This commit is contained in:
Zhang Huangbin 2018-12-19 20:49:51 +08:00
parent 939ae8977a
commit 74fe733d07
6 changed files with 35 additions and 52 deletions

View File

@ -8,6 +8,13 @@
check [the details](https://www.iredmail.org/support.html) and
[contact us](https://www.iredmail.org/contact.html).
!!! attention
Since iRedAdmin-0.9.2 (open source edition), and iRedAdmin-Pro-SQL-3.0,
iRedAdmin-Pro-LDAP-3.2, iRedAdmin or iRedAdmin-Pro is running as a
standalone service named "iredadmin", each time you modified its config
file, please restart the service ("iredadmin").
This tutorial describes how to update or migrate iRedAdmin (either open source
edition or old iRedAdmin-Pro release) to the latest iRedAdmin release (again,
either open source edition or iRedAdmin-Pro).

View File

@ -149,26 +149,11 @@ installed with a malware Windows XP ISO image.
Steps to create this new Fail2ban jail:
* Create new file `/etc/fail2ban/filter.d/postfix-pregreet.iredmail.conf` with content
below:
* Download filter rule:
```
[Definition]
# Block clients which cannot pass Postfix postscreen pregreet test.
# FYI: http://www.postfix.org/POSTSCREEN_README.html#pregreet
#
# The SMTP protocol is a classic example of a protocol where the server speaks
# before the client. postscreen(8) detects zombies that are in a hurry and that
# speak before their turn.
failregex = postscreen\[\d+\]: PREGREET .* from \[<HOST>\]:\d+:
# while setting up new account, Thunderbird doesn't wait for server connection
# greeting/banner, this causes Thunderbird cannot pass the Postfix pregreet
# test and caught by `failregex` rules listed above (the rule contains
# 'PREGREET' line).
# FYI: https://bugzilla.mozilla.org/show_bug.cgi?id=538809#c41
ignoreregex = postscreen\[\d+\]: PREGREET .* from \[<HOST>\]:\d+: (EHLO|HELO) we-guess.mozilla.org
cd /etc/fail2ban/filter.d/
wget https://bitbucket.org/zhb/iredmail/raw/default/iRedMail/samples/fail2ban/filter.d/postfix-pregreet.iredmail.conf
```
* Create new file `/etc/fail2ban/jail.d/postfix-pregreet.local` with content

