© I-Hwa Cheng/Agence France-Presse — Getty Images
Accedispamhaus da connessioni fatte con DNS pubblico.- DKIM: added ERROR_FD=2 in control/filterargs to send error output of qmail-dkim in stderr when acting as a qmail-remote filter (Andreas Gerstlauer)qmail-dkim error reporting when signing outgoing messages (Andreas Gerstlauer)helodnscheck.cpp: qmail dir determined dinamicallyqmHandle: Add -x and -X parametr for remove email by To/Cc/Bcc (by Stetinac)qmail-spp greylisting plugin to solve a compilation break on rocky 8 (tx Shailendra Shukla)vpopmaild doesn't work when SHA-512 passwords have been enabled on vpopmail (--disable-sha512-passwords). All SQL queries have been updated.libev are now installed in /usr/local/include/libev (was /usr/local/include) to avoid conflicts with libevent (they both have an event.h header file). vusaged configure command was adjusted accordingly.--enable-sqmail-cdbsimscan now defines the maximum size of messages to be passed to spamassassin via control/simsizelimit filevpopmail e nuovo plugin qmailforward per Roundcube che vanno a risolvere diverse problematiche. Maggiori informazioni nella pagina dedicata..Debian, dove python2 non è presente (grazie a Gabriel Torres)convert-multilog program. In case you decide to stick with the original timestamp, then use the original convert-multilog. (diff)ExtractText notes have been revised and corrected by Gabriel Torrescmd_learn and the multi_driver driversqmailadmin: added the ezmlm-idx 7 compatibility patchDKIMKEY=/var/qmail/control/domainkeys/%/default" from the qmail rc config file, as DKIMKEY is actually ignored by dk-filter, which will look for the key in that location by default. Use DKIMSIGN instead to define yor domainkey location (thanks to Steffen for the hint)dovecot: the user query on the auth is now able to manage pop3/imap/webmail vpopmail limits (thanks to Arturo Blanco)vQadmin: combined patch released (more info inside the patch itself)qmail-remote.c that was causing the sending of an additional ehlo greeting (thanks to Cristoph Grover)qmailadmin: added a patch to log auth failures (thanks to Tony)fail2ban: added a filter against qmailadmin log failuresqmailadmin: added a patch to check for the password strenghtextra.h to record the Message-ID in the qmail-send's log (thanks to Simone for the hint). Look here for details.simscan has been improved with the jms patch. The work dir is mounted as a ramdisk nowfail2ban: qmail-smtp.conf filter updated to look for GREETDELAY linesdovecot because of security reasons (more info here)dovecot upgraded to v. 2.2.14dovecot-pigeonhole recompileddovecot upgraded to v. 2.2.14.rc1dovecot-pigeonhole upgraded to v. 0.4.3/usr/local/dovecot/etc/sieve/roundcube upgraded to v. 1.0.3.roundcube-auth filter to fail2banroundcube upgraded to v. 1.0.2. Fixed some errors in the relative page, as sometime the $config variable was still $rcmail_config as in the past, and all the config files are now merged into config.inc.php (thanks to Otto)clamav upgraded to v. 0.98.3roundcube upgraded to v. 1.0.1ezmlm-idx upgraded to v. 7.2.2qmailadmin recompiled against ezmlm-idx-7.2.2ezmlm-idx upgraded to v. 7.2.0ezmlm-idx, getting the program to be compliant with the Yahoo DMARC Policy Change. You have to recompile qmailadmin against ezmlm as well.qmail-maxrcpt patch, which allows you to set a limit on how many recipients are specifiedroundcube upgraded