diff --git a/en_US/howto/manage.iredapd.md b/en_US/howto/manage.iredapd.md index 327e8c1f..ddfbff32 100644 --- a/en_US/howto/manage.iredapd.md +++ b/en_US/howto/manage.iredapd.md @@ -1,4 +1,4 @@ -# Manage iRedAPD (white/blacklists, greylisting) +# Manage iRedAPD (white/blacklists, greylisting, and more) [TOC] @@ -56,7 +56,51 @@ update it with new values. This way you will keep custom settings after upgrading iRedAPD -- because iRedAPD upgrade tool will copy `/opt/iredapd/settings.py` to new iRedAPD release during upgrading. -## White/Blacklisting +## Feature: Sender address control + +Plugin `reject_sender_login_mismatch` will reject emails if: + +* smtp authentication username (`sasl_username`) is different than than sender address (`From:`). This is usually called `sender login mismatch`. Note: This can be performed by Postfix with restriction rule `reject_sender_login_mismatch` in `smtpd_sender_restrictions =`. +* sender address is forged (sender doesn't perform smtp auth and sender domain is hosted on localhost) + +It offers some parameters to control whether or not to reject email: + +* for forged sender address checking: + +``` +# Check whether sender is forged in message sent without smtp auth. +CHECK_FORGED_SENDER = True + +# If you allow someone or some service providers to send email as forged +# (your local) address, you can list all allowed addresses in this parameter. +# For example, if some ISPs may send email as 'user@mydomain.com' (mydomain.com +# is hosted on your server) to you, you should add `user@mydomain.com` as one +# of forged senders. +# Sample: ALLOWED_FORGED_SENDERS = ['user@mydomain.com', 'mydomain.com'] +ALLOWED_FORGED_SENDERS = [] + +``` + +* for sender login mismatch: + +``` +# Allow sender login mismatch for specified senders or sender domains. +# +# Sample setting: allow local user `user@local_domain_1.com` and all users +# under `local_domain_2.com` to send email as other users. +# +# ALLOWED_LOGIN_MISMATCH_SENDERS = ['user@local_domain_1.com', 'local_domain_2.com'] +ALLOWED_LOGIN_MISMATCH_SENDERS = [] + +# Strictly allow sender to send as one of user alias addresses. Default is True. +ALLOWED_LOGIN_MISMATCH_STRICTLY = True + +# Allow member of mail lists/alias account to send email as mail list/alias +# ('From: ' in mail header). Default is False. +ALLOWED_LOGIN_MISMATCH_LIST_MEMBER = False +``` + +## Feature: White/Blacklisting ### How to disable white/blacklists completely @@ -141,7 +185,7 @@ White/blacklisting is controlled by plugin `amavisd_wblist` (file # python wblist_admin.py --account user@mydomain.com --list --blacklist ``` -## Greylisting +## Feature: Greylisting !!! note diff --git a/en_US/upgrade/0-upgrade.iredmail.0.9.4-0.9.5.md b/en_US/upgrade/0-upgrade.iredmail.0.9.4-0.9.5.md index ed77db39..abf3c28a 100644 --- a/en_US/upgrade/0-upgrade.iredmail.0.9.4-0.9.5.md +++ b/en_US/upgrade/0-upgrade.iredmail.0.9.4-0.9.5.md @@ -464,7 +464,7 @@ We need to update 2 parameters in Postfix config file: `proxy_read_maps`, * On __Linux/OpenBSD__, please run 2 commands below to update Postfix settings: ``` -postconf -e proxy_read_maps ='$canonical_maps $lmtp_generic_maps $local_recipient_maps $mydestination $mynetworks $recipient_bcc_maps $recipient_canonical_maps $relay_domains $relay_recipient_maps $relocated_maps $sender_bcc_maps $sender_canonical_maps $smtp_generic_maps $smtpd_sender_login_maps $transport_maps $virtual_alias_domains $virtual_alias_maps $virtual_mailbox_domains $virtual_mailbox_maps $smtpd_sender_restrictions $sender_dependent_relayhost_maps' +postconf -e proxy_read_maps='$canonical_maps $lmtp_generic_maps $local_recipient_maps $mydestination $mynetworks $recipient_bcc_maps $recipient_canonical_maps $relay_domains $relay_recipient_maps $relocated_maps $sender_bcc_maps $sender_canonical_maps $smtp_generic_maps $smtpd_sender_login_maps $transport_maps $virtual_alias_domains $virtual_alias_maps $virtual_mailbox_domains $virtual_mailbox_maps $smtpd_sender_restrictions $sender_dependent_relayhost_maps' postconf -e