View File

@ -32,6 +32,12 @@ Please follow below tutorial to upgrade iRedAPD to the latest stable release:
### Upgrade iRedAdmin (open source edition) to the latest stable release (0.9.3)
!!! attention
In this release, iRedAdmin (and iRedAdmin-Pro) is running as a standalone
service named "iredadmin", each time you modified its config file, please
restart the service ("iredadmin").
Please follow this tutorial to upgrade iRedAdmin open source edition to the
latest stable release:
[Upgrade iRedAdmin to the latest stable release](./migrate.or.upgrade.iredadmin.html)
@ -134,15 +140,6 @@ chown mlmmj:mlmmj mlmmj-amime-receive
chmod 0550 mlmmj-amime-receive
```
### Fix incorrect file owner/group of mlmmjadmin config file
Please run commands below to fix incorrect file owner/group and permission:
```
chown mlmmj:mlmmj /opt/mlmmjadmin/settings.py
chmod 0400 /opt/mlmmjadmin/settings.py
```
### Fix address mapping issue for mlmmj mailing list
With default settings of iRedMail-0.9.8, if you use a per-user alias address
@ -307,6 +304,8 @@ string `maildir` as default value.
For more details about changing mailbox format, please check our tutorial:
[Change mailbox format](./change.mailbox.format.html).
Restarting Dovecot service is required.
### [OPTIONAL] Monitoring OpenLDAP with netdata
netdata-1.11.1 (released on 23 Nov 2018) supports monitoring OpenLDAP through its `monitor` backend.

View File

@ -33,6 +33,13 @@
check <a href="https://www.iredmail.org/support.html">the details</a> and
<a href="https://www.iredmail.org/contact.html">contact us</a>.</p>
</div>
<div class="admonition attention">
<p class="admonition-title">Attention</p>
<p>Since iRedAdmin-0.9.2 (open source edition), and iRedAdmin-Pro-SQL-3.0,
iRedAdmin-Pro-LDAP-3.2, iRedAdmin or iRedAdmin-Pro is running as a
standalone service named "iredadmin", each time you modified its config
file, please restart the service ("iredadmin").</p>
</div>
<p>This tutorial describes how to update or migrate iRedAdmin (either open source
edition or old iRedAdmin-Pro release) to the latest iRedAdmin release (again,
either open source edition or iRedAdmin-Pro).</p>

View File

@ -194,25 +194,10 @@ it's very possible that they're running an illegal Windows XP system which were
installed with a malware Windows XP ISO image.</p>
<p>Steps to create this new Fail2ban jail:</p>
<ul>
<li>Create new file <code>/etc/fail2ban/filter.d/postfix-pregreet.iredmail.conf</code> with content
below:</li>
<li>Download filter rule:</li>
</ul>
<pre><code>[Definition]
# Block clients which cannot pass Postfix postscreen pregreet test.
# FYI: http://www.postfix.org/POSTSCREEN_README.html#pregreet
#
# The SMTP protocol is a classic example of a protocol where the server speaks
# before the client. postscreen(8) detects zombies that are in a hurry and that
# speak before their turn.
failregex = postscreen\[\d+\]: PREGREET .* from \[&lt;HOST&gt;\]:\d+:
# while setting up new account, Thunderbird doesn't wait for server connection
# greeting/banner, this causes Thunderbird cannot pass the Postfix pregreet
# test and caught by `failregex` rules listed above (the rule contains
# 'PREGREET' line).
# FYI: https://bugzilla.mozilla.org/show_bug.cgi?id=538809#c41
ignoreregex = postscreen\[\d+\]: PREGREET .* from \[&lt;HOST&gt;\]:\d+: (EHLO|HELO) we-guess.mozilla.org
<pre><code>cd /etc/fail2ban/filter.d/
wget https://bitbucket.org/zhb/iredmail/raw/default/iRedMail/samples/fail2ban/filter.d/postfix-pregreet.iredmail.conf
</code></pre>
<ul>

View File

@ -28,7 +28,6 @@
<li><a href="#upgrade-roundcube-webmail-to-the-latest-stable-release-138">Upgrade Roundcube webmail to the latest stable release (1.3.8)</a></li>
<li><a href="#fix-improper-nginx-config-files-for-roundcube">Fix improper Nginx config files for Roundcube</a></li>
<li><a href="#improve-mlmmj-script-used-for-appending-footer-text">Improve mlmmj script used for appending footer text</a></li>
<li><a href="#fix-incorrect-file-ownergroup-of-mlmmjadmin-config-file">Fix incorrect file owner/group of mlmmjadmin config file</a></li>
<li><a href="#fix-address-mapping-issue-for-mlmmj-mailing-list">Fix address mapping issue for mlmmj mailing list</a></li>
</ul>
</li>
@ -79,6 +78,12 @@ so that you can know which version of iRedMail you're running. For example:</p>
<p>Please follow below tutorial to upgrade iRedAPD to the latest stable release:
<a href="./upgrade.iredapd.html">Upgrade iRedAPD to the latest stable release</a></p>
<h3 id="upgrade-iredadmin-open-source-edition-to-the-latest-stable-release-093">Upgrade iRedAdmin (open source edition) to the latest stable release (0.9.3)</h3>
<div class="admonition attention">
<p class="admonition-title">Attention</p>
<p>In this release, iRedAdmin (and iRedAdmin-Pro) is running as a standalone
service named "iredadmin", each time you modified its config file, please
restart the service ("iredadmin").</p>
</div>
<p>Please follow this tutorial to upgrade iRedAdmin open source edition to the
latest stable release:
<a href="./migrate.or.upgrade.iredadmin.html">Upgrade iRedAdmin to the latest stable release</a></p>
@ -161,12 +166,6 @@ chown mlmmj:mlmmj mlmmj-amime-receive
chmod 0550 mlmmj-amime-receive
</code></pre>
<h3 id="fix-incorrect-file-ownergroup-of-mlmmjadmin-config-file">Fix incorrect file owner/group of mlmmjadmin config file</h3>
<p>Please run commands below to fix incorrect file owner/group and permission:</p>
<pre><code>chown mlmmj:mlmmj /opt/mlmmjadmin/settings.py
chmod 0400 /opt/mlmmjadmin/settings.py
</code></pre>
<h3 id="fix-address-mapping-issue-for-mlmmj-mailing-list">Fix address mapping issue for mlmmj mailing list</h3>
<p>With default settings of iRedMail-0.9.8, if you use a per-user alias address
as member of a mailing list, Postfix doesn't not expand it to the final
@ -321,6 +320,7 @@ line like below:</p>
string <code>maildir</code> as default value.</p>
<p>For more details about changing mailbox format, please check our tutorial:
<a href="./change.mailbox.format.html">Change mailbox format</a>.</p>
<p>Restarting Dovecot service is required.</p>
<h3 id="optional-monitoring-openldap-with-netdata">[OPTIONAL] Monitoring OpenLDAP with netdata</h3>
<p>netdata-1.11.1 (released on 23 Nov 2018) supports monitoring OpenLDAP through its <code>monitor</code> backend.
Please follow this tutorial to upgrade netdata and configure both OpenLDAP and netdata for monitoring.</p>