I manage SPAM/AntiVIRUS before my EE until now  (disabled spam and virus scanning).

I decided to add another step of protection for viruses and enabled it.  Is this setting correct or do I have to enable SPAM scanning in the 1st paragraph?

Error: ConnectionError(MaxRetryError("HTTPConnectionPool(host='127.0.0.1', port=7790): Max retries exceeded with url: /api/subscriber/eddiegarner@progressiveelectricalservices.com/subscribed?query_all_lists=no&email_only=yes (Caused by NewConnectionError('<urllib3.connection.HTTPConnection object at 0x7ae08f37ad20>: Failed to establish a new connection: [Errno 111] Connection refused'))"))

I have tried restarting mlmmjadmin.service, when status is checked it is failed to start.

What am I missing?

Looks like someplace in between iredapd versions it now wants python-multipart ... there is not a distro multipart package for RHEL8 as best I can tell.

So, while I can probably "pip install" this someplace and modify the PYTHONPATH in the systemd service file, it might be good for EL8 to simply include this in iredapd with a "pip install --prefix=/opt/iredapd..." if we're running on EL8.

thanks!

Hi,
I'm trying to set a fractional spam score via the RESTful API (PUT /api/spampolicy/user/<mail>, same for domain and global), e.g.:
spam_score=4.5
According to the docs docs.iredmail.org/iredadmin-pro.restful.api.html#spam-policy , the spam_score parameter is described just as "spam score", with the sample using an integer (spam_score=4), but it's not explicitly stated that decimals are disallowed.

I checked the source and found the relevant code in libs/amavisd/spampolicy.py.

str.isdigit() returns False for any string containing a decimal point, so spam_score=4.5 silently fails the if check — the block is skipped entirely, no error is returned, and spam_tag2_level/spam_kill_level are simply left unset. The API still responds with {"_success": true}, which is misleading since the value wasn't actually applied.

Interestingly, the code itself calls float(v) right after the isdigit() check, which suggests decimal support was intended but blocked by the wrong guard condition (should probably be a try/except around float(v) directly, rather than isdigit()).

Questions:

1. Is integer-only spam_score an intentional limitation, or is this a bug in the input validation?
2. Through the iRedAdmin-Pro web GUI, decimal spam score values are accepted and correctly applied/stored — so this inconsistency seems specific to the RESTful API input handling. Can you confirm the API is meant to behave the same way as the GUI here?
3. If it's a bug, could it be fixed in an upcoming release? Happy to test a patch if provided.

iRedMail    1.8.3
iRedAdmin-Pro    5.9 (LDAP)
ubuntu 22.04

==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version (check /etc/iredmail-release):
- Deployed with iRedMail Easy or the downloadable installer?
- Linux/BSD distribution name and version:
- Store mail accounts in which backend (LDAP/MySQL/PGSQL):
- Web server (Apache or Nginx):
- Manage mail accounts with iRedAdmin-Pro?
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====

I know the release notes say that 1.8.0 has a "breaking change" that whitelists and blacklists are handled by milter now instead of amavisd, but this note should be more explicit about what that means! It's not just a syntactical breaking change - after upgrading from 1.7.4 to 1.8.1 I found my whitelists and blacklists empty in the iRedMail EE interface.

Thankfully, the data was still there in the amavisd database, but it would have been nice if this data  was converted automatically since it is stored in different tables.

I was able to select the entries out to a text file using mysql, edit them to reflect the new syntax, and add them in via the EE interface. I did it this way rather than scripting it or using SQL in case the EE interface did more than add the entries into milter:wblist.

Can the release notes be clarified, and a migration tool be provided for others? My server-wide lists were only a few dozen entries, but I can imagine that more active servers might have larger lists.

Newly created alias accounts show "Moderators" for "Mail Deliver Restriction", where old alias accounts show "Unrestricted".

I created a new alias today, first one in a long while. I don't want to create these throwaway aliases as mailing lists because they are effectively single-use. All of my previously created aliases show "Unrestricted" and the new one says "Moderators" under the column "Mail Deliver Restriction".

I tried sending an email to this alias from an external account, and it went through fine.

Is this just a cosmetic error?

iRedMail Enterprise Edition currently provides a convenient SSL Certificate interface that allows administrators to add multiple server and web hostnames, issue a Let’s Encrypt certificate, and have iRedMail manage deployment and renewal automatically.

Are there plans for adding support for ACME DNS-01 validation as an alternative to the current IP/web based validation (HTTP-01) method?

A possible implementation could include:

Selection of the ACME challenge method:
  >> HTTP-01
  >> DNS-01

Initial DNS provider support for Cloudflare / GoDaddy

Secure storage of a restricted Cloudflare / GoDaddy API token

DNS zone and credential validation before certificate issuance
Continued automatic certificate installation and renewal through the existing Enterprise Edition workflow

Support for wildcard names, such as *.domain.tld

A provider or hook interface that could later support additional DNS services

The current Enterprise Edition certificate management works well. DNS-01 support would extend that functionality for environments where:

  >> Port 80 is unavailable or intentionally restricted
  >> A hostname cannot point directly to the mail server during validation
  >> Wildcard certificates are required
  >> Multiple DNS zones are managed centrally
  >> Administrators want certificate validation to remain independent of web path

Ideally, the Enterprise Edition would remain responsible for the complete certificate lifecycle, including issuance, renewal, installation, service reloads, status reporting, and expiration warnings. This would avoid competing external ACME clients or administrator written deployment scripts modifying certificates managed by iRedMail.

