Mark OpenDMARC as not recommended due to it's still buggy and incorrectly rejects emails.

This commit is contained in:
iredmail 2019-09-20 21:26:24 +08:00
parent a320a015ae
commit a4dba76d0b
6 changed files with 22 additions and 136 deletions

View File

@ -1,39 +0,0 @@
# Roadmap
[TOC]
Feel free to request new features or report bugs in our [issue tracker](https://bitbucket.org/zhb/iredmail/issues?status=new&status=open), direct pull requests are always welcome.
You can also contact us via email directly: [Contact Us](https://www.iredmail.org/contact.html).
## Planned changes in next iRedMail / iRedAdmin-Pro release
* HIGH: OpenDMARC integration.
* HIGH: [#14 Allow domain admin to set vacation message for mail user](https://bitbucket.org/zhb/iredmail/issues/14/allow-admin-to-set-vacation-for-user-with)
## Planned changes in future iRedMail release
* A (new) RESTful API server for general administration (core of API server has
been implemented, need to write plugins for each particular task):
* [HIGH] Manage Nginx virtual web hosts.
* Network service control: get service status, stop/start/restart service.
* Manage fail2ban banned/unbanned IPs.
* Query user mailbox with `doveadm search`, fetch partial/full messages or
message information. Possible use cases with iRedAdmin-Pro:
* View (either partial/full) mail messages in user's mailbox.
* In sent/received mail log page, query API server with given
query messages with `Message-ID:` or subject, display the full
message if necessary.
* Destroy delivered messages which matches given query.
* LOW: Allow domain admin to share someone's mailbox folder to others.
* SOGo management via command line tool `sogo-tool`.
* Dovecot:
* Enable plugin `imap_sieve` for spam learning while user moving message to
Junk folder. Requires Dovecot-2.2.24+ (dovecot-pigeonhole-0.4.14+).
* Enable plugin `mail_crypt` to encrypt and decrypt mail. (requires Dovecot-2.2.27+).
* LDAP backends:
* Migrate old mailing list (`objectClass=mailList`) to new mlmmj mailing
list, convert all old mailing lists to be groups which have ldap dn of
all members defined in ldap attribute `member` (or `memberdn`).
* [Configure OpenLDAP with slapd.d instead of slapd.conf](https://bitbucket.org/zhb/iredmail/issue/31/switch-to-slapdd)

View File

@ -4,7 +4,16 @@
!!! warning
This is still a DRAFT document, do not apply it on production server.
* Please tweak this tutorial as a refernce and do __NOT__ deploy it on
production server.
The latest OpenDMARC version __1.3.2__ (till Sep 20, 2019) is
[buggy](https://github.com/trusteddomainproject/OpenDMARC/issues/50),
it sometimes incorrectly rejects email even sender server IP address
is explicitly listed in SPF record.
it's not recommended to run OpenDMARC.
* This is still a DRAFT document, do not apply it on production server.
## What are DMARC and OpenDMARC?
@ -22,10 +31,6 @@ specification. Source code hosted on [GitHub](https://github.com/trusteddomainpr
## Requirements
!!! warning
OpenDMARC version __1.3.2__ (or later) is required (version __1.3.1__ is buggy).
Supported OS Linux/BSD distributions:
Distribution | Releases | Comment

View File

@ -232,7 +232,6 @@
<li><a href="debug.fail2ban.html">Turn on debug logging in Fail2ban</a></li>
<li><a href="debug.iredapd.html">Turn on debug mode in iRedAPD</a></li>
<li><a href="debug.mysql.html">Log executed SQL commands in MySQL/MariaDB</a></li>
<li><a href="debug.opendmarc.html">Turn on debug mode in OpenDMARC</a></li>
<li><a href="debug.openldap.html">Turn on debug mode in OpenLDAP</a></li>
<li><a href="debug.postfix.html">Turn on debug mode in Postfix</a></li>
<li><a href="debug.roundcubemail.html">Turn on debug mode in Roundcube webmail</a></li>

View File

@ -30,7 +30,18 @@
</div>
<div class="admonition warning">
<p class="admonition-title">Warning</p>
<p>This is still a DRAFT document, do not apply it on production server.</p>
<ul>
<li>Please tweak this tutorial as a refernce and do <strong>NOT</strong> deploy it on
production server.</li>
</ul>
<p>The latest OpenDMARC version <strong>1.3.2</strong> (till Sep 20, 2019) is
<a href="https://github.com/trusteddomainproject/OpenDMARC/issues/50">buggy</a>,
it sometimes incorrectly rejects email even sender server IP address
is explicitly listed in SPF record.
it's not recommended to run OpenDMARC.</p>
<ul>
<li>This is still a DRAFT document, do not apply it on production server.</li>
</ul>
</div>
<h2 id="what-are-dmarc-and-opendmarc">What are DMARC and OpenDMARC?</h2>
<p>Quote from <a href="https://dmarc.org">DMARC.org</a>:</p>
@ -45,10 +56,6 @@ improve and monitor protection of the domain from fraudulent email.</p>
<p>OpenDMARC is a free open source software implementation of the DMARC
specification. Source code hosted on <a href="https://github.com/trusteddomainproject/OpenDMARC">GitHub</a>.</p>
<h2 id="requirements">Requirements</h2>
<div class="admonition warning">
<p class="admonition-title">Warning</p>
<p>OpenDMARC version <strong>1.3.2</strong> (or later) is required (version <strong>1.3.1</strong> is buggy).</p>
</div>
<p>Supported OS Linux/BSD distributions:</p>
<table>
<thead>

