Quantcast
Channel: iRedMail — News, Announcements, Bug fixes...
Viewing all 241 articles
Browse latest View live

iRedAdmin-Pro-LDAP-2.3.0 has been released

$
0
0

Dear all,

iRedAdmin-Pro-LDAP-2.3.0 (a.k.a. iRedAdmin-Pro for OpenLDAP backend) is now available for your upgrading and purchasing.

How to download the latest iRedAdmin-Pro

iRedAdmin-Pro customers can get download link of this new release by following steps below:

  • Login to iRedAdmin-Pro as global admin

  • Click "License" on the top-right corner, it will show you basic license info and a "Download" button if new version is available for upgrading.

If above steps don't work for you, please send an email to support @ iredmail.org to get download link of the latest release.

Below are detailed changes since iRedAdmin-Pro-LDAP-2.2.2.

iRedAdmin-Pro-LDAP now supports some basic hooks

Hook is just like plugin. For example, you can write Python functions (with pre-defined function names) to let iRedAdmin-Pro do additional operations before (or after) creating mail users, updating mailing list membership, etc. Currently only several hooks are allowed:

  • hook_before_creating_user

  • hook_before_removing_user

  • hook_after_removing_user

  • hook_after_removing_list_member

  • hook_before_removing_membership_in_user_profile

  • hook_before_removing_membership_in_maillist_profile

Please read document 'docs/hooks/LDAP.md' for more details, and sample usages in file 'docs/hooks/hooks.py.ldap_sample'. If you need more hooks, please contact us: http://www.iredmail.org/contact.html

Note: iRedAdmin-Pro for SQL backends doesn't support hooks yet.

Improvements:
  • Able to change email address of mail user/list/alias account in place.

  • Allow to specify amavisd server address if amavisd and sql database are not running on the same host.

  • Able to filter out accounts by first character in email address or domain name.

  • Self-service is now a per-domain setting, not global setting anymore. Domain admin can enable/disable self-service in domain profile page, under tab 'Advanced'.

  • Able to white/blacklist senders on Quarantined Mails page.

  • Show per-user mailbox quota in self-service preference page.

  • Replace setting ADDITION_USER_SERVICES by two new parameters:

    • ADDITIONAL_ENABLED_USER_SERVICES

    • ADDITIONAL_DISABLED_USER_SERVICES

Please read comment lines in libs/default_settings.py for more details.

  • Pulling out plain text of HTML email while displaying quarantined email. NOTE: this feature requies Python module BeautifulSoup.

  • Able to set per-domain and per-user time zone.

  • Able to use 'user@*' as white/blacklist sender.

  • Log profile update operations.

  • New script tool: tools/notify_quarantined_recipients.py. Used to query quarantined mails and notify local recipients (via email) that they have emails quarantined on server and not delivered to their mailbox. It's ok to setup a cron job to run this script every, for example, 6 or 12 hours, it's up to you.

  • New script tool: tools/submit_wblist.py, used to add white/blacklist from command line. Sample usage:

# python tools/submit_wblist.py --blacklist 192.168.1.10 user@test.com
Fixed issues
  • Cannot disable global throttling.

  • Cannot correctly redirect to page of certain type of quarantined mails after release/delete emails.

  • Incorrectly removing enabledService=indexer-worker while updating user profile.

  • Cannot remove mailing list membership while deleting mailing list account on search result page.

  • Cannot list IPv6 address(es) assigned on network interface(s) on Dashboard page.

  • Cannot blacklist top-level domain name (e.g. '@.com').


iRedAdmin-Pro-SQL-2.0 has been released.

$
0
0

Dear all,

iRedAdmin-Pro-SQL-2.0 (iRedAdmin-Pro for MySQL, MariaDB and PostgreSQL backends) is now available for your upgrading and purchasing.

We merged iRedAdmin-Pro-MySQL and iRedAdmin-Pro-PGSQL to be one edition: iRedAdmin-Pro-SQL. this way we removed a lot duplicate code and deliver a small and clean code base.

How to download the latest iRedAdmin-Pro

iRedAdmin-Pro customers can get download link of this new release by following steps below:

  • Login to iRedAdmin-Pro as global admin

  • Click "License" on the top-right corner, it will show you basic license info and a "Download" button if new version is available for upgrading.

If above steps don't work for you, please send an email to support @ iredmail.org to get download link of the latest release.

Below are detailed changes since iRedAdmin-Pro-MySQL-1.9.2 and iRedAdmin-Pro-PGSQL-1.5.2:

Improvements:
  • Able to set per-domain and per-user time zone.

  • Allow to specify amavisd server address if amavisd and sql database are not running on the same host.

  • Able to filter out accounts by first character in email address or domain name.

  • Self-service is now a per-domain setting, not more global setting. Domain admin can enable/disable self-service in domain profile page, under tab 'Advanced'.

  • New script tool: tools/notify_quarantined_recipients.py. Used to query quarantined mails and notify local recipients (via email) they have emails quarantined on server and not delivered to their mailbox. It's ok to setup a cron job to run this script every, for example, 6 or 12 hours, it's up to you.

  • Able to white/blacklist senders on Quarantined Mails page.

  • Able to change email address of mail user/alias account in place.

  • Log profile update operations.

  • Show per-user mailbox quota in self-service preference page.

  • Pulling out plain text of HTML email while displaying quarantined email. NOTE: this feature requies Python module BeautifulSoup.

