From 07901c836d49ffc7225ae62d55b183a3b9893cd6 Mon Sep 17 00:00:00 2001 From: Zhang Huangbin Date: Wed, 1 Oct 2014 08:19:50 +0800 Subject: [PATCH] 2 new pages: allow.insecure.pop3.imap.connection.html, change.mail.attachment.size.html. --- README.md | 1 + SUMMARY.md | 145 ++++++++++++++++++ howto/0-change.mail.attachment.size.md | 8 +- .../2-allow.insecure.pop3.imap.connection.md | 31 ++++ html/allow.insecure.pop3.imap.connection.html | 36 +++++ html/change.mail.attachment.size.html | 25 ++- html/index.html | 1 + html/turn.on.debug.mode.in.dovecot.html | 9 +- .../turn.on.debug.mode.in.dovecot.md | 8 +- 9 files changed, 247 insertions(+), 17 deletions(-) create mode 100644 howto/2-allow.insecure.pop3.imap.connection.md create mode 100644 html/allow.insecure.pop3.imap.connection.html diff --git a/README.md b/README.md index 6b72c55a..cf1691d6 100644 --- a/README.md +++ b/README.md @@ -8,6 +8,7 @@ We're working on migrating [old wiki documents](http://www.iredmail.org/wiki) to * [Amavisd + SpamAssassin not working, no mail header (X-Spam-*) inserted.](src/default/howto/1-amavisd.no.x-spam.headers.md) * [Disable spam virus scanning for outgoing mails](src/default/howto/1-disable.spam.virus.scanning.for.outgoing.mails.md) * [Quarantining](src/default/howto/1-quarantining.md) +* [Allow insecure POP3/IMAP connection without STARTTLS](src/default/howto/2-allow.insecure.pop3.imap.connection.md) * [Allow user to send email without authentication](src/default/howto/allow.user.to.send.email.without.authentication.md) * [Configure Thunderbird as mail client (IMAP, SMTP and global ldap address book)](src/default/howto/configure.thunderbird.md) * [Ignore Trash folder in mailbox quota](src/default/howto/ignore.trash.folder.in.quota.md) diff --git a/SUMMARY.md b/SUMMARY.md index 81296cf6..4c833d14 100644 --- a/SUMMARY.md +++ b/SUMMARY.md @@ -1816,3 +1816,148 @@ * [Turn on debug mode in OpenLDAP](turn.on.debug.mode.in.openldap.md) # Frequently Asked Questions * [Why append timestamp in maildir path](why.append.timestamp.in.maildir.path.md) +# Install iRedMail +* [Perform silent/unattended iRedMail installation](unattended.iredmail.installation.md) +# How to +* [Change mail attachment size](0-change.mail.attachment.size.md) +* [Completely disable Amavisd + ClamAV + SpamAssassin](0-completely.disable.amavisd.clamav.spamassassin.md) +* [Enable SMTPS service (SMTP over SSL, port 465)](0-enable.smtps.md) +* [Amavisd + SpamAssassin not working, no mail header (X-Spam-*) inserted.](1-amavisd.no.x-spam.headers.md) +* [Disable spam virus scanning for outgoing mails](1-disable.spam.virus.scanning.for.outgoing.mails.md) +* [Quarantining](1-quarantining.md) +* [Allow user to send email without authentication](allow.user.to.send.email.without.authentication.md) +* [Configure Thunderbird as mail client (IMAP, SMTP and global ldap address book)](configure.thunderbird.md) +* [Ignore Trash folder in mailbox quota](ignore.trash.folder.in.quota.md) +* [LDAP: Add an alias domain](ldap.add.alias.domain.md) +* [LDAP: Add a mail alias account](ldap.add.mail.alias.md) +* [LDAP: Add a mail list account](ldap.add.mail.list.md) +* [LDAP: User mail forwarding.](ldap.user.mail.forwarding.md) +* [Monitor incoming and outgoing mails with BCC](monitor.incoming.and.outgoing.mails.with.bcc.md) +* [Pipe incoming email for certain user to external script ](pipe.incoming.email.for.certain.user.to.external.script.md) +* [Force Dovecot to recalculate mailbox quota](recalculate.mailbox.quota.md) +* [SQL: Create an mail alias account with SQL command line](sql.create.mail.alias.md) +* [Store SpamAssassin bayes in SQL](store.spamassassin.bayes.in.sql.md) +# Third-party integrations. +* [SOGo: How to install SOGo on CentOS 6 with iRedMail (MySQL backend)](sogo-centos-6-mysql.md) +# Cluster solutions +* [An Ultra-HA, full Mult-Master