51

Re: Roadmap: iRedMail-1.0

As SoGo is now also in the FreeBSD ports tree (/usr/ports/www/sogo & http://www.freshports.org/www/sogo/) it would be really nice if this can be added. The SoGo integration is already available for the Linux distributions supported.

Regards,
Lars.

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

52

Re: Roadmap: iRedMail-1.0

Hi Lars,

iRedMail-0.9.3 supports SOGo on FreeBSD. smile

53

Re: Roadmap: iRedMail-1.0

Can I add a suggestion for the roadmap ?
Could be nice to compile the module modsecurity with nginx .... People who want to use it, will be able to do it ... People who don't want .....

Thx for your work and support.

54

Re: Roadmap: iRedMail-1.0

Thierry wrote:

Could be nice to compile the module modsecurity with nginx .... People who want to use it, will be able to do it ... People who don't want .....

How about reinstall Nginx with your preferred third-party modules?

BTW, Compiling mod_security for Nginx requires Apache...

55

Re: Roadmap: iRedMail-1.0

BTW, Compiling mod_security for Nginx requires Apache...

Seems not to be the case anymore .... There is a "special" version of modsecurity without this dependency ....

56 (edited by robert.wolfe 2016-03-13 00:00:26)

Re: Roadmap: iRedMail-1.0

ZhangHuangbin wrote:
7t3chguy wrote:

Not to mention, supporting multiple packages that provide the same feature-set over multiple platforms is just more chances for SOMETHING to go wrong and not work as desired

You're right. For example, if we need to support new component X, let me show you what i need to test:

- CentOS 6 + MySQL
- CentOS 6 + PGSQL
- CentOS 6 + LDAP
- CentOS 7 + MySQL
- CentOS 7 + PGSQL
- CentOS 7 + LDAP
- Debian 7 + [MySQL, PGSQL, LDAP]
- Ubuntu 12.04 + [MySQL, PGSQL, LDAP]
- Ubuntu 14.04 + [MySQL, PGSQL, LDAP]
- Ubuntu 14.10 + [MySQL, PGSQL, LDAP]
- FreeBSD 10 + [MySQL, PGSQL, LDAP]
- OpenBSD 5.6 + [MySQL, PGSQL, LDAP]

You can do a simple math.

I know that iRedMail runs nicely under Oracle Linux 7.2 with MySQL as that is what I have here.  Have not tried it under the latest 6.x release of Oracle Linux, however.  But, please, let's not get rid of SOGo.  I have clients that use the ActiveSync services with it all the time.

57

Re: Roadmap: iRedMail-1.0

robert.wolfe wrote:
ZhangHuangbin wrote:
7t3chguy wrote:

Not to mention, supporting multiple packages that provide the same feature-set over multiple platforms is just more chances for SOMETHING to go wrong and not work as desired

You're right. For example, if we need to support new component X, let me show you what i need to test:

- CentOS 6 + MySQL
- CentOS 6 + PGSQL
- CentOS 6 + LDAP
- CentOS 7 + MySQL
- CentOS 7 + PGSQL
- CentOS 7 + LDAP
- Debian 7 + [MySQL, PGSQL, LDAP]
- Ubuntu 12.04 + [MySQL, PGSQL, LDAP]
- Ubuntu 14.04 + [MySQL, PGSQL, LDAP]
- Ubuntu 14.10 + [MySQL, PGSQL, LDAP]
- FreeBSD 10 + [MySQL, PGSQL, LDAP]
- OpenBSD 5.6 + [MySQL, PGSQL, LDAP]

You can do a simple math.

I know that iRedMail runs nicely under Oracle Linux 7.2 with MySQL as that is what I have here.  Have not tried it under the latest 6.x release of Oracle Linux, however.  But, please, let's not get rid of SOGo.  I have clients that use the ActiveSync services with it all the time.