  • Able to use 'user@*' as white/blacklist sender.

  • New script tool: tools/submit_wblist.py, used to submit white/blacklist from command line. Sample usage:

# python tools/submit_wblist.py --blacklist 192.168.1.10 user@test.com
Fixed issues
  • Cannot disable global throttling.

  • Cannot correctly redirect to page of certain type of quarantined mails after release/delete emails.

  • Not verify members in same domain while updating user forwarding.

  • Cannot list IPv6 address(es) assigned on network interface(s) on Dashboard page.

  • Cannot blacklist top-level domain name (e.g. @.com).

  • [mysql] Cannot delete alias account.

iRedMail-0.9.2 has been released.

$
0
0

Dear all,

iRedMail-0.9.2 stable release has been released.

* Download it: http://www.iredmail.org/download.html
* Upgrade tutorials are available here: http://www.iredmail.org/docs/iredmail.releases.html

Below are detailed changes since iRedMail-0.9.1:

  • SOGo now works on Debian 8. Note: although SOGo team provides RPMs for RHEL/CentOS 7, but it's still buggy, once the bugs were fixed, we will re-pack iRedMail-0.9.2 to enable SOGo on RHEL/CentOS 7.

  • LMTP (port 24) and managesieve (port 4190) services are now listening on only localhost (127.0.0,1 and ::1) by default.

  • Improve Fail2ban filter `postfix.iredmail.conf` to prevent DoS attack to SMTP service.

Fixed issues
  • Fix 'The Logjam Attack' ssl related issue. Reference: https://weakdh.org/

  • catch-all support doesn't work with user+extension@domain.com. Thanks to stevekez <iredmail@stevekerrison.com> for the contribution in iRedMail support forum.

  • uwsgi service doesn't work on RHEL/CentOS. A new version of uwsgi package was submitted to EPEL repo with higher priority (not submitted by iRedMail team), it's not compatible with settings configured by iRedMail, this causes uwsgi service cannot be started.

  • Not create required SQL tables in `vmail` database with PostgreSQL backend.

  • Cannot import MySQL database on Jailed FreeBSD.

  • Not install required port 'databases/py-sqlalchemy' on FreeBSD.

Updated packages
  • iRedAPD -> 1.6.0. Lots of bug fixes.

iRedAdmin-Pro-LDAP-2.3.1 has been released

$
0
0

Dear all,

iRedAdmin-Pro-LDAP-2.3.1 (a.k.a. iRedAdmin-Pro for OpenLDAP backend) is now available for upgrading and purchasing.

How to download the latest iRedAdmin-Pro

iRedAdmin-Pro customers can get download link of this new release by following steps below:

  • Login to iRedAdmin-Pro as global admin

  • Click "License" on the top-right corner, it will show you basic license info and a "Download" button if new version is available for upgrading.

If above steps don't work for you, please send an email to support @ iredmail.org to get download link of the latest release.

Below are detailed changes since iRedAdmin-Pro-LDAP-2.3.0.

Improvements:
  • Able to white/blacklist senders or recipients in System -> Mail Logs -> Sent Mails (or Received Mails).

Fixed issues
  • Cannot update mail forwarding as domain admin.

  • Always set per-user preferred language to system default value.

  • Cannot completely change email address of mailing list account.

  • Cannot select managed domain while marking/unmarking user as domain admin.

  • Incorrect variable name in controllers/panel/log.py causes 'internal server error' while accessing Admin Log page.

iRedAdmin-Pro-SQL-2.1 has been released.

$
0
0

==== UPDATE ====
A new bugfix version of iRedAdmin-Pro-SQL, v2.1.1, has been released. it fixes a 'PERMISSION DENIED' issue while updating mail alias profile as normal domain admin.

================
Dear all,

iRedAdmin-Pro-SQL-2.1 (iRedAdmin-Pro for MySQL, MariaDB and PostgreSQL backends) is now available for upgrading and purchasing.

How to download the latest iRedAdmin-Pro

iRedAdmin-Pro customers can get download link of this new release by following steps below:

  • Login to iRedAdmin-Pro as global admin

  • Click "License" on the top-right corner, it will show you basic license info and a "Download" button if new version is available for upgrading.

If above steps don't work for you, please send an email to support @ iredmail.org to get download link of the latest release.

Below are detailed changes since iRedAdmin-Pro-SQL-2.0:

Improvements:
  • Able to white/blacklist senders or recipients in System -> Mail Logs -> Sent Mails (or Received Mails).

Fixed issues
  • Improperly checking per-admin time zone for separate admin account.

  • Cannot set mail forwarding in self-service page.

  • Incorrect function arguments when calling simple_profile() defined in libs/sqllib/user.py.

  • Always set per-user preferred language to system default value.

  • Cannot delete/enable/disable mail alias account.

  • Incorrect variable name in controllers/panel/log.py causes 'internal server error' while accessing Admin Log page.

iRedAdmin-Pro-SQL-2.1.2 has been released.

$
0
0
v2.1.2, Jun 17, 2015

A new bugfix version of iRedAdmin-Pro-SQL, v2.1.2, has been released. it fixes 2 issues:

  • Not correctly update `alias` table while changing user's mail address.

  • Cannot delete user in search page. Thanks Grzegorz Leśkiewicz <mstgeo _at_ yes.pl> for the report.

