1

Topic: Unable to create a message filter

==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version (check /etc/iredmail-release): 1.2.1
- Deployed with iRedMail Easy or the downloadable installer? downloadable installer
- Linux/BSD distribution name and version: CentOS 7.8-2003
- Store mail accounts in which backend (LDAP/MySQL/PGSQL):  MySQL
- Web server (Apache or Nginx): Nginx
- Manage mail accounts with iRedAdmin-Pro? No
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====
Hi Zhang,
I'm testing a new version and noticed an error.
Unable to create a message filter, connection error.

https://my_ip/mail/?_task=settings&_action=plugin.managesieve

/var/log/maillog

Jun  1 14:46:31 mail roundcube: PHP Warning:  stream_socket_enable_crypto(): SSL: Connection reset by peer in  /opt/www/roundcubemail-1.4.4/vendor/pear/net_sieve/Sieve.php on line 1378
Jun  1 14:46:31 mail roundcube: <19dno3g1> PHP Error: Failed to establish TLS connection (GET /mail/?_task=settings&_action=plugin.managesieve)
Jun  1 14:46:31 mail roundcube: <19dno3g1> PHP Error: Unable to connect to managesieve on 127.0.0.1:4190 in /opt/www/roundcubemail-1.4.4/plugins/managesieve/lib/Roundcube/rcube_sieve_engine.php on line 223 (GET /mail/?_task=settings&_action=plugin.managesieve)
Jun  1 14:46:31 mail roundcube: <19dno3g1> PHP Error: Not currently in AUTHORISATION state (GET /mail/?_task=settings&_action=plugin.managesieve)

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2 (edited by duz 2020-06-01 20:22:23)

Re: Unable to create a message filter

"Out of Office" - connection error

3

Re: Unable to create a message filter

Any related error in /var/log/dovecot/managesieve.log or dovecot.log?

4

Re: Unable to create a message filter

/var/log/dovecot/dovecot.log
Jun  1 14:45:53 mail dovecot: master: Dovecot v2.2.36.4 (baf9232c1) starting up for pop3, imap, sieve, lmtp (core dumps disabled)
Jun  2 08:08:38 mail dovecot: master: Dovecot v2.2.36.4 (baf9232c1) starting up for pop3, imap, sieve, lmtp (core dumps disabled)

/var/log/dovecot/sieve.log
Jun  1 14:46:31 mail dovecot: managesieve-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=127.0.0.1, lip=127.0.0.1, TLS handshaking: SSL_accept() failed: error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol, session=<gRKZWASnAoR/AAAB>

/var/log/dovecot/managesieve.log
the file is not in the folder

5

Re: Unable to create a message filter

- Did you ever modify configuration of Roundcube plugin "managesieve" (/opt/www/roundcubemail/plugins/managesieve/config.inc.php)?
- What's the current value of parameters below?

managesieve_host
managesieve_port
managesieve_usetls
managesieve_conn_options

6

Re: Unable to create a message filter

Zhang,
this is a new installation.
I don't change anything.

plugins/managesieve/config.inc.php

$config['managesieve_port'] = 4190;

$config['managesieve_host'] = "127.0.0.1";

$config['managesieve_usetls'] = true;

//$config['managesieve_conn_options'] = array(
//  'ssl'         => array(
//     'verify_peer'  => true,
//     'verify_depth' => 3,
//     'cafile'       => '/etc/openssl/certs/ca.crt',
//   ),
// );
// Note: These can be also specified as an array of options indexed by hostname
$config['managesieve_conn_options'] = array("ssl" => array("verify_peer" => false, "verify_peer_name" => false));

7

Re: Unable to create a message filter

How about parameter "managesieve_auth_type"? Please set it to "LOGIN" and try again.

$config['managesieve_auth_type'] = 'LOGIN';

8

Re: Unable to create a message filter

ZhangHuangbin wrote:

How about parameter "managesieve_auth_type"? Please set it to "LOGIN" and try again.