There are MUCH Better solutions for ActiveSync - I personally used https://github.com/fmbiete/Z-Push-contrib and it was lighter and much quicker, as well as having full provisioning support meaning you can do things like locking people's devices if they consent to it and then go on to lose their device. It does require some configuration, I may go on to write a tutorial if I end up needing EAS at some point but the repository itself should have enough documentation for you to be able to configure it yourself.

58

Re: Roadmap: iRedMail-1.0

If you believe that dropping apache support (so that Nginx only is supported) will be to our benefit, then go for it! In my case as I am just learning Linux from scratch, would prefer to concentrate on today's best options and not to waste any time on legacy.

59

Re: Roadmap: iRedMail-1.0

Please tell me whether or not version 1.0 is available since version 0.9.9, and can also be expected after the release (conditionally) and 0.9.5 version?
Thank you!

question - solely for the sake of curiosity.

60

Re: Roadmap: iRedMail-1.0

You can expect a 1.0 after 0.9.9.

61

Re: Roadmap: iRedMail-1.0

When first read that iRedMail would be shipping with only Nginx instead of Apache wasn't in favor.

Have since realized that only reason that was against this was because wasn't familiar with Nginx. Now that have become familiar with Nginx have switched most things over to Nginx from Apache (made most configurations in /etc/apache/apache2.conf and never used htaccess file in Apache so the more simple and centralized approach of Nginx works better in this case).

Supporting two web servers complicates any program. Nginx is cleaner (said "cleaner" not "better") than Apache. So that is why now support shipping iRedMail with one web server. Like others have said, it is very easy to install Apache and set it up to work with Roundcube.

Will iRedMail 1.0 be first to ship with only Nginx?

62

Re: Roadmap: iRedMail-1.0

schnappi wrote:

Will iRedMail 1.0 be first to ship with only Nginx?

Yes. maybe even earlier.

63

Re: Roadmap: iRedMail-1.0

With future changes, please consider also more "enterprise" environments.

I maintain iRedMail platforms which are all virtualized, where central/shared Galera clusters are used (policy: no local db's in VM's, only innodb supported), where a central LDAP service used (policy: use corporate authentication platforms), which must use Apache (policy: only supported webserver platform), etc.

In other words, in these environments, iRedMail runs integrated with the available services, not as a stand-alone "black box".

64

Re: Roadmap: iRedMail-1.0

harro.verton wrote:

With future changes, please consider also more "enterprise" environments.

I maintain iRedMail platforms which are all virtualized, where central/shared Galera clusters are used (policy: no local db's in VM's, only innodb supported), where a central LDAP service used (policy: use corporate authentication platforms), which must use Apache (policy: only supported webserver platform), etc.

In other words, in these environments, iRedMail runs integrated with the available services, not as a stand-alone "black box".

harro.verton wrote:

With future changes, please consider also more "enterprise" environments.

I maintain iRedMail platforms which are all virtualized, where central/shared Galera clusters are used (policy: no local db's in VM's, only innodb supported), where a central LDAP service used (policy: use corporate authentication platforms), which must use Apache (policy: only supported webserver platform), etc.

In other words, in these environments, iRedMail runs integrated with the available services, not as a stand-alone "black box".

I am in the same situation.  Although the ability to chose a remote installation of MySQL, etc vs a local installation would also be a plus, too, as we run our mailbox databases outside of the actual mail server itself.

65

Re: Roadmap: iRedMail-1.0

If you have any suggestion, feature request, please let me know (e.g. create a forum topic), otherwise no one knows what you expect. I'm open to all suggestions and requests.

66

Re: Roadmap: iRedMail-1.0

It would be nice to see the support of retrieving/updating Let's Encrypt certificates for all services 'out-of-the-box'.

67

Re: Roadmap: iRedMail-1.0

Peter2121 wrote:

It would be nice to see the support of retrieving/updating Let's Encrypt certificates for all services 'out-of-the-box'.

On my TODO list, but not top priority since setting up Lets Encrypt manually is very easy.

