# What is `imaparms`?
`imaparms` is a *handy* Swiss-army-knife-like tool/utility/console app for POSIX-compatible systems that can help you to download/fetch/backup all your mail/email from an IMAP server (e.g. GMail, Yahoo, Hotmail, Yandex, etc, or your own private mail server) to your hard disk, programmatically change flags on messages on the IMAP server (e.g. mark all messages newer than a day old in some folder as unread), delete/expire old messages from the IMAP server, and similar.
Or, more formally: `imaparms` is a utility for fetching and performing batch operations on messages residing on IMAP servers.
That is: login to a specified server, fetch or perform specified actions (count, flag/mark, delete, etc) on all messages matching specified criteria in all specified folders, logout.
Or, in comparison to other things, `imaparms` is an advanced but fairly KISS (Keep It Stupid Simple) replacement for a combination of [fetchmail](https://www.fetchmail.info/)/[getmail](https://github.com/getmail6/getmail6) and [IMAPExpire](https://gitlab.com/mikecardwell/IMAPExpire), with additional features, and written in pure Python.
Also, it fetches mail >150 times faster and (when using `--maildir` option) generates ~150 times less disk writes than `fetchmail` and `getmail` by default, and it is designed to do its very best at not losing any of your mail regardless of network connections failing unexpectedly, your IMAP server generating errors at unexpected times, other simultaneous IMAP clients making incompatible changes that could lead to future data loss, your disk failing while `imaparms` tries to `fsync` your data, and you calling `imaparms` with wrong command line arguments.
# Screenshot
[](https://oxij.org/software/imaparms/imaparms-v2.5.webm)
Click the above image to see the full terminal recording video of `imaparms` invocation (with account data edited out and replaced by fake GMail accounts in post-processing) running `new-mail-hook` indexing new mail with [`notmuch`](https://notmuchmail.org/) ([see workflow example below](#workflow)), followed by a full-text search in Emacs UI of `notmuch`.
It was recorded on a 2013-era laptop (Thinkpad X230 with Intel Core i5-3230M CPU @ 2.60GHz upgraded with 16GB RAM and Samsung 870 EVO SSD), my `notmuch` database contains ~4 millions messages, and the whole search takes only 0.25 seconds in person (but about 2 seconds in the video because rendering an [`asciinema`](https://github.com/asciinema/asciinema) file to gif and then compressing it into webm adds extra time between frames, so it looks much more laggy than it actually is at the end there).
# <span id="why"/>Why does `imaparms` exist?
If all your email experience can be summarized as "I do all my mail in GMail or similar" or if you don't know what a `Maildir` is, **you should start with [this section below](#why-not-gmail) to learn why you might want to do the following**.
If you
- fetch all your mail into a [`Maildir`](https://en.wikipedia.org/wiki/Maildir) with [fetchmail](https://www.fetchmail.info/), [getmail](https://github.com/getmail6/getmail6), or similar,
- index it with [sup](https://sup-heliotrope.github.io/), [notmuch](https://notmuchmail.org/), or similar, and then
- backup your index and tags/labels database with a generic file synchronization tool like [syncthing](https://syncthing.net/), [bup](https://bup.github.io/), [rsync](https://rsync.samba.org/), [git](https://git-scm.com/), or similar
... effectively, you are using IMAP as a mail delivery protocol, not like a mail access protocol it was designed to be.
In which case you might ask yourself, wouldn't it be nice if there was a tool that could help you automate fetching of new messages and deletion of already backed up old messages from IMAP servers in such a way that **any of your own systems crashing or losing hard drives at any point in time would not lose any of your mail**?
`imaparms` is a replacement for `fetchmail`/`getmail` that does this (and more, but mainly this).
## Why would you make a replacement for `fetchmail`/`getmail`?
`imaparms` was inspired by [fetchmail](https://www.fetchmail.info/) and [IMAPExpire](https://gitlab.com/mikecardwell/IMAPExpire) and is basically a *safe* generalized combination of the two.
I used to use and (usually privately, but sometimes not) patch both `fetchmail` and `IMAPExpire` for years before getting tired of it and deciding it would be simpler to just write my own thingy instead of trying to make `fetchmail` fetch mail at decent speeds and fix all the issues making it unsafe and inconvenient to run `IMAPExpire` immediately after `fetchmail` finishes fetching mail.
The main problem is that `fetchmail` fetches yet-*unfetched* mail, while `IMAPExpire` expires *old* mail.
When `fetchmail` gets stuck or crashes it is entirely possible for `IMAPExpire` to delete some old yet-unfetched messages.
(And [getmail](https://github.com/getmail6/getmail6) suffers from exactly the same problems.)
In short, `imaparms` is designed to be used as a IMAP-server-to-local-`Maildir` [Mail Delivery Agent](https://en.wikipedia.org/wiki/Message_delivery_agent) (MDA) that makes the IMAP server in question store as little mail as possible while preventing data loss.
Which is to say, the main use case I made this for is as follows:
- you periodically fetch your mail to a local `Maildir` with this tool's `imaparms fetch` subcommand (which does what `fetchmail --softbounce --invisible --norewrite --mda MDA` does but much faster), then
- you backup your `Maildir` with `syncthing`/`bup`/`rsync`/`git`/etc to make at least one other copy somewhere, and then, after your backup succeeds,
- you run this tool's `imaparms delete` subcommand to expire old already-fetched messages from the server (I prefer to expire messages `--older-than` some number of intervals between backups, just to be safe, but if you do backups directly after the `fetch`, or you like to live dangerously, you could delete old messages immediately), so that
- when/if your account get cracked/hacked the attacker only gets your unfetched mail (+ configurable amount of yet to be removed messages), which is much better than them getting the whole last 20 years or whatever of your correspondence. (If your personal computer gets compromised enough, attackers will eventually get everything anyway, so deleting old mail from servers does not make things worse. But see some more thoughts on this below.)
Also, `imaparms` seems to be one of the fastest, if not the fastest, IMAP fetchers there is.
By default, it fetches mail >150 times faster than [fetchmail](https://www.fetchmail.info/) (and [getmail](https://github.com/getmail6/getmail6)), but if your IMAP server supports long enough command lines, your system can do SSL and your hard drive can flush data fast enough, then you can saturate a gigabit Ethernet link with `imaparms`.
Since bootstrapping into a setup similar to the one described above requires querying into actual IMAP folder names and mass changes to flags on IMAP server-side, `imaparms` provides subcommands for that too.
See the "subcommands" subsection of the [usage section](#usage) for the list available of subcommands and explanations of what they do.
# Quickstart
## Installation
- Install with:
``` {.bash}
pip install imaparms
```
and run as
``` {.bash}
imaparms --help
```
- Alternatively, install it via Nix
``` {.bash}
nix-env -i -f ./default.nix
imaparms --help
```
- Alternatively, run without installing:
``` {.bash}
alias imaparms="python3 -m imaparms"
imaparms --help
```
## How to: backup all your mail from GMail, Yahoo, Hotmail, Yandex, etc
`imaparms` is not *intended* as an *IMAP mirroring tool*, it is intended to be used as a *Mail Delivery Agent with automatic expiration of old server-side mail*, i.e. a better replacement for `fetchmail`+`IMAPExpire` combination.
If you want to keep a synchronized copy of your mail locally and on your mail server without sacrificing any flags, you should use [offlineimap](https://github.com/OfflineIMAP/offlineimap), [imapsync](https://github.com/imapsync/imapsync), or something similar instead.
However, `imaparms` can be used for efficient incremental backups of IMAP server data if you are willing to sacrifice either of `SEEN` or `FLAGGED` ("starred") IMAP flags for it.
Also, making email backups with `imaparms` is pretty simple, [useful](#why-not-gmail), and illustrative, so a couple of examples follow.
### How to: fetch all your emails from GMail, Yahoo, Hotmail, Yandex, etc
The following will fetch all messages from all the folders on the server (without changing message flags on the server side) and just put them all into `~/Mail/backup` `Maildir` (creating it if it does not exists).
``` {.bash}
# backup all your mail from GMail
imaparms fetch --host imap.gmail.com --user account@gmail.com --pass-pinentry \
--maildir ~/Mail/backup --all-folders --any-seen
```
For GMail you will have to create and use application-specific password, which requires enabling 2FA, [see below for more info](#gmail-is-evil).
Also, if you have a lot of mail, this will be very inefficient, as it will try to re-download everything again if it ever gets interrupted.
### How to: efficiently incrementally backup all your mail from GMail, Yahoo, Hotmail, Yandex, etc
To make the above efficient you have to sacrifice either `SEEN` or `FLAGGED` IMAP flags to allow `imaparms` to track which messages are yet to be fetched, i.e. either:
``` {.bash}
# mark all messages as UNSEEN
imaparms mark --host imap.gmail.com --user account@gmail.com --pass-pinentry \
--folder "[Gmail]/All Mail" unseen
# fetch UNSEEN and mark as SEEN as you go
# this can be interrrupted and restarted and it will continue from where it left off
imaparms fetch --host imap.gmail.com --user account@gmail.com --pass-pinentry \
--maildir ~/Mail/backup --folder "[Gmail]/All Mail" --unseen
```
or
``` {.bash}
# mark all messages as UNFLAGGED
imaparms mark --host imap.gmail.com --user account@gmail.com --pass-pinentry \
--folder "[Gmail]/All Mail" unflagged
# similarly
imaparms fetch --host imap.gmail.com --user account@gmail.com --pass-pinentry \
--maildir ~/Mail/backup --folder "[Gmail]/All Mail" --any-seen --unflagged
```
This, of course, means that if you open or "mark as read" a message in GMail's web-mail UI while using `--unseen`, or mark it as flagged ("star") it there while using `--unflagged`, `imaparms` will ignore the message on the next `fetch`.
### How to: efficiently incrementally backup millions and/or decades of messages from GMail, Yahoo, Hotmail, Yandex, etc
In cases where you want to fetch *millions* of messages spanning *decades*, you'll probably want invoke `imaparms fetch` multiple times with progressively smaller ` --older-than` arguments so that IMAP `SEARCH` command responses will be smaller to re-fetch if the process gets interrupted, i.e.:
``` {.bash}
# mark all messages as UNSEEN
imaparms mark --host imap.gmail.com --user account@gmail.com --pass-pinentry \
--folder "[Gmail]/All Mail" unseen
for n in 10 5 3 2 1; do
echo "fetching mail older than $n years..."
imaparms fetch --host imap.gmail.com --user account@gmail.com --pass-pinentry \
--maildir ~/Mail/backup --folder "[Gmail]/All Mail" --unseen \
--older-than $((365*n))
done
```
## What do I do with the resulting `Maildir`?
You feed it into [sup](https://sup-heliotrope.github.io/), [notmuch](https://notmuchmail.org/), or similar, as discussed [this section](#why-not-gmail), and it gives you a GMail-like UI with full-text search and tagging, but with faster search, with no cloud storage involvement, and it works while you are offline.
Or you just repeat this mirroring on a schedule so that [when/if GMail decides to take your mail hostage](#why-not-gmail) you will be prepared to switch.
## Can I use an MDA/LDA to deliver messages?
Yes, just replace `--maildir DIRECTORY` with `--mda MDA`.
For instance, for `maildrop` Mail Delivery Agent (also knows as Local Delivery Agent, LDA, as it is an MDA that gets used to deliver messages to same machine) from [Courier Mail Server project](https://www.courier-mta.org/) --- which is a commodity MDA/LDA with the simplest setup, that I know of --- the simplest `imaparms fetch` invocation looks like this:
``` {.bash}
### setup: do once
mkdir -p ~/Mail/backup/{new,cur,tmp}
cat > ~/.mailfilter << EOF
DEFAULT="\$HOME/Mail/backup"
EOF
# backup all your mail from GMail
imaparms fetch --host imap.gmail.com --user account@gmail.com --pass-pinentry \
--mda maildrop --all-folders --any-seen
```
Of course, you can use any other MDA/LDA you want, e.g.:
- [fdm](https://github.com/nicm/fdm) can function as an LDA and it is also pretty simple to setup;
- deliveries to an SMTP server can be done by using [msmtp](https://marlam.de/msmtp/).
## <span id="workflow"/>How to: implement "fetch + backup + expire" workflow
The intended workflow described [above](#why) looks like this:
``` {.bash}
### setup: do once
echo 0 > ~/.rsync-last-mail-backup-timestamp
cat > ~/bin/new-mail-hook << EOF
#!/bin/sh -e
# index new mail
notmuch new
# auto-tagging rules go here
# backup
backup_start=\$(date +%s)
if rsync -aHAX ~/Mail /disk/backup ; then
echo "\$backup_start" > ~/.rsync-last-mail-backup-timestamp
fi
EOF
chmod +x ~/bin/new-mail-hook
```
``` {.bash}
### repeatable part
# optionally, if needed
# imaparms mark ... --folder "[Gmail]/All Mail" unseen
# every hour, fetch new and expire old mail from two GMail accounts,
# generate new desktop notifications with `notify-send` if some of the commands fail
imaparms for-each --every 3600 --notify-failure \
--host imap.gmail.com \
--user account@gmail.com --passcmd "pass show mail/account@gmail.com" \
--user another@gmail.com --passcmd "pass show mail/another@gmail.com" \
-- \
fetch --folder "[Gmail]/All Mail" --maildir ~/Mail/INBOX --new-mail-cmd new-mail-hook \; \
fetch --folder "[Gmail]/Spam" --maildir ~/Mail/spam \; \
delete --folder "[Gmail]/All Mail" --folder "[Gmail]/Spam" --folder "[Gmail]/Trash" \
--older-than-timestamp-in ~/.rsync-last-mail-backup-timestamp \
--older-than 7
# note how new spam does not invoke `new-mail-hook`
```
You can check your command lines by running with `--very-dry-run` option, for the command above it prints:
```
# every 3600 seconds, for each of
... user account@gmail.com on host imap.gmail.com port 993 (SSL)
... user another@gmail.com on host imap.gmail.com port 993 (SSL)
# do
... in '[Gmail]/All Mail': search (UNSEEN), perform fetch, mark them as SEEN
... in '[Gmail]/Spam': search (UNSEEN), perform fetch, mark them as SEEN
... in '[Gmail]/All Mail', '[Gmail]/Spam', '[Gmail]/Trash': search (SEEN BEFORE 1-Jan-1970) {dynamic}, perform delete
```
Personally, I have a separate script `exec`-invoking `imaparms` (see the terminal recording above) for each mail service I use, my window manager spawns a terminal window with `tmux attach -t subs` on startup while I have the following at the end of my `~/.tmux.conf`:
```
# create new session named "subs" with the first window named "shell"
new-session -s subs -n shell
# set remain-on-exit for all windows in this session by default
set-option -t subs -g remain-on-exit on
# add new windows running imaparms instances
new-window -t :2 -n mail imaparms-fetch-mine
new-window -t :3 -n gmail imaparms-fetch-gmail
# ... and so on
```
This way, if I need to fetch mail from one of the services immediately (e.g. for 2FA tokens sent via email) I just navigate to the respective `tmux` window and hit `Ctrl+C` there.
