Commit Graph

2427 Commits (34532073010d000d747da457982de0f76eef4a4c)

Author SHA1 Message Date
André Peters 8f4d468209
Merge pull request #2916 from Thomas2500/patch-1
Disable SSL ticket support in dovecot
2019-09-09 07:47:37 +02:00
andryyy 87e99e53d9
[Postfix] Fix anonymize headers 2019-09-08 10:29:06 +02:00
Thomas Bella 3983b3d393
Disable SSL ticket support in dovecot
Because tickets are normally only generated on service start, we should disable it to provide better PFS.
2019-09-06 12:39:33 +02:00
andryyy 8608ded0ed
[Postfix] Replace Postcow header, remove authed user 2019-09-06 08:02:52 +02:00
Filip Hajny 28a5fc1c2a One more awkward word 2019-09-05 21:56:01 +02:00
Filip Hajny 4eaf432bec Update cs lang definitions, clear typos, simplify wording, clear up confusions. 2019-09-05 21:49:43 +02:00
Tobias 70187836e8
Update admin.js
Fix "→" is not displayed when username is save with uppercase
See bevor:  https://i.tobias.bayern/9XGMoS5g.png
See after change: https://i.tobias.bayern/QvupZ23j.png
2019-09-05 19:08:41 +02:00
André Peters f87beded34
Update fishy_tlds.map 2019-09-05 14:32:04 +02:00
André Peters cdd91bcb9b
Update functions.mailbox.inc.php 2019-09-05 10:54:35 +02:00
andryyy 0d5df21ffc
[Postfix] Route watchdog@localhost to local7 discard 2019-09-04 23:07:35 +02:00
andryyy 62068b2209
[Watchdog] Add watchdog@invalid as rcpt for check 2019-09-04 23:07:17 +02:00
andryyy a1cd7d8ee7
[Postfix] Add watchdog@localhost alias 2019-09-04 23:06:29 +02:00
andryyy 8d0b2678fe
[Rspamd] Remove some TLDs from fishy map 2019-09-04 08:14:35 +02:00
andryyy 1495bda2e1
[Postfix] Add info about extra.cf 2019-09-02 18:39:08 +02:00
andryyy b4f159da86
[Postfix] Allow to create an extra.cf file besides main.cf to merge overrides
[Postfix] Better logging while bootstrapping
[Postfix] Stop container, when a service fails (easier to monitor)
2019-09-02 18:37:05 +02:00
andryyy 893ce5a789
[Web] Allow to add external sender addresses, can be disabled by domain admin ACL and is disabled by default 2019-09-02 11:11:41 +02:00
andryyy 46fadf95a2
[Web] Small CSS fixes and additions 2019-09-02 11:10:14 +02:00
andryyy 1bdf861177 [Postfix] Add comments to config files, cleanup a bit 2019-09-02 09:31:30 +02:00
andryyy e6609ffe5c
[SOGo] Add ext_acl to SOGo view to allow to select external sender addresses 2019-09-02 09:30:09 +02:00
andryyy 49c7a2cbc7
[PHP-FPM] Plan a Postfix restart, when a MariaDB upgrade was applied 2019-09-02 09:28:13 +02:00
andryyy 9c714b34a4
[Rspamd] Bad word update and score change 2019-08-30 19:30:38 +02:00
andryyy 569296dcdc
[Rspamd] More bad words - todo: split by language 2019-08-30 18:54:54 +02:00
andryyy ab42540769
[Web] Minor changes or fixes; [Web] Add multiple transport destinations at the same time - comma separated 2019-08-30 18:54:38 +02:00
andryyy 5a89dc114d
[Rspamd] Minor changes to fishy tlds and bad words 2019-08-29 18:57:37 +02:00
andryyy 6e82a35929
[Rspamd] Important fix for fishy maps 2019-08-28 15:04:53 +02:00
andryyy 1414e9df00
[Rspamd] Reduce fishy tld score
[Compose] Update Dovecot image
2019-08-28 14:37:04 +02:00
andryyy a5d569e0ca
[Rspamd] Reduce fishy tld score 2019-08-28 14:26:01 +02:00
andryyy 01fe856d05
[Rspamd] Fix a domain name 2019-08-28 13:05:42 +02:00
andryyy 23ae0c3cc1
[Rspamd] Filter 'em bad words from 'em bad tlds 2019-08-28 13:03:15 +02:00
André Peters 4aae447e97
Revert "Python27 eol issue2291" 2019-08-28 07:01:47 +02:00
André Peters b56aa8c1de
Merge pull request #2863 from FaMux/python27EOL_issue2291
Python27 eol issue2291
2019-08-27 19:07:34 +02:00
andryyy bd469412ca
[SOGo] Do not modify UIxAclEditor 2019-08-25 16:03:57 +02:00
andryyy 0d8a92a365
[Web] Show ratelimit inheritance
