DerLinkman
1cb38bacdb
Postfix: Split TLSPol companion app into separate container ( #6688 )
...
* postfix: split postfix-tlspol service into new container
* postfix-tls-pol: added debug mode
* pf-tlspol: removed obsoleted standalone conf from Dockerfiles
* pf-tlspol: use git instead of wget
2025-08-28 10:18:18 +02:00
DerLinkman
c39712af67
pf/php: add mta-sts support (outbound) ( #6686 )
...
* added mta-sts-resolver into postfix config + daemon
* [Web] Add MTA-STS support
* [Web] Fix mta-sts server_name
* updated .gitignore
* [ACME] fetch cert for mta-sts subdomain
* [Web] change MTA-STS id to human-readable timestamp
* [Web] Remove MTA-STS version STSv2
* [Web] Fix MTA-STS DNS check
* [Web] add max_age limit for MTA-STS policy
* Added tooltips and info texts to mta-sts webui page
* postfix: replace mta-sts-resolver with postfix-tlspol
---------
Co-authored-by: FreddleSpl0it <75116288+FreddleSpl0it@users.noreply.github.com>
2025-08-26 09:57:05 +02:00
Christoph Lechleitner
2b2da1679e
[DB][Web] optimize qhandler by keeping SHA2 in new column qhash ( #6556 )
...
* [DB][Web] optimize qhandler by keeping SHA2(id+qid) in new column quarantine.qhash, for feature #6555 , might also help with #6361
* rspamd: only add qhash to new entries while passing rspamd not all existing
* compose: bump dovecot image + push to registry
---------
Co-authored-by: DerLinkman <niklas.meyer@servercow.de>
2025-08-06 16:02:25 +02:00
Dmitriy Alekseev
842cb235b6
[Rspamd] Fill module name for set_pre_result actions ( #6630 )
...
* [Rspamd] Fill module name for postmaster handler
* Update rspamd.local.lua
2025-08-06 09:38:22 +02:00
milkmaker
2e9ba1e9b3
update postscreen_access.cidr ( #6660 )
2025-08-05 00:37:47 +02:00
milkmaker
b12ce1eacd
update postscreen_access.cidr ( #6611 )
2025-07-02 17:12:06 +02:00
milkmaker
dd475c0ab3
update postscreen_access.cidr ( #6573 )
2025-06-12 13:14:20 +02:00
krzsztf1
486b297409
Fix typo in rspamd rule in composites.conf ( #6515 )
...
Co-authored-by: Krzysztof Nowak <k.nowak@intalio.pl>
2025-05-09 18:33:19 +02:00
FreddleSpl0it
580dabd276
Merge pull request #6509 from mailcow/update/postscreen_access.cidr
...
[Postfix] update postscreen_access.cidr
2025-05-09 10:02:50 +02:00
FreddleSpl0it
8ff0e029f0
Merge pull request #6398 from marvinruder/feat/skip-olefy
...
feat(olefy): Allow disabling Olefy
2025-05-08 15:34:51 +02:00
FreddleSpl0it
0680b21938
Merge pull request #6342 from mailcow/fix/6339
...
rspamd: remove .info from fishy tlds (default)
2025-05-08 14:36:39 +02:00
FreddleSpl0it
db7b917944
Merge pull request #6488 from mailcow/fix/6470
...
[Dovecot] Fix EAS login issue with app passwords and improve auth cache handling in Dovecot
2025-05-08 11:49:55 +02:00
FreddleSpl0it
401b744808
[Dovecot] return PASSDB_RESULT_PASSWORD_MISMATCH instead of PASSDB_RESULT_INTERNAL_FAILURE
2025-05-08 11:38:29 +02:00
milkmaker
0c83255573
update postscreen_access.cidr
2025-05-01 00:21:11 +00:00
DerLinkman
aa4125fe62
sogo: enabled SOGoEnableMailCleaning per default
2025-04-23 15:13:52 +02:00
FreddleSpl0it
c4d0f35008
[Dovecot] Fix EAS login and improve logging
2025-04-15 10:49:56 +02:00
FreddleSpl0it
766c5e8580
[Dovecot] Ignore app passwords protocol access on SOGo request
2025-04-09 08:02:30 +02:00
FreddleSpl0it
428a59dd3f
Merge branch 'fix/dovecot-lua-timeout' into staging
2025-04-03 14:18:33 +02:00
FreddleSpl0it
153890b283
Merge pull request #6439 from mailcow/fix/6430
...