Updated translations:

  • Germany (de_DE). Thanks Joachim Buthe <buthe _at_ gugw.tu-darmstadt.de>.

  • Spain (es_ES). Thanks informatica _at_ ttu.es.

v2.1.1, Jun 4, 2015

A new bugfix version of iRedAdmin-Pro-SQL, v2.1.1, has been released. it fixes a 'PERMISSION DENIED' issue while updating mail alias profile as normal domain admin.

v2.1, Jun 3, 2015

Dear all,

iRedAdmin-Pro-SQL-2.1 (iRedAdmin-Pro for MySQL, MariaDB and PostgreSQL backends) is now available for upgrading and purchasing.

How to download the latest iRedAdmin-Pro

iRedAdmin-Pro customers can get download link of this new release by following steps below:

  • Login to iRedAdmin-Pro as global admin

  • Click "License" on the top-right corner, it will show you basic license info and a "Download" button if new version is available for upgrading.

If above steps don't work for you, please send an email to support @ iredmail.org to get download link of the latest release.

Below are detailed changes since iRedAdmin-Pro-SQL-2.0:

Improvements:
  • Able to white/blacklist senders or recipients in System -> Mail Logs -> Sent Mails (or Received Mails).

Fixed issues
  • Improperly checking per-admin time zone for separate admin account.

  • Cannot set mail forwarding in self-service page.

  • Incorrect function arguments when calling simple_profile() defined in libs/sqllib/user.py.

  • Always set per-user preferred language to system default value.

  • Cannot delete/enable/disable mail alias account.

  • Incorrect variable name in controllers/panel/log.py causes 'internal server error' while accessing Admin Log page.

iRedAdmin-Pro-SQL-2.1.3 has been released.

$
0
0
v2.1.3, Jun 27, 2015

A new bugfix version of iRedAdmin-Pro-SQL, v2.1.3, has been released. it fixes one issue:

  • Not correctly assign default mail group(s) to newly created mail user. Thanks <alex.ab.travel _at_ gmail.com> for the report.

It also improves command line tool used to manage white/blacklists: tools/wblist_admin.py. Supported operations: add/delete/list whitelists or blacklists for server-wide, per-domain, per-user. Run the script without any arguments to get a help message. Note: tools/submit_wblist.py was removed (replaced by tools/wblist_admin.py).

v2.1.2, Jun 17, 2015

A new bugfix version of iRedAdmin-Pro-SQL, v2.1.2, has been released. it fixes 2 issues:

  • Not correctly update `alias` table while changing user's mail address.

  • Cannot delete user in search page. Thanks Grzegorz Leśkiewicz <mstgeo _at_ yes.pl> for the report.

Updated translations:

  • Germany (de_DE). Thanks Joachim Buthe <buthe _at_ gugw.tu-darmstadt.de>.

  • Spain (es_ES). Thanks informatica _at_ ttu.es.

v2.1.1, Jun 4, 2015

A new bugfix version of iRedAdmin-Pro-SQL, v2.1.1, has been released. it fixes a 'PERMISSION DENIED' issue while updating mail alias profile as normal domain admin.

v2.1, Jun 3, 2015

Dear all,

iRedAdmin-Pro-SQL-2.1 (iRedAdmin-Pro for MySQL, MariaDB and PostgreSQL backends) is now available for upgrading and purchasing.

How to download the latest iRedAdmin-Pro

iRedAdmin-Pro customers can get download link of this new release by following steps below:

  • Login to iRedAdmin-Pro as global admin

  • Click "License" on the top-right corner, it will show you basic license info and a "Download" button if new version is available for upgrading.

If above steps don't work for you, please send an email to support @ iredmail.org to get download link of the latest release.

Below are detailed changes since iRedAdmin-Pro-SQL-2.0:

Improvements:
  • Able to white/blacklist senders or recipients in System -> Mail Logs -> Sent Mails (or Received Mails).

Fixed issues
  • Improperly checking per-admin time zone for separate admin account.

  • Cannot set mail forwarding in self-service page.

  • Incorrect function arguments when calling simple_profile() defined in libs/sqllib/user.py.

  • Always set per-user preferred language to system default value.

  • Cannot delete/enable/disable mail alias account.

  • Incorrect variable name in controllers/panel/log.py causes 'internal server error' while accessing Admin Log page.

iRedMail-0.9.3 has been released.

$
0
0

Dear all,

iRedMail-0.9.3 stable release has been released.

Below are detailed changes since iRedMail-0.9.2:

Works on new distribution releases
  • Ubuntu 15.10. [Note: 15.04 is not supported.]

  • OpenBSD 5.8. Notes:

    • OpenBSD 5.7 and earlier releases are not supported.

    • spamd(8) is not enabled and replaced by postscreen, because postscreen is better to reduce spam (e.g. with help of DNSBL services).

Removed component
Improvements
  • SOGo Groupware is now available on FreeBSD.

  • Enable HSTS (HTTP Strict Transport Security) in both Apache and Nginx.

  • Update Fail2ban filter to catch postscreen log.

  • Enable global address book for SQL backends in SOGo by default, domains are isolated. Thanks dnwahs <shawn _at_ mcsp.net> for the sharing in iRedMail forum.

  • Supports per-user alias address in SQL backends. 2 new sql columns are required: `alias.is_alias`, `alias.alias_to`.

