1

Topic: Forbidden error

Hello everyone,

I have  installed Ubuntu 9.04 and i successfully installed iRedMail, but if i try to access http://mydomain/webmail or https://mydomain/postfixadmin pages i get "You don't have permission to access /webmail on this server." error. Also i am bit confused on how to setup DNS records for DKIM and SPF, so if any of the more advanced users may help I would really appreciate it .

2

Re: Forbidden error

For DNS setup, did you read these pages:
http://code.google.com/p/iredmail/wiki/DNS_DKIM
http://code.google.com/p/iredmail/wiki/DNS_SPF

About the forbidden error, could you please post those files:
/etc/apache2/conf.d/postfixadmin.conf
/etc/apache2/conf.d/roundcubemail.conf (if exists)
/etc/apache2/conf.d/squirrelmail.conf (if exists)

3

Re: Forbidden error

ZhangHuangbin wrote:

For DNS setup, did you read these pages:
http://code.google.com/p/iredmail/wiki/DNS_DKIM
http://code.google.com/p/iredmail/wiki/DNS_SPF

About the forbidden error, could you please post those files:
/etc/apache2/conf.d/postfixadmin.conf
/etc/apache2/conf.d/roundcubemail.conf (if exists)
/etc/apache2/conf.d/squirrelmail.conf (if exists)

I have read those pages, but for some reason amavisd did not install right so i am unable to tun it. The other one regarding SPF i do not quite understend. Where do i need to insert those DNS records, in which file?

/etc/apache2/conf.d/postfixadmin.conf

#
# File generated by iRedMail (2009.08.20.14.14.35):
#
# Version:  0.5.0
# Project:  http://code.google.com/p/iredmail/
#
# If you deploy iRedMail in product environment, we suggest
# you public your information in 'Success Stories' forum to help us
# promote iRedMail.
#
# Forum: http://www.iredmail.org/forum/
#

# Note: Please refer to /etc/apache2/sites-available/default-ssl for SSL/TLS$
#Alias /postfixadmin "/usr/share/apache2/postfixadmin/"
<Directory "/usr/share/apache2/postfixadmin-2.2.1.1/">
    Options -Indexes
</Directory>

/etc/apache2/conf.d/roundcubemail.conf (if exists)

#
# File generated by iRedMail (2009.08.20.14.14.35):
#
# Version:  0.5.0
# Project:  http://code.google.com/p/iredmail/
#
# If you deploy iRedMail in product environment, we suggest
# you public your information in 'Success Stories' forum to help us
# promote iRedMail.
#
# Forum: http://www.iredmail.org/forum/
#

# Note: Please refer to /etc/apache2/sites-available/default-ssl for SSL/TLS setting.
Alias /mail "/usr/share/apache2/roundcubemail/"
Alias /webmail "/usr/share/apache2/roundcubemail/"
Alias /roundcube "/usr/share/apache2/roundcubemail/"
<Directory "/usr/share/apache2/roundcubemail/">
    Options -Indexes
</Directory>

/etc/apache2/conf.d/squirrelmail.conf (if exists)

does not exist because i have chosen only roundcube during installation.

4

Re: Forbidden error

It seems no error in your apache config.
Any error message in /var/log/apache2/error.log while you access /webmail or /postfixadmin?

5

Re: Forbidden error

ZhangHuangbin wrote:

/var/log/apache2/error.log

Yes there are some errors, it reports that /roundcube, /mail nor /postfixadmin exist

