1

Topic: iRedMail-0.9.7 has been released, and European office in Slovenia

Dear all,

iRedMail-0.9.7 stable release has been released.

And another good news: we have more and more EU customers, so we have open an European office in Ljublana, Slovenia, to offer better tech support. You can find the office address in the "Contact" page.

Below are changes since iRedMail-0.9.6, and planned changes in next release.

Supports new distribution release
  • OpenBSD 6.1. OpenBSD 6.0 is not supported anymore.

  • Ubuntu 17.04. Ubuntu 16.10 is not supported anymore.

  • Debian 9 (code name: stretch).

Improvements
  • SQL structure change (for SQL backends): drop few columns in sql table
    `vmail.alias`, and creates 2 new tables: forwardings, alias_moderators. For
    more technical details, please check this issue:
    https://bitbucket.org/zhb/iredmail/issues/101

  • SOGo: New script 'tools/backup_sogo.sh'. used to backs up SOGo data with 'sogo-tool backup' command.

  • Fail2ban:

    • Add one new regular expession to filter Roundcube log.

    • Enable 2 new jails: apache-auth, nginx-http-auth.

    • Split jail.local to multiple modular jail config files under /etc/fail2ban/jail.d.

  • Nginx: Use different directories to store different type of config files for easier customization.

    • /etc/nginx/conf.d/ - store configurations used inside 'http {}'

    • /etc/nginx/sites-available/ - store config files for web sites. All files under this directory are NOT loaded by default.

    • /etc/nginx/sites-enabled/ - store config files for web sites. All files under this directory will be loaded by default. Usually file under this directory is a symbol link to file under /etc/nginx/sites-available/. This way we can easily enable or disable a site without renaming or moving its config file.

    • /etc/nginx/sites-conf.d/ - store per-site modular config files. for example, for web domain 'iredmail.org', we use directory '/etc/nginx/sites-conf.d/iredmail.org/' to store modular config files for all its http settings, and '/etc/nginx/sites-conf.d/iredmail.org-ssl/' for all https settings. You can use a prefixed digital number or letter to define the order loaded by Nginx. For example, '00-listen.conf' will be loaded before other files.

  • Generate /root/.my.cnf-<sql-user>:

    • /root/my.cnf-vmail

    • /root/my.cnf-vmailadmin

    • /root/my.cnf-amavisd

    • /root/my.cnf-iredapd

    • /root/my.cnf-iredadmin

    • /root/my.cnf-sogo

    • /root/my.cnf-roundcube

Fixed issues
  • Enable 'iterate_query =' in 'dovecot-mysql.conf', so that doveadm works fine if it needs to get all mail users.

  • Not enable cron job for iRedAdmin script: tools/delete_mailboxes.py. Thanks sergiocesar <sergio _at_ winc.net> for the report.

  • tools/backup_mysql.sh: Backup sql databases with mysqldump option '--skip-comments' to avoid possible backdooring hack. FYI: https://blog.tarq.io/cve-2016-5483-back … p-backups/

  • FreeBSD:

    • installing port 'archives/arj' interrupts iRedMail installation. This is caused by global variable 'LANGUAGE=C'.

    • Cannot reset MySQL (5.7) password.

Updated packages
  • Roundcube webmail -> 1.3.0

  • iRedAPD -> 2.1

  • iRedAdmin -> 0.8

  • uwsgi -> 2.0.15 (OpenBSD only)

Planned changes in next release
  • Completely drop Apache support. Nginx will be the only one web server shipped by iRedMail.

  • Integrate a mailing list manager like Mailman or mlmmj (preferred).

2

Re: iRedMail-0.9.7 has been released, and European office in Slovenia

There doesn't appear to be an upgrade guide from 0.9.6 to 0.9.7 at http://www.iredmail.org/docs/iredmail.releases.html

When will one be provided?

Thanks

3

Re: iRedMail-0.9.7 has been released, and European office in Slovenia

Found another issue with fresh install on FreeBSD 11.