## How to: run `imaparms` in parallel with `fetchmail` or similar
You can run `imaparms fetch` with `--any-seen --unflagged` command line options instead of the implied `--unseen --any-flagged` options, which will make it use the `FLAGGED` IMAP flag instead of the `SEEN` IMAP flag to track state, allowing you to run it simultaneously with tools that use the `SEEN` flag, like `fetchmail`, `getmail`, or just another instance of `imaparms` (using the other flag).
I.e. if you are really paranoid, you can this feature to check files produced by `fetchmail` and `imaparms fetch` against each other and then simply delete duplicated files.
Or you can use it to run two instances of `imaparms` on two separate machines and only expire old mail from the server after it was successfully backed up onto both machines.
Running in parallel with `fetchmail` using `maildrop` MDA for both `fetchmail` and `imaparms` can be implemented like this:
``` {.bash}
### setup: do once
echo 0 > ~/.rsync-last-mail-backup-timestamp
mkdir -p ~/Mail/INBOX/{new,cur,tmp}
mkdir -p ~/Mail/spam/{new,cur,tmp}
mkdir -p ~/Mail/INBOX.secondary/{new,cur,tmp}
cat > ~/.mailfilter << EOF
DEFAULT="\$HOME/Mail/INBOX"
EOF
cat > ~/.mailfilter-spam << EOF
DEFAULT="\$HOME/Mail/spam"
EOF
cat > ~/.mailfilter-secondary << EOF
DEFAULT="\$HOME/Mail/INBOX.secondary"
EOF
cat > ~/bin/new-mail-hook-dedup << EOF
#!/bin/sh -e
# deduplicate
jdupes -o time -O -rdN ~/Mail/INBOX ~/Mail/INBOX.secondary
# continue as usual
exec ~/bin/new-mail-hook
EOF
chmod +x ~/bin/new-mail-hook-dedup
secondary_common=(--host imap.gmail.com \
--user account@gmail.com --passcmd "pass show mail/account@gmail.com" \
--user another@gmail.com --passcmd "pass show mail/another@gmail.com")
# prepare by unflagging all messages
imaparms mark "${secondary_common[@]}" --folder "INBOX" unflagged
```
``` {.bash}
### repeatable part
# run fetchmail daemon as usual, fetching new mail into the secondary maildir every hour
fetchmail --mda "maildrop ~/.mailfilter-secondary" -d 3600
# every 15 minutes
# - fetch new mail using FLAGGED flag for tracking state from "[Gmail]/All Mail",
# - fetch new mail using SEEN flag for tracking state from "[Gmail]/Spam",
# - expire old backed up messages marked both SEEN (by fetchmail) and FLAGGED (by imaparms) from "[Gmail]/All Mail",
# - expire old backed up messages marked as SEEN (by imaparms) from "[Gmail]/Spam",
# - clean any messages older than 7 days (regardless of their flags) from "[Gmail]/Trash".
# - generate new desktop notifications with `notify-send` if some of the commands fail
imaparms for-each --every 900 --notify-failure \
"${secondary_common[@]}" \
-- \
fetch --folder "[Gmail]/All Mail" --mda maildrop --new-mail-cmd new-mail-hook --any-seen --unflagged \; \
fetch --folder "[Gmail]/Spam" --mda "maildrop ~/.mailfilter-spam" \; \
delete --seen --flagged --folder "[Gmail]/All Mail" \
--older-than-timestamp-in ~/.rsync-last-mail-backup-timestamp \
--older-than 7 \; \
delete "[Gmail]/Spam" \
--older-than-timestamp-in ~/.rsync-last-mail-backup-timestamp \
--older-than 7 \; \
delete --any-seen --any-flagged --folder "[Gmail]/Trash" \
--older-than 7
# note how new spam does not invoke `new-mail-hook`
```
## See also
See the [usage section](#usage) for explanation of used command line options.
See the [examples section](#examples) for more examples.
# <span id="why-not-gmail"/>Why would you even want to use any of this, isn't GMail good enough?
Remember the time when YouTube and Facebook showed you only the posts of people you were subscribed to?
After they locked your in by becoming a monopoly by providing fairly good social networking services for free for years (selling under cost is textbook monopolistic behaviour) they started showing "promoted" posts (i.e. advertisements) in your feed so that they could provide cheap and very effective advertisement services for companies at your expense.
Then, when advertisers were locked in, they started fleecing them too.
Now your subscriptions are just one of the inputs to their *algorithms that are designed to make you waste as much time as possible* on their platforms (*while keeping you satisfied or addicted just enough so that you wouldn't just leave*), and advertisers' ad postings are just inputs to their algorithms that are designed to waste as much of the advertiser's money as possible (being just effective enough to make them spend more).
(The process which Cory Doctorow calls "Enshittification".)
Remember the time when most people run their own mail servers or had their employers run them and you yourself got to decide which messages should go to `INBOX` and which should be marked as spam?
Today, Google provides email services for free, and so >70% of all e-mails originate from or get delivered to Google servers (GMail, GMail on custom domains, corporate GMail).
Now it's Google who decides which messages you get to see and which vanish into the void without a trace.
Which, as a recipient, is highly annoying if you frequently get useful mail that GMail marks as spam or just drops (happens all the time to me).
And, as a sender, is highly annoying when you need to send lots of mail.
Just go look up "Gmail Email Limits" (on a search engine other than Google).
It's a rabbit hole with lots of ad-hoc rules on just how much mail you can send before GMail decides to just drop your messages, yes, *drop*, not mark as spam, not reject, **they will drop your mail and tell neither you nor the recipient anything at all**.
Moreover, they are now working towards making their `INBOX` into an *algorithmically generated feed with "important" messages being shown first*.
It's easy to see where this is going.
Luckily, [while Google is working hard to discourage you from using and/or make open mail protocols unusable](#gmail-is-evil), IMAP is still #1 protocol for accessing and managing mail, and setting up your own mail server gets easier every year, so they can't just stop supporting it just yet (but they are doing their best).
But, objectively, GMail --- when it works --- is a very nice [Mail User Agent](https://en.wikipedia.org/wiki/Mail_user_agent) (aka MUA, aka email client, aka mail app) with an integrated full-text search engine and a labeling system.
Meanwhile, other modern MUAs like [Thunderbird](https://www.thunderbird.net/), [Sylpheed](https://sylpheed.sraoss.jp/en/), or [K-9 Mail](https://k9mail.app/) are designed to be IMAP and SMTP clients *first*, full-text search and tagging/labeling systems *second* (if at all).
Which is to say, they suck at searching and tagging mail.
Especially, since doing those things over IMAP is annoyingly slow, especially when your IMAP server is GMail which very much does not want you to use IMAP (after all, with a MUA working over IMAP, it's the MUA that decides how to sort and display your `INBOX`, not Google, and they hate they can't turn the order of messages in your `INBOX` into something they can sell).
However, there exists a bunch of MUAs that can do full-text mail search and tagging so well and so blazingly fast that they leave GMail in the dust (from a technical standpoint, given an index, full-text search >10x faster than GMail on a single-core of 2012-era laptop with an SSD is pretty easy to archive, simply because your SSD is much closer to you than GMail's servers).
Examples of such awesome MUAs that I'm aware of, in the order from simplest to hardest to setup:
- [sup](https://sup-heliotrope.github.io/) ([also this](https://github.com/sup-heliotrope/sup)) as both MUA and mail indexer,
- [alot](https://github.com/pazz/alot) as MUA + [notmuch](https://notmuchmail.org/) as mail indexer,
- Emacs UI of [notmuch](https://notmuchmail.org/) as MUA + [notmuch](https://notmuchmail.org/) as mail indexer,
- [Mutt](https://en.wikipedia.org/wiki/Mutt_(e-mail_client)) as MUA + [notmuch](https://notmuchmail.org/) as mail indexer.
However, to use these awesome MUAs you need to download your mail and save it in [`Maildir` format](https://en.wikipedia.org/wiki/Maildir) on your hard disk first.
Which is where `imaparms` and similar tools like [fetchmail](https://www.fetchmail.info/), [getmail](https://github.com/getmail6/getmail6), [offlineimap](https://github.com/OfflineIMAP/offlineimap), [imapsync](https://github.com/imapsync/imapsync), and etc come in.
Also, if GMail suddenly decides to take your mail hostage by locking you into their web-mail and disabling IMAP access, [which seems more and more plausible every year](#gmail-is-evil), having a local copy of most of your mail will make it much easier to switch away.
(Seems unrealistic to you?
This actually happened to me with one of the email providers I used before (not GMail, *not yet*).
They basically tried to force me to go through a KYC procedure to allow me to continue using IMAP, but because I had local backups, I just switched all the services that referenced that email address to something else and simply stopped using their service.
Are you sure Google wouldn't do this?)
See ["The Homely Mutt" by Steve Losh](https://stevelosh.com/blog/2012/10/the-homely-mutt/) for a long in-detail explanation on how this setup in general is supposed to work.
It describes a setup specifically tailored for `mutt` + `notmuch` + `offlineimap` + `msmtp` and the actual configs there are somewhat outdated (it was written in 2012) and much more complex than what you would need with, e.g. `sup` + `imaparms` + `msmtp`, but it gives a good overview of the idea in general.
Functionally, `imaparms` takes place `offlineimap` in that article.
Personally, I use `notmuch` with Emacs, which requires almost no setup if you have a well-configured Emacs already (and effectively infinite amounts of setup otherwise).
Also, see ["Sup" article on ArchWiki](https://wiki.archlinux.org/title/Sup) for how to setup `sup`.
(Also, in theory, [Thunderbird](https://www.thunderbird.net/) also supports operation over `Maildir`, but that feature is so buggy it's apparently disabled by default at the moment.)
# <span id="gmail-is-evil"/>Google's security theater
GMail docs say that IMAP and SMTP are "legacy protocols" and are "insecure".
Which, sure, they could be, if you reuse passwords.
But them implying that everything except their own web-mail UI is "insecure" is kinda funny given that they do use SMTP to transfer mail between servers and [signing in with Google prompts](https://web.archive.org/web/20230702050207/https://support.google.com/accounts/answer/7026266?co=GENIE.Platform%3DAndroid&hl=en) exists.
I.e. you can borrow someone's phone, unlock it (passcode? peek over their shoulder or just get some video surveillance footage of them typing it in public; fingerprint? they leave their fingerprints all over the device itself, dust with some flour, take a photo, apply some simple filters, 3D-print the result, this actually takes ~3 minutes to do if you know what you are doing), ask Google to authenticate via prompt.
Done, you can login to everything with no password needed.
And Google appears to give no way to disable Google prompts if your account has an attached Android device.
Though, you can make Google prompts ask for a password too, but that feature needs special setup.
Meanwhile, "legacy" passwords are not secure, apparently?
So to use `imaparms` with GMail you will have to enable 2FA in your account settings and then add an application-specific password for IMAP access.
I.e., instead of generating a random password and giving it to Google (while storing it in a password manager that feeds it to `imaparms`), you ask Google to generate a random password for you and use that with `imaparms`.
To enable 2FA, even for very old accounts that never used anything phone or Android-related, for no rational reasons, GMail requires specifying a working phone number that can receive SMS.
Which you can then simply remove after you copied your OTP secret into an authenticator of your choice.
Sorry, why did you need the phone number, again?
Ah, well, Google now knows it and will be able track your movements by buying location data from your network operator.
Thank you very much.
In theory, as an alternative to application-specific passwords, you can setup OAuth2 and update tokens automatically with [mailctl](https://github.com/pdobsan/mailctl), but Google will still ask for your phone number to set it up, and OAuth2 renewal adds another point of failure without really adding any security if you store your passwords in a password manager and use `--passcmd` option described below to feed them into `imaparms`.
That is to say, I don't use OAuth2, which is why `imaparms` does not support OAuth2.
# <span id="stolen-anyway"/>Your emails will eventually get stolen anyway
Note that [Snowden revelations](https://en.wikipedia.org/wiki/Global_surveillance_disclosures_(2013%E2%80%93present)) mean that Google and US Government store copies of all of your correspondence since 2007-2009 (it depends on your mail provider) even if you delete everything from all the servers.
And they wiretap basically all the traffic going though international Internet exchanges because they wiretap all underwater cables.
Simply because they can, apparently?
(If you think about it, there is absolutely no point to doing this if you are trying to achieve their stated signal-intelligence goals.
Governments and organized crime use one-time-pads since 1950s.
AES256 + 32 bytes of shared secret (+ 8 bytes of plain-text session key + 4 bytes of plain-text IV) + some simple [steganography](https://en.wikipedia.org/wiki/Steganography) and even if the signal gets discovered, no quantum-computer will ever be able to break it, no research into [quantum-safe cryptography](https://en.wikipedia.org/wiki/Post-quantum_cryptography) needed.
So, clearly, this data collection only works against private citizens and civil society which have no ways to distribute symmetric keys and thus have to use public-key cryptography.)
Globally, >70% of all e-mails originate from or get delivered to Google servers (GMail, GMail on custom domains, corporate GMail).
Most e-mails never gets E2E-encrypted at all, `(100 - epsilon)`% (so, basically, 100%) of all e-mails sent over the Internet never get encrypted with quantum-safe cryptography in-transit.
So, eventually, US Government will get plain-text for almost everything you ever sent (unless you are a government official, work for well-organized crime syndicate, or you and all your friends are really paranoid).
Which means that, eventually, all that mail will get stolen.
So, in the best case scenario, a simple relatively benign blackmail-everyone-you-can-to-get-as-much-money-as-possible AI will be able organize a personal WikiLeaks-style breach, for every single person on planet Earth.
No input from nefarious humans interested in exploiting *personally you* required.
After all, you are not that interesting, so you have nothing to fear, nothing to hide, and you certainly did not write any still-embarrassing e-mails when you were 16 years old and did not send any nudes of yourself or anyone else to anyone (including any doctors, during the pandemic) ever.
It would be glorious, wouldn't it?
(Seriously, abstractly speaking, I'm kinda interested in civilization-wide legal and cultural effects of *every embarrassing, even slightly illegal and/or hypocritical thing every person ever did* relentlessly programmatically exploited as blackmail or worse.
Non-abstractly speaking, why exactly do governments spend public money to make this possible?
After all, hoarding of exploitable material that made a disaster after being stolen worked so well with [EternalBlue](https://en.wikipedia.org/wiki/EternalBlue), and that thing was a fixable bug, which leaked blackmail is not.)
That is to say, as a long-term defense measure, this tool is probably useless.
All your mail will get leaked eventually, regardless.
Against random exploitations of your mail servers `imaparms` is perfect.
Also, `imaparms` is a very nice fast mail fetcher, regardless of all of this.
