Aaron
929f650c09
Merge 71718f3b05
into 0303dbc1d2
2023-09-14 00:39:56 +02:00
FreddleSpl0it
b050cb9864
[Postfix] remove dnsbl_reply.map if not required
2023-08-03 09:00:08 +02:00
DocFraggle
8f9ed9e0df
Merge branch 'staging' into staging
2023-08-02 20:20:18 +02:00
FreddleSpl0it
003eecf131
[Postfix] remove spamhaus dbl and zrd from postscreen_dnsbl_sites
2023-08-02 17:08:55 +02:00
FreddleSpl0it
5d3491c801
[Postfix] only apply DNSBL if dns_blocklists.cf is not empty
2023-08-02 16:48:22 +02:00
FreddleSpl0it
c45684b986
[Postfix] rework dns_blocklists.cf generation
2023-08-02 16:36:59 +02:00
Christian Hailer
9f39af46aa
Add postscreen_dnsbl_reply_map to avoid disclosure of DQS key with Spamhaus setup
2023-08-01 16:12:44 +02:00
Sébastien RICCIO
7cda9f063f
Fix for fix
...
I did not paid attention to the "User overrides" sed/q
2023-08-01 13:59:23 +02:00
Sébastien RICCIO
5e7583c5e6
Fix main.cf merging order
...
Now the dnsbl files are merged before extra.cf
2023-08-01 10:49:26 +02:00
Hailer, Christian
3000da6b88
Fix spamhaus query domains (.net only)
2023-07-31 13:50:36 +02:00
DerLinkman
0f337971ff
Reimplemented option for custom dnsbls
2023-07-31 12:03:07 +02:00
Christian Hailer
952ddb18fd
dns_blocklists.cf isn't appended to main.cf and therefore ineffective #5340
2023-07-30 18:56:52 +02:00
DerLinkman
525364ba65
Implemented remote Bad AS lookup
2023-07-28 20:27:38 +02:00
DerLinkman
ec8d298c36
Update postfix.sh to include pbl for dqs
2023-07-13 16:42:59 +02:00
DerLinkman
7b645303d6
Added Colorful Outputs for the Spamhaus info in PF
2023-06-23 15:54:49 +02:00
DerLinkman
408381bddb
Update Postfix image to 1.69 + improvements
2023-06-23 15:48:13 +02:00
DerLinkman
03b7a8d639
Implemented Postfix Blocklist generation
2023-06-23 14:25:07 +02:00
Aaron Larisch
71718f3b05
Add ECDSA support
...
This is a squashed commit of the following:
commit db8051bc234c5fa67aa87a7a94f9e89eaf0e7dac
Merge: 2634fdf0 04020685
Author: Aaron Larisch <aaron-github@openlarry.de>
Date: Tue May 24 20:44:38 2022 +0200
Merge branch 'master' into add-ecdsa-support
commit 2634fdf0e942c50220d6ea22319610327bd4127e
Merge: 0962b90d 116c7919
Author: Aaron Larisch <aaron-github@openlarry.de>
Date: Wed Nov 10 08:53:21 2021 +0100
Merge branch 'master' into add-ecdsa-support
commit 0962b90db51586b30a20d8c5310c1b09dbfe96e3
Merge: 61522713 d90d4f96
Author: Aaron Larisch <aaron-github@openlarry.de>
Date: Wed Jun 9 11:33:34 2021 +0200
Merge branch 'master' into add-ecdsa-support
commit 61522713f1916ac8062fd7b717984d142a395c26
Merge: 72261e60 64264767
Author: Aaron Larisch <aaron-github@openlarry.de>
Date: Fri Feb 26 18:20:30 2021 +0100
Merge branch 'master' into add-ecdsa-support
commit 72261e60f0c147287fb312c51982030f69674e6a
Merge: 3a1cce21 0846013e
Author: Aaron Larisch <aaron-github@openlarry.de>
Date: Wed Dec 16 21:33:55 2020 +0100
Merge branch 'master' into add-ecdsa-support
commit 3a1cce2105b377410a4c4aff00d44db7fea76e85
Merge: 6a01796e c1034b89
Author: Aaron Larisch <aaron-github@openlarry.de>
Date: Tue Sep 15 10:51:32 2020 +0200
Merge branch 'master' into add-ecdsa-support
commit 6a01796e7ecbae78b89a2067080886bb59a394a1
Merge: 812adb0f 9685b4b5
Author: Aaron Larisch <aaron-github@openlarry.de>
Date: Tue Jul 21 14:07:56 2020 +0200
Merge branch 'master' into add-ecdsa-support
commit 812adb0fe1bdb5d5d832bcaf09c2c8543c71914b
Author: Aaron Larisch <aaron-github@openlarry.de>
Date: Sun Jul 5 00:12:21 2020 +0200
Fix TLSA records for ECDSA and RSA certs in DNS diagnostics
Disables TLS 1.3 for the test connection to limit to RSA or ECDSA ciphers.