Net-DNS-Resolver-Programmable-v0.003.tar.gz   100% of   15 kB 4820 kBps 00m00s
===> Fetching all distfiles required by p5-Net-DNS-Resolver-Programmable-0.003_2 for building
===>   p5-DBD-Pg-3.6.2 depends on file: /usr/local/sbin/pkg - found
=> DBD-Pg-3.6.2.tar.gz doesn't seem to exist in /usr/ports/distfiles/.
=> Attempting to fetch http://cpan.metacpan.org/modules/by-module/DBD/DBD-Pg-3.6.2.tar.gz
DBD-Pg-3.6.2.tar.gz                           100% of  252 kB 5451 kBps 00m00s
===> Fetching all distfiles required by p5-DBD-Pg-3.6.2 for building
===>   postgresql95-client-9.5.7_1 depends on file: /usr/local/sbin/pkg - found
=> postgresql-9.5.7.tar.bz2 doesn't seem to exist in /usr/ports/distfiles/postgresql.
=> Attempting to fetch http://ftp.postgresql.org/pub/source/v9.5.7/postgresql-9.5.7.tar.bz2
postgresql-9.5.7.tar.bz2                      100% of   17 MB 7730 kBps 00m02s
===> Fetching all distfiles required by postgresql95-client-9.5.7_1 for building
[ INFO ] Fetching all distfiles for port: security/amavisd-new
===> Fetching all distfiles for amavisd-new-2.11.0_2,1 and dependencies
===>  amavisd-new-2.11.0_2,1 archviers/rar is a 32-bit binary port and is not
compatible with amd64.
*** Error code 1

Stop.
make[1]: stopped in /usr/ports/security/amavisd-new
*** Error code 1

Stop.
make: stopped in /usr/ports/security/amavisd-new
<< ERROR >> Tarballs were not downloaded correctly, please fix it manually and then re-execute iRedMail.sh.
#

Then, i comment following line in amavisd-new Makefile, and install goes normally.

# archviers/rar is a 32-bit binary port, we don't want the install to fail
# at that port, therefore we will block instantly here if the platform does
# not suit rar.

.if ${PORT_OPTIONS:MRAR}
.if ${ARCH} == "i386"
RUN_DEPENDS+=   ${LOCALBASE}/bin/rar:archivers/rar
#.else
#IGNORE=        archviers/rar is a 32-bit binary port and is not compatible with ${ARCH}
.endif
.endif

4

Re: iRedMail-0.9.7 has been released, and European office in Slovenia

vectr0n wrote:

There doesn't appear to be an upgrade guide from 0.9.6 to 0.9.7 at http://www.iredmail.org/docs/iredmail.releases.html

Updated. smile

----

Does my reply help a little? How about buying me a cup of coffee ($5) as an encouragement?

buy me a cup of coffee

5

Re: iRedMail-0.9.7 has been released, and European office in Slovenia

In the section:

Fixed: incorrect freshclam setting UpdateLogFile

The path is not /etc/freshclam.conf but /etc/clamav/freshclam.conf at least on Debian. I do not know in other systems.

6

Re: iRedMail-0.9.7 has been released, and European office in Slovenia

ZhangHuangbin wrote:
Planned changes in next release
  • Completely drop Apache support. Nginx will be the only one web server shipped by iRedMail.

Will there be a guide for converting from apache to nginx?

7

Re: iRedMail-0.9.7 has been released, and European office in Slovenia

mir wrote:

Will there be a guide for converting from apache to nginx?

For existing iRedMail servers, you're free to continue running Apache.

----

Does my reply help a little? How about buying me a cup of coffee ($5) as an encouragement?

buy me a cup of coffee

8

Re: iRedMail-0.9.7 has been released, and European office in Slovenia

vinacc wrote:

In the section:

Fixed: incorrect freshclam setting UpdateLogFile

The path is not /etc/freshclam.conf but /etc/clamav/freshclam.conf at least on Debian. I do not know in other systems.

Updated. smile

----

Does my reply help a little? How about buying me a cup of coffee ($5) as an encouragement?

buy me a cup of coffee

9

Re: iRedMail-0.9.7 has been released, and European office in Slovenia

congrats for the new office !

10

Re: iRedMail-0.9.7 has been released, and European office in Slovenia

ZhangHuangbin wrote:
vectr0n wrote:

There doesn't appear to be an upgrade guide from 0.9.6 to 0.9.7 at http://www.iredmail.org/docs/iredmail.releases.html

Updated. smile

In the upgrade guide from 0.9.6 to 0.9.7 there is not mentioned the upgrade of iRedAPD to 2.1, iRedAdmin to 0.8 and uwsgi to 2.0.15.