[SOGo] Use JS for mailcow logout
2025-04-03 12:57:24 +02:00
FreddleSpl0it
3758135dc3
Merge pull request #6450 from mailcow/fix/sasl_logs
...
Fix sasl_logs
2025-04-03 12:38:13 +02:00
FreddleSpl0it
6794e6ff43
[Dovecot] Add service for authentication cache_key
2025-04-03 12:31:43 +02:00
FreddleSpl0it
e65478076b
[Web] Prevent user sync for mismatched authsource
2025-04-03 11:58:35 +02:00
FreddleSpl0it
805634f9a9
Fix sasl_logs
2025-04-03 10:19:30 +02:00
milkmaker
4c5f485587
update postscreen_access.cidr ( #6443 )
2025-04-01 22:00:11 +02:00
FreddleSpl0it
f37961b7d0
[SOGo] Use JS for mailcow logout
2025-03-31 11:32:01 +02:00
FreddleSpl0it
4ad2422810
[Dovecot] Increase Timeout for HTTP Login Request
2025-03-27 16:52:15 +01:00
FreddleSpl0it
9b41b24522
Merge pull request #6402 from marvinruder/fix/long-dropdown-label
...
fix(ui): Swap translations for oversized dropdown
2025-03-27 08:07:51 +01:00
Marvin A. Ruder
8408b82e9c
Add new option with description to existing configuration files during next update
...
* Remove Olefy settings file from rspamd configuration
* Have rspamd container generate Olefy settings file at startup if not disabled
Signed-off-by: Marvin A. Ruder <signed@mruder.dev>
2025-03-26 17:17:13 +01:00
FreddleSpl0it
65fb4c2aa8
[Nginx] Move conf.d include before SNI vhosts
2025-03-26 13:04:43 +01:00
Marvin A. Ruder
05fc4f7aba
fix(ui): Swap translations for oversized dropdown
...
* Fix other typos
* Fixes #6400
Signed-off-by: Marvin A. Ruder <signed@mruder.dev>
2025-03-25 21:24:22 +01:00
FreddleSpl0it
986b0afbfa
ldap-sync: Fix template selection
2025-03-24 15:33:42 +01:00
FreddleSpl0it
cf2d3c1b4e
Merge branch 'staging' into nightly
2025-03-24 11:38:59 +01:00
FreddleSpl0it
887b7114a8
Add default template for IdP attribute mapping
2025-03-19 14:35:32 +01:00
FreddleSpl0it
e21696ff27
Add error message when mailbox creation fails
2025-03-14 09:36:40 +01:00
FreddleSpl0it
5a7275843a
Add error message when mailbox creation fails
2025-03-14 09:30:33 +01:00
FreddleSpl0it
5f15475b55
[Rspamd] Remove redis.conf from tracking
2025-03-07 15:18:42 +01:00
milkmaker
4bd267515a
update postscreen_access.cidr ( #6345 )
2025-03-01 13:32:21 +01:00
DerLinkman
70190e5230
rspamd: remove .info from fishy tlds (default)
2025-02-28 15:38:05 +01:00
FreddleSpl0it
fcebe98557
Merge branch 'staging' into nightly
2025-02-24 15:09:36 +01:00
FreddleSpl0it
6ec5e88793
Merge pull request #6309 from mailcow/fix/6308
...
[Dovecot][Netfilter] Fix dovecot failed login regex
2025-02-24 11:26:06 +01:00
FreddleSpl0it
351f4ce787
[Redis] Add support for masterauth via env var
2025-02-18 11:16:06 +01:00
FreddleSpl0it
a567d5dc31
[Nginx] Add support for trusted proxies via env var
2025-02-18 11:03:34 +01:00
DerLinkman
4ac541f671
[Mariadb] Update to 10.11 (LTS) ( #5152 )
...
