Commit Graph

91 Commits

Author SHA1 Message Date
Spitap
82c4b1033a Better fix 2022-09-27 09:32:55 +02:00
Antoine Nguyen
b391de5937 Merge branch 'master' of github.com:modoboa/modoboa-installer 2022-09-22 10:53:25 +02:00
Antoine Nguyen
47a5d29043 Fixed opendkim dsn syntax.
fix #2602
2022-09-22 10:52:41 +02:00
Antoine Nguyen
1f8dd1b5df Merge pull request #426 from Spitfireap/mitigate-spamhaus-dns
mitigate false spamhaus reject
2022-09-16 17:11:21 +02:00
Antoine Nguyen
23ac0bf172 Complete custom database port support 2022-09-15 10:43:44 +02:00
Spitap
199a90c9e8 Set up return codes for other spamlist 2022-07-30 18:48:51 +02:00
Spitap
1ae5061dfa mitigate false spamhaus reject 2022-07-29 16:23:32 +02:00
Antoine Nguyen
f30201d32b Fixed ipv6 issue 2022-07-28 15:17:46 +02:00
Antoine Nguyen
2123ccf9c3 Merge pull request #415 from saaditDE/saaditDE-PatchTLSVAndCiphers-1
Replacing old TLS versions and insecure ciphers
2022-07-22 09:49:44 +02:00
Antoine Nguyen
578fc05981 Added support for amavis 2.12.X (ubuntu 22.04)
see #413
2022-05-18 10:48:53 +02:00
Karim
85dc113fe4 Replaceing old TLS versions and insecure ciphers
NEVER use SSL / TLS in outdated versions or insecure / oudated ciphers. Current state-of-the-art TLS Versions are TLSv1.2 and TLSv1.3. TLSv1.2 is only enabled for backwards compatibility. Ciphers are taken out of the guide. 

```ssl_ciphers ECDHE-RSA-AES256-GCM-SHA512:DHE-RSA-AES256-GCM-SHA512:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384;```

Are the recommended ciphers out of  source 4 in combination of all other sources.
 
source 1: https://www.linuxtechi.com/harden-secure-nginx-web-server-linux
source 2: https://beaglesecurity.com/blog/article/nginx-server-security.html
source 3: https://www.acunetix.com/blog/articles/tls-ssl-cipher-hardening/
source 4: https://raymii.org/s/tutorials/Strong_SSL_Security_On_nginx.html
2022-05-18 01:22:45 +02:00
Antoine Nguyen
7f87c2518c Merge pull request #358 from staticsafe/patch-1
Update Postfix main.cf template to allow IPv6
2021-10-14 10:09:28 +02:00
Antoine Nguyen
5b506a2eb9 fix #392 2021-09-22 16:12:21 +02:00
Antoine Nguyen
58f5a8af09 Fixed issue with Debian bullseye (11). 2021-09-22 11:32:55 +02:00
Antoine Nguyen
c9d67250ba Revert change since it prevents opendkim to work properly. 2021-04-23 09:32:22 +02:00
Antoine Nguyen
33a909a264 Disable milters for amavis receiver. 2021-03-20 09:20:45 +01:00
Sadiq Saif
becd427f6b Update Postfix main.cf template to allow IPv6
setting inet_protocols to all allows Postfix to use IPv6 if available on a host

fixes issue #344
2020-12-28 13:01:27 -05:00
Antoine Nguyen
c39adcbd14 Added support for Modoboa 1.16 2020-10-05 09:15:59 +02:00
Antoine Nguyen
1960e29c97 Fixed radicale setup. 2020-09-17 21:19:54 +02:00
Antoine Nguyen
68ec298fc9 Disabled radicale-storage-by-index plugin. 2020-06-09 11:08:39 +02:00
Antoine Nguyen
2b9f5cdb6b Removed bogus list.
fix #322
2020-05-18 14:50:44 +02:00
Antoine Nguyen
b5aa1bc7e7 Do not enable cron job if dovecot is disabled. 2020-03-04 11:14:39 +01:00
Antoine Nguyen
63c29c34b9 Deploy python3 virtualenvs only. 2019-12-06 12:18:01 +01:00
Antoine Nguyen
31d0e9b9f0 amavis: use branch schema file if version not avail.
