Re: Disable Sogo web interface?

September 26, 2018, 12:10 am

≫ Next: Re: Mailing list bcc/ccn problem

≪ Previous: Re: AWStats

$

0

0

smiller50 wrote:

What would be the best way to disable the Sogo web interface while still preserving full functionality (Push, Calendar, etc.) for ActiveSync clients?

If you want to keep the calendar/contacts/activesync services, you can NOT comment out sogo template in Nginx config file.

Instead, you can add SOGo parameter "ModulesConstraints" (in /etc/sogo/sogo.conf) to disable Mail function.
FYI: https://sogo.nu/files/docs/SOGoInstallationGuide.html (Search "ModulesConstraints", there're 2 matched search result for LDAP, 2 for SQL)

---

Re: Mailing list bcc/ccn problem

September 26, 2018, 1:08 am

≫ Next: Re: Veriy SpamAssassin

≪ Previous: Re: Disable Sogo web interface?

$

0

0

ZhangHuangbin wrote:

It's not about how you send email to mailing list.
Mailing list members always see the mailing list email address as sender.

Mailing list members have see sender1@mydomain.com as sender and not ML, in some email ( some members are my collegue ) in the headers there is Reply-To: with the ML address, but sender1@mydomain.com have not set it.

Re: Veriy SpamAssassin

September 26, 2018, 1:20 am

≫ Next: Re: MAIL SERVER High Availability

≪ Previous: Re: Mailing list bcc/ccn problem

$

0

0

I have now confirmed that when a mail is moved from the inbox to the spam folder, then numbers in the database is in fact going up for the specific user.

Before:

mysql> select * from bayes_vars;
+----+-------------------------+------------+-----------+-------------+-------------+------------------+--------------------+-
| id | username                | spam_count | ham_count | token_count | last_expire | last_atime_delta | last_expire_reduce | 
+----+-------------------------+------------+-----------+-------------+-------------+------------------+--------------------+-
|  1 | amavis                  |         29 |      2946 |      153707 |  1537917844 |          2764800 |               1963 | 
|  2 | user1@mydomain.com      |          1 |         0 |         123 |           0 |                0 |                  0 | 
|  3 | user2@mydomain.com      |        200 |        18 |       18949 |           0 |                0 |                  0 | 
|  4 | user3@mydomain.com      |        713 |         4 |       58495 |           0 |                0 |                  0 | 
|  5 | user4@mydomain.com      |          0 |         3 |        1005 |           0 |                0 |                  0 | 
+----+-------------------------+------------+-----------+-------------+-------------+------------------+--------------------+-

Now:

+----+------------------------------+------------+-----------+-------------+-------------+------------------+--------------------+-
| id | username                    | spam_count | ham_count | token_count | last_expire | last_atime_delta | last_expire_reduce | 
+----+-----------------------------+------------+-----------+-------------+-------------+------------------+--------------------+-
|  1 | amavis                         |         29 |      2958 |      155579 |  1537917844 |          2764800 |               1963 | 
|  2 | user1@mydomain.com  |          1 |         0 |         123 |           0 |                0 |                  0 | 
|  3 | user2@mydomain.com  |        200 |        18 |       18949 |           0 |                0 |                  0 | 
|  4 | user3@mydomain.com  |        719 |         4 |       58679 |           0 |                0 |                  0 | 
|  5 | user4@mydomain.com  |          0 |         3 |        1005 |           0 |                0 |                  0 | 
+----+-------------------------+------------+-----------+-------------+-------------+------------------+--------------------+-

But still it seems like Amavis is only looking into ID 1 (amavis) when scanning mails. Below from the log:

Sep 26 10:03:42 mail amavis[24995]: (24995-20) SA dbg: bayes: database connection established
Sep 26 10:03:42 mail amavis[24995]: (24995-20) SA dbg: bayes: found bayes db version 3
Sep 26 10:03:42 mail amavis[24995]: (24995-20) SA dbg: bayes: Using userid: 1
Sep 26 10:03:42 mail amavis[24995]: (24995-20) SA dbg: bayes: not available for scanning, only 29 spam(s) in bayes DB < 200

Any ideas to how I can get Amavis to look in the individual user row?

