can find some of the adjustments required in this page: **[[debian_upgrade_12_13#dovecot|Aggiornamento da Debian 12 a 13: Dovecot]]**.
 ===== Postfix on Port 587/TCP (submission) =====
@@ Line 176: / Line 178: @@
 Once restarted the **dovecot.service**, we will find the services listening on the well known ports, and we can check the SSL certificates.
+==== Client connections are being dropped ====
+You may encounter wanring messages like these into the mail log:
+<code>
+dovecot: master: Warning: service(imap-login): process_limit (100) reached, client connections are being dropped
+</code>
+To increase the number of process that are allowed to spawn, edit the **/etc/dovecot/conf.d/10-master.conf** file and set
+<file>
+default_process_limit = 200
+</file>
 ===== SpamAssassin Filter =====
@@ Line 1041: / Line 1058: @@
 a2 LOGOUT
 </code>
+==== dovecot-lda logging ====
+Il programma potrebbe creare file di log che nessuno ruota:
+  * **/var/log/dovecot-lda-errors.log**
+  * **/var/log/dovecot-lda.log**
+Eventualmente creare un file opportuno per la rotazione **/etc/logrotate.d/dovecot-lda**:
+<file>
+/var/log/dovecot-lda.log
+/var/log/dovecot-lda-errors.log
+{
+    daily
+    rotate 366
+    missingok
+    notifempty
+    create 666 root root
+    compress
+    delaycompress
+    copytruncate
+}
+</file>
+I permessi purtroppo devono essere così ampi perché nella nostra configurazione il local delivery agent viene eseguito a nome del proprietario della Maildir, quindi ogni utente deve poter scrivere in quel file.
+FIXME: Alternative? Passare al logging tramite syslog invece che direttamente in un file?
 ===== Checking SSL Certificates =====