2019-07-18 01:21:35 -05:00
|
|
|
# Release Notes of iRedMail Easy platform
|
2018-07-09 03:37:57 -05:00
|
|
|
|
2018-12-17 00:34:43 -06:00
|
|
|
[TOC]
|
2018-11-03 14:33:18 -06:00
|
|
|
|
2019-08-01 20:27:08 -05:00
|
|
|
## Version: 2019080201 (Aug 02, 2019) {: id=20190802 }
|
|
|
|
|
|
|
|
* Dovecot:
|
|
|
|
- Fixed: not add required SQL column `mailbox.enablequota-status`. This
|
|
|
|
will cause mail rejection.
|
|
|
|
|
|
|
|
* Firewall:
|
|
|
|
- Run `/opt/iredmail/custom/firewall/custom.sh` after each deployment.
|
|
|
|
|
|
|
|
|
2019-08-01 01:29:24 -05:00
|
|
|
## Version: 2019080101 (Aug 01, 2019) {: id=20190801 }
|
|
|
|
|
|
|
|
* It now supports Debian 10.
|
|
|
|
* Dovecot:
|
|
|
|
- Enable quota-status service used to query mailbox quota.
|
|
|
|
- Fixed: Not install package `dovecot-mysql` for OpenLDAP backend on CentOS.
|
|
|
|
|
|
|
|
* Postfix:
|
|
|
|
- Lookup user's mailbox quota status from Dovecot quota-status service,
|
|
|
|
reject email if mailbox is over quota. This will help save system
|
|
|
|
resources used for spam/virus scanning, avoids "sender non-delivery
|
|
|
|
notification" bounce message.
|
|
|
|
- Fixed: not copy `/etc/resolv.conf` to `/var/spool/postfix/etc/`.
|
|
|
|
|
|
|
|
* Nginx:
|
|
|
|
- Fixed: improper order while loading modular config files.
|
|
|
|
- __ATTENTION__: directive `ssl on;` has been removed (in
|
|
|
|
`/etc/nginx/templates/ssl.tmpl`) due to it's deprecated by Nginx itself.
|
|
|
|
If you have custom web host, please use `listen <port> ssl;` in the
|
|
|
|
`server {}` block (in `/etc/nginx/sites-enabled/*.conf`) instead.
|
|
|
|
|
|
|
|
For example:
|
|
|
|
|
|
|
|
* Old config file `/etc/nginx/sites-enabled/00-default-ssl.conf`:
|
|
|
|
|
2019-08-01 01:31:37 -05:00
|
|
|
```
|
|
|
|
server {
|
|
|
|
listen 443;
|
|
|
|
...
|
|
|
|
}
|
|
|
|
```
|
2019-08-01 01:29:24 -05:00
|
|
|
|
|
|
|
* New directive:
|
|
|
|
|
2019-08-01 01:31:37 -05:00
|
|
|
```
|
|
|
|
server {
|
|
|
|
listen 443 ssl;
|
|
|
|
...
|
|
|
|
}
|
|
|
|
```
|
2019-08-01 01:29:24 -05:00
|
|
|
|
|
|
|
* Firewall:
|
|
|
|
- Port 465 (SMTP over SSL) is not open in firewall when the service is
|
|
|
|
enabled.
|
|
|
|
|
|
|
|
* Package updates:
|
|
|
|
- adminer -> 4.7.2
|
|
|
|
|
2019-07-15 01:34:33 -05:00
|
|
|
## Version: 2019071501 (Jul 15, 2019) {: id=20190715 }
|
2019-06-14 21:22:30 -05:00
|
|
|
|
|
|
|
* OpenDMARC integration.
|
|
|
|
|
2019-07-03 08:39:13 -05:00
|
|
|
- The integration is enabled by default. To disable it, please go to
|
|
|
|
mail server profile page, toggle on option `Disable DMARC` under
|
|
|
|
`Settings` tab.
|
|
|
|
- Unfortunately, OpenBSD 6.5 and earlier releases don't have such
|
|
|
|
integration due to binary package missing. The good news is the latest
|
|
|
|
ports tree already has it and binary package is available for OpenBSD
|
|
|
|
-snapshot branch.
