Quantcast
Channel: iRedMail — iRedMail Support
Viewing all 43393 articles
Browse latest View live

Re: How to reject spams like sender and recipient the same?

$
0
0
Pavel Zhe wrote:
iamapo wrote:

I'm pretty sure I have a SPF TXT record in my DNS zone for 'mydomain.com'。 Due to privacy, 'mydomain.com' is not my real domain name, you should know that。

Well, If you have SPF record, iRedAPD plugins 'greylisting','reject_sender_login_mismatch' should works for you.

Yes, iRedAPD plugins 'greylisting','reject_sender_login_mismatch'  work well on our server for a long time。


Re: iRedmail v0.9.9 move to iredmail docker

SSL_Accept error after certificate renewal

$
0
0

==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version (check /etc/iredmail-release):  2.5
- Deployed with iRedMail Easy or the downloadable installer? downloadable installer
- Linux/BSD distribution name and version: Ubuntu 20.04.2 LTS
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): Mysql
- Web server (Apache or Nginx):Nginx
- Manage mail accounts with iRedAdmin-Pro? no
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====

Initial error message:

postfix/submission/smtpd[7786]: connect from redacted.fqdn.com[0.0.0.0]
postfix/submission/smtpd[7786]: SSL_accept error from redacted.fqdn.com[0.0.0.0]: -1
postfix/submission/smtpd[7786]: warning: TLS library problem: error:1417A0C1:SSL routines:tls_post_process_client_hello:no shared cipher:../ssl/statem/statem_srvr.c:2283:
postfix/submission/smtpd[7786]: lost connection after STARTTLS from redacted.fqdn.com[0.0.0.0]
postfix/submission/smtpd[7786]: disconnect from redacted.fqdn.com[0.0.0.0] ehlo=1 starttls=0/1 commands=1/2

Backstory:

On this server we had two domains.
"domain.com"
"example.com"

domain.com does not exist anymore, however the lets encrypt certificate needed to be renewed.
So when i tried to renew the certificate for example.com it failed because it could not renew domain.com. So i removed domain.com from the lets encrypt certificate list and renewed example.com, and followed the instructions from docs[dot]iredmail[dot]org/letsencrypt to apply the symlinks and everything.

I checked that all services started and everything seemed to work.

Then a while after some colleagues reached out stating that older printers could no longer scan to email, and after checking the postfix logs while trying to scan to email i get the error mentioned above.

Some printers we fixed by using TLS 1.3 instead of 1.2, however i can see in the logs some newer machines using TLS 1.2 without an issue.

So my thought was that the old domain.com was the root issue, so i've spent some time cleaning the server from every mention of domain.com, however that did not resolve my issue.

And the main issue is that we've got some machines that we cannot use higher encryptions.
So the question is, why did this come up so sudden? Have lets encrypt started using higher ciphers or something?

I'm at my wits end, i've messed around with the server today, but cannot find a solution.

Any help would be much appreciated!

Re: How to reject spams like sender and recipient the same?

$
0
0

As i said, the mail account got hacked

Move from an old postfix server

$
0
0

==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version (check /etc/iredmail-release): 1.6.8
- Deployed with iRedMail Easy or the downloadable installer? installer
- Linux/BSD distribution name and version: Debian 12
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): MySQL
- Web server (Apache or Nginx):Nginx
- Manage mail accounts with iRedAdmin-Pro? no
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====
Hello all friends out there.

I have to move my mails from an old (very old) postfix server (which a linux crack did install and configure, I was able to manage that installation via linux-scratch)  to a new one and wanted to do his wih iRedMail. I have already rent a new (virtual) server and installed iRedMail successfully.

Now I thought I could point he old ip-address to the new one create the same  domain  and all users in IredMail and copy all content from the old .../Maildir/cur directory to the new one.

Could this work?

Re: how to set up iredmail on a web server

$
0
0

Why can't you have the name mail.example.com for the iRedMail server? Just name your website examle.com with www. or something else at the beginning and tell this to nginx.