to v. 1.0.0qmail-smtpd-liberal-lf patch, which allows qmail-smtpd to accept messages that are terminated with a single \n instead of the required \r\n sequence. This should avoid some "read failed" reject.dovecot: upgraded to v. 2.1.10dovecot: upgraded to v. 2.1.9dovecot: upgraded to v. 2.1.6qmail-tap added to my combined patchdovecot: upgraded to v. 2.1.1auth_socket_path variable inside 10-mail.confdovecot: upgraded to v. 2.1.0dovecot-pigeonhole: upgraded to v.0.3.0esmtp-size patch added to my combined patchdoublebounce-trim patchRoundcube: updated to v. 0.7.1. All plugins have been updated to latest version as well.dnsbl.sorbs.org is not on my RBL examples anymore, as it proved to be a bad list. It's rejecting gmail's IPs and also confusing the IP of my own server as dynamic.update_tmprsadh to chown the .pem files to vpopmail to avoid hang-ups during the smtp conversation on port 587 caused by permission problems. qmail-remote.c which was not going into tls on authentication (thanks to Krzysztof Gajdemski)force-tls now quits if the starttls command is not provided when required (thanks to Jacekalex)Dovecot: upgraded to v. 2.0.15dovecot-pigeonhole: upgraded to v . 0.2.4RoundCube: upgraded to v. 0.6. All plugins have been updated to latest versionRoundCube: upgraded to v. 0.5.4 (security fix)force-tls patch allows the management of STARTTLS and CRAM-MD5 variables in the run file, so that there's no need to recompile each time anymore.qmail-inject-null-sender" patch by Stéphane Cottin, which addresses a bug on qmail-injectdovecot was updated to allow maildir++ (thanks to Nicolas) on files 90-quota.conf and 20-imap.confqmail on 64b platforms has been fixedrblsmtpd. Added a page about the greetdelay patch.ext-todo and big-todo patches, which adress the "silly qmail syndrome" on big servers.Spamassassin: updated to v. 3.3.2Roundcube: updated to v. 0.5.3 (2 important bug fixes)Dovecot: added a page concerning the purging of expired emails from Trash/JunkRoundCube: updated to v. 0.5.2. Updated almost all roundcube's plugin to latest version.qmail-rblchk---------
Le SURBL sono liste di siti web che appaiono nel corpo della posta indesiderata. Diversamente dalla maggior parte delle liste non sono liste di indirizzi IP.
I siti web che appaiono nei messaggi di posta indesiderata tendono ad essere più stabili rispetto agli indirizzi IP in rapido cambiamento dei botnet che sono soliti inviare la maggior parte di questi messaggi. Le liste di IP come zen.spamhaus.org possono essere usate in un primo stadio di filtraggio per aiutare a identificare da circa l'80% al 90% dei messaggi di posta indesiderata. Le liste SURBL possono contribuire a eliminare il restante 75% della posta indesiderata in un successivo stadio di filtraggio. Usate insieme alle liste di IP (RBL), le SURBL risultano un metodo molto efficace per identificare fino al 95% della posta indesiderata.
Solr è un server di indicizzazione basato su Apache Lucene. Dovecot communica con esso attraverso delle query HTTP/XML. Il server di indicizzazione consente di fare ricerche di testo in modo veloce nelle mail, compreso il corpo dei messaggi.
SOLR_OPTS="$SOLR_OPTS -Dsolr.config.lib.enabled=true" in solr.in.shDovecot ha recentemente rilasciato i file schema aggiornati alla versione 9, alternativi a quelli che si trovano quiPrima di ogni cosa controllare che la propria versione di java sia almeno la 11.
