I don't know if this is the right place to report this or not. I am building a new server on a 64 bit CentOS 6.0 platform. [root at newmick ~]# cat /etc/redhat-release CentOS Linux release 6.0 (Final) [root at newmick ~]# uname -a Linux newmick.halshome.net 2.6.32-71.29.1.el6.x86_64 #1 SMP Mon Jun 27 19:49:27 BST 2011 x86_64 x86_64 x86_64 GNU/Linux Mail subsystem consists of: sendmail spamassassin spamass-milter cyrus-imap All of these appear to be working. Mail sent to the system appears in the inbox of the user it is sent to. My problem: I am unable to get the cyrus sieve to work. Attempting to run sieveshell to load the filter fails as shown below. [harold at newmick ~]$ sieveshell localhost connecting to localhost unable to connect to server at /usr/bin/sieveshell line 170. [harold at newmick ~]$ I have googled the error message and can find entries going back as far as the early 2000's. Nothing recent which seems to apply. Details: [root at newmick etc]# telnet localhost sieve Trying ::1... Connected to localhost. Escape character is '^]'. "IMPLEMENTATION" "Cyrus timsieved v2.3.16-Fedora-RPM-2.3.16-6.el6" "SASL" "" "SIEVE" "comparator-i;ascii-numeric fileinto reject vacation imapflags notify envelope relational regex subaddress copy" "STARTTLS" OK [root at newmick etc]# telnet 127.0.0.1 sieve Trying 127.0.0.1... Connected to 127.0.0.1. Escape character is '^]'. "IMPLEMENTATION" "Cyrus timsieved v2.3.16-Fedora-RPM-2.3.16-6.el6" "SASL" "" "SIEVE" "comparator-i;ascii-numeric fileinto reject vacation imapflags notify envelope relational regex subaddress copy" "STARTTLS" OK The following subsystems are running: [root at newmick ~]# service --status-all | grep running abrtd (pid 2538) is running... acpid (pid 1768) is running... atd (pid 2557) is running... auditd (pid 2604) is running... automount (pid 1894) is running... avahi-daemon (pid 1743) is running... crond (pid 2546) is running... cyrus-imapd (pid 13884) is running... hald (pid 1777) is running... ip6tables: Firewall is not running. iptables: Firewall is not running. irqbalance (pid 1577) is running... mdmonitor (pid 1621) is running... messagebus (pid 1731) is running... rpc.statd (pid 1609) is running... rpcbind (pid 1591) is running... rpc.idmapd (pid 1656) is running... rsyslogd (pid 1536) is running... saslauthd (pid 2472) is running... sendmail (pid 2510) is running... sm-client (pid 2519) is running... slapd (pid 1877) is running... spamass-milter (pid 2528) is running... spamd (pid 9308) is running... openssh-daemon (pid 1912) is running... xinetd (pid 1920) is running... [root at newmick ~]# Notes on the above... Firewall is NOT running. saslauthd is running. slapd is running. No errors in the selinux audit logs. Configuration files look like this: [root at newmick etc]# cat /etc/imapd.conf configdirectory: /var/lib/imap partition-default: /var/spool/imap admins: cyrus sievedir: /var/lib/imap/sieve sendmail: /usr/sbin/sendmail hashimapspool: true sasl_pwcheck_method: saslauthd sasl_mech_list: PLAIN tls_cert_file: /etc/pki/tls/certs/cyrus.pem tls_key_file: /etc/pki/tls/certs/cyrus.pem tls_ca_file: /etc/pki/tls/certs/ca-bundle.crt # uncomment this if you're operating in a DSCP environment (RFC-4594) # qosmarking: af13 [root at newmick etc]# [root at newmick etc]# cat /etc/cyrus.conf # standard standalone server implementation START { # do not delete this entry! recover cmd="ctl_cyrusdb -r" # this is only necessary if using idled for IMAP IDLE idled cmd="idled" } # UNIX sockets start with a slash and are put into /var/lib/imap/sockets SERVICES { # add or remove based on preferences # imap cmd="imapd" listen="imap" prefork=5 imaps cmd="imapd -s" listen="imaps" prefork=1 # pop3 cmd="pop3d" listen="pop3" prefork=3 # pop3s cmd="pop3d -s" listen="pop3s" prefork=1 sieve cmd="timsieved" listen="sieve" prefork=0 # these are only necessary if receiving/exporting usenet via NNTP # nntp cmd="nntpd" listen="nntp" prefork=3 # nntps cmd="nntpd -s" listen="nntps" prefork=1 # at least one LMTP is required for delivery # lmtp cmd="lmtpd" listen="lmtp" prefork=0 lmtpunix cmd="lmtpd" listen="/var/lib/imap/socket/lmtp" prefork=1 # this is only necessary if using notifications # notify cmd="notifyd" listen="/var/lib/imap/socket/notify" proto="udp" prefork=1 } EVENTS { # this is required checkpoint cmd="ctl_cyrusdb -c" period=30 # this is only necessary if using duplicate delivery suppression, # Sieve or NNTP delprune cmd="cyr_expire -E 3" at=0400 # this is only necessary if caching TLS sessions tlsprune cmd="tls_prune" at=0400 } [root at newmick etc]# What other information do you need? Is there something obvious I have missed? I tried to send this with a "rpm -qa" attached, but my mail server timed out. too big I guess... Harold