commit 83c976999bf1da178ed9363f79ff772f9bffab93
Merge: 6fb29ab5 becc5059
Author: Aaron Larisch <aaron-github@openlarry.de>
Date: Sat Jul 4 23:03:45 2020 +0200
Merge branch 'master' into add-ecdsa-support
commit 6fb29ab554e55bac17fa3087da4580d224e95e6f
Merge: 3131e171 b933a309
Author: Aaron Larisch <aaron-github@openlarry.de>
Date: Thu May 21 11:34:30 2020 +0200
Merge branch 'master' into add-ecdsa-support
commit 3131e1717f48488a81979206df6d67e6f55c10a7
Merge: 1929216e 7fa10cc3
Author: Aaron Larisch <aaron-github@openlarry.de>
Date: Thu Apr 16 18:20:39 2020 +0200
Merge branch 'master' into add-ecdsa-support
commit 1929216e6a8eff0a110bfc28425987c548e12fa0
Merge: a0edf841 a9947e99
Author: Aaron Larisch <aaron-github@openlarry.de>
Date: Sat Mar 21 08:38:07 2020 +0100
Merge branch 'master' into add-ecdsa-support
commit a0edf841427b093b03597ba231e5c6b228c0ee60
Merge: 6152b426 b5c844d7
Author: Aaron Larisch <aaron-github@openlarry.de>
Date: Thu Feb 13 13:52:09 2020 +0100
Merge branch 'master' into add-ecdsa-support
commit 6152b42616cfa9df483dee6047fdca2517b1b245
Merge: 85b791bf e6bb3069
Author: Aaron Larisch <aaron-github@openlarry.de>
Date: Wed Jan 15 10:14:18 2020 +0100
Merge branch 'master' into add-ecdsa-support
commit 85b791bf07391217a1c00d957b6eb8eff091a7b0
Merge: c2339931 ff74b8aa
Author: Aaron Larisch <aaron-github@openlarry.de>
Date: Tue Dec 17 15:21:10 2019 +0100
Merge branch 'master' into add-ecdsa-support
commit c2339931c5c8ec646e1ae8ebc148b75f06c904dc
Merge: eee0238b 4e8b2bfc
Author: Aaron Larisch <aaron-github@openlarry.de>
Date: Sat Dec 7 17:17:05 2019 +0100
Merge branch 'master' into add-ecdsa-support
commit eee0238b6b9c97bcfae2b4183ade3575d0b97563
Merge: 9e1ff332 1d1a9a27
Author: Aaron Larisch <aaron-github@openlarry.de>
Date: Fri Nov 8 12:53:51 2019 +0100
Merge branch 'master' into add-ecdsa-support
commit 9e1ff332d163c9c2a9140bbe7388021a930dc759
Merge: ab164253 ea4da60c
Author: Aaron Larisch <aaron-github@openlarry.de>
Date: Fri Nov 1 16:06:41 2019 +0100
Merge branch 'master' into add-ecdsa-support
commit ab164253306e6bf696ef1cbf2235f2de3f05e9f5
Merge: c0499263 573e62f1
Author: Aaron Larisch <aaron-github@openlarry.de>
Date: Thu Oct 31 13:57:01 2019 +0100
Merge branch 'master' into add-ecdsa-support
commit c0499263455d49a807ff4d79b9d439dfd8e66137
Merge: 6a6d6c4a c4316150
Author: Aaron Larisch <aaron-github@openlarry.de>
Date: Thu Oct 31 13:55:28 2019 +0100
Merge pull request #1 from mhofer117/tls-sni-ecdsa