|
2019-06-14 21:22:30 -05:00
|
|
|
|
2019-07-13 06:21:55 -05:00
|
|
|
* Roundcube:
|
|
|
|
- New config files used to store custom settings for official plugins:
|
|
|
|
- `password` plugin: `/opt/iredmail/custom/roundcube/config_password.inc.php`
|
|
|
|
- `managesieve` plugin: `/opt/iredmail/custom/roundcube/config_managesieve.inc.php`
|
|
|
|
|
2019-07-12 21:43:24 -05:00
|
|
|
* Postfix:
|
|
|
|
- Fixed: improper order of restriction rules in `smtpd_sender_restrictions`.
|
|
|
|
|
|
|
|
File `/etc/postfix/sender_access.pcre` is not used anymore, all content
|
|
|
|
in this file should be moved to
|
|
|
|
`/opt/iredmail/custom/postfix/sender_access.pcre` instead.
|
|
|
|
|
|
|
|
* Nginx:
|
|
|
|
- Compress more file types with gzip module (`/etc/nginx/conf-available/gzip.conf`).
|
|
|
|
|
|
|
|
* Few programs moved and/or renamed:
|
|
|
|
- `/opt/iredmail/bin/fail2ban_unbanip` -> `/opt/iredmail/bin/fail2ban/unbanip`.
|
|
|
|
- `/opt/iredmail/bin/generate_password_hash.py` -> `/opt/iredmail/bin/generate_password_hash`.
|
|
|
|
- `/opt/iredmail/bin/dovecot/scan_reported_mails.sh` -> `/opt/iredmail/bin/dovecot/scan_reported_mails`
|
|
|
|
|
2019-06-14 21:22:30 -05:00
|
|
|
* Fixed issues of iRedMail Easy platform:
|
2019-07-12 21:43:24 -05:00
|
|
|
- If IPv6 is disabled, installation will be abort due to Nginx is
|
|
|
|
configured (by Debian/Ubuntu packaging) to listen on IPv6 address.
|
|
|
|
- If no PHP applications are going to be installed, no php-fpm related
|
|
|
|
configuration should be enabled (`/etc/nginx/templates/misc.tmpl`).
|
2019-06-14 21:22:30 -05:00
|
|
|
- Make sure installed services are running while cleaning up the deployment.
|
2019-07-12 21:43:24 -05:00
|
|
|
- Not run `freshclam` immediately to fetch/update ClamAV virus database.
|
2019-06-14 21:22:30 -05:00
|
|
|
- Removing unused ClamAV log file (/var/log/clamav/clamav.log) causes
|
|
|
|
error in cron job added by ClamAV package.
|
|
|
|
|
2019-07-03 08:39:13 -05:00
|
|
|
* Package updates:
|
|
|
|
- iRedAPD 3.0. It fixes a critical bug of throttle plugin.
|
|
|
|
- iRedAdmin-Pro. Note: it requires a valid iRedAdmin-Pro license.
|
|
|
|
|
2019-07-15 01:34:33 -05:00
|
|
|
## Version: 2019060601 (Jun 06, 2019) {: id=20190606 }
|
2019-05-31 20:39:53 -05:00
|
|
|
|
|
|
|
* Fail2ban:
|
|
|
|
- Remove jail 'sshd-ddos'. Fail2ban doesn't ship its filter conf anymore.
|
|
|
|
|
|
|
|
* Dovecot:
|
|
|
|
- Set default client_limit and process_limit based on memory size.
|
|
|
|
|
|
|
|
* autoconfig:
|
|
|
|
- Fixed: not handle URI `/.well-known/autoconfig/mail/config-v1.1.xml`.
|
|
|
|
|
|
|
|
* Improvements of iRedMail Easy platform:
|
|
|
|
- Able to ban/unban given file types.
|
|
|
|
- Remove deprecated ClamAV parameters.
|
|
|
|
- Remove unused ClamAV log file (/var/log/clamav/clamav.log).
|
|
|
|
- Able to disable HELO hostname DNS check.
|
|
|
|
- Fixed: not always restart iRedAdmin service to reload the code of new version.
|
|
|
|
|
|
|
|
* Package updates:
|
2019-06-03 01:32:55 -05:00
|
|
|
- iRedAPD 2.9. It fixes 2 bugs.