fix #254
2018-11-29 13:22:52 +01:00
Anthony Bourguignon
5dacd2695c use lowercase username in dovecot auth 2018-10-17 11:57:31 +02:00
Antoine Nguyen
d28346efec Merge branch 'master' of github.com:modoboa/modoboa-installer 2018-10-01 15:53:47 +02:00
Antoine Nguyen
2b8393e2d4 Updated postfix config for autoreply 1.5.0 2018-10-01 15:53:26 +02:00
Antoine Nguyen
13e14f5fb6 Merge pull request #224 from stefaweb/nginx-update-for-autodiscover
Nginx vhost template update for autodiscover
2018-10-01 13:36:50 +02:00
Antoine Nguyen
c70eb03b4c Merge branch 'master' of github.com:modoboa/modoboa-installer 2018-09-16 18:14:56 +02:00
Antoine Nguyen
b18029d95b Fix #214. 2018-09-16 18:14:35 +02:00
Nicholas Bush
61bac8e12d Fixed recipient restrictions
Fixes #237 - the ```-o smtpd_helo_restrictions=``` overrides the config in ```main.cf``` and causes Postfix to reject mail from some clients
2018-09-14 16:50:48 +01:00
stefaweb
6422e7cdc7 Revert back mods 2018-07-02 11:10:04 +02:00
stefaweb
6e876be34b autodiscover config mods
Add https to
2018-07-01 09:00:25 +02:00
Antoine Nguyen
15c970cea0 Merge branch 'master' into master 2018-06-09 09:44:26 +02:00
François Schmidts
d20cc8b847 making vhost listen to ipv6 also 2018-06-06 14:51:12 +02:00
Christophe CHAUVET
557177ca48 opendkim: add LogResults = Yes
If logging is enabled (see Syslog below), requests that the results of evaluation of all signatures that were at least partly intact (i.e., the "d=", "s=", and "b=" tags could be extracted).
2018-04-07 16:44:26 +02:00
Antoine Nguyen
8a650e6998 OpenDKIM setup. (#196)
* OpenDKIM setup.

see #173

* Fixed unit tests.

* Fixed mysql syntax.
2018-04-02 16:25:58 +02:00
Antoine Nguyen
704d73cb4d Fixed dovecot warning. 2018-04-02 16:23:47 +02:00
Antoine Nguyen
d813039270 Added Radicale setup. (#194)
* Added Radicale setup.

see #193

* Fixed setup on CentOS.
2018-03-31 14:12:53 +02:00
Antoine Nguyen
18022f6941 Use CA certs to identify TLS peers.
see https://github.com/modoboa/modoboa/issues/1428
2018-03-09 13:19:21 +01:00
Antoine Nguyen
573255fb32 Removed deprecated option. 2018-02-28 08:29:42 +01:00
Antoine Nguyen
1d13e8a0e4 Updated configuration for 1.10.0 2018-01-29 09:31:12 +01:00
Antoine Nguyen
b88df74ec2 Removed cram-md5 auth mechanism. 2017-12-22 10:37:05 +01:00
Tuxis Internet Engineering V.O.F
8a210c8724 Fix the auth_mechanisms setting in dovecot/10-auth.conf. Closes #175 (#176) 2017-12-14 16:43:11 +01:00
Antoine Nguyen
0ceea13d4b Added postwhite support. (#171)
* Added postwhite support.

see #109

* Fixed unit test.
2017-12-07 17:42:38 +01:00
Antoine Nguyen
2c206a52b1 Fixed dovecot user query. 2017-12-07 11:46:01 +01:00
Antoine Nguyen
111cb83b07 Set mydestination setting to $myhostname. 2017-12-03 13:48:14 +01:00
Antoine Nguyen
d79d4b13dc Removed useless lines.
see #167
2017-11-10 17:27:00 +01:00
Antoine Nguyen
2739228cd7 Update PATH.
fix #159
2017-10-27 16:12:46 +02:00
Antoine Nguyen
08ba4a4de5 Fixed centos issue with uwsgi. 2017-10-13 18:01:29 +02:00