1 Topic by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,071

Topic: iRedMail-1.5.0 has been released

Dear all,

iRedMail-1.5.0 has been released.

Here's major changes since iRedMail-1.4.2.

Supports new distribution release:

  • OpenBSD 7.0

DROPPED distribution releases for NEW iRedMail installation

Dropping support here means we don’t allow NEW iRedMail installation on them, but all existing iRedMail servers running on them are still actively supported.

  • CentOS 7, CentOS 8. Please use CentOS Stream 8 or Rocky Linux 8 instead.

    • CentOS 7 is too old.

    • CentOS 8 is end-of-life after Dec 31, 2021.

  • Debian 10. Please use Debian 11 instead. Debian 10 enters LTS on July 2022. "Debian LTS is not handled by the Debian security team, but by a separate group of volunteers and companies interested in making it a success."

  • Ubuntu 18.04. Please use Ubuntu 20.04 instead. Users chose 20.04 more than 18.04, so better just let it go.

Improvements

  • Nginx: Greatly improve the performance of keep-alive connections over SSL by enabling `ssl_session_cache`. Thanks to @ludovicandrieux.

  • Nginx: Enable TLSv1.3 by default. Thanks to @ludovicandrieux.

  • Nginx/Dovecot: Add new ssl cipher: EECDH+CHACHA20, remove weak one: AES256+EDH. Thanks to @ludovicandrieux.

  • Postfix now enables smtps (port 465) by default.

  • Fail2ban: Add one more rule to catch auth error in Postfix log file.

  • SOGo is now available on Debian 11 (bullseye). Thanks to SOGo team.

Fixed issues

  • Updating password in Roundcube may fail with error `Encryption function missing`.

Updated packages

  • Roundcube webmail -> 1.5.1. Note: PHP 5.5 or later is required.

  • mlmmjadmin -> 3.1.3

  • netdata -> 1.32.1

  • iRedAPD -> 5.0.4

  • iRedAdmin -> 1.6

  • [OpenBSD] fail2ban -> 0.11.2

  • [OpenBSD] uwsgi -> 2.0.20

Introduce "iRedMail Easy" - the new deployment, upgrade and support platform

iRedMail Easy is the new web-based deployment, (one-click) upgrade and technical support platform introduced few months ago, we release new version frequently (currently one new release per month), with the one-click upgrade support, you can easily keep the iRedMail server up to date without caring about any technical details. It's the recommend way to deploy NEW iRedMail server and get technical support.

For more details, please check our website, the comparison of iRedMail Easy and classic downloadable installer is available too: https://www.iredmail.org/easy.html

If you need to upgrade existing iRedMail server to the iRedMail Easy platform, please check our tutorial: Migrate from iRedMail to iRedMail Easy platform.

Introduce all-in-one Dockerized iRedMail

We have built an all-in-one Dockerized iRedMail, get it here:
https://hub.docker.com/r/iredmail/mariadb

  • Only MariaDB backend is available right now.

  • Based on Ubuntu Linux (20.04) docker image, all components in one container.

  • SOGo groupware is not yet included.

It's not considered as production ready, please don't run it on production
server now. Feedback, suggestions are all welcome. smile

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2 Reply by iredmailtnt

  • iredmailtnt
  • Member
  • Offline
  • Registered: 2016-02-10
  • Posts: 52

Re: iRedMail-1.5.0 has been released

Hi,

It would have been nice to have a heads up about dropping support for Centos 7. It still has 2 more years of security support from the Centos project. I have 4 servers running iredmail. 2 of them have paid iredadmin-pro subscriptions.

So suddenly, I cannot run the latest version of Iredadmin-pro?

What is the problem with Centos 7 besides "Too old"?
I disagree about it being too old. It still works just fine and I, like I am sure others need time to do that kind of upgrade.

3 Reply by dgreer

  • dgreer
  • Member
  • Offline
  • Registered: 2021-12-17
  • Posts: 10

Re: iRedMail-1.5.0 has been released

Agree with iredmailtnt.  CentOS 7 is a stable and awesome distribution; it has years of life left.

4 Reply by alm

  • alm
  • Member
  • Offline
  • Registered: 2021-12-27
  • Posts: 39

Re: iRedMail-1.5.0 has been released

Oracle Linux 8 can be added to the list of supported distributions, I had no issues installing 1.4.2 and upgrading to 1.5.0 on Oracle Linux 8.5. I just did a test to see if it would run on Oracle Linux as that's what we use at work (it is publically available BTW). :-)

5 Reply by aszczupal

  • aszczupal
  • Member
  • Offline
  • From: Poland
  • Registered: 2019-09-17
  • Posts: 4

Re: iRedMail-1.5.0 has been released

I do not agree , CentOS 7 is NOT too old.., is stable/save ..etc...
Is still used worldwide...
it have Security EOL in 2024-06-30 (https://wiki.centos.org/About/Product)
sad

Regards
Adam

6 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,071

Re: iRedMail-1.5.0 has been released

So sorry about the confusion.

Dropping CentOS 7/8 here means we don’t allow NEW iRedMail installation on them, but all existing iRedMail servers running on them are still well supported.

7 Reply by RikuS (edited by RikuS 2021-12-28 10:06:53)

  • RikuS
  • Member
  • Offline
  • Registered: 2016-06-10
  • Posts: 116

Re: iRedMail-1.5.0 has been released

Hi @ZhangHuangbin and others,

for the SSL Cipher list and other SSL settings, I would suggest using a brilliant tool from Mozilla https://ssl-config.mozilla.org/

Just make sure to set the environment version numbers correct based on your setup and probably best to still use the intermediate configuration type.

The current (1.5.0) Cipher list for Nginx still has weak cipher suites, but using the tool above you can get the most secure ones set up.