$config['managesieve_auth_type'] = 'LOGIN';

I set the parameter
reboot server

test
unable to connect server

dovecot.log
no messages

maillog
Jun  2 18:17:04 mail roundcube: PHP Warning:  stream_socket_enable_crypto(): SSL: Connection reset by peer in /opt/www/roundcubemail-1.4.4/vendor/pear/net_sieve/Sieve.php on line 1378
Jun  2 18:17:04 mail roundcube: <s7t7439u> PHP Error: Failed to establish TLS connection (GET /mail/?_task=settings&_action=plugin.managesieve)
Jun  2 18:17:04 mail roundcube: <s7t7439u> PHP Error: Unable to connect to managesieve on 127.0.0.1:4190 in /opt/www/roundcubemail-1.4.4/plugins/managesieve/lib/Roundcube/rcube_sieve_engine.php on line 223 (GET /mail/?_task=settings&_action=plugin.managesieve)
Jun  2 18:17:04 mail roundcube: <s7t7439u> PHP Error: Not currently in AUTHORISATION state (GET /mail/?_task=settings&_action=plugin.managesieve)

sieve.log
Jun  2 18:17:04 mail dovecot: managesieve-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=127.0.0.1, lip=127.0.0.1, TLS handshaking: SSL_accept() failed: error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol, session=<yY5pZxunDJZ/AAAB>

config.inc.php
<?php

// managesieve server port. When empty the port will be determined automatically
// using getservbyname() function, with 4190 as a fallback.
$config['managesieve_port'] = 4190;

// managesieve server address, default is localhost.
// Replacement variables supported in host name:
// %h - user's IMAP hostname
// %n - http hostname ($_SERVER['SERVER_NAME'])
// %d - domain (http hostname without the first part)
// For example %n = mail.domain.tld, %d = domain.tld
$config['managesieve_host'] = "127.0.0.1";

// authentication method. Can be CRAM-MD5, DIGEST-MD5, PLAIN, LOGIN, EXTERNAL
// or none. Optional, defaults to best method supported by server.
$config['managesieve_auth_type'] = LOGIN;

// Optional managesieve authentication identifier to be used as authorization proxy.
// Authenticate as a different user but act on behalf of the logged in user.
// Works with PLAIN and DIGEST-MD5 auth.
$config['managesieve_auth_cid'] = null;

// Optional managesieve authentication password to be used for imap_auth_cid
$config['managesieve_auth_pw'] = null;

// use or not TLS for managesieve server connection
// Note: tls:// prefix in managesieve_host is also supported
$config['managesieve_usetls'] = true;

// Connection scket context options
// See http://php.net/manual/en/context.ssl.php
// The example below enables server certificate validation
//$config['managesieve_conn_options'] = array(
//  'ssl'         => array(
//     'verify_peer'  => true,
//     'verify_depth' => 3,
//     'cafile'       => '/etc/openssl/certs/ca.crt',
//   ),
// );
// Note: These can be also specified as an array of options indexed by hostname
$config['managesieve_conn_options'] = array("ssl" => array("verify_peer" => false, "verify_peer_name" => false));

// A file with default script content (eg. spam filter)
$config['managesieve_default'] = "";

// The name of the script which will be used when there's no user script
$config['managesieve_script_name'] = 'managesieve';

// Sieve RFC says that we should use UTF-8 endcoding for mailbox names,
// but some implementations does not covert UTF-8 to modified UTF-7.
// Defaults to UTF7-IMAP
$config['managesieve_mbox_encoding'] = 'UTF-8';

// I need this because my dovecot (with listescape plugin) uses
// ':' delimiter, but creates folders with dot delimiter
$config['managesieve_replace_delimiter'] = '';

// disabled sieve extensions (body, copy, date, editheader, encoded-character,
// envelope, environment, ereject, fileinto, ihave, imap4flags, index,
// mailbox, mboxmetadata, regex, reject, relational, servermetadata,
// spamtest, spamtestplus, subaddress, vacation, variables, virustest, etc.
// Note: not all extensions are implemented
$config['managesieve_disabled_extensions'] = array();

