Roundcube plugins

July 15, 2020 Roberto Puzzanghera 20 comments

UPDATE as of Jul 15: markasjunk plugin has now info about the cmd_learn and multi_driver drivers

Official repository: http://plugins.roundcube.net/

My enabled plugins are (at the moment):

password, which is already included in the plugins folder
managesieve, which writes sieve scripts to filter the incoming mails (reject, move to specific folders etc.). Note that in order to use it you must have Dovecot managesieve enabled.
SpamAssassin-User-Prefs-SQL, which writes the spamassassin user preferences in the DB. The user will be allowed to create a black/white list, to adjust the required_score and so on.
markasjunk. You can add the sender's email address to the blacklist, or run a command such as sa_learn. Requires sauprefs.
rcguard. This plugin logs failed login attempts and requires users to go through a reCAPTCHA verification process when the number of failed attempts go too high.
Context Menu. Adds context menus to the message list, folder list and address book. Menu includes the abilities mark messages as read/unread, delete, reply and forward.
autologon. Autologin from external Site e.g. (CMS, Portal ...)
logout_redirect. Modified version to only redirect to the homepage (depending on the domain part of the default identity)
newmail_notifier. can notify new mail focusing browser window and changing favicon, playing a sound and displaying desktop notification (using webkitNotifications feature).
carddav. CardDav client. You can sync your addressbook against a CardDav server like nextcloud or SoGO.
enigma adds support for viewing and sending of signed and encrypted messages in PGP (RFC 2440) and PGP/MIME (RFC 3156) format

Installing and configuring Spamassassin

July 15, 2020 Roberto Puzzanghera 25 comments

Info: http://spamassassin.apache.org/
Docs: http://spamassassin.apache.org/full/3.4.x/doc/
Latest version: 3.4.4
Download: http://spamassassin.apache.org/downloads.cgi

SpamAssassin is a mature, widely-deployed open source project that serves as a mail filter to identify Spam. SpamAssassin uses a variety of mechanisms including header and text analysis, Bayesian filtering, DNS blocklists, and collaborative filtering databases. SpamAssassin runs on a server, and filters spam before it reaches your mailbox.

UPDATE as of Jul 15: added Razor2, Pyzor and Spamcop configuration (thanks to Gabriel Torres for the hint).

qmailadmin

May 22, 2020 Roberto Puzzanghera 43 comments

Author: Inter7
Version: 1.2.16
Dowload the sources from http://sourceforge.net/projects/qmailadmin/files/
Combined patch v. 20200522

qmailAdmin is a free software package that provides a web interface for managing a qmail system with virtual domains. It provides admin for adding/deleting users, Aliases, Forwards, Mailing lists and Autoresponders.

Combined patch details

qmailadmin-skin, a patch that I created during coronavirus spare time, provides a new responsive skin to the control panel. It modifies everything under the html dir and many .c files in order to adjust the html embedded into the source files. Added a stylesheet style.ccs in the images folder and png files for the qmail logo.
patch to call cracklib in order to check for the password strenght. This should avoid unsafe accounts created by domain administrators such as "test 123456".
A patch (thanks to Tony, original author unknown) which gets qmailadmin to have authentication failures logged. This makes possibile to ban malicious IPs via fail2ban. It is required to create the log file /var/log/qma-auth.log initially and assign write priviledges to apache.
ezmlm-idx 7 compatibility patch (author unknown), which restores the compatibility with ezmlm-idx-7 (thanks to J.D. Trolinger for the advice).
a fix to the catchall account (thanks to Luca Franceschini).
another fix to autorespond.c to correct the way .qmail files are modified

Changelog

2020.05.22
- mod_user.html: removed the "required" attribute on password field, to allow modifications with no password change

Patching qmail

April 25, 2020 Roberto Puzzanghera 278 comments

Latest stable combined patch for netqmail-1.06 v. 2020.04.25 (MD5)

Changelog

The complete changelog and patch info are inside the README.PATCH file.