68

Re: Roadmap: iRedMail-1.0

Encrypted the whole iredmail server ??  Or only the emails folders  ... ?
+ the support of mod_security for Nginx.

Thx

69

Re: Roadmap: iRedMail-1.0

There is an anti-spam system which seems to be better than the one actually used in iRedMail - Rspamd
Rspamd has a milter-compatible module for postfix integration Rmilter, the integration with Dovecot is possible too (for learning, based on user's actions) https://kaworu.ch/blog/2014/03/25/dovec … th-rspamd/
Rspamd has web interface 'out-of-the-box' to manage it and to get the information about his status.
If we see Rspamd being a part of iRedMail one day - it will be really great wink

70

Re: Roadmap: iRedMail-1.0

Thierry wrote:

Encrypted the whole iredmail server ??  Or only the emails folders  ... ?
+ the support of mod_security for Nginx.

Do you have any detailed document for both features?

71

Re: Roadmap: iRedMail-1.0

ZhangHuangbin wrote:
Thierry wrote:

Encrypted the whole iredmail server ??  Or only the emails folders  ... ?
+ the support of mod_security for Nginx.

Do you have any detailed document for both features?

For the encryption ... no or use LVM/LUKS ?
For  the mod_security it should  be somewhere, I will come back to you asap.
Thx

72 (edited by Thierry 2017-01-08 17:02:58)

Re: Roadmap: iRedMail-1.0

For mod_security:

https://www.scalescale.com/tips/nginx/h … -on-nginx/
https://github.com/SpiderLabs/ModSecuri … _for_NGINX

73

Re: Roadmap: iRedMail-1.0

Thanks for sharing. But we don't compile Nginx source code in iRedMail, so this not gonna happen, you have to do it yourself.

74

Re: Roadmap: iRedMail-1.0

If Nginx is not  compiled ? How  do you activate all  of these modules ?

configure arguments: --with-cc-opt='-g -O2 -fPIE -fstack-protector-strong -Wformat -Werror=format-security -D_FORTIFY_SOURCE=2' --with-ld-opt='-fPIE -pie -Wl,-z,relro -Wl,-z,now' --prefix=/usr/share/nginx --conf-path=/etc/nginx/nginx.conf --http-log-path=/var/log/nginx/access.log --error-log-path=/var/log/nginx/error.log --lock-path=/var/lock/nginx.lock --pid-path=/run/nginx.pid --http-client-body-temp-path=/var/lib/nginx/body --http-fastcgi-temp-path=/var/lib/nginx/fastcgi --http-proxy-temp-path=/var/lib/nginx/proxy --http-scgi-temp-path=/var/lib/nginx/scgi --http-uwsgi-temp-path=/var/lib/nginx/uwsgi --with-debug --with-pcre-jit --with-ipv6 --with-http_ssl_module --with-http_stub_status_module --with-http_realip_module --with-http_auth_request_module --with-http_addition_module --with-http_dav_module --with-http_geoip_module --with-http_gunzip_module --with-http_gzip_static_module --with-http_image_filter_module --with-http_v2_module --with-http_sub_module --with-http_xslt_module --with-stream --with-stream_ssl_module --with-mail --with-mail_ssl_module --with-threads --add-module=/build/nginx-1.9.10/debian/modules/nginx-auth-pam --add-module=/build/nginx-1.9.10/debian/modules/nginx-dav-ext-module --add-module=/build/nginx-1.9.10/debian/modules/nginx-echo --add-module=/build/nginx-1.9.10/debian/modules/nginx-upstream-fair --add-module=/build/nginx-1.9.10/debian/modules/ngx_http_substitutions_filter_module

Thx

75

Re: Roadmap: iRedMail-1.0

Thierry wrote:

If Nginx is not  compiled ? How  do you activate all  of these modules ?

iRedMail doesn't compile packages from source tarballs (only exception is "uwsgi" on OpenBSD), those compile options are done by Linux/BSD vendors, we install binary packages from vendors.