Change line endings in functions.inc.php back to CRLF
commit c43161507bcb48750b865a657e6fe80c02812c83
Author: Marcel Hofer <m.hofer117@gmail.com>
Date: Sun Oct 20 19:02:17 2019 +0200
remove empty docker-entrypoint.sh
commit efd6cd1847f718900be72d20fa6361fda975bf1c
Merge: a2a0821a 6a6d6c4a
Author: Marcel Hofer <m.hofer117@gmail.com>
Date: Sun Oct 20 19:00:07 2019 +0200
Merge remote-tracking branch 'OpenLarry/add-ecdsa-support' into tls-sni-ecdsa
# Conflicts:
# data/Dockerfiles/acme/docker-entrypoint.sh
# data/conf/dovecot/dovecot.conf
# data/conf/nginx/site.conf
# data/conf/postfix/main.cf
# data/web/inc/ajax/dns_diagnostics.php
# data/web/inc/functions.inc.php
# docker-compose.yml
# generate_config.sh
# update.sh
commit a2a0821a38a55cb99ba1dd32383344ed6504f451
Merge: 4a62809d 05e7c958
Author: Marcel Hofer <m.hofer117@gmail.com>
Date: Sun Oct 20 18:50:16 2019 +0200
Merge branch 'tls-sni' into tls-sni-ecdsa
commit 4a62809d33d1ef88c09f89cf1168a1f01f578e6f
Author: Marcel Hofer <m.hofer117@gmail.com>
Date: Sat Oct 19 13:04:02 2019 +0200
[SSL] add optional ecdsa certs in addition to rsa certs
commit 6a6d6c4a604cb5d310308e1adf1b709febe2460d
Merge: 351abd29 9f66b83a
Author: Aaron Larisch <aaron-github@openlarry.de>
Date: Tue Oct 1 11:01:28 2019 +0200
Merge branch 'master' into add-ecdsa-support
commit 351abd29b2f41f97a57681dccb042d9c2321498d
Merge: eddb2693 04853794
Author: Aaron Larisch <aaron-github@openlarry.de>
Date: Mon Sep 9 17:40:47 2019 +0200
Merge branch 'master' into add-ecdsa-support
commit eddb26938d04dee6e2dd29ab65a3fefd1d07732d
Merge: 9d13ead4 6e82a359
Author: Aaron Larisch <aaron-github@openlarry.de>
Date: Thu Aug 29 11:36:03 2019 +0200
Merge branch 'master' into add-ecdsa-support
commit 9d13ead450239a1408937e85aeed36afdd48631e
Merge: 478c4d1f f21cf134
Author: Aaron Larisch <aaron-github@openlarry.de>
Date: Thu Aug 8 13:22:58 2019 +0200
Merge branch 'master' into add-ecdsa-support
commit 478c4d1f6364d60e58205656e8d0dd784ce0f088
Merge: 46dbf3bc 7665cc2a
Author: Aaron Larisch <aaron-github@openlarry.de>
Date: Thu Jun 27 14:49:09 2019 +0200
Merge branch 'master' into add-ecdsa-support
commit 46dbf3bc5e454b7bf74d1886f42e73b7d5b46d7b
Merge: 680a2726 69fb7f7a
Author: Aaron Larisch <aaron-github@openlarry.de>
Date: Fri May 31 12:33:32 2019 +0200
Merge branch 'master' into add-ecdsa-support
commit 680a272664c451323dbc58f7dcbe17f96d387f1c
Merge: f69559f0 b20ff13e
Author: Aaron Larisch <aaron-github@openlarry.de>
Date: Tue May 7 12:29:34 2019 +0200
Merge branch 'master' into add-ecdsa-support