Re: how to set up iredmail on a web server

ALLOWED_LOGIN_MISMATCH_LIST_MEMBER not working

$
0
0

Hello,

I've added users "sender@domain.kz" and "alias@domain.kz", then executed SQL-command (as described here: [I can't post links?])

INSERT INTO forwardings (address, forwarding,
                              domain, dest_domain,
                              is_alias, active)
                      VALUES ('sender@domain.kz', 'alias@domain.kz',
                              'domain.kz', 'domain.kz',
                              1, 1);

Then I edited

/opt/iredapd/settings.py

and added line

ALLOWED_LOGIN_MISMATCH_LIST_MEMBER=True

at the end of the file and restarted iredapd service

service iredapd restart

When trying to send mail from alias@optimus-kz.kz logged in as sender@domain.kz I'm still getting error "Sender is not same as SMTP authenticate username". What did I do wrong?


how to use existing nginx and php for iredmail web service

$
0
0

==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version (check /etc/iredmail-release):
- Deployed with iRedMail Easy or the downloadable installer?
- Linux/BSD distribution name and version:
- Store mail accounts in which backend (LDAP/MySQL/PGSQL):
- Web server (Apache or Nginx):
- Manage mail accounts with iRedAdmin-Pro?
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====

only find the tutorial for remote mysql

Re: ALLOWED_LOGIN_MISMATCH_LIST_MEMBER not working

$
0
0

Ok, I think I got this one. Confusion comes from two different pages on the topic in docs:

1) docs.iredmail.org/sql.create.mail.alias.html#create-mail-alias-account-with-sql-command-line

2) docs.iredmail.org/user.alias.address.html#sql-backend-manage-per-user-alias-addresses-with-sql-command-line

First one seems to have correct instructions. I should not add alias@domain.kz as a user, just add a row in "alias" table. Also in second one alias and sender seem to be mismatched in SQL example when inserting a row into "forwardings" table

Re: Move from an old postfix server

General Upgrade and Greylist Questions

$
0
0

1) We are on iRedMail v0.9.7 (iRedAdmin-Pro, v2.8.0 (MySQL)) on CentOS 7.  Can we upgrade directly to the latest build/release of iRedAdmin/iRedAdmin-Pro?  We paid for the original year's code and support, but not since, though we plan to buy the latest version again.

2) We cannot get Greylisting to whitelist all subdomains of a particular domain.  For example, if we put in @.salesforce.com, it only adds salesforce.com, both in the GUI and when using the python script in the OS.  Does the new version of iRedAdmin allow wildcard domain whitelisting in Greylisting?

New install question

$
0
0

==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version (check /etc/iredmail-release): 1.6.8
- Deployed with iRedMail Easy or the downloadable installer?
- Linux/BSD distribution name and version:
- Store mail accounts in which backend (LDAP/MySQL/PGSQL):
- Web server (Apache or Nginx):
- Manage mail accounts with iRedAdmin-Pro?
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====

This is not the very first time I have installed redmail, but this has bugged me  every time...


the installation instructions and the installer screen both have this warning - when setting up the first mail domain name it must not match the server host name.

So, if my server is named "mail.example.com", the first mail domain must be something different such as "mailserver.example.com"?

if my server name matches this - matches what I have set up in DNS for my future mailserver, then I need to rename the server?

I'm sure this is a dumb question, but why?

Re: New install question

$
0
0
iRedDale wrote:

This is not the very first time I have installed redmail, but this has bugged me  every time...


the installation instructions and the installer screen both have this warning - when setting up the first mail domain name it must not match the server host name.

So, if my server is named "mail.example.com", the first mail domain must be something different such as "mailserver.example.com"?

if my server name matches this - matches what I have set up in DNS for my future mailserver, then I need to rename the server?

I'm sure this is a dumb question, but why?