Re: MAIL SERVER High Availability

September 26, 2018, 3:28 am

≫ Next: https_error

≪ Previous: Re: Veriy SpamAssassin

$

0

0

jstewart wrote:

There is some documentation here:
https://docs.iredmail.org/haproxy.keepa … terfs.html
https://pastebin.com/JcYeQBrX

These links are from the iRedMail Doc page: https://docs.iredmail.org/index.html

saquib.akhtar wrote:

- iRedMail version (check /etc/iredmail-release): 0.9.8
- Linux/BSD distribution name and version: Cent OS 7.4
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): PGSQL
- Web server (Apache or Nginx):Nginx
- Manage mail accounts with iRedAdmin-Pro? yes, 2.9.0
#########################################################################

Currently our mail server has only one leased line connectivity and we are planning failover to another leased line provider.
How can we achieve this, means like configuring MX , A record and what all other things needs to be done apart from network set up ?

I already saw those documents, except for the second link.
But my question is still same:
I have one server and two WAN network and I want to create failover for network, as soon as the first network goes down, the mail server runs using second WAN connectivity, so I just need to know configuring MX , A record and what all other things needs to be done apart from network set up ?

https_error

September 26, 2018, 4:20 am

≫ Next: Re: No DKIM when sending through SMTP

≪ Previous: Re: MAIL SERVER High Availability

$

0

0

Hi Community Members'
I hope you are doing well. I have successfully installed iredmail but observing an issue related to https_error. Error message has been attached, please review and advise accordingly.

Kind Regards'
Azib.
==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version (check /etc/iredmail-release):
- Linux/BSD distribution name and version:
- Store mail accounts in which backend (LDAP/MySQL/PGSQL):
- Web server (Apache or Nginx):
- Manage mail accounts with iRedAdmin-Pro?
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====

Re: No DKIM when sending through SMTP

September 26, 2018, 5:24 am

≫ Next: Re: https_error

≪ Previous: https_error

$

0

0

ZhangHuangbin wrote:

igor.denyagin wrote:

- Linux/BSD distribution name and version: Ubuntu 18.04

Bug of Amavisd in Ubuntu 18.04:
https://bugs.launchpad.net/debian/+sour … ug/1770532

You can find patch(es) in above link. Help push package maintainer to merge the patch and release a new Amavisd version.

Thanks for answer. It works now!
Why you can add this bugfix into install package? It can be fast workable variant of solving this problem with amavisd-new 2.11 where it's not patched by maintainer.

Re: https_error

September 26, 2018, 5:56 am

≫ Next: Re: How to disable https

≪ Previous: Re: No DKIM when sending through SMTP

$

0

0

Hello.

Install valid SSL (not self-signed) certificate for all the daemons needed (nginx or Apache in your case) per the instruction below.
https://docs.iredmail.org/use.a.bought. … t-ssl-cert

You may install SSL certificates for all other services per the same instruction.

Kindest Regards.

Re: How to disable https

September 26, 2018, 5:58 am

≫ Next: Re: What are the steps to configure 2 mail domains on different hosts

≪ Previous: Re: https_error

$

0

0

whmemon wrote:

Can you tell me turorial link for that?

ZhangHuangbin wrote:

How about request a free letsencrypt ssl cert to make the ssl connection valid? it will be better for network security.

https://docs.iredmail.org/use.a.bought. … t-ssl-cert

---

Re: What are the steps to configure 2 mail domains on different hosts

September 26, 2018, 6:01 am

≫ Next: Install Error - dialog has no installation candidate

≪ Previous: Re: How to disable https

$

0

0

Hello.

You should install DNS server inside your network (i guess it's LAN as per your ip format) or hardcode ip and dns names in the /etc/hosts on the both servers to make them know about each other without dns.

