34 Commits

Author SHA1 Message Date
Zhang Huangbin 2ce350fd00 Update netdata v2.10.3.
Fail2ban: Read log files from the end of file instead of the head after restarted fail2ban service.
2026-05-07 17:07:48 +08:00
Zhang Huangbin c93c2799c0 Support CentOS Stream 10. Note: SOGo is not available due to no binary packages offered by sogo team.
Switch perl dbd from mysql to mariadb.
Switch postfix default db type from hash/btree to lmdb on CentOS 10. btree/hash are not supported by postfix package.
2025-04-28 12:31:21 +08:00
iRedMail 12d9bb8c2f Fixed: Fail2ban doesn't start any jails on OpenBSD 7.6. 2025-01-21 11:14:59 +08:00
Guilhaume Bordiau f05b2affd4 Wrong column name for fail2ban stop/cleanup action (#266) 2024-10-10 09:10:19 +08:00
Zhang Huangbin 557ba3deca Add text on first dialog page to warn sysadmin that iRedMail requies a fresh server. 2024-09-19 11:49:20 +08:00
Zhang Huangbin 1d60f3c779 Fixed: fail2ban can not start on OpenBSD after reboot.
Thanks to wkatsak (forum): https://forum.iredmail.org/post88970.html#p88970
2024-06-28 10:20:12 +08:00
Zhang Huangbin 909bd934fd Pipe stdout/stderr to /dev/null. 2024-05-28 10:41:56 +08:00
Zhang Huangbin 57155f4a7b Fix incorrect sql command. 2024-05-24 11:00:20 +08:00
Zhang Huangbin 9723b613b8 Fail2ban now stores started jail names in SQL table fail2ban.jails. 2024-05-24 10:50:39 +08:00
Zhang Huangbin 87eb9c27dd Supports new distribution releases:
- Ubuntu 24.04
- OpenBSD 7.5

Dropped distribution releases:
- Debian 11 (bullseye). Please use the latest stable release Debian 12.
- Ubuntu 20.04 (focal). Please use the latest stable release Ubuntu 24.04 (recommended) or 22.04 instead.
- OpenBSD 7.3, 7.4. Please use 7.5 instead.

Improvements:
- Disable multi-threaded database reload in ClamAV (with parameter "ConcurrentDatabaseReload no").

Updated packages:
+ netdata -> 1.45.4
+ mlmmjadmin -> 3.2.1
+ iRedAPD -> 5.6.0
+ uwsgi -> 2.0.25.1 (OpenBSD only)
2024-05-17 10:02:21 +08:00
Zhang Huangbin 465aae7c9c Tune the order of ban rule. 2023-10-26 14:34:50 +08:00
Zhang Huangbin 443c3576f1 Fail2ban: Do not ban client which triggers lost connection after UNKNOWN error.
Bump Roundcube v1.6.4. SECURITY UPDATE.
Bump netdata v1.43.0.
2023-10-23 11:31:35 +08:00
Zhang Huangbin a032885544 Supports new distribution release: Debian 12. Thanks to @Anzulo1984 for the contribution for initial Debian 12 support.
Fixes incorrect ssl ca file in Postfix config file.

Notes:

- Both Debian 11 and 12 are supported, but 12 is now recommended.
- SOGo Groupware is not yet available on Debian 12 because SOGo team does not offer binary packages for Debian 12 yet.

closes #215
closes #218
closes #219
2023-06-13 10:50:49 +08:00
Zhang Huangbin dd1e3bcc9d Support OpenBSD-7.1, drop 7.0. 2022-08-24 23:19:30 +08:00
Zhang Huangbin b5cd6a5d01 Shorten the Fail2ban jail name: postfix-pregreet -> pregreet. fixes #173 2022-03-27 10:39:01 +08:00
Zhang Huangbin f9f1d81862 Code cleanup. 2022-02-07 17:31:33 +08:00
Zhang Huangbin a6c1e3787d Update Roundcube webmail to 1.5.0. Note: PHP 5.5 or later is required. 2021-10-21 12:45:02 +08:00
Zhang Huangbin 10262ef75f Update iRedAdmin to 1.4. 2021-07-28 10:26:45 +08:00
Zhang Huangbin 4ee2ce1cf3 Store (base64) encoded log lines which triggered firewall ban by Fail2ban.
fixes #107