[Thu Aug 13 18:41:02 2009] [notice] Apache/2.2.11 (Ubuntu) configured -- resuming normal operations
[Thu Aug 13 18:41:16 2009] [notice] Graceful restart requested, doing restart
apache2: Could not reliably determine the server's fully qualified domain name, using 127.0.1.1 for ServerName
[Thu Aug 13 18:41:16 2009] [notice] Apache/2.2.11 (Ubuntu) configured -- resuming normal operations
[Thu Aug 13 18:41:36 2009] [notice] Graceful restart requested, doing restart
apache2: Could not reliably determine the server's fully qualified domain name, using 127.0.1.1 for ServerName
[Thu Aug 13 18:41:37 2009] [notice] Apache/2.2.11 (Ubuntu) PHP/5.2.6-3ubuntu4.1 with Suhosin-Patch configured -- resuming normal operations
[Fri Aug 14 07:09:28 2009] [notice] caught SIGTERM, shutting down
[Fri Aug 14 07:10:18 2009] [notice] Apache/2.2.11 (Ubuntu) PHP/5.2.6-3ubuntu4.1 with Suhosin-Patch configured -- resuming normal operations
[Fri Aug 14 07:21:28 2009] [notice] caught SIGTERM, shutting down
[Fri Aug 14 17:10:43 2009] [notice] Apache/2.2.11 (Ubuntu) PHP/5.2.6-3ubuntu4.1 with Suhosin-Patch configured -- resuming normal operations
[Sat Aug 15 07:41:01 2009] [notice] caught SIGTERM, shutting down
[Sat Aug 15 22:02:17 2009] [notice] Apache/2.2.11 (Ubuntu) PHP/5.2.6-3ubuntu4.1 with Suhosin-Patch configured -- resuming normal operations
[Sat Aug 15 23:25:13 2009] [notice] caught SIGTERM, shutting down
[Sun Aug 16 14:49:05 2009] [notice] Apache/2.2.11 (Ubuntu) PHP/5.2.6-3ubuntu4.1 with Suhosin-Patch configured -- resuming normal operations
[Sun Aug 16 16:03:25 2009] [notice] caught SIGTERM, shutting down
[Sun Aug 16 19:46:40 2009] [notice] Apache/2.2.11 (Ubuntu) PHP/5.2.6-3ubuntu4.1 with Suhosin-Patch configured -- resuming normal operations
[Mon Aug 17 20:52:59 2009] [notice] Apache/2.2.11 (Ubuntu) PHP/5.2.6-3ubuntu4.1 with Suhosin-Patch configured -- resuming normal operations
[Mon Aug 17 22:25:56 2009] [notice] caught SIGTERM, shutting down
[Tue Aug 18 23:27:58 2009] [notice] Apache/2.2.11 (Ubuntu) PHP/5.2.6-3ubuntu4.1 with Suhosin-Patch configured -- resuming normal operations
[Tue Aug 18 23:39:01 2009] [notice] caught SIGTERM, shutting down
[Wed Aug 19 07:53:58 2009] [notice] Apache/2.2.11 (Ubuntu) PHP/5.2.6-3ubuntu4.1 with Suhosin-Patch configured -- resuming normal operations
[Wed Aug 19 08:23:20 2009] [notice] caught SIGTERM, shutting down
[Wed Aug 19 18:09:06 2009] [notice] Apache/2.2.11 (Ubuntu) PHP/5.2.6-3ubuntu4.1 with Suhosin-Patch configured -- resuming normal operations
[Wed Aug 19 18:23:54 2009] [notice] caught SIGTERM, shutting down
[Wed Aug 19 18:24:43 2009] [notice] Apache/2.2.11 (Ubuntu) PHP/5.2.6-3ubuntu4.1 with Suhosin-Patch configured -- resuming normal operations
[Wed Aug 19 19:11:09 2009] [error] [client ::1] File does not exist: /var/www/mail
[Wed Aug 19 19:11:09 2009] [error] [client ::1] File does not exist: /var/www/favicon.ico
[Wed Aug 19 19:11:12 2009] [error] [client ::1] File does not exist: /var/www/favicon.ico
[Wed Aug 19 19:11:26 2009] [error] [client ::1] File does not exist: /var/www/webmail
[Wed Aug 19 19:11:32 2009] [error] [client ::1] File does not exist: /var/www/roundcube
[Wed Aug 19 19:11:46 2009] [error] [client ::1] File does not exist: /var/www/postfixadmin
[Wed Aug 19 19:14:37 2009] [notice] caught SIGTERM, shutting down
[Wed Aug 19 19:14:40 2009] [notice] Apache/2.2.11 (Ubuntu) PHP/5.2.6-3ubuntu4.1 with Suhosin-Patch configured -- resuming normal operations