For Cloudflare, the integration could use a restricted API token limited to DNS record editing and zone access for the selected zones.

Would be great if considered

The DKIM for the display indicates is does not match, however, when sending emails and verifying the headers, we do see DKIM pass when checking Thunderbird or AquaMail so the DKIM keys do appear to be working, just want to understand what happened in the GUI?

Everything else appears to be functional, we are currently in process of reviewing just to be sure.

Please advise

Hello!

I ordered a new license for I RedAdmin-Pro when I should have ordered a renewal. On Friday I sent an email to both info@iredmail.org and zhb@iredmail.org, but I have not yet received a response. Please contact me asap to resolve this. Thanks.

Linda Pagillo
Mail's Best Friend
linda.pagillo@mailsbestfriend.com

- Deployed with iRedMail Easy or the downloadable installer?
Downloadable installer

- Linux/BSD distribution name and version:
AlmaLinux release 8.10

- Store mail accounts in which backend (LDAP/MySQL/PGSQL):
LDAP

- Web server (Apache or Nginx):
NGINX

- Manage mail accounts with iRedAdmin-Pro?
Yes

- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====

Hi

I have a customer with 3 email accounts on his domain. We allow 6GB per domain. One of his accounts (manager@) has 2.96GB of mail, and he was running low on another account (info@), so he has set manager@ to only 1MB, even though it has almost 3GB of emails in the mailbox) and increased the info@ mailbox to almost 6GB effectively meaning that they can take up 8.9GB of space by technically disabling manager@ (set to 1MB so it won't receive any further mail)

Is there any way to stop this currently?

Hello. Quick question. We are running iRedMail version 1.6.0. Can I upgrade directly to the latest version (1.8.3) or do I have to first upgrade from 1.6.0 to 1.6.1 then to 1.6.2 and so on?

Thanks!

hi

I configured split domain with the mx record pointing to o365
https://gist.github.com/iredmail/fda90a … c18638e047

in settings.py and iptables firewall i added ips to allow incoming emails on port 25 (without authentication) only via o365 ips. Entire server communicates on port 25 only with o365 ips.

for a domain abc.com

in vmail/domain table COLUMN split_transport i put entry
smtp:abc-com.mail.protection.outlook.com:25

split domain mail communications in works correctly both ways between o365 and our server

however I am facing issues with MLMMJ mailing list

example below

mailing list created on our server : saleslist@abc.com
user@abc.com (moderator) sends email to saleslist@abc.com

we get bounced error message from 0365 as follows

#############
Original Message Details
Created Date: 25/06/2026 5:17:16 am
Sender Address: user@abc.com
Recipient Address: saleslist-moderators@abc.com
Subject: RE: Please moderate saleslist@abc.com: Bookings Open
Error Details
Error: 553 5.7.1 <user@abc.com>: Sender address rejected: not logged in
Message rejected by: ns1.aaa.com
############

it seems that the mail is getting routed to o365 and then routed back by 0365 server to our server instead of getting processed / delivered locally to the mailing list locally.

how do I resolve this?

thanks

Hello Community,

Require your expert assistance/guidance on best approach in separating iRedMail Pro admin domain cert and an existing email domain already using the same cert,
The prod email domain cert is fully functional with its own cert, which I want to avoid breaking.
Attempting to now separate the administration portal cert as this currently presents the mail domain cert and not the admin domain cert (this has not been setup by previous admin so I guess its the expected behavior), considering iredadmin.tmpl is part of the nginx default config here: 00-default-ssl.conf

My instance hosted in Azure, the IP associated is issued by azure, the associated DNS is also created by azure default x.x.cloudapp.azure.com, the x.x.cloudapp.azure.com/iredadmin/ FQDN is reached via the same associated IP for the mail domain.
I am considering creating a separate admin FQDN using letsencrypt or to use the existing azure assigned FQDN leveraging Letsencrypt to request a standalone SSL certificate for my Azure domain, however taking best practice into consideration and if the Community has a standard approach in similar scenario's, I am open to reviewing this as well.
I have reviewed a few articles online e.g. docs.iredmail.org/subdomain.web.apps.html and researched a few options, however would cautiously prefer to validate options/solutions with an experienced professional before attempting this on my end and inadvertently breaking anything.

Your expert assistance/guidance on this matter is really appreciated,

Thank you.

Hello,

I need to upgrade my Debian 11 server, which is currently running iRedAdmin-Pro.

What is the correct procedure for such an upgrade? Is it sufficient to perform a standard OS upgrade (Debian 11 -> Debian 12 -> Debian 13), or are there additional iRedMail/iRedAdmin-Pro specific steps that need to be taken?

My main priority is to keep all current configurations, settings, and mailbox contents intact, ensuring the transition is as smooth and quick as possible.

I would highly appreciate your guidance and advice on this matter.