2020.04.25
-qmail-smtpd.c: added rcptcount = 0; in smtp_rset function to prevent the maxrcpto error if control/maxrcpt limit has been exceeded in multiple messages sent sequentially rather than in a single mail (tx Alexandre Fonceca)
2020.04.16
-qmail-remote-logging patch added (more info here)
2020.04.10
-DKIM patch updated to v. 1.28
* outgoing messages from null sender ("<>") will be signed as well with the domain in env variable DKIMDOMAIN
* declaring NODK env variable disables old domainkeys signature, while defining NODKIM disables DKIM.
2020.01.11
-qmail-tls patch updated to v. 20200107
* working client cert authentication with TLSv1.3
2019.12.08
-BUG qmail-smtpd.c: now TLS is defined before chkuser.h call, to avoid errors on closing the db connection (tx ChangHo.Na)
2019.08.07
- a couple of adjustments to chkuser (tx Luca Franceschini, more info here)
* BUG - since any other definition of starting_string ends up as "DOMAIN", if starting_string is otherwise defined, chkuser will be turned off.
* CHKUSER_ENABLE_ALIAS_DEFAULT, CHKUSER_VAUTH_OPEN_CALL and CHKUSER_DISABLE_VARIABLE are now defined in chkuser_settings.h
* Now CHKUSER_DISABLE_VARIABLE, CHKUSER_SENDER_NOCHECK_VARIABLE, CHKUSER_SENDER_FORMAT_NOCHECK, CHKUSER_RCPT_FORMAT_NOCHECK and CHKUSER_RCPT_MX_NOCHECK can be defined at runtime level as well.
2019.07.12
- qmail-channels patch added
more info here http://www.thesmbexchange.com/eng/qmail-channels_patch.html
- improved verbosity of die_read function in qmail-smtpd.c (qmail-smtpd: read failure). More info here
2019.06.19
- DKIM patch updated to v. 1.26
* BUG - honor body length tag in verification
2019.05.24
- qmail-tls patch updated to v. 20190517
* bug: qmail-smtpd ssl_free before tls_out error string (K. Wheeler)
2019.05.23
- DKIM patch updated to v. 1.25
* SIGSEGV - when the txt data for domainkeys is very large exposed a bug in the way realloc() was used incorrectly.
* On 32 bit systems, variable defined as time_t overflows. Now qmail-dkim will skip expiry check in such conditions.
2019.04.25
* bug fixed on qmail-smtpd.c: it was selecting the wrong openssl version on line 2331 (tx ChangHo.Na)
2019.04.09
- qmail-tls patch updated to v. 20190408
* make compatible with openssl 1.1.0 (Rolf Eike Beer, Dirk Engling, Alexander Hof)
* compiler warnings on char * casts (Kai Peter)

Dovecot vpopmail-auth driver removal

March 17, 2020 Roberto Puzzanghera 6 comments

Those who are still using the Dovecot's vpopmail auth driver should consider a migration to the sql driver, as on March 17 the Dovecot Team announced its removal possibly as soon as the v2.3.11 will be released. See here for additional info about obsolete feature removal.

Comments' new filter in place. Please report issues

March 11, 2020 Roberto Puzzanghera 0 comments

These days I'm forced at home and I've found the time to improve the filter against undesired comments.

Please report any issue dropping me an email if your comments are rejected.

Roberto

Configuring DKIM for qmail

April 10, 2020 Roberto Puzzanghera 134 comments

This note concerns the DKIM patch embedded in my combined patch (more info here). This topic is advanced and you can skip it at the beginning.

Info: http://www.dkim.org/ - http://en.wikipedia.org/wiki/DomainKeys_Identified_Mail
Author: Manvendra Bhangui
Patch's version: 1.28
Download: from SourceForge - local copy

DKIM provides a method for validating a domain name identity that is associated with a message through cryptographic authentication. The validation technique is based on public-key cryptography: Responsibility is claimed by the signer by adding a domain name to the message and then also affixing a digital signature of it and the message. The value is placed in the DKIM-Signature: header field. The verifier recovers the signer's public key using the DNS, and then verifies the signature.