[Web] Do not allow TLS-wrapped next shops (SMTPS) in transports
[Web] Minor fixes or preparations
2019-08-25 16:02:58 +02:00
andryyy abf33b75f4
[Postfix] Remove Zeyple config 2019-08-25 16:00:33 +02:00
andryyy e342016534
[Rspamd] Fix scores of UCE 2019-08-22 22:08:22 +02:00
andryyy 084eb008a1
[Rspamd] Add UCE to RBL 2019-08-22 16:34:03 +02:00
andryyy 9bbf9dc68e
[Rspamd] Fix and improve settings map 2019-08-21 21:07:51 +02:00
andryyy f35efbf39c
[Dovecot] Add new SA rules 2019-08-21 21:07:15 +02:00
andryyy 1d1d6c97cc
[ClamAV] Push to v0.101.4 2019-08-21 21:06:14 +02:00
andryyy 3a26365b51
[Rspamd] Change SA ruleset name 2019-08-21 14:37:30 +02:00
andryyy c69c2d9c13 Merge branch 'master' of https://github.com/mailcow/mailcow-dockerized 2019-08-16 22:18:55 +02:00
andryyy a2386434fd
[Postfix] More RBLs, lower thresholds 2019-08-16 22:17:28 +02:00
andryyy 692614f79e
[Web] Fix loop in SPF lookup 2019-08-16 18:20:58 +02:00
andryyy 6e41fa9fc1
[Web] Update JQuery, todo: dont use migrate 2019-08-16 18:20:24 +02:00
andryyy 217da8c7fc
[Postfix] Reduce threshold to 4, format list 2019-08-16 07:55:17 +02:00
andryyy 1b3a5d54ca [Postfix] Reduce RBL threshold
We should move more RBL checks to Postfix
2019-08-16 07:46:19 +02:00
farnbacher 50c272dbf6
fix wrong package name 2019-08-15 20:58:23 +02:00
farnbacher a119467218
Install Python 3 packages for ported quota_notify.py & quarantine_notify.py 2019-08-15 20:36:32 +02:00
farnbacher c579a2c01e
Update for usage with Python 3
- print with parantheses and .format
 - change shebang
 - change import of email modules
2019-08-15 20:32:20 +02:00
farnbacher cf2e8d6545
Update for usage with Python 3
- print with parantheses and .format
- change import of email modules
- change shebang
2019-08-15 20:18:01 +02:00
Patrik Kernstock 409ecf7fd5
[Web] Fixed one more possible XSS
XSS might be possible when using a specific-crafted request (harder than previous ones). Might also easily cause JS errors and making the "mailcow UI"-logs not accessible anymore
2019-08-14 22:19:50 +02:00
Patrik Kernstock 4f25a3646e Fixed several other XSS's 2019-08-14 00:22:40 +02:00
andryyy 5fd00abf91 Merge branch 'master' of https://github.com/mailcow/mailcow-dockerized 2019-08-13 21:12:30 +02:00
andryyy fab23cec2b
[Web] Fix XSS in call field 2019-08-13 21:12:24 +02:00
André Peters a41825dede
Merge pull request #2857 from mailcow/update-msg-removehash
Small info regarding hash deletion, fixes #2775
2019-08-13 21:07:35 +02:00
André Peters 32f293e55f
Update lang.en.php 2019-08-13 21:07:25 +02:00
andryyy f67f552180 Merge branch 'master' of https://github.com/mailcow/mailcow-dockerized 2019-08-13 20:28:37 +02:00
Rene Pasing b4ebe83d2f Do not create random files when SKIP_HTTP_VERIFICATION=y (#2830) 2019-08-13 20:26:47 +02:00
andryyy b4ec624a22 Merge branch 'master' of https://github.com/mailcow/mailcow-dockerized 2019-08-13 20:19:10 +02:00
andryyy f00b563d9c
[Watchdog] More fixes for watchdog... 2019-08-13 20:19:01 +02:00
Geitenijs badd6b5e7f Update lang.nl.php (#2850) 2019-08-13 20:11:24 +02:00
Patrik Kernstock a3315d9187 Rephrase EN 2019-08-13 19:53:26 +02:00
Patrik Kernstock 2b0795cc71 Small info regarding hash deletion, fixes #2775 2019-08-12 19:30:31 +02:00
andryyy 294e0bc07f
[Web] Cache validation result in Redis 2019-08-11 22:19:26 +02:00
andryyy 6aa7664d79
[Watchdog] Force timeout on smtp-cli, kill watchdog.sh on reload 2019-08-11 10:18:00 +02:00
andryyy edfb862557 Merge branch 'master' of https://github.com/mailcow/mailcow-dockerized 2019-08-10 21:03:26 +02:00
andryyy 3488cb2171
[Dovecot] Fix GUID 2019-08-10 21:03:18 +02:00
heavygale 2d74d81cb1 htmlspecialchars for value attributes
Escaping htmlspecialchars in value attributes.
