How can I make it so that the folder is created in the inbox and not in the root folder?

Sievec not work

require ["body", "fileinto", "mailbox", "subaddress", "variables", "envelope"];

# Plus addressing - auto create folders
if envelope :matches :detail "to" "*" {
    set "fwd" "${1}";
    fileinto "INBOX/${fwd}";
    stop;
}

When I login with an admin account and view a users quarantined emails I am able to click the magnifying glass and search the quarantine. When the user accesses quarantine with their account they are unable to search - the magnifying glass icon isn't in the UI at all. Is there any way to allow users to search their quarantine?

After upgrading to iRedMail EE v1.7.0, *all* received mail is marked with prefix text [SPAM] in subject.

Changing "Mark mail as spam" score *AND* toggling off "Prefix text [SPAM] to the subject of spam", removes the [SPAM] prefix.

Toggling on "Prefix text [SPAM] to the subject of spam" marks again *all* received iswith [SPAM] prefix.

I prefer not to use DKIM as the selector since I have multiple servers on one domain and prefer to use a custom selector. What I don't want is three DKIM records at my registrar, all using the selector DKIM.

The only way I have been able to get around this is to generate a key pair after modifying the file to use a different selector and generating a key pair. Then, going into the database and copying them in place of the existing values. Of course, the web GUI complains when I click on DNS and see that section. were it not for the selector being only DKIM by default, it would be a cakewalk simply copying and pasting to the registrar from the web GUI.

On admin panel, domain section is DNS button, there DKIM options for generate and validate DKIM DNS. When i used this "tool" i have issue with dkim validation domain and amavisd testkeys failed.

When using amavisd for generate dkim, puting dkim key to DNS record, amavisd testkeys pass but on admin panel, domain section, DKIM not matched with DNS record (generated by amavisd).

So, what should i do, to match amavisd DKIM, admin panel to show and generate correct DKIM keys ?
No manuals for iredmail EE found...

Ps. mail are generate wrong with DKIM..

Are there any plans to enable native DMARC and ARC support in RedMail EE, and is there an estimated timeline for this?

Additionally, since Rspamd is widely considered the most production-ready and proven project for modern authentication, I’m considering it as an alternative. Have you or anyone in the community successfully integrated Rspamd into the current EE stack—either as a full replacement for Amavis+SpamAssassin or as a side-by-side solution specifically for ARC/DKIM signing?

I’d love to know your thoughts on the viability of this...

Thanks a lot and have a great day!

Sent emails aren't showing up on the main page in iRedAdmin Pro

There is a domain @mymail.com
and @secondmail.net, which is an alias.

I have an account named alert@mymail.com
It has an alias named billing@mymail.com

If the email is sent from the account named alert@mymail.com, but billing@mymail.com is specified after the FROM field, the email is sent without any problems. And such a letter is displayed on the main page.

But if you specify a domain alias, these emails won't be displayed.

For example:

The account is always used under the main domain, but after the FROM, the alias domain is used, for example, alert@secondmail.net or billing@secondmail.net

These emails reach their recipients, but they won't appear in the "Sent" or "Received" fields, only in SMTP sessions.

How to set a per-domain email sending limit per minute for each account in the domain

I want to set the maximum number of emails sent per email account in the domain's general settings, e.g., 20/minute.

Hello,

I am having an issue with how Amavis handles banned emails (e.g., .exe attachments) on my iRedMail server.
The Problem:

Outgoing emails: If I send an email with a banned attachment to an external address (e.g., Gmail), Amavis correctly blocks it, and the message appears in the iRedAdmin-Pro Quarantine web interface, from where i can release or delete.

Incoming emails: If I receive an identical email from an external or internal address, the log shows "see below" and the email is deleted immediately. It does not appear in the Quarantine web interface.

Message: "Feb 18 11:59:57 mail amavis[3917994]: (3917994-06) Blocked BANNED (application/octet-stream,.exe,.exe-ms,timestamps) {DiscardedInternal,Quarantined}, ORIGINATING LOCAL [10.53.0.2]:65445 ESMTP/ESMTP"

Relevant configuration from my amavisd.conf:

# --- Final Destinies ---
$final_spam_destiny = D_DISCARD;
$final_virus_destiny = D_DISCARD;
$final_banned_destiny = D_DISCARD;
$final_bad_header_destiny = D_DISCARD;

# --- Quarantine Methods ---
$spam_quarantine_method = 'sql:';
$virus_quarantine_method = 'sql:';
$banned_files_quarantine_method = 'sql:';
$bad_header_quarantine_method = 'sql:';

# --- Quarantine Targets ---
$spam_quarantine_to = 'spam-quarantine';
$virus_quarantine_to = 'virus-quarantine';
$banned_quarantine_to = 'banned-quarantine';
$bad_header_quarantine_to = 'bad-header-quarantine';

# --- SQL Storage ---
@storage_sql_dsn = (['DBI:mysql:database=amavisd;host=127.0.0.1;port=3306', 'amavisd', 'PASSWORD_HERE']);
@lookup_sql_dsn = @storage_sql_dsn;

no output on this command mysql fail2ban -e "SELECT * FROM banned" no output,
fail2ban doesnt show block ips on iRedAdmin-Pro

I have enable notifications for quarantined mail on the server.  One user has added

no-reply@localhost.local

to their blacklist.  This causes a bounce email to root like the below.