Kindest Regards

Install Error - dialog has no installation candidate

September 26, 2018, 8:19 am

≫ Next: Re: Install Error - dialog has no installation candidate

≪ Previous: Re: What are the steps to configure 2 mail domains on different hosts

$

0

0

==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version (check /etc/iredmail-release): 0.9.8
- Linux/BSD distribution name and version: Ubuntu 18.04 LTS
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): NA
- Web server (Apache or Nginx): NA
- Manage mail accounts with iRedAdmin-Pro? No
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====
While trying to conduct the initial:
E: Package 'dialog' has no installation candidate
[ INFO ] Checking configuration file: /root/iRedMail-0.9.8/config ...[ INFO ] NOT FOUND. Launching installation wizard.
/root/iRedMail-0.9.8/dialog/config_via_dialog.sh: line 44: dialog: command not found
[ INFO ] Exit.

Tried installing dialog manually:

apt install dialog
Reading package lists... Done
Building dependency tree
Reading state information... Done
Package dialog is not available, but is referred to by another package.
This may mean that the package is missing, has been obsoleted, or
is only available from another source
E: Package 'dialog' has no installation candidate

Thanks for the assist!

Greg

Re: Install Error - dialog has no installation candidate

September 26, 2018, 8:30 am

≫ Next: Re: install iRedMail-0.9.8 on fresh FreeBSD 11.2

≪ Previous: Install Error - dialog has no installation candidate

$

0

0

This has been resolved:

The live server edition of Ubuntu 18.04 needs to update its sources list.

Run the command...

sudo add-apt-repository universe

...before you start the iRedmail installer.

Regards,

Greg

Re: install iRedMail-0.9.8 on fresh FreeBSD 11.2

September 26, 2018, 8:58 am

≫ Next: Blocking Fake Emails

≪ Previous: Re: Install Error - dialog has no installation candidate

$

0

0

it could  be that the $PATH variable for your interactive shell is not the same as what iRedMail uses for its installs etc

try /usr/local/bin/file  -b -L --mime-type /usr/local/lib/libicuuc.so to see what  you get

Blocking Fake Emails

September 26, 2018, 10:36 am

≫ Next: Blocking certain types of attachments from external address only

≪ Previous: Re: install iRedMail-0.9.8 on fresh FreeBSD 11.2

$

0

0

iRedMail v0.9.8 MySQL Nginx

I am having two spam/phishing issues lately and I cannot seem to get ahead of it.  The main issue is fake emails, where the From name shows an employee's name but the email address is some random email.  Those are passing all the SPF and Blacklist rules, mostly because they are hacked, valid email accounts and they simply change the From Name that is shows.  Lately a new one is that the from is showing a real email as the name, but then a fake email underneath it.  This is what I really want to block.

Example: realemail@domain.com <fakeemail@randomdomain.com>

Since most email clients show the Name and not the email, recipient think its from the real email address.  Is there a regex I could put in Amavis to block the @ sign or even domain.com in the from side not including the actual email?

Is there a way to look up names to see if they exist locally and soft blacklist them?

Example:  Real Name <fakeemail@randomdomain.com>

If "Real Name" exists in the DB or even in a manually created file, but is external it would add Spamassassin points or soft black list.

Blocking certain types of attachments from external address only

September 26, 2018, 10:38 am

≫ Next: Re: install iRedMail-0.9.8 on fresh FreeBSD 11.2

≪ Previous: Blocking Fake Emails

$

0

0

iRedMail v0.9.8 MySQL Nginx

Is there a way to block all .DOC files or any specific attachment extensions but only from emails that arrive externally?