Once you have done the changes and restarted Nginx, check the status using https://www.ssllabs.com/ssltest/index.html

Below is a screenshot of the final secure Ciphers.

https://i.ibb.co/n6kxm39/Screenshot-2021-12-28-at-02-02-02.jpg

Also note that you can use the same tool for Dovecot SSL settings.

8 Reply by slovenka (edited by slovenka 2021-12-28 17:29:20)

  • slovenka
  • Member
  • Offline
  • Registered: 2014-12-14
  • Posts: 51

Re: iRedMail-1.5.0 has been released

Be aware that new SSL setting knocks out the old Outlook 2013 (connected via Sogo EAS). Don't know exactly which setting, but I had to reverse all SSL settings in Nginx. Maybe someone will hit the same situation, please let us know.

9 Reply by p.schumacher

  • p.schumacher
  • Member
  • Offline
  • Registered: 2018-02-04
  • Posts: 40

Re: iRedMail-1.5.0 has been released

ZhangHuangbin wrote:

So sorry about the confusion.

Dropping CentOS 7/8 here means we don’t allow NEW iRedMail installation on them, but all existing iRedMail servers running on them are still well supported.

How's about Ubuntu 18.0.4 - or better, is there a doc  for upgrading to Ubuntu 20.x?

10 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,071

Re: iRedMail-1.5.0 has been released

p.schumacher wrote:

How's about Ubuntu 18.0.4 - or better, is there a doc  for upgrading to Ubuntu 20.x?

FYI: https://docs.iredmail.org/upgrade.ubunt … 20.04.html

11 Reply by MCTN

  • MCTN
  • Member
  • Offline
  • Registered: 2021-12-30
  • Posts: 2

Re: iRedMail-1.5.0 has been released

Hello,

I'm new here. I guess i found a problem.

I have tried fresh install with İredmail 1.5.0 but there is no SOGo option on fresh install. (Not docker version)

Screenshot: https://imgur.com/a/KTuObyM

I have tried On Ubuntu 20.04 LTS and Rocky Linux 8. Both of them have the same problem.

Is it normal ? Am i missing something ?

Thank you.

12 Reply by oscarfp

  • oscarfp
  • Member
  • Offline
  • Registered: 2019-09-30
  • Posts: 7

Re: iRedMail-1.5.0 has been released

Hi MCTN look at this

https://forum.iredmail.org/topic18568-s … aller.html


MCTN wrote:

Hello,

I'm new here. I guess i found a problem.

I have tried fresh install with İredmail 1.5.0 but there is no SOGo option on fresh install. (Not docker version)

Screenshot: https://imgur.com/a/KTuObyM

I have tried On Ubuntu 20.04 LTS and Rocky Linux 8. Both of them have the same problem.

Is it normal ? Am i missing something ?

Thank you.

13 Reply by MCTN

  • MCTN
  • Member
  • Offline
  • Registered: 2021-12-30
  • Posts: 2

Re: iRedMail-1.5.0 has been released

oscarfp wrote:

Hi MCTN look at this

https://forum.iredmail.org/topic18568-s … aller.html


MCTN wrote:

Hello,

I'm new here. I guess i found a problem.

I have tried fresh install with İredmail 1.5.0 but there is no SOGo option on fresh install. (Not docker version)

Screenshot: https://imgur.com/a/KTuObyM

I have tried On Ubuntu 20.04 LTS and Rocky Linux 8. Both of them have the same problem.

Is it normal ? Am i missing something ?

Thank you.

Thank you so much.
I looked at the link and it worked on my Ubuntu 20.04 LTS server.

14 Reply by matthias.steup (edited by matthias.steup 2022-01-19 17:51:07)

  • matthias.steup
  • Member
  • Offline
  • Registered: 2013-12-24
  • Posts: 4

Re: iRedMail-1.5.0 has been released

Hello Zhang,

first of all, thank you for your great software. When updating to iRedMail-1.5.0, I run into the following issues which I don't know if I should be concerned about them because everything seems to be working fine. The issue is about netdata.

My linux is: Ubuntu 20.04.3 LTS
iRedMail: 1.5.1
Mariadb
Nginx
Manage mail accounts with iRedAdmin-Pro? No

When running "sudo ./netdata-v1.32.1.gz.run --accept" the following warnings are displayed:

Group 'docker' does not exist.
FAILED  Failed to add netdata user to secondary groups

Group 'nginx' does not exist.
FAILED  Failed to add netdata user to secondary groups

Group 'varnish' does not exist.
FAILED  Failed to add netdata user to secondary groups

Group 'haproxy' does not exist.
FAILED  Failed to add netdata user to secondary groups

User 'netdata' is already in group 'adm'.
Group 'nsd' does not exist.

FAILED  Failed to add netdata user to secondary groups

User 'netdata' is already in group 'proxy'.
Group 'squid' does not exist.
FAILED  Failed to add netdata user to secondary groups

Group 'ceph' does not exist.
FAILED  Failed to add netdata user to secondary groups

Group 'nobody' does not exist.
FAILED  Failed to add netdata user to secondary groups

Group 'I2C' does not exist.
FAILED  Failed to add netdata user to secondary groups



When running "sudo systemctl status netdata" the following warnings are diplayed:

PROCFILE: Cannot open file '/opt/netdata/etc/netdata/apps_groups.conf'
PROCFILE: Cannot open file '/proc/3103/status'
Cannot open /proc/3103/status

Can I ignore all these warnings?

Kind regards
Matthias

15 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,071

Re: iRedMail-1.5.0 has been released

Safe to ignore those netdata warnings. It tries to read these files to support monitoring more applications, but if you don't have these applications running, of course you don't have those files which is expected.