Here's a simple tutorial to achieve quarantining SPAM messages with Amavisd. Please help test it. If no other issue, i will consider achieve it in iRedMail-0.7.0, and improve iRedAdmin-Pro to manage quarantined messages.

- Quarantining Messages
  http://www.iredmail.org/wiki/index.php? … g.Messages

There's a new FAQ tutorial available in our wiki:

- Integrate MySQL in Amavisd
  http://www.iredmail.org/wiki/index.php? … in.Amavisd

With MySQL integration, Amavisd can lookup per-user whitelist/blacklist and other policies from MySQL, and store incoming & outgoing email information in MySQL For example, mail size, sender/recipient, subject.

Enjoy.

iRedAdmin-Pro-1.2.0 is available for upgrade and purchase. We'd like to hear from you, tell us what you want to be available in next release - iRedAdmin-Pro-1.3.0.

Also, if you're using iRedMail with MySQL backend, will you purchase iRedAdmin-Pro for MySQL backend when it's available?

Thanks very much.

========= Collected Items ==============

• Batch import accounts

• In Progress: Ability to manage global blacklist/whitelist.

• COMPLETED: Add new value of enabledServices. Document available: How to add custom services

• COMPLETED: User alias support. Same as "Nickname" in Google apps

• COMPLETED: Domain alias support

• COMPLETED: Per-domain quota size limit support

* Emails sent to alias account addresses will be delivered to same mailbox.
* Email address of alias account must end with your domain name or alias domains.

iRedMail-0.6.1 is now available for download, upgrade tutorial is ready too. Please tell us what you expect in next release, iRedMail-0.7.0.

Highlights in 0.6.1:

• Supports Ubuntu 10.04 LTS. 10.04 is recommended version if you want to deploy iRedMail on Ubuntu.

• Catch-all account support in MySQL backend.

• Run iRedAdmin & iRedAPD as a low privilege user.

Useful links:

• Download now: http://www.iredmail.org/download.html

• Release Notes: http://iredmail.org/wiki/index.php?titl … Mail/0.6.1

• Upgrade tutorial is ready: Upgrade iRedMail-0.6.0 to 0.6.1

• We hope iRedMail users can donate us to make iRedMail continue exist and keep active.

• You can also get Remote Installation and Remote Upgrade Support from developers if you're not familiar with unix command line.

• Buy iRedAdmin-Pro (web-based iRedMail management tool) to make your life easy: Features, Demo, Purchase.

We need your help to test the latest iRedMail, which focus on supporting Ubuntu 10.04 (lucid, LTS). Please download it here directly and help test it with  Installation guide.

We already tested it with Ubuntu 10.04 (x86_64 edition), currently, most of components are working as expected, but two issuses remained:

• Apache doesn't work with SSL.

• You must run 'freschclam' manually before sending or receiving emails.

There may be more issues, please help test it and feedback in our forum.
While reporting issues, don't forget to tell us which arch you used (i386 or x86_64).

Thanks very much.

iRedAdmin-Pro-1.3.0 (not released yet) now supports SSL/TLS based LDAP connection, we're so sorry for this deleyed feature.

If you deploy iRedAdmin-Pro and OpenLDAP server seperately, you can still get secure ldap connection.

If you want to enable SSL/TLS based LDAP connection, just change value of "uri" in settings.ini, change the prefix from 'ldap://' to 'ldaps: //'. for example:

[ldap]
# ---- Old Setting ----
#uri = ldap://127.0.0.1/

# ---- New Setting, with SSL/TLS connection enabled ----
uri = ldaps://127.0.0.1/

That's all. And you will find similar log file in /var/log/openldap.log if you set "loglevel 256" in openldap config file:

Aug 10 15:26:01 r6 slapd[3034]: conn=59 fd=14 TLS established tls_ssf=256 ssf=256 

Hope you enjoy iRedAdmin-Pro.

Here is slides i used to introduce iRedMail in 2009 (2009-09-19) Software Freedom Day in Shenzhen, China.

