Hello everyone,

I'm happy to have discovered iRedMail and the community surrounding it.  We're a small hosting company located in Florida, USA and have had issues with our upstream email host for several years now.  I'll not mention them here, but message me if you want the details.  Recently they decided to triple our wholesale cost for mail services, which pretty much made it a loss to host email.  I decided to set up a trial version of iRedMail EE on Amazon Web Services and have been very happy with the system so far.  We only have basic features enabled for our clients, but we plan to offer the full SoGo experience in the future as we become more acquainted with iRedMail and how it interfaces with AWS.

We used imapsync to move our client emails over to the new server.  I'll just put the idea out here that it would be really keen if this was built into iRedMail to migrate in new accounts.

So far everyone's been pleased with the performance of their mail hosting and my support staff is very happy with the well-made admin interface.

Great job!

#
# Running Roundcube as a subfolder on an existing virtual host
#
# Block access to default directories and files under these directories

#Tiffany: Delete block rules because in Roundcube 1.7, public_html directory becomes the explicit default.

# Redirect URI `/mail` to `/mail/`.
location = /mail {
    return 301 /mail/;
}

location ~ ^/mail/(.*\.php)$ {
    include /etc/nginx/templates/hsts.tmpl;
    include /etc/nginx/templates/fastcgi_php.tmpl;
    fastcgi_param SCRIPT_FILENAME /opt/www/roundcubemail/public_html/$1;
}

location ~ ^/mail/(.*) {
    alias /opt/www/roundcubemail/public_html/$1;
    index index.php;
}

And yes, Roundcube works fine after that.
3. I did get another domain working that i want to use to access Roundcube and iRedAdmin with following in `/etc/nginx/sites-available/tranz.conf`:

server {
server_name tranzhex.net;
listen [::]:443 ssl http2;
ssl_certificate /opt/cfcerts/tranz.crt;
ssl_certificate_key /opt/cfcerts/tranz.key;
    include /etc/nginx/templates/misc.tmpl;
#    include /etc/nginx/templates/ssl.tmpl;
    include /etc/nginx/templates/iredadmin.tmpl;
    include /etc/nginx/templates/roundcube.tmpl;
    include /etc/nginx/templates/sogo.tmpl;
    include /etc/nginx/templates/netdata.tmpl;
    include /etc/nginx/templates/php-catchall.tmpl;
    include /etc/nginx/templates/stub_status.tmpl;
}

4. In the attached photo, the ipv6 address field is overflown with the iredadmin promo. you might need to reduce the left and right padding on the page.
That's all for my feedback, props to iRedMail developers for making self-hosters life easier, and see you if i ever have any problems

They wanted to be a little more "self-service" but need serious hand-holding and are afraid of using a terminal emulator (or I'd whip up a quick little menu-driven front-end for maillist_admin.py), so I created
a system whereby they can send a limited set of commands by email and get responses back.

I am pleased with the result, and thought I'd share it here.
A copy of the script (with installation instructions in the comments) is attached.
For security, any command but "help" requires that the requester be registered as a moderator,owner,etc. for that list.

Obviously, you shouldn't blindly follow my instructions and install stuff on your server if you can't understand what it's doing.  Certainly this could be abused (esp. since it executes shell commands with little filtering), though I think that the way I've set it up the risk is minimal if you trust your moderators. (If you have ideas for improvement, please feel free to share them with me.)

The Pro version of iRedMail has a great Web UI  for managing mailing lists, including viewing/updating membership.  Even were I using that, though (I'm on the free version), I don't think I want to give these folks that much power to shoot themselves in the foot -- to view/maintain list membership they'd need to be a domain admin and they'd be able to mess w/ email accts and list settings. (I don't think there's granular enough security to let them only do what I want to allow and nothing else.)

I want to move all my mail to be managed in my homelab, instead of the cloud, but since I use broadband, port 25 is blocked and also have a dynamic public IP. Have to PMAP incoming 2525 WAN side to 25 LAN side.

The idea is to have my own Relay in the Internet with a fixed IP that would be a proxy for all the incoming and outgoing emails.

Proxmox Mail Gateway will be the frontend (MX) and iRedMail to be the backend.
I added a DDNS service and mapped the DDNS domain to a CNAME in my DNS. All mail services, except the MTA <> MTA, will be provided only internally (iMAP, POP3...) accessing the iRedMail via VPN services.

