Commit Graph

955 Commits (868abc15bd8f5529320821c1cd68d0242cb46156)

Author SHA1 Message Date
andryyy 7c46d6548b [Dovecot] Ignore watchdog IP in logs, filter by syslog-ng 2017-10-11 11:23:20 +02:00
andryyy e107cbef5e [Postfix] Fix sending as alias, when alias is in alias domains, cleanup 2017-10-11 11:22:52 +02:00
andryyy 57484e4a45 [Postfix] Log all watchdog activities to local7 facility 2017-10-11 11:21:41 +02:00
andryyy ec1e23ca71 [Assets] Move nextcloud files to subfolder nextcloud 2017-10-11 11:20:48 +02:00
andryyy 490e1c5001 [Web] Escape : in relayhosts 2017-10-09 20:31:08 +02:00
andryyy 2862b43c81 [Watchdog] Fix watchdog to fit non-exposed PHP 2017-10-09 15:54:54 +02:00
andryyy 6110ac386f [SOGo] Use official nightly; [PHP-FPM] Fix expose=off 2017-10-09 15:45:48 +02:00
andryyy 874aac3c5e [Nginx, PHP-FPM] Do not expose PHP version, example for nextcloud site, include custom locations to site (add site.something.custom to data/conf/nginx) 2017-10-08 22:57:34 +02:00
andryyy 72995ff98e [PHP-FPM] Include more modules for upcoming features and Nextcloud support, drop ro flag; [Watchdog] Some fixes and changes 2017-10-08 22:47:52 +02:00
André Peters 40506d3052 [Web] Add missing sync job option when admin 2017-10-07 22:10:56 +02:00
André Peters 668a05bdf1 [Web] Fixes #657 2017-10-07 22:09:44 +02:00
andryyy 7db5877644 [Web] Fixes #657 2017-10-07 22:08:08 +02:00
andryyy ef9953898c [ACME, Watchdog, DockerAPI] Use only limited Docker API 2017-10-06 13:32:49 +02:00
andryyy 3ae0b16845 [Web, DockerAPI] Be more like official Docker API 2017-10-06 10:20:40 +02:00
andryyy fc18d153cd [Compose, DockerAPI, Web, Watchdog] Watchdog may send notification mails (todo: docs), DockerAPI via Flesk for limited access 2017-10-05 23:38:33 +02:00
andryyy 9860d44d04 [Watchdog] Do also log errors to Redis if availble 2017-10-04 23:18:51 +02:00
andryyy 073c6c6e73 [Postfix/Rspamd] Do not reject unauthenticated sender mismatches but rewrite their subject and assign symbol SPOOFED_SENDER with score 1.0 2017-10-04 23:16:39 +02:00
andryyy 2dc8306b69 [Postfix] Remove old socket 2017-10-04 23:15:26 +02:00
andryyy 3de01afce0 [Web] Fixes #650 2017-10-04 19:01:46 +02:00
andryyy cc2f2afc62 [Web] Use Docker API for SOGo restart 2017-10-04 13:04:58 +02:00
andryyy 82ac5fa063 [SOGo] Remove supervisord API 2017-10-04 13:04:35 +02:00
andryyy 9b4ed6b21c [PHP-FPM] Include Docker api for better SOGo status handling and future changes 2017-10-04 13:04:15 +02:00
andryyy 4915375500 [Web] Fix duplicate key as result of race-condition when recreating mailbox while authentication in IMAP is cached and a mail arrives 2017-10-03 22:39:58 +02:00
André Peters d8636113dd Merge pull request #636 from mkuron/outlook
Preliminary support for Outlook 2016’s autodiscover.json
2017-10-03 21:23:59 +03:00
andryyy 24af77f41c [Web] Revert some autodiscover changes 2017-10-03 17:18:04 +02:00
andryyy da987e5b48 [Postfix] Forgot 'not' in filter 2017-10-03 16:54:18 +02:00
andryyy 6287a395b5 [Web] Revert some autodiscover changes, fix json_api for Postfix logs 2017-10-03 16:48:33 +02:00
andryyy c59d03fcb3 [Watchdog] Skip when use_watchdog=n 2017-10-03 12:07:48 +02:00
andryyy 68d7fa1504 [Watchdog] Skip when use_watchdog=n 2017-10-03 12:05:38 +02:00
andryyy 8c646f64b5 [Web] Autodiscover: Disable utf8_encode for displayname 2017-10-02 23:37:57 +02:00
André Peters e1ee1e848f Update autodiscover-json.php
HTTP_HOST is okay.
