Posts by UncleJ
-
-
Here is what is listed in the files:
/etc/opendkim.conf
/etc/opendkim/SigningTable/etc/opendkim/KeyTable
/etc/opendkim/keys
So for me this looks normal. During looking through the files I remembered something which might be the reason. I have added a secondary mx-entry for my domains named "mx30" so there are two mx-entries - the original "mail" and my "mx30". Could that be the reason?Regards Jörg
-
Hallo,
du brauchst dir die Passwörter nicht aufschreiben - sie sind entweder in der imscp.conf oder der jeweiligen .data Datei gespeichert und können dort eingesehen werden. Ich denke wenn du die Kennwörter in den entsprechenden Dateien vor der Installation hinterlegst, werden diese bei der Installation verwendet.´
Gruß Jörg
-
Is there any difference if you clear these Settings?
If I remove these two lines the mail is sent correctly but there is no signature.
Regards Jörg
-
Hello everyboy,
I tried to create some listener files which allow to modify the named config based on domains but I got stuck when passing over the array. Perhaps someone may help to fix this - the final listener will be provided to the community.
This is where I am stuck - I created a listener which adds a general list of mx-entries to all domains (see here) but when I try to make this per Domain the array is not working (complete code is attached).
So this works:
Code- my %additionalMailservers = ( 'mx50' => '50' );# All dns mail-serversmy %mailserverList = %additionalMailservers;if(%mailserverList) { my @formattedEntries = (); push @formattedEntries, '; custom MX DNS entries BEGIN'; # add out-of-zone mail-servers while (my ($name, $priority) = each(%mailserverList)) { push @formattedEntries, '@ IN MX ' . $priority . ' ' . $name; }....
But this does not work:
Code- my %{$perDomainAdditionalMailservers['testdomain']} = ( 'mx40' => '40' );
- # All dns mail-servers
- my %mailserverList = %{$perDomainAdditionalMailservers['testdomain']};
- if(%mailserverList) {
- my @formattedEntries = ();
- push @formattedEntries, '; custom MX DNS entries BEGIN';
- # add out-of-zone mail-servers
- while (my ($name, $priority) = each(%mailserverList))
- {
- push @formattedEntries, '@ IN MX ' . $priority . ' ' . $name;
- }
- ....
So, perhaps anyone knows how to solve this. Thanks in advance.
Regards Jörg
-
Hello everybody,
as I took the provided listener files and adapted them to my needs I wanted to provide the results to you as this might be helpful for others too.
10_named_replace_default_nameservers.txt
This is a fork of the with the installer provided listener "10_named_tuning2.pl" which I modified in oder to add special NS-entries per Domain.11_named_add_mx_dns_records.txt
This listener adds MX-entries to the domains according to the config.12_named_add_remote_mx_host_dns_records.txt
This listener adds the IP-addresses for the remote mx-hosts (which can be added with the "11_named_add_mx_dns_records"-listener).13_named_add_local_mail_host_dns_records.txt
This listener enables you to add special hosts to the mail-section like e.g. autodiscover oder autoconfig.14_named_add_local_host_dns_records.txt
This listener adds normal hosts to the config.20_named_dualstack.txt
This is a fork of the with the installer provided listener "20_bind9_dualstack.pl" which I modified in order to place the hosts in the corresponding section and remove the mail-related entries when mail is disabled.Please note that all added entries are no longer added under CUSTOM_DNS section but the most fitting original section as I wanted to avoid to mix custom dns entries made over the control panel with the custom dns feature with my own defaults.
Regards Jörg
-
Hello,
thats the content of my main.cf:
Code- # Some common configuration parameters
- inet_protocols = ipv4
- inet_interfaces = all
- mynetworks_style = host
- # IPv4 source for outbound mails
- smtp_bind_address = SERVER_IP
- # IPv6 source for outbound mails
- #smtp_bind_address6 =
- myhostname = panel1.joergeichhorn.de
- mydomain = panel1.joergeichhorn.de.local
- myorigin = $myhostname
- smtpd_banner = $myhostname ESMTP i-MSCP 1.2.9 Managed
- # Receiving messages parameters
- mydestination = $myhostname, $mydomain
- append_dot_mydomain = no
- append_at_myorigin = yes
- local_transport = local
- transport_maps = hash:/etc/postfix/imscp/transport
- relay_domains = hash:/etc/postfix/imscp/relay_domains
- alias_maps = hash:/etc/aliases
- alias_database = hash:/etc/aliases
- # Delivering local messages parameters
- mail_spool_directory = /var/mail
- # Mailboxquota
- # => 0 for unlimited
- # => 104857600 for 100 MB
- mailbox_size_limit = 0
- mailbox_command = procmail -a "$EXTENSION"
- # Message size limit
- # => 0 for unlimited
- # => 104857600 for 100 MB
- message_size_limit = 0
- biff = no
- recipient_delimiter = +
- local_destination_recipient_limit = 1
- local_recipient_maps = unix:passwd.byname $alias_database
