246 Commits

Author SHA1 Message Date
Jumper78
35ffcb070d added idna function to perform puny encoding on IDN domains 2025-02-14 16:19:20 +00:00
Florent Daigniere
4cf35e7228 useGlobalPreferredServer=false in autoconfig 2025-01-09 12:05:02 +01:00
Fabian Stanke
ec1e49d137 Include error messages for LMTP
These are difficult to debug log messages, when instead of an error message one gets a stack trace with `KeyError: 'lmtp'`
2024-12-25 10:00:02 +01:00
Florent Daigniere
64d0bb603d Ensure mobileconfig has the right content-type 2024-12-22 16:40:44 +01:00
Florent Daigniere
28c28b1c84 INBOUND_TLS_ENFORCE makes no sense. 2024-09-06 09:40:26 +02:00
Florent Daigniere
5ea3840fc4 doh 2024-09-05 23:22:55 +02:00
Florent Daigniere
b426c67949 doh 2024-09-05 22:37:30 +02:00
Florent Daigniere
e5790a297a fix #3403 2024-09-05 22:33:23 +02:00
bors-mailu[bot]
2fca41235b Merge #3350
3350: Feature: dkim for alternative domains r=mergify[bot] a=Jumper78

## What type of PR?

feature

## What does this PR do?

### General Idea

#### use same DKIM key of main domain for signing

Instead of dealing with key creation for each alternative domain, this implementation of the solution uses one key for all domains, the main domain and all alternative domains. Upon Rspamd requesting the DKIM key of a domain, it is not only checked if the domain is in the list of main domains, it also checked if it part of the alternative domains. If it is in this list, it sends the DKIM key of the connected main domain together with the name of the alternative domain.

#### show needed entries in the domain detailed view of the main domain

To make it easier for the admin to create the DKIM and DMARC entries (and the MX and SPF entries) for the alternative domains, we go through all alternative domains and print the entries.

### missing (and currently not planned to be added)

The zonefile at the top of the detail page will still only cover the main domain.

### Related issue(s)
- DKIM signing of the alternative domains is a requested feature; it closes #1519
- it keeps the original file based handling of DKIM keys; it does not implement #2952

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Jumper78 <52802286+Jumper78@users.noreply.github.com>
2024-08-11 16:42:45 +00:00
Florent Daigniere
5cfec650df s/nginx/front 2024-08-09 15:55:33 +02:00
Florent Daigniere
78c5d34227 as per review 2024-08-09 15:29:51 +02:00
Florent Daigniere
d7c6528f04 doh 2024-08-08 10:33:19 +02:00
Florent Daigniere
38ea029bd9 Better 2024-08-08 10:27:35 +02:00
Florent Daigniere
148c8f9ede Remove this insanity since we don't use nginx 2024-08-08 10:24:43 +02:00
Jumper78
4f0eb0ef35 DKIM signing of alternative domains
When rspamd looks up the DKIM key of the domains, also the alternative domains are queried. In case there is a match, the admin container is providing the DKIM key of the domain belonging to the alternative domain.

file modified:   core/admin/mailu/internal/views/rspamd.py
2024-07-21 22:01:20 +00:00
Florent Daigniere
2b6daf6157 fix warnings 2024-06-19 14:37:26 +02:00
Florent Daigniere
3565ab9a3b Fix #3260: double-quotes should be allowed in ooo 2024-05-17 08:32:39 +02:00
Florent Daigniere
325aa5452b Do not block webmail when we have a valid SSO sess 2023-12-21 12:37:08 +01:00
Florent Daigniere
aefbd9552c fix clamav handling 2023-11-10 12:00:29 +01:00
Florent Daigniere
eb110c8431 master uses SSO 2023-10-28 14:02:06 +02:00
Florent Daigniere
2494a344a7 Ammend wording as suggested 2023-10-27 15:14:51 +02:00
Florent Daigniere
435508be1e Introduce AUTH_REQUIRE_TOKENS 2023-10-27 13:39:36 +02:00
Florent Daigniere
c66934e6bf Auth-Login-Attempt is no more since we don't use nginx 2023-08-18 18:47:49 +02:00
Florent Daigniere
c9eae7bfbf Fix exception reported by diginzm 2023-08-18 17:01:15 +02:00
Florent Daigniere
9b7bb3b7f5 doh 2023-08-07 11:15:53 +02:00
Florent Daigniere
1413001705 take care of sieve too 2023-08-07 09:06:02 +02:00
Florent Daigniere
40b5e7ca39 Avoid a stack-trace when the ratelimit is hit 2023-08-05 18:24:11 +02:00
bors[bot]
69229436cf Merge #2866
2866: Improve tokens (add ipranges) r=nextgens a=nextgens

## What type of PR?

enhancement

## What does this PR do?

Allow multiple IP addresses/networks to be set for tokens.