Syntax for consistency. :-)
2017-10-02 23:22:53 +02:00
andryyy bc33465b41 [Web] Autodiscover fixex (DAV path) 2017-10-02 22:46:55 +02:00
andryyy 5e69decd7b [Web] Temp. workaround for em Client which sends an empty user-agent 2017-10-02 22:19:20 +02:00
andryyy 9c37cd76e5 [Web] Autodiscover logs 2017-10-02 21:47:31 +02:00
andryyy 64c9691798 [Web] Autodiscover fixes 2017-10-02 19:07:14 +02:00
andryyy a837c9ab53 [Web] Better fkey handling in init_db; set body font size to 11pt instead of 14px; Changes to autodiscover functions 2017-10-02 15:58:55 +02:00
andryyy 7cb3c416cb Merge fix for prereq path 2017-10-01 20:34:37 +02:00
André Peters 42567a352c Should fix #644 2017-10-01 12:40:44 +02:00
Michael Kuron 752a571607 Merge pull request #638 from mkuron/acme
ACME needs to wait for MySQL to be ready
2017-09-28 12:58:07 +02:00
Michael Kuron ae79445ec0 ACME needs to wait for MySQL to be ready 2017-09-27 19:48:25 +02:00
Michael Kuron c731a18f66 Preliminary support for Outlook 2016’s autodiscover.json 2017-09-26 22:11:01 +02:00
andryyy 337c9e350e [Watchdog] Reset diff, new image 2017-09-22 16:40:02 +02:00
andryyy f257ed92f5 [Rspamd] Add missing ratelimit.conf 2017-09-21 22:21:11 +02:00
andryyy 62524150d2 [ACME] Add timestamps, check if acme account key is valid
[Postfix] Ignore local0
[Watchdog] Add Rspamd checks
2017-09-21 19:30:09 +02:00
andryyy edb2be979b [Postfix] Changes to ignore watchdog checks 2017-09-21 19:25:43 +02:00
andryyy fd3b2e5f16 [Rspamd] Changes to ignore watchdog checks 2017-09-21 19:25:17 +02:00
andryyy ab850dc901 [ACME] Detect and fix invalid registration 2017-09-21 09:46:09 +02:00
Phoenix Eve Aspacio 651c1cac23 Fixed broken link 2017-09-21 07:22:33 +08:00
andryyy 41d2a16571 [Watchdog] Script was not executable 2017-09-20 23:36:04 +02:00
andryyy 288a55b1f3 Merge branch 'dev' of https://github.com/mailcow/mailcow-dockerized into dev 2017-09-20 23:25:07 +02:00
andryyy f511cb0f63 [Watchdog] More fixes and or changes 2017-09-20 23:24:56 +02:00
andryyy fd1955edca [Fail2ban] Add variable name 2017-09-20 23:24:39 +02:00
andryyy ea5aa261c9 [Unbound] Define mailcow ip6 as private 2017-09-20 23:23:11 +02:00
Michael Kuron a411a357b9 rspamd: exclude Mail Flow monitoring from logs and stats 2017-09-20 15:21:02 +02:00
andryyy b6e84fac3a Sleep instead of stopping containers to prevent restarts 2017-09-20 12:50:50 +02:00
andryyy df5c79c3f1 Fixes for watchdog! 2017-09-20 12:27:24 +02:00
andryyy e70d5b9206 Fix watchdog 2017-09-20 11:05:23 +02:00
andryyy a8fb1d3f4f Add experimental watchdog 2017-09-20 10:56:49 +02:00
Michael Kuron 533f947074 Merge pull request #589 from marrco/master
Rspamd: better scores for mx_check symbols
2017-09-19 12:14:18 +00:00
Michael Kuron 68c87ce7a6 rspamd mx_check: composite symbol overrides individual scores 2017-09-19 14:12:10 +02:00
marrco 1fb4f34046 Update metrics.conf 2017-09-19 10:04:39 +02:00
marrco 5742e3b014 Update mx_check.conf 2017-09-19 10:00:50 +02:00
marrco 0752840369 Update mx_check.conf 2017-09-19 09:23:41 +02:00
marrco 9d611a903a Update metrics.conf 2017-09-19 09:21:36 +02:00
marrco 529c3bcc9c Create composites.conf 2017-09-19 09:19:22 +02:00
andryyy 4b39f667e2 [Postfix] Fix protocols 2017-09-18 11:00:11 +02:00
andryyy 719aa1a391 [Postfix] Fix protocols 2017-09-18 10:59:45 +02:00
andryyy 67056dc3d1 [Postfix] Less strict smtpd_tls_mandatory_protocols 2017-09-18 08:24:24 +02:00