In my homelab I have my own local domain and iRedMail have it's own host and domain, that is not the on in the public DNS.

The question is, does the iRedMail host/domain configured in the server must be the same defined in the CNAME record as the relay destination?

2025031101 (Backend: mariadb, Date: 2025-03-18 11:41:40) iRedMail Enterprise Edition: https://www.iredmail.org/easy.html
1.7.2 MARIADB edition.

- Deployed with iRedMail Easy or the downloadable installer?
- Linux/BSD distribution name and version:

Ubuntu 22.04.5 LTS

- Store mail accounts in which backend (LDAP/MySQL/PGSQL):

MySQL

- Web server (Apache or Nginx):

NGINX

- Manage mail accounts with iRedAdmin-Pro?

YES

- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====

Our agency has used numerous solutions over the years and had been on the lookout for an email system that combined robust features, seamless scalability, and uncompromising security. Enter iRedMail, an exceptional open-source email platform that has truly revolutionized the way we manage and operate email services.

From the moment we deployed iRedMail in 2013, its streamlined setup and intuitive interface stood out as a breath of fresh air. The ease of use, coupled with its comprehensive documentation, ensured a smooth integration into our infrastructure. This simplicity belies its underlying capability to handle demanding loads at scale, making it a powerhouse solution for organizations of any size.

Security is at the forefront of iRedMail’s design, providing a highly secure environment that instills confidence, especially when handling sensitive data across public, private, and critical sectors. The platform offers maximum control over configurations, empowering administrators to tailor the system to their precise needs while maintaining peak performance.

But what truly sets iRedMail apart are its outstanding features, from robust spam filtering to multi-domain hosting. Its versatility and reliability ensure uninterrupted communication, a critical requirement for both day-to-day operations and high-stakes scenarios.

As a tool trusted in diverse sectors, iRedMail has proven itself to be a reliable companion for businesses, non-profits, and governmental institutions alike. Whether it’s the public sector seeking mission-ready email solutions or private entities aiming for operational efficiency, iRedMail consistently exceeds expectations.

In summary, iRedMail is an amazing open-source tool that successfully merges user-friendliness with enterprise-grade functionality. We couldn't be more satisfied with its performance and recommend it wholeheartedly to anyone in need of a robust, secure, and scalable email platform.

Thanks to Huangbin and the iRed team for all they do!

Mailinglist
(inside an interesting link for some literature, famous NY Times articel too)

Congratulations!

Regarding me, by the incredible script of iRedMail I'm using postfix at private mail server since over 14 years and switched over to my new installation right last week... ;-)

(fresh installations at 2009, 2013, 2017...(new world)...2023)

Anyway, anyone on the fence on pulling the trigger on the update, go ahead, the water's fine!

The specs were:
No email to be sent outside the domain.
No email received from outside the domain.
Highly secured but no use of a VPN allowed. ( Banned in certain locations )

- Only the admin person could see all users.
- Every user can only email people they have been told about by the main admin (who sends them the email address which is a longish random address ( d45f3s5ghe@domain.example.com)
- No mail client access - Originally the intention was to allow use of Outlook, Thunderbird etc but it was quickly recognized that those were less than secure in many cases and it left emails vulnerable on peoples machines.

iRedAdmin allowed me to do this.

Set up highly secured Linux server.
Installed iRedMail
Installed iRedAdmin  (comes with iredmail as well as being able to buy the pro version)

Originally I disallowed imap, pop, smtp access but without imap and smtp Roundcube wont work.
So allowed smtps, imaps

Then to stop external access by clients apps like outlook etc set the only allowable IP for connection as 127.0.0.1 which means any external access to imap, smtp etc is banned. however Roundcube still works as it is local to the machine.

For both sending and receiving white / black lists:
- Set black list of @.  banning all receiving and sending
- Set white lists of only allow to receive from / send to @mysecretdomain.example.com 
- Set 1 ip only allowed to admin users in ../iredAdmin.

This made it so only web access (https only), no external mail clients and no way to send or receive emails from external - even using roundcube.

I then closed firewall ports ( leaving 443 for https and one other for me to ssh)
Set the ssh port to only respond to 1 ipaddress
Setup key access.
Set 2 attempts only to log into email with a bad password.