2019-08-10 19:36:03 +02:00
andryyy 03259d66bb
[Web] Minor fixes 2019-08-10 16:12:06 +02:00
andryyy 2714910a7f
[SOGo] Fix versions check 2019-08-10 15:59:28 +02:00
andryyy d8dfd5061b
[Web] Minor fixes and changes 2019-08-10 15:57:07 +02:00
andryyy 9a500a7068
[Web] Verify OPTIONAL license plus minor fixes 2019-08-09 14:16:52 +02:00
andryyy cb9a63ec4d
[Web] Fix CSS, thanks to @irgendwr 2019-08-09 14:14:41 +02:00
andryyy fc1e547e53
[Watchdog] Minor changes and better error detection; Increased ClamAV threshold 2019-08-09 14:12:56 +02:00
andryyy 457d62e22e
[Dovecot] Generate GUID 2019-08-09 14:11:36 +02:00
andryyy 9e0381185c [Postfix] Disable UTF8 SMTP as Dovecots LMTP does not support it, also disable Zeyple 2019-08-09 14:10:31 +02:00
andryyy 3136e020f6
[Postfix] Remove Zeyple, base on Buster 2019-08-09 14:08:58 +02:00
keigel2001 f9a3e500b5 [ClamAV] Update to 0.101.3 2019-08-06 17:00:11 +02:00
andryyy 1ad1413d08
[Watchdog] Do not reload every minute... 2019-08-03 14:38:09 +02:00
andryyy 5f9644e8bd
[Watchdog] Minor changes and PID logging for workers, disabling olefy check 2019-08-03 14:29:02 +02:00
andryyy cf6ed6b2b4 Merge branch 'master' of https://github.com/mailcow/mailcow-dockerized 2019-07-30 11:32:47 +02:00
andryyy 67049a27e2
[DockerAPI] Fix pathes, fixes #2820 2019-07-30 11:32:38 +02:00
André Peters c7eec72055
[Web] Language updates 2019-07-29 21:12:47 +02:00
andryyy 2193378982
[Web] unlimited_quota fix for domain admins 2019-07-29 16:16:31 +02:00
andryyy dadc66fe49
[Web] Minor changes to ip labels 2019-07-28 21:36:48 +02:00
andryyy 5fda67223d
[Dovecot] Fix pathes 2019-07-28 21:36:09 +02:00
andryyy fb22540f74
[Solr] Use new Solr base 2019-07-28 21:35:10 +02:00
andryyy 97c2fe9fe1
[Dovecot] Install from repository 2019-07-28 21:34:42 +02:00
Faisal Misle be4673c5f6 Update lang.es.php
minor update
2019-07-28 07:17:10 -05:00
Faisal Misle db8b7aaa04 Language updates
Spanish is 95% done, minor gramatical updates to english version
2019-07-28 07:13:31 -05:00
André Peters 2061181d82
Merge pull request #2810 from friedPotat0/quarantinetable
Minor adjustments to tables in UI
2019-07-27 19:40:43 +02:00
friedPotat0 c48ae234ce Restrict toggle for tbl with specific breakpoints 2019-07-27 19:07:01 +02:00
friedPotat0 d1153b470f Restrict row toggle for remaing tables 2019-07-27 18:57:58 +02:00
friedPotat0 1b54d75716 Prevent event propagation for remaining tables 2019-07-27 18:56:51 +02:00
friedPotat0 bcad71cfaa Add proper cursor to remaining UI tables 2019-07-27 18:50:58 +02:00
friedPotat0 36888645bc Set proper cursor for quarantine table rows 2019-07-27 17:17:56 +02:00
friedPotat0 fb1307daa9 Set proper cursor for footable toggle 2019-07-27 17:16:59 +02:00
friedPotat0 abf0548ca4 Prevent event propagation for footable toggle 2019-07-27 17:14:56 +02:00
friedPotat0 581f8c77c7 Restrict quarantine table row toggle 2019-07-27 16:49:53 +02:00
André Peters 857c225d07
Merge pull request #2804 from friedPotat0/buttonpointerevents
Fix pointer events for nested button elements
2019-07-27 15:59:26 +02:00
André Peters e00a18ab95
Update anonymize_headers.pcre 2019-07-26 07:18:58 +02:00
andryyy 9de821c3b0
[Postfix] Don't remove authed header from Received
[Compose] New watchdog image
2019-07-26 06:53:29 +02:00
Patrik Kernstock 39250ca3d0
Added charset for watchdog mails
Added charset parameter to get rid of the negative rating of rspamd R_MISSING_CHARSET (2.5).
2019-07-25 21:49:30 +02:00
andryyy 85f20a901d
[Web] Remove top padding on login screen for small devices 2019-07-23 21:33:24 +02:00
andryyy 91edf275b9
[Web] Minor language change in lang.de 2019-07-23 19:53:11 +02:00
andryyy 45f31ba931
[Web] Handle score as string 2019-07-23 19:52:46 +02:00
andryyy 584fb75f05 Merge branch 'master' of https://github.com/mailcow/mailcow-dockerized 2019-07-23 08:08:11 +02:00
friedPotat0 454ffac803 Fix pointer events for nested button elements 2019-07-23 05:48:29 +02:00
friedPotat0 d4f3e87a2f Add spam score to quarantine table 2019-07-23 04:22:28 +02:00
andryyy cbdd6b0dfa
[ACME] Fix insecure http verifications 2019-07-22 22:52:45 +02:00
andryyy 3f741eb625
[Web] Disable user-scalable, set max-scale to 1 2019-07-22 21:11:25 +02:00
andryyy a2cc3340b7
[DockerAPI] Alpine 3.10 2019-07-22 21:09:17 +02:00
andryyy 78d350ba23
[Olefy] Alpine 3.10 2019-07-22 21:09:05 +02:00
andryyy 22d17390df
[Netfilter] Alpine 3.10 with dirty, dirty hack to workaround iptables issue with Python 2019-07-22 21:08:44 +02:00
andryyy 3d52cc2270
[ACME] Alpine 3.10 2019-07-22 21:08:11 +02:00
andryyy 4532b5c882
[Dovecot] Remove default cronjobs 2019-07-22 21:07:39 +02:00
andryyy 8c3a7e52b4
[Watchdog] Minor threshold changes 2019-07-22 21:07:16 +02:00
andryyy db0719f068
[Rspamd] Fix IP whitelist 2019-07-22 13:50:05 +02:00
andryyy 71df10892c
[Rspamd] Add custom IP whitelist template 2019-07-22 13:38:47 +02:00
andryyy 9aad9d8e4e
[Dovecot] New Dovecot version 2019-07-21 13:08:00 +02:00
andryyy 5e7466ac7f
[SOGo, Config, Update] Add SOGO_EXPIRE_SESSION to define default session timeout 2019-07-21 13:07:48 +02:00
andryyy 7d72c8088a
[Watchdog] Some changes like running checks less often, lower thresholds and a whois command fix 2019-07-20 21:43:14 +02:00
andryyy 27d60840ef Merge branch 'master' of https://github.com/mailcow/mailcow-dockerized 2019-07-20 15:16:01 +02:00
andryyy a0f4886be6
[PHP-FPM] Update to Alpine 3.10 because of yet untraced errors with CentOS 7 Docker hosts 2019-07-20 15:15:39 +02:00
mkapra a5756716e0 Fixing duplicated port for profile downloading. 2019-07-17 08:59:49 +02:00
André Peters 83136c7876
Merge pull request #2789 from patschi/patch-6
Remove DMARC descriptions from polices_group
2019-07-16 21:30:44 +02:00
Patrik Kernstock 197f27b705
Remove DMARC descriptions from polices_group
Remove descriptions as they are inherited from the default rspamd configuration anyway
2019-07-16 20:15:11 +02:00
Michael Kuron cecbbe9e82
Remove score from R_DKIM_PERMFAIL
This error happens when there is no public key in DNS for that selector.