[Wed Aug 19 19:19:25 2009] [notice] caught SIGTERM, shutting down
[Wed Aug 19 19:20:14 2009] [notice] Apache/2.2.11 (Ubuntu) PHP/5.2.6-3ubuntu4.1 with Suhosin-Patch configured -- resuming normal operations
[Wed Aug 19 19:31:56 2009] [notice] caught SIGTERM, shutting down
[Wed Aug 19 19:32:06 2009] [notice] Apache/2.2.11 (Ubuntu) PHP/5.2.6-3ubuntu4.1 with Suhosin-Patch configured -- resuming normal operations
[Wed Aug 19 19:35:05 2009] [error] [client 127.0.0.1] File does not exist: /var/www/favicon.ico
[Wed Aug 19 19:35:05 2009] [error] [client 127.0.0.1] File does not exist: /var/www/mail
[Wed Aug 19 19:35:11 2009] [error] [client 127.0.0.1] File does not exist: /var/www/webmail
[Wed Aug 19 19:35:17 2009] [error] [client 127.0.0.1] File does not exist: /var/www/roundcube
[Wed Aug 19 19:38:54 2009] [notice] caught SIGTERM, shutting down
[Wed Aug 19 19:38:55 2009] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Aug 19 19:38:55 2009] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Aug 19 19:38:55 2009] [notice] Apache/2.2.11 (Ubuntu) mod_ssl/2.2.11 OpenSSL/0.9.8g configured -- resuming normal operations
[Wed Aug 19 19:39:23 2009] [error] [client 127.0.0.1] Symbolic link not allowed or link target not accessible: /usr/share/apache2/roundcubemail
[Wed Aug 19 19:39:32 2009] [error] [client 127.0.0.1] Symbolic link not allowed or link target not accessible: /usr/share/apache2/roundcubemail
[Wed Aug 19 19:39:41 2009] [error] [client 127.0.0.1] Symbolic link not allowed or link target not accessible: /usr/share/apache2/roundcubemail
[Wed Aug 19 19:39:51 2009] [error] [client 127.0.0.1] Symbolic link not allowed or link target not accessible: /usr/share/apache2/roundcubemail
[Wed Aug 19 19:40:16 2009] [error] [client 127.0.0.1] Symbolic link not allowed or link target not accessible: /usr/share/apache2/roundcubemail
[Wed Aug 19 19:40:16 2009] [error] [client 127.0.0.1] File does not exist: /var/www/favicon.ico
[Wed Aug 19 19:40:19 2009] [error] [client 127.0.0.1] File does not exist: /var/www/favicon.ico
[Wed Aug 19 19:51:40 2009] [notice] caught SIGTERM, shutting down
[Wed Aug 19 19:52:46 2009] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Aug 19 19:52:48 2009] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Wed Aug 19 19:52:48 2009] [notice] Apache/2.2.11 (Ubuntu) mod_ssl/2.2.11 OpenSSL/0.9.8g configured -- resuming normal operations
[Wed Aug 19 20:05:26 2009] [error] [client ::1] Symbolic link not allowed or link target not accessible: /usr/share/apache2/roundcubemail
[Wed Aug 19 20:05:29 2009] [error] [client ::1] File does not exist: /var/www/favicon.ico
[Wed Aug 19 20:05:39 2009] [error] [client ::1] Symbolic link not allowed or link target not accessible: /usr/share/apache2/roundcubemail
[Wed Aug 19 20:05:53 2009] [error] [client ::1] Symbolic link not allowed or link target not accessible: /usr/share/apache2/roundcubemail
[Wed Aug 19 20:05:58 2009] [error] [client ::1] Symbolic link not allowed or link target not accessible: /usr/share/apache2/roundcubemail
[Wed Aug 19 23:29:10 2009] [error] [client ::1] Symbolic link not allowed or link target not accessible: /usr/share/apache2/roundcubemail
[Wed Aug 19 23:36:12 2009] [error] [client 127.0.0.1] File does not exist: /var/www/favicon.ico
[Wed Aug 19 23:36:15 2009] [error] [client 127.0.0.1] File does not exist: /var/www/favicon.ico