|
2019-05-31 20:39:53 -05:00
|
|
|
- netdata 1.15.0
|
|
|
|
|
2019-07-14 23:39:58 -05:00
|
|
|
## Version: 2019042801 (Apr 28, 2019) {: id=20190428 }
|
2019-04-15 22:57:44 -05:00
|
|
|
|
2019-04-15 23:25:39 -05:00
|
|
|
* Postfix:
|
2019-04-16 06:20:28 -05:00
|
|
|
- Enable header/body checks for email injected by Amavisd.
|
2019-04-15 23:25:39 -05:00
|
|
|
- Fixed: not load custom `header_checks` and `body_checks` pcre maps.
|
2019-04-16 06:20:28 -05:00
|
|
|
- Fixed: port 1025/10025/10028 are not listening on only 127.0.0.1.
|
2019-04-17 23:10:02 -05:00
|
|
|
- Fixed: per-user bcc doesn't work with MySQL/MariaDB backends.
|
2019-04-15 23:25:39 -05:00
|
|
|
|
2019-04-15 22:57:44 -05:00
|
|
|
* SOGo:
|
|
|
|
- [PostgreSQL backend] Fix incorrect owner of SQL VIEWs used for address
|
|
|
|
books.
|
|
|
|
- [SQL backends] Fix incorrect SQL VIEWs which causes error to display
|
|
|
|
contacts in address books.
|
|
|
|
- [SQL backends] Display all contacts directly in per-domain address book.
|
|
|
|
|
2019-04-28 00:48:38 -05:00
|
|
|
* Package updates:
|
|
|
|
- iRedAPD 2.8
|
|
|
|
- iRedAdmin 0.9.7 (open source edition)
|
2019-04-28 01:03:43 -05:00
|
|
|
- netdata 1.14.0
|
2019-04-27 23:25:45 -05:00
|
|
|
|
2019-04-15 22:57:44 -05:00
|
|
|
* Improvements of iRedMail Easy platform:
|
2019-04-27 23:25:45 -05:00
|
|
|
+ Supports OpenBSD 6.5.
|
|
|
|
|
|
|
|
WARNING: OpenBSD 6.4 support will be removed when OpenBSD 6.6 is out.
|
|
|
|
That means you must upgrade OpenBSD 6.4 to 6.5 before 6.6 is out.
|
|
|
|
|
|
|
|
+ Fixed: not enable php ldap extension for Roundcube for OpenLDAP backend.
|
2019-04-15 22:57:44 -05:00
|
|
|
+ Do not always update SOGo packages.
|
|
|
|
We're using SOGo nightly build, it's not always stable, upgrading may
|
|
|
|
cause issue.
|
|
|
|
+ Send `iRedMail.tips` file to postmaster after deployment.
|
|
|
|
|
2019-07-14 23:39:58 -05:00
|
|
|
## Version: 2019040201 (Apr 02, 2019) {: id=20190402 }
|
2019-04-01 22:08:30 -06:00
|
|
|
|
|
|
|
* Roundcube
|
2019-04-03 19:26:01 -06:00
|
|
|
- Upgrade to 1.3.9 ([Detailed ChangeLog](https://github.com/roundcube/roundcubemail/releases/tag/1.3.9).)
|
2019-04-01 22:08:30 -06:00
|
|
|
|
|
|
|
* Dovecot:
|
|
|
|
- Able to track user last (POP3/IMAP) login for OpenLDAP and MariaDB
|
|
|
|
backends. It's disabled by default, you can enable it in iRedMail Easy
|
|
|
|
user portal, in mail server profile page, tab "Settings".
|
|
|
|
|
2019-04-01 22:37:09 -06:00
|
|
|
Note: Dovecot doesn't support this with PostgreSQL yet.
|
2019-04-01 22:08:30 -06:00
|
|
|
|
2019-04-03 19:26:01 -06:00
|
|
|
Here's detailed tutorial to show you what changes are applied to Dovecot:
|
|
|
|
[Track user last login time](https://docs.iredmail.org/track.user.last.login.html).
|
|
|
|
|
2019-04-01 22:08:30 -06:00
|
|
|
* Improvements of iRedMail Easy platform:
|
|
|
|
+ Send `iRedMail.tips` file to postmaster after deployment.