Re: install iRedMail-0.9.8 on fresh FreeBSD 11.2

September 26, 2018, 12:26 pm

≫ Next: Re: Upgrade iRedMail-0.9.8

≪ Previous: Blocking certain types of attachments from external address only

$

0

0

I have realized... There are two  file tools. First one is built into the system and is located in /usr/bin/file. Second one is building from ports by iredmail.sh and puts to /usr/local/bin/file. The first and the one that in pkg repository (have update it just now) have version 5.32. The second one - version 5.34.
So, when iredmail.sh has stoped on postfix install, I've delete file-5.34 and re-run script and it has begun to install postfix. Now it's installing further... Will report on result )

---

Re: Upgrade iRedMail-0.9.8

September 26, 2018, 1:17 pm

≫ Next: mail rejected caused by using UTF-8 charcter set

≪ Previous: Re: install iRedMail-0.9.8 on fresh FreeBSD 11.2

$

0

0

Thanks for your reply. I have another question: it says in the release notes that "Apache has been removed, Nginx is the only one web server available", however, I could not fond any specific instructions for this. Will this be done automatically once I follow the other upgrade instructions?

ZhangHuangbin wrote:

Skip iRedAdmin-Pro first and finish other steps, then upgrade iRedAdmin-Pro at the end.

mail rejected caused by using UTF-8 charcter set

September 26, 2018, 2:16 pm

≫ Next: Re: Blocking Fake Emails

≪ Previous: Re: Upgrade iRedMail-0.9.8

$

0

0

I got this problem that 1 email sent from hotmail to my iredmail server is rejected by the character set.

Strange to detect this problem.

This is the first time i recieved this problem.

In the screenshot she send me, it's not clear i need to change something @ my end or does the sender needs to change something.

Can you clear this out for me.

Thanks in advance

Re: Blocking Fake Emails

September 26, 2018, 3:55 pm

≫ Next: Re: Disable Sogo web interface?

≪ Previous: mail rejected caused by using UTF-8 charcter set

$

0

0

I'm having the same issue. I'm receiving emails with the header From: EmailUser <user@domain.com><fake@fakedomian.com> and .doc attachments. Amavis seems to not block them or even mark them as spam.

Re: Disable Sogo web interface?

September 26, 2018, 4:53 pm

≫ Next: Re: mail rejected caused by using UTF-8 charcter set

≪ Previous: Re: Blocking Fake Emails

$

0

0

Well this is turning out to be more difficult than I would have expected. You're correct, commenting out the Sogo template reference breaks MS Exchange connections for clients. The Sogo "ModulesConstraints" parameter is effective in that it will delete Mail and Calendar access from the Sogo web interface, but it does not completely disable the web interface as the 'Address Book' function is still available (along with ability to change password, etc.) and oddly enough there appears to be no way to delete the Address Book web functionality. The only reference I could find indicates as such and while it is from 2012 and refers to Sogo 2 it still seems accurate in that the Address Book page apparently still cannot be deleted by ModulesConstraints. (https://lists.inverse.ca/sogo/arc/users … 00090.html)

There seems to be many configurable options for the web interface at https://sogo.nu/files/docs/SOGoInstallationGuide.html but as far as I can tell no way to simply disable it entirely. This means that the Sogo web page still remains as an unnecessary security exposure with no way to disable it..? That makes 2FA for Roundcube kinda useless if someone can just go to the Sogo web page and login with a compromised password.

Surely there must be an answer to such a simple thing as disabling the web interface but I am unable to find it (at least in a way that does not also break Exchange functionality for clients.)

Re: mail rejected caused by using UTF-8 charcter set

September 27, 2018, 12:13 am

≫ Next: Re: mail rejected caused by using UTF-8 charcter set

≪ Previous: Re: Disable Sogo web interface?

$

0

0

ok i got the bounce mail content

The message couldn't be delivered because it contains characters that the recipient's email server doesn't recognize.
To fix this, set your email program to send messages using a different character set than UTF-8. In Outlook, for example, you can make this change in Options > Advanced > International options, then resend the message. If the problem continues, forward this message to your email admin.
For Email Admins
This issue occurred because the message was sent using the UTF-8 character set, which the receiving email system doesn't support. To fix this, the sender can try sending the message using a different, supported character set. Or if their mail server supports it, you can ask the recipient's email admin to configure their mail server to advertise support for SMTPUTF8, as specified in RFC 6531. 
For more information, see Error code 5.1.17 in Exchange Online and Office 365.

with link to Error code 5.1.17 in Exchange Online and Office 365.