2019-07-16 20:03:37 +02:00
andryyy 3c3bcf8c82
[Postfix] Set compatibility_level to 2 2019-07-13 14:44:17 +02:00
andryyy eb760543d9 Merge branch 'master' of https://github.com/mailcow/mailcow-dockerized 2019-07-13 09:23:51 +02:00
andryyy 568e166478
[Unbound] Update base to Alpine 3.10 to use Unbound 1.9
[Unbound] Set unwanted-reply-threshold: 10000
2019-07-13 09:22:03 +02:00
andryyy 2898aa6918
[Postfix] Remove unused alias domain catch all map 2019-07-13 08:59:32 +02:00
andryyy d3906329e7
[SOGo] Update Dockerfile 2019-07-13 08:58:13 +02:00
André Peters 84f4f43b27
Update policies_group.conf 2019-07-12 23:15:27 +02:00
andryyy 7466157d3a
[SOGo] Use SSL via IMAP, seems to be more stable, fixes #2770 2019-07-09 08:59:28 +02:00
andryyy ea3f1374fc
[ACME] Slightly better info messages, some fixes 2019-07-09 08:59:07 +02:00
andryyy b139e48eec
Add some hints to autogenerated files 2019-07-08 07:56:41 +02:00
andryyy 59fe692252 Merge branch 'master' of https://github.com/mailcow/mailcow-dockerized 2019-07-08 07:56:02 +02:00
andryyy 4b9f022890
[Watchdog] Watch olefy, thanks to @ntimo 2019-07-07 21:59:20 +02:00
André Peters f6a053985f
Revert "Update docker-entrypoint.sh" 2019-07-06 11:46:05 +02:00
André Peters 98c46fc33d
Merge pull request #2755 from gmarke/patch-1
Update docker-entrypoint.sh
2019-07-06 11:11:31 +02:00
Geitenijs 448752cd94
Update lang.nl.php 2019-07-05 18:38:16 +02:00
andryyy cb4f025bb1
[Web] Add important info about disabled GAL 2019-07-05 15:37:28 +02:00
andryyy e71abf1895 Merge branch 'master' of https://github.com/mailcow/mailcow-dockerized 2019-07-05 15:16:48 +02:00
andryyy 350811dadd [Web] Enable GAL by default 2019-07-05 15:16:11 +02:00
Sascha Henke d0ecd08ba0
Kleine Rechtschreibkorrektur
2 Rechtschreibfehler und eine Stiländerung
2019-07-04 08:30:39 +02:00
andryyy 39fa378f29 Merge branch 'master' of https://github.com/mailcow/mailcow-dockerized 2019-07-03 10:46:51 +02:00
andryyy 184eb7a739
[ClamAV] Fix chmod command, thanks to @fbcd4f50ea5350f051450323b5abfd0b 2019-07-03 10:46:30 +02:00
gmarke 99131f52de
Update docker-entrypoint.sh
get mysql ID only for current project
2019-07-03 08:06:44 +02:00
Braintelligence 61f950b473
Fix issue #2718
Proposal for a fix of issue #2718 .
Strip port from HTTP_HOST per @mkuron proposal: https://github.com/mailcow/mailcow-dockerized/issues/2718#issuecomment-506987422
2019-07-01 16:48:01 +02:00
andryyy 27d1bd8aeb [ClamAV] Fix missing exit code var, fixes #2746 2019-06-29 23:27:22 +02:00
andryyy 014a0c7af5
[ACME] Better HTTP verification 2019-06-29 20:28:03 +02:00
andryyy 104fbae0d9
[Netfilter] Set some f2boptions to int 2019-06-25 22:16:38 +02:00
andryyy 2efd27e40e
[Olefy] A new container is born, thanks to @c-rosenberg
[ACME] Autoconfig is back (re-added to SAN list by default for all mail domains)
[Rspamd] Added comment to composite
2019-06-25 18:52:05 +02:00
andryyy 71c6c59f1c
[Dovecot] Fix cleanup of old quarantine items, fixes #2721 2019-06-22 23:12:23 +02:00
andryyy f2d1a56104
[Rspamd] Increase OLEFY_MACRO score 2019-06-20 10:18:43 +02:00
andryyy f35bc07a30
[Web] Generate readable passwords 2019-06-20 10:18:09 +02:00
andryyy 39f95b8284
[Compose] Add olefy container, new Postfix iamge and new ClamAV image 2019-06-16 17:37:25 +02:00
andryyy aea957e949
[Olefy] New container and image 2019-06-16 17:36:32 +02:00
andryyy 04940429ba
[Rspamd] Add oletools via olefy, big thanks to @c-rosenberg 2019-06-16 17:35:58 +02:00
andryyy 6f99f06c6d
[Rspamd] Add OLEFY_MACRO symbol 2019-06-16 17:35:24 +02:00
andryyy 9c347e36fc
[Rspamd] Less aggressive bayes 2019-06-16 17:34:58 +02:00
andryyy c7a85fc520
[Web] Fix BCC error message 2019-06-16 16:00:41 +02:00
andryyy 59798357f7
[Web] Fix SPF link 2019-06-16 16:00:14 +02:00
andryyy 090e14ee8d
[Netfilter] Keep musl-dev, update pip 2019-06-13 21:10:49 +02:00
andryyy 8984240e44
[Watchdog, Config] Added WATCHDOG_NOTIFY_BAN to disable IP ban notifications
[Netfilter] Remove unused files after installation
[Compose] Some new images and a new option for watchdog: WATCHDOG_NOTIFY_BAN - defaults to y
2019-06-13 19:38:53 +02:00
andryyy e43951331c
[Rspamd] Sign ARC inbonud, thanks to @Kraeutergarten 2019-06-11 11:41:59 +02:00
andryyy 7145c380b0
[Watchdog] Minor text changes and send whois report of banned IP 2019-06-10 22:40:21 +02:00
andryyy 7f6acdb791
[Watchdog] Fix for fix for wrong mails 2019-06-10 21:53:44 +02:00