// Enables debugging of conversation with sieve server. Logs it into <log_dir>/sieve
$config['managesieve_debug'] = false;

// Enables features described in http://wiki.kolab.org/KEP:14
$config['managesieve_kolab_master'] = false;

// Script name extension used for scripts including. Dovecot uses '.sieve',
// Cyrus uses '.siv'. Doesn't matter if you have managesieve_kolab_master disabled.
$config['managesieve_filename_extension'] = '.sieve';

// List of reserved script names (without extension).
// Scripts listed here will be not presented to the user.
$config['managesieve_filename_exceptions'] = array();

// List of domains limiting destination emails in redirect action
// If not empty, user will need to select domain from a list
$config['managesieve_domains'] = array();

// Default list of entries in header selector
$config['managesieve_default_headers'] = "";

// Enables separate management interface for vacation responses (out-of-office)
// 0 - no separate section (default),
// 1 - add Vacation section,
// 2 - add Vacation section, but hide Filters section
$config['managesieve_vacation'] = 1;

// Enables separate management interface for setting forwards (redirect to and copy to)
// 0 - no separate section (default),
// 1 - add Forward section,
// 2 - add Forward section, but hide Filters section
$config['managesieve_forward'] = 0;

// Default vacation interval (in days).
// Note: If server supports vacation-seconds extension it is possible
// to define interval in seconds here (as a string), e.g. "3600s".
$config['managesieve_vacation_interval'] = 1;

// Some servers require vacation :addresses to be filled with all
// user addresses (aliases). This option enables automatic filling
// of these on initial vacation form creation.
$config['managesieve_vacation_addresses_init'] = 1;

// Sometimes you want to always reply with mail email address
// This option enables automatic filling of :from field on initial vacation form creation.
$config['managesieve_vacation_from_init'] = 1;

// Supported methods of notify extension. Default: 'mailto'
$config['managesieve_notify_methods'] = array('mailto');

// Enables scripts RAW editor feature
$config['managesieve_raw_editor'] = true;

// Disabled actions
// Prevent user from performing specific actions:
// list_sets, enable_disable_set, delete_set, new_set, download_set, new_rule, delete_rule
// Note: disabling list_sets removes the Filter sets widget from the UI and means
//       the set defined in managesieve_script_name will always be used (and activated)
$config['managesieve_disabled_actions'] = array();

// List of hosts that support managesieve.
// Activate managesieve for selected hosts only. If this is not set all hosts are allowed.
// Example: $config['managesieve_allowed_hosts'] = array('host1.mydomain.com','host2.mydomain.com');
$config['managesieve_allowed_hosts'] = null;

9

Re: Unable to create a message filter

Does Dovecot have correct ssl cert/key to enable ssl/tls support? Any error in /var/log/dovecot/dovecot.log while restarting Dovecot service?

10

Re: Unable to create a message filter

ZhangHuangbin wrote:

Does Dovecot have correct ssl cert/key to enable ssl/tls support?

I didn't change the settings after installation.
how can I find out the answer to your question?
Remember, this is a test installation, the error appears immediately after installation.

ZhangHuangbin wrote:

Any error in /var/log/dovecot/dovecot.log while restarting Dovecot service?

service dovecot restart

dovecot.log
Jun  2 18:44:16 mail dovecot: master: Warning: Killed with signal 15 (by pid=4399 uid=0 code=kill)
Jun  2 18:44:16 mail dovecot: master: Dovecot v2.2.36.4 (baf9232c1) starting up for pop3, imap, sieve, lmtp (core dumps disabled)

no messages, just this.

11

Re: Unable to create a message filter

Try to reproduce the issue and check Dovecot log files again.

