5ed8803cc1
RKHunter added during installation and setup for cronjobs
2016-06-28 12:46:27 -04:00
23f2b1688f
reset
2016-06-28 12:31:21 -04:00
3a1313144b
moved blocklist script locally within installation
2016-06-27 09:38:14 -04:00
7f89d7cb82
added line for rkhunter to first update when installed.
2016-06-27 04:32:06 -04:00
b76c9330c5
some fixes to fail2ban filters and jail.local
2016-06-27 04:13:56 -04:00
5265839681
made rkhunter create a local file per suggestions
2016-06-27 04:10:39 -04:00
ab3fbad0b8
a couple minor changes to Fail2Ban #870 fixed a couple variables, copied owncloud.conf fail2ban from my own owncloud 9 server for my own business. Though it is commented out
2016-06-26 13:37:21 -04:00
933668f156
had rkhunter --propupd run before configs were changed. Fixed for #869 , also added a crontab for RKHunter to automatically run daily at 4:15AM
2016-06-26 12:57:54 -04:00
e0b333843a
had rkhunter --propupd run before configs were changed. Fixed for #869
2016-06-26 12:48:26 -04:00
4f4ec5436a
added RKHunter to system.sh on lines 122-134 per #869 and made it run everytime apt launches to install or update. This should help prevent rootkits. I also added a config to whitelist certain things
2016-06-26 12:44:39 -04:00
994727d2cd
added script which automatically adds IP addresses which have been reported to be attacking other servers. It will update the IPTables automatically everyday, as well as perform the initial run the first day. As mentioned in #864 on the origin
2016-06-26 11:06:40 -04:00
3b1b70ed16
added Fail2ban filters from #866 , #767 , and #798 on main branch
2016-06-26 10:57:59 -04:00
5f5f00af4a
for DANE, the smtp_tls_mandatory_protocols setting seems like it also needs to be set (unlike the cipher settings, this isn't documented to be in addition to the non-mandatory setting)
2016-06-12 09:11:55 -04:00
6b73bb5d80
outbound SMTP connections should use the same TLS settings as inbound: drop SSLv2, SSLv3, anonymous ciphers, RC4
2016-06-12 09:11:54 -04:00
3055f9a79c
drop SSLv3, RC4 ciphers from SMTP port 25
...
Per http://googleappsupdates.blogspot.ro/2016/05/disabling-support-for-sslv3-and-rc4-for.html , Google is about to do the same.
fixes #611
2016-06-12 09:11:50 -04:00
fac8477ba1
Configured Dovecot to log into its own logfile
2016-06-06 08:21:44 -04:00
61744095a8
Update Roundcube to 1.2.0
...
closes #840
2016-06-06 07:32:54 -04:00
d5b38a27e6
run roundcube's database migration script on every update
...
There hasn't been a sqlite migration yet, since Mail-in-a-Box's creation, but with Roundcube 1.2 there will be.
2016-06-06 07:28:12 -04:00
6666d28c44
v0.18c
2016-06-02 15:47:45 -04:00
66675ff2e9
Dovecot LMTP accepted all mail regardless of whether destination was a user, broken by ae8cd4ef, fixes #852
...
In the earlier commit, I added a Dovecot userdb lookup. Without a userdb lookup, Dovecot would use the password db for user lookups. With a userdb lookup we can support iterating over users.
But I forgot the WHERE clause in the query, resulting in every incoming message being accepted if the user database contained any users at all. Since the mailbox path template is the same for all users, mail was delivered correctly except that mail that should have been rejected was delivered too.
2016-06-02 08:05:34 -04:00
867d9c4669
v0.18b
2016-05-16 07:17:20 -04:00
1ad5892acd
can't change roundcube's default_host setting, partially reverts 6d259a6e12
...
The default_host setting is a part of the internal username key. We can't change that without causing Roundcube to create new internal user accounts.
2016-05-16 07:14:45 -04:00
94b7c80792
v0.18
2016-05-15 20:41:31 -04:00
ae8cd4efdf
support 'dovecot -A' iteration of all users
2016-05-06 09:16:48 -04:00
6d259a6e12
use "127.0.0.1" throughout rather than mixing use of an IP address and "localhost"
...
On some machines localhost is defined as something other than 127.0.0.1, and if we mix "127.0.0.1" and "localhost" then some connections won't be to to the address a service is actually running on.
This was the case with DKIM: It was running on "localhost" but Postfix was connecting to it at 127.0.0.1. (https://discourse.mailinabox.email/t/opendkim-is-not-running-port-8891/1188/12 .)
I suppose "localhost" could be an alias to an IPv6 address? We don't really want local services binding on IPv6, so use "127.0.0.1" to be explicit and don't use "localhost" to be sure we get an IPv4 address.