|
|
|
|
|
2019-07-14 23:39:58 -05:00
|
|
|
## Version: 2019032701 (Mar 27, 2019) {: id=20190327 }
|
2019-03-26 20:15:54 -06:00
|
|
|
|
2019-03-26 21:42:50 -06:00
|
|
|
* Dovecot:
|
|
|
|
- Improve `imapsieve` setting to handle different IMAP command sent by
|
|
|
|
Microsoft Outlook (it sometimes uses `APPEND` instead of `COPY` for
|
|
|
|
moving message to another folder).
|
|
|
|
|
2019-03-26 20:15:54 -06:00
|
|
|
* iRedAPD:
|
2019-03-28 20:16:36 -06:00
|
|
|
- Update to version 2.7, with SRS (Sender Rewriting Scheme) support.
|
2019-03-26 20:15:54 -06:00
|
|
|
|
|
|
|
Note: SRS is disabled by default, you can enable it in mail server
|
|
|
|
profile page with the iRedMail Easy web UI.
|
|
|
|
|
|
|
|
- Switch logging to syslog (and logrotate).
|
|
|
|
|
2019-03-28 20:16:36 -06:00
|
|
|
* iRedAdmin:
|
|
|
|
- Update to 0.9.6.
|
|
|
|
|
2019-03-26 20:15:54 -06:00
|
|
|
* BIND (local cache-only DNS server):
|
|
|
|
- Set syslog facility to 'local5'.
|
2019-02-20 03:10:48 -06:00
|
|
|
|
2019-02-26 07:07:54 -06:00
|
|
|
* netdata:
|
2019-03-26 20:15:54 -06:00
|
|
|
- Update to version 1.13.0.
|
|
|
|
- Switch logging to syslog (and logrotate).
|
2019-02-26 07:07:54 -06:00
|
|
|
- Disable sending anonymous statistics to netdata cloud.
|
|
|
|
|
2019-03-26 20:15:54 -06:00
|
|
|
* SpamAssassin:
|
|
|
|
- Add one custom rule to catch porn spams.
|
|
|
|
- Fixed: not create required SQL tables for bayes.
|
|
|
|
|
|
|
|
* AutoConfig/AutoDiscover
|
|
|
|
- Domain name `autoconfig.<domain>` and `autodiscover.<domain>` are not
|
|
|
|
required if the web domain is hosted on iRedMail server, Outlook will
|
|
|
|
look for `https://<web-domain>/autodiscover/autodiscover.xml`.
|
|
|
|
|
2019-02-26 07:07:54 -06:00
|
|
|
* Fail2ban:
|
|
|
|
- Slightly loose filter for postfix to reduce unexpected ban caused by
|
|
|
|
Outlook for macOS.
|
|
|
|
|
2019-03-26 20:15:54 -06:00
|
|
|
* SOGo:
|
|
|
|
- Enable per-domain global address book for OpenLDAP backend by default.
|
|
|
|
We sponsored SOGo team to implement this feature:
|
|
|
|
https://sogo.nu/bugs/view.php?id=3685
|
|
|
|
Note: it requires SOGo nightly build version '4.0.7.20190318' or later,
|
|
|
|
OpenBSD 6.4 doesn't support this feature due to old SOGo package.
|
|
|
|
- Enable builtin IMAP4 pooling by default. User should notice faster IMAP
|
|
|
|
operations.
|
|
|
|
|
2019-02-26 07:07:54 -06:00
|
|
|
* Backup:
|
|
|
|
+ Backup OpenLDAP data with option `-o ldif-wrap=no`, to avoid break long
|
|
|
|
line to multiple lines. The dumped LDIF file is easier to work with
|
|
|
|
`grep` and other command line tools.
|
|
|
|
|
|
|
|
* Improvements of iRedMail Easy platform:
|
2019-03-26 20:15:54 -06:00
|
|
|
+ Make sure OpenLDAP service is running before populating data.
|
|
|
|
+ Make Nginx/Dovecot/Postfix not listen on address `::1` if system doesn't
|
|
|
|
have IPv6 support.