andryyy 0d7681d0a5
[Watchdog] Fix broken mail with more than one rcpt in some cases 2019-06-10 20:20:41 +02:00
andryyy c257724cd0
[PHP-FPM] Add exif module 2019-06-10 13:39:53 +02:00
andryyy dcd0bfc13e
[Watchdog] Send mail when IP was banned 2019-06-10 10:57:38 +02:00
andryyy ffb008f72a Merge branch 'master' of https://github.com/mailcow/mailcow-dockerized 2019-06-09 16:50:04 +02:00
andryyy e25e9c7b40
[Postfix] Create resource maps 2019-06-09 16:49:38 +02:00
andryyy 5ce6688c78
[Web] Show resource alias 2019-06-09 16:49:17 +02:00
andryyy de3a89ac7a
[Postfix] Remove duplicate proxy read maps, add resource maps 2019-06-09 16:49:02 +02:00
Aiko Appeldorn 1634a486fc
[web] increased db version 2019-06-09 12:08:23 +02:00
Timo N 9325bb6f4e
Merge pull request #2594 from FELDSAM-INC/domain-default-mailbox-quota
Default quota for mailbox
2019-06-09 10:49:43 +02:00
dofl fa4c4b138e
Update main.cf
Added the delay_warning_time (http://www.postfix.org/postconf.5.html#delay_warning_time) with 4 hours as setting. Postfix will inform the user that the e-mail has not been delivered, but that it will try for the next 5 days. 

There is also a setting called confirm_delay_cleared (http://www.postfix.org/postconf.5.html#confirm_delay_cleared), but according to the Postfix this can lead to a sudden burst of notifications at the end of a prolonged network outage.
2019-06-09 07:39:36 +02:00
dofl d5eeb3e8af
Update main.cf
I was looking into creating a backup mx server for a high availability mailcow setup. It seems that this is not easily done. While researching to find out how long an average SMTP server keeps trying to send to a server that is down I found that RFC 5321 advises at least 4 to 5 days. Mailcow has a custom setup of 1 day, which is very short. The user will be unaware for 5 days that his mail has not been delivered, which can be negative. But I still would like to follow the advice of the RFC.

RFC 5321, in section 4.5.4.1, has this to say:
Retries continue until the message is transmitted or the sender  up;  the give-up time generally needs to be at least 4-5 days.  It MAY be appropriate to set a shorter maximum number of retries for non-delivery notifications and equivalent error messages than for standard messages. 

Postfix default is also 5 days: http://www.postfix.org/postconf.5.html

https://tools.ietf.org/html/rfc5321#section-4.5.4
2019-06-08 15:10:46 +02:00
andryyy 53bda04848
[PHP-FPM] Update PHP and some modules 2019-06-05 06:56:58 +02:00
andryyy af46a93e76
[Postfix] Remove authed user from header 2019-06-01 22:14:48 +02:00
andryyy de03e4178a
[Dovecot] Run cronjob at 4:15 AM to remove max aged quarantine items (default: 365 days) 2019-06-01 21:23:43 +02:00
andryyy d9361a6263
[PHP-FPM] Add Q_MAX_AGE key and set to 365 days if missing 2019-06-01 21:22:58 +02:00
andryyy 176f2a3f34
[Web] Allow to set max_age for quarantine items 2019-06-01 21:22:14 +02:00
andryyy 5f8dd69a2d
[Web] Fix lang strings for sieve pathes and sieve flow 2019-06-01 14:10:01 +02:00
andryyy dcacf85a5d
[Dovecot] Rename sieve_after to global_sieve_after and create a global_sieve_before file 2019-06-01 13:53:24 +02:00
andryyy aaf0d521a2
[Postfix] Add UA header check, not enabled by default 2019-06-01 08:29:53 +02:00
andryyy cc16f60826 Merge branch 'master' of https://github.com/mailcow/mailcow-dockerized 2019-05-30 08:36:56 +02:00
André Peters 69fb7f7a7c
[ClamAV] Update to 0.101.2 2019-05-30 08:36:39 +02:00
Timo N 15b2ca6eaa
[ClamAV] Updated to version 0.101.2 2019-05-30 06:41:21 +02:00
andryyy 395f0f7a3d
[Rspamd] Remove authenticated user from auth results header
[Dovecot] Fix permissions of console
[Compose] New Dovecot image
2019-05-29 18:02:14 +02:00
andryyy 8537767443
[Web] Show error when connection to redis fails (instead of 5xx) 2019-05-28 15:18:27 +02:00
Thomas Sänger e24ba8e2d8
fix typo that prevented trimming watchdog logs 2019-05-27 23:09:25 +02:00
andryyy 7d7ecbe591
[Dovecot] Removed quota recalc job (too intensive on larger systems) 2019-05-27 20:29:55 +02:00
andryyy 1da3145d13 Merge branch 'master' of https://github.com/mailcow/mailcow-dockerized 2019-05-27 19:34:30 +02:00
André Peters 856c37ef7b
[DockerAPI] Python3 - big thanks to @christianbur 2019-05-27 19:33:59 +02:00
andryyy 2757c6b5fe
[Postfix] Do not allow DSN for postscreen 2019-05-27 19:32:41 +02:00
andryyy 2508ee5b69
