Upgrade/iRedMail/0.7.1-0.7.2

From iRedMail

(Difference between revisions)
Jump to: navigation, search
(OpenLDAP backend special)
m (Reverted edits by Mike.f (Talk) to last revision by ZhangHuangbin)
 
(5 intermediate revisions not shown)
Line 20: Line 20:
</pre>}}
</pre>}}
-
== Update iRedAdmin ==
+
== Update iRedAdmin (open source edition) ==
-
iRedAdmin-0.1.5 (open source edition) fixes some security issue, it's recommended to update it as soon as possible.
+
iRedAdmin-0.1.5 (open source edition) fixes some prossible XSS vulnerabilities, please upgrade it as soon as possible.
-
[TODO]
+
Below upgrade steps are used to upgrade iRedAdmin (open source edition) from 0.1.4 to 0.1.5.
 +
 
 +
* Download iRedAdmin-0.1.5 (open source edition): http://iredmail.org/yum/misc/iRedAdmin-0.1.5.tar.bz2
 +
* Upload iRedAdmin-0.1.5.tar.bz2 to your server which has old version running. We assume it's /root/iRedAdmin-0.1.5.tar.bz2.
 +
* Uncompress it to correct directory, set correct file owner and permission, restart Apache web server.
 +
{{cmd|<pre>
 +
#
 +
# ---- On RHEL/CentOS ----
 +
#
 +
# tar xjf /root/iRedAdmin-0.1.5.tar.bz2 -C /var/www/
 +
# cd /var/www/
 +
# cp iRedAdmin-0.1.4/settings.ini iRedAdmin-0.1.5/
 +
# chown -R iredadmin:iredadmin iRedAdmin-0.1.5
 +
# chmod -R 0555 iRedAdmin-0.1.5
 +
# chmod 0400 iRedAdmin-0.1.5/settings.ini
 +
# rm -i iredadmin              # <- Remove old symbol link
 +
# ln -s iRedAdmin-0.1.5 iredadmin          # Create a new symbol link
 +
# /etc/init.d/httpd restart
 +
 
 +
#
 +
# ---- On Debian/Ubuntu ----
 +
#
 +
# tar xjf /root/iRedAdmin-0.1.5.tar.bz2 -C /usr/share/apache2/
 +
# cd /usr/share/apache2/
 +
# cp iRedAdmin-0.1.4/settings.ini iRedAdmin-0.1.5/
 +
# chown -R iredadmin:iredadmin iRedAdmin-0.1.5
 +
# chmod -R 0555 iRedAdmin-0.1.5
 +
# chmod 0400 iRedAdmin-0.1.5/settings.ini
 +
# rm -i iredadmin              # <- Remove old symbol link
 +
# ln -s iRedAdmin-0.1.5 iredadmin          # Create a new symbol link
 +
# /etc/init.d/apache2 restart
 +
 
 +
#
 +
# ---- On openSUSE ----
 +
#
 +
# tar xjf /root/iRedAdmin-0.1.5.tar.bz2 -C /srv/www/
 +
# cd /srv/www/
 +
# cp iRedAdmin-0.1.4/settings.ini iRedAdmin-0.1.5/
 +
# chown -R iredadmin:iredadmin iRedAdmin-0.1.5
 +
# chmod -R 0555 iRedAdmin-0.1.5
 +
# chmod 0400 iRedAdmin-0.1.5/settings.ini
 +
# rm -i iredadmin              # <- Remove old symbol link
 +
# ln -s iRedAdmin-0.1.5 iredadmin          # Create a new symbol link
 +
# /etc/init.d/apache2 restart
 +
 
 +
#
 +
# ---- On FreeBSD ----
 +
#
 +
# tar xjf /root/iRedAdmin-0.1.5.tar.bz2 -C /usr/local/www/
 +
# cd /usr/local/www/
 +
# cp iRedAdmin-0.1.4/settings.ini iRedAdmin-0.1.5/
 +
# chown -R iredadmin:iredadmin iRedAdmin-0.1.5
 +
# chmod -R 0555 iRedAdmin-0.1.5
 +
# chmod 0400 iRedAdmin-0.1.5/settings.ini
 +
# rm -i iredadmin              # <- Remove old symbol link
 +
# ln -s iRedAdmin-0.1.5 iredadmin          # Create a new symbol link
 +
# /usr/local/etc/rc.d/apache2 restart
 +
</pre>}}
= OpenLDAP backend special =
= OpenLDAP backend special =
Line 43: Line 100:
== Upgrade iRedAPD to 1.3.6 ==
== Upgrade iRedAPD to 1.3.6 ==
-
iRedAPD-1.3.6 fixes incorrect MySQL connection handle, it's recommended to update it as soon as possible.
+
Note: This step is applicable to iRedMail-0.7.1 with MySQL backend.
-
[TODO]
+
iRedAPD-1.3.6 fixes incorrect MySQL connection handle, please [http://www.iredmail.org/forum/topic1972.html apply hotfix] to fix this issue.
= ChangeLog =
= ChangeLog =
-
 
+
* 2011-06-10: Initial release.
[[Category: iRedMail]]
[[Category: iRedMail]]
[[Category: Upgrade]]
[[Category: Upgrade]]

Current revision as of 08:39, 6 August 2011

Contents





General Update, all backends should apply these changes

Update Fail2ban filter

Note: This step is applicable to Linux. We don't have Fail2ban running on FreeBSD.