- # i-MSCP Autoresponder parameters
- imscp-arpl_destination_recipient_limit = 1
- # Delivering virtual messages parameters
- virtual_mailbox_base = /var/mail/virtual
- virtual_mailbox_limit = 0
- virtual_mailbox_domains = hash:/etc/postfix/imscp/domains
- virtual_mailbox_maps = hash:/etc/postfix/imscp/mailboxes
- virtual_alias_maps = hash:/etc/postfix/imscp/aliases
- virtual_minimum_uid = 999
- virtual_uid_maps = static:999
- virtual_gid_maps = static:8
- # SASL parameters
- smtpd_sasl_type = cyrus
- smtpd_sasl_path = smtpd
- smtpd_sasl_auth_enable = yes
- smtpd_sasl_security_options = noanonymous
- broken_sasl_auth_clients = yes
- smtpd_sasl_authenticated_header = yes
- smtpd_helo_required = yes
- smtpd_helo_restrictions = permit_mynetworks,
- permit_sasl_authenticated,
- reject_invalid_helo_hostname,
- reject_non_fqdn_helo_hostname
- smtpd_sender_restrictions = reject_non_fqdn_sender,
- reject_unknown_sender_domain,
- permit_mynetworks,
- permit_sasl_authenticated
- smtpd_relay_restrictions =
- smtpd_recipient_restrictions = reject_non_fqdn_recipient,
- reject_unknown_recipient_domain,
- permit_mynetworks,
- permit_sasl_authenticated,
- reject_unauth_destination,
- reject_unlisted_recipient,
- permit
- smtpd_data_restrictions = reject_multi_recipient_bounce,
- reject_unauth_pipelining
- # TLS parameters
- smtpd_tls_security_level = may
- smtpd_tls_mandatory_protocols = !SSLv2, !SSLv3
- smtpd_tls_protocols = !SSLv2, !SSLv3
- smtpd_tls_loglevel = 1
- smtpd_tls_cert_file = /etc/imscp/imscp_services.pem
- smtpd_tls_key_file = /etc/imscp/imscp_services.pem
- smtpd_tls_auth_only = no
- smtpd_tls_received_header = yes
- smtp_tls_security_level = may
- smtp_tls_mandatory_protocols = !SSLv2, !SSLv3
- smtp_tls_protocols = !SSLv2, !SSLv3
- smtp_tls_loglevel = 1
- smtp_tls_CAfile = /etc/ssl/certs/ca-certificates.crt
- virtual_transport = dovecot
- dovecot_destination_recipient_limit = 1
- milter_default_action = accept
- non_smtpd_milters = inet:localhost:12345
- smtpd_milters = inet:localhost:12345
- # Plugin::Postscreen - Begin
- postscreen_greet_action = ignore
- postscreen_dnsbl_sites = zen.spamhaus.org*2,
- dnsbl-1.uceprotect.net*1,
- bl.spamcop.net*1,
- list.dnswl.org=127.0.[0..255].[1..3]*-2
- postscreen_dnsbl_threshold = 3
- postscreen_dnsbl_action = ignore
- postscreen_access_list = permit_mynetworks,
- cidr:/etc/postfix/postscreen_access.cidr
- postscreen_blacklist_action = ignore
- # Plugin::Postscreen - Ending
Regards Jörg -
Hello everybody,
yesterday I updated my systems to i-MSCP 1.2.9. After that I reinstalled all Plugins and noticed that I have not been able to send any mails anymore after having activated for the domain. The effect shows on normal mail client as well as the webmail panel. The entries for DNS are correctly added to bind-files and the milter was added to postfix main.cnf.
The syslog states as following:
Code- Jul 3 19:40:17 SERVERNAME postfix/smtpd[546]: connect from SENDER_FQDN[SENDER_IP]
- Jul 3 19:40:18 SERVERNAME postfix/smtpd[546]: Anonymous TLS connection established from SENDER_FQDN[SENDER_IP]: TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)
- Jul 3 19:40:18 SERVERNAME postfix/smtpd[546]: 71AF180B50: client=SENDER_FQDN[SENDER_IP], sasl_method=LOGIN, sasl_username=SENDER_EMAIL
- Jul 3 19:40:18 SERVERNAME postfix/cleanup[551]: 71AF180B50: message-id=<>
- Jul 3 19:40:18 SERVERNAME postfix/cleanup[551]: 71AF180B50: milter-reject: END-OF-MESSAGE from SENDER_FQDN[SENDER_IP]: 4.7.1 Service unavailable - try again later; from=<SENDER_EMAIL> to=<TARGET_EMAIL> proto=ESMTP helo=<IconiaW700.HOERNCHEN.local>
Please note that I replaced the following entries: SENDER_FQDN, SENDER_IP, TARGET_EMAIL, SENDER_EMAIL
I use the default plugin-config-file.
There are also other plugins installed:
CronJobs Version 1.2.2, DomainAutoApproval Version 1.1.0, InstantSSH Version 3.3.1, Monitorix Version 1.2.1, PanelRedirect Version 1.1.0, PhpSwitcher Version 1.0.1, Postscreen Version 1.0.0, RecaptchaPMA Version 1.1.0, RoundcubePlugins Version 1.2.1, ServerDefaultPage Version 1.1.1If you need further information or already have any clue about the reason please let me know. Thanks in advance.
Regards Jörg
-
Hello everybody,
I wanted to know if there is any possibity to also set the tools (pma, ftp, webmail) into some kind of maintenance mode / redirect so that clients and resellers aren't able to access them. This would be helpful for example when you plan to work on issues which also effect the tools like some plugins in order to prevent that someone is using them when applying the changes.
What do you think about this and is this perhaps somehow already possible?
Thanks in advance for any reply.Regards Jörg
-
Hi,
there is just one little missing thing with the final code - you need to replace "setRights" by "iMSCP::Rights->setRights" or add "use iMSCP::Rights;" to the script. Final version of the script is attached.
Regards Jörg