E-mail cluster with iRedMail, MariaDB, and IPVS ](full.mult-master.iredmail.cluster.with.mariadb.and.ipvs.md) +# Backup, restore and migration +* [Migrate iRedAdmin open source edition to iRedAdmin-Pro](migrate.or.upgrade.iredadmin.md) +* [Migrate old iRedMail server to the latest stable release](migrate.to.new.iredmail.server.md) +* [Password hashes](password.hashes.md) +# Troubleshooting and Debug +* [Turn on debug mode in Amavisd](turn.on.debug.mode.in.amavisd.md) +* [Turn on debug mode in Cluebringer](turn.on.debug.mode.in.cluebringer.md) +* [Turn on debug mode in Dovecot](turn.on.debug.mode.in.dovecot.md) +* [Turn on debug mode in OpenLDAP](turn.on.debug.mode.in.openldap.md) +# Frequently Asked Questions +* [Why append timestamp in maildir path](why.append.timestamp.in.maildir.path.md) +# Install iRedMail +* [Perform silent/unattended iRedMail installation](unattended.iredmail.installation.md) +# How to +* [Change mail attachment size](0-change.mail.attachment.size.md) +* [Completely disable Amavisd + ClamAV + SpamAssassin](0-completely.disable.amavisd.clamav.spamassassin.md) +* [Enable SMTPS service (SMTP over SSL, port 465)](0-enable.smtps.md) +* [Amavisd + SpamAssassin not working, no mail header (X-Spam-*) inserted.](1-amavisd.no.x-spam.headers.md) +* [Disable spam virus scanning for outgoing mails](1-disable.spam.virus.scanning.for.outgoing.mails.md) +* [Quarantining](1-quarantining.md) +* [Allow user to send email without authentication](allow.user.to.send.email.without.authentication.md) +* [Configure Thunderbird as mail client (IMAP, SMTP and global ldap address book)](configure.thunderbird.md) +* [Ignore Trash folder in mailbox quota](ignore.trash.folder.in.quota.md) +* [LDAP: Add an alias domain](ldap.add.alias.domain.md) +* [LDAP: Add a mail alias account](ldap.add.mail.alias.md) +* [LDAP: Add a mail list account](ldap.add.mail.list.md) +* [LDAP: User mail forwarding.](ldap.user.mail.forwarding.md) +* [Monitor incoming and outgoing mails with BCC](monitor.incoming.and.outgoing.mails.with.bcc.md) +* [Pipe incoming email for certain user to external script ](pipe.incoming.email.for.certain.user.to.external.script.md) +* [Force Dovecot to recalculate mailbox quota](recalculate.mailbox.quota.md) +* [SQL: Create an mail alias account with SQL command line](sql.create.mail.alias.md) +* [Store SpamAssassin bayes in SQL](store.spamassassin.bayes.in.sql.md) +# Third-party integrations. +* [SOGo: How to install SOGo on CentOS 6 with iRedMail (MySQL backend)](sogo-centos-6-mysql.md) +# Cluster solutions +* [An Ultra-HA, full Mult-Master E-mail cluster with iRedMail, MariaDB, and IPVS ](full.mult-master.iredmail.cluster.with.mariadb.and.ipvs.md) +# Backup, restore and migration +* [Migrate iRedAdmin open source edition to iRedAdmin-Pro](migrate.or.upgrade.iredadmin.md) +* [Migrate old iRedMail server to the latest stable release](migrate.to.new.iredmail.server.md) +* [Password hashes](password.hashes.md) +# Troubleshooting and Debug +* [Turn on debug mode in Amavisd](turn.on.debug.mode.in.amavisd.md) +* [Turn on debug mode in Cluebringer](turn.on.debug.mode.in.cluebringer.md) +* [Turn on debug mode in Dovecot](turn.on.debug.mode.in.dovecot.md) +* [Turn on debug mode in OpenLDAP](turn.on.debug.mode.in.openldap.md) +# Frequently Asked Questions +* [Why append timestamp in maildir path](why.append.timestamp.in.maildir.path.md) +# Install iRedMail +* [Perform silent/unattended iRedMail installation](unattended.iredmail.installation.md) +# How to +* [Change mail attachment size](0-change.mail.attachment.size.md) +* [Completely disable Amavisd + ClamAV + SpamAssassin](0-completely.disable.amavisd.clamav.spamassassin.md) +* [Enable SMTPS service (SMTP over SSL, port 465)](0-enable.smtps.md) +* [Amavisd + SpamAssassin not working, no mail header (X-Spam-*) inserted.](1-amavisd.no.x-spam.headers.md) +* [Disable spam virus scanning for outgoing mails](1-disable.spam.virus.scanning.for.outgoing.mails.md) +* [Quarantining](1-quarantining.md) +* [Allow user to send email without authentication](allow.user.to.send.email.without.authentication.md) +* [Configure Thunderbird as mail client (IMAP, SMTP and global ldap address book)](configure.thunderbird.md) +* [Ignore Trash folder in mailbox quota](ignore.trash.folder.in.quota.md) +* [LDAP: Add an alias domain](ldap.add.alias.domain.md) +* [LDAP: Add a mail alias account](ldap.add.mail.alias.md) +* [LDAP: Add a mail list account](ldap.add.mail.list.md) +* [LDAP: User mail forwarding.](ldap.user.mail.forwarding.md) +* [Monitor incoming and outgoing mails with BCC](monitor.incoming.and.outgoing.mails.with.bcc.md) +* [Pipe incoming email for certain user to external script ](pipe.incoming.email.for.certain.user.to.external.script.md) +* [Force Dovecot to recalculate mailbox quota](recalculate.mailbox.quota.md) +* [SQL: Create an mail alias account with SQL command line](sql.create.mail.alias.md) +* [Store SpamAssassin bayes in SQL](store.spamassassin.bayes.in.sql.md) +# Third-party integrations. +* [SOGo: How to install SOGo on CentOS 6 with iRedMail (MySQL backend)](sogo-centos-6-mysql.md) +# Cluster solutions +* [An Ultra-HA, full Mult-Master E-mail cluster with iRedMail, MariaDB, and IPVS ](full.mult-master.iredmail.cluster.with.mariadb.and.ipvs.md) +# Backup, restore and migration +* [Migrate iRedAdmin open source edition to iRedAdmin-Pro](migrate.or.upgrade.iredadmin.md) +* [Migrate old iRedMail server to the latest stable release](migrate.to.new.iredmail.server.md) +* [Password hashes](password.hashes.md) +# Troubleshooting and Debug +* [Turn on debug mode in Amavisd](turn.on.debug.mode.in.amavisd.md) +* [Turn on debug mode in Cluebringer](turn.on.debug.mode.in.cluebringer.md) +* [Turn on debug mode in Dovecot](turn.on.debug.mode.in.dovecot.md) +* [Turn on debug mode in OpenLDAP](turn.on.debug.mode.in.openldap.md) +# Frequently Asked Questions +* [Why append timestamp in maildir path](why.append.timestamp.in.maildir.path.md) +# Install iRedMail +* [Perform silent/unattended iRedMail installation](unattended.iredmail.installation.md) +# How to +* [Change mail attachment size](0-change.mail.attachment.size.md) +* [Completely disable Amavisd + ClamAV + SpamAssassin](0-completely.disable.amavisd.clamav.spamassassin.md) +* [Enable SMTPS service (SMTP over SSL, port 465)](0-enable.smtps.md) +* [Amavisd + SpamAssassin not working, no mail header (X-Spam-*) inserted.](1-amavisd.no.x-spam.headers.md) +* [Disable spam virus scanning for outgoing mails](1-disable.spam.virus.scanning.for.outgoing.mails.md) +* [Quarantining](1-quarantining.md) +* [Allow insecure POP3/IMAP connection without STARTTLS](2-allow.insecure.pop3.imap.connection.md) +* [Allow user to send email without authentication](allow.user.to.send.email.without.authentication.md) +* [Configure Thunderbird as mail client (IMAP, SMTP and global ldap address book)](configure.thunderbird.md) +* [Ignore Trash folder in mailbox quota](ignore.trash.folder.in.quota.md) +* [LDAP: Add an alias domain](ldap.add.alias.domain.md) +* [LDAP: Add a mail alias account](ldap.add.mail.alias.md) +* [LDAP: Add a mail list account](ldap.add.mail.list.md) +* [LDAP: User mail forwarding.](ldap.user.mail.forwarding.md) +* [Monitor incoming and outgoing mails with BCC](monitor.incoming.and.outgoing.mails.with.bcc.md) +* [Pipe incoming email for certain user to external script ](pipe.incoming.email.for.certain.user.to.external.script.md) +* [Force Dovecot to recalculate mailbox quota](recalculate.mailbox.quota.md) +* [SQL: Create an mail alias account with SQL command line](sql.create.mail.alias.md) +* [Store SpamAssassin bayes in SQL](store.spamassassin.bayes.in.sql.md) +# Third-party