[Web] Delete from sender_acl when deleting an alias 2019-05-26 09:39:04 +02:00
andryyy 6fffda5def
[Web] Remove file 2019-05-26 09:24:50 +02:00
andryyy d5612cf60f
[Web] More fixes for alias as sender_acl 2019-05-26 09:22:06 +02:00
andryyy 5087d5ce96
[Web] Allow aliases as send-as 2019-05-26 08:29:10 +02:00
andryyy 57d65535c9
[Dovecot] Trim watchdog logs 2019-05-25 10:29:17 +02:00
andryyy db0ec130f5
[Web] Lang updates
[ACME] Typo
2019-05-22 23:47:45 +02:00
André Peters 522a304181
Merge pull request #2629 from christianbur/acme_v3
acme-tiny with python3
2019-05-22 23:36:23 +02:00
Christian Burmeister a8e96c57b1
fix typo - container_post__exec__maildir__cleanup 2019-05-22 23:05:07 +02:00
André Peters 9a114845d7
[Netfilter] Reworked by @Kraeutergarten 2019-05-22 22:49:40 +02:00
Christian Burmeister cd71935001
Remove pyOpenSSL 2019-05-21 19:58:18 +02:00
Christian Burmeister 7032ea00d0
add "--virtual .build-dependencies" 2019-05-21 19:51:03 +02:00
Christian Burmeister 8327aac700
Update phpfpm baseimage from alpine 3.8 to 3.9 2019-05-20 23:23:04 +02:00
Christian Burmeister bfbd4c1240
acme-tiny with python3 2019-05-20 21:32:04 +02:00
Christian Burmeister 9afa2730ac
Update server.py 2019-05-20 21:30:40 +02:00
Christian Burmeister 07d15cf035
Update Dockerfile 2019-05-20 21:27:47 +02:00
André Peters 003b244544
Merge pull request #2623 from Arlon1/acme/cert_renewal_threshold
acme: changed the threshold for certificate renewal
2019-05-20 19:51:03 +02:00
Evangelos Foutras e1a3313660 [Web] Fix showing domain with disabled sender check
If a mailbox is allowed to send as any address under its domain (+ alias
domains) and the domain itself has no aliases configured, no information
about this fact is shown to the user. That is to say, the "Do not check
sender access for the following domain(s) and its alias domains" field
under mailbox details is empty.

The above is happening because the second GROUP_CONCAT() returns NULL
making the enclosing CONCAT() return NULL as well. Fix this by using
CONCAT_WS() which correctly handles the case of zero domain aliases.

Furthermore, move the IFNULL() to the first GROUP_CONCAT() because
CONCAT_WS() returns an empty string when both GROUP_CONCAT()'s are
NULL. We can be certain that when the first GROUP_CONCAT() is NULL
the second one will be as well, so it's safe to use IFNULL() there.
2019-05-20 18:08:45 +03:00
andryyy ba14f0f113
[Rspamd] Fix spoofing detection 2019-05-20 15:14:42 +02:00
Kraeutergarten b862ce2bfb Add hostnames for blacklist. 2019-05-20 09:02:40 +02:00
Kraeutergarten e6de9c299d Fix wrong python version. 2019-05-20 07:02:42 +02:00
Kraeutergarten 9b02c9272e clear whitelist, if it gets cleard. 2019-05-19 10:55:11 +02:00
Kraeutergarten 5af250398c Redo complete logging.
Do some other fixes caused by python3
2019-05-19 10:36:16 +02:00
Kraeutergarten d6af494789 update to python3 2019-05-19 09:55:49 +02:00
Kraeutergarten 5ed113c47f resolving whitelist every minute 2019-05-19 09:48:10 +02:00
andryyy 1f365f5cff
[Dovecot] Remove shared namespace 2019-05-18 23:01:23 +02:00
andryyy 922a8db7a5
[Dovecot] Auto-generate shared namespace 2019-05-18 23:01:05 +02:00
andryyy 5e36018864
[Rspamd] Auto-generate SIEVE_HOST map and add dnsutils 2019-05-18 22:44:30 +02:00
andryyy 3ffa7e1f33
[Rspamd] Add SIEVE_HOST map and skip spoof check for these IPs 2019-05-18 22:44:06 +02:00
andryyy 5bb23a2664 [Web] Fix null ua in debug.js - fixes #2615 2019-05-18 15:35:00 +02:00
Kraeutergarten 51f5f66c91 low response timeout
add ipv6 support
add multiple record support
2019-05-18 12:04:11 +02:00
andryyy 45359bb6cf
[Rspamd] Do not apply SPOOFED_UNAUTH on ARC_ALLOW
[Dovecot] Set sieve_redirect_envelope_from to rcpt
2019-05-18 09:18:00 +02:00
Kraeutergarten 4cc63ceeb7 Allow hostnames for fail2ban whitelist. 2019-05-17 19:38:34 +02:00
andryyy 885b79f06f
[Web] Add function to read F2B data via API 2019-05-17 11:21:25 +02:00
andryyy 03f0bac916
[Watchdog] Change error message for acme-mailcow 2019-05-16 19:44:39 +02:00
andryyy 389317e9e4
[Dovecot] Fix memory leak when quarantine sender has non-ascii chars in mail address 2019-05-16 19:44:14 +02:00
andryyy 6a8c4e332b
[ACME] Register error when no hostname could be validated 2019-05-16 19:43:08 +02:00
Arlon1 2d5add5a13 acme: changed the threshold for certificate renewal
The threshold for certificate renewal is changed to 30 days before
expiry date (was 14 days).
