What's changed: Initial version (topic 2.10, subtopics 2.10.1–2.10.2)
4.2Configuring and Managing Dovecot
Learn to configure Dovecot (an MRA, mail retrieval agent): the configuration layout under /etc/dovecot/ and dovecot.conf, the verification command doveconf, the administration command doveadm, the difference between POP3 and IMAP, and encryption via TLS.
Even after Postfix (the MTA) delivers mail, users still need a way to retrieve it from their mail client. That role (MRA) is filled by Dovecot, which runs as a POP3 or IMAP server. Because the MTA and MRA have different responsibilities, their configuration files and commands belong to separate systems—worth keeping straight from the start.
4.2.1Configuration files and verification
- Configuration lives under /etc/dovecot/, centered on dovecot.conf (on many distributions split into per-feature files under
conf.d/and included from there). - doveconf expands and displays the currently effective configuration—useful for seeing the actual applied values after splitting/including files, which helps isolate misconfigurations.
- doveadm is the administration command for operating on users, mailboxes, and messages (listing mailboxes, searching, moving mail, and similar management tasks).
4.2.2POP3, IMAP, and TLS
- POP3 is a simple protocol premised on downloading mail to the client and removing it from the server—not well suited to syncing across multiple devices.
- IMAP keeps mail on the server while syncing folder structure and read/unread state—chosen when multiple devices need consistent access.
- Encryption is provided by TLS. Operating with encryption as the baseline avoids plaintext POP3/IMAP traffic and credential exposure.
The most common contrast: POP3 downloads and removes mail (poor fit for multiple devices) vs. IMAP keeps mail on the server and syncs (fits multiple devices). On the command side, remember doveconf verifies/expands configuration while doveadm performs administration (mailbox operations), and that the configuration centers on dovecot.conf under /etc/dovecot/.
Beyond having different responsibilities, Postfix and Dovecot also give you separate troubleshooting entry points in practice: suspect Postfix (queue, main.cf, SMTP auth) when mail cannot be sent, and suspect Dovecot when a mail client's retrieval or sync misbehaves. Splitting configuration across multiple files under conf.d/ can make it hard to tell which value actually wins—this is exactly where doveconf helps, showing the effective values after resolving the splits and includes. For administration, doveadm lets you inspect a user's mailbox state or search and move messages matching certain conditions. Protocol choice follows operational requirements: if a phone and a PC must access the same mailbox with matching read state, IMAP is the clear choice; if a single device should minimize server storage, POP3 fits. Either way, pairing with TLS encryption is the baseline so credentials and mail content never travel the network in plaintext.
| Item | POP3 | IMAP |
|---|---|---|
| Where mail lives | Downloaded to the client | Kept on the server |
| Multi-device sync | Poor fit | Well suited |
| Read-state sync | None | Yes |
| Encryption | Protected via TLS | Protected via TLS |
Trap: "doveadm checks the effective values of the configuration" is wrong—that is doveconf's role; doveadm is the administration command that operates on mailboxes and messages themselves. Also wrong: "POP3 keeps mail on the server and syncs across multiple devices"—that behavior describes IMAP, not POP3.
4.2.3Section summary
- Config under /etc/dovecot/, centered on dovecot.conf / doveconf verifies (expands) config / doveadm administers (mailbox operations)
- POP3 = download & delete, poor for multi-device / IMAP = kept on server & synced, good for multi-device. Both encrypted via TLS
Sign in to track progress — Log in.
Quick check
(just a quick review)Q1. You want both a smartphone and a PC to access the same mailbox with matching read/unread state on both devices. Which protocol should you choose?
Q2. Dovecot configuration is split across multiple files under /etc/dovecot/conf.d/, and it is unclear which value for a setting is actually applied. Which command should you use to check?
Q3. You need to inspect a user's mailbox state, and search for or move messages matching certain conditions. Which command should you use?
Keep track of your progress
The full study guide is free to read. Sign up free to practice with the question bank, track what you have read, review your mistakes, and highlight passages.