Setup a bunch of reporting and checking.

Honeypotted all standard areas used to break into a server and set them for instant blacklisting.

Set up no copying, no printing etc on web pages (cant stop screen shots or photos) and let it loose.

I've done similar things previously - but never so easily achieved, maintainable, upgradable and performant as iRedAdmin. I am delighted with how well this roll out for the client has been achieved.

My client does security work - in places through out the world where information going wrong can get people killed or imprisoned. They are not military, govt or similar - but does NGO type work.

I also run three other mail servers for a number of businesses - all iRedMail. it has been rock solid for years. Thanks iRed.

We have been on iRedMail for a little over a year now. The server is running on a CentOS7 VM in a VMWare environment. We have 343 users across 3 domains. The performance is fantastic.

Support is also fantastic. I've only had to open one support ticket and within 20 minutes Zhang responded to the request. I can't imagine how long I would've had to wait for one of those high priced solutions.

If you have more than 25 users I recommend paying for the license for iRedAmin-Pro. The interface is very intuitive and makes email administration very easy. Setting up blacklists/whitelists, managing greylisting is a breeze. User setup and management is very easy with the Pro version. Also, when a young bride wants her email address changed it is so easy compared to what I had to do on our old mail server.

If you are looking for a DIY solution, I strongly suggest going with iRedMail.

Kevin
Buffalo, NY

Out of curiosity during the COVID-19 isolation (not sic, just not going to work) i rented a VPS and searched for a few email solutions to test, having no experience with email systems on Linux.

Among the identified solution I chosed iRedMail as my first candidate and within 2 days (a few hours of real work) i got the following done :

• installation (very intuitive)

• configuration of first domain

• SSL using lets-encrypt cert-bot (went off instructions here by using certbot for configuration as well )

• SPF, DKIM and DMARC all working

• tested gmail -> domain and reverse without issues

• tested Thunderbird (after adding auto-config)

• created and tested alias and forwarder in DB

• modified nginx so it wont redirect all access to roundcube

• added second domain in iRedmail, creating user and testing with gmail

• added alias in domain2 and forward from alias to domain1 mailbox

• modified nginx to accommodate a second domain, but being able to access email server using domain2.tld/mail

At the moment the only thing I want to try is a catch-all account for yet another new domain
Honestly it's the first time when using opensource software that i joined the forums just out of curiosity and not for support

A few thing to keep in mind about my story :

• this is just a test not a real case use scenario so the number of users is extremely small and almost no traffic

• this ease of installation and config was so amazing that i'm thinking of trying in an offline environment ( after i get a ldap Linux server)

• although I don't have experience with Linux email or ldap systems I do have  10+ years of experience as a M$ sysadmin and a little comfort in using Linux (terminal)

Thanks for the experience.

L.E. Catch-all configuration went smooth like butter. Amazing work
Curious about the proadmin, pity there is no demo version (i've found a tweet that at some point there was a 10 user version, that would be amazing)

What is Cost Per Action? When you think about making money with a website or blog one of the first services that you think about is Google AdSense. Maybe you have already had the bite of the affiliate marketing bug and even joined ClickBank or Commission Junction.
When you are marketing to CPA's and they are your main audience, you already know how difficult it can be to get their attention and keep it. Your clients are going to be part of a highly aggressive, extremely motivated, very busy group of people and unless you can offer to keep up, no matter what you are selling, you will find that you are going to get left behind in the dust! For people who are looking to market to CPA's, nothing is going to be more important that putting together a list, that is, a formal accounting of...
You'll find that CPA marketing is quite easy, but you must have your application approved by CPA networks first. Use the tips you're about to read about to help your application get accepted to the CPA network of your choice. Bear in mind that CPA network affiliate managers have to filter out those people who they feel will not represent very well both their business or their vendor's businesses.
If you are on any internet marketers email list, then there is a good chance you have recently been bombarded with emails talking about CPA instruments, by Ritoban Chakrabarti. CPA Instruments is basically...
We have reviewed the best of the best affiliate networks available, and have compiled a list of the top 22 affiliate and CPA networks for publishers and marketers. Affiliate Networks are a great way for website owners and content producers to monetize their work with related products and services.
You have probably heard a lot about CPA networks, CPA offers, CPA affiliate marketing and CPA marketers who make huge amounts of revenue online, promoting all kinds of products, offers and CPA companies. And this type of marketing using CPA, is not like the general affiliate marketing that you know of. That is why we are going to cover how to be effective promoting CPA affiliate marketing.
If you've come across articles or websites with the words "cpa marketing" you may have just come across the key to a financially stable lifestyle. But before delving more into the topic, it is important that you understand what CPA marketing businesses are about, why they have become the ultimate choice for online marketers, and how to succeed in such a business. The World Wide Web is brimming with all kinds of opportunities to make money online, and one of these is the popular CPA or Cost per Acquisition marketing business.