fixes #2607
2019-05-16 15:31:50 +02:00
Kraeutergarten 7417dd3a85 Check if domain value is undefined or null. 2019-05-16 10:15:37 +02:00
Kraeutergarten 84a78dbd0d Adds only existing domains in table to the filter and removes additional ajax request. 2019-05-16 08:20:21 +02:00
andryyy 06193ca625
[Web] Write API logs when format is data binary 2019-05-12 15:22:00 +02:00
Kristián Feldsam b8b6450753 Default quota for mailbox
Signed-off-by: Kristián Feldsam <feldsam@gmail.com>
2019-05-11 11:16:40 +02:00
André Peters f0d29ba8ef
Merge pull request #2547 from FELDSAM-INC/feldsam/json-api
JSON API Consume json in request body.
2019-05-10 20:37:37 +02:00
andryyy 5c07cca529
[Rspamd] Change spoofed mail handling 2019-05-09 11:48:38 +02:00
andryyy 456e92c830
[Rspamd] Set to to_ip to_ip_from rate buckets to 100 / 1s 2019-05-09 11:32:16 +02:00
andryyy bf3fb0c9d4
[Web] Fix some breakpoints 2019-05-09 11:30:14 +02:00
André Peters 2b6e486a11
[Dovecot] Update imapsync - thanks to @hunter-nl 2019-05-09 10:39:28 +02:00
andryyy b20ff13e40 [Rspamd] Update to 1.9.2, minor entrypoint changes
[Compose] Update Rspamd to 1.9.2
2019-05-06 12:18:41 +02:00
André Peters 61433a4488
Merge pull request #2541 from sriccio/master
Allow to easily add custom plugins to rspamd
2019-05-05 22:33:32 +02:00
André Peters 6cf9a0354b
Trying to avoid non-distro packages 2019-05-05 22:30:11 +02:00
André Peters 081feca893
Replacing trim by function
https://perlmaven.com/trim
2019-05-05 22:28:55 +02:00
andryyy cf4c5df427
[Web] Disable refresh button on reload, re-enable after table init 2019-05-05 20:59:59 +02:00
andryyy acd8860efa
[Web] More minor css fixes 2019-05-05 20:49:13 +02:00
andryyy 9529b7a542
[Web] Various UI fixes 2019-05-05 20:44:29 +02:00
andryyy 05a2301ea6
[Web] Allow to rename alias to Alias 2019-05-05 20:01:53 +02:00
hunter-nl 4ebc871966
Added noreleasecheck parameter 2019-05-05 14:35:34 +02:00
andryyy f7e5f8b51f
[Web] Minor changes 2019-05-05 14:01:17 +02:00
hunter-nl d6833d0b29
Add extra perl modules for imapsync 2019-05-05 13:24:12 +02:00
hunter-nl 54a039fbd1
Fix: Processing result of running imapsync command
There was a possibility the status is_running never set back to 0.
Also the unlock command could be executed twice.
2019-05-05 13:15:34 +02:00
hunter-nl b7b532768c
Moved set "is_running" status
Moved set "is_running" status just before the actual execution of imapsync
2019-05-05 13:12:09 +02:00
hunter-nl fbf356d522
Update imapsync script to 1.937 2019-05-05 13:09:17 +02:00
hunter-nl d32f3e9d16
Fix processing imapsync custom parameters 2019-05-05 13:07:17 +02:00
André Peters 2d5e8a20ef
Merge pull request #2574 from emericklaw/mobileconfig-specialcharacters
Handle mobileconfig display names with special characters
2019-05-04 23:10:03 +02:00
andryyy 189ea89a71
[Dovecot] Revert to previous imapsync cron script 2019-05-04 23:08:43 +02:00
hunter-nl e59417ed78
Update imapsync_cron.pl
Second unlocking lock_file failed because it was already unlocked.
2019-05-04 13:07:23 +02:00
hunter-nl 99eb61a449
Update init_db.inc.php
imapsync table column "returned_text" changed into type "longtext". "mediumtext" is to small for imapsync output on large mailbox.
db version value updated.
2019-05-04 12:13:51 +02:00
hunter-nl f9cd9927b1
Update imapsync_cron.pl
Moved setting "is_running" status to just before the actual execution of imapsync command.
2019-05-04 12:02:41 +02:00
hunter-nl 95fe217ce1
Update imapsync_cron.pl
Fix: Reset is_running status in case of exception occurs in running imapsync. Else it will stuck in "running" status.
2019-05-04 11:58:19 +02:00
hunter-nl 59882b443a
Update imapsync_cron.pl
Fix executing imapsync command containing quoted strings in parameters.
2019-05-04 11:45:51 +02:00
emericklaw 12d46cf072
Updated to not convert quotes
I missed using ENT_NOQUOTES since XML only needs & and <> to be replaced in tags, spotted by @mkuron
2019-05-03 17:54:33 +01:00
emericklaw 472a99ff00
Handle mobileconfig display names with special characters
If the account display name contained special characters like & the mobileconfig would fail to import on the iOS device.
