elmau
/
iredmail-doc
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Update upgrade tutorial: Postfix: Whitelist few big companies' HELO hostnames.

This commit is contained in:
Zhang Huangbin 2021-05-07 10:37:56 +08:00
parent 7d87004680
commit 9b44e3e81d
2 changed files with 26 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
en_US/upgrade/0-upgrade.iredmail.1.3.2-1.4.0.md
View File

@ -10,6 +10,7 @@
## ChangeLog
* May 7, 2021: Postfix: Whitelist few big companies' HELO hostnames
* Apr 13, 2021: initial release.
## General (All backends should apply these changes)
@ -84,6 +85,19 @@ wget -O /usr/local/bin/fail2ban_banned_db \
Restarting `fail2ban` service is required.
### Postfix: Whitelist few big companies' HELO hostnames
Please prepend these lines in `/etc/postfix/helo_access.pcre` (Linux/OpenBSD)
or `/usr/local/etc/postfix/helo_access.pcre` (FreeBSD) to whitelist few big
companies' HELO hostnames, they may not have DNS records which causes Postfix
rejects them:
```
/^\d{1,3}-\d{1,3}-\d{1,3}-\d{1,3}\.mail-(mail|campmail)\.facebook\.com$/ OK
/^outbound-\d{1,3}-\d{1,3}-\d{1,3}-\d{1,3}\.pinterestmail\.com$/ OK
/\.outbound\.protection\.outlook\.com$/ OK
```
## For OpenLDAP backend
### Update iRedMail LDAP schema file

12
html/upgrade.iredmail.1.3.2-1.4.0.html
View File

@ -28,6 +28,7 @@
<li><a href="#upgrade-roundcube-webmail-to-the-latest-stable-release-1411">Upgrade Roundcube webmail to the latest stable release (1.4.11)</a></li>
<li><a href="#upgrade-netdata-to-the-latest-stable-release-1301">Upgrade netdata to the latest stable release (1.30.1)</a></li>
<li><a href="#fail2ban-fixed-few-issues-in-script-usrlocalbinfail2ban_banned_db">Fail2ban: Fixed few issues in script /usr/local/bin/fail2ban_banned_db</a></li>
<li><a href="#postfix-whitelist-few-big-companies-helo-hostnames">Postfix: Whitelist few big companies' HELO hostnames</a></li>
</ul>
</li>
<li><a href="#for-openldap-backend">For OpenLDAP backend</a><ul>
@ -54,6 +55,7 @@ check <a href="https://www.iredmail.org/support.html">the details</a> and
</div>
<h2 id="changelog">ChangeLog</h2>
<ul>
<li>May 7, 2021: Postfix: Whitelist few big companies' HELO hostnames</li>
<li>Apr 13, 2021: initial release.</li>
</ul>
<h2 id="general-all-backends-should-apply-these-changes">General (All backends should apply these changes)</h2>
@ -111,6 +113,16 @@ earlier releases have few issues:</p>
</code></pre>
<p>Restarting <code>fail2ban</code> service is required.</p>
<h3 id="postfix-whitelist-few-big-companies-helo-hostnames">Postfix: Whitelist few big companies' HELO hostnames</h3>
<p>Please prepend these lines in <code>/etc/postfix/helo_access.pcre</code> (Linux/OpenBSD)
or <code>/usr/local/etc/postfix/helo_access.pcre</code> (FreeBSD) to whitelist few big
companies' HELO hostnames, they may not have DNS records which causes Postfix
rejects them:</p>
<pre><code>/^\d{1,3}-\d{1,3}-\d{1,3}-\d{1,3}\.mail-(mail|campmail)\.facebook\.com$/ OK
/^outbound-\d{1,3}-\d{1,3}-\d{1,3}-\d{1,3}\.pinterestmail\.com$/ OK
/\.outbound\.protection\.outlook\.com$/ OK
</code></pre>
<h2 id="for-openldap-backend">For OpenLDAP backend</h2>
<h3 id="update-iredmail-ldap-schema-file">Update iRedMail LDAP schema file</h3>
<p>iRedMail-1.4.0 introduces 2 new LDAP attributes for subscribeable mailing list:</p>