  • Enable postscreen service in Postfix by default. If you want to enable postscreen on existing iRedMail server, please download iRedMail-0.9.3 and run the script 'tools/enable_postscreen.sh'. Important Note: all users must use port 587 for sending email, port 25 doesn't accept submitted mail by authenticated users anymore.

  • New SQL table `amavisd.outbound_wblist`, used to store whitelists and blacklists for outbound messages. It's required by iRedAPD plugin 'amavisd_wblist'.

New scripts
  • tools/ldap_assign_user_to_groups.py: Used to assign user to specified mailing lists, or remove membership.

  • tools/ldap_move_members_to_another_group.py: Used to move or copy ALL members of specified mailing list to another.

Fixed issues
  • Not add 'virusalert' in Postfix alias file.

  • Not use correct postrotate command to rotate log file on Debian.

  • Incorrectly set default fireewall zone on RHEL/CentOS 7 if you didn't choose to restart firewall immediately.

  • Incorrect Dovecot Master User account used by SOGo.

  • Dovecot Master User doesn't work with LDAP backend.

  • Incorrect quota warning priorities in Dovecot. Thanks Peter <rs _at_ samplezone.ch> for the feedback.

  • Incorrect Amavisd setting to sign DKIM on inbound messages.

  • [RHEL/CentOS] Cannot start uwsgi service with 'daemonize' setting in /etc/uwsgi.ini. ('daemonze =' is required by RHEL/CentOS v6, but not v7.)

  • Not preserve the case of ${extension} while delivering message to mailbox.

Updated packages
  • Roundcube webmail -> 1.1.3

  • uwsgi -> 2.0.11.2 (OpenBSD only)

  • iRedAPD -> 1.7.0

  • iRedAdmin -> 0.4.3

  • FreeBSD: php-5.6


iRedAdmin-Pro-LDAP-2.4.0 has been released.

$
0
0

Dear all,

iRedAdmin-Pro-LDAP-2.4.0 (a.k.a. iRedAdmin-Pro for OpenLDAP backend) is now available for upgrading and purchasing.

How to download the latest iRedAdmin-Pro

iRedAdmin-Pro customers can get download link of this new release by following steps below:

  • Login to iRedAdmin-Pro as global admin

  • Click "License" on the top-right corner, it will show you basic license info and a "Download" button if new version is available for upgrading.

If above steps don't work for you, please send an email to support @ iredmail.org to get download link of the latest release.

Below are detailed changes since iRedAdmin-Pro-LDAP-2.3.1.

PLANNED: Dropping support for Policyd and Cluebringer

We plan to completely remove code of Policyd/Cluebringer support in next iRedAdmin-Pro release, because:

  • Policyd v1: The last Policyd stable release (v1.8.2) was released in 2007, no further development, no binary package available in some Linux/BSD distributions, and not supported in recent iRedMail releases.

  • Cluebringer (a.k.a. Policyd v2) has been removed in iRedMail-0.9.3, because it's not under active development, no new release since 2013 (the latest stable release doesn't support IPv6). We have greylisting and throttling support in iRedAPD as replacement, and here's tutorial to help you migrate from Cluebringer to iRedAPD.

  • iRedAPD is under active development by iRedMail team.

In this iRedAdmin-Pro release, greylisting and throttling offered by iRedAPD conflict with Policyd/Cluebringer, so if you want to use Policyd/Cluebringer, please disable iRedAPD integration in iRedAdmin-Pro config file `settings.py` by setting `iredapd_enabled = False`.

Improvements
  • Able to restrict user to login from specified IP addresses or network. (under user profile page, tab "Advanced".)

  • Able to manage global, per-domain and per-user greylisting and throttle settings implemented by iRedAPD.

  • Able to list disabled domains, mail users, mailing lists and mail aliases.

  • Allow to store mail user's plain password in additional attribute of user account. Check `STORE_PLAIN_PASSWORD_IN_ADDITIONAL_ATTR` setting in file `libs/default_settings.py`.

  • Able to bypass bad-header checking in spam policy setting page.

  • Show iRedMail version number stored in /etc/iredmail-release.

  • Able to manage white/blacklists for outbound message.

  • tools/cleanup_amavisd_db.py won't cause lock issue or performance issue anymore.

  • New scripts:

    • tools/wblist_admin.py: manage white/blacklists on command line. Supported operations: add/delete/list whitelists or blacklists for server-wide, per-domain, per-user. Run the script without any arguments will show you help message. Note: tools/submit_wblist.py was removed.

    • tools/update_mailbox_quota.py: update mailbox quota for one user (specified on command line) or bulk users (read from a plain text file). Run the script without any arguments will show you help message.

Fixed issues
  • Not correctly update spam subject text (spam_subject_tag3). Thanks rafaelr <rafaelr _at_ icctek.com> for the report in forum.

  • Normal domain admin can view all hosted mail domain names by clicking the first character of mail domain name on domain list page. Thanks sylonhosting <info _at_ sylon.net> for the report in forum.

  • Cannot correctly handle improper unicode string in mail headers while viewing quarantined mail.

  • Not correctly submit per-domain white/blacklists while submitting from 'Quarantined Mails' page as normal domain admin.

  • Cannot set empty time zone and preferred language.

  • After updating user's enabled services under 'Advanced' tab in user profile page, newly created user will have both enabled or disabled additional service names.

  • Cannot generate proper maildir path when first 3 characters in username part of email address contains dot.

  • Cannot verify BCRYPT password hash with '{BLF-CRYPT}' prefix.