commit f69559f03bd25752c2c526c1ac1b475a02508377
Merge: 3e8a9583 cd881652
Author: Aaron Larisch <aaron-github@openlarry.de>
Date: Mon Apr 15 12:55:41 2019 +0200
Merge branch 'master' into add-ecdsa-support
commit 3e8a9583826d8e413e3f21c12fef0e116ad11b54
Merge: 956a487f 4aae7277
Author: Aaron <OpenLarry@users.noreply.github.com>
Date: Mon Mar 18 16:52:37 2019 +0100
Merge branch 'master' into add-ecdsa-support
commit 956a487f822580314186de7b0332e7f8ffaf289f
Author: Aaron Larisch <aaron-github@openlarry.de>
Date: Sun Mar 17 12:34:56 2019 +0100
Set SKIP_ECDSA_CERT to y by default
commit 7103fe7e89b8ba8d45d59e65a6823c7c160565c4
Author: Aaron Larisch <aaron-github@openlarry.de>
Date: Sun Mar 17 11:05:05 2019 +0100
Add SKIP_ECDSA_CERT config parameter
commit 91fca4fa3835f146571d9e5546c37fceffec2a42
Author: Aaron Larisch <aaron-github@openlarry.de>
Date: Sat Mar 16 18:48:28 2019 +0100
Show TLSA records for ECDSA certificates in DNS diagnostics
commit cc521b02501f03f692686f3dedc43339b342aa96
Author: Aaron Larisch <aaron-github@openlarry.de>
Date: Sat Mar 16 13:04:03 2019 +0100
Add ECDSA support
Co-authored-by: Marcel Hofer <m.hofer117@gmail.com>
2023-03-19 14:24:46 +01:00
macwinnie
b985ba4f0e
Improve send-as behaviour
...
Receiving mails for wildcard alias addresses is really easy – but
sending mails from those any-aliases was not possible at all unless
every sender address was added as an explicit alias to the database.
By this change in the database query for allowed sender addresses, the
first finding `not NULL` (see [`SELECT COALESCE`](https://www.w3schools.com/sql/func_sqlserver_coalesce.asp ) for how it works)
– either an exact alias `mailbox@domain.tld` or the wildcard alias `@domain.tld`
will be allowed to send mails as the given address ... without the need
of explicit definition within the database.
2022-08-04 01:37:26 +02:00
andryyy
82f4f1fd15
[Postfix] Lookup credentials for user-specific sender transports
2021-08-17 16:51:06 +02:00
andryyy
68f9ca8cb0
[Postfix] Remove broken SASL access map, moved to Dovecot LUA authentication
2021-06-08 13:13:49 +02:00
andryyy
51e3521aac
[Postfix] Remove smtpd_last_auth service; replaced by SASL logging in Dovecot LUA auth process
2021-06-04 14:29:28 +02:00
andryyy
8a83587800
[Postfix] Finally here: MX based transport map routing; Sorry it took years, Patrik
...
[Web] Small fixes
2021-05-28 10:40:41 +02:00
andryyy
5065667ae4
[Postfix] Allow to set and override a relayhost per mailbox
...