[Wed Aug 19 23:36:15 2009] [error] [client 127.0.0.1] Symbolic link not allowed or link target not accessible: /usr/share/apache2/roundcubemail
[Wed Aug 19 23:36:22 2009] [error] [client 127.0.0.1] Symbolic link not allowed or link target not accessible: /usr/share/apache2/roundcubemail
[Wed Aug 19 23:39:38 2009] [error] [client 127.0.0.1] Symbolic link not allowed or link target not accessible: /usr/share/apache2/roundcubemail
[Wed Aug 19 23:39:48 2009] [error] [client 127.0.0.1] File does not exist: /var/www/postfixadmin
[Wed Aug 19 23:40:49 2009] [error] [client 127.0.0.1] Symbolic link not allowed or link target not accessible: /usr/share/apache2/postfixadmin
[Wed Aug 19 23:44:10 2009] [error] [client ::1] Symbolic link not allowed or link target not accessible: /usr/share/apache2/roundcubemail
[Wed Aug 19 23:44:11 2009] [error] [client ::1] File does not exist: /var/www/favicon.ico
[Wed Aug 19 23:44:14 2009] [error] [client ::1] File does not exist: /var/www/favicon.ico
[Wed Aug 19 23:44:22 2009] [error] [client ::1] Symbolic link not allowed or link target not accessible: /usr/share/apache2/roundcubemail
[Wed Aug 19 23:44:22 2009] [error] [client ::1] File does not exist: /var/www/favicon.ico
[Wed Aug 19 23:44:25 2009] [error] [client ::1] File does not exist: /var/www/favicon.ico
[Wed Aug 19 23:44:41 2009] [error] [client ::1] Symbolic link not allowed or link target not accessible: /usr/share/apache2/postfixadmin
[Wed Aug 19 23:49:17 2009] [error] [client ::1] Symbolic link not allowed or link target not accessible: /usr/share/apache2/roundcubemail
[Wed Aug 19 23:49:18 2009] [error] [client ::1] Symbolic link not allowed or link target not accessible: /usr/share/apache2/roundcubemail
[Wed Aug 19 23:49:19 2009] [error] [client ::1] Symbolic link not allowed or link target not accessible: /usr/share/apache2/roundcubemail
[Wed Aug 19 23:49:35 2009] [error] [client ::1] Symbolic link not allowed or link target not accessible: /usr/share/apache2/postfixadmin
[Wed Aug 19 23:55:02 2009] [notice] caught SIGTERM, shutting down
[Thu Aug 20 17:20:02 2009] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Aug 20 17:20:05 2009] [warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Thu Aug 20 17:20:05 2009] [notice] Apache/2.2.11 (Ubuntu) mod_ssl/2.2.11 OpenSSL/0.9.8g configured -- resuming normal operations
[Thu Aug 20 17:21:04 2009] [error] [client ::1] Symbolic link not allowed or link target not accessible: /usr/share/apache2/postfixadmin
[Thu Aug 20 17:21:04 2009] [error] [client 127.0.0.1] Symbolic link not allowed or link target not accessible: /usr/share/apache2/postfixadmin
[Thu Aug 20 17:21:04 2009] [error] [client ::1] File does not exist: /var/www/favicon.ico
[Thu Aug 20 17:21:04 2009] [error] [client 127.0.0.1] File does not exist: /var/www/favicon.ico
[Thu Aug 20 17:21:08 2009] [error] [client 127.0.0.1] File does not exist: /var/www/favicon.ico
[Thu Aug 20 17:21:09 2009] [error] [client ::1] File does not exist: /var/www/favicon.ico
[Thu Aug 20 17:23:23 2009] [error] [client ::1] Symbolic link not allowed or link target not accessible: /usr/share/apache2/roundcubemail
[Thu Aug 20 17:23:23 2009] [error] [client ::1] File does not exist: /var/www/favicon.ico
[Thu Aug 20 17:23:26 2009] [error] [client ::1] File does not exist: /var/www/favicon.ico
[Thu Aug 20 17:24:54 2009] [error] [client ::1] Symbolic link not allowed or link target not accessible: /usr/share/apache2/roundcubemail