  • Cannot update white/blacklist as normal domain admin.

  • Not correctly set access restriction to account profile page.

  • Not correctly set domain as backup mx.

Updated translations
  • Germany (de_DE). Thanks Joachim Buthe <buthe _at_ gugw.tu-darmstadt.de> and Martin Hofheiz <m.hofheinz _at_ netzwerk-design.net>.

  • Spain (es_ES). Thanks informatica _at_ ttu.es.

  • Simplified Chinese (zh_CN).

iRedAdmin-Pro-SQL-2.2.0 has been released.

$
0
0

Dear all,

iRedAdmin-Pro-SQL-2.2.0 (iRedAdmin-Pro for MySQL, MariaDB and PostgreSQL backends) is now available for upgrading and purchasing.

How to download the latest iRedAdmin-Pro

iRedAdmin-Pro customers can get download link of this new release by following steps below:

  • Login to iRedAdmin-Pro as global admin

  • Click "License" on the top-right corner, it will show you basic license info and a "Download" button if new version is available for upgrading.

If above steps don't work for you, please send an email to support @ iredmail.org to get download link of the latest release.

Below are detailed changes since iRedAdmin-Pro-SQL-2.1.3:

PLANNED: Dropping support for Policyd and Cluebringer

We plan to completely remove code of Policyd/Cluebringer support in next iRedAdmin-Pro release, because:

  • Policyd v1: The last Policyd stable release (v1.8.2) was released in 2007, no further development, no binary package available in some Linux/BSD distributions, and not supported in recent iRedMail releases.

  • Cluebringer (a.k.a. Policyd v2) has been removed in iRedMail-0.9.3, because it's not under active development, no new release since 2013 (the latest stable release doesn't support IPv6). We have greylisting and throttling support in iRedAPD as replacement, and here's tutorial to help you migrate from Cluebringer to iRedAPD.

  • iRedAPD is under active development by iRedMail team.

In this iRedAdmin-Pro release, greylisting and throttling offered by iRedAPD conflict with Policyd/Cluebringer, so if you want to use Policyd/Cluebringer, please disable iRedAPD integration in iRedAdmin-Pro config file `settings.py` by setting `iredapd_enabled = False`.

Improvements
  • Able to restrict user to login from specified IP addresses or network. (under user profile page, tab "Advanced".)

  • Able to manage global, per-domain and per-user greylisting and throttle settings implemented with iRedAPD.

  • Able to list disabled domain/user/mailing list/alias accounts.

  • Allow to store mail user's plain password in additional column in `vmail.mailbox` table.

  • Able to bypass bad-header checking in spam policy setting page.

  • Able to manage per-user alias addresses.

  • Show iRedMail version number stored in /etc/iredmail-release.

  • Able to manage white/blacklists for outbound message.

  • tools/cleanup_amavisd_db.py won't cause lock issue or performance issue anymore.

  • New scripts:

    • tools/update_mailbox_quota.py: update mailbox quota for one user (specified on command line) or bulk users (read from a plain text file).

Fixed issues
  • Not correctly update spam subject text (spam_subject_tag3). Thanks rafaelr <rafaelr _at_ icctek.com> for the report in forum.

  • Cannot correctly handle improper unicode string in mail headers while viewing quarantined mail.

  • Not correctly submit per-domain white/blacklists while submitting from 'Quarantined Mails' page as normal domain admin.

  • Cannot set empty time zone and preferred language.

  • Not generate proper maildir path when first 3 characters in username part of email address contains dot.

  • Cannot verify BCRYPT password hash with '{BLF-CRYPT}' prefix.

  • Not correctly set access restriction to account profile page.

  • Not correctly set domain as backup mx.

Updated translations
  • Germany (de_DE). Thanks Joachim Buthe <buthe _at_ gugw.tu-darmstadt.de> and Martin Hofheiz <m.hofheinz _at_ netzwerk-design.net>.

  • Spain (es_ES). Thanks informatica _at_ ttu.es.

  • Simplified Chinese (zh_CN).

Hotfix for iRedMail-0.9.3: iRedAPD-1.7.0 cannot rotate log file

$
0
0

This post is used to fix log rotation error for iRedAPD-1.7.0 (it's shipped in iRedMail-0.9.3).

Issue

The latest iRedAPD-1.7.0 brings some new plugins, and some improvements, one of them is auto-rotating log file every weekend.

To auto-rotate log file, iRedAPD requires a separate directory to store log files, so our upgrade script creates /var/log/iredapd/ for this purpose, but it doesn't correctly update log file path in /opt/iredapd/settings.py, and it will raise a "permission denied" error while rotating log file.

The error message looks like below:

Dec 22 19:28:18 mail iredapd[26612]: Traceback (most recent call last):
Dec 22 19:28:18 mail iredapd[26612]: File "/usr/lib/python2.7/logging/handlers.py", line 77, in emit
Dec 22 19:28:18 mail iredapd[26612]: self.doRollover()
Dec 22 19:28:18 mail iredapd[26612]: File "/opt/iRedAPD-1.7.0/libs/logger.py", line 82, in doRollover
Dec 22 19:28:18 mail iredapd[26612]: OSError: [Errno 13] Permission denied
Dec 22 19:28:18 mail iredapd[26612]: Logged from file iredapd.py, line 105
Solution

To fix this issue, please open iRedAPD-1.7.0 config file /opt/iredapd/settings.py, change the log file from '/var/log/iredapd.log' to '/var/log/iredapd/iredapd.log', then restart iRedAPD service.

log_file = '/var/log/iredapd/iredapd.log'

iRedMail-0.9.4 has been released.