sender_dependent_relayhost_maps='proxy:ldap:/etc/postfix/ldap/sender_dependent_relayhost_maps_domain.cf, proxy:ldap:/etc/postfix/ldap/sender_dependent_relayhost_maps_user.cf' ``` @@ -472,7 +472,7 @@ postconf -e sender_dependent_relayhost_maps='proxy:ldap:/etc/postfix/ldap/sender * On __FreeBSD__, please run 2 commands below to update Postfix settings: ``` -postconf -e proxy_read_maps ='$canonical_maps $lmtp_generic_maps $local_recipient_maps $mydestination $mynetworks $recipient_bcc_maps $recipient_canonical_maps $relay_domains $relay_recipient_maps $relocated_maps $sender_bcc_maps $sender_canonical_maps $smtp_generic_maps $smtpd_sender_login_maps $transport_maps $virtual_alias_domains $virtual_alias_maps $virtual_mailbox_domains $virtual_mailbox_maps $smtpd_sender_restrictions $sender_dependent_relayhost_maps' +postconf -e proxy_read_maps='$canonical_maps $lmtp_generic_maps $local_recipient_maps $mydestination $mynetworks $recipient_bcc_maps $recipient_canonical_maps $relay_domains $relay_recipient_maps $relocated_maps $sender_bcc_maps $sender_canonical_maps $smtp_generic_maps $smtpd_sender_login_maps $transport_maps $virtual_alias_domains $virtual_alias_maps $virtual_mailbox_domains $virtual_mailbox_maps $smtpd_sender_restrictions $sender_dependent_relayhost_maps' postconf -e sender_dependent_relayhost_maps='proxy:ldap:/usr/local/etc/postfix/ldap/sender_dependent_relayhost_maps_domain.cf, proxy:ldap:/usr/local/etc/postfix/ldap/sender_dependent_relayhost_maps_user.cf' ``` @@ -617,7 +617,7 @@ We need to update 2 parameters in Postfix config file: `proxy_read_maps`, * On __Linux/OpenBSD__, please run 2 commands below to update Postfix settings: ``` -postconf -e proxy_read_maps ='$canonical_maps $lmtp_generic_maps $local_recipient_maps $mydestination $mynetworks $recipient_bcc_maps $recipient_canonical_maps $relay_domains $relay_recipient_maps $relocated_maps $sender_bcc_maps $sender_canonical_maps $smtp_generic_maps $smtpd_sender_login_maps $transport_maps $virtual_alias_domains $virtual_alias_maps $virtual_mailbox_domains $virtual_mailbox_maps $smtpd_sender_restrictions $sender_dependent_relayhost_maps' +postconf -e proxy_read_maps='$canonical_maps $lmtp_generic_maps $local_recipient_maps $mydestination $mynetworks $recipient_bcc_maps $recipient_canonical_maps $relay_domains $relay_recipient_maps $relocated_maps $sender_bcc_maps $sender_canonical_maps $smtp_generic_maps $smtpd_sender_login_maps $transport_maps $virtual_alias_domains $virtual_alias_maps $virtual_mailbox_domains $virtual_mailbox_maps $smtpd_sender_restrictions $sender_dependent_relayhost_maps' postconf -e sender_dependent_relayhost_maps='proxy:mysql:/etc/postfix/mysql/sender_dependent_relayhost_maps.cf' ``` @@ -625,7 +625,7 @@ postconf -e sender_dependent_relayhost_maps='proxy:mysql:/etc/postfix/mysql/send * On __FreeBSD__, please run 2 commands below to update Postfix settings: ``` -postconf -e proxy_read_maps ='$canonical_maps $lmtp_generic_maps $local_recipient_maps $mydestination $mynetworks $recipient_bcc_maps $recipient_canonical_maps $relay_domains $relay_recipient_maps $relocated_maps $sender_bcc_maps $sender_canonical_maps $smtp_generic_maps $smtpd_sender_login_maps $transport_maps $virtual_alias_domains $virtual_alias_maps $virtual_mailbox_domains $virtual_mailbox_maps $smtpd_sender_restrictions $sender_dependent_relayhost_maps' +postconf -e proxy_read_maps='$canonical_maps $lmtp_generic_maps $local_recipient_maps $mydestination $mynetworks $recipient_bcc_maps $recipient_canonical_maps $relay_domains $relay_recipient_maps $relocated_maps $sender_bcc_maps $sender_canonical_maps $smtp_generic_maps $smtpd_sender_login_maps $transport_maps $virtual_alias_domains $virtual_alias_maps $virtual_mailbox_domains $virtual_mailbox_maps $smtpd_sender_restrictions $sender_dependent_relayhost_maps' postconf -e sender_dependent_relayhost_maps='proxy:mysql:/usr/local/etc/postfix/mysql/sender_dependent_relayhost_maps.cf' ``` @@ -742,7 +742,7 @@ We need to update 2 parameters in Postfix config file: `proxy_read_maps`, * On __Linux/OpenBSD__, please run 2 commands below to update Postfix settings: ``` -postconf -e proxy_read_maps ='$canonical_maps $lmtp_generic_maps $local_recipient_maps $mydestination $mynetworks $recipient_bcc_maps $recipient_canonical_maps $relay_domains $relay_recipient_maps $relocated_maps $sender_bcc_maps $sender_canonical_maps $smtp_generic_maps $smtpd_sender_login_maps $transport_maps $virtual_alias_domains $virtual_alias_maps $virtual_mailbox_domains $virtual_mailbox_maps $smtpd_sender_restrictions $sender_dependent_relayhost_maps' +postconf -e proxy_read_maps='$canonical_maps $lmtp_generic_maps $local_recipient_maps $mydestination $mynetworks $recipient_bcc_maps $recipient_canonical_maps $relay_domains $relay_recipient_maps $relocated_maps $sender_bcc_maps $sender_canonical_maps $smtp_generic_maps $smtpd_sender_login_maps $transport_maps $virtual_alias_domains $virtual_alias_maps $virtual_mailbox_domains $virtual_mailbox_maps $smtpd_sender_restrictions $sender_dependent_relayhost_maps' postconf -e sender_dependent_relayhost_maps='proxy:pgsql:/etc/postfix/pgsql/sender_dependent_relayhost_maps.cf' ``` @@ -750,7 +750,7 @@ postconf -e sender_dependent_relayhost_maps='proxy:pgsql:/etc/postfix/pgsql/send * On __FreeBSD__, please run 2 commands below to update Postfix settings: ``` -postconf -e proxy_read_maps ='$canonical_maps $lmtp_generic_maps $local_recipient_maps $mydestination $mynetworks $recipient_bcc_maps $recipient_canonical_maps $relay_domains $relay_recipient_maps $relocated_maps $sender_bcc_maps $sender_canonical_maps $smtp_generic_maps $smtpd_sender_login_maps $transport_maps $virtual_alias_domains $virtual_alias_maps $virtual_mailbox_domains $virtual_mailbox_maps $smtpd_sender_restrictions $sender_dependent_relayhost_maps' +postconf -e proxy_read_maps='$canonical_maps $lmtp_generic_maps $local_recipient_maps $mydestination $mynetworks $recipient_bcc_maps $recipient_canonical_maps $relay_domains $relay_recipient_maps $relocated_maps $sender_bcc_maps $sender_canonical_maps $smtp_generic_maps $smtpd_sender_login_maps $transport_maps $virtual_alias_domains $virtual_alias_maps $virtual_mailbox_domains $virtual_mailbox_maps $smtpd_sender_restrictions $sender_dependent_relayhost_maps' postconf -e sender_dependent_relayhost_maps='proxy:mysql:/usr/local/etc/postfix/mysql/sender_dependent_relayhost_maps.cf' ``` diff --git a/en_US/upgrade/1-iredmail.releases.md b/en_US/upgrade/1-iredmail.releases.md index 769129e7..cbd467ae 100644 --- a/en_US/upgrade/1-iredmail.releases.md +++ b/en_US/upgrade/1-iredmail.releases.md @@ -33,9 +33,7 @@ We offer remote upgrade support if you don't want to get your hands dirty, check [the details](../support.html) and [contact us](../contact.html). - * [0.9.4](http://www.iredmail.org/forum/topic10512.html), Jan 25, 2016. [Upgrade from iRedMail-0.9.3](./upgrade.iredmail.0.9.3-0.9.4.html) * [0.9.3](http://www.iredmail.org/forum/topic10261.html), Dec 14, 2015. [Upgrade from iRedMail-0.9.2](./upgrade.iredmail.0.9.2-0.9.3.html) (contains SQL/LDAP structure changes) * [0.9.2](http://www.iredmail.org/forum/topic9280.html), Jun 3, 2015. [Upgrade from iRedMail-0.9.1](./upgrade.iredmail.0.9.1-0.9.2.html) diff --git a/html/index.html b/html/index.html index 33fbff5c..1498cdea 100644 --- a/html/index.html +++ b/html/index.html @@ -111,7 +111,7 @@
  • LDAP: Bulk create mail users
  • LDAP: User mail forwarding
  • Mailbox sharing (Sharing IMAP folder with other users)
    • -
  • Manage iRedAPD (white/blacklists, greylisting)
    • +
  • Manage iRedAPD (white/blacklists, greylisting, and more)
  • Monitor incoming and outgoing mails with BCC
  • Move detected spam to Junk folder
  • Per-domain or per-user transport (relay)
    • diff --git a/html/iredmail.releases.html b/html/iredmail.releases.html index d34a4b98..d89c1581 100644 --- a/html/iredmail.releases.html +++ b/html/iredmail.releases.html @@ -61,11 +61,8 @@

    We offer remote upgrade support if you don't want to get your hands dirty, check the details and contact us.

    - -