  • Edit /etc/fail2ban/filter.d/postfix.iredmail.conf, change line "failregex":
File: /etc/fail2ban/filter.d/postfix.iredmail.conf
# Original line:
#failregex = \[<HOST>\]: SASL PLAIN authentication failed

# Modified
failregex = \[<HOST>\]: SASL (PLAIN|LOGIN) authentication failed

Update iRedAdmin (open source edition)

iRedAdmin-0.1.5 (open source edition) fixes some prossible XSS vulnerabilities, please upgrade it as soon as possible.

Below upgrade steps are used to upgrade iRedAdmin (open source edition) from 0.1.4 to 0.1.5.

  • Download iRedAdmin-0.1.5 (open source edition): http://iredmail.org/yum/misc/iRedAdmin-0.1.5.tar.bz2
  • Upload iRedAdmin-0.1.5.tar.bz2 to your server which has old version running. We assume it's /root/iRedAdmin-0.1.5.tar.bz2.
  • Uncompress it to correct directory, set correct file owner and permission, restart Apache web server.
Terminal:
#
# ---- On RHEL/CentOS ----
#
# tar xjf /root/iRedAdmin-0.1.5.tar.bz2 -C /var/www/
# cd /var/www/
# cp iRedAdmin-0.1.4/settings.ini iRedAdmin-0.1.5/
# chown -R iredadmin:iredadmin iRedAdmin-0.1.5
# chmod -R 0555 iRedAdmin-0.1.5
# chmod 0400 iRedAdmin-0.1.5/settings.ini
# rm -i iredadmin              # <- Remove old symbol link
# ln -s iRedAdmin-0.1.5 iredadmin          # Create a new symbol link
# /etc/init.d/httpd restart

#
# ---- On Debian/Ubuntu ----
#
# tar xjf /root/iRedAdmin-0.1.5.tar.bz2 -C /usr/share/apache2/
# cd /usr/share/apache2/
# cp iRedAdmin-0.1.4/settings.ini iRedAdmin-0.1.5/
# chown -R iredadmin:iredadmin iRedAdmin-0.1.5
# chmod -R 0555 iRedAdmin-0.1.5
# chmod 0400 iRedAdmin-0.1.5/settings.ini
# rm -i iredadmin              # <- Remove old symbol link
# ln -s iRedAdmin-0.1.5 iredadmin          # Create a new symbol link
# /etc/init.d/apache2 restart

#
# ---- On openSUSE ----
#
# tar xjf /root/iRedAdmin-0.1.5.tar.bz2 -C /srv/www/
# cd /srv/www/
# cp iRedAdmin-0.1.4/settings.ini iRedAdmin-0.1.5/
# chown -R iredadmin:iredadmin iRedAdmin-0.1.5
# chmod -R 0555 iRedAdmin-0.1.5
# chmod 0400 iRedAdmin-0.1.5/settings.ini
# rm -i iredadmin              # <- Remove old symbol link
# ln -s iRedAdmin-0.1.5 iredadmin          # Create a new symbol link
# /etc/init.d/apache2 restart

#
# ---- On FreeBSD ----
#
# tar xjf /root/iRedAdmin-0.1.5.tar.bz2 -C /usr/local/www/
# cd /usr/local/www/
# cp iRedAdmin-0.1.4/settings.ini iRedAdmin-0.1.5/
# chown -R iredadmin:iredadmin iRedAdmin-0.1.5
# chmod -R 0555 iRedAdmin-0.1.5
# chmod 0400 iRedAdmin-0.1.5/settings.ini
# rm -i iredadmin              # <- Remove old symbol link
# ln -s iRedAdmin-0.1.5 iredadmin          # Create a new symbol link
# /usr/local/etc/rc.d/apache2 restart

OpenLDAP backend special

No upgrade required.

MySQL backend special

Add alias domain support in postfix

Update MySQL query in postfix setting "virtual_mailbox_domains" to query alias domains.

File: /etc/postfix/mysql/virtual_mailbox_domains.cf
# Original line:
#query       = SELECT domain FROM domain WHERE domain='%s' AND backupmx=0 AND active=1

# Modified:
query       = SELECT domain FROM domain WHERE domain='%s' AND backupmx=0 AND active=1 UNION SELECT alias_domain.alias_domain FROM alias_domain,domain WHERE alias_domain.alias_domain='%s' AND alias_domain.active=1 AND alias_domain.target_domain=domain.domain AND domain.active=1 AND domain.backupmx=0

Upgrade iRedAPD to 1.3.6

Note: This step is applicable to iRedMail-0.7.1 with MySQL backend.

iRedAPD-1.3.6 fixes incorrect MySQL connection handle, please apply hotfix to fix this issue.

ChangeLog

  • 2011-06-10: Initial release.
Personal tools