I think you have mentioned that, you can only send e-mails when you are "on the local networks". Does that mean your server is actually deployed in your home, and it is not exposed to Internet? If so, you will probably like to learn about the IMAP/POP3 ports that any mail client such as ThunderBird will need to access.
↧
Re: Second mail account can't send emails using Thunderbird
↧
Re: Postfix accepts trash mail even if sasl is enabled in configuration
why did you enable auth on port 25?
and why do you use the server on a local network?
iredmail by default prevents sending unauth mails, and aswell login on port 25, if you have such problems, then they are caused by your modifications
↧
↧
Re: Postfix accepts trash mail even if sasl is enabled in configuration
Cthulhu wrote:
why did you enable auth on port 25?
and why do you use the server on a local network?
iredmail by default prevents sending unauth mails, and aswell login on port 25, if you have such problems, then they are caused by your modifications
Without auth, my server can easily be used as a open relayhost. The reason why I need to use a local server, is because that my VPS cannot afford the work load of Virus scanners.
Which causes the problem: The postfix daemon won't reject any relay from INTERNET, because they are all coming from LOCALHOST. Please let me know if you have any idea how to solve the problem, thanks in advance!
↧
How to make Roundcube use SASL?
Hello, for some reasons, I have to remove "permit_mynetworks" from my postfix configuration file, in csae of somebody abuse it. But it also makes Roundcube cannot send mails, because all relay requests from localhost will be denied. I have set "permit_sasl_auth" in the same section, but how do I make round cube to use them?
Thanks in advance. There might be something wrong in my description, please let me know if you have any idea!
↧
Thank you
After many successful years of relying on iRedMail, I have today shut down the last of my servers running it.
I just wanted to post a big thank you to both Zhang and all the users of this forum who have helped me with issues over the years, it really has been appreciated.
iRedMail is a great solution, it has served me very well.
Thanks.
↧
↧
Re: SOGO is not showing mailbox after restoring
when you restore an old database which has a different database structure, you need to run the database update script afterwards
since it is related to enablesogoactivesync, i guess this is the correct one:
https://docs.iredmail.org/upgrade.iredm … 1.4.2.html
-> https://raw.githubusercontent.com/iredm … mail.mysql
since the column is unknown, you aswell need to use the script which added it.
you need to know which release you had when you made a backup and then update one by one to the newest to get it to work
↧
Re: Spam Tests not Running? (amavis & SA are logging..)
ZhangHuangbin wrote:
eddie wrote:- iRedMail version (check /etc/iredmail-release): 2021091301 (Backend: mysql, Date: 2021-12-12 23:16:00) iRedMail Easy: https://www.iredmail.org/easy.html
- 2021091301 is very old, why don't you upgrade?
- The log says "Hits: -", which means spam scanning was not performed due to some reason (for example, whitelisting, or no spam scanning enabled at all).
- Please login to iRedMail Easy platform (https://easy.iredmail.org/) and double check whether you have spam/virus scanning enabled.
Making the changes I mentioned to custom worked.
====
Mar 30 02:35:17 mail amavis[567948]: (567948-18) Blocked SPAM {DiscardedInbound,Quarantined}, [165.232.156.229]:49362 [104.238.248.109] ESMTP/ESMTP <dgkkhex@mindsanctuary.net> -> <ME>, (ESMTPS://[165.232.156.229]:49362 < ESMTP://104.238.248.109), quarantine: GQ-D-tEwnJbX, Queue-ID: 4KSrBX5Qy5z1wMg, mail_id: GQ-D-tEwnJbX, b: Ea0zlhygQ, Hits: 8.41, size: 1262, Subject: "Email lists 100% VALID - Any country in the world", From: <dgkkhex@mindsanctuary.net>, helo=mail.mindsanctuary.net, Tests: [BIGNUM_EMAILS_FREEM=1.482,BIGNUM_EMAILS_MANY=2.999,FREEMAIL_FORGED_REPLYTO=2.503,MISSING_MID=0.14,NA_DOLLARS=0.001,RCVD_IN_DNSWL_HI=-5,RCVD_IN_PSBL=5,RCVD_IN_VALIDITY_RPBL=1.284,SPF_HELO_NONE=0.001,T_SCC_BODY_TEXT_LINE=-0.01,T_SPF_PERMERROR=0.01], autolearn=no autolearn_force=no, autolearnscore=8.41, 699 ms
====
I installed with easy initially but can't afford the ongoing monthly fees for my personal email, so I had to cancel my subscription which prevents me from accessing site or updating outside manual process right?
