Sync iRedMail upgrade tutorial.

This commit is contained in:
Zhang Huangbin 2017-05-30 08:45:06 +08:00
parent 91b324f16f
commit 5d205f74f7
4 changed files with 43 additions and 1 deletions

View File

@ -68,6 +68,8 @@ this issue.
### Recipient address rejected: Sender is not same as SMTP authenticate username
#### case #1
If the smtp authenticate username is different than the address in mail header
`From:` field, you will get this rejection (by iRedAPD).
@ -87,6 +89,19 @@ ALLOWED_LOGIN_MISMATCH_SENDERS = ['user@mydomain.com']
Notes: `user@mydomain.com` is the email address you used for smtp authentication.
#### case #2
If you're a member of mailing list or mail alias, and trying to send email with
the email address of mailing list/alias as sender address, you will get same
error. There's another setting you can try (either one is ok):
```
ALLOWED_LOGIN_MISMATCH_LIST_MEMBER = True
```
It will allow all members of mailing list/alias to send email with the email
of mailing list/alias as the sender address.
### unreasonable virtual_alias_maps map expansion size for user@domain.com
Sample error message in Postfix log file:

View File

@ -13,6 +13,7 @@
## ChangeLog
* May 30, 2017: Fixed: incorrect freshclam parameter `UpdateLogFile`.
* May 22, 2017: Fixed improper Fail2ban filter for Dovecot, add new filter for Roundcube.
* May 15, 2017: SQL structure change in `vmail.alias` SQL table
* May 3, 2017: Fixed: improper order of Postfix HELO restriction rules.
@ -122,6 +123,12 @@ php_value[session.save_path] = "/var/lib/php/sessions"
service php-fpm restart
```
### Fixed: incorrect freshclam setting `UpdateLogFile`
With iRedMail-0.9.6, freshclam program cannot update ClamAV signatures due to
improper log file permission, please open its config file `/etc/freshclam.conf`,
comment out setting `UpdateLogFile` to use syslog for logging.
### Fail2ban: fixes an improper filter and add new filter rule
iRedMail-0.9.7 fixes an improper filter for Dovecot log file which may cause

View File

@ -23,7 +23,11 @@
<li><a href="#intended-policy-rejection-please-try-again-later">Intended policy rejection, please try again later</a></li>
<li><a href="#sender-address-rejected-not-logged-in">Sender address rejected: not logged in</a></li>
<li><a href="#sender-address-rejected-not-owned-by-user-userdomainltd">Sender address rejected: not owned by user user@domain.ltd</a></li>
<li><a href="#recipient-address-rejected-sender-is-not-same-as-smtp-authenticate-username">Recipient address rejected: Sender is not same as SMTP authenticate username</a></li>
<li><a href="#recipient-address-rejected-sender-is-not-same-as-smtp-authenticate-username">Recipient address rejected: Sender is not same as SMTP authenticate username</a><ul>
<li><a href="#case-1">case #1</a></li>
<li><a href="#case-2">case #2</a></li>
</ul>
</li>
<li><a href="#unreasonable-virtual_alias_maps-map-expansion-size-for-userdomaincom">unreasonable virtual_alias_maps map expansion size for user@domain.com</a></li>
<li><a href="#helo-command-rejected-access-denied-your-email-was-rejected-because-the-sending-mail-server-does-not-identify-itself-correctly-local">Helo command rejected: ACCESS DENIED. Your email was rejected because the sending mail server does not identify itself correctly (.local)</a></li>
<li><a href="#warning-do-not-list-domain-mydomaincom-in-both-mydestination-and-virtual_mailbox_domains">warning: do not list domain mydomain.com in BOTH mydestination and virtual_mailbox_domains</a></li>
@ -93,6 +97,7 @@ then enable it in iRedAPD config file <code>/opt/iredapd/settings.py</code> (<co
restart iRedAPD service. That's all.</p>
</div>
<h3 id="recipient-address-rejected-sender-is-not-same-as-smtp-authenticate-username">Recipient address rejected: Sender is not same as SMTP authenticate username</h3>
<h4 id="case-1">case #1</h4>
<p>If the smtp authenticate username is different than the address in mail header
<code>From:</code> field, you will get this rejection (by iRedAPD).</p>
<p>Solutions:</p>
@ -109,6 +114,15 @@ restart iRedAPD service. That's all.</p>
</code></pre>
<p>Notes: <code>user@mydomain.com</code> is the email address you used for smtp authentication.</p>
<h4 id="case-2">case #2</h4>
<p>If you're a member of mailing list or mail alias, and trying to send email with
the email address of mailing list/alias as sender address, you will get same
error. There's another setting you can try (either one is ok):</p>
<pre><code>ALLOWED_LOGIN_MISMATCH_LIST_MEMBER = True
</code></pre>
<p>It will allow all members of mailing list/alias to send email with the email
of mailing list/alias as the sender address.</p>
<h3 id="unreasonable-virtual_alias_maps-map-expansion-size-for-userdomaincom">unreasonable virtual_alias_maps map expansion size for user@domain.com</h3>
<p>Sample error message in Postfix log file:</p>
<blockquote>

View File

@ -26,6 +26,7 @@
<li><a href="#fixed-improper-order-of-postfix-helo-restriction-rules">Fixed: improper order of Postfix HELO restriction rules.</a></li>
<li><a href="#fixed-incorrect-owner-and-permission-for-rotated-dovecot-log-files">Fixed: incorrect owner and permission for rotated Dovecot log files</a></li>
<li><a href="#fixed-incorrect-sessionsave_path-in-php-fpm-pool-config-file-on-rhelcentos">Fixed: incorrect session.save_path in php-fpm pool config file on RHEL/CentOS</a></li>
<li><a href="#fixed-incorrect-freshclam-setting-updatelogfile">Fixed: incorrect freshclam setting UpdateLogFile</a></li>
<li><a href="#fail2ban-fixes-an-improper-filter-and-add-new-filter-rule">Fail2ban: fixes an improper filter and add new filter rule</a></li>
<li><a href="#new-new-backup-script-for-sogo">NEW: New backup script for SOGo</a></li>
</ul>
@ -70,6 +71,7 @@ check <a href="../support.html">the details</a> and <a href="../contact.html">co
</div>
<h2 id="changelog">ChangeLog</h2>
<ul>
<li>May 30, 2017: Fixed: incorrect freshclam parameter <code>UpdateLogFile</code>.</li>
<li>May 22, 2017: Fixed improper Fail2ban filter for Dovecot, add new filter for Roundcube.</li>
<li>May 15, 2017: SQL structure change in <code>vmail.alias</code> SQL table</li>
<li>May 3, 2017: Fixed: improper order of Postfix HELO restriction rules.</li>
@ -168,6 +170,10 @@ pool config file <code>/etc/php-fpm.d/www.conf</code>, please fix it with steps
<pre><code>service php-fpm restart
</code></pre>
<h3 id="fixed-incorrect-freshclam-setting-updatelogfile">Fixed: incorrect freshclam setting <code>UpdateLogFile</code></h3>
<p>With iRedMail-0.9.6, freshclam program cannot update ClamAV signatures due to
improper log file permission, please open its config file <code>/etc/freshclam.conf</code>,
comment out setting <code>UpdateLogFile</code> to use syslog for logging.</p>
<h3 id="fail2ban-fixes-an-improper-filter-and-add-new-filter-rule">Fail2ban: fixes an improper filter and add new filter rule</h3>
<p>iRedMail-0.9.7 fixes an improper filter for Dovecot log file which may cause
incorrect ban, and adds a new filter for Roundcube log file to help ban bad