andryyy 0cf22b64e1 [Postfix] Less strict smtpd_tls_mandatory_protocols 2017-09-18 08:23:31 +02:00
andryyy e07f84d0f0 [Web] Update phpmailer, always use correct path for vars.inc.php 2017-09-17 14:39:10 +02:00
andryyy e20f50fafc [Web] Fix spacing 2017-09-17 14:38:05 +02:00
andryyy d0c0cd4992 [Rspamd] Fix user settings... 2017-09-16 23:27:13 +02:00
andryyy fcc6bcc4b3 Merge branch 'dev' of https://github.com/mailcow/mailcow-dockerized into dev 2017-09-16 23:05:40 +02:00
andryyy 1b974bc8d1 [Compose] New images 2017-09-16 23:05:33 +02:00
André Peters 6d86813330 Merge pull request #610 from mkuron/rspamd-header
Rspamd user settings: fix matching From header
2017-09-16 23:00:38 +02:00
andryyy 750a2b8cef [Web] New feature: Show DKIM private keys - needs variable set to true in vars.local.inc.php 2017-09-16 22:59:42 +02:00
Michael Kuron e4f13568d1 Rspamd user settings: fix matching From header 2017-09-16 18:46:28 +02:00
andryyy c6f81fe67b [Web] Fix autodiscover merge on user.php 2017-09-16 13:33:27 +02:00
andryyy e20d31e440 Merge branch 'dev' of https://github.com/mailcow/mailcow-dockerized into dev 2017-09-16 13:17:59 +02:00
andryyy 2b97305f6d [ACME] Sleep, don't exit 2017-09-16 13:17:48 +02:00
andryyy 8741b5f3b1 [Compose] Enable some minimal inits, change or remove some health checks 2017-09-16 13:17:37 +02:00
André Peters 4acc82dbea Merge pull request #468 from mkuron/clientconfig4
Client configuration guide link
2017-09-16 13:11:54 +02:00
andryyy c63fb8b11a [Web] Init db fix for c_location 2017-09-15 07:55:23 +02:00
andryyy 762f18e913 [Clamd] Use Dockerds own init system 2017-09-14 23:13:24 +02:00
andryyy c75f16c97c [Web] Fix initial admin creation 2017-09-14 22:45:17 +02:00
andryyy 089e8776f5 [Postfix] Stricter TLS settings for mandatory connections 2017-09-14 13:34:23 +02:00
andryyy f0df390d12 [Nginx] Stricter TLS settings 2017-09-14 13:34:07 +02:00
andryyy 00e465a9a1 [Dovecot] Allow INBOX to be shared, sigh... fixes #594 2017-09-14 13:32:11 +02:00
marrco a2720cca83 Update mx_check.conf 2017-09-13 16:32:10 +02:00
54f6e50bb5 Merge branch 'master' of https://github.com/mailcow/mailcow-dockerized 2017-09-13 16:14:14 +02:00
andryyy 71070fbe86 [Web] Fix admin injection query 2017-09-12 22:48:12 +02:00
andryyy 998523bdfa [Web] Allow ratelimt per user, overrides domain tl 2017-09-12 20:57:54 +02:00
andryyy eeaa48a729 [PHP-FPM] Use valid user for mysqladmin ping
[SOGo] Use valid user for mysqladmin ping
2017-09-12 20:57:18 +02:00
marrco 1f9bafd578 Temporay fix to MX values
see https://github.com/mailcow/mailcow-dockerized/issues/576
2017-09-12 17:02:43 +02:00
andryyy 1ffed58956 [ACME] New version, better IPv4 detection 2017-09-11 21:51:17 +02:00
andryyy 2d0af3f486 [ACME] New version, better IPv4 detection 2017-09-11 21:49:22 +02:00
andryyy 92e6c9daae [Nginx] Fix SSL temp. 2017-09-11 17:37:25 +02:00
André Peters 013163bac9 Merge pull request #573 from cwildfoerster/serve-local-only
serve internet explorer js files too
2017-09-10 19:15:14 +02:00
Constantin Wildförster 82ed5e17b0
serve internet explorer js files too 2017-09-10 16:28:33 +02:00
Constantin Wildförster 65deb45f68
fixes #562 2017-09-10 16:11:55 +02:00
andryyy 3ab6fc21c6 [Web] Init user_acl after mailbox table 2017-09-10 13:48:53 +02:00
JOduMonT b2b9731020 a little bit of security
Hide the version of NGINX, block XSS and more...