|
|
|
|
+ Slightly reduce Amavisd max_servers to same as RAM (GB) for better
|
|
|
|
stability.
|
|
|
|
+ Always check and make sure major components are the latest versions.
|
2019-02-27 00:14:56 -06:00
|
|
|
+ Always update major components (postfix/dovecot/sogo/fail2ban/...) to the
|
|
|
|
latest stable release.
|
2019-02-26 07:07:54 -06:00
|
|
|
+ Always print command output of `nginx -t` for troubleshooting before
|
|
|
|
restart nginx servvice, it's very useful for troubleshooting.
|
2019-02-20 21:59:05 -06:00
|
|
|
+ New option `Trusted clients` in mail server profile page, under tab
|
|
|
|
`Settings`. You can list all trusted IP addresses or CIDR networks here,
|
|
|
|
they will be whitelisted by few components:
|
|
|
|
- Postfix: parameter `mynetworks` in `/etc/postfix/main.cf`
|
|
|
|
- iRedAPD: parameter `MYNETWORKS` in `/opt/iredapd/settings.py`
|
|
|
|
- Fail2ban: parameter `ignoreip` in `/etc/fail2ban/ignoreip.local`
|
2019-02-26 07:07:54 -06:00
|
|
|
|
|
|
|
* Fixed issues of iRedMail Easy platform:
|
|
|
|
- Incorrect permission of directories used to store prosody custom modules
|
|
|
|
and config files.
|
2019-02-20 03:10:48 -06:00
|
|
|
|
2019-07-14 23:39:58 -05:00
|
|
|
## Version: 2019021901 (Feb 19, 2019) {: id=20190219 }
|
2019-02-19 00:45:07 -06:00
|
|
|
|
2019-02-19 00:47:17 -06:00
|
|
|
* Improvements:
|
|
|
|
+ Able to remove ssh public key on target server.
|
2019-02-19 09:06:01 -06:00
|
|
|
+ SSH keys which were generated 7 days ago will be removed automatically
|
|
|
|
from iRedMail Easy platform.
|
2019-02-19 00:47:17 -06:00
|
|
|
|
2019-02-19 00:45:07 -06:00
|
|
|
* Fixed issues:
|
|
|
|
- php-fpm: not reopen log file after rotation.
|
|
|
|
- mlmmjadmin:
|
|
|
|
- Incorrect LDAP base dn in config file.
|
|
|
|
- Do not return error if mailing list directory doesn't exist.
|
|
|
|
- Incorrect iRedAPD plugin name for OpenLDAP backend.
|
|
|
|
- Few bugs with in Ansible deployment code.
|
|
|
|
|
|
|
|
* Package updates:
|
|
|
|
+ mlmmjadmin -> 2.1
|
|
|
|
+ iRedAdmin (open source edition) -> 0.9.5
|
|
|
|
|
2019-07-14 23:39:58 -05:00
|
|
|
## Version: 2019013001 (Jan 30, 2019) {: id=20190130 }
|
2019-01-09 07:54:33 -06:00
|
|
|
|
2019-01-24 10:18:44 -06:00
|
|
|
* Set max open file limit by SOGo daemon to unlimited.
|
|
|
|
* Able to set memcached cache size (in MB).
|
|
|
|
* Able to disable spam/virus scanning.
|
2019-01-09 07:54:33 -06:00
|
|
|
* Able to deploy iRedAdmin-Pro with your license key.
|
2019-01-15 05:11:39 -06:00
|
|
|
* Able to custom http/https network ports, max file size of (web) upload file.
|
|
|
|
* Enable bayes auto-learn in SpamAssassin, and store bayes in SQL db.
|
2019-01-24 10:18:44 -06:00
|
|
|
* Increase scores of DNSBL relevant spamassassin rules to catch more spams.
|
2019-01-09 07:54:33 -06:00
|
|
|
* Enable imapsieve plugin in Dovecot by default.
|
|
|
|
|
|
|
|
Message moved to Junk folder will be copied to a directory for spam
|
|
|
|
learning later, vice verse, message moved out of Junk will be copied
|
|
|
|
for ham learning later.
|
|
|
|
|
|
|
|
The spam/ham learning will be performed every 10 minutes with a cron job.