12

Re: Unable to create a message filter

Hi Zhang,
everything is the same

1. reboot
2. https://my_ip/mail/?_task=settings&_action=plugin.managesieve
3. error

dovecot.log
Jun  3 07:36:27 mail dovecot: master: Dovecot v2.2.36.4 (baf9232c1) starting up for pop3, imap, sieve, lmtp (core dumps disabled)

sieve.log
Jun  3 07:37:54 mail dovecot: managesieve-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=127.0.0.1, lip=127.0.0.1, TLS handshaking: SSL_accept() failed: error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol, session=<EAlrlyanZuF/AAAB>

maillog
Jun  3 07:37:54 mail roundcube: PHP Warning:  stream_socket_enable_crypto(): SSL: Connection reset by peer in /opt/www/roundcubemail-1.4.4/vendor/pear/net_sieve/Sieve.php on line 1378
Jun  3 07:37:54 mail roundcube: <lrno718t> PHP Error: Failed to establish TLS connection (GET /mail/?_task=settings&_action=plugin.managesieve)
Jun  3 07:37:54 mail roundcube: <lrno718t> PHP Error: Unable to connect to managesieve on 127.0.0.1:4190 in /opt/www/roundcubemail-1.4.4/plugins/managesieve/lib/Roundcube/rcube_sieve_engine.php on line 223 (GET /mail/?_task=settings&_action=plugin.managesieve)
Jun  3 07:37:54 mail roundcube: <lrno718t> PHP Error: Not currently in AUTHORISATION state (GET /mail/?_task=settings&_action=plugin.managesieve)

13

Re: Unable to create a message filter

up

14

Re: Unable to create a message filter

No clue yet, default settings work fine for me.
I need direct ssh access with root privilege and a testing mail account for troubleshooting, but that will cause you one support ticket, is it ok for you?
https://www.iredmail.org/support.html

15

Re: Unable to create a message filter

Hi Zhang,
My server works fine on the old version.
I just wanted to help the community find problems.

I'm willing to grant access, but I can't pay for the work.
Let me know if you're ready to explore the problem for yourself.
Thanks.

16

Re: Unable to create a message filter

duz wrote:

$config['managesieve_auth_type'] = LOGIN;

Please use quotes:

$config['managesieve_auth_type'] = 'LOGIN';

17

Re: Unable to create a message filter

Did you change anything (yes, anything) after iRedMail installation?

18

Re: Unable to create a message filter

ZhangHuangbin wrote:

Did you change anything (yes, anything) after iRedMail installation?

Hi, the problem appears immediately after installation. Before writing on the forum, I reproduced this problem 2 times on the VM. For your verification, I will play it again.

1. new virtual machine
2. CentOS-7-x86_64-DVD-1804.iso
3. install (gnome)
4. log in as root
5. yum update
6. reboot
7. https://docs.iredmail.org/install.iredmail.on.rhel.html
release 1.2.1
MySQL+SOGo
8. reboot
9. /mail/?_task=settings&_action=plugin.managesieve
10. error
11. $config['managesieve_auth_type'] = 'LOGIN';
12. /mail/?_task=settings&_action=plugin.managesieve
13. error

dovecot.log
Jun  8 10:55:46 mail dovecot: master: Dovecot v2.2.36.4 (baf9232c1) starting up for pop3, imap, sieve, lmtp (core dumps disabled)
Jun  8 10:59:07 mail dovecot: master: Dovecot v2.2.36.4 (baf9232c1) starting up for pop3, imap, sieve, lmtp (core dumps disabled)

sieve.log
Jun  8 10:56:31 mail dovecot: managesieve-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=127.0.0.1, lip=127.0.0.1, TLS handshaking: SSL_accept() failed: error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol, session=<vbjv8o2nFMl/AAAB>
Jun  8 10:58:19 mail dovecot: managesieve-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=127.0.0.1, lip=127.0.0.1, TLS handshaking: SSL_accept() failed: error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol, session=<73lh+Y2nfsl/AAAB>
Jun  8 10:59:23 mail dovecot: managesieve-login: Disconnected (no auth attempts in 0 secs): user=<>, rip=127.0.0.1, lip=127.0.0.1, TLS handshaking: SSL_accept() failed: error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol, session=<p44v/Y2nxMl/AAAB>