# Comparison to
## [fetchmail](https://www.fetchmail.info/) and [getmail](https://github.com/getmail6/getmail6)
`imaparms fetch`
- fetches your mail >150 times faster by default (both `fetchmail` and `getmail` fetch and mark messages one-by-one, incurring huge network latency overheads, `imaparms fetch` does it in (configurable) batches);
- generates ~150 times less disk writes (`imaparms fetch --maildir` `fsync`s messages to disk in (configurable) batches) improving performance and longevity of your SSD;
- fetches messages out-of-order to try and maximize `messages/second` metric when it makes sense (i.e. it temporarily delays fetching of larger messages if many smaller ones can be fetched instead) so that you could efficiently index your mail in parallel with fetching;
- only does deliveries to a local Maildir (with `imaparms fetch --maildir` option) or [MDA/LDA](https://en.wikipedia.org/wiki/Message_delivery_agent) (with `imaparms fetch --mda` option, which does the same thing as `fetchmail --mda` and `getmail`'s `MDA_external` options), deliveries over SMTP are not and will never be supported (if you want this you can just use [msmtp](https://marlam.de/msmtp/) with `imaparms fetch --mda`); thus, `imaparms`
- is much simpler to use when fetching to a local `Maildir` as it needs no configuration to fetch messages as-is without modifying any headers, thus fetching the same messages twice will produce identical files (which is not true for `fetchmail`, `imaparms fetch --mda MDA` is roughly equivalent to `fetchmail --softbounce --invisible --norewrite --mda MDA`);
- probably will not work with most broken IMAP servers (`fetchmail` has lots of workarounds for server bugs, `imaparms fetch` does not);
- is written in Python (like `getmail`) instead of C (like `fetchmail`);
- has other subcommands, not just `imaparms fetch`.
## [fdm](https://github.com/nicm/fdm)
[A better explanation of what fdm does](https://wiki.archlinux.org/title/fdm).
`imaparms fetch`
- uses server-side message flags to track state instead of keeping a local database of fetched UIDs;
- fetches messages out-of-order to try and maximize `messages/second` metric;
- generates ~150 times less disk writes;
- does not do any filtering, offloads that to MDA/LDA;
- is written in Python instead of C;
- has other subcommands, not just `imaparms fetch`.
## [IMAPExpire](https://gitlab.com/mikecardwell/IMAPExpire)
`imaparms delete`
- allows all UNICODE characters except `\n` in passwords/passphrases (yes, including spaces, quotes, etc);
- provides a bunch of options controlling message selection and uses `--seen` option by default for destructive actions, so you won't accidentally delete any messages you have not yet fetched even if your fetcher got stuck/crashed;
- provides GMail-specific options;
- is written in Python instead of Perl and requires nothing but the basic Python install, no third-party libraries needed;
- has other subcommands, not just `imaparms delete`.
## [offlineimap](https://github.com/OfflineIMAP/offlineimap), [imapsync](https://github.com/imapsync/imapsync), and similar
- `imaparms fetch` does deliveries from an IMAP server to your Maildir/MDA/LDA instead of trying to synchronize state between some combinations of IMAP servers and local `Maildir`s (i.e. for `imaparms fetch` your IMAP server is always the source, never the destination), which might seem like a lack of a feature at first, but
- `imaparms` lacking two-way sync also prevents you from screwing up your `imaparms` invocation options or restarting the program at an inopportune time and losing all your mail on the server on the next sync as a result (like you can with `offlineimap`),
- i.e., with `imaparms` you won't ever lose any messages on the server if you never run `imaparms delete`, and if you do run `imaparms delete`, `imaparms`'s defaults try their best to prevent you from deleting any mail you probably did not mean to delete;
- consequently, `imaparms` is much simpler to use as the complexity of its configuration is proportional to the complexity of your usage;
- `imaparms fetch` generates ~150 times less disk writes;
- `imaparms` has other subcommands, not just `imaparms fetch`.
# License
GPLv3+.
# Usage
## imaparms
A handy Swiss-army-knife-like utility for performing batch operations on messages residing on IMAP servers.
Logins to a specified server, performs specified actions on all messages matching specified criteria in all specified folders, logs out.
- options:
- `--version`
: show program's version number and exit
- `-h, --help`
: show this help message and exit
- `--markdown`
: show help messages formatted in Markdown
- `-q, --quieter`
: be less verbose
- debugging:
- `--very-dry-run`
: verbosely describe what the given command line would do and exit
- `--dry-run`
: perform a trial run without actually performing any changes
- `--debug`
: dump IMAP conversation to stderr
- hooks:
- `--notify-success`
: generate notifications (via `notify-send`) describing server-side changes, if any, at the end of each program cycle; most useful if you run `imaparms` in background with `--every` argument in a graphical environment
- `--success-cmd CMD`
: shell command to run at the end of each program cycle that performed some changes on the server, i.e. a generalized version of `--notify-success`; the spawned process will receive the description of the performed changes via stdin; can be specified multiple times
- `--notify-failure`
: generate notifications (via `notify-send`) describing recent failures, if any, at the end of each program cycle; most useful if you run `imaparms` in background with `--every` argument in a graphical environment
- `--failure-cmd CMD`
: shell command to run at the end of each program cycle that had some of its command fail, i.e. a generalized version of `--notify-failure`; the spawned process will receive the description of the failured via stdin; can be specified multiple times
- authentication settings:
- `--auth-allow-login`
: allow the use of IMAP `LOGIN` command (default)
- `--auth-forbid-login`
: forbid the use of IMAP `LOGIN` command, fail if challenge-response authentication is not available
- `--auth-allow-plain`
: allow passwords to be transmitted over the network in plain-text
- `--auth-forbid-plain`
: forbid passwords from being transmitted over the network in plain-text, plain-text authentication would still be possible over SSL if `--auth-allow-login` is set (default)
- server connection:
can be specified multiple times
- `--plain`
: connect via plain-text socket
- `--ssl`
: connect over SSL socket (default)
- `--starttls`
: connect via plain-text socket, but then use STARTTLS command
- `--host HOST`
: IMAP server to connect to (required)
- `--port PORT`
: port to use (default: 143 for `--plain` and `--starttls`, 993 for `--ssl`)
- `--timeout TIMEOUT`
: socket timeout, in seconds (default: 60)
- authentication to the server:
either of `--pass-pinentry`, `--passfile`, or `--passcmd` are required; can be specified multiple times
- `--user USER`
: username on the server (required)
- `--pass-pinentry`
: read the password via `pinentry`
- `--passfile PASSFILE, --pass-file PASSFILE`
: file containing the password on its first line
- `--passcmd PASSCMD, --pass-cmd PASSCMD`
: shell command that returns the password as the first line of its stdout
- batching settings:
larger values improve performance but produce longer IMAP command lines (which some servers reject) and cause more stuff to be re-downloaded when networking issues happen
- `--store-number INT`
: batch at most this many message UIDs in IMAP `STORE` requests (default: 150)
- `--fetch-number INT`
: batch at most this many message UIDs in IMAP `FETCH` metadata requests (default: 150)
- `--batch-number INT`
: batch at most this many message UIDs in IMAP `FETCH` data requests; essentially, this controls the largest possible number of messages you will have to re-download if connection to the server gets interrupted (default: 150)
- `--batch-size INT`
: batch `FETCH` at most this many bytes of RFC822 messages at once; RFC822 messages larger than this will be fetched one by one (i.e. without batching); essentially, this controls the largest possible number of bytes you will have to re-download if connection to the server gets interrupted while `imaparms` is batching (default: 4194304)
- polling/daemon options:
- `--every INTERVAL`
: repeat the command every `INTERVAL` seconds;
`imaparms` will do its best to repeat the command precisely every `INTERVAL` seconds even if the command involes `fetch`ing of new messages and `--new-mail-cmd` invocations take different time each cycle; if program cycle takes more than `INTERVAL` seconds or `INTERVAL < 60` then `imaparms` would sleep for `60` seconds either way,
this prevents the servers accessed earlier in the cycle from learning about the amount of new data fetched from the servers accessed later in the cycle
- `--every-add-random ADD`
: sleep a random number of seconds in [0, ADD] range (uniform distribution) before each `--every` cycle, including the very first one (default: 60);
if you set it large enough to cover the longest single-server `fetch`, it will prevent any of the servers learning anything about the data on other servers;
if you run `imaparms` on a machine that disconnects from the Internet when you go to sleep and you set it large enough, it will help in preventing the servers from collecting data about your sleep cycle
- message search filters:
- `--older-than DAYS`
: operate on messages older than this many days, **the date will be rounded down to the start of the day; actual matching happens on the server, so all times are server time**; e.g. `--older-than 0` means older than the start of today by server time, `--older-than 1` means older than the start of yesterday, etc; can be specified multiple times, in which case the earliest (the most old) date on the list will be chosen
- `--newer-than DAYS`
: operate on messages newer than this many days, a negation of`--older-than`, so **everything from `--older-than` applies**; e.g., `--newer-than -1` will match files dated into the future, `--newer-than 0` will match files delivered from the beginning of today, etc; can be specified multiple times, in which case the latest (the least old) date on the list will be chosen
- `--older-than-timestamp-in PATH`
: operate on messages older than the timestamp (in seconds since UNIX Epoch) recorded on the first line of this PATH, rounded as described above; can be specified multiple times, in which case it will processed as described above
- `--newer-than-timestamp-in PATH`
: operate on messages newer than the timestamp (in seconds since UNIX Epoch) recorded on the first line of this PATH, rounded as described above; can be specified multiple times, in which case it will processed as described above
- `--older-than-mtime-of PATH`
: operate on messages older than `mtime` of this PATH, rounded as described above; can be specified multiple times, in which case it will processed as described above
- `--newer-than-mtime-of PATH`
: operate on messages newer than `mtime` of this PATH, rounded as described above; can be specified multiple times, in which case it will processed as described above
- `--from ADDRESS`
: operate on messages that have this string as substring of their header's FROM field; can be specified multiple times
- `--not-from ADDRESS`
: operate on messages that don't have this string as substring of their header's FROM field; can be specified multiple times
- subcommands:
- `{list,count,mark,fetch,delete,for-each}`
- `list`
: list all available folders on the server, one per line
- `count`
: count how many matching messages each specified folder has
- `mark`
: mark matching messages in specified folders in a specified way
- `fetch`
: fetch matching messages from specified folders, feed them to an MDA, and then mark them in a specified way if MDA succeeds
- `delete`
: delete matching messages from specified folders
- `for-each`
: perform multiple other subcommands, sequentially, on a single server connection
### imaparms list
Login, perform IMAP `LIST` command to get all folders, print them one per line.
### imaparms count
Login, (optionally) perform IMAP `LIST` command to get all folders, perform IMAP `SEARCH` command with specified filters in each folder, print message counts for each folder one per line.
- options:
- `--porcelain`
: print in a machine-readable format
- folder search filters:
- `--all-folders`
: operate on all folders (default)
- `--folder NAME`
: mail folders to include; can be specified multiple times
- `--not-folder NAME`
: mail folders to exclude; can be specified multiple times
- message IMAP `SEEN` flag filters (mutually exclusive):
- `--any-seen`
: operate on both `SEEN` and not `SEEN` messages (default)
- `--seen`
: operate on messages marked as `SEEN`
- `--unseen`
: operate on messages not marked as `SEEN`
- message IMAP `FLAGGED` flag filters (mutually exclusive):
- `--any-flagged`
: operate on both `FLAGGED` and not `FLAGGED` messages (default)
- `--flagged`
: operate on messages marked as `FLAGGED`
- `--unflagged`
: operate on messages not marked as `FLAGGED`
### imaparms mark
Login, perform IMAP `SEARCH` command with specified filters for each folder, mark resulting messages in specified way by issuing IMAP `STORE` commands.
- folder search filters (required):
- `--all-folders`
: operate on all folders
- `--folder NAME`
: mail folders to include; can be specified multiple times
- `--not-folder NAME`
: mail folders to exclude; can be specified multiple times
- message IMAP `SEEN` flag filters (mutually exclusive, default: depends on other arguments):
- `--any-seen`
: operate on both `SEEN` and not `SEEN` messages
- `--seen`
: operate on messages marked as `SEEN`
- `--unseen`
: operate on messages not marked as `SEEN`
- message IMAP `FLAGGED` flag filters (mutually exclusive, default: depends on other arguments):
- `--any-flagged`
: operate on both `FLAGGED` and not `FLAGGED` messages
- `--flagged`
: operate on messages marked as `FLAGGED`
- `--unflagged`
: operate on messages not marked as `FLAGGED`
- marking:
- `{seen,unseen,flagged,unflagged}`
: mark how (required):
- `seen`: add `SEEN` flag, sets `--unseen` if no message flag filter is specified
- `unseen`: remove `SEEN` flag, sets `--seen` if no message flag filter is specified
- `flag`: add `FLAGGED` flag, sets `--unflagged` if no message flag filter is specified
- `unflag`: remove `FLAGGED` flag, sets `--flagged` if no message flag filter is specified
### imaparms fetch
Login, perform IMAP `SEARCH` command with specified filters for each folder, fetch resulting messages in (configurable) batches, feed each batch of messages to an MDA, mark each message for which MDA succeeded in a specified way by issuing IMAP `STORE` commands.
- folder search filters:
- `--all-folders`
: operate on all folders (default)
- `--folder NAME`
: mail folders to include; can be specified multiple times
- `--not-folder NAME`
: mail folders to exclude; can be specified multiple times
- delivery target (required, mutually exclusive):
- `--maildir DIRECTORY`
: Maildir to deliver the messages to;
with this specified `imaparms` will simply drop raw RFC822 messages, one message per file, into `DIRECTORY/new` (creating it, `DIRECTORY/cur`, and `DIRECTORY/tmp` if any of those do not exists)
- `--mda COMMAND`
: shell command to use as an MDA to deliver the messages to;
with this specified `imaparms` will spawn `COMMAND` via the shell and then feed raw RFC822 message into its `stdin`, the resulting process is then responsible for delivering the message to `Maildir`, `mbox`, etc;
`maildrop` from Courier Mail Server project is a good KISS default
- delivery mode (mutually exclusive):
- `--yolo`
: messages that fail to be delivered into the `--maildir` or by the `--mda` are left un`--mark`ed on the server but no other messages get affected, current `imaparms fetch` continues as if nothing is amiss
- `--careful`
: messages that fail to be delivered into the `--maildir` or by the `--mda` are left un`--mark`ed on the server but no other messages get affected, `imaparms` aborts currently running `fetch` if zero messages from the current batch get delivered as that usually means that the target file system is out of space, read-only, or generates IO errors (default)
- `--paranoid`
: `imaparms` aborts the process immediately if any of the messages in the current batch fail to be delivered into the `--maildir` or by the `--mda`, the whole batch gets left un`--mark`ed on the server
- hooks:
- `--new-mail-cmd CMD`
: shell command to run at the end of each program cycle that had new messages successfully delivered into the `--maildir` or by the `--mda` of this `fetch` subcommand; can be specified multiple times
- message IMAP `SEEN` flag filters (mutually exclusive):
- `--any-seen`
: operate on both `SEEN` and not `SEEN` messages
- `--seen`
: operate on messages marked as `SEEN`
- `--unseen`
: operate on messages not marked as `SEEN` (default)
- message IMAP `FLAGGED` flag filters (mutually exclusive):
- `--any-flagged`
: operate on both `FLAGGED` and not `FLAGGED` messages (default)
- `--flagged`
: operate on messages marked as `FLAGGED`
- `--unflagged`
: operate on messages not marked as `FLAGGED`
- marking:
- `--mark {auto,noop,seen,unseen,flagged,unflagged}`
: after the message was fetched:
- `auto`: `seen` when only `--unseen` is set (default), `flagged` when only `--unflagged` is set, `noop` otherwise
- `noop`: do nothing
- `seen`: add `SEEN` flag
- `unseen`: remove `SEEN` flag
- `flagged`: add `FLAGGED` flag
- `unflagged`: remove `FLAGGED` flag
### imaparms delete
Login, perform IMAP `SEARCH` command with specified filters for each folder, delete them from the server using a specified method.