|
|
|
|
|
2019-01-30 08:03:14 -06:00
|
|
|
__Now encourage your users to report spams by moving spams to `Junk` folder. :)__
|
|
|
|
|
2019-01-28 22:07:55 -06:00
|
|
|
* Fixed issues:
|
|
|
|
- Can not login to XMPP service (Prosody) due to incorrect permission of
|
|
|
|
auth module files.
|
|
|
|
- ip6tables failed to start on server which doesn't have IPv6 address.
|
|
|
|
|
2019-01-24 18:31:12 -06:00
|
|
|
* Updated packages:
|
|
|
|
- mlmmjadmin-2.0
|
|
|
|
- adminer-4.7.1
|
|
|
|
|
2019-07-14 23:39:58 -05:00
|
|
|
## Version: 2019010201 (Jan 2, 2019) {: id=20190102 }
|
2019-01-01 17:41:58 -06:00
|
|
|
|
|
|
|
> Hello, 2019. :)
|
|
|
|
|
|
|
|
* Updated packages:
|
|
|
|
- iRedAPD-2.4. Fixed a greylisting issue.
|
|
|
|
* Fixed issues:
|
|
|
|
- Not correctly set owner and permission of custom Postfix config files
|
|
|
|
and hash db files.
|
|
|
|
- Not remove unused modular nginx config file for iredadmin.
|
|
|
|
|
2019-07-14 23:39:58 -05:00
|
|
|
## Version: 2018122301 (Dec 23, 2018) {: id=20181223 }
|
2018-12-23 07:32:50 -06:00
|
|
|
|
|
|
|
* Fixed:
|
|
|
|
- Improper dovecot ldap/sql queries which doesn't convert upper cases of
|
|
|
|
maildir to lower cases.
|
|
|
|
|
2019-07-14 23:39:58 -05:00
|
|
|
## Version: 2018121701 (Dec 17, 2018) {: id=20181217 }
|
2018-11-03 14:33:18 -06:00
|
|
|
|
2018-12-17 00:34:43 -06:00
|
|
|
!!! attention
|
|
|
|
|
|
|
|
* This is the first public release. :)
|
|
|
|
* The version number is the date when it's released, it's easier to
|
|
|
|
understand whether you're running the latest stable release. It's also
|
|
|
|
stored in file `/etc/iredmail-release` on your server.
|
|
|
|
|
|
|
|
* New directory `/opt/www/well-known`, mostly used for Let's Encrypt cert
|
|
|
|
request.
|
|
|
|
* Download source tarball of web applications to iRedMail deploy server first,
|
|
|
|
then upload it to target host. If target host can not access website like
|
|
|
|
github.com, we can still download required packages for iRedMail deployment.
|
|
|
|
* Firewall:
|
|
|
|
+ Add rc script and firewall rule for ipv6 on Debian/Ubuntu:
|
|
|
|
- `/etc/init.d/ip6tables`
|
|
|
|
- `/etc/default/ip6tables`
|
|
|
|
* OpenLDAP backend:
|
|
|
|
+ Do not enable TLS/SSL support in OpenLDAP by default.
|
|
|
|
+ Add database `monitor` by default.
|
|
|
|
+ Include calresource.schema and calentry.schema by default. Required
|
|
|
|
by SOGo for resource management.
|
|
|
|
+ Index attribute `departmentNumber`.
|
|
|
|
* Fail2ban:
|
|
|
|
- Remove duplicate filter rules for Postfix postscreen service.
|
|
|
|
* SOGo:
|
|
|
|
+ Add new parameters to support resource management.
|
|
|
|
+ Add mail aliases and mailing lists as address book.
|
|
|
|
+ Fix incorrect column name in SQL views.
|
|
|
|
* netdata:
|
|
|
|
+ Supports monitoring OpenLDAP.
|
|
|
|
* Fixed:
|
|
|
|
- Ubuntu: Missing apparmor rule to allow ClamAV to scan emails.
|
|
|
|
- not enable php-fpm status support in Nginx and netdata.
|
|
|
|
- not load rsyslog module `imjournal` for rate limit control.
|
|
|
|
* Package update:
|
|
|
|
- netdata -> 1.11.1
|
|
|
|
- adminer -> 4.7.0
|