From 0617c47cddadda90aad4fadf23dde36207f2331a Mon Sep 17 00:00:00 2001 From: Zhang Huangbin Date: Mon, 22 May 2017 14:04:32 +0800 Subject: [PATCH] Sync iRedMail upgrade tutorial. --- .../upgrade/0-upgrade.iredmail.0.9.6-0.9.7.md | 18 ++++++++++------ html/upgrade.iredmail.0.9.6-0.9.7.html | 21 ++++++++++++------- 2 files changed, 26 insertions(+), 13 deletions(-) diff --git a/en_US/upgrade/0-upgrade.iredmail.0.9.6-0.9.7.md b/en_US/upgrade/0-upgrade.iredmail.0.9.6-0.9.7.md index 113b5a61..ad5f0177 100644 --- a/en_US/upgrade/0-upgrade.iredmail.0.9.6-0.9.7.md +++ b/en_US/upgrade/0-upgrade.iredmail.0.9.6-0.9.7.md @@ -13,13 +13,13 @@ ## ChangeLog +* May 22, 2017: Fixed improper Fail2ban filter for Dovecot, add new filter for Roundcube. * May 15, 2017: SQL structure change in `vmail.alias` SQL table * May 3, 2017: Fixed: improper order of Postfix HELO restriction rules. * Apr 13, 2017: Fixed: incorrect owner and permission for rotated Dovecot log files * Mar 22, 2017: New backup script for SOGo. * Mar 16, 2017: Fixed: Avoid possible backdooring mysqldump backups * Mar 8, 2017: [RHEL/CentOS][Nginx] Fix incorrect `session.save_path` in php-fpm pool config file. -* Feb 9, 2017: Fixed improper Fail2ban filter for Dovecot. ## General (All backends should apply these steps) @@ -122,16 +122,22 @@ php_value[session.save_path] = "/var/lib/php/sessions" service php-fpm restart ``` -### Fixed: Improper Fail2ban filter which causes incorrect ban +### Fail2ban: fixes an improper filter and add new filter rule -Please open file `/etc/fail2ban/filter.d/dovecot.iredmail.conf`, remove line -below: +iRedMail-0.9.7 fixes an improper filter for Dovecot log file which may cause +incorrect ban, and adds a new filter for Roundcube log file to help ban bad +client while Roundcube is running behind a proxy server. + +* On Linux: ``` - \(no auth attempts in .* rip= +cd /etc/fail2ban/filter.d/ +rm -f dovecot.iredmail.conf roundcube.iredmail.conf +wget https://bitbucket.org/zhb/iredmail/raw/default/iRedMail/samples/fail2ban/filter.d/dovecot.iredmail.conf +wget https://bitbucket.org/zhb/iredmail/raw/default/iRedMail/samples/fail2ban/filter.d/roundcube.iredmail.conf ``` -Then restart or reload Fail2ban service. +Restarting Fail2ban service is required. ### NEW: New backup script for SOGo diff --git a/html/upgrade.iredmail.0.9.6-0.9.7.html b/html/upgrade.iredmail.0.9.6-0.9.7.html index 61d35ee4..4209e8b3 100644 --- a/html/upgrade.iredmail.0.9.6-0.9.7.html +++ b/html/upgrade.iredmail.0.9.6-0.9.7.html @@ -26,7 +26,7 @@
  • Fixed: improper order of Postfix HELO restriction rules.
  • Fixed: incorrect owner and permission for rotated Dovecot log files
  • Fixed: incorrect session.save_path in php-fpm pool config file on RHEL/CentOS
    • -
  • Fixed: Improper Fail2ban filter which causes incorrect ban
    • +
  • Fail2ban: fixes an improper filter and add new filter rule
  • NEW: New backup script for SOGo
    • @@ -70,13 +70,13 @@ check the details and co

    ChangeLog

      +
    • May 22, 2017: Fixed improper Fail2ban filter for Dovecot, add new filter for Roundcube.
    • May 15, 2017: SQL structure change in vmail.alias SQL table
    • May 3, 2017: Fixed: improper order of Postfix HELO restriction rules.
    • Apr 13, 2017: Fixed: incorrect owner and permission for rotated Dovecot log files
    • Mar 22, 2017: New backup script for SOGo.
    • Mar 16, 2017: Fixed: Avoid possible backdooring mysqldump backups
    • Mar 8, 2017: [RHEL/CentOS][Nginx] Fix incorrect session.save_path in php-fpm pool config file.
      • -
    • Feb 9, 2017: Fixed improper Fail2ban filter for Dovecot.

    General (All backends should apply these steps)

    Update /etc/iredmail-release with new iRedMail version number

    @@ -168,13 +168,20 @@ pool config file /etc/php-fpm.d/www.conf, please fix it with steps 
    service php-fpm restart
    -

    Fixed: Improper Fail2ban filter which causes incorrect ban

    -

    Please open file /etc/fail2ban/filter.d/dovecot.iredmail.conf, remove line -below:

    -
                \(no auth attempts in .* rip=<HOST>
+
    Fail2ban: fixes an improper filter and add new filter rule
    
+
    iRedMail-0.9.7 fixes an improper filter for Dovecot log file which may cause
+incorrect ban, and adds a new filter for Roundcube log file to help ban bad
+client while Roundcube is running behind a proxy server.
    
+
      
+
    • On Linux:
      • 
+
    
+
    cd /etc/fail2ban/filter.d/
+rm -f dovecot.iredmail.conf roundcube.iredmail.conf
+wget https://bitbucket.org/zhb/iredmail/raw/default/iRedMail/samples/fail2ban/filter.d/dovecot.iredmail.conf
+wget https://bitbucket.org/zhb/iredmail/raw/default/iRedMail/samples/fail2ban/filter.d/roundcube.iredmail.conf
 
    
 
-
    Then restart or reload Fail2ban service.
    
+
    Restarting Fail2ban service is required.
    
 
    NEW: New backup script for SOGo
    
 
    
 
    Attention