↧
Virus scanning
==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version (check /etc/iredmail-release): 1.5.1
- Deployed with iRedMail Easy or the downloadable installer? installer
- Linux/BSD distribution name and version: centos 7
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): mysql
- Web server (Apache or Nginx):
- Manage mail accounts with iRedAdmin-Pro? yes
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====
Good day.
I got 2 mail servers: srv1 and srv2 with several domains on each server.
In amavis/clamav settings i enabled to block Encrypted archives and OLE2 files with macros.
If i send such file from srv1 to srv2 or back, clamav on destination side blocks those mails as it should.
How can i check outgoing emails, so that they will be blocked upon sending?
The solution will probably help to solve another issue:
If i send email with those attachments within srv1 (from user to another user) the mail is not blocked, so clamav is not scanning it.
↧
Roundcube cannot send mail anymore after I removed "permit_mynetwork"
Hello guys, I have a server that needs to forbid local network requests of using postfix relay, so I decided that I should set up SASL for iRedmail.
As I modified "smtpd_relay_restrictions" to permit_sasl_auth, the Roundcube web interface cannot send mail anymore, which suggests that Roundcube was never configured to use SASL authentication when using local postfix relay.
So the problem is, how should I fix it? Please let me know if you have any idea, thanks in advance!
↧
↧
Re: Roundcube cannot send mail anymore after I removed "permit_mynetwork"
you cannot send mail without smtp auth, even roundcube cannot do this, only possibility is mail sent from a local user via sendmail
logging in with roundcubse uses SASL trough plain password over TLS
↧
Re: Iredadmin Won't Open
in case anyone has the same problem.
Reinstall only iRedAdmin.x.y and work.
https://docs.iredmail.org/migrate.or.up … admin.html
↧
Re: Roundcube cannot send mail anymore after I removed "permit_mynetwork"
Cthulhu wrote:
you cannot send mail without smtp auth, even roundcube cannot do this, only possibility is mail sent from a local user via sendmail
logging in with roundcubse uses SASL trough plain password over TLS
Thanks for your reply!
I must have misunderstood something about how Roundcube works.
Here, what I did was adding restrictions to Postfix relay restrictions, and my configuration was like below:
-------------
smtpd_relay_restrictions =
permit_sasl_authenticated,
reject
-------------
Which is expected to reject all relay requests without SASL auth. And now, any mail sent by Roundcube will be rejected and returned with the following reason:
-------------
<test1@outlook.com>: host 127.0.0.1[127.0.0.1] said: 554 5.7.1
id=17952-14 - Rejected by next-hop MTA on relaying, from
MTA(smtp:[127.0.0.1]:10025): 554 5.7.1 <test1@outlook.com>: Recipient
address rejected: Access denied (in reply to end of DATA command)
-------------
Implied from "in reply to end of DATA command", I think it is due to the rejection of non-SASL-authed request.
But how should I fix it? Please let me know if you have more ideas, thanks!
↧
Re: Roundcube cannot send mail anymore after I removed "permit_mynetwork"
why you restrict your local network from sending mails at all?
since you relay on your own network (normally localhost trough amavis), you should not modify this setting at all to avoid such behaviour
↧
↧
Re: Roundcube cannot send mail anymore after I removed "permit_mynetwork"
Cthulhu wrote:
why you restrict your local network from sending mails at all?
since you relay on your own network (normally localhost trough amavis), you should not modify this setting at all to avoid such behaviour
I hate to admit, but there is a NAT client running on this server. Blackmailers made it to detect my domain and stroke port 25 with 70K+ queued mails as it accepts "mynetworks". Any connection coming from NAT client is Local, so I must disable it to get rid of the risks.