I explains several points, for example:

• What we have now

• What they give you

• What iRedMail does

Click link to view slides online (Flash player is required): http://www.slideshare.net/ZhangHuangbin … r-solution

Abstract

iRedMail-0.6.0 doesn't include two mail log files (/var/log/mail.info, /var/log/mail.err) in logrotate config file (/etc/logrotate.d/maillog), it may eat up too much disk space if we didn't rotate it.

Affected versions

All iRedMail versions, but only occurs on Debian/Ubuntu.

Steps to fix it

* Add missing log files in logrotate config file: /etc/logrotate.d/maillog

# ---- OLD SETTING ----
/var/log/mail.log {

# ---- NEW SETTING ----
/var/log/mail.log /var/log/mail.info /var/log/mail.err {

Credits

Thanks to BigMichi1 for his report.

There's a security vulnerability in iRedAPD-1.3.2 and earlier versions, all users are strongly encouraged to upgrade iRedAPD to 1.3.3.

Issue description

Quote from rizkiwicaksono:
"When plugins got loaded by iredAPD, it automatically compiles source .py files into .pyc files for faster loading in the future. But unfortunately the compiled file permission is world writable (666 mode). Since iredAPD run as root (root privilege for iredapd is too much), attacker can replace PYC plugins file with maliciously crafted PYC files to execute code with root privilege."

"Attacker can prepare malicious PYC file on his own test box, then upload it to victim box and replace the original pyc file with his own."

Steps used to fix it

The simpliest way to fix it is installing iRedAPD-1.3.3 (not upgrade).

- Download iRedAPD-1.3.3 directly: http://iredmail.googlecode.com/files/iR … .3.tar.bz2
- Installation Guide (for OpenLDAP backend): http://iredmail.org/wiki/index.php?titl … D/OpenLDAP

Credits

Thanks to rizkiwicaksono for his report, YouTube video, and code contribution.

iRedAdmin-Pro-1.3.0 now supports domain alias.

What "Domain Alias" is

Domain alias allows you to bind as many domains as you want to one domain, all emails sent to alias domain "user@aliasDomain.com" will be delivered to account under your primary domain "user@example.com" (same username, different domain part in email address). you don't need to manage accounts for bound domain "aliasDomain.com".

You can simply manage alias domains in domain profile page, alias as many as you want. Is it simple and clear enough?

Here's a simple tutorial to secure your exist iRedAdmin installation:
http://www.iredmail.org/wiki/index.php? … .iRedAdmin

The goal is to make iRedAdmin run as a low privilege user instead of Apache user.

Enjoy.

We'd like to thank supanji12@YouTube for his/her great video tutorial: http://www.youtube.com/watch?v=o285XYJTGQw

P.S. This was implemented in iRedMail moment ago.

iRedMail didn't set strict file permission on config files, even they contain username/passwords. Here's a quick fix (just some commands with chown/chmod/chgrp):
http://www.iredmail.org/wiki/index.php? … gure.Files

if you found that we missed some other files, please do contact us.

Credits

Thanks very much to rizkiwicaksono for his contribution.

P.S. This has been merged into iRedMail -trunk edition.

iRedAdmin-Pro-1.3.0 now supports per-domain quota size limit. You can check it out or help test in our demo: http://www.iredmail.org/admin_demo.html (Choose development edition)

Below are screenshots:

You can see quota status, includes quota and account limit, as progress bar in domain list page:

While creating new user, you can see numbers of spare domain quota size and accounts.

Of course you can change quota and account limit. in domain profile page, choose "Advanced" tab:

Enjoy

There's a bug in iRedAPD-1.3.2, it will cause blacklisting all recipients (@.) not work.

You can simply fix it by edit line 61 of file /opt/iRedAPD-1.3.2/src/plugins-rr/ldap_recipient_restrictions.py:

# This is OLD code:
    if len(set(list_recipients) & set(blRecipients)) > 0:

# Change it to:
    if len(set(list_recipients) & set(blRecipients)) > 0 or '@.' in blRecipients:

Thanks avrajesh for his/her feedback.