inspired by : https://gist.github.com/plentz/6737338
2017-09-09 23:10:36 +07:00
André Peters 78c363b7a5 Merge pull request #565 from mkuron/softreject
Forwarding hosts: treat soft reject like greylist
2017-09-09 10:43:41 +02:00
Michael Kuron 3d9c161be1 Forwarding hosts: treat soft reject like greylist 2017-09-09 10:30:26 +02:00
andryyy ed4e8d301c Fix tabs 2017-09-08 18:41:02 +02:00
andryyy b8c4093702 [Web] Allow a spam score up to 2000, fixes #556 2017-09-07 20:20:36 +02:00
Tobias fcd0efc265 Change primary name of SSL certificate
Hostname as primary name for the SSL certificate, all other names will
be added as SAN
2017-09-03 19:41:47 +02:00
andryyy 1f90433429 [Dovecot, Postfix, SOGo] Fix redis log cleanup, fixes #542 2017-09-03 11:57:58 +02:00
andryyy 446907944a [Postfix] Fix missing ltrim 2017-09-01 23:40:23 +02:00
andryyy 008d500f4d [Compose, Dovecot] Fixed missing ltrim 2017-09-01 23:39:51 +02:00
andryyy 7351fcf1e3 [Compose, SOGo] New version, ltrim logs 2017-09-01 23:33:12 +02:00
andryyy 4d7bb26874 [Postfix] Add null rcpt for watchdog 2017-09-01 12:22:29 +02:00
andryyy 08d6b97ffa [Dovecot] New Dovecot and Pigeonhole versions; include delete2 option in imapsync 2017-08-31 10:36:10 +02:00
andryyy 4a0e3a433b [Fail2ban] Remove rule to detect disconnects without authentication 2017-08-30 22:27:33 +02:00
andryyy 3e741a0d9c [Web] Disable connectors in FooTable filter 2017-08-30 22:06:51 +02:00
andryyy cfd9316d74 Merge branch 'dev' of https://github.com/mailcow/mailcow-dockerized into dev 2017-08-30 21:43:45 +02:00
andryyy 9ebb9efeb1 [Web] Added Polish translation! Big thanks to Jan! 2017-08-30 21:43:35 +02:00
andryyy b1213c51d7 [Rspamd] Dynamic ratelimit fixed, removed async redis request; Ready to implement per-user ratelimits via UI (tbd) 2017-08-30 21:42:39 +02:00
André Peters 29acfe85db Merge pull request #536 from mkuron/patch-1
Rspamd user blacklist/whitelist improvements
2017-08-28 22:55:12 +02:00
Michael Kuron 8383ba5e9c Rspamd user settings: fix From header match
The request_header regex appears to not be expected to be encapsulated in slashes and does not seem to accept flags.
2017-08-28 20:27:53 +02:00
Michael Kuron fcd8cfa4f4 Rspamd user settings: don't print all email addresses of a domain
The ucl_rcpts function can already deal with domains, so lets use this capability.