2019-05-03 13:31:10 +01:00
andryyy b09fab9125 Merge branch 'master' of https://github.com/mailcow/mailcow-dockerized 2019-05-01 23:17:20 +02:00
andryyy 28c8c53a6e
[Rspamd] meta_exporter: return false if not matched
[Compose] Update Dovecot image
2019-05-01 22:50:38 +02:00
André Peters d352173a47
Merge pull request #2570 from Geitenijs/patch-2
Update lang.nl.php
2019-05-01 21:24:14 +02:00
Sven Gottwald b55ac86d6b
Update Dovecot to v2.3.6 and Pigeonhole to v0.5.6 2019-05-01 20:28:11 +02:00
Geitenijs 9dc7d05fa4
Update lang.nl.php 2019-05-01 17:54:27 +02:00
André Peters 48984270dd
Merge pull request #2569 from Howaner/quarantine-domain-alias
Added domain alias handling to quarantine mails and added recipients row to quarantine mail display
2019-05-01 15:54:46 +02:00
Howaner 5bb7b5b368 Fixed XSS 2019-05-01 01:03:16 +02:00
Howaner 17918b3e21 Added domain alias handling to quarantine mails and added recipients row to quarantine mail display
If a mail is sent to a domain alias domain and rejected, mailcow does not currently store the mail in quarantine.
This commit adds domain alias handling to the reject code and should fix this behavior.

Also added displaying of recipient addresses into the quarantine mail dialog to be able to see what mail address was "leaked".
2019-05-01 00:56:12 +02:00
andryyy 59a8a3864a
[Web] Minor fixes 2019-04-30 22:51:17 +02:00
André Peters 18729e2b49
Merge pull request #2567 from Howaner/mailpreview-fix
Updated php-mime-mail-parser library to 5.1 to really fix webui html preview
2019-04-30 22:49:25 +02:00
Howaner 9ce80d0eb5 Updated php-mime-mail-parser library to 5.1 to really fix webui html preview 2019-04-30 21:41:56 +02:00
andryyy 91af3d5c5a
[Rspamd] Much higher scores for DMARC failures 2019-04-30 14:00:47 +02:00
André Peters 7c5094b8ec
Update 014-mailcow.js 2019-04-29 20:24:35 +02:00
André Peters b6607e090e
Update 014-mailcow.js 2019-04-29 19:43:30 +02:00
Howaner 4bac1da451 Updated php-mime-mail-parser library to 5.0 to fix webui html preview
Preview versions of php-mime-mail-parser uses iconv for the most cases and iconv isn't properly supported in alpine php
2019-04-28 20:22:37 +02:00
andryyy 60fd955def
[ACME] Add 0 byte check for cert.pem 2019-04-27 10:23:00 +02:00
andryyy 9bab6507a7
[ACME] Allow to skip all names but MAILCOW_HOSTNAME 2019-04-26 21:15:46 +02:00
andryyy 3e3e526568
[Dovecot] Update to 2.3.5.2
[Compose] Update Dovecot image
2019-04-25 18:10:28 +02:00
Ralph Paßgang 42b240c10c Updating the www.dovecot.org/releases/... url to just dovecot.org/releases/... in dovecot Dockerfile to
prevent a http redirect problem with the curl ... | tar command.
2019-04-24 17:44:15 +02:00
andryyy 9b303dcc0e
[Dovecot] Set default_vsz_limit = 1024 M
[Web] Form cache for user passwd change modal disabled
2019-04-24 14:46:45 +02:00
Kristián Feldsam be2877c875 JSON API Consume json in request body.
Draft docs https://feldhostmailhosting.docs.apiary.io

Signed-off-by: Kristián Feldsam <feldsam@gmail.com>
2019-04-20 21:57:39 +02:00
andryyy 5be4885c15
[Watchdog] Send mail when starting
[Compose] Update watchdog and remove oom check for compatibility
2019-04-18 22:09:26 +02:00
sriccio ef5cf81308 [rspamd] Allow to easily use custom rspamd lua plugins
Since rspamd 1.9.2 we'll be able to load custom modules from plugins.d
directory.

This allow to add and configure plugins easily from the
data/conf/rspamd/plugins.d

Also loading config for custom plugins need rspamd.conf.local or
optionally rspamd.conf.override.

I added support for this in the docker-compose.yml

Idea came while i was writing a custom plugin for Cyren antispam
gateway, which can be found here: https://github.com/sriccio/rspamd-plugins
2019-04-17 10:36:39 +02:00
andryyy 9f00d956f1 [Rspamd] Improve spoofing detection 2019-04-14 20:37:38 +02:00
andryyy cd88165282
[Nextcloud] Always install under subdomain, minor changes to site config and install script 2019-04-14 13:26:53 +02:00
andryyy c8047b9555 [Web] Change session timeout handling
[Rspamd] Add missing spamassassin.conf
2019-04-14 13:01:47 +02:00
andryyy e94c9e1ca6
[Web] Fix class for full mailbox 2019-04-05 13:08:16 +02:00
andryyy 794c2080ec
[ClamAV] Increase watchdog clamd-mailcow thresholds 2019-04-05 12:09:46 +02:00
andryyy a9c1b480c5
[Solr] Make entrypoint executable 2019-04-05 12:09:18 +02:00
Carlos Ferreira 5ddd37956f
Fix HTML bug with French language 2019-04-04 21:03:50 +02:00
Joshua Hesketh f8ff11a1e3
Merge branch 'master' into patch-4 2019-04-02 17:08:19 +11:00
andryyy fae34b8a89
I'm an idiot 2019-04-01 22:52:45 +02:00