Fixes #797
2016-05-06 09:10:38 -04:00
8548ede638
Merge pull #806 - Update Roundcube to 1.1.5
2016-04-24 06:31:28 -04:00
74fea6b93e
Hostname as Roundcube Name
2016-04-09 10:23:20 +02:00
5628f8eecb
Merge #773 - Set the hostname of the box during the setup
2016-04-07 09:44:39 -04:00
bc40134b7b
Remove comment about loopback interface
2016-04-07 10:55:20 +02:00
3649ba1ce9
Merge branch 'master' into hostname
2016-04-07 10:54:53 +02:00
22395bdb8b
Update to ownCloud v8.2.3
2016-04-06 17:31:59 -07:00
1a1d125b31
v0.17c
...
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
iQEcBAABAgAGBQJW/mJqAAoJELkgQfTBC92B/F8H/2s6wKhzzeoqkhLU2nvYJh0B
Q1d0SbtdQWIWrTQbcjIR3aGYwJzJ+HC7rylrwS4lB2ugpJBA0MnfD+ktwbe/EyDa
pN6WLlmnXyAw28//ubq0FQqC8Gawsj4WMfmSEw/XuDShik8XJmU7QUEnewClJ7So
ko4eVp9KL8MU3Rj/DebhyoW0EjpB/qrJvLSqtj4KCxKYES9J8nUVBFVRDL48yNx4
2KTIjqreGZmtW0/wxPnganMeV6DZn3B6vBmqOYYvw7bf6r/cY0ZkNK/ENlo+ntJD
3jFKki4TJChhGVWH5T4Tw2bys4Cua1+SA3cleNRH1rYSvRWyOCwK+LS4YBJHYp4=
=umMp
-----END PGP SIGNATURE-----
merge hotfix release tag 'v0.17c' into master
The hotfixes were all already applied to master in original PRs. This merge merely brings over the CHANGELOG and the updated install instructions (v0.17b=>v0.17c), including to bootstrap.sh which is what triggers v0.17c being the latest release.
2016-04-01 08:00:10 -04:00
86881c0107
v0.17c
2016-04-01 07:58:28 -04:00
703e6795e8
hotfix merge #769 - update the Roundcube html5_notifier plugin from version 0.6 to 0.6.2
...
fixes Roundcube getting stuck for some people, hopefully fixes #693
2016-03-31 10:46:34 -04:00
b3223136f4
hotfix - install roundcube from our own mirror, hosted in Josh's AWS S3 account, because sourceforge is down all the time
...
fixes #750 , see #701 , see #370
was df92a10eba
2016-03-31 10:35:48 -04:00
7fa9baf308
hotfix merge #744 - Fix for putty Line Drawing issues
2016-03-31 10:33:42 -04:00
3210ccdcac
Don't set the hostname on the loopback 127.0.1.1
2016-03-26 15:41:20 +01:00
c910a58f07
Set the hostname of the box during the setup
2016-03-26 14:15:28 +01:00
f6e0af124f
updated html5_notifier version to 0.6.2 in setup
2016-03-25 20:16:51 +01:00
df92a10eba
install roundcube from our own mirror, hosted in Josh's AWS S3 account, because sourceforge is down all the time
...
fixes #750 , see #701 , see #370
2016-03-23 17:31:24 -04:00
336b95b3d5
Merge pull request #756 from yodax/preflight_arm
...
Add a preflight check for supported architecture
2016-03-23 17:19:21 -04:00
56591abbc2
merge #766 - Configure bayes_file_mode in spamassassin/local.cf
2016-03-23 17:17:30 -04:00
083e3cf755
merge #757 (squashed) - add swap space to low-memory systems
2016-03-23 17:07:40 -04:00
696bbe4e82
Add a swap file to the system if system memory is less than 2GB, 5GB of free disk space is available, and if no swap file yet exists
2016-03-23 17:07:04 -04:00
cdedaed3b0
merge #744 - Fix for putty Line Drawing issues
2016-03-23 16:51:01 -04:00
c01f903413
edit NCURSES_NO_UTF8_ACS's comment, add changelog entry
2016-03-23 16:50:27 -04:00
546d6f0026
merge #674 - Support munin's cgi dynazoom
2016-03-23 16:10:30 -04:00
84f4509b48
Configure bayes_file_mode in spamassassin/local.cf
2016-03-20 05:55:58 +01:00
35a593af13
Improve preflight message
2016-03-14 07:14:09 +01:00
f69d6e9015
Add a preflight check for supported architecture
2016-03-14 07:00:33 +01:00
ChiefGyk
Joshua Tauberer
Chris Blankenship
aspdye
Michael Kroes
kurt89523
david