2017-08-27 14:19:29 +02:00
Michael Kuron 93a092e627 Rspamd user settings: also match From header 2017-08-27 14:19:28 +02:00
Michael Kuron e178ca36de Rspamd user settings: make regexes case-insensitive
This is necessary because the user web UI normalizes to lowercase
2017-08-27 14:19:28 +02:00
Michael Kuron 0ad870fffe Merge branch 'dev' into dns2 2017-08-24 21:52:39 +02:00
andryyy 66ae588445 [Web] Started work on ACL, fix notifications 2017-08-18 22:18:14 +02:00
andryyy e47feeffd6 [Rspamd] Add custom directory for own files 2017-08-18 22:17:01 +02:00
andryyy 7a2c0f2ee7 [Acme] Skip backup mx domains 2017-08-18 09:57:25 +02:00
andryyy e5faee9037 [Nginx] Disable client_max_body_size 2017-08-09 10:17:32 +02:00
André Peters 92eefc1288 Merge pull request #486 from mkuron/patch-1
Disable ClamAV phishing filter
2017-08-02 15:54:16 +02:00
Michael Kuron dec64eef32 Disable ClamAV phishing filter
ClamAV has a phishing filter built in, but it generates too many false positives. We can disable it without risk because rspamd also checks for phishing itself.
2017-08-02 14:42:53 +02:00
andryyy 2eed7c05a1 [Dovecot] Push version, fix cronjob (fixes #310) 2017-08-01 14:02:00 +02:00
andryyy d85352fa9a [Dovecot] Use listescape 2017-07-31 12:41:18 +02:00
andryyy c7484434dd [Dovecot] Remove master.pid if not running; Check for active imapsync besides lock file; Reconnect MySQL connection in imapsync_cron.pl 2017-07-31 08:19:02 +02:00
andryyy 10b2ae09b9 [Web] Remove dev file 2017-07-30 21:40:40 +02:00
andryyy aabcf65c69 [Nginx] Set server_names_hash_bucket_size 64 2017-07-30 21:39:35 +02:00
andryyy 66e06a0c0c [Web] Sync jobs can be created/viewed/edited by admins/domain admins; Various fixes or improvements 2017-07-29 10:32:17 +02:00
andryyy 9be3aa3334 [Rspamd] Disable monitored 2017-07-27 09:03:44 +02:00
andryyy 3bd7383bca [Web] Add relay host testing tool 2017-07-26 23:11:43 +02:00
andryyy b4892f043f [Web] Edit relayhost 2017-07-26 23:11:08 +02:00
andryyy 45ef561ac0 [Web] Add default rcpt for relay testing tool to variables 2017-07-26 23:10:18 +02:00
andryyy 9bce8f0501 [Web] Fix session timeout 2017-07-26 23:09:50 +02:00
andryyy 5a49748dd5 [Web] Add graphs and stats to JSON api 2017-07-26 23:09:15 +02:00
andryyy 379933a333 [Web] Added PHPMailer for relayhost testing tool 2017-07-26 23:07:46 +02:00
andryyy 33bf9f5c5d [Rspamd] Push image version 1.5, Rspamd 1.6.3 2017-07-26 23:07:01 +02:00
andryyy 8da02378b1 [Rspamd] Use Nginx IP in settings map 2017-07-26 23:04:49 +02:00
andryyy 03c614f749 [Postfix] Use Nginx IP in whitelist_forwardinghosts.sh 2017-07-26 23:04:27 +02:00
andryyy b629089ff8 [SOGo] Rename reconf-domains to bootstrap-sogo and exec sogod after a successful bootstrap; Wait for SOGo to die and free listener 2017-07-24 23:25:04 +02:00
andryyy 5d5646df0c [Compose, SOGo] Update SOGo, give SOGo more time for a graceful restart, autorestart on any exit code 2017-07-24 22:53:23 +02:00
André Peters 0a6eef83bd Merge pull request #449 from mkuron/autoconfig
Autoconfig/Autodiscover unification
2017-07-24 12:58:53 +02:00
André Peters 1b719a8668 Update autoconfig.php 2017-07-24 12:37:02 +02:00