6

Re: Forbidden error

[Wed Aug 19 23:44:41 2009] [error] [client ::1] Symbolic link not allowed or link target not accessible: /usr/share/apache2/postfixadmin
[Wed Aug 19 23:49:17 2009] [error] [client ::1] Symbolic link not allowed or link target not accessible: /usr/share/apache2/roundcubemail

Please post output of below command:

$ ls /usr/share/apache2/

7

Re: Forbidden error

ZhangHuangbin wrote:

[Wed Aug 19 23:44:41 2009] [error] [client ::1] Symbolic link not allowed or link target not accessible: /usr/share/apache2/postfixadmin
[Wed Aug 19 23:49:17 2009] [error] [client ::1] Symbolic link not allowed or link target not accessible: /usr/share/apache2/roundcubemail

Please post output of below command:

$ ls /usr/share/apache2/

build  default-site  error  icons  phpmyadmin  postfixadmin  roundcubemail

8

Re: Forbidden error

You don't have roundcubemail and postfixadmin installed, only symbol link there. If you installed them, there will be two more directories: roundcubemail-0.2.1, postfixadmin-2.2.1.1.

Did you follow the installation tutorial for installation? I think you didn't run below command which used to download some source tarballs, it's required on all distributions:

* Run script to download mail server related rpm packages which not shipped within RHEL/CentOS:

      # cd iRedMail-x.y.z/pkgs/
      # bash get_all.sh

9

Re: Forbidden error

ZhangHuangbin wrote:

You don't have roundcubemail and postfixadmin installed, only symbol link there. If you installed them, there will be two more directories: roundcubemail-0.2.1, postfixadmin-2.2.1.1.

Did you follow the installation tutorial for installation? I think you didn't run below command which used to download some source tarballs, it's required on all distributions:

* Run script to download mail server related rpm packages which not shipped within RHEL/CentOS:

      # cd iRedMail-x.y.z/pkgs/
      # bash get_all.sh

You are absolutely right. I did not run get_all script and therefore i did not download all necessary packages. Thanks a lot for your help. If you do not mind i have another question. I would like to have a following setup: Virtual domain example.com with multiple users on it. For example a@exaple.com, b@example.com and so on. This all would be installed on a computer/server with a dynamic IP. I would like to fetch mail from various POP accounts on the internet store the in local accounts, filter them for spam, viruses etc. and then distribute emails localy. For sending mail, users would use an external smtp server. I would think that this is possible with fatchmail, but i am not sure where to start. Any help or pointer would be great.

10

Re: Forbidden error

iceage wrote:
ZhangHuangbin wrote:

You don't have roundcubemail and postfixadmin installed, only symbol link there. If you installed them, there will be two more directories: roundcubemail-0.2.1, postfixadmin-2.2.1.1.

Did you follow the installation tutorial for installation? I think you didn't run below command which used to download some source tarballs, it's required on all distributions:

* Run script to download mail server related rpm packages which not shipped within RHEL/CentOS:

      # cd iRedMail-x.y.z/pkgs/
      # bash get_all.sh

You are absolutely right. I did not run get_all script and therefore i did not download all necessary packages. Thanks a lot for your help. If you do not mind i have another question. I would like to have a following setup: Virtual domain example.com with multiple users on it. For example a@exaple.com, b@example.com and so on. This all would be installed on a computer/server with a dynamic IP. I would like to fetch mail from various POP accounts on the internet store the in local accounts, filter them for spam, viruses etc. and then distribute emails localy. For sending mail, users would use an external smtp server. I would think that this is possible with fatchmail, but i am not sure where to start. Any help or pointer would be great.

i figured out what i need to do with fetchmail, everything is working fine. Fetching mail via Fetchmail from various POP accounts and putting them in respective virtual boxes. Great smile

11

Re: Forbidden error

How did you solved this problem ??? :-/

12

Re: Forbidden error

I too would like to fetch mail from various POP accounts on the internet store the in local accounts, filter them for spam, viruses etc. and then distribute emails localy. I followed the guide perfectly and iRedMail is working fine, but where can configure fecthmail per user? from other guides it is supposed to be in the postfixadmin one of its tabs, right? but i can't find it. please help. thanks hmm

13

Re: Forbidden error

iceage wrote:

i figured out what i need to do with fetchmail, everything is working fine. Fetching mail via Fetchmail from various POP accounts and putting them in respective virtual boxes. Great

can you share your experience about how to intergrate fetchmail with iredmail.

let iredmail intergrate fetchmail in the future.

14

Re: Forbidden error

Hello,

I'm also interested in an integration from fetchmail in iredmail.
Is there anyone with experiences?

BR