Scaricare Solr:
SOLR_VER=9.10.1
wget https://www.apache.org/dyn/closer.lua/solr/solr/${SOLR_VER}/solr-${SOLR_VER}.tgz?action=download -O solr-${SOLR_VER}.tgz
Arrestare quindi il server Solr e lanciare l'aggiornamento con le opzioni -f (aggiornamento) e -n (non lanciare do not start the server when finished) options:
tar xzf solr-${SOLR_VER}.tgz solr-${SOLR_VER}/bin/install_solr_service.sh --strip-components=2
sudo bash ./install_solr_service.sh solr-${SOLR_VER}.tgz -f -n
Gli utenti Slackware invece dovranno procedere diversamente:
wget https://notes.sagredo.eu/files/qmail/solr/install_solr_slackware.sh
chmod +x install_solr_slackware.sh
./install_solr_slackware.sh solr-${SOLR_VER}.tgz -f -n
Scaricare e installare il nuovo schema e il file di configurazione per Dovecot
cd /var/solr/data/dovecot/conf rm -f schema.xml managed-schema.xml solrconfig.xml wget https://raw.githubusercontent.com/dovecot/core/refs/heads/main/doc/solr-schema-9.xml -O schema.xml wget https://raw.githubusercontent.com/dovecot/core/refs/heads/main/doc/solr-config-9.xml -O solrconfig.xml chown solr:solr solrconfig.xml schema.xml
Il nuovo file di configurazione sostituisce LRUCache con CaffeineCache e cambia la locazione delle librerie .jar (diff).
Riconfigurare il proprio /etc/default/solr.in.sh file, dato che molte opzioni sono cambiate radicalmente, quindi riavviare Solr.
Dobbiamo abilitare le librerie di configurazione come descritto qui per risolvere un errore che compare dalla versione 9.8.0 quando con lo scjema di Dovecot. Aggiungere questa riga al file /etc/default/solr.in.sh:
SOLR_OPTS="$SOLR_OPTS -Dsolr.config.lib.enabled=true"
Infine aggiornare gli indici (editare lo script apposito per inserire la propria password di Dovecot)
wget https://notes.sagredo.eu/files/qmail/solr/solr_rescan_index.sh chmod +x solr_rescan_index.sh chown root:root solr_rescan_index.sh chmod o-wrx solr_rescan_index.sh ./solr_rescan_index.sh Stopping Dovecot . <?xml version="1.0" encoding="UTF-8"?> <response> <lst name="responseHeader"> <int name="status">0</int> <int name="QTime">20</int> </lst> </response> Starting Dovecot.
Lo script non deve restituire errori (status=0). Se invece si ottengono degli errori è necessario ricontrollare le autorizzazioni di sicurezza e le credenziali dell'utente dovecot di Solr.
Roundcube è una webmail avanzata con una bella interfaccia grafica.
$config['quota_zero_as_unlimited'] = true; to show quota unlimited instead of unknown for accounts with unlimited quota
qmail-sppprovides plug-in support for qmail-smtpd. It allows you to write external programs and use them to checkSMTPcommand argument validity. The plug-in can trigger several actions, like denying a command with an error message, logging data, adding a header and much more.
Today I played for the first time with an ancient patch for qmail: qmail-spp. I was really impressed for the ease of use and the elegance of its code, which is inserted inside qmail-smtpd.c with a few touches, despite of the many things that it can do when installed and enabled.
It can run a custom plugin in any language and at any level of the smtp session, grabbing the environment variables, writing into stderr or blocking the smtp session with a return error for the sender.
In no time at all I managed to understand its logic and write a small plugin by adapting a c program I wrote for s/qmail a few months ago to check the validity of the recipient.
Of course I decided to add this patch to my combo. I've just modified the way it has to be enabled, just not to bother those who don't want to touch their run scripts. So, while the original patch is enabled by default, I modified things a little bit so that you have to manually enable it by exporting the variable ENABLE_SPP in your run scripts. Therefore the original NOSPP variable is useless.
Have fun!
Ora che abbiamo preparato i filtri antispam dobbiamo addestrare il nostro sistema bayesiano e inviare i report a Razor, Pyzor e Spamcop.
La cosa più ovvia che può venirci in mente di fare a questo punto è forse quella di lanciare sa_learn e spamassassin --report uno dopo l'altro al click sul bottone "Marca come Spam" della webmail Roundcube (vedere i driver cmd_learn e multi_driver del plugin markasjunk), ma questa scelta ha alcuni svantaggi importanti:
E' qundi più corretto eseguire questi due compiti durante la notte per mezzo di un cronjob (primo problema risolto), processando i soli messaggi di vero spam/ham che l'utente ha consapevolmente copiato in una cartella apposita (secondo problema).