maillog
Jun  8 09:55:03 localhost postfix/postfix-script[1755]: starting the Postfix mail system
Jun  8 09:55:03 localhost postfix/master[1767]: daemon started -- version 2.10.1, configuration /etc/postfix
Jun  8 10:11:16 localhost postfix/postfix-script[1557]: starting the Postfix mail system
Jun  8 10:11:16 localhost postfix/master[1563]: daemon started -- version 2.10.1, configuration /etc/postfix
Jun  8 10:17:43 localhost postfix/postfix-script[9305]: stopping the Postfix mail system
Jun  8 10:17:43 localhost postfix/master[1563]: terminating on signal 15
Jun  8 10:17:44 localhost postfix/postfix-script[9388]: starting the Postfix mail system
Jun  8 10:17:44 localhost postfix/master[9390]: daemon started -- version 2.10.1, configuration /etc/postfix
Jun  8 10:31:51 localhost postfix/postfix-script[1678]: starting the Postfix mail system
Jun  8 10:31:51 localhost postfix/master[1697]: daemon started -- version 2.10.1, configuration /etc/postfix
Jun  8 10:37:07 mail postfix/postfix-script[1567]: starting the Postfix mail system
Jun  8 10:37:07 mail postfix/master[1574]: daemon started -- version 2.10.1, configuration /etc/postfix
Jun  8 10:55:37 mail clamd[1154]: Received 0 file descriptor(s) from systemd.
Jun  8 10:55:37 mail clamd[1154]: clamd daemon 0.102.3 (OS: linux-gnu, ARCH: x86_64, CPU: x86_64)
Jun  8 10:55:37 mail clamd[1154]: Running as user amavis (UID 981, GID 974)
Jun  8 10:55:37 mail clamd[1154]: Log file size limited to 1048576 bytes.
Jun  8 10:55:37 mail clamd[1154]: Reading databases from /var/lib/clamav
Jun  8 10:55:37 mail clamd[1154]: Not loading PUA signatures.
Jun  8 10:55:37 mail clamd[1154]: Bytecode: Security mode set to "TrustSigned".
Jun  8 10:55:38 mail postfix/postfix-script[1807]: starting the Postfix mail system
Jun  8 10:55:38 mail postfix/master[1825]: daemon started -- version 2.10.1, configuration /etc/postfix
Jun  8 10:55:38 mail amavis[1155]: starting. /usr/sbin/amavisd at mail.***mydomen.com|*** amavisd-new-2.11.1 (20181009), Unicode aware, LANG="ru_RU.UTF-8"
Jun  8 10:55:38 mail amavis[1155]: perl=5.016003, user=981, EUID: 981 (981);  group=, EGID: 974 974 (974 974)
Jun  8 10:55:38 mail amavis[2485]: Net::Server: Group Not Defined.  Defaulting to EGID '974 974'
Jun  8 10:55:38 mail amavis[2485]: Net::Server: User Not Defined.  Defaulting to EUID '981'
Jun  8 10:55:38 mail amavis[2485]: Using primary internal av scanner code for clamav-socket
Jun  8 10:55:38 mail amavis[2485]: Found secondary av scanner clamav-clamscan at /usr/bin/clamscan
Jun  8 10:55:52 mail clamd[1154]: Loaded 7162840 signatures.
Jun  8 10:55:55 mail clamd[1154]: LOCAL: Unix socket file /var/run/clamd.amavisd/clamd.socket
Jun  8 10:55:55 mail clamd[1154]: LOCAL: Setting connection queue length to 200
Jun  8 10:55:55 mail clamd[2947]: Limits: Global time limit set to 120000 milliseconds.
Jun  8 10:55:55 mail clamd[2947]: Limits: Global size limit set to 104857600 bytes.
Jun  8 10:55:55 mail clamd[2947]: Limits: File size limit set to 26214400 bytes.
Jun  8 10:55:55 mail clamd[2947]: Limits: Recursion level limit set to 16.