- folder search filters (required):
- `--all-folders`
: operate on all folders
- `--folder NAME`
: mail folders to include; can be specified multiple times
- `--not-folder NAME`
: mail folders to exclude; can be specified multiple times
- message IMAP `SEEN` flag filters (mutually exclusive):
- `--any-seen`
: operate on both `SEEN` and not `SEEN` messages
- `--seen`
: operate on messages marked as `SEEN` (default)
- `--unseen`
: operate on messages not marked as `SEEN`
- message IMAP `FLAGGED` flag filters (mutually exclusive):
- `--any-flagged`
: operate on both `FLAGGED` and not `FLAGGED` messages (default)
- `--flagged`
: operate on messages marked as `FLAGGED`
- `--unflagged`
: operate on messages not marked as `FLAGGED`
- deletion method:
- `--method {auto,delete,delete-noexpunge,gmail-trash}`
: delete messages how:
- `auto`: `gmail-trash` when `--host imap.gmail.com` and the current folder is not `[Gmail]/Trash`, `delete` otherwise (default)
- `delete`: mark messages as deleted and then use IMAP `EXPUNGE` command, i.e. this does what you would expect a "delete" command to do, works for most IMAP servers
- `delete-noexpunge`: mark messages as deleted but skip issuing IMAP `EXPUNGE` command hoping the server does as RFC2060 says and auto-`EXPUNGE`s messages on IMAP `CLOSE`; this is much faster than `delete` but some servers (like GMail) fail to implement this properly
- `gmail-trash`: move messages to `[Gmail]/Trash` in GMail-specific way instead of trying to delete them immediately (GMail ignores IMAP `Deleted` flag and `EXPUNGE` command outside of `[Gmail]/Trash`); you can then `imaparms delete --folder "[Gmail]/Trash"` them after (which will default to `--method delete`), or you could just leave them there and GMail will delete them in 30 days
### imaparms for-each
For each account: login, perform other subcommands given in `ARG`s, logout.
This is most useful for performing complex changes `--every` once in while in daemon mode.
Or if you want to set different `--folder`s for different subcommands but run them all at once.
Except for the simplest of cases, you must use `--` before `ARG`s so that any options specified in `ARG`s won't be picked up by `for-each`.
Run with `--very-dry-run` to see the interpretation of the given command line.
All generated hooks are deduplicated and run after all other subcommands are done.
E.g., if you have several `fetch --new-mail-cmd filter-my-mail` as subcommands of `for-each`, then `filter-my-mail` *will be run **once** after all other subcommands finish*.
- positional arguments:
- `ARG`
: arguments, these will be split by `;` and parsed into other subcommands
- folder search filters (will be used as default for subcommands):
- `--all-folders`
: operate on all folders
- `--folder NAME`
: mail folders to include; can be specified multiple times
- `--not-folder NAME`
: mail folders to exclude; can be specified multiple times
## Notes on usage
- When specifying account-related settings `--user` and `--pass*` options should be always specified last.
Internally, new account definition gets emitted when a new `--pass*` option finishes processing.
All server connection and authentication options except `--user` and `--pass*` get reused between successively defined accounts, unless overwritten with a new value before the next `--pass*` option.
- Message search filters are connected by logical "AND"s so, e.g., `--from "github.com" --not-from "notifications@github.com"` will act on messages which have a `From:` header with `github.com` but without `notifications@github.com` as substrings.
- `fetch` subcommand acts on `--unseen` messages by default.
- `delete` subcommand acts on `--seen` messages by default.
- Under `for-each`, after any command that produced errors (e.g. a `fetch` that failed to deliver at least one message because `--maildir` or `--mda` failed to do their job), any successive `delete` commands will be automatically skipped.
In theory, in the case of `--maildir` or `--mda` failing to deliver some messages `imaparms` need not do this as those messages will be left unmarked on the server, but in combination with the default `--careful` delivery option (which see) this behaviour could still be helpful in preventing data loss in the event where the target filesystem starts generating random IO errors (e.g. if you HDD/SSD just failed).
In general, this behaviour exists to prevent `delete` from accidentally deleting something important when folder hierarchy on the IMAP server changes to be incompatible with in-use `imaparms` options. For instance, say you are trying to `fetch` from a folder that was recently renamed and then try to `delete` from `--all-folders`. The behaviour described above will prevent this from happening.
## Examples
- List all available IMAP folders and count how many messages they contain:
- with the password taken from `pinentry`:
```
imaparms count --host imap.example.com --user account@example.com --pass-pinentry
```
- with the password taken from the first line of the given file:
```
imaparms count --host imap.example.com --user account@example.com \
--passfile /path/to/file/containing/account@example.com.password
```
- with the password taken from the output of password-store utility:
```
imaparms count --host imap.example.com --user account@example.com \
--passcmd "pass show mail/account@example.com"
```
- with two accounts on the same server:
```
imaparms count --porcelain \
--host imap.example.com \
--user account@example.com --passcmd "pass show mail/account@example.com" \
--user another@example.com --passcmd "pass show mail/another@example.com"
```
Now, assuming the following are set:
```
common=(--host imap.example.com --user account@example.com --passcmd "pass show mail/account@example.com")
common_mda=("${{common[@]}}" --mda maildrop)
gmail_common=(--host imap.gmail.com --user account@gmail.com --passcmd "pass show mail/account@gmail.com")
gmail_common_mda=("${{gmail_common[@]}}" --mda maildrop)
```
- Count how many messages older than 7 days are in `[Gmail]/All Mail` folder:
```
imaparms count "${gmail_common[@]}" --folder "[Gmail]/All Mail" --older-than 7
```
- Mark all messages in `INBOX` as not `SEEN`, fetch all not `SEEN` messages marking them `SEEN` as you download them so that if the process gets interrupted you could continue from where you left off:
```
# setup: do once
imaparms mark "${common[@]}" --folder INBOX unseen
# repeatable part
imaparms fetch "${common_mda[@]}" --folder INBOX
```
- Similarly to the above, but use `FLAGGED` instead of `SEEN`. This allows to use this in parallel with another instance of `imaparms` using the `SEEN` flag, e.g. if you want to backup to two different machines independently, or if you want to use `imaparms` simultaneously in parallel with `fetchmail` or other similar tool:
```
# setup: do once
imaparms mark "${common[@]}" --folder INBOX unflagged
# repeatable part
imaparms fetch "${common_mda[@]}" --folder INBOX --any-seen --unflagged
# this will work as if nothing of the above was run
fetchmail
# in this use case you should use both `--seen` and `--flagged` when expiring old messages to only delete messages fetched by both imaparms and fetchmail
imaparms delete "${common[@]}" --folder INBOX --older-than 7 --seen --flagged
```
- Similarly to the above, but run `imaparms fetch` as a daemon to download updates every hour:
```
# setup: do once
imaparms mark "${common[@]}" --folder INBOX unseen
# repeatable part
imaparms fetch "${common_mda[@]}" --folder INBOX --every 3600
```
- Fetch all messages from `INBOX` folder that were delivered in the last 7 days (the resulting date is rounded down to the start of the day by server time), but don't change any flags:
```
imaparms fetch "${common_mda[@]}" --folder INBOX --any-seen --newer-than 7
```
- Fetch all messages from `INBOX` folder that were delivered from the beginning of today (by server time), without changing any flags:
```
imaparms fetch "${common_mda[@]}" --folder INBOX --any-seen --newer-than 0
```
- Delete all `SEEN` messages older than 7 days from `INBOX` folder:
Assuming you fetched and backed up all your messages already this allows you to keep as little as possible on the server, so that if your account gets cracked/hacked, you won't be as vulnerable.
```
imaparms delete "${common[@]}" --folder INBOX --older-than 7
```
(`--seen` is implied by default)
- **DANGEROUS!** If you fetched and backed up all your messages already, you can skip `--older-than` and just delete all `SEEN` messages instead:
```
imaparms delete "${common[@]}" --folder INBOX
```
Though, setting at least `--older-than 1`, to make sure you won't lose any data in case you forgot you are running another instance of `imaparms` or another IMAP client that changes message flags (`imaparms` will abort if it notices another client doing it, but better be safe than sorry), is highly recommended anyway.
- Fetch everything GMail considers to be Spam for local filtering:
```
# setup: do once
mkdir -p ~/Mail/spam/{new,cur,tmp}
cat > ~/.mailfilter-spam << EOF
DEFAULT="\$HOME/Mail/spam"
EOF
imaparms mark "${gmail_common[@]}" --folder "[Gmail]/Spam" unseen
# repeatable part
imaparms fetch "${gmail_common_mda[@]}" --mda "maildrop ~/.mailfilter-spam" --folder "[Gmail]/Spam"
```
- Fetch everything from all folders, except `INBOX`, `[Gmail]/Starred` (because in GMail there are included in `[Gmail]/All Mail`), and `[Gmail]/Trash`:
```
imaparms fetch "${gmail_common_mda[@]}" --all-folders \
--not-folder INBOX --not-folder "[Gmail]/Starred" --not-folder "[Gmail]/Trash"
```
The purpose of this is purely illustrative. In GMail all messages outside of `[Gmail]/Trash` and `[Gmail]/Spam` are included in `[Gmail]/All Mail` so you should probably just fetch that folder instead.
- GMail-specific deletion mode: move (expire) old messages to `[Gmail]/Trash` and then delete them:
In GMail, deleting messages from `INBOX` does not actually delete them, nor moves them to trash, just removes them from `INBOX` while keeping them available from `[Gmail]/All Mail`.
To work around this, this tool provides a GMail-specific `--method gmail-trash` that moves messages to `[Gmail]/Trash` in a GMail-specific way (this is not a repetition, it does require issuing special IMAP `STORE` commands to achieve this):
```
imaparms delete "${gmail_common[@]}" --folder "[Gmail]/All Mail" --older-than 7
```
(`--method gmail-trash` is implied by `--host imap.gmail.com` and `--folder` not being `[Gmail]/Trash`, `--seen` is still implied by default)
Messages in `[Gmail]/Trash` will be automatically removed by GMail in 30 days, but you can also delete them immediately with:
```
imaparms delete "${gmail_common[@]}" --folder "[Gmail]/Trash" --any-seen --older-than 7
```
(`--method delete` is implied by `--host imap.gmail.com` but `--folder` being `[Gmail]/Trash`)
- Every hour, fetch messages from different folders using different MDA settings and then expire messages older than 7 days, all in a single pass (reusing the server connection between subcommands):
```
imaparms for-each "${gmail_common[@]}" --every 3600 -- \
fetch --folder "[Gmail]/All Mail" --mda maildrop \; \
fetch --folder "[Gmail]/Spam" --mda "maildrop ~/.mailfilter-spam" \; \
delete --folder "[Gmail]/All Mail" --folder "[Gmail]/Spam" --folder "[Gmail]/Trash" \
--older-than 7
```
Note the `--` and `\;` tokens, without them the above will fail to parse.
Also note that `delete` will use `--method gmail-trash` for `[Gmail]/All Mail` and `[Gmail]/Spam` and then use `--method delete` for `[Gmail]/Trash` even though they are specified together.
