Dear @RikuS,

PR merged and re-tagged iRedMail-1.4.0.
Thank you.

mlmmjadmin was re-packed to fix an issue, please re-download iRedMail-1.4.0 and try again.

here: https://www.iredmail.org/download.html

Where did you find the incorrect link which is labeled as 1.4.0 version? I’d like to fix it.

This is missing from upgrade instructions:

# Whitelist HELO hostname used by Microsoft Outlook/Hotmail servers.

You only find it in changelog and github.

So this update has forced me to upgrade from Debian 9 to Debian 10 (Buster), not a bad thing but I had been putting it off knowing things would break on the iRedmail server.
For anyone else having to do the same, this is what I found:

* dovecot broke, follow the guide here: https://docs.iredmail.org/upgrade.dovecot.2.2-2.3.html
* nginx and iRedAPD broke - I ran the iRedAPD, iRedAdmin, netdata and mlmmjadmin update processes even though they were on the latest versions, this fixed the issues
* Had to install python-pip to install web.py
* PHP FPM now defaults to using a unix socket whereas nginx is configured to connect to it via IP using 127.0.0.1:9999. This breaks roundcube and in my case, a few other PHP tools, giving a Bad Gateway 502 error. I tried to get nginx working with the unix socket (using /run/php/php7.3-fpm.sock) but it kept breaking roundcube even more so reverted back to using IP (listen = 127.0.0.1:9999 in /etc/php/7.3/fpm/pool.d/www.conf) which fixed it.

For some reason, /sbin and /usr/sbin has been removed from the default PATH env so every update script failed when it tried to run service x restart.

Everything seems to be working now, I've opened the ports back up and mail is passing. The only thing i'm not sure about is fail2ban. Wasn't there a f2b chain/policy visible when you ran iptables -L before? I'm not seeing any now:

Chain INPUT (policy DROP)
target     prot opt source               destination
ACCEPT     all  --  anywhere             anywhere             state RELATED,ESTABLISHED
ACCEPT     all  --  anywhere             anywhere
ACCEPT     icmp --  anywhere             anywhere             icmp echo-request
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:ssh
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:http
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:https
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:smtp
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:submission
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:pop3
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:pop3s
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:imap2
ACCEPT     tcp  --  anywhere             anywhere             tcp dpt:imaps

Chain FORWARD (policy DROP)
target     prot opt source               destination

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination

After upgrading to 1.4.0, sending to SOGO does not work.
Error in SOGO:
5.7.1 <localhost[127.0.0.1]>: Client host rejected: Access denied

/var/log/maillog:
Jul  9 14:21:24 mail postfix/submission/smtpd[19423]: connect from localhost[127.0.0.1]
Jul  9 14:21:24 mail postfix/submission/smtpd[19423]: Anonymous TLS connection established from localhost[127.0.0.1]: TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
Jul  9 14:21:24 mail postfix/submission/smtpd[19423]: NOQUEUE: reject: RCPT from localhost[127.0.0.1]: 554 5.7.1 <localhost[127.0.0.1]>: Client host rejected: 5.7.1 <localhost[127.0.0.1]>: Client host rejected: Access deniedAccess denied; from=<maxim@mydomain.ru> to=<maxim@mydomain.ru> proto=ESMTP helo$
Jul  9 14:21:24 mail postfix/submission/smtpd[19423]: lost connection after RCPT from localhost[127.0.0.1]
Jul  9 14:21:24 mail postfix/submission/smtpd[19423]: disconnect from localhost[127.0.0.1] ehlo=2 starttls=1 mail=1 rcpt=0/1 commands=4/5

/etc/postfix/main.cf:
mynetworks = 127.0.0.1 [::1]
smtpd_helo_required = yes
smtpd_helo_restrictions =
    permit_mynetworks
    permit_sasl_authenticated
    check_helo_access pcre:/etc/postfix/helo_access.pcre
    reject_non_fqdn_helo_hostname
    reject_unknown_helo_hostname
smtpd_sender_restrictions =
    reject_non_fqdn_sender
    reject_unlisted_sender
    permit_mynetworks
    permit_sasl_authenticated
    check_sender_access pcre:/etc/postfix/sender_access.pcre
    reject_unknown_sender_domain
smtpd_recipient_restrictions =
    reject_non_fqdn_recipient
    reject_unlisted_recipient
    check_policy_service inet:127.0.0.1:7777
    permit_mynetworks
    permit_sasl_authenticated
    reject_unauth_destination
    check_policy_service inet:127.0.0.1:12340
postscreen_access_list = permit_mynetworks cidr:/etc/postfix/postscreen_access.cidr

proxy_read_maps = $canonical_maps $lmtp_generic_maps $local_recipient_maps $mydestination $mynetworks $recipient_bcc_maps $recipient_canonical_maps $relay_domains $relay_recipient_maps $relocated_maps $sender_bcc_maps $sender_canonical_maps $smtp_generic_maps $smtpd_sender_login_maps $transport_maps $virtual_alias_domains $virtual_alias_maps $virtual_mailbox_domains $virtual_mailbox_maps $smtpd_sender_restrictions $sender_dependent_relayhost_maps