CPA marketing is a type of affiliate marketing. Cost Per Action simply means you get paid a commission based on an action that is set by the owner of the product. So they may set a commission of say $1.50 to get someone to fill out their email address for an offer. Or $35 to fill out a form for say a free trial of their product.

Situation as follows:

I have been operating the DIY-Solution for quite some years now, hosting about 6 domains, exclusively for friends & family and a non-profit organization - maybe 20 mail accounts all in all. Because it has been some years already, I do not exactly remember the effort it took to set all that up, I just know it wasn't trivial and I probably wouldn't want to go through this again. ;-)

Also, updates are a little tiresome, as it's Gentoo "recompile" Linux and more often than not, you need to manually correct something that broke after an update. As I said, it has been working for some years, but probably as older people choose cars with automatic gearshifts, I also am looking for something that needs less care and therefore less of my time without compromising security.

----

So I had a look at iRedMail and Modoboa.

In terms of ease of installation, iRedMail is the clear winner, it's probably safe to say that it is by a factor of 100 easier to set up than the DIY solution. I can remember to have read somewhere that "iRedMail installation is too easy, so paid support for installation is not feasible". I would have to agree. The seamless installation of iRedMail is certainly it's killer feature.

I had a little glitch with a - heaven knows why - running Apache2 while installing iRedMail, (and actually if you install Debian it asks you if you want a Webserver - if you say "yes", you get Apache running) but I could sort that out rather quickly. It would be nice if the iRedMail installer could catch this issue, but even so I was up and running after literally a few minutes in a Proxmox VE virtual machine.

The iRedMail documentation and guidance during and after installation is also great, you know which URL you have to visit after installation, you open one of the web mail clients and voila! it tells you in the first mail "Details of this iRedMail installation". This is software ergonomy at its finest.

Unfortunately, after a look at the admin backend ... bummer ... is where the frowned face came in. Now before I installed iRedMail, I of course inspected the iRedAdmin-Pro Demo and it looked great. There was no iRedAdmin(non Pro) online Demo, so I actually didn't know what to expect.

I didn't expect it to be so bad. :-( Please forgive me if I am blunt, but the term "crippleware" applies here. No alias management? Seriously?

----

Modoboa

In terms of ease of installation, still easy: a git clone, and call a script. After a little while it finished. Yay! But now what? No message on screen "your URL is here ..., Details of installation ..." In other words: No guidance.
So here I understand why there is an offer of professional support helping you with the installation. Compared with iRedMail not much effort has been made to take the user by the hand and make the installation process as seamless.

Fortunately I know Linux, so I went elbow-deep into modoboa guts. Studying the webserver config revealed where to look for the admin backend, a little "use the source Luke" here and there and voila! - Modoboa admin backend arise!

Far more feature complete than the standard iRedAdmin backend. Not as nicely designed though, but in some respects it seems even more feature complete than the iRedAdmin-Pro version (DNS status per domain for DNSBL, SPF, DMARC, Reputation Optimization, ...) in others it seems missing (couldn't find any mailing list admin module so far).

----

So where to go from here?

Well, as I mentioned, in my special case I do have a working DIY solution up and running and "never change a running system" they say. If I was to migrate as is, I would either go for Modoboa or a much MUCH cheaper version of the iRedAdmin-Pro.

Now don't get me wrong, there is nothing wrong with the iRedAdmin-Pro pricing for commercial usage. It is perfectly priced for that actually. For non-profit/private usage though, even the cheapest ~ $250/year is a no go. I wonder why there is no licensing concept to non-profit or private use as this usually can serve as a good catalyst to commercial use.

So executive summary:

iRedMail in combination with iRedAdmin-Pro seems like a hell of a product. It's a pity small non-profit/family use cases are barred from using it.