Re-enable dovecot quota status service.

This commit is contained in:
Zhang Huangbin
2026-02-26 17:26:20 +08:00
parent 03e2d35a13
commit 1dccce9156
6 changed files with 18 additions and 1 deletions
-1
View File
@@ -9,7 +9,6 @@ iRedMail-1.7.5:
* Improvements:
- Install SOGo on Debian 13 (trixie) from SOGo nightly build apt repository.
- Disable quota status service (port `12340`) in Dovecot and Postfix.
* Updated packages:
+ Roundcube 1.6.13 (addresses 2 security issues)
+3
View File
@@ -134,6 +134,9 @@ fi
export DOVECOT_SERVICE_STATS_USER="${SYS_USER_VMAIL}"
export DOVECOT_SERVICE_STATS_GROUP="${SYS_GROUP_VMAIL}"
export DOVECOT_SERVICE_STATS_PORT='24242'
# Dovecot 2.3: https://doc.dovecot.org/2.3/configuration_manual/quota_plugin/#quota-plugin
# Dovecot 2.4: https://doc.dovecot.org/main/core/plugins/quota.html
export DOVECOT_SERVICE_QUOTA_STATUS_PORT='12340'
# Local (Mail) Delivery Agent
# - dovecot
+1
View File
@@ -153,6 +153,7 @@ dovecot_config()
perl -pi -e 's#PH_QUOTA_WARNING_USER#$ENV{SYS_USER_VMAIL}#' ${DOVECOT_CONF}
perl -pi -e 's#PH_QUOTA_WARNING_GROUP#$ENV{SYS_GROUP_VMAIL}#' ${DOVECOT_CONF}
perl -pi -e 's#PH_DOVECOT_SERVICE_QUOTA_STATUS_BIND_ADDRESS#$ENV{DOVECOT_SERVICE_QUOTA_STATUS_BIND_ADDRESS}#' ${DOVECOT_CONF}
perl -pi -e 's#PH_DOVECOT_SERVICE_QUOTA_STATUS_PORT#$ENV{DOVECOT_SERVICE_QUOTA_STATUS_PORT}#' ${DOVECOT_CONF}
# Quota dict.
perl -pi -e 's#PH_SERVICE_DICT_USER#$ENV{SYS_USER_VMAIL}#' ${DOVECOT_CONF}
+3
View File
@@ -145,6 +145,9 @@ postfix_config_basic()
perl -pi -e 's#PH_IREDAPD_SRS_FORWARD_PORT#$ENV{IREDAPD_SRS_FORWARD_PORT}#g' ${POSTFIX_FILE_MAIN_CF}
perl -pi -e 's#PH_IREDAPD_SRS_REVERSE_PORT#$ENV{IREDAPD_SRS_REVERSE_PORT}#g' ${POSTFIX_FILE_MAIN_CF}
# Dovecot quota-status service
perl -pi -e 's#PH_DOVECOT_SERVICE_QUOTA_STATUS_PORT#$ENV{DOVECOT_SERVICE_QUOTA_STATUS_PORT}#g' ${POSTFIX_FILE_MAIN_CF}
# Distro releases ship Postfix 3.6+.
# - Ubuntu 22.04
# - Debian 12
+10
View File
@@ -270,6 +270,16 @@ service quota-warning {
}
}
service quota-status {
# '-p <protocol>'. Currently only 'postfix' protocol is supported.
executable = quota-status -p postfix
client_limit = 1
inet_listener {
address = PH_DOVECOT_SERVICE_QUOTA_STATUS_BIND_ADDRESS
port = PH_DOVECOT_SERVICE_QUOTA_STATUS_PORT
}
}
service dict {
unix_listener dict {
mode = 0660
+1
View File
@@ -200,6 +200,7 @@ smtpd_recipient_restrictions =
permit_mynetworks
permit_sasl_authenticated
reject_unauth_destination
check_policy_service inet:127.0.0.1:PH_DOVECOT_SERVICE_QUOTA_STATUS_PORT
# END-OF-MESSAGE restrictions
smtpd_end_of_data_restrictions =