* [Mariadb] Update to 10.11 (LTS)
* mysql: set default collation to general_ci
2025-02-17 15:48:25 +01:00
Dmitriy Alekseev
f6dc0b463f
Update Rspamd to 3.11.0 and enable SMTPUTF8 for outgoing mail ( #6216 )
...
* Update Rspamd to 3.11
* Enable SMTPUTF8 and hide it from SMTPD greeting
* Update options.inc
* compose: increased rspamd tag
2025-02-17 14:41:39 +01:00
FreddleSpl0it
d8afa6f393
[Dovecot][Netfilter] Fix dovecot failed login regex
2025-02-14 13:12:12 +01:00
FreddleSpl0it
735d5f0e56
Merge pull request #6220 from Babybatrick/staging
...
Adding lines to docker-compose.yml to allow for simpler SOGo web client UI customisation
2025-02-12 10:54:16 +01:00
FreddleSpl0it
ef2f5f7be0
[Dovecot] Use Redis ACL user quota_notify with restricted access
2025-02-11 16:59:18 +01:00
FreddleSpl0it
f64c6aa1d4
Merge pull request #6269 from mailcow/staging
...
Automatic PR to nightly from 2025-01-27T10:00:26Z
2025-02-07 15:10:10 +01:00
FreddleSpl0it
e645f931dc
[Nginx] Add env var for HTTP to HTTPS redirection
2025-02-03 12:05:08 +01:00
FreddleSpl0it
bbdec0960a
Merge pull request #6290 from mailcow/fix/nginx-vhosts
...
[Nginx] Use vhosts for additional server names
2025-02-03 11:35:09 +01:00
milkmaker
41ba7d97fa
update postscreen_access.cidr ( #6287 )
2025-02-01 17:06:07 +01:00
FreddleSpl0it
3a81b84cf7
[Nginx] Fix #6275
2025-01-30 14:49:18 +01:00
FreddleSpl0it
0ad327bbe5
[Nginx] Use separate vhosts for additional server names
2025-01-29 09:51:45 +01:00
FreddleSpl0it
36d4fcbf39
Merge pull request #6255 from mailcow/staging
...
Automatic PR to nightly from 2025-01-23T11:01:42Z
2025-01-23 15:21:39 +01:00
FreddleSpl0it
04058ab06e
[Nginx] move conf.d include to end of nginx.conf
2025-01-23 14:54:28 +01:00
FreddleSpl0it
9d791d0c4f
Merge branch 'staging' into nightly
2025-01-23 12:06:47 +01:00
DerLinkman
43f945fe01
dovecot: fix index timeout seconds
2025-01-23 11:51:41 +01:00
FreddleSpl0it
d430b595c1
Merge branch 'staging' into nightly
2025-01-23 08:11:45 +01:00
FreddleSpl0it
1fca328266
[Nginx] Disable IPv6 listener for Rspamd dynmaps when DISABLE_IPv6=y
2025-01-22 15:11:46 +01:00
FreddleSpl0it
7bcd61ecb5
[Nginx] Generate includes for custom configs
2025-01-22 14:30:47 +01:00
DerLinkman
746915cbdd
fts: change autoindex to occur on mailboxes of receiving 20 or more mails daily
2025-01-20 14:21:15 +01:00
FreddleSpl0it
1e70a20188
[SOGo] Add mailcow Buttons to SOGo navbar
2025-01-15 16:15:25 +01:00
FreddleSpl0it
8048e0a53c
[Web] Fix permission exception in IdP actions
2025-01-15 12:48:10 +01:00
milkmaker
40a8bc808a
update postscreen_access.cidr ( #6232 )
2025-01-01 03:26:18 +01:00
Amin
ade20d79d4
Uploading of the necessary files, after new volumes were added to docker-compose.yml (sogo-mailcow container)
...
After new volumes were added to docker-compose.yml in the sogo-mailcow container, it is necessary to include the specified files in the path, in order for docker to correctly start after running `docker compose up` command, otherwise error will appear, as necessary files would be missing.