[Web] Replace recycle icon with trash (this one made me a bit sad)
[Web] Various small fixes
[Web] Allow or disallow a domain admin to change relayhost settings (default is off, as previous default)
2021-05-26 14:02:27 +02:00
andryyy
dbede2252c
[Ejabberd, Postfix, Dovecot] Do not run DNS check against unbound
2021-04-01 15:24:55 +02:00
ValdikSS
9c559680a6
Add postscreen whitelist syntax and examples ( #3931 )
2021-01-11 19:23:32 +01:00
andryyy
ea98ac6442
[Postfix] Do not create a TLS SNI map when SKIP_LETS_ENCRYPT=y
2021-01-08 12:39:40 +01:00
andryyy
835c4eebb8
[Postfix] Fix HELO name
2020-12-09 14:41:19 +01:00
andryyy
836ea1508e
[Postfix] Fix smtp last login on replicated setups
2020-09-28 16:23:49 +02:00
andryyy
85b027aa9d
[Postfix] Merge syslog filters
...
[Postfix] Create sasl_access map; Use JSON_VALUE and remove unnecessary like command
2020-09-17 19:48:04 +02:00
andryyy
bffa3d962a
[Postfix] Test DNS against mailcow.email
2020-07-11 13:31:48 +02:00
andryyy
ab5d78f675
[Postfix] Fix "disallow login": A catch-all will not catch mail for mailboxes with disallowed login
2020-06-06 01:12:31 +02:00
andryyy
3459c13022
[Postfix] Implement disallowed logins
2020-04-29 11:00:00 +02:00
andryyy
ef0b40085b
[Postfix] Allow to relay only non-local mailboxes
2020-04-03 20:39:53 +02:00
andryyy
06df5f3017
[Postfix] Added custom_postscreen_whitelist.cidr for a custom Postscreen wl, fixes #3313
2020-02-06 08:28:48 +01:00
andryyy
c75fd9ac40
[Postfix] Wait for DNS
2019-11-26 21:09:12 +01:00
andryyy
e1fdbba0f7
[Postfix] Add custom_transport.pcre
2019-11-12 20:44:43 +01:00
Marcel Hofer
2e35da6816
[SSL] create individual domain certificates, add SNI configs for Postfix/Dovecot/Nginx
2019-10-19 12:48:56 +02:00
andryyy
a1cd7d8ee7
[Postfix] Add watchdog@localhost alias
2019-09-04 23:06:29 +02:00
andryyy
b4f159da86
[Postfix] Allow to create an extra.cf file besides main.cf to merge overrides
...
[Postfix] Better logging while bootstrapping
[Postfix] Stop container, when a service fails (easier to monitor)
2019-09-02 18:37:05 +02:00
andryyy
3136e020f6
[Postfix] Remove Zeyple, base on Buster
2019-08-09 14:08:58 +02:00
andryyy
2898aa6918
[Postfix] Remove unused alias domain catch all map
2019-07-13 08:59:32 +02:00
andryyy
b139e48eec
Add some hints to autogenerated files
2019-07-08 07:56:41 +02:00
andryyy
e25e9c7b40
[Postfix] Create resource maps
2019-06-09 16:49:38 +02:00
andryyy
b6d9fbf747
[Postfix] Fix Postfix map
2019-03-09 12:30:36 +01:00
andryyy
15970ab8dc
[Postfix] Fix sasl_passwd query from alias domain, fixes #2410
...
[Web] Major fix, added a line break!
[Compose] Update Postfix image
2019-03-09 11:22:39 +01:00
Michael Kuron
0974a5fb60
Fix transport map authentication with multiple identical nexthops
2018-12-25 15:02:50 +01:00
andryyy
8f686c1543
[Postfix] Split sasl passwd maps to not lookup sender_dependent_default_transport_maps auth info when querying for transport_maps
2018-12-19 09:38:56 +01:00
andryyy
a4452ed3a5
[Postfix] Important fix for mailbox maps, fixes #2013
2018-11-15 22:55:45 +01:00
andryyy
9ee557e5a5
[Postfix] Adjust mailbox query
2018-11-12 09:49:52 +01:00