↧
Re: Roundcube cannot send mail anymore after I removed "permit_mynetwork"
then get a vps with a dedicated ip and a proper ptr
↧
Re: Bulk Undelivered mails Recieving from null sender.
Cthulhu wrote:
they are actually sent from your server, since the logins are working
some of the mailboxes got hacked and the password leaked
aswell:
https://www.abuseipdb.com/check/212.192.241.9the conecction issuce coems from a known abuseive IP which trys to brute force mailboxes, but fail2ban should handle those pregreets, didn't you set this up?
mails which are bounced back is not send from my server, only bounced mails are delivered from my server.
fail2ban setup but why it is not handle this.
↧
Fail2Ban script error
==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version (check /etc/iredmail-release): 1.5
- Deployed with iRedMail Easy or the downloadable installer? downloadable
- Linux/BSD distribution name and version: Debain bullseye
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): MySQL
- Web server (Apache or Nginx): Nginx
- Manage mail accounts with iRedAdmin-Pro? No
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====
In Fail2Ban log i have this error :
2022-04-04 11:11:49,766 fail2ban.utils [210747]: ERROR 7f70d29d1b70 -- exec: iptables -w -N f2b-postfix
iptables -w -A f2b-postfix -j RETURN
iptables -w -I INPUT -p tcp -m multiport --dports http,https,smtp,submission,pop3,pop3s,imap,imaps,sieve -j f2b-postfix
2022-04-04 11:11:49,766 fail2ban.utils [210747]: ERROR 7f70d29d1b70 -- stderr: 'iptables: Chain already exists.'
2022-04-04 11:11:49,766 fail2ban.utils [210747]: ERROR 7f70d29d1b70 -- stderr: "iptables v1.8.7 (nf_tables): Couldn't load match `multiport':No such file or directory"
2022-04-04 11:11:49,766 fail2ban.utils [210747]: ERROR 7f70d29d1b70 -- stderr: ''
2022-04-04 11:11:49,766 fail2ban.utils [210747]: ERROR 7f70d29d1b70 -- stderr: "Try `iptables -h' or 'iptables --help' for more information."
2022-04-04 11:11:49,766 fail2ban.utils [210747]: ERROR 7f70d29d1b70 -- returned 2
2022-04-04 11:11:49,766 fail2ban.actions [210747]: ERROR Failed to execute ban jail 'postfix-iredmail' action 'iptables-multiport-postfix' info 'ActionInfo({'ip': '212.70.149.72', 'family': 'inet4', 'fid': <function Actions.ActionInfo.<lambda> at 0x7f70d29dba60>, 'raw-ticket': <function Actions.ActionInfo.<lambda> at 0x7f70d29d6160>})': Error starting action Jail('postfix-iredmail')/iptables-multiport-postfix: 'Script error'
How to debug / fix this ?
↧
↧
Re: Bulk Undelivered mails Recieving from null sender.
i have change the password still getting so much undelivered mails. please help.
↧
Dropping a database and migrating to a new server
==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version (check /etc/iredmail-release): 0.9.5-1
- Deployed with iRedMail Easy or the downloadable installer? downloadable
- Linux/BSD distribution name and version: CentOS 7
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): MySQL
- Web server (Apache or Nginx): Apache
- Manage mail accounts with iRedAdmin-Pro? No
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====
I'm long behind on updating iRedMail and I need to switch from CentOS 7 anyway. I've built a new Rocky Linux 8 server and installed iRedMail and verified it's working. The next step is to migrate the data and to do that I need to bring my existing server database up to the current iRedMail version. As I understand it I don't need to update any of the software, just make the database changes, but I thought I'd do the full upgrade process anyway so I can take longer to update without having to disable email.
I reviewed my notes from previous updates and noticed that at one of them I was supposed to remove cluebringer. I wasn't sure how to do that at the time and forgot to got back and revisit it. How do I remove cluebringer?
Also as I'm so far back are there any issues I should watch out for? My server is a VM so my plan was to snapshot and test between each update.
↧
Re: Dropping a database and migrating to a new server
gluebringer was removed long long time ago and isn't used anymore at all, and in therory the only thing you need to import is the vmail database go get it to work (and copying the /var/mail/vmail1" since it includes all the mailboxes)
↧