Raw data
{
"_id": null,
"home_page": "",
"name": "imaparms",
"maintainer": "",
"docs_url": null,
"requires_python": ">=3.7",
"maintainer_email": "",
"keywords": "IMAP,IMAP4,mail,email,e-mail,mail delivery agent,MDA,LDA,fetchmail,getmail,fdm,fetch,archive,download,delete,expire,mark,star,mark as seen,mark as unseen,mark as flagged,mark as unflagged",
"author": "",
"author_email": "Jan Malakhovski <oxij@oxij.org>",
"download_url": "https://files.pythonhosted.org/packages/4a/1c/135ec401a92da65a6b330b7a558cf73ed9fcebcb2174490636ad60062412/imaparms-2.6.0.tar.gz",
"platform": null,
"description": "# What is `imaparms`?\n\n`imaparms` is a *handy* Swiss-army-knife-like tool/utility/console app for POSIX-compatible systems that can help you to download/fetch/backup all your mail/email from an IMAP server (e.g. GMail, Yahoo, Hotmail, Yandex, etc, or your own private mail server) to your hard disk, programmatically change flags on messages on the IMAP server (e.g. mark all messages newer than a day old in some folder as unread), delete/expire old messages from the IMAP server, and similar.\n\nOr, more formally: `imaparms` is a utility for fetching and performing batch operations on messages residing on IMAP servers.\nThat is: login to a specified server, fetch or perform specified actions (count, flag/mark, delete, etc) on all messages matching specified criteria in all specified folders, logout.\n\nOr, in comparison to other things, `imaparms` is an advanced but fairly KISS (Keep It Stupid Simple) replacement for a combination of [fetchmail](https://www.fetchmail.info/)/[getmail](https://github.com/getmail6/getmail6) and [IMAPExpire](https://gitlab.com/mikecardwell/IMAPExpire), with additional features, and written in pure Python.\nAlso, it fetches mail >150 times faster and (when using `--maildir` option) generates ~150 times less disk writes than `fetchmail` and `getmail` by default, and it is designed to do its very best at not losing any of your mail regardless of network connections failing unexpectedly, your IMAP server generating errors at unexpected times, other simultaneous IMAP clients making incompatible changes that could lead to future data loss, your disk failing while `imaparms` tries to `fsync` your data, and you calling `imaparms` with wrong command line arguments.\n\n# Screenshot\n\n[](https://oxij.org/software/imaparms/imaparms-v2.5.webm)\n\nClick the above image to see the full terminal recording video of `imaparms` invocation (with account data edited out and replaced by fake GMail accounts in post-processing) running `new-mail-hook` indexing new mail with [`notmuch`](https://notmuchmail.org/) ([see workflow example below](#workflow)), followed by a full-text search in Emacs UI of `notmuch`.\n\nIt was recorded on a 2013-era laptop (Thinkpad X230 with Intel Core i5-3230M CPU @ 2.60GHz upgraded with 16GB RAM and Samsung 870 EVO SSD), my `notmuch` database contains ~4 millions messages, and the whole search takes only 0.25 seconds in person (but about 2 seconds in the video because rendering an [`asciinema`](https://github.com/asciinema/asciinema) file to gif and then compressing it into webm adds extra time between frames, so it looks much more laggy than it actually is at the end there).\n\n# <span id=\"why\"/>Why does `imaparms` exist?\n\nIf all your email experience can be summarized as \"I do all my mail in GMail or similar\" or if you don't know what a `Maildir` is, **you should start with [this section below](#why-not-gmail) to learn why you might want to do the following**.\n\nIf you\n\n- fetch all your mail into a [`Maildir`](https://en.wikipedia.org/wiki/Maildir) with [fetchmail](https://www.fetchmail.info/), [getmail](https://github.com/getmail6/getmail6), or similar,\n- index it with [sup](https://sup-heliotrope.github.io/), [notmuch](https://notmuchmail.org/), or similar, and then\n- backup your index and tags/labels database with a generic file synchronization tool like [syncthing](https://syncthing.net/), [bup](https://bup.github.io/), [rsync](https://rsync.samba.org/), [git](https://git-scm.com/), or similar\n\n... effectively, you are using IMAP as a mail delivery protocol, not like a mail access protocol it was designed to be.\n\nIn which case you might ask yourself, wouldn't it be nice if there was a tool that could help you automate fetching of new messages and deletion of already backed up old messages from IMAP servers in such a way that **any of your own systems crashing or losing hard drives at any point in time would not lose any of your mail**?\n\n`imaparms` is a replacement for `fetchmail`/`getmail` that does this (and more, but mainly this).\n\n## Why would you make a replacement for `fetchmail`/`getmail`?\n\n`imaparms` was inspired by [fetchmail](https://www.fetchmail.info/) and [IMAPExpire](https://gitlab.com/mikecardwell/IMAPExpire) and is basically a *safe* generalized combination of the two.\n\nI used to use and (usually privately, but sometimes not) patch both `fetchmail` and `IMAPExpire` for years before getting tired of it and deciding it would be simpler to just write my own thingy instead of trying to make `fetchmail` fetch mail at decent speeds and fix all the issues making it unsafe and inconvenient to run `IMAPExpire` immediately after `fetchmail` finishes fetching mail.\nThe main problem is that `fetchmail` fetches yet-*unfetched* mail, while `IMAPExpire` expires *old* mail.\nWhen `fetchmail` gets stuck or crashes it is entirely possible for `IMAPExpire` to delete some old yet-unfetched messages.\n(And [getmail](https://github.com/getmail6/getmail6) suffers from exactly the same problems.)\n\nIn short, `imaparms` is designed to be used as a IMAP-server-to-local-`Maildir` [Mail Delivery Agent](https://en.wikipedia.org/wiki/Message_delivery_agent) (MDA) that makes the IMAP server in question store as little mail as possible while preventing data loss.\n\nWhich is to say, the main use case I made this for is as follows:\n\n- you periodically fetch your mail to a local `Maildir` with this tool's `imaparms fetch` subcommand (which does what `fetchmail --softbounce --invisible --norewrite --mda MDA` does but much faster), then\n- you backup your `Maildir` with `syncthing`/`bup`/`rsync`/`git`/etc to make at least one other copy somewhere, and then, after your backup succeeds,\n- you run this tool's `imaparms delete` subcommand to expire old already-fetched messages from the server (I prefer to expire messages `--older-than` some number of intervals between backups, just to be safe, but if you do backups directly after the `fetch`, or you like to live dangerously, you could delete old messages immediately), so that\n- when/if your account get cracked/hacked the attacker only gets your unfetched mail (+ configurable amount of yet to be removed messages), which is much better than them getting the whole last 20 years or whatever of your correspondence. (If your personal computer gets compromised enough, attackers will eventually get everything anyway, so deleting old mail from servers does not make things worse. But see some more thoughts on this below.)\n\nAlso, `imaparms` seems to be one of the fastest, if not the fastest, IMAP fetchers there is.\nBy default, it fetches mail >150 times faster than [fetchmail](https://www.fetchmail.info/) (and [getmail](https://github.com/getmail6/getmail6)), but if your IMAP server supports long enough command lines, your system can do SSL and your hard drive can flush data fast enough, then you can saturate a gigabit Ethernet link with `imaparms`.\n\nSince bootstrapping into a setup similar to the one described above requires querying into actual IMAP folder names and mass changes to flags on IMAP server-side, `imaparms` provides subcommands for that too.\n\nSee the \"subcommands\" subsection of the [usage section](#usage) for the list available of subcommands and explanations of what they do.\n\n# Quickstart\n\n## Installation\n\n- Install with:\n ``` {.bash}\n pip install imaparms\n ```\n and run as\n ``` {.bash}\n imaparms --help\n ```\n- Alternatively, install it via Nix\n ``` {.bash}\n nix-env -i -f ./default.nix\n imaparms --help\n ```\n- Alternatively, run without installing:\n ``` {.bash}\n alias imaparms=\"python3 -m imaparms\"\n imaparms --help\n ```\n\n## How to: backup all your mail from GMail, Yahoo, Hotmail, Yandex, etc\n\n`imaparms` is not *intended* as an *IMAP mirroring tool*, it is intended to be used as a *Mail Delivery Agent with automatic expiration of old server-side mail*, i.e. a better replacement for `fetchmail`+`IMAPExpire` combination.\nIf you want to keep a synchronized copy of your mail locally and on your mail server without sacrificing any flags, you should use [offlineimap](https://github.com/OfflineIMAP/offlineimap), [imapsync](https://github.com/imapsync/imapsync), or something similar instead.\n\nHowever, `imaparms` can be used for efficient incremental backups of IMAP server data if you are willing to sacrifice either of `SEEN` or `FLAGGED` (\"starred\") IMAP flags for it.\nAlso, making email backups with `imaparms` is pretty simple, [useful](#why-not-gmail), and illustrative, so a couple of examples follow.\n\n### How to: fetch all your emails from GMail, Yahoo, Hotmail, Yandex, etc\n\nThe following will fetch all messages from all the folders on the server (without changing message flags on the server side) and just put them all into `~/Mail/backup` `Maildir` (creating it if it does not exists).\n\n``` {.bash}\n# backup all your mail from GMail\nimaparms fetch --host imap.gmail.com --user account@gmail.com --pass-pinentry \\\n --maildir ~/Mail/backup --all-folders --any-seen\n```\n\nFor GMail you will have to create and use application-specific password, which requires enabling 2FA, [see below for more info](#gmail-is-evil).\n\nAlso, if you have a lot of mail, this will be very inefficient, as it will try to re-download everything again if it ever gets interrupted.\n\n### How to: efficiently incrementally backup all your mail from GMail, Yahoo, Hotmail, Yandex, etc\n\nTo make the above efficient you have to sacrifice either `SEEN` or `FLAGGED` IMAP flags to allow `imaparms` to track which messages are yet to be fetched, i.e. either:\n\n``` {.bash}\n# mark all messages as UNSEEN\nimaparms mark --host imap.gmail.com --user account@gmail.com --pass-pinentry \\\n --folder \"[Gmail]/All Mail\" unseen\n\n# fetch UNSEEN and mark as SEEN as you go\n# this can be interrrupted and restarted and it will continue from where it left off\nimaparms fetch --host imap.gmail.com --user account@gmail.com --pass-pinentry \\\n --maildir ~/Mail/backup --folder \"[Gmail]/All Mail\" --unseen\n```\n\nor\n\n``` {.bash}\n# mark all messages as UNFLAGGED\nimaparms mark --host imap.gmail.com --user account@gmail.com --pass-pinentry \\\n --folder \"[Gmail]/All Mail\" unflagged\n\n# similarly\nimaparms fetch --host imap.gmail.com --user account@gmail.com --pass-pinentry \\\n --maildir ~/Mail/backup --folder \"[Gmail]/All Mail\" --any-seen --unflagged\n```\n\nThis, of course, means that if you open or \"mark as read\" a message in GMail's web-mail UI while using `--unseen`, or mark it as flagged (\"star\") it there while using `--unflagged`, `imaparms` will ignore the message on the next `fetch`.\n\n### How to: efficiently incrementally backup millions and/or decades of messages from GMail, Yahoo, Hotmail, Yandex, etc\n\nIn cases where you want to fetch *millions* of messages spanning *decades*, you'll probably want invoke `imaparms fetch` multiple times with progressively smaller ` --older-than` arguments so that IMAP `SEARCH` command responses will be smaller to re-fetch if the process gets interrupted, i.e.:\n\n``` {.bash}\n# mark all messages as UNSEEN\nimaparms mark --host imap.gmail.com --user account@gmail.com --pass-pinentry \\\n --folder \"[Gmail]/All Mail\" unseen\n\nfor n in 10 5 3 2 1; do\n echo \"fetching mail older than $n years...\"\n imaparms fetch --host imap.gmail.com --user account@gmail.com --pass-pinentry \\\n --maildir ~/Mail/backup --folder \"[Gmail]/All Mail\" --unseen \\\n --older-than $((365*n))\ndone\n```\n\n## What do I do with the resulting `Maildir`?\n\nYou feed it into [sup](https://sup-heliotrope.github.io/), [notmuch](https://notmuchmail.org/), or similar, as discussed [this section](#why-not-gmail), and it gives you a GMail-like UI with full-text search and tagging, but with faster search, with no cloud storage involvement, and it works while you are offline.\n\nOr you just repeat this mirroring on a schedule so that [when/if GMail decides to take your mail hostage](#why-not-gmail) you will be prepared to switch.\n\n## Can I use an MDA/LDA to deliver messages?\n\nYes, just replace `--maildir DIRECTORY` with `--mda MDA`.\nFor instance, for `maildrop` Mail Delivery Agent (also knows as Local Delivery Agent, LDA, as it is an MDA that gets used to deliver messages to same machine) from [Courier Mail Server project](https://www.courier-mta.org/) --- which is a commodity MDA/LDA with the simplest setup, that I know of --- the simplest `imaparms fetch` invocation looks like this:\n\n``` {.bash}\n### setup: do once\nmkdir -p ~/Mail/backup/{new,cur,tmp}\n\ncat > ~/.mailfilter << EOF\nDEFAULT=\"\\$HOME/Mail/backup\"\nEOF\n\n# backup all your mail from GMail\nimaparms fetch --host imap.gmail.com --user account@gmail.com --pass-pinentry \\\n --mda maildrop --all-folders --any-seen\n```\n\nOf course, you can use any other MDA/LDA you want, e.g.:\n\n- [fdm](https://github.com/nicm/fdm) can function as an LDA and it is also pretty simple to setup;\n\n- deliveries to an SMTP server can be done by using [msmtp](https://marlam.de/msmtp/).\n\n## <span id=\"workflow\"/>How to: implement \"fetch + backup + expire\" workflow\n\nThe intended workflow described [above](#why) looks like this:\n\n``` {.bash}\n### setup: do once\necho 0 > ~/.rsync-last-mail-backup-timestamp\n\ncat > ~/bin/new-mail-hook << EOF\n#!/bin/sh -e\n# index new mail\nnotmuch new\n\n# auto-tagging rules go here\n\n# backup\nbackup_start=\\$(date +%s)\nif rsync -aHAX ~/Mail /disk/backup ; then\n echo \"\\$backup_start\" > ~/.rsync-last-mail-backup-timestamp\nfi\nEOF\nchmod +x ~/bin/new-mail-hook\n```\n\n``` {.bash}\n### repeatable part\n\n# optionally, if needed\n# imaparms mark ... --folder \"[Gmail]/All Mail\" unseen\n\n# every hour, fetch new and expire old mail from two GMail accounts,\n# generate new desktop notifications with `notify-send` if some of the commands fail\nimaparms for-each --every 3600 --notify-failure \\\n --host imap.gmail.com \\\n --user account@gmail.com --passcmd \"pass show mail/account@gmail.com\" \\\n --user another@gmail.com --passcmd \"pass show mail/another@gmail.com\" \\\n -- \\\n fetch --folder \"[Gmail]/All Mail\" --maildir ~/Mail/INBOX --new-mail-cmd new-mail-hook \\; \\\n fetch --folder \"[Gmail]/Spam\" --maildir ~/Mail/spam \\; \\\n delete --folder \"[Gmail]/All Mail\" --folder \"[Gmail]/Spam\" --folder \"[Gmail]/Trash\" \\\n --older-than-timestamp-in ~/.rsync-last-mail-backup-timestamp \\\n --older-than 7\n\n# note how new spam does not invoke `new-mail-hook`\n```\n\nYou can check your command lines by running with `--very-dry-run` option, for the command above it prints:\n\n```\n# every 3600 seconds, for each of\n... user account@gmail.com on host imap.gmail.com port 993 (SSL)\n... user another@gmail.com on host imap.gmail.com port 993 (SSL)\n# do\n... in '[Gmail]/All Mail': search (UNSEEN), perform fetch, mark them as SEEN\n... in '[Gmail]/Spam': search (UNSEEN), perform fetch, mark them as SEEN\n... in '[Gmail]/All Mail', '[Gmail]/Spam', '[Gmail]/Trash': search (SEEN BEFORE 1-Jan-1970) {dynamic}, perform delete\n```\n\nPersonally, I have a separate script `exec`-invoking `imaparms` (see the terminal recording above) for each mail service I use, my window manager spawns a terminal window with `tmux attach -t subs` on startup while I have the following at the end of my `~/.tmux.conf`:\n\n```\n# create new session named \"subs\" with the first window named \"shell\"\nnew-session -s subs -n shell\n# set remain-on-exit for all windows in this session by default\nset-option -t subs -g remain-on-exit on\n# add new windows running imaparms instances\nnew-window -t :2 -n mail imaparms-fetch-mine\nnew-window -t :3 -n gmail imaparms-fetch-gmail\n# ... and so on\n```\n\nThis way, if I need to fetch mail from one of the services immediately (e.g. for 2FA tokens sent via email) I just navigate to the respective `tmux` window and hit `Ctrl+C` there.