The files uploaded are original SOGo UI elements, obtained from the sogo-mailcow container. Whenever users will need to change the UI elements, they would just need to change these files. Hence simplifying the process.
2024-12-19 22:13:27 +08:00
Niklas Meyer
3e8bb06a37
dovecot: replace solr fts with flatcurve (xapian) ( #5680 )
...
* fts-flatcurve: inital implementation
* fts: removed solr from compose.yml
* flatcurve: added heap and proc logic to dovecot
* added logic for update.sh & generate for Flatcurve
* delete old iteration of fts-flatcurve.conf
* updated default fts.conf
* updated .gitignore to exclude fts.conf for further git updates
* Remove autogeneration of fts.conf (disable override)
* cleanup all left solr stuff
* renamed SKIP_FLATCURVE to SKIP_FTS
* cleanup leftovers solr in lang files
* moved lazy_expunge plugin only to mail_plugins
* added fts timeout value
* compose: remove dev image of dovecot
* updated japanese translation
2024-12-12 16:44:42 +01:00
Niklas Meyer
3875e8377a
sogo: added SOGoDisableOrganizerEventCheck value to sogo.conf ( #6204 )
2024-12-10 15:59:02 +01:00
FreddleSpl0it
69b03791a2
Add missing Redis authentication
2024-12-09 13:54:44 +01:00
FreddleSpl0it
c9dd102741
[Dovecot] use auth_cache
2024-12-06 12:55:44 +01:00
FreddleSpl0it
a41bb55c83
Merge remote-tracking branch 'origin/staging' into nightly
2024-12-05 14:33:41 +01:00
FreddleSpl0it
896a9638d6
Fix mailcowauth
2024-12-02 14:16:43 +01:00
milkmaker
f3060b37a6
update postscreen_access.cidr ( #6189 )
2024-12-01 17:49:28 +01:00
FreddleSpl0it
ccc8595665
[SOGo] redirect to /user if unauthenticated
2024-12-01 16:51:56 +01:00
FreddleSpl0it
45c13c687b
[Web] update user based on template after login
2024-12-01 16:36:16 +01:00
FreddleSpl0it
b2db8e6b31
[Dovecot] init identity provider before user login
2024-11-29 16:52:34 +01:00
FreddleSpl0it
b0de756a7c
[Redis] Rename docker-entrypoint.sh to redis-conf.sh
2024-11-19 14:54:36 +01:00
FreddleSpl0it
c1903f121d
[Redis] set password via docker-entrypoint.sh
2024-11-19 14:25:31 +01:00
FreddleSpl0it
89fb1322c6
Enable password protection for Redis
2024-11-19 14:25:31 +01:00
FreddleSpl0it
70ca5fde95
[Nginx] Use jinja2 for templating nginx configuration
2024-11-19 08:39:52 +01:00
DerLinkman
d10d64dd92
mysql: increased thread_stack to 192k since 10.5.27
2024-11-15 16:18:22 +01:00
FreddleSpl0it
9542698e95
Merge remote-tracking branch 'origin/staging' into nightly
2024-11-12 15:10:03 +01:00
milkmaker
8b2f71f97e
update postscreen_access.cidr ( #6129 )
2024-11-05 16:20:57 +01:00
Niklas Meyer
b106945c73
Feat/rspamd 3.10.2 ( #6122 )
...
* rspamd: update to 3.10.2
* rspamd: fix broken archive_extension gz
2024-10-21 16:03:51 +02:00
Niklas Meyer
ee2791d93a
rspamd: update to 3.10.1 ( #6115 )
...
* rspamd: upgrade to 3.10.1
* rspamd: adapt 30s task timeout per default now
2024-10-18 15:50:45 +02:00
Patrik Kernstock
fce93609dd
Update mime_types.conf configuration ( #6013 )
...
In the last months and years, the default `mime_types.conf` of rspamd has changed and it might be also useful to make some adjustments to the weight of certain file extensions.
This PR is removing all file extensions from `mime_types.conf` which are already in rspamd's default configuration at [rspamd/src/plugins/lua/mime_types.lua](https://github.com/rspamd/rspamd/blob/master/src/plugins/lua/mime_types.lua ). If file extension is not present or has a different score compared to rspamd default, it is still in the list.