There does not seem to be a way to force delivery.  There also does not seem to be a way to exempt the user from being sent the notice.

I tried adding

  bypass_spam_checks_maps   => [1],  # don't spam-check internal mail
  bypass_banned_checks_maps => [1],  # don't banned-check internal mail
  bypass_header_checks_maps => [1],  # don't header-check internal mail 

to the MYNETS policy bank in the 50-user file, but they are still being blocked and generating a bounce email to root.

Thinking of creating a cron job to scan the database and remove the no-reply@localhost.local  address, but that's a kludge for sure.

-Steve

-----Notice eMail----------------------------------------------------
Content type: Spam
Internal reference code for the message is 3146491-20/sHkMD6bUMv_7

First upstream SMTP client IP address: [127.0.0.1]

Return-Path: <no-reply@localhost.local>
From: No Reply <no-reply@localhost.local>
Message-ID: <xxxxxx@xxxxxx.com>
Subject:
  =?utf-8?q?=5BAttention=5D_You_have_1_emails_quarantined_and_not_delivered_to_mailbox?=
The message has been quarantined as: sHkMD6bUMv_7

The message WAS NOT relayed to:
<yyyy@yyyyyy.com>:
   250 2.7.0 Ok, discarded, id=3146491-20 - spam

Spam scanner report:

------------------------------------
We had an issue with a compromised user sending spam. This caused the server CPU to go to 100% and slowed down the server. We were able to disable the user and clear the sending queue. The server was reboot and the services were restarted. After the restart we noticed and issue when using iRedAdmin webgui when trying to access any email account on any domain we get the following error:

Error: ConnectionError(MaxRetryError("HTTPConnectionPool(host='127.0.0.1', port=7790): Max retries exceeded with url: /api/subscriber/adriann@rafey.is/subscribed?query_all_lists=no&email_only=yes (Caused by NewConnectionError('<urllib3.connection.HTTPConnection object at 0x7f95becf3100>: Failed to establish a new connection: [Errno 111] Connection refused'))"))

All other services appear to be working as expected. All so all other setting on the webgui of the iRedAdmin are accessible.

Please advise how can we fix this.

SpamAssassin 4.0 appears to include a plugin for DMARC and also ARC validation.

So, depending on the OS that iredmail pro is running on, configuring SPF validation and DMARC and ARC validation would be an extremely useful value-add.

At the moment, only DKIM is enabled:

loadplugin Mail::SpamAssassin::Plugin::DKIM

that's the only "loadplugin" line.

Thanks!

Hi,

After upgrading from iRedMail-Pro to iRedMail EE, I’m having issues when sending messages from some clients (like Outlook for Android) or from Roundcube when sending very short test messages such as “Test message.”

In those cases, sending fails and the logs show this error related to the milter on port 7791:
can't read SMFIC_BODY reply packet header

Is it safe, or are there any downsides, to temporarily remove the milter directives smtpd_milters, non_smtpd_milter until I find the root cause?

I’m including the relevant SMTP session log below.

Thanks for your help,

2025-11-09T15:00:46.641029+01:00 mail postfix/smtps/smtpd[62236]: connect from 101.red-xxx-yy-zz.dynamicip.rima-tde.net[xxx.yy.zz.101]
2025-11-09T15:00:46.678802+01:00 mail postfix/smtps/smtpd[62236]: Anonymous TLS connection established ... TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits)
2025-11-09T15:00:46.889645+01:00 mail postfix/smtps/smtpd[62236]: 4d4DwG6JzBz336Rq: client=101.red-xxx-yy-zz.dynamicip.rima-tde.net[xxx.yy.zz.101], sasl_method=PLAIN, sasl_username=<redacted@domain.tld>
2025-11-09T15:00:46.989104+01:00 mail postfix/cleanup[62237]: 4d4DwG6JzBz336Rq: message-id=<redacted@internal>
2025-11-09T15:00:46.989495+01:00 mail postfix/cleanup[62237]: warning: milter inet:127.0.0.1:7791: can't read SMFIC_BODY reply packet header: Application error
2025-11-09T15:00:46.989548+01:00 mail postfix/cleanup[62237]: 4d4DwG6JzBz336Rq: milter-reject: END-OF-MESSAGE ... 4.7.1 Service unavailable - try again later; from=<redacted@domain.tld> to=<redacted@domain.tld> proto=ESMTP helo=<localhost>
2025-11-09T15:00:47.034916+01:00 mail postfix/smtps/smtpd[62236]: disconnect from 101.red-xxx-yy-zz.dynamicip.rima-tde.net[xxx.yy.zz.101] ehlo=1 auth=1 mail=1 rcpt=2 data=0/1 quit=1 commands=6/7

I had to migrate my database and unfortunately didn't follow recommendation about the DNS though I'm not sure that would help.

I've updated the sogo.conf with the new db and after a few failings recreated the VIEW for the user login. I can now login to SOGo however some parts like shared calendars don't work. In the logs the first request always responds with a 401 and then the following same request in logs (not sure about payload as it isn't logged) results in a 207. Like:

x.x.x.x "REPORT /SOGo/dav/email@com/ HTTP/1.1" 401
x.x.x.x "REPORT /SOGo/dav/email@com/ HTTP/1.1" 207

Functions were working before the migration, I've deleted the old database unfortunately so can't see if there is a view or something missing.What would be missing in the migration to fix this issue?