\n\n## How to: run `imaparms` in parallel with `fetchmail` or similar\n\nYou can run `imaparms fetch` with `--any-seen --unflagged` command line options instead of the implied `--unseen --any-flagged` options, which will make it use the `FLAGGED` IMAP flag instead of the `SEEN` IMAP flag to track state, allowing you to run it simultaneously with tools that use the `SEEN` flag, like `fetchmail`, `getmail`, or just another instance of `imaparms` (using the other flag).\n\nI.e. if you are really paranoid, you can this feature to check files produced by `fetchmail` and `imaparms fetch` against each other and then simply delete duplicated files.\nOr you can use it to run two instances of `imaparms` on two separate machines and only expire old mail from the server after it was successfully backed up onto both machines.\n\nRunning in parallel with `fetchmail` using `maildrop` MDA for both `fetchmail` and `imaparms` can be implemented like this:\n\n``` {.bash}\n### setup: do once\necho 0 > ~/.rsync-last-mail-backup-timestamp\n\nmkdir -p ~/Mail/INBOX/{new,cur,tmp}\nmkdir -p ~/Mail/spam/{new,cur,tmp}\nmkdir -p ~/Mail/INBOX.secondary/{new,cur,tmp}\n\ncat > ~/.mailfilter << EOF\nDEFAULT=\"\\$HOME/Mail/INBOX\"\nEOF\n\ncat > ~/.mailfilter-spam << EOF\nDEFAULT=\"\\$HOME/Mail/spam\"\nEOF\n\ncat > ~/.mailfilter-secondary << EOF\nDEFAULT=\"\\$HOME/Mail/INBOX.secondary\"\nEOF\n\ncat > ~/bin/new-mail-hook-dedup << EOF\n#!/bin/sh -e\n# deduplicate\njdupes -o time -O -rdN ~/Mail/INBOX ~/Mail/INBOX.secondary\n\n# continue as usual\nexec ~/bin/new-mail-hook\nEOF\nchmod +x ~/bin/new-mail-hook-dedup\n\nsecondary_common=(--host imap.gmail.com \\\n --user account@gmail.com --passcmd \"pass show mail/account@gmail.com\" \\\n --user another@gmail.com --passcmd \"pass show mail/another@gmail.com\")\n\n# prepare by unflagging all messages\nimaparms mark \"${secondary_common[@]}\" --folder \"INBOX\" unflagged\n```\n\n``` {.bash}\n### repeatable part\n# run fetchmail daemon as usual, fetching new mail into the secondary maildir every hour\nfetchmail --mda \"maildrop ~/.mailfilter-secondary\" -d 3600\n\n# every 15 minutes\n# - fetch new mail using FLAGGED flag for tracking state from \"[Gmail]/All Mail\",\n# - fetch new mail using SEEN flag for tracking state from \"[Gmail]/Spam\",\n# - expire old backed up messages marked both SEEN (by fetchmail) and FLAGGED (by imaparms) from \"[Gmail]/All Mail\",\n# - expire old backed up messages marked as SEEN (by imaparms) from \"[Gmail]/Spam\",\n# - clean any messages older than 7 days (regardless of their flags) from \"[Gmail]/Trash\".\n# - generate new desktop notifications with `notify-send` if some of the commands fail\nimaparms for-each --every 900 --notify-failure \\\n \"${secondary_common[@]}\" \\\n -- \\\n fetch --folder \"[Gmail]/All Mail\" --mda maildrop --new-mail-cmd new-mail-hook --any-seen --unflagged \\; \\\n fetch --folder \"[Gmail]/Spam\" --mda \"maildrop ~/.mailfilter-spam\" \\; \\\n delete --seen --flagged --folder \"[Gmail]/All Mail\" \\\n --older-than-timestamp-in ~/.rsync-last-mail-backup-timestamp \\\n --older-than 7 \\; \\\n delete \"[Gmail]/Spam\" \\\n --older-than-timestamp-in ~/.rsync-last-mail-backup-timestamp \\\n --older-than 7 \\; \\\n delete --any-seen --any-flagged --folder \"[Gmail]/Trash\" \\\n --older-than 7\n\n# note how new spam does not invoke `new-mail-hook`\n```\n\n## See also\n\nSee the [usage section](#usage) for explanation of used command line options.\n\nSee the [examples section](#examples) for more examples.\n\n# <span id=\"why-not-gmail\"/>Why would you even want to use any of this, isn't GMail good enough?\n\nRemember the time when YouTube and Facebook showed you only the posts of people you were subscribed to?\nAfter they locked your in by becoming a monopoly by providing fairly good social networking services for free for years (selling under cost is textbook monopolistic behaviour) they started showing \"promoted\" posts (i.e. advertisements) in your feed so that they could provide cheap and very effective advertisement services for companies at your expense.\nThen, when advertisers were locked in, they started fleecing them too.\n\nNow your subscriptions are just one of the inputs to their *algorithms that are designed to make you waste as much time as possible* on their platforms (*while keeping you satisfied or addicted just enough so that you wouldn't just leave*), and advertisers' ad postings are just inputs to their algorithms that are designed to waste as much of the advertiser's money as possible (being just effective enough to make them spend more).\n\n(The process which Cory Doctorow calls \"Enshittification\".)\n\nRemember the time when most people run their own mail servers or had their employers run them and you yourself got to decide which messages should go to `INBOX` and which should be marked as spam?\nToday, Google provides email services for free, and so >70% of all e-mails originate from or get delivered to Google servers (GMail, GMail on custom domains, corporate GMail).\nNow it's Google who decides which messages you get to see and which vanish into the void without a trace.\n\nWhich, as a recipient, is highly annoying if you frequently get useful mail that GMail marks as spam or just drops (happens all the time to me).\nAnd, as a sender, is highly annoying when you need to send lots of mail.\nJust go look up \"Gmail Email Limits\" (on a search engine other than Google).\nIt's a rabbit hole with lots of ad-hoc rules on just how much mail you can send before GMail decides to just drop your messages, yes, *drop*, not mark as spam, not reject, **they will drop your mail and tell neither you nor the recipient anything at all**.\n\nMoreover, they are now working towards making their `INBOX` into an *algorithmically generated feed with \"important\" messages being shown first*.\nIt's easy to see where this is going.\n\nLuckily, [while Google is working hard to discourage you from using and/or make open mail protocols unusable](#gmail-is-evil), IMAP is still #1 protocol for accessing and managing mail, and setting up your own mail server gets easier every year, so they can't just stop supporting it just yet (but they are doing their best).\n\nBut, objectively, GMail --- when it works --- is a very nice [Mail User Agent](https://en.wikipedia.org/wiki/Mail_user_agent) (aka MUA, aka email client, aka mail app) with an integrated full-text search engine and a labeling system.\n\nMeanwhile, other modern MUAs like [Thunderbird](https://www.thunderbird.net/), [Sylpheed](https://sylpheed.sraoss.jp/en/), or [K-9 Mail](https://k9mail.app/) are designed to be IMAP and SMTP clients *first*, full-text search and tagging/labeling systems *second* (if at all).\nWhich is to say, they suck at searching and tagging mail.\nEspecially, since doing those things over IMAP is annoyingly slow, especially when your IMAP server is GMail which very much does not want you to use IMAP (after all, with a MUA working over IMAP, it's the MUA that decides how to sort and display your `INBOX`, not Google, and they hate they can't turn the order of messages in your `INBOX` into something they can sell).\n\nHowever, there exists a bunch of MUAs that can do full-text mail search and tagging so well and so blazingly fast that they leave GMail in the dust (from a technical standpoint, given an index, full-text search >10x faster than GMail on a single-core of 2012-era laptop with an SSD is pretty easy to archive, simply because your SSD is much closer to you than GMail's servers).\n\nExamples of such awesome MUAs that I'm aware of, in the order from simplest to hardest to setup:\n\n- [sup](https://sup-heliotrope.github.io/) ([also this](https://github.com/sup-heliotrope/sup)) as both MUA and mail indexer,\n- [alot](https://github.com/pazz/alot) as MUA + [notmuch](https://notmuchmail.org/) as mail indexer,\n- Emacs UI of [notmuch](https://notmuchmail.org/) as MUA + [notmuch](https://notmuchmail.org/) as mail indexer,\n- [Mutt](https://en.wikipedia.org/wiki/Mutt_(e-mail_client)) as MUA + [notmuch](https://notmuchmail.org/) as mail indexer.\n\nHowever, to use these awesome MUAs you need to download your mail and save it in [`Maildir` format](https://en.wikipedia.org/wiki/Maildir) on your hard disk first.\n\nWhich is where `imaparms` and similar tools like [fetchmail](https://www.fetchmail.info/), [getmail](https://github.com/getmail6/getmail6), [offlineimap](https://github.com/OfflineIMAP/offlineimap), [imapsync](https://github.com/imapsync/imapsync), and etc come in.\n\nAlso, if GMail suddenly decides to take your mail hostage by locking you into their web-mail and disabling IMAP access, [which seems more and more plausible every year](#gmail-is-evil), having a local copy of most of your mail will make it much easier to switch away.\n(Seems unrealistic to you?\nThis actually happened to me with one of the email providers I used before (not GMail, *not yet*).\nThey basically tried to force me to go through a KYC procedure to allow me to continue using IMAP, but because I had local backups, I just switched all the services that referenced that email address to something else and simply stopped using their service.\nAre you sure Google wouldn't do this?)\n\nSee [\"The Homely Mutt\" by Steve Losh](https://stevelosh.com/blog/2012/10/the-homely-mutt/) for a long in-detail explanation on how this setup in general is supposed to work.\nIt describes a setup specifically tailored for `mutt` + `notmuch` + `offlineimap` + `msmtp` and the actual configs there are somewhat outdated (it was written in 2012) and much more complex than what you would need with, e.g. `sup` + `imaparms` + `msmtp`, but it gives a good overview of the idea in general.\nFunctionally, `imaparms` takes place `offlineimap` in that article.\n\nPersonally, I use `notmuch` with Emacs, which requires almost no setup if you have a well-configured Emacs already (and effectively infinite amounts of setup otherwise).\n\nAlso, see [\"Sup\" article on ArchWiki](https://wiki.archlinux.org/title/Sup) for how to setup `sup`.\n\n(Also, in theory, [Thunderbird](https://www.thunderbird.net/) also supports operation over `Maildir`, but that feature is so buggy it's apparently disabled by default at the moment.)\n\n# <span id=\"gmail-is-evil\"/>Google's security theater\n\nGMail docs say that IMAP and SMTP are \"legacy protocols\" and are \"insecure\".\nWhich, sure, they could be, if you reuse passwords.\nBut them implying that everything except their own web-mail UI is \"insecure\" is kinda funny given that they do use SMTP to transfer mail between servers and [signing in with Google prompts](https://web.archive.org/web/20230702050207/https://support.google.com/accounts/answer/7026266?co=GENIE.Platform%3DAndroid&hl=en) exists.\nI.e. you can borrow someone's phone, unlock it (passcode? peek over their shoulder or just get some video surveillance footage of them typing it in public; fingerprint? they leave their fingerprints all over the device itself, dust with some flour, take a photo, apply some simple filters, 3D-print the result, this actually takes ~3 minutes to do if you know what you are doing), ask Google to authenticate via prompt.\nDone, you can login to everything with no password needed.\nAnd Google appears to give no way to disable Google prompts if your account has an attached Android device.\nThough, you can make Google prompts ask for a password too, but that feature needs special setup.\nMeanwhile, \"legacy\" passwords are not secure, apparently?\n\nSo to use `imaparms` with GMail you will have to enable 2FA in your account settings and then add an application-specific password for IMAP access.\nI.e., instead of generating a random password and giving it to Google (while storing it in a password manager that feeds it to `imaparms`), you ask Google to generate a random password for you and use that with `imaparms`.\n\nTo enable 2FA, even for very old accounts that never used anything phone or Android-related, for no rational reasons, GMail requires specifying a working phone number that can receive SMS.\nWhich you can then simply remove after you copied your OTP secret into an authenticator of your choice.\nSorry, why did you need the phone number, again?\n\nAh, well, Google now knows it and will be able track your movements by buying location data from your network operator.\nThank you very much.\n\nIn theory, as an alternative to application-specific passwords, you can setup OAuth2 and update tokens automatically with [mailctl](https://github.com/pdobsan/mailctl), but Google will still ask for your phone number to set it up, and OAuth2 renewal adds another point of failure without really adding any security if you store your passwords in a password manager and use `--passcmd` option described below to feed them into `imaparms`.\n\nThat is to say, I don't use OAuth2, which is why `imaparms` does not support OAuth2.\n\n# <span id=\"stolen-anyway\"/>Your emails will eventually get stolen anyway\n\nNote that [Snowden revelations](https://en.wikipedia.org/wiki/Global_surveillance_disclosures_(2013%E2%80%93present)) mean that Google and US Government store copies of all of your correspondence since 2007-2009 (it depends on your mail provider) even if you delete everything from all the servers.\n\nAnd they wiretap basically all the traffic going though international Internet exchanges because they wiretap all underwater cables.\nSimply because they can, apparently?\n(If you think about it, there is absolutely no point to doing this if you are trying to achieve their stated signal-intelligence goals.\nGovernments and organized crime use one-time-pads since 1950s.\nAES256 + 32 bytes of shared secret (+ 8 bytes of plain-text session key + 4 bytes of plain-text IV) + some simple [steganography](https://en.wikipedia.org/wiki/Steganography) and even if the signal gets discovered, no quantum-computer will ever be able to break it, no research into [quantum-safe cryptography](https://en.wikipedia.org/wiki/Post-quantum_cryptography) needed.\nSo, clearly, this data collection only works against private citizens and civil society which have no ways to distribute symmetric keys and thus have to use public-key cryptography.)\n\nGlobally, >70% of all e-mails originate from or get delivered to Google servers (GMail, GMail on custom domains, corporate GMail).\n\nMost e-mails never gets E2E-encrypted at all, `(100 - epsilon)`% (so, basically, 100%) of all e-mails sent over the Internet never get encrypted with quantum-safe cryptography in-transit.\n\nSo, eventually, US Government will get plain-text for almost everything you ever sent (unless you are a government official, work for well-organized crime syndicate, or you and all your friends are really paranoid).\n\nWhich means that, eventually, all that mail will get stolen.\n\nSo, in the best case scenario, a simple relatively benign blackmail-everyone-you-can-to-get-as-much-money-as-possible AI will be able organize a personal WikiLeaks-style breach, for every single person on planet Earth.\nNo input from nefarious humans interested in exploiting *personally you* required.\nAfter all, you are not that interesting, so you have nothing to fear, nothing to hide, and you certainly did not write any still-embarrassing e-mails when you were 16 years old and did not send any nudes of yourself or anyone else to anyone (including any doctors, during the pandemic) ever.\n\nIt would be glorious, wouldn't it?\n\n(Seriously, abstractly speaking, I'm kinda interested in civilization-wide legal and cultural effects of *every embarrassing, even slightly illegal and/or hypocritical thing every person ever did* relentlessly programmatically exploited as blackmail or worse.\nNon-abstractly speaking, why exactly do governments spend public money to make this possible?\nAfter all, hoarding of exploitable material that made a disaster after being stolen worked so well with [EternalBlue](https://en.wikipedia.org/wiki/EternalBlue), and that thing was a fixable bug, which leaked blackmail is not.)\n\nThat is to say, as a long-term defense measure, this tool is probably useless.\nAll your mail will get leaked eventually, regardless.\nAgainst random exploitations of your mail servers `imaparms` is perfect.\n\nAlso, `imaparms` is a very nice fast mail fetcher, regardless of all of this.