$
0
0

Dear all,

iRedMail-0.9.4 stable release has been released.

iRedMail-0.9.4 is a bug fix release, it fixes several issues in iRedMail installer, no additional new features introduced. Below are detailed changes since iRedMail-0.9.3:

New script tool
  • tools/fail2ban_unban_ip.sh. Used to unban specified IP addresses from ALL fail2ban jails.

Fixed issues
  • Not enable port 25 in OpenBSD PF rule.

  • Not detect IPv6 support on server. This causes Dovecot cannot start.

  • Not correct set file permission of /etc/mail/mailer.conf on FreeBSD.

  • Not install port 'www/sogo-activesync' (instead of 'www/sogo') on FreeBSD.

  • Installation inside FreeBSD Jail:

    • Not correctly set MySQL/PostgreSQL/SOGo/Amavisd bind addresses.

    • Not updating Postfix `mynetworks=` to use specified local address. Thanks Peter2121 <peter _at_ flytrace.com> for the report in forum.

    • Use only 2 DNSBL services in postscreen service: zen.spamhaus.org, b.barracudacentral.org.

    • Cannot use specified MySQL root password on command line while installing with remote MySQL server.

Updated packages
  • Roundcube webmail -> 1.1.4

  • iRedAPD -> 1.8.0

  • uwsgi -> 2.0.12 (OpenBSD only)

iRedAdmin-Pro-LDAP-2.5.0 has been released.

$
0
0

Dear all,

iRedAdmin-Pro-LDAP-2.5.0 (a.k.a. iRedAdmin-Pro for OpenLDAP backend) is now available for upgrading and purchasing.

How to download the latest iRedAdmin-Pro

iRedAdmin-Pro customers can get download link of this new release by following steps below:

  • Login to iRedAdmin-Pro as global admin

  • Click "License" on the top-right corner, it will show you basic license info and a "Download" button if new version is available for upgrading.

If above steps don't work for you, please send an email to support @ iredmail.org to get download link of the latest release.

Below are detailed changes since iRedAdmin-Pro-LDAP-2.4.0.

Remove components
  • Completely remove support for Policyd and Cluebringer. iRedMail shipped Policyd in very early releases, THANK YOU. GOODBYE.

  • tools/wblist_admin.py has been removed, it's available in iRedAPD-1.8.0.

Improvements
  • Able to manage greylisting whitelist domains.

  • New option of 'Disabled self-service preferences' in domain profile page, under tab 'Advanced': View basic info of received mails.

  • Better spam policy control: able to control bypassing or quarantining detected spam/virus/banned/bad-header email.

Fixed issues
  • Cannot release quarantined email on some Linux distributions.

  • Improper maildir path if username contains more than 3 characters. Thanks bardzotrudny <bardzotrudnymail _at_ gmail> for the report in forum.

  • Cannot update throttle settings. Thanks ketan.aagja <ketan.aagja _at_ gmail> for the report in forum.

  • Not correctly set greylisting priorities. Thanks Animatrix <kurt6459 _at_ gmail> for the report in forum.

  • Cannot list mail users which start with specified letter.

  • Incorrect regular expressions of email address and domain name, cause several '404 page not found' errors, and cannot access user profile page whose email address contains a dot like 'abc.def@domain.com'.

Updated translations
  • Spain (es_ES). Thanks Juan Bou Riquer <jbou _at_ cancun.com.mx>.

  • Bulgarian (bg_BG). Thanks Пламен Василев <p.vasileff _at_ gmail.com>.

iRedAdmin-Pro-SQL-2.3.1 has been released.

$
0
0

== UPDATE ==

* iRedAdmin-Pro-SQL-2.3.1 has been released, it fixes an issue while updating members of mail alias account.

== ORIGINAL ANNOUNCEMENT

Dear all,

iRedAdmin-Pro-SQL-2.3.0 (iRedAdmin-Pro for MySQL, MariaDB and PostgreSQL backends) is now available for upgrading and purchasing.

How to download the latest iRedAdmin-Pro

iRedAdmin-Pro customers can get download link of this new release by following steps below:

  • Login to iRedAdmin-Pro as global admin

  • Click "License" on the top-right corner, it will show you basic license info and a "Download" button if new version is available for upgrading.

If above steps don't work for you, please send an email to support @ iredmail.org to get download link of the latest release.

Below are detailed changes since iRedAdmin-Pro-SQL-2.2.0:

Removed components
  • Completely remove support for Policyd and Cluebringer. iRedMail shipped Policyd in very early releases, THANK YOU. GOODBYE.

  • tools/wblist_admin.py has been removed, it's available in iRedAPD-1.8.0.

Improvements
  • Able to manage greylisting whitelist domains.

  • New option of 'Disabled self-service preferences' in domain profile page, under tab 'Advanced': View basic info of received mails.

  • Better spam policy control: able to control bypassing or quarantining detected spam/virus/banned/bad-header email.

Fixed issues
  • Cannot release quarantined email on some Linux distributions.

  • Cannot add email address like 'user+ext@domain.com' as alias member.