Note: In upcoming iRedAdmin-Pro release, it will decode the encoded log lines.
2021-02-28 13:23:13 +08:00
beckerr-rzht 2b94e3601b Fix possible sql injection using loglines (#100)
Thanks @beckerr-rzht :)
2020-12-04 00:17:11 +08:00
Zhang Huangbin be9edb5e1e Fixed: Fail2ban can not store banned IP address when its country name contains quotes. 2020-11-06 11:26:03 +08:00
Zhang Huangbin d8f3629e38 Shorten column size for fail2ban sql tables. 2020-10-12 23:32:29 +08:00
Zhang Huangbin 3b1fb40f6f - Drop Python 2. Note: iRedAdmin(-Pro) does not fully support Python 3 yet,
still need some more time to finish the Python 2 to 3 migration.
- Create Amavisd (My)SQL database with `utf8mb4` character set.
- [Fail2ban] Fixed: Not catch all Roundcube login failures in Fail2ban.
- [Nginx] Enable http2 support in Nginx by default.
- [Nginx] Fixed: not compress javascript files in Nginx.
- Add `simplejson` as required package for iRedAdmin.
- Bypass HELO hostnames used by facebook mail servers in Postfix.
- tools/create_mail_user_OpenLDAP.py: Fixed incorrect password.
- Updated packages:
    + netdata -> 1.23.2.
    + uwsgi -> 2.0.19.1. OpenBSD only.
    + mlmmjadmin -> 3.0.1. Fix an issue in upgrade script.
    + iRedAPD-4.4.
2020-08-01 19:23:49 +08:00
Zhang Huangbin ad6c0fc92b Fixed: Fail2ban match rules were not up to date to match log lines produced by the latest Roundcube. Thanks Igor Cej for the feedback.
Always exit with code 0 in tools/backup_sogo.sh. Thanks Adam Szucs for the feedback.
2020-07-06 12:12:47 +08:00
Zhang Huangbin 9ac4f184e3 Do not log 'IP address not found' in fail2ban sql db.
SOGo: Do not send notification email while creating calendar/address book folder.
2020-06-11 21:04:32 +08:00
Zhang Huangbin 6b6d874a11 - Fixed: not correctly update uwsgi config file to load Python-3 plugin.
- Fixed: not add all required apt repos on Ubuntu.
- Fail2ban: Store reverse DNS name of banned IP address in SQL db.
2020-06-06 01:42:56 +08:00
Zhang Huangbin 2de2d0eb80 - WIP: Upgrade mlmmjadmin to 3.0, it now requires Python 3.5+.
- WIP: Upgrade iRedAPD to 4.0, it now requires Python 3.5+.
- Fixed: Add missing INDEX for SQL column `msgs.time_iso` in `amavisd` database.
- Fixed: incorrect set sql db driver to `pymysql` in iRedAPD for PostgreSQL backend.
- Fixed: script `fail2ban_banned_db` may fail if commands `geoiplookup` and
  `geoiplookup6` are not available.
- Fixed: explicitly set backend to `pooling` for Fail2ban jails.
- Fixed: not support custom adminer css file in Nginx snippet file
  `adminer.tmpl`.
- Enable SRS in iRedAPD by default. Note: it is not enabled in Postfix.
- Fail2ban: Store number of failures and matched log lines which triggered ban
  in SQL db. You can view the log lines after logged into iRedAdmin-Pro as
  global admin.
2020-06-02 12:43:02 +08:00
Zhang Huangbin db12dfeda3 iRedMail now supports Ubuntu 20.04 LTS with MariaDB and PostgreSQL backends. 2020-05-05 11:43:05 +08:00
Zhang Huangbin 989267cea8 Typo 2020-04-16 09:51:26 +08:00
Zhang Huangbin 2663292701 Alter SQL columns. 2020-04-15 20:34:27 +08:00
Zhang Huangbin 80055820a7 Able to store banned IP addresses in SQL db. 2020-04-13 19:01:37 +08:00
Zhang Huangbin 08f9283dff Fail2ban now works on OpenBSD (6.6). 2020-04-07 13:39:48 +08:00
Zhang Huangbin 585c712bc7 Fixed: Installer: not correctly set Nginx log file path in Fail2ban. 2019-12-13 12:49:33 +08:00
Zhang Huangbin a3410ab28c Re-organize directory structure. 2019-12-09 08:25:52 +08:00