iRedMail — how to correctly add firewal rules

Re: how to correctly add firewal rules

null@example.com (ZhangHuangbin) — Sun, 25 Feb 2024 02:00:47 +0000

Jochen wrote:

- Deployed with iRedMail Easy or the downloadable installer? downloaded

Oops, you mentioned this server was deployed with downloadable iRedMail installer.

If it's iRedMail Easy, please add extra firewall rules with (bash) shell script /opt/iredmail/custom/firewall/custom.sh.

Re: how to correctly add firewal rules

null@example.com (Jochen) — Mon, 22 Jan 2024 09:03:15 +0000

cool, thanks for the clarification.

Just curious… because it says at the top of /etc/nftables.conf:

#
# This file is managed by iRedMail Team "support@iredmail.org" with Ansible,
# please do __NOT__ modify it manually.
#

How do you keep changes to the file intact?

Re: how to correctly add firewal rules

null@example.com (ZhangHuangbin) — Mon, 22 Jan 2024 02:22:47 +0000

It's ok to modify /etc/nftables.conf.

how to correctly add firewal rules

null@example.com (Jochen) — Tue, 16 Jan 2024 14:43:22 +0000

==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version (check /etc/iredmail-release): 1.6.5
- Deployed with iRedMail Easy or the downloadable installer? downloaded
- Linux/BSD distribution name and version: Debian 12.4
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): MySQL
- Web server (Apache or Nginx): Nginx
- Manage mail accounts with iRedAdmin-Pro?
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====

Hi,

what's the correct way to add rules to the firewall?
Is it okay to directly edit /etc/nftables.conf or are there update savy ways to do it?