  • Improper maildir path if username contains more than 3 characters. Thanks bardzotrudny <bardzotrudnymail _at_ gmail> for the report in forum.

  • Cannot update throttle settings. Thanks ketan.aagja <ketan.aagja _at_ gmail> for the report in forum.

  • Self-service is not working.

  • Not correctly set greylisting priorities. Thanks Animatrix <kurt6459 _at_ gmail> for the report in forum.

  • Incorrect regular expressions of email address and domain name, cause several '404 page not found' errors, and cannot access user profile page whose email address contains a dot like 'abc.def@domain.com'.

Updated translations
  • Spain (es_ES). Thanks Juan Bou Riquer <jbou _at_ cancun.com.mx>.

  • Bulgarian (bg_BG). Thanks Пламен Василев <p.vasileff _at_ gmail.com>.

iRedMail-0.9.5 has been released.

$
0
0

Dear all,

iRedMail-0.9.5 stable release has been released.

Below are changes since iRedMail-0.9.4:

Supports new distribution release
  • Ubuntu 16.04 LTS (code name: xenial).

  • OpenBSD 5.9.

Drop support for old distribution releases
  • Ubuntu 15.10 (code name: wily).

  • OpenBSD 5.8.

  • Debian 7 (code name: Wheezy). Please use Debian 8 instead. Debian team stops offering security updates for Debian 7 after April 25, 2016. Reference: https://wiki.debian.org/DebianOldStable

Improvements
  • Postfix:

    • Supports Postfix parameter `sender_dependent_relayhost_maps`.

    • SMTP SASL AUTH is disabled on port 25. Please use port 587 instead.

  • Amavisd:

    • Add custom Amavisd log template (at log level 0) to always log SpamAssassin testing result.

  • OpenLDAP:

    • Switch OpenLDAP backend to mdb (Memory-Mapped DB backend to slapd) on Linux and FreeBSD (not available on OpenBSD yet).

    • Enable OpenLDAP overlay 'pw-sha2' to support password verification with sha2 algorithms.

  • SOGo:

    • SOGo is configured to store password in SSHA512 (instead of ssha) hash by default.

    • Switch SOGo to 3.x from 2.x on Linux/FreeBSD (OpenBSD offers v2).

    • Able to enable/disable sogo service for a single user with new SQL column `mailbox.enablesogo` and LDAP attribute/value `enabledService=sogo`.

  • OpenBSD ldapd(8):

    • Add script and daily cron job to backup ldapd.

Fixed issues
  • Not correctly setup Fail2ban jail `action=` setting to block bad ssh client IP address.

  • Improper proxy timeout setting in SOGo and Nginx which cause SOGo error 'client disconnected during delivery of response'.

  • Not correctly add Postfix alias 'virusalert: root' for non-(Debian/Ubuntu) OSes.

  • Not create directory used to store php session files.

  • Not enable cron job to auto update SpamAssassin rules on RHEL/CentOS.

Updated packages
  • Roundcube webmail -> 1.1.5

  • iRedAdmin -> 0.6

  • iRedAPD -> 1.9.0

In next few months, we will focus on cluster solution.


iRedAdmin-Pro-LDAP-2.6.0 has been released.

$
0
0

Dear all,

iRedAdmin-Pro-LDAP-2.6.0 (a.k.a. iRedAdmin-Pro for OpenLDAP backend) is now available for upgrading and purchasing.

How to download the latest iRedAdmin-Pro

iRedAdmin-Pro customers can get download link of this new release by following steps below:

  • Login to iRedAdmin-Pro as global admin

  • Click "License" on the top-right corner, it will show you basic license info and a "Download" button if new version is available for upgrading.

If above steps don't work for you, please send an email to support @ iredmail.org to get download link of the latest release.

Below are detailed changes since iRedAdmin-Pro-LDAP-2.5.0.

RESTful API
Improvements
  • Able to set limits of mail user/list/alias accounts while creating new domain.

  • Able to manage per-domain and per-user sender dependent relayhost.

  • Able to enable/disable SOGo service for a single user in user profile page.

  • Bring back option 'Relay without verifying local recipients' for per-domain relay setting.

  • Show progress bar in domain list page to indicate percentage of used quota (and allocated quota).

  • Show a small icon as indicator:

    • on domain list page: indicate current domain has alias domain(s)

    • on mailing list/alias list page: indicate  current account has alias addresses.

    • on user list page: indicate current account

      • has alias address(es)

      • forwarding address(es)

      • has been assigned to some mailing list(s)

    Moving cursor on the icon will show more details like addresses of alias, forwarding and assigned mailing lists.

Fixed issues
  • Cannot convert invalid date/time to local time.

  • Not add required header (Content-Type: text/html) for web pages.

  • tools/cleanup_amavisd_db.py: Not correctly delete unreferred sql records in Amavisd database, this bug may incorrectly delete some whitelists/blacklists.

  • Updating per-domain and per-user greylisting setting will delete whitelisted domains for greylisting service.

Updated translations
  • Spain (es_ES). Thanks Juan Bou Riquer <jbou@cancun.com.mx>.

iRedAdmin-Pro-SQL-2.4.0 has been released.

$
0
0

Dear all,

iRedAdmin-Pro-SQL-2.4.0 (iRedAdmin-Pro for MySQL, MariaDB and PostgreSQL backends) is now available for upgrading and purchasing.