It’s mean that first domain name should be ‘example.com’ and server name ‘mail.example.com’

Re: Emails are re-downloading in outlook after migration on new server .

$
0
0

Are you using POP?
With IMAP I have not had this problem after migrating to my new server.


Re: New install question

$
0
0
Pavel Zhe wrote:

It’s mean that first domain name should be like ‘example.com’ and server name like ‘mail.example.com’

That's what I thought, but the instructions make me think the FQDN should be "server.example.com" and config should be for "mail.example.com"

It's the Screen about naming your first mail domain name -- it says the name "can *NOT* be the same as the server hostname:".

So if I want to set up mail.example.com, the server host name has to be any thing other than mail.example.com...

Re: New install question

$
0
0
iRedDale wrote:

So if I want to set up mail.example.com, the server host name has to be any thing other than mail.example.com...

Yes,you're right

Re: Move from an old postfix server

New Domain

$
0
0

==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version (check /etc/iredmail-release):      1.6.8
- Deployed with iRedMail Easy or the downloadable installer? installer
- Linux/BSD distribution name and version:  Debian 12
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): Mysql
- Web server (Apache or Nginx): Nginx
- Manage mail accounts with iRedAdmin-Pro? yes
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====

I want to add an existing domain to my iredmail Server.
I wanted to do this via:
How to Host Multiple Mail Domains in iRedMail with Nginx

I Have already changed the Zone File and

>host mail.new-server.de shows the right ip-address.

now I tried to follow the steps in the above Howto and added the lines in the /etc/amavis/config.d/50-user file, but when I try to restart the amavisd daemon (with amvis restart), I get:

Error in config file "/etc/amavis/conf.d/50-user": Can't locate object method "DKIM" via package "0" (perhaps you forgot to load "0"?) at /etc/amavis/conf.d/50-user line 495.

line 495 is read:
DKIM

Does anybody know what's wrong?

postfix turns user@my.domain into user@host.my.domain

$
0
0

==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version: 1.6.8 PGSQL edition
- Deployed with iRedMail Easy or the downloadable installer: yes
- Linux/BSD distribution name and version: Debian GNU/Linux 12 (bookworm)
- Store mail accounts in which backend: PGSQL
- Web server: Nginx
- Manage mail accounts with iRedAdmin-Pro: no
====

Hello there,

I recently set up iRedMail and linked it to my domain (FreeIPA) via LDAP. So far, everything is working quite well. The only thing that does not work is sending and receiving mails via alias addresses that do not correspond to the user name before the @. To change this, I have tried to add an alias mapping. For this I have:

1. extended the virtual_alias_maps line in /etc/postfix/main.cf:

virtual_alias_maps = proxy:ldap:/etc/postfix/ad_virtual_group_maps.cf, proxy:ldap:/etc/postfix/ad_alias_maps.cf

2. create the file /etc/postfix/ad_alias_maps.cf:

server_host     = ipa-dc.my.domain
server_port     = 389
version         = 3
bind            = yes
start_tls       = yes
bind_dn         = uid=ldap_reader,cn=users,cn=accounts,dc=green,dc=local
bind_pw         = [ldap_readers pw]
search_base     = cn=users,cn=accounts,dc=green,dc=local
scope           = sub
query_filter    = (&(mail=%s)(objectClass=person)(memberOf=cn=mail_user_group,cn=groups,cn=accounts,dc=green,dc=local))
result_attribute= uid
debuglevel      = 0

With

postmap -q mars@green-x.net ldap:/etc/postfix/ad_alias_maps.cf

I could make sure that the mapping works the way I want it to. But as soon as I activate this configuration by reloading, the postfix always makes user@my.domain to user@mailserver.my.domain and the mail delivery fails. Without the additional alias mapping, it does not do this and I can send and receive mails to the standard addresses.

Can anyone give me a clue as to why this is happening?

Best regards and nice weekend

Viewing all 43393 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>