\n\n# Comparison to\n\n## [fetchmail](https://www.fetchmail.info/) and [getmail](https://github.com/getmail6/getmail6)\n\n`imaparms fetch`\n\n- fetches your mail >150 times faster by default (both `fetchmail` and `getmail` fetch and mark messages one-by-one, incurring huge network latency overheads, `imaparms fetch` does it in (configurable) batches);\n- generates ~150 times less disk writes (`imaparms fetch --maildir` `fsync`s messages to disk in (configurable) batches) improving performance and longevity of your SSD;\n- fetches messages out-of-order to try and maximize `messages/second` metric when it makes sense (i.e. it temporarily delays fetching of larger messages if many smaller ones can be fetched instead) so that you could efficiently index your mail in parallel with fetching;\n- only does deliveries to a local Maildir (with `imaparms fetch --maildir` option) or [MDA/LDA](https://en.wikipedia.org/wiki/Message_delivery_agent) (with `imaparms fetch --mda` option, which does the same thing as `fetchmail --mda` and `getmail`'s `MDA_external` options), deliveries over SMTP are not and will never be supported (if you want this you can just use [msmtp](https://marlam.de/msmtp/) with `imaparms fetch --mda`); thus, `imaparms`\n- is much simpler to use when fetching to a local `Maildir` as it needs no configuration to fetch messages as-is without modifying any headers, thus fetching the same messages twice will produce identical files (which is not true for `fetchmail`, `imaparms fetch --mda MDA` is roughly equivalent to `fetchmail --softbounce --invisible --norewrite --mda MDA`);\n- probably will not work with most broken IMAP servers (`fetchmail` has lots of workarounds for server bugs, `imaparms fetch` does not);\n- is written in Python (like `getmail`) instead of C (like `fetchmail`);\n- has other subcommands, not just `imaparms fetch`.\n\n## [fdm](https://github.com/nicm/fdm)\n\n[A better explanation of what fdm does](https://wiki.archlinux.org/title/fdm).\n\n`imaparms fetch`\n\n- uses server-side message flags to track state instead of keeping a local database of fetched UIDs;\n- fetches messages out-of-order to try and maximize `messages/second` metric;\n- generates ~150 times less disk writes;\n- does not do any filtering, offloads that to MDA/LDA;\n- is written in Python instead of C;\n- has other subcommands, not just `imaparms fetch`.\n\n## [IMAPExpire](https://gitlab.com/mikecardwell/IMAPExpire)\n\n`imaparms delete`\n\n- allows all UNICODE characters except `\\n` in passwords/passphrases (yes, including spaces, quotes, etc);\n- provides a bunch of options controlling message selection and uses `--seen` option by default for destructive actions, so you won't accidentally delete any messages you have not yet fetched even if your fetcher got stuck/crashed;\n- provides GMail-specific options;\n- is written in Python instead of Perl and requires nothing but the basic Python install, no third-party libraries needed;\n- has other subcommands, not just `imaparms delete`.\n\n## [offlineimap](https://github.com/OfflineIMAP/offlineimap), [imapsync](https://github.com/imapsync/imapsync), and similar\n\n- `imaparms fetch` does deliveries from an IMAP server to your Maildir/MDA/LDA instead of trying to synchronize state between some combinations of IMAP servers and local `Maildir`s (i.e. for `imaparms fetch` your IMAP server is always the source, never the destination), which might seem like a lack of a feature at first, but\n - `imaparms` lacking two-way sync also prevents you from screwing up your `imaparms` invocation options or restarting the program at an inopportune time and losing all your mail on the server on the next sync as a result (like you can with `offlineimap`),\n - i.e., with `imaparms` you won't ever lose any messages on the server if you never run `imaparms delete`, and if you do run `imaparms delete`, `imaparms`'s defaults try their best to prevent you from deleting any mail you probably did not mean to delete;\n- consequently, `imaparms` is much simpler to use as the complexity of its configuration is proportional to the complexity of your usage;\n- `imaparms fetch` generates ~150 times less disk writes;\n- `imaparms` has other subcommands, not just `imaparms fetch`.\n\n# License\n\nGPLv3+.\n\n# Usage\n\n## imaparms\n\nA handy Swiss-army-knife-like utility for performing batch operations on messages residing on IMAP servers.\nLogins to a specified server, performs specified actions on all messages matching specified criteria in all specified folders, logs out.\n\n- options:\n - `--version`\n : show program's version number and exit\n - `-h, --help`\n : show this help message and exit\n - `--markdown`\n : show help messages formatted in Markdown\n - `-q, --quieter`\n : be less verbose\n\n- debugging:\n - `--very-dry-run`\n : verbosely describe what the given command line would do and exit\n - `--dry-run`\n : perform a trial run without actually performing any changes\n - `--debug`\n : dump IMAP conversation to stderr\n\n- hooks:\n - `--notify-success`\n : generate notifications (via `notify-send`) describing server-side changes, if any, at the end of each program cycle; most useful if you run `imaparms` in background with `--every` argument in a graphical environment\n - `--success-cmd CMD`\n : shell command to run at the end of each program cycle that performed some changes on the server, i.e. a generalized version of `--notify-success`; the spawned process will receive the description of the performed changes via stdin; can be specified multiple times\n - `--notify-failure`\n : generate notifications (via `notify-send`) describing recent failures, if any, at the end of each program cycle; most useful if you run `imaparms` in background with `--every` argument in a graphical environment\n - `--failure-cmd CMD`\n : shell command to run at the end of each program cycle that had some of its command fail, i.e. a generalized version of `--notify-failure`; the spawned process will receive the description of the failured via stdin; can be specified multiple times\n\n- authentication settings:\n - `--auth-allow-login`\n : allow the use of IMAP `LOGIN` command (default)\n - `--auth-forbid-login`\n : forbid the use of IMAP `LOGIN` command, fail if challenge-response authentication is not available\n - `--auth-allow-plain`\n : allow passwords to be transmitted over the network in plain-text\n - `--auth-forbid-plain`\n : forbid passwords from being transmitted over the network in plain-text, plain-text authentication would still be possible over SSL if `--auth-allow-login` is set (default)\n\n- server connection:\n can be specified multiple times\n\n - `--plain`\n : connect via plain-text socket\n - `--ssl`\n : connect over SSL socket (default)\n - `--starttls`\n : connect via plain-text socket, but then use STARTTLS command\n - `--host HOST`\n : IMAP server to connect to (required)\n - `--port PORT`\n : port to use (default: 143 for `--plain` and `--starttls`, 993 for `--ssl`)\n - `--timeout TIMEOUT`\n : socket timeout, in seconds (default: 60)\n\n- authentication to the server:\n either of `--pass-pinentry`, `--passfile`, or `--passcmd` are required; can be specified multiple times\n\n - `--user USER`\n : username on the server (required)\n - `--pass-pinentry`\n : read the password via `pinentry`\n - `--passfile PASSFILE, --pass-file PASSFILE`\n : file containing the password on its first line\n - `--passcmd PASSCMD, --pass-cmd PASSCMD`\n : shell command that returns the password as the first line of its stdout\n\n- batching settings:\n larger values improve performance but produce longer IMAP command lines (which some servers reject) and cause more stuff to be re-downloaded when networking issues happen\n\n - `--store-number INT`\n : batch at most this many message UIDs in IMAP `STORE` requests (default: 150)\n - `--fetch-number INT`\n : batch at most this many message UIDs in IMAP `FETCH` metadata requests (default: 150)\n - `--batch-number INT`\n : batch at most this many message UIDs in IMAP `FETCH` data requests; essentially, this controls the largest possible number of messages you will have to re-download if connection to the server gets interrupted (default: 150)\n - `--batch-size INT`\n : batch `FETCH` at most this many bytes of RFC822 messages at once; RFC822 messages larger than this will be fetched one by one (i.e. without batching); essentially, this controls the largest possible number of bytes you will have to re-download if connection to the server gets interrupted while `imaparms` is batching (default: 4194304)\n\n- polling/daemon options:\n - `--every INTERVAL`\n : repeat the command every `INTERVAL` seconds;\n `imaparms` will do its best to repeat the command precisely every `INTERVAL` seconds even if the command involes `fetch`ing of new messages and `--new-mail-cmd` invocations take different time each cycle; if program cycle takes more than `INTERVAL` seconds or `INTERVAL < 60` then `imaparms` would sleep for `60` seconds either way,\n this prevents the servers accessed earlier in the cycle from learning about the amount of new data fetched from the servers accessed later in the cycle\n - `--every-add-random ADD`\n : sleep a random number of seconds in [0, ADD] range (uniform distribution) before each `--every` cycle, including the very first one (default: 60);\n if you set it large enough to cover the longest single-server `fetch`, it will prevent any of the servers learning anything about the data on other servers;\n if you run `imaparms` on a machine that disconnects from the Internet when you go to sleep and you set it large enough, it will help in preventing the servers from collecting data about your sleep cycle\n\n- message search filters:\n - `--older-than DAYS`\n : operate on messages older than this many days, **the date will be rounded down to the start of the day; actual matching happens on the server, so all times are server time**; e.g. `--older-than 0` means older than the start of today by server time, `--older-than 1` means older than the start of yesterday, etc; can be specified multiple times, in which case the earliest (the most old) date on the list will be chosen\n - `--newer-than DAYS`\n : operate on messages newer than this many days, a negation of`--older-than`, so **everything from `--older-than` applies**; e.g., `--newer-than -1` will match files dated into the future, `--newer-than 0` will match files delivered from the beginning of today, etc; can be specified multiple times, in which case the latest (the least old) date on the list will be chosen\n - `--older-than-timestamp-in PATH`\n : operate on messages older than the timestamp (in seconds since UNIX Epoch) recorded on the first line of this PATH, rounded as described above; can be specified multiple times, in which case it will processed as described above\n - `--newer-than-timestamp-in PATH`\n : operate on messages newer than the timestamp (in seconds since UNIX Epoch) recorded on the first line of this PATH, rounded as described above; can be specified multiple times, in which case it will processed as described above\n - `--older-than-mtime-of PATH`\n : operate on messages older than `mtime` of this PATH, rounded as described above; can be specified multiple times, in which case it will processed as described above\n - `--newer-than-mtime-of PATH`\n : operate on messages newer than `mtime` of this PATH, rounded as described above; can be specified multiple times, in which case it will processed as described above\n - `--from ADDRESS`\n : operate on messages that have this string as substring of their header's FROM field; can be specified multiple times\n - `--not-from ADDRESS`\n : operate on messages that don't have this string as substring of their header's FROM field; can be specified multiple times\n\n- subcommands:\n - `{list,count,mark,fetch,delete,for-each}`\n - `list`\n : list all available folders on the server, one per line\n - `count`\n : count how many matching messages each specified folder has\n - `mark`\n : mark matching messages in specified folders in a specified way\n - `fetch`\n : fetch matching messages from specified folders, feed them to an MDA, and then mark them in a specified way if MDA succeeds\n - `delete`\n : delete matching messages from specified folders\n - `for-each`\n : perform multiple other subcommands, sequentially, on a single server connection\n\n### imaparms list\n\nLogin, perform IMAP `LIST` command to get all folders, print them one per line.\n\n### imaparms count\n\nLogin, (optionally) perform IMAP `LIST` command to get all folders, perform IMAP `SEARCH` command with specified filters in each folder, print message counts for each folder one per line.\n\n- options:\n - `--porcelain`\n : print in a machine-readable format\n\n- folder search filters:\n - `--all-folders`\n : operate on all folders (default)\n - `--folder NAME`\n : mail folders to include; can be specified multiple times\n - `--not-folder NAME`\n : mail folders to exclude; can be specified multiple times\n\n- message IMAP `SEEN` flag filters (mutually exclusive):\n - `--any-seen`\n : operate on both `SEEN` and not `SEEN` messages (default)\n - `--seen`\n : operate on messages marked as `SEEN`\n - `--unseen`\n : operate on messages not marked as `SEEN`\n\n- message IMAP `FLAGGED` flag filters (mutually exclusive):\n - `--any-flagged`\n : operate on both `FLAGGED` and not `FLAGGED` messages (default)\n - `--flagged`\n : operate on messages marked as `FLAGGED`\n - `--unflagged`\n : operate on messages not marked as `FLAGGED`\n\n### imaparms mark\n\nLogin, perform IMAP `SEARCH` command with specified filters for each folder, mark resulting messages in specified way by issuing IMAP `STORE` commands.\n\n- folder search filters (required):\n - `--all-folders`\n : operate on all folders\n - `--folder NAME`\n : mail folders to include; can be specified multiple times\n - `--not-folder NAME`\n : mail folders to exclude; can be specified multiple times\n\n- message IMAP `SEEN` flag filters (mutually exclusive, default: depends on other arguments):\n - `--any-seen`\n : operate on both `SEEN` and not `SEEN` messages\n - `--seen`\n : operate on messages marked as `SEEN`\n - `--unseen`\n : operate on messages not marked as `SEEN`\n\n- message IMAP `FLAGGED` flag filters (mutually exclusive, default: depends on other arguments):\n - `--any-flagged`\n : operate on both `FLAGGED` and not `FLAGGED` messages\n - `--flagged`\n : operate on messages marked as `FLAGGED`\n - `--unflagged`\n : operate on messages not marked as `FLAGGED`\n\n- marking:\n - `{seen,unseen,flagged,unflagged}`\n : mark how (required):\n - `seen`: add `SEEN` flag, sets `--unseen` if no message flag filter is specified\n - `unseen`: remove `SEEN` flag, sets `--seen` if no message flag filter is specified\n - `flag`: add `FLAGGED` flag, sets `--unflagged` if no message flag filter is specified\n - `unflag`: remove `FLAGGED` flag, sets `--flagged` if no message flag filter is specified\n\n### imaparms fetch\n\nLogin, perform IMAP `SEARCH` command with specified filters for each folder, fetch resulting messages in (configurable) batches, feed each batch of messages to an MDA, mark each message for which MDA succeeded in a specified way by issuing IMAP `STORE` commands.