integrations. +* [SOGo: How to install SOGo on CentOS 6 with iRedMail (MySQL backend)](sogo-centos-6-mysql.md) +# Cluster solutions +* [An Ultra-HA, full Mult-Master E-mail cluster with iRedMail, MariaDB, and IPVS ](full.mult-master.iredmail.cluster.with.mariadb.and.ipvs.md) +# Backup, restore and migration +* [Migrate iRedAdmin open source edition to iRedAdmin-Pro](migrate.or.upgrade.iredadmin.md) +* [Migrate old iRedMail server to the latest stable release](migrate.to.new.iredmail.server.md) +* [Password hashes](password.hashes.md) +# Troubleshooting and Debug +* [Turn on debug mode in Amavisd](turn.on.debug.mode.in.amavisd.md) +* [Turn on debug mode in Cluebringer](turn.on.debug.mode.in.cluebringer.md) +* [Turn on debug mode in Dovecot](turn.on.debug.mode.in.dovecot.md) +* [Turn on debug mode in OpenLDAP](turn.on.debug.mode.in.openldap.md) +# Frequently Asked Questions +* [Why append timestamp in maildir path](why.append.timestamp.in.maildir.path.md) diff --git a/howto/0-change.mail.attachment.size.md b/howto/0-change.mail.attachment.size.md index c4693aab..f49a9d6e 100644 --- a/howto/0-change.mail.attachment.size.md +++ b/howto/0-change.mail.attachment.size.md @@ -1,5 +1,7 @@ # Change mail attachment size +[TOC] + To change mail attachment size, we have to change 3 settings. ## Change message size limit in postfix @@ -34,7 +36,7 @@ ok to sent large attachment with above setting. If you have webmail, you have to change two more settings: -1. Change PHP setting to allow to upload large attachment +### Change PHP setting to allow to upload large attachment You should change `memory_limit`, `upload_max_filesize` and `post_max_size` in PHP config file `/etc/php.ini` @@ -52,7 +54,7 @@ upload_max_filesize = 100M; post_max_size = 100M; ``` -2. Change Roundcube webmail settings to allow large attachment +### Change Roundcube webmail settings to allow large attachment Change same settings in file `.htaccess` under roundcube root directory: @@ -62,9 +64,9 @@ Change same settings in file `.htaccess` under roundcube root directory: * on OpenBSD, it's `/var/www/roundcubemail/.htaccess` ``` +php_value memory_limit 200M php_value upload_max_filesize 100M php_value post_max_size 100M -php_value memory_limit 200M ``` Restart Apache or Nginx web server to make it work. diff --git a/howto/2-allow.insecure.pop3.imap.connection.md b/howto/2-allow.insecure.pop3.imap.connection.md new file mode 100644 index 00000000..7c54d9b7 --- /dev/null +++ b/howto/2-allow.insecure.pop3.imap.connection.md @@ -0,0 +1,31 @@ +# Allow insecure POP3/IMAP connection without STARTTLS + +With default iRedMail setting, all clients are forced to use IMAPS and POPS (via +STARTTLS) for better security by default. If your mail clients try to access +mailbox via protocol POP3 (port 110) or IMAP (port 143) without TLS support, +you will get error message like below: + +``` +Plaintext authentication disallowed on non-secure (SSL/TLS) connections +``` + +If you want to enable POP3/IMAPS without STARTTLS for some reason (again, not +recommended), please update below two parameters in Dovecot config file +`dovecot.conf` and restart Dovecot service: + +* on Linux and OpenBSD, it's `/etc/dovecot/dovecot.conf` +* on FreeBSD, it's `/usr/local/etc/dovecot/dovecot.conf` + +``` +disable_plaintext_auth=no +ssl=yes +``` + +Again, it's strongly recommended to use only POP3S/IMAPS for better security. + +Default and recommended setting configured by iRedMail is: + +``` +disable_plaintext_auth=yes +ssl=required +``` diff --git a/html/allow.insecure.pop3.imap.connection.html b/html/allow.insecure.pop3.imap.connection.html new file mode 100644 index 00000000..c6912415 --- /dev/null +++ b/html/allow.insecure.pop3.imap.connection.html @@ -0,0 +1,36 @@ + + + + Allow insecure POP3/IMAP connection without STARTTLS + + + + +

