From 4979f6cb8e111a628ccb849a1c6ba9abd3ccef7b Mon Sep 17 00:00:00 2001
From: Zhang Huangbin
Date: Tue, 17 Nov 2015 21:13:47 +0800
Subject: [PATCH] Sync upgrade tutorial.
---
en_US/upgrade/0-upgrade.iredmail.0.9.2-0.9.3.md | 16 ++++++++++++++++
html/upgrade.iredmail.0.9.2-0.9.3.html | 13 +++++++++++++
2 files changed, 29 insertions(+)
diff --git a/en_US/upgrade/0-upgrade.iredmail.0.9.2-0.9.3.md b/en_US/upgrade/0-upgrade.iredmail.0.9.2-0.9.3.md
index b2fec743..4a02be7c 100644
--- a/en_US/upgrade/0-upgrade.iredmail.0.9.2-0.9.3.md
+++ b/en_US/upgrade/0-upgrade.iredmail.0.9.2-0.9.3.md
@@ -8,6 +8,8 @@ __This is still a DRAFT document, do NOT apply it.__
> We offer remote upgrade service, check [the price](../support.html) and [contact us](../contact.html).
+* 2015-11-17: [OPTIONAL] Remove one non-spam HELO identity in Postfix helo restriction
+* 2015-11-17: [OPTIONAL] Update one Fail2ban filter regular expression to catch postscreen log
* 2015-11-03: SOGo: enable isolated per-domain global address book.
* 2015-10-08: OpenLDAP: Fix improper ACL control.
* 2015-09-28: SOGo: cron jobs which run every minute must be grouped in one job.
@@ -460,6 +462,20 @@ Restarting Fail2ban service is required.
* Save your change and restart Postfix service.
+### [OPTIONAL] Remove one non-spam HELO identity in Postfix helo restriction
+
+iRedMail ships a Postfix HELO rule file, `/etc/postfix/helo_access.pcre`, it
+contains some HELO identities which were treated as spammers by analizing
+Postfix log files, and one of them, `bezeqint.net` is not spammer and we should
+remove it.
+
+Please find below line in `/etc/postfix/helo_access.pcre` (Linux and OpenBSD)
+or `/usr/local/etc/postfix/helo_access.pcre` (FreeBSD), and remove it.
+
+```
+/(bezeqint\.net)$/ REJECT ACCESS DENIED. Your email was rejected because the sending mail server does not identify itself correctly (${1})
+```
+
## OpenLDAP backend special
### Fixed: improper ACL control
diff --git a/html/upgrade.iredmail.0.9.2-0.9.3.html b/html/upgrade.iredmail.0.9.2-0.9.3.html
index 2a77cbad..ef173a98 100644
--- a/html/upgrade.iredmail.0.9.2-0.9.3.html
+++ b/html/upgrade.iredmail.0.9.2-0.9.3.html
@@ -31,6 +31,7 @@
[RHEL/CentOS 7] Fix incorrect default firewall zone name
[OPTIONAL] Fixed: Not preserve the case of ${extension} while delivering message to mailbox
[OPTIONAL] Update one Fail2ban filter regular expression to catch postscreen log
+[OPTIONAL] Remove one non-spam HELO identity in Postfix helo restriction
OpenLDAP backend special
@@ -61,6 +62,8 @@
We offer remote upgrade service, check the price and contact us.
+- 2015-11-17: [OPTIONAL] Remove one non-spam HELO identity in Postfix helo restriction
+- 2015-11-17: [OPTIONAL] Update one Fail2ban filter regular expression to catch postscreen log
- 2015-11-03: SOGo: enable isolated per-domain global address book.
- 2015-10-08: OpenLDAP: Fix improper ACL control.
- 2015-09-28: SOGo: cron jobs which run every minute must be grouped in one job.
@@ -457,6 +460,16 @@ below line under [Definition]
section:
- Save your change and restart Postfix service.
+[OPTIONAL] Remove one non-spam HELO identity in Postfix helo restriction
+iRedMail ships a Postfix HELO rule file, /etc/postfix/helo_access.pcre
, it
+contains some HELO identities which were treated as spammers by analizing
+Postfix log files, and one of them, bezeqint.net
is not spammer and we should
+remove it.
+Please find below line in /etc/postfix/helo_access.pcre
(Linux and OpenBSD)
+or /usr/local/etc/postfix/helo_access.pcre
(FreeBSD), and remove it.
+/(bezeqint\.net)$/ REJECT ACCESS DENIED. Your email was rejected because the sending mail server does not identify itself correctly (${1})
+
+
OpenLDAP backend special
Fixed: improper ACL control
With default OpenLDAP ACL control set by iRedMail, every mail user has