Jun  8 10:55:55 mail clamd[2947]: Limits: Files limit set to 10000.
Jun  8 10:55:55 mail clamd[2947]: Limits: MaxEmbeddedPE limit set to 10485760 bytes.
Jun  8 10:55:55 mail clamd[2947]: Limits: MaxHTMLNormalize limit set to 10485760 bytes.
Jun  8 10:55:55 mail clamd[2947]: Limits: MaxHTMLNoTags limit set to 2097152 bytes.
Jun  8 10:55:55 mail clamd[2947]: Limits: MaxScriptNormalize limit set to 5242880 bytes.
Jun  8 10:55:55 mail clamd[2947]: Limits: MaxZipTypeRcg limit set to 1048576 bytes.
Jun  8 10:55:55 mail clamd[2947]: Limits: MaxPartitions limit set to 50.
Jun  8 10:55:55 mail clamd[2947]: Limits: MaxIconsPE limit set to 100.
Jun  8 10:55:55 mail clamd[2947]: Limits: MaxRecHWP3 limit set to 16.
Jun  8 10:55:55 mail clamd[2947]: Limits: PCREMatchLimit limit set to 100000.
Jun  8 10:55:55 mail clamd[2947]: Limits: PCRERecMatchLimit limit set to 2000.
Jun  8 10:55:55 mail clamd[2947]: Limits: PCREMaxFileSize limit set to 26214400.
Jun  8 10:55:55 mail clamd[2947]: Archive support enabled.
Jun  8 10:55:55 mail clamd[2947]: AlertExceedsMax heuristic detection disabled.
Jun  8 10:55:55 mail clamd[2947]: Heuristic alerts enabled.
Jun  8 10:55:55 mail clamd[2947]: Portable Executable support enabled.
Jun  8 10:55:55 mail clamd[2947]: ELF support enabled.
Jun  8 10:55:55 mail clamd[2947]: Mail files support enabled.
Jun  8 10:55:55 mail clamd[2947]: OLE2 support enabled.
Jun  8 10:55:55 mail clamd[2947]: PDF support enabled.
Jun  8 10:55:55 mail clamd[2947]: SWF support enabled.
Jun  8 10:55:55 mail clamd[2947]: HTML support enabled.
Jun  8 10:55:55 mail clamd[2947]: XMLDOCS support enabled.
Jun  8 10:55:55 mail clamd[2947]: HWP3 support enabled.
Jun  8 10:55:55 mail clamd[2947]: Self checking every 600 seconds.
Jun  8 10:56:31 mail roundcube: PHP Warning:  stream_socket_enable_crypto(): SSL: Соединение разорвано РґСЂСѓРіРѕР№ стороной in /opt/www/roundcubemail-1.4.4/vendor/pear/net_sieve/Sieve.php on line 1378
Jun  8 10:56:31 mail roundcube: <6i75b8oj> PHP Error: Failed to establish TLS connection (GET /mail/?_task=settings&_action=plugin.managesieve)
Jun  8 10:56:31 mail roundcube: <6i75b8oj> PHP Error: Unable to connect to managesieve on 127.0.0.1:4190 in /opt/www/roundcubemail-1.4.4/plugins/managesieve/lib/Roundcube/rcube_sieve_engine.php on line 223 (GET /mail/?_task=settings&_action=plugin.managesieve)
Jun  8 10:56:31 mail roundcube: <6i75b8oj> PHP Error: Not currently in AUTHORISATION state (GET /mail/?_task=settings&_action=plugin.managesieve)
Jun  8 10:58:19 mail roundcube: PHP Warning:  stream_socket_enable_crypto(): SSL: Соединение разорвано РґСЂСѓРіРѕР№ стороной in /opt/www/roundcubemail-1.4.4/vendor/pear/net_sieve/Sieve.php on line 1378
Jun  8 10:58:19 mail roundcube: <6i75b8oj> PHP Error: Failed to establish TLS connection (GET /mail/?_task=settings&_action=plugin.managesieve)
Jun  8 10:58:19 mail roundcube: <6i75b8oj> PHP Error: Unable to connect to managesieve on 127.0.0.1:4190 in /opt/www/roundcubemail-1.4.4/plugins/managesieve/lib/Roundcube/rcube_sieve_engine.php on line 223 (GET /mail/?_task=settings&_action=plugin.managesieve)