\n\n- folder search filters:\n - `--all-folders`\n : operate on all folders (default)\n - `--folder NAME`\n : mail folders to include; can be specified multiple times\n - `--not-folder NAME`\n : mail folders to exclude; can be specified multiple times\n\n- delivery target (required, mutually exclusive):\n - `--maildir DIRECTORY`\n : Maildir to deliver the messages to;\n with this specified `imaparms` will simply drop raw RFC822 messages, one message per file, into `DIRECTORY/new` (creating it, `DIRECTORY/cur`, and `DIRECTORY/tmp` if any of those do not exists)\n - `--mda COMMAND`\n : shell command to use as an MDA to deliver the messages to;\n with this specified `imaparms` will spawn `COMMAND` via the shell and then feed raw RFC822 message into its `stdin`, the resulting process is then responsible for delivering the message to `Maildir`, `mbox`, etc;\n `maildrop` from Courier Mail Server project is a good KISS default\n\n- delivery mode (mutually exclusive):\n - `--yolo`\n : messages that fail to be delivered into the `--maildir` or by the `--mda` are left un`--mark`ed on the server but no other messages get affected, current `imaparms fetch` continues as if nothing is amiss\n - `--careful`\n : messages that fail to be delivered into the `--maildir` or by the `--mda` are left un`--mark`ed on the server but no other messages get affected, `imaparms` aborts currently running `fetch` if zero messages from the current batch get delivered as that usually means that the target file system is out of space, read-only, or generates IO errors (default)\n - `--paranoid`\n : `imaparms` aborts the process immediately if any of the messages in the current batch fail to be delivered into the `--maildir` or by the `--mda`, the whole batch gets left un`--mark`ed on the server\n\n- hooks:\n - `--new-mail-cmd CMD`\n : shell command to run at the end of each program cycle that had new messages successfully delivered into the `--maildir` or by the `--mda` of this `fetch` subcommand; can be specified multiple times\n\n- message IMAP `SEEN` flag filters (mutually exclusive):\n - `--any-seen`\n : operate on both `SEEN` and not `SEEN` messages\n - `--seen`\n : operate on messages marked as `SEEN`\n - `--unseen`\n : operate on messages not marked as `SEEN` (default)\n\n- message IMAP `FLAGGED` flag filters (mutually exclusive):\n - `--any-flagged`\n : operate on both `FLAGGED` and not `FLAGGED` messages (default)\n - `--flagged`\n : operate on messages marked as `FLAGGED`\n - `--unflagged`\n : operate on messages not marked as `FLAGGED`\n\n- marking:\n - `--mark {auto,noop,seen,unseen,flagged,unflagged}`\n : after the message was fetched:\n - `auto`: `seen` when only `--unseen` is set (default), `flagged` when only `--unflagged` is set, `noop` otherwise\n - `noop`: do nothing\n - `seen`: add `SEEN` flag\n - `unseen`: remove `SEEN` flag\n - `flagged`: add `FLAGGED` flag\n - `unflagged`: remove `FLAGGED` flag\n\n### imaparms delete\n\nLogin, perform IMAP `SEARCH` command with specified filters for each folder, delete them from the server using a specified method.\n\n- folder search filters (required):\n - `--all-folders`\n : operate on all folders\n - `--folder NAME`\n : mail folders to include; can be specified multiple times\n - `--not-folder NAME`\n : mail folders to exclude; can be specified multiple times\n\n- message IMAP `SEEN` flag filters (mutually exclusive):\n - `--any-seen`\n : operate on both `SEEN` and not `SEEN` messages\n - `--seen`\n : operate on messages marked as `SEEN` (default)\n - `--unseen`\n : operate on messages not marked as `SEEN`\n\n- message IMAP `FLAGGED` flag filters (mutually exclusive):\n - `--any-flagged`\n : operate on both `FLAGGED` and not `FLAGGED` messages (default)\n - `--flagged`\n : operate on messages marked as `FLAGGED`\n - `--unflagged`\n : operate on messages not marked as `FLAGGED`\n\n- deletion method:\n - `--method {auto,delete,delete-noexpunge,gmail-trash}`\n : delete messages how:\n - `auto`: `gmail-trash` when `--host imap.gmail.com` and the current folder is not `[Gmail]/Trash`, `delete` otherwise (default)\n - `delete`: mark messages as deleted and then use IMAP `EXPUNGE` command, i.e. this does what you would expect a \"delete\" command to do, works for most IMAP servers\n - `delete-noexpunge`: mark messages as deleted but skip issuing IMAP `EXPUNGE` command hoping the server does as RFC2060 says and auto-`EXPUNGE`s messages on IMAP `CLOSE`; this is much faster than `delete` but some servers (like GMail) fail to implement this properly\n - `gmail-trash`: move messages to `[Gmail]/Trash` in GMail-specific way instead of trying to delete them immediately (GMail ignores IMAP `Deleted` flag and `EXPUNGE` command outside of `[Gmail]/Trash`); you can then `imaparms delete --folder \"[Gmail]/Trash\"` them after (which will default to `--method delete`), or you could just leave them there and GMail will delete them in 30 days\n\n### imaparms for-each\n\nFor each account: login, perform other subcommands given in `ARG`s, logout.\n\nThis is most useful for performing complex changes `--every` once in while in daemon mode.\nOr if you want to set different `--folder`s for different subcommands but run them all at once.\n\nExcept for the simplest of cases, you must use `--` before `ARG`s so that any options specified in `ARG`s won't be picked up by `for-each`.\nRun with `--very-dry-run` to see the interpretation of the given command line.\n\nAll generated hooks are deduplicated and run after all other subcommands are done.\nE.g., if you have several `fetch --new-mail-cmd filter-my-mail` as subcommands of `for-each`, then `filter-my-mail` *will be run **once** after all other subcommands finish*.\n\n- positional arguments:\n - `ARG`\n : arguments, these will be split by `;` and parsed into other subcommands\n\n- folder search filters (will be used as default for subcommands):\n - `--all-folders`\n : operate on all folders\n - `--folder NAME`\n : mail folders to include; can be specified multiple times\n - `--not-folder NAME`\n : mail folders to exclude; can be specified multiple times\n\n## Notes on usage\n\n- When specifying account-related settings `--user` and `--pass*` options should be always specified last.\n\n Internally, new account definition gets emitted when a new `--pass*` option finishes processing.\n\n All server connection and authentication options except `--user` and `--pass*` get reused between successively defined accounts, unless overwritten with a new value before the next `--pass*` option.\n\n- Message search filters are connected by logical \"AND\"s so, e.g., `--from \"github.com\" --not-from \"notifications@github.com\"` will act on messages which have a `From:` header with `github.com` but without `notifications@github.com` as substrings.\n\n- `fetch` subcommand acts on `--unseen` messages by default.\n\n- `delete` subcommand acts on `--seen` messages by default.\n\n- Under `for-each`, after any command that produced errors (e.g. a `fetch` that failed to deliver at least one message because `--maildir` or `--mda` failed to do their job), any successive `delete` commands will be automatically skipped.\n\n In theory, in the case of `--maildir` or `--mda` failing to deliver some messages `imaparms` need not do this as those messages will be left unmarked on the server, but in combination with the default `--careful` delivery option (which see) this behaviour could still be helpful in preventing data loss in the event where the target filesystem starts generating random IO errors (e.g. if you HDD/SSD just failed).\n\n In general, this behaviour exists to prevent `delete` from accidentally deleting something important when folder hierarchy on the IMAP server changes to be incompatible with in-use `imaparms` options. For instance, say you are trying to `fetch` from a folder that was recently renamed and then try to `delete` from `--all-folders`. The behaviour described above will prevent this from happening.\n\n## Examples\n\n- List all available IMAP folders and count how many messages they contain:\n\n - with the password taken from `pinentry`:\n ```\n imaparms count --host imap.example.com --user account@example.com --pass-pinentry\n ```\n\n - with the password taken from the first line of the given file:\n ```\n imaparms count --host imap.example.com --user account@example.com \\\n --passfile /path/to/file/containing/account@example.com.password\n ```\n\n - with the password taken from the output of password-store utility:\n ```\n imaparms count --host imap.example.com --user account@example.com \\\n --passcmd \"pass show mail/account@example.com\"\n ```\n\n - with two accounts on the same server:\n ```\n imaparms count --porcelain \\\n --host imap.example.com \\\n --user account@example.com --passcmd \"pass show mail/account@example.com\" \\\n --user another@example.com --passcmd \"pass show mail/another@example.com\"\n ```\n\nNow, assuming the following are set:\n\n```\ncommon=(--host imap.example.com --user account@example.com --passcmd \"pass show mail/account@example.com\")\ncommon_mda=(\"${{common[@]}}\" --mda maildrop)\ngmail_common=(--host imap.gmail.com --user account@gmail.com --passcmd \"pass show mail/account@gmail.com\")\ngmail_common_mda=(\"${{gmail_common[@]}}\" --mda maildrop)\n```\n\n- Count how many messages older than 7 days are in `[Gmail]/All Mail` folder:\n ```\n imaparms count \"${gmail_common[@]}\" --folder \"[Gmail]/All Mail\" --older-than 7\n ```\n\n- Mark all messages in `INBOX` as not `SEEN`, fetch all not `SEEN` messages marking them `SEEN` as you download them so that if the process gets interrupted you could continue from where you left off:\n ```\n # setup: do once\n imaparms mark \"${common[@]}\" --folder INBOX unseen\n\n # repeatable part\n imaparms fetch \"${common_mda[@]}\" --folder INBOX\n ```\n\n- Similarly to the above, but use `FLAGGED` instead of `SEEN`. This allows to use this in parallel with another instance of `imaparms` using the `SEEN` flag, e.g. if you want to backup to two different machines independently, or if you want to use `imaparms` simultaneously in parallel with `fetchmail` or other similar tool:\n ```\n # setup: do once\n imaparms mark \"${common[@]}\" --folder INBOX unflagged\n\n # repeatable part\n imaparms fetch \"${common_mda[@]}\" --folder INBOX --any-seen --unflagged\n\n # this will work as if nothing of the above was run\n fetchmail\n\n # in this use case you should use both `--seen` and `--flagged` when expiring old messages to only delete messages fetched by both imaparms and fetchmail\n imaparms delete \"${common[@]}\" --folder INBOX --older-than 7 --seen --flagged\n ```\n\n- Similarly to the above, but run `imaparms fetch` as a daemon to download updates every hour:\n ```\n # setup: do once\n imaparms mark \"${common[@]}\" --folder INBOX unseen\n\n # repeatable part\n imaparms fetch \"${common_mda[@]}\" --folder INBOX --every 3600\n ```\n\n- Fetch all messages from `INBOX` folder that were delivered in the last 7 days (the resulting date is rounded down to the start of the day by server time), but don't change any flags:\n ```\n imaparms fetch \"${common_mda[@]}\" --folder INBOX --any-seen --newer-than 7\n ```\n\n- Fetch all messages from `INBOX` folder that were delivered from the beginning of today (by server time), without changing any flags:\n ```\n imaparms fetch \"${common_mda[@]}\" --folder INBOX --any-seen --newer-than 0\n ```\n\n- Delete all `SEEN` messages older than 7 days from `INBOX` folder:\n\n Assuming you fetched and backed up all your messages already this allows you to keep as little as possible on the server, so that if your account gets cracked/hacked, you won't be as vulnerable.\n\n ```\n imaparms delete \"${common[@]}\" --folder INBOX --older-than 7\n ```\n\n (`--seen` is implied by default)\n\n- **DANGEROUS!** If you fetched and backed up all your messages already, you can skip `--older-than` and just delete all `SEEN` messages instead:\n ```\n imaparms delete \"${common[@]}\" --folder INBOX\n ```\n\n Though, setting at least `--older-than 1`, to make sure you won't lose any data in case you forgot you are running another instance of `imaparms` or another IMAP client that changes message flags (`imaparms` will abort if it notices another client doing it, but better be safe than sorry), is highly recommended anyway.\n\n- Fetch everything GMail considers to be Spam for local filtering:\n ```\n # setup: do once\n mkdir -p ~/Mail/spam/{new,cur,tmp}\n\n cat > ~/.mailfilter-spam << EOF\n DEFAULT=\"\\$HOME/Mail/spam\"\n EOF\n\n imaparms mark \"${gmail_common[@]}\" --folder \"[Gmail]/Spam\" unseen\n\n # repeatable part\n imaparms fetch \"${gmail_common_mda[@]}\" --mda \"maildrop ~/.mailfilter-spam\" --folder \"[Gmail]/Spam\"\n ```\n\n- Fetch everything from all folders, except `INBOX`, `[Gmail]/Starred` (because in GMail there are included in `[Gmail]/All Mail`), and `[Gmail]/Trash`:\n ```\n imaparms fetch \"${gmail_common_mda[@]}\" --all-folders \\\n --not-folder INBOX --not-folder \"[Gmail]/Starred\" --not-folder \"[Gmail]/Trash\"\n ```\n\n The purpose of this is purely illustrative. In GMail all messages outside of `[Gmail]/Trash` and `[Gmail]/Spam` are included in `[Gmail]/All Mail` so you should probably just fetch that folder instead.\n\n- GMail-specific deletion mode: move (expire) old messages to `[Gmail]/Trash` and then delete them:\n\n In GMail, deleting messages from `INBOX` does not actually delete them, nor moves them to trash, just removes them from `INBOX` while keeping them available from `[Gmail]/All Mail`.\n\n To work around this, this tool provides a GMail-specific `--method gmail-trash` that moves messages to `[Gmail]/Trash` in a GMail-specific way (this is not a repetition, it does require issuing special IMAP `STORE` commands to achieve this):\n\n ```\n imaparms delete \"${gmail_common[@]}\" --folder \"[Gmail]/All Mail\" --older-than 7\n ```\n\n (`--method gmail-trash` is implied by `--host imap.gmail.com` and `--folder` not being `[Gmail]/Trash`, `--seen` is still implied by default)\n\n Messages in `[Gmail]/Trash` will be automatically removed by GMail in 30 days, but you can also delete them immediately with:\n\n ```\n imaparms delete \"${gmail_common[@]}\" --folder \"[Gmail]/Trash\" --any-seen --older-than 7\n ```\n\n (`--method delete` is implied by `--host imap.gmail.com` but `--folder` being `[Gmail]/Trash`)\n\n- Every hour, fetch messages from different folders using different MDA settings and then expire messages older than 7 days, all in a single pass (reusing the server connection between subcommands):\n ```\n imaparms for-each \"${gmail_common[@]}\" --every 3600 -- \\\n fetch --folder \"[Gmail]/All Mail\" --mda maildrop \\; \\\n fetch --folder \"[Gmail]/Spam\" --mda \"maildrop ~/.mailfilter-spam\" \\; \\\n delete --folder \"[Gmail]/All Mail\" --folder \"[Gmail]/Spam\" --folder \"[Gmail]/Trash\" \\\n --older-than 7\n ```\n\n Note the `--` and `\\;` tokens, without them the above will fail to parse.\n\n Also note that `delete` will use `--method gmail-trash` for `[Gmail]/All Mail` and `[Gmail]/Spam` and then use `--method delete` for `[Gmail]/Trash` even though they are specified together.\n\n",
"bugtrack_url": null,
"license": "GPL-3.0-or-later",
"summary": "A handy Swiss-army-knife-like utility for fetching, flagging/marking, deleting/expiring, and performing other batch operations on messages residing on IMAP servers",
"version": "2.6.0",
"project_urls": {
"GitHub": "https://github.com/Own-Data-Privateer/imaparms",
"Homepage": "https://oxij.org/software/imaparms/"
},
"split_keywords": [
"imap",
"imap4",
"mail",
"email",
"e-mail",
"mail delivery agent",
"mda",
"lda",
"fetchmail",
"getmail",
"fdm",
"fetch",
"archive",
"download",
"delete",
"expire",
"mark",
"star",
"mark as seen",
"mark as unseen",
"mark as flagged",
"mark as unflagged"
],
"urls": [
{
"comment_text": "",
"digests": {
"blake2b_256": "f4dcf535c8a94baa935f99b94ffcbeb478396df792f1623bbd9d907a86f95ffa",
"md5": "ddb554f198453a9f6afbdf5e73667dea",
"sha256": "9a0d7862cd0b6574f3a1a0b9357fe0d0efe06d56ca8d5cddd79b94e340cbbf8b"
},
"downloads": -1,
"filename": "imaparms-2.6.0-py3-none-any.whl",
"has_sig": false,
"md5_digest": "ddb554f198453a9f6afbdf5e73667dea",
"packagetype": "bdist_wheel",
"python_version": "py3",
"requires_python": ">=3.7",
"size": 57662,
"upload_time": "2024-02-13T12:52:45",
"upload_time_iso_8601": "2024-02-13T12:52:45.250734Z",
"url": "https://files.pythonhosted.org/packages/f4/dc/f535c8a94baa935f99b94ffcbeb478396df792f1623bbd9d907a86f95ffa/imaparms-2.6.0-py3-none-any.whl",
"yanked": false,
"yanked_reason": null
},
{
"comment_text": "",
"digests": {
"blake2b_256": "4a1c135ec401a92da65a6b330b7a558cf73ed9fcebcb2174490636ad60062412",
"md5": "f64a8e6f939ec1333c41fd3eb3bbe36c",
"sha256": "ad5fa477de5fc80275ed9147d6e1051dffe3983c4d43dbc6a61956690dd39f00"
},
"downloads": -1,
"filename": "imaparms-2.6.0.tar.gz",
"has_sig": false,
"md5_digest": "f64a8e6f939ec1333c41fd3eb3bbe36c",
"packagetype": "sdist",
"python_version": "source",
"requires_python": ">=3.7",
"size": 93421,
"upload_time": "2024-02-13T12:52:48",
"upload_time_iso_8601": "2024-02-13T12:52:48.210907Z",
"url": "https://files.pythonhosted.org/packages/4a/1c/135ec401a92da65a6b330b7a558cf73ed9fcebcb2174490636ad60062412/imaparms-2.6.0.tar.gz",
"yanked": false,
"yanked_reason": null
}
],
"upload_time": "2024-02-13 12:52:48",
"github": true,
"gitlab": false,
"bitbucket": false,
"codeberg": false,
"github_user": "Own-Data-Privateer",
"github_project": "imaparms",
"travis_ci": false,
"coveralls": false,
"github_actions": false,
"lcname": "imaparms"
}
JSON