- iRedAPD -> 2.1
- iRedAdmin -> 0.8
- uwsgi -> 2.0.15 (OpenBSD only)

Which is the correct order of installation the updates, first apply SQL-changes or first apply the upgrade pakages?

11

Re: iRedMail-0.9.7 has been released, and European office in Slovenia

arneboeses wrote:

congrats for the new office !

Thank you. smile

----

Does my reply help a little? How about buying me a cup of coffee ($5) as an encouragement?

buy me a cup of coffee

12

Re: iRedMail-0.9.7 has been released, and European office in Slovenia

ThASattler wrote:

In the upgrade guide from 0.9.6 to 0.9.7 there is not mentioned the upgrade of iRedAPD to 2.1, iRedAdmin to 0.8 and uwsgi to 2.0.15.
- iRedAPD -> 2.1
- iRedAdmin -> 0.8
- uwsgi -> 2.0.15 (OpenBSD only)

Updated. Sorry about this.

----

Does my reply help a little? How about buying me a cup of coffee ($5) as an encouragement?

buy me a cup of coffee

13

Re: iRedMail-0.9.7 has been released, and European office in Slovenia

on page: http://www.iredmail.org/docs/upgrade.ir … 0.9.7.html

under section: Fixed: incorrect freshclam setting UpdateLogFile

at least on centos 7, the syntax for the freshclam config file change is:

"LogSyslog yes"

you listed 'true'.

14

Re: iRedMail-0.9.7 has been released, and European office in Slovenia

Thanks for the new release and congrats for the new office.

Just for understand, why remove apache from de iredmail ?
Can i install by my self?

15

Re: iRedMail-0.9.7 has been released, and European office in Slovenia

Hi Zang.

==== Required information ====
- iRedMail version: 0.9.7
- Linux/BSD distribution name and version: Freebsd 11.0-RELEASE - amd64
- Store mail accounts in which backend: LDAP
- Web server: Apache
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====


I'm trying to install the new version but amavisd-new show this error:

===>  amavisd-new-2.11.0_2,1 archviers/rar is a 32-bit binary port and is notcompatible with amd64.

I changed this configuration and executed bash iredmail.sh again:

    # Amavisd-new. REQUIRED.
OPTIONS_FILE_UNSET+=RAR

16

Re: iRedMail-0.9.7 has been released, and European office in Slovenia

fsantiago06111979 wrote:

at least on centos 7, the syntax for the freshclam config file change is:
"LogSyslog yes"
you listed 'true'.

It supports both "yes" and "true".

----

Does my reply help a little? How about buying me a cup of coffee ($5) as an encouragement?

buy me a cup of coffee

17

Re: iRedMail-0.9.7 has been released, and European office in Slovenia

jorge wrote:

why remove apache from de iredmail ?

To reduce our workload (testing, tech support, etc) and focus on making one of them (Nginx) solid stable for mail server.

jorge wrote:

Can i install by my self?

Sure, you're always free to install any softwares after iRedMail installation.

----

Does my reply help a little? How about buying me a cup of coffee ($5) as an encouragement?

buy me a cup of coffee

18

Re: iRedMail-0.9.7 has been released, and European office in Slovenia

jorge wrote:

I'm trying to install the new version but amavisd-new show this error:
===>  amavisd-new-2.11.0_2,1 archviers/rar is a 32-bit binary port and is notcompatible with amd64.
I changed this configuration and executed bash iredmail.sh again:
    # Amavisd-new. REQUIRED.
OPTIONS_FILE_UNSET+=RAR

Fixed and uploaded re-packed iRedMail-0.9.7 moment ago.
Thanks for the feedback.