How to download the latest iRedAdmin-Pro

iRedAdmin-Pro customers can get download link of this new release by following steps below:

  • Login to iRedAdmin-Pro as global admin

  • Click "License" on the top-right corner, it will show you basic license info and a "Download" button if new version is available for upgrading.

If above steps don't work for you, please send an email to support @ iredmail.org to get download link of the latest release.

Below are detailed changes since iRedAdmin-Pro-SQL-2.3.1:

RESTful API
Improvements
  • Able to set limits of mail user/alias accounts while creating new domain.

  • Able to search user alias address (name and email address).

  • Able to manage per-domain and per-user sender dependent relayhost.

  • Able to enable/disable SOGo service for a single user in user profile page.

  • Bring back option 'Relay without verifying local recipients' for per-domain relay setting.

  • Show progress bar in domain list page to indicate percentage of used quota (and allocated quota).

  • Show a small icon as indicator:
       

    • on domain list page: indicate certain domain has alias domain(s).

    • on user list page: indicate current account has alias and forwarding addresses.

    Moving cursor on the icon will show more details like alias/forwarding addresses.

Fixed issues
  • Not remove email address which contains invalid character while updating alias members/moderators.

  • Cannot convert invalid date/time to local time.

  • Not add required header (Content-Type: text/html) for web pages.

  • Not correctly handle submitted alias moderators.

  • tools/cleanup_amavisd_db.py: Not correctly delete unreferred sql records in Amavisd database, this bug may incorrectly delete some whitelists/blacklists.

  • Cannot correctly sort mail users by used quota of mailbox with PostgreSQL backend. Thanks Andris Vasers <andris.vasers _at_ rigasvilni.lv> for the report.

  • Updating per-domain and per-user greylisting setting will delete greylisting whitelisted domains.

Updated translations
  • Spain (es_ES). Thanks Juan Bou Riquer <jbou@cancun.com.mx>.

iRedMail-0.9.5-1 has been released.

$
0
0

Dear all,

iRedMail-0.9.5-1 stable release has been released.

Changes since iRedMail-0.9.5:

Fixed issues
  • Postfix:

    • Cannot deliver email to system account.

  • OpenLDAP

    • Incorrect default password scheme if module 'pw-sha2' is not available.

  • PHP

    • Allow functions: 'popen', 'openlog'. Required by Roundcube.

  • Incorrect compress command used in logrotate config files.

  • Add missing package 'mcrypt' on RHEL/CentOS 6.

Updated packages
  • iRedAPD-1.9.1 (fixes one bug in 'tools/spf_to_greylist_whitelists.py')

See Also

Switch SOGo yum/apt repositories to nightly builds by default

$
0
0

Dear all,

SOGo Team "made the decision to close down the public package repositories. From now on, in order to access the production builds of SOGo for various Linux distributions, you will need a proper support contract from Inverse."
https://sogo.nu/news/2016/article/sogo- … ories.html

The options of support contract are listed here:
https://sogo.nu/support/index.html#support-plans

As a temporary solution, we have to switch the yum/apt repo to nightly builds in iRedMail, but there're some third-party Debian/Ubuntu apt repositories available, use it on your own.

Note: iRedMail-0.9.5-1 has been re-packed with this change.

RHEL/CentOS

* Open file /etc/yum.repos.d/SOGo.repo, find the `baseurl=` setting like below:

baseurl=http://inverse.ca/rhel-v3/7/$basearch

* Change it to:

baseurl=http://packages.inverse.ca/SOGo/nightly/3/rhel/7/$basearch

Debian

* Open file /etc/apt/sources.list, find the SOGo repo like below

deb http://inverse.ca/debian-v3/ jessie jessie

* Change it to:

deb http://packages.inverse.ca/SOGo/nightly/3/debian jessie jessie

* Run 'apt-get update'.

Ubuntu

* Open file /etc/apt/sources.list, find the SOGo repo like below

deb http://inverse.ca/ubuntu-v3/ trusty trusty

* Change it to:

deb http://packages.inverse.ca/SOGo/nightly/3/ubuntu trusty trusty

* Run 'apt-get update'.

The third-party Debian/Ubuntu apt repositories

* http://www.mail-archive.com/users%40sog … 24909.html
* http://www.mail-archive.com/users%40sog … 24962.html

CRITICAL SECURITY FIX of iRedAdmin on FreeBSD and OpenBSD

$
0
0

Dear all,

We just found a critical security issue of iRedAdmin (both open source edition and iRedAdmin-Pro) on FreeBSD and OpenBSD system, please upgrade it immediately.

Note: iRedMail-0.9.5-1 was repacked with new iRedAdmin release (0.6.2) which contains this fix today.

The Issue

iRedAdmin calls an incorrect function to verify BCRYPT password hash while admin trying to login, if the admin account exists, iRedAdmin accepts any password and the admin logs in.

Affected Linux/BSD distributions

BCRYPT is available on FreeBSD and OpenBSD, but not Linux, so this issue impacts only FreeBSD and OpenBSD systems.

Affected iRedAdmin versions

This bug was introduced in iRedAdmin (both open source edition and iRedAdmin-Pro) on May 3, 2016, versions released after May 3 contain this bug:

  • iRedAdmin-0.6.1 (shipped by iRedMail-0.9.5-1)

  • iRedAdmin-Pro-SQL-2.4.0

  • iRedAdmin-Pro-LDAP-2.6.0

How to fix it
Viewing all 241 articles
Browse latest View live