### Related issue(s)


## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2023-06-26 10:02:58 +00:00
Florent Daigniere
372f008eab bugfix for dovecot-proxy 2023-06-23 16:01:24 +02:00
Florent Daigniere
fbc2f47003 bugfix for dovecot-proxy 2023-06-23 15:57:37 +02:00
Florent Daigniere
29cd857c5f Allow multiple IP addresses/networks to be set for tokens 2023-06-23 15:56:41 +02:00
Florent Daigniere
f143aa3dc8 Use dovecot-proxy where appropriate 2023-06-05 10:23:30 +02:00
Florent Daigniere
15569c62df Fix the bug @ghost has reported 2023-06-02 14:53:25 +02:00
Florent Daigniere
50f8a5cb65 Ensure we log which account is invalid 2023-06-02 11:39:42 +02:00
Florent Daigniere
22edc15de2 Update core/admin/mailu/internal/views/auth.py 2023-05-31 11:36:28 +02:00
Dimitri Huisman
8c206e8a9b Retrieve raw password on the correct location 2023-05-31 09:08:03 +00:00
Dimitri Huisman
10a3d1eabb Get the password from the source.
Remove password from response (not needed)
2023-05-30 15:06:32 +00:00
Dimitri Huisman
008cbdb6b1 Also url encode the password when authentication fails 2023-05-30 14:31:29 +00:00
Dimitri Huisman
5f94be871c Authentication failed for email clients when the password contained a non latin-1 character. 2023-05-30 14:09:16 +00:00
bors[bot]
589c426601 Merge #2818
2818: Improve auth-related logging r=mergify[bot] a=nextgens

## What type of PR?

enhancement

## What does this PR do?

Improve auth-related logging

### Related issue(s)
- closes #2803 

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [ ] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
Co-authored-by: Florent Daigniere <nextgens@users.noreply.github.com>
2023-05-30 09:01:42 +00:00
bors[bot]
b6c093dfd6 Merge #2790
2790: Implement managesieve support r=mergify[bot] a=nextgens

## What type of PR?

Feature

## What does this PR do?

This is a better a alternative to #2773

Expose managesieve to the outside world.

### Related issue(s)
- close #2773
- #428
- #113
- #81
- #1222

## Prerequisites
Before we can consider review and merge, please make sure the following list is done and checked.
If an entry in not applicable, you can check it or remove it from the list.

- [x] In case of feature or enhancement: documentation updated accordingly
- [x] Unless it's docs or a minor change: add [changelog](https://mailu.io/master/contributors/workflow.html#changelog) entry file.


Co-authored-by: Florent Daigniere <nextgens@freenetproject.org>
2023-05-26 14:11:33 +00:00
Florent Daigniere
cab27f77c1 Don't send ooo messages to noreply@ 2023-05-16 10:29:39 +02:00
Florent Daigniere
c68f4d93cf Merge remote-tracking branch 'origin/improve-logs' into improve-logs 2023-05-13 11:59:22 +02:00
Florent Daigniere
1ffb78103f quote the comments 2023-05-13 11:55:54 +02:00
Florent Daigniere
1042911732 Update nginx.py
Fix typo
2023-05-12 21:14:39 +02:00
Florent Daigniere
e88199e274 Update nginx.py
Doh
2023-05-12 20:27:29 +02:00
Florent Daigniere
c60e2fa52c add token.comment too 2023-05-12 19:41:32 +02:00
Florent Daigniere
c44537d318 Need this too 2023-05-09 12:17:16 +02:00
Florent Daigniere
6ee913502e Improve auth-related logging 2023-05-06 17:37:16 +02:00
Florent Daigniere
86ff5f7b71 Merge remote-tracking branch 'upstream/master' into managesieve-proxy 2023-04-20 18:53:17 +02:00