There are also a few major differences to certain file extensions, which might be useful to discuss and carefully adjust. For example, `.exe` files are rated very 'badly' due to high chance of being malicious, so are other extensions like `bat`, `cmd`, etc.
Current suggestion:
```lua
# Extensions that are treated as 'bad'
# Number is score multiply factor
bad_extensions = {
apk = 4,
appx = 4,
appxbundle = 4,
bat = 8,
cab = 20,
cmd = 8,
com = 20,
diagcfg = 4,
diagpack = 4,
dmg = 8,
ex = 20,
ex_ = 20,
exe = 20,
img = 4,
jar = 8,
jnlp = 8,
js = 8,
jse = 8,
lnk = 20,
mjs = 8,
msi = 4,
msix = 4,
msixbundle = 4,
ps1 = 8,
scr = 20,
sct = 20,
vb = 20,
vbe = 20,
vbs = 20,
vhd = 4,
py = 4,
reg = 8,
scf = 8,
vhdx = 4,
};
# Extensions that are particularly penalized for archives
bad_archive_extensions = {
pptx = 0.5,
docx = 0.5,
xlsx = 0.5,
pdf = 1.0,
jar = 12,
jnlp = 12,
bat = 12,
cmd = 12,
};
# Used to detect another archive in archive
archive_extensions = {
tar = 1,
['tar.gz'] = 1,
};
```
**As a important reminder**: For all remaining and additional file extensions and score weights, please check above default rspamd configuration!
2024-10-17 09:11:55 +02:00
Niklas Meyer
c53bf85480
postfix: add X-Original-To header per default ( #6110 )
2024-10-16 10:35:39 +02:00
milkmaker
1538fda71c
update postscreen_access.cidr ( #6093 )
2024-10-15 10:34:39 +02:00
FreddleSpl0it
0d2046baeb
Merge branch 'staging' into nightly
2024-09-05 14:53:37 +02:00
FreddleSpl0it
b307e0a0d5
[PHP-FPM] Add missing space in log message
2024-09-02 09:57:33 +02:00
milkmaker
af0c61b90a
update postscreen_access.cidr
2024-09-01 00:19:09 +00:00
FreddleSpl0it
ef238e5332
[LDAP] skip sync user if username_field in LDAP is empty
2024-08-28 11:28:37 +02:00
Niklas Meyer
ffcd242048
Merge pull request #6027 from mailcow/staging
...
Automatic PR to nightly from 2024-08-19T12:28:50Z
2024-08-20 13:41:54 +02:00
Délano
567ebbc324
Pushover/Quarantine utf 8 fix - fixes #6028 ( #6031 )
...
* Decode rspamd-subject for pushover notifications
Fixes #6028
* Apply iconv_mime_decode to the quarantine function as well
This might contain utf-8 encoded text as well
* Moved the iconv_mime_decode "fix" back to pipe.php
2024-08-20 13:39:20 +02:00
DerLinkman
3396e1b427
Merge branch 'staging' into nightly
2024-08-13 16:03:30 +02:00
Dmitriy Alekseev
8753ea2be6
[Rspamd] Fix bayes config ( #6000 )
...
* [Rspamd] Fix bayes config
Add hint about classifier name, and add missing learn_condition
* Update statistic.conf
2024-08-12 10:05:08 +02:00
DerLinkman
772d5c51fd
Merge branch 'staging' into nightly
2024-08-07 14:21:23 +02:00
DerLinkman
b6c036496d
rspamd: fixed dqs rbl insertion handling
2024-08-07 14:00:04 +02:00
DerLinkman
4b400eadb1
rspamd: Added DQS RBLs when key is set
2024-08-07 13:59:26 +02:00
Niklas Meyer
68616c2d57
Merge pull request #5972 from rallisf1/dovecot-folders-greek
...
Greek names of dovecot folders
2024-08-06 12:28:23 +02:00
FreddleSpl0it
9b86ff764e
Merge pull request #5975 from mailcow/staging
...
Automatic PR to nightly from 2024-08-01T03:13:55Z
2024-08-01 11:07:55 +02:00