Jun  8 10:58:19 mail roundcube: <6i75b8oj> PHP Error: Not currently in AUTHORISATION state (GET /mail/?_task=settings&_action=plugin.managesieve)
Jun  8 10:59:07 mail clamd[1142]: Received 0 file descriptor(s) from systemd.
Jun  8 10:59:07 mail clamd[1142]: clamd daemon 0.102.3 (OS: linux-gnu, ARCH: x86_64, CPU: x86_64)
Jun  8 10:59:07 mail clamd[1142]: Running as user amavis (UID 981, GID 974)
Jun  8 10:59:07 mail clamd[1142]: Log file size limited to 1048576 bytes.
Jun  8 10:59:07 mail clamd[1142]: Reading databases from /var/lib/clamav
Jun  8 10:59:07 mail clamd[1142]: Not loading PUA signatures.
Jun  8 10:59:07 mail clamd[1142]: Bytecode: Security mode set to "TrustSigned".
Jun  8 10:59:08 mail postfix/postfix-script[1825]: starting the Postfix mail system
Jun  8 10:59:08 mail postfix/master[1849]: daemon started -- version 2.10.1, configuration /etc/postfix
Jun  8 10:59:08 mail amavis[1140]: starting. /usr/sbin/amavisd at mail.***mydomen.com|*** amavisd-new-2.11.1 (20181009), Unicode aware, LANG="ru_RU.UTF-8"
Jun  8 10:59:08 mail amavis[1140]: perl=5.016003, user=981, EUID: 981 (981);  group=, EGID: 974 974 (974 974)
Jun  8 10:59:08 mail amavis[2549]: Net::Server: Group Not Defined.  Defaulting to EGID '974 974'
Jun  8 10:59:08 mail amavis[2549]: Net::Server: User Not Defined.  Defaulting to EUID '981'
Jun  8 10:59:08 mail amavis[2549]: Using primary internal av scanner code for clamav-socket
Jun  8 10:59:08 mail amavis[2549]: Found secondary av scanner clamav-clamscan at /usr/bin/clamscan
Jun  8 10:59:21 mail clamd[1142]: Loaded 7162840 signatures.
Jun  8 10:59:23 mail roundcube: PHP Warning:  stream_socket_enable_crypto(): SSL: Соединение разорвано РґСЂСѓРіРѕР№ стороной in /opt/www/roundcubemail-1.4.4/vendor/pear/net_sieve/Sieve.php on line 1378
Jun  8 10:59:23 mail roundcube: <6i75b8oj> PHP Error: Failed to establish TLS connection (GET /mail/?_task=settings&_action=plugin.managesieve)
Jun  8 10:59:23 mail roundcube: <6i75b8oj> PHP Error: Unable to connect to managesieve on 127.0.0.1:4190 in /opt/www/roundcubemail-1.4.4/plugins/managesieve/lib/Roundcube/rcube_sieve_engine.php on line 223 (GET /mail/?_task=settings&_action=plugin.managesieve)
Jun  8 10:59:23 mail roundcube: <6i75b8oj> PHP Error: Not currently in AUTHORISATION state (GET /mail/?_task=settings&_action=plugin.managesieve)

19

Re: Unable to create a message filter

Could you please mail me the ssh access? I’d like to take a look and hopefully fix it.

zhb _at_ iredmail.org

20

Re: Unable to create a message filter

ready

ZhangHuangbin wrote:

Could you please mail me the ssh access? I’d like to take a look and hopefully fix it.

zhb _at_ iredmail.org

21

Re: Unable to create a message filter

Fixed. Confirmed it's a bug of iRedMail-1.2.1 on CentOS 7: php packages shipped in CentOS 7 official yum repo doesn't support TLSv1.1 and TLSv1.2, so we have to re-enable TLSv1 in Dovecot for secure connection.

ssl_protocols = !SSLv2 !SSLv3 !TLSv1.1