----

Does my reply help a little? How about buying me a cup of coffee ($5) as an encouragement?

buy me a cup of coffee

19

Re: iRedMail-0.9.7 has been released, and European office in Slovenia

i believe since this update i'm seeing an issue;

in iredapd i had enabled the plugin sql force change password. Now, when an email user tries sending to another local user (or himself) also on my server, smtp errors out, reporting:

Jul  4 13:31:36 mail postfix/submission/smtpd[26286]: NOQUEUE: reject: RCPT from XXX: 554 5.7.1 <email>: Recipient address rejected: Please change your password in webmail before sending email

disabled the plugin corrects the issue. it has nothing to do with an expired password anywhere. the sender's account is brand new and the recipient's account password, while not expired, shouldn't have any bearing on being able to receive emails.

maybe the sql db changes? not sure...

20

Re: iRedMail-0.9.7 has been released, and European office in Slovenia

fsantiago06111979 wrote:

disabled the plugin corrects the issue. it has nothing to do with an expired password anywhere. the sender's account is brand new and the recipient's account password, while not expired, shouldn't have any bearing on being able to receive emails.

It's a bug of the script used to create mail user (iRedMail-0.9.7/tools/create_mail_user_*), fixed moment ago:
https://bitbucket.org/zhb/iredmail/comm … bff873c6d5

Also updated iRedAdmin-Pro to add this date.

----

Does my reply help a little? How about buying me a cup of coffee ($5) as an encouragement?

buy me a cup of coffee

21 (edited by bashir 2017-07-06 02:50:26)

Re: iRedMail-0.9.7 has been released, and European office in Slovenia

If I modify my sources.list file in my Debian 8 server to become Debian 9 Stretch and perform a dist-upgrade will my server safely upgrade without breakages?

22

Re: iRedMail-0.9.7 has been released, and European office in Slovenia

Getting lots of these errors from cron backup_mysql.sh after 0.9.6 --> 0.9.7 update:

mysqldump: Got error: 1049: "Unknown database '...'" when selecting the database
mysqldump: Got error: 1049: "Unknown database '...'" when selecting the database
mysqldump: Got error: 1049: "Unknown database '...'" when selecting the database
mysqldump: Got error: 1049: "Unknown database '...'" when selecting the database
mysqldump: Got error: 1049: "Unknown database '...'" when selecting the database
mysqldump: Got error: 1049: "Unknown database '...'" when selecting the database
mysqldump: Got error: 1049: "Unknown database '...'" when selecting the database
mysqldump: Got error: 1049: "Unknown database '...'" when selecting the database
==> Backup completed with !!!ERRORS!!!.

23

Re: iRedMail-0.9.7 has been released, and European office in Slovenia

ZhangHuangbin wrote:
fsantiago06111979 wrote:

disabled the plugin corrects the issue. it has nothing to do with an expired password anywhere. the sender's account is brand new and the recipient's account password, while not expired, shouldn't have any bearing on being able to receive emails.

It's a bug of the script used to create mail user (iRedMail-0.9.7/tools/create_mail_user_*), fixed moment ago:
https://bitbucket.org/zhb/iredmail/comm … bff873c6d5

Also updated iRedAdmin-Pro to add this date.


Thanks. I assume I can simply update the affected file(s). But how do I fix existing users?

24

Re: iRedMail-0.9.7 has been released, and European office in Slovenia

fsantiago06111979 wrote:
ZhangHuangbin wrote:
fsantiago06111979 wrote:

disabled the plugin corrects the issue. it has nothing to do with an expired password anywhere. the sender's account is brand new and the recipient's account password, while not expired, shouldn't have any bearing on being able to receive emails.

It's a bug of the script used to create mail user (iRedMail-0.9.7/tools/create_mail_user_*), fixed moment ago:
https://bitbucket.org/zhb/iredmail/comm … bff873c6d5

Also updated iRedAdmin-Pro to add this date.


Thanks. I assume I can simply update the affected file(s). But how do I fix existing users?


also, these scripts as I inspect them now are for importing users from text file. but how does this fix apply to users created using iredadmin? i'm confused and apologize for not understanding this.

25

Re: iRedMail-0.9.7 has been released, and European office in Slovenia

Upgrade iRedMail from 0.9.6 to 0.9.7

NEW: New backup script for SOGo:

Making backup script executable is missing:

cd /var/vmail/backup/
wget https://bitbucket.org/zhb/iredmail/raw/default/iRedMail/tools/backup_sogo.sh
chmod 700 backup_sogo.sh