Allow insecure POP3/IMAP connection without STARTTLS

+

With default iRedMail setting, all clients are forced to use IMAPS and POPS (via +STARTTLS) for better security by default. If your mail clients try to access +mailbox via protocol POP3 (port 110) or IMAP (port 143) without TLS support, +you will get error message like below:

+
Plaintext authentication disallowed on non-secure (SSL/TLS) connections
+
+ +

If you want to enable POP3/IMAPS without STARTTLS for some reason (again, not +recommended), please update below two parameters in Dovecot config file +dovecot.conf and restart Dovecot service:

+ +
disable_plaintext_auth=no
+ssl=yes
+
+ +

Again, it's strongly recommended to use only POP3S/IMAPS for better security.

+

Default and recommended setting configured by iRedMail is:

+
disable_plaintext_auth=yes
+ssl=required
+

If you found something wrong in this document, please do contact us to fix it.

\ No newline at end of file diff --git a/html/change.mail.attachment.size.html b/html/change.mail.attachment.size.html index 2066b580..08a02c46 100644 --- a/html/change.mail.attachment.size.html +++ b/html/change.mail.attachment.size.html @@ -11,6 +11,19 @@ // Document Index

Change mail attachment size

+
+ +

To change mail attachment size, we have to change 3 settings.

Change message size limit in postfix

Postfix is MTA, so we have to change its setting to transfer mail with large @@ -35,9 +48,7 @@ like below:

ok to sent large attachment with above setting.

Change upload file size in webmail

If you have webmail, you have to change two more settings:

-
    -
  1. Change PHP setting to allow to upload large attachment
    2. -
+

Change PHP setting to allow to upload large attachment

You should change memory_limit, upload_max_filesize and post_max_size in PHP config file /etc/php.ini