41 Commits (main)

Author SHA1 Message Date
Joshua Tauberer e884c4774f Replace HMAC-based session API keys with tokens stored in memory in the daemon process 12 months ago
Joshua Tauberer d510c8ae2a Enable and recommend port 465 for mail submission instead of port 587 (fixes #1849) 1 year ago
Joshua Tauberer 5aeced5c2e add a test for fail2ban monitoring managesieve 3 years ago
Joshua Tauberer 8e0d9b9f21 update list of tls ciphers supported 4 years ago
Joshua Tauberer 870b82637a fix some wrong variable names, fixes #1353 4 years ago
Joshua Tauberer e924459140 revert f25801e/#1233 - use Mozilla intermediate ciphers for IMAP/POP not modern ciphers 5 years ago
Joshua Tauberer 5efdd72f41 update TLS test to record changes in the ciphers we offer on the open ports 5 years ago
Michael Kroes 2151d81453 update to ownCloud 9.1.1 (with intermediate upgrades) (#894) 6 years ago
Joshua Tauberer fc0abd5b4d confirm that fail2ban is protecting pop3s, closes #629 6 years ago
Joshua Tauberer 83d8dbca3e fail2ban won't start until the roundcube log file is created 6 years ago
Michael Kroes d9ac321f25 Owncloud needs more time to detect blocks. It doesn't respond as fast as the other services. Also owncloud logs UTC (since latest update) even though the timezone is not UTC. Also to detect a block, we get a timeout instead of a refused) 6 years ago
Michael Kroes bf5e9200f8 Update owncloud url to use webdav and increase http timeout 6 years ago
Joshua Tauberer 3055f9a79c drop SSLv3, RC4 ciphers from SMTP port 25 6 years ago
Michael Kroes 01fa8cf72c add fail2ban jails for ownCloud, postfix submission, roundcube, and the Mail-in-a-Box management daemon 6 years ago
Joshua Tauberer a0c7e63d78 best guess at what clients are supported by the tls settings used 7 years ago
Joshua Tauberer 2c44333679 compare tls ciphers against Mozilla's recommendations 7 years ago
Joshua Tauberer 610be9cf17 record current TLS settings from my box 7 years ago
Joshua Tauberer d3cacd4a11 update test_dns 8 years ago
Joshua Tauberer 87b0608f15 test_dns: DNSSEC signing inserts empty text string components 8 years ago
Joshua Tauberer 5b72e5419d fix shebang lines in the tests to take advantage of any activated python environment 8 years ago
Joshua Tauberer 3961e1aec3 test_dns: more error handling 8 years ago
Joshua Tauberer d6e6cfd3c9 mail test: catch typical connecting errors and display nicer output 8 years ago
Joshua Tauberer fff06f7d71 improve DNS test output 8 years ago
Joshua Tauberer 19aba091d7 test_mail: if EHLO test fails continue testing the rest, since user may be waiting on DNS propagation 8 years ago
Joshua Tauberer c722625041 test_dns: add ADSP and DMARC tests, see #14 8 years ago
Joshua Tauberer c403895f95 test_dns: properly test the non-primary domain of a box (for email addresses on domains besides PUBLIC_HOSTNAME) 8 years ago
Joshua Tauberer bdadf3017d test_dns: handle case where a DNS record is missing (vs incorrect) 8 years ago
Joshua Tauberer 80b367ab07 test_mail: gracefully handled when the server has no reverse DNS available 8 years ago
Joshua Tauberer 0be47c414d in the DNS test, use dnspython3 rather than dig 8 years ago
Joshua Tauberer 1b4dd98270 test that the SMTP server's EHLO name matches its reverse DNS name 8 years ago
Joshua Tauberer 22ad668699 rename test modules to not conflict with global package names (e.g. dns) 8 years ago
Joshua Tauberer ccbbc930e2 in the mail test script, forgot to remove the dkim import 8 years ago
Joshua Tauberer ec11241a7a also test reverse DNS 8 years ago
Joshua Tauberer 95a17a00c0 DNS test: also check a public nameserver to verify that the registrar (or up-host) configuration is correct too 8 years ago
Joshua Tauberer 04d97a11e9 new tests for DNS and IMAP/SMTP 8 years ago
Joshua Tauberer a50f30c411 smtp server test 9 years ago
Joshua Tauberer a1260b75fb various fixes; rewrote test scripts 9 years ago
Joshua Tauberer 97b2105a1f spamassassin 9 years ago
Joshua Tauberer 5cef1bb63d DNS, SPF, and DKIM 9 years ago
Joshua Tauberer eb47a1471b mail seems to work 9 years ago