View File

@ -1,86 +0,0 @@
<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>Roadmap</title>
<link rel="stylesheet" type="text/css" href="./css/markdown.css" />
</head>
<body>
<div id="navigation">
<a href="https://www.iredmail.org" target="_blank">
<img alt="iRedMail web site"
src="./images/logo-iredmail.png"
style="vertical-align: middle; height: 30px;"
/>&nbsp;
<span>iRedMail</span>
</a>
&nbsp;&nbsp;//&nbsp;&nbsp;<a href="./index.html">Document Index</a></div><h1 id="roadmap">Roadmap</h1>
<div class="toc">
<ul>
<li><a href="#roadmap">Roadmap</a><ul>
<li><a href="#planned-changes-in-next-iredmail-iredadmin-pro-release">Planned changes in next iRedMail / iRedAdmin-Pro release</a></li>
<li><a href="#planned-changes-in-future-iredmail-release">Planned changes in future iRedMail release</a></li>
</ul>
</li>
</ul>
</div>
<p>Feel free to request new features or report bugs in our <a href="https://bitbucket.org/zhb/iredmail/issues?status=new&amp;status=open">issue tracker</a>, direct pull requests are always welcome.</p>
<p>You can also contact us via email directly: <a href="https://www.iredmail.org/contact.html">Contact Us</a>.</p>
<h2 id="planned-changes-in-next-iredmail-iredadmin-pro-release">Planned changes in next iRedMail / iRedAdmin-Pro release</h2>
<ul>
<li>HIGH: OpenDMARC integration.</li>
<li>HIGH: <a href="https://bitbucket.org/zhb/iredmail/issues/14/allow-admin-to-set-vacation-for-user-with">#14 Allow domain admin to set vacation message for mail user</a></li>
</ul>
<h2 id="planned-changes-in-future-iredmail-release">Planned changes in future iRedMail release</h2>
<ul>
<li>
<p>A (new) RESTful API server for general administration (core of API server has
been implemented, need to write plugins for each particular task):</p>
<ul>
<li>[HIGH] Manage Nginx virtual web hosts.</li>
<li>Network service control: get service status, stop/start/restart service.</li>
<li>Manage fail2ban banned/unbanned IPs.</li>
<li>Query user mailbox with <code>doveadm search</code>, fetch partial/full messages or
message information. Possible use cases with iRedAdmin-Pro:<ul>
<li>View (either partial/full) mail messages in user's mailbox.</li>
<li>In sent/received mail log page, query API server with given
query messages with <code>Message-ID:</code> or subject, display the full
message if necessary.</li>
<li>Destroy delivered messages which matches given query.</li>
</ul>
</li>
<li>LOW: Allow domain admin to share someone's mailbox folder to others.</li>
<li>SOGo management via command line tool <code>sogo-tool</code>.</li>
</ul>
</li>
<li>
<p>Dovecot:</p>
<ul>
<li>Enable plugin <code>imap_sieve</code> for spam learning while user moving message to
Junk folder. Requires Dovecot-2.2.24+ (dovecot-pigeonhole-0.4.14+).</li>
<li>Enable plugin <code>mail_crypt</code> to encrypt and decrypt mail. (requires Dovecot-2.2.27+).</li>
</ul>
</li>
<li>
<p>LDAP backends:</p>
<ul>
<li>Migrate old mailing list (<code>objectClass=mailList</code>) to new mlmmj mailing
list, convert all old mailing lists to be groups which have ldap dn of
all members defined in ldap attribute <code>member</code> (or <code>memberdn</code>).</li>
<li><a href="https://bitbucket.org/zhb/iredmail/issue/31/switch-to-slapdd">Configure OpenLDAP with slapd.d instead of slapd.conf</a></li>
</ul>
</li>
</ul><div class="footer">
<p style="text-align: center; color: grey;">All documents are available in <a href="https://github.com/iredmail/docs/">BitBucket repository</a>, and published under <a href="http://creativecommons.org/licenses/by-nd/3.0/us/" target="_blank">Creative Commons</a> license. You can <a href="https://github.com/iredmail/docs/archive/master.zip">download the latest version</a> for offline reading. If you found something wrong, please do <a href="https://www.iredmail.org/contact.html">contact us</a> to fix it.</p>
</div>
<!-- Global site tag (gtag.js) - Google Analytics -->
<script async src="https://www.googletagmanager.com/gtag/js?id=UA-3293801-21"></script>
<script>
window.dataLayer = window.dataLayer || [];
function gtag(){dataLayer.push(arguments);}
gtag('js', new Date());
gtag('config', 'UA-3293801-21');
</script>
</body></html>