Joshua Tauberer 
							
						 
					 
					
						
						
						
						
							
						
						
							c5082498ab 
							
						 
					 
					
						
						
							
							utils.py can't import non-standard modules because it is imported by migrate.py, which is run before anything is installed  
						
						... 
						
						
						
						closes  #540  
					
						2015-08-30 13:50:34 -04:00 
						 
				 
			
				
					
						
							
							
								Richard Willis 
							
						 
					 
					
						
						
						
						
							
						
						
							ab59323813 
							
						 
					 
					
						
						
							
							Added a note about TXT record length limitations and how to construct the records to bypass the limitation  
						
						
						
					 
					
						2015-08-28 15:50:02 +02:00 
						 
				 
			
				
					
						
							
							
								Joshua Tauberer 
							
						 
					 
					
						
						
						
						
							
						
						
							a56a9dc6a1 
							
						 
					 
					
						
						
							
							add Mail-in-a-Box version check to status checks  
						
						... 
						
						
						
						closes  #502  
					
						2015-08-28 12:34:02 +00:00 
						 
				 
			
				
					
						
							
							
								Joshua Tauberer 
							
						 
					 
					
						
						
						
						
							
						
						
							bc790ea581 
							
						 
					 
					
						
						
							
							backups: make the instructions about the backup password file more prominent  
						
						
						
					 
					
						2015-08-28 12:33:07 +00:00 
						 
				 
			
				
					
						
							
							
								Joshua Tauberer 
							
						 
					 
					
						
						
						
						
							
						
						
							dbfd158388 
							
						 
					 
					
						
						
							
							dont refresh the backup page when there's an error saving the config  
						
						
						
					 
					
						2015-08-28 12:33:07 +00:00 
						 
				 
			
				
					
						
							
							
								Joshua Tauberer 
							
						 
					 
					
						
						
						
						
							
						
						
							2b1f7da654 
							
						 
					 
					
						
						
							
							S3 credentials for backup should not be displayed in the control panel,  fixes   #529  
						
						
						
					 
					
						2015-08-28 12:33:07 +00:00 
						 
				 
			
				
					
						
							
							
								Joshua Tauberer 
							
						 
					 
					
						
						
						
						
							
						
						
							0c9d431a3f 
							
						 
					 
					
						
						
							
							major cleanup to adding new version check to the status checks  
						
						
						
					 
					
						2015-08-28 12:29:55 +00:00 
						 
				 
			
				
					
						
							
							
								Norman Stanke 
							
						 
					 
					
						
						
						
						
							
						
						
							1a525df8ad 
							
						 
					 
					
						
						
							
							Add Mail-in-a-Box version status check.  
						
						
						
					 
					
						2015-08-28 11:55:21 +00:00 
						 
				 
			
				
					
						
							
							
								Richard Willis 
							
						 
					 
					
						
						
						
						
							
						
						
							f26c0b71d2 
							
						 
					 
					
						
						
							
							Focus on fields in the login form  
						
						... 
						
						
						
						This just makes life a little easier...
Squashed the following commits:
* Use $.trim() for better browser support 
						
					 
					
						2015-08-27 22:17:13 +02:00 
						 
				 
			
				
					
						
							
							
								Joshua Tauberer 
							
						 
					 
					
						
						
						
						
							
						
						
							a8074ae3e4 
							
						 
					 
					
						
						
							
							suppress some status output regarding new automatic aliases on first installation  
						
						
						
					 
					
						2015-08-19 16:30:32 -04:00 
						 
				 
			
				
					
						
							
							
								Joshua Tauberer 
							
						 
					 
					
						
						
						
						
							
						
						
							cfc4e6b48b 
							
						 
					 
					
						
						
							
							automatic administrator aliases are probably not bidirectional because the administrator@ address is an alias and not a user  
						
						
						
					 
					
						2015-08-19 16:06:09 -04:00 
						 
				 
			
				
					
						
							
							
								root 
							
						 
					 
					
						
						
						
						
							
						
						
							39270a8e35 
							
						 
					 
					
						
						
							
							fix problem with certificate verification on OpenVZ servers  
						
						
						
					 
					
						2015-08-15 17:32:40 +02:00 
						 
				 
			
				
					
						
							
							
								Joshua Tauberer 
							
						 
					 
					
						
						
						
						
							
						
						
							8c08f957cd 
							
						 
					 
					
						
						
							
							bidirectional alias controls: a new permitted_senders column in the aliases table allows setting who can send as an address independently of where the address forwards to  
						
						... 
						
						
						
						But the default permitted senders are the same as the addresses the alias forwards to.
Merge branch 'dhpiggott-bidirectional-alias-controls' 
						
					 
					
						2015-08-14 23:09:22 +00:00 
						 
				 
			
				
					
						
							
							
								Joshua Tauberer 
							
						 
					 
					
						
						
						
						
							
						
						
							5924d0fe0d 
							
						 
					 
					
						
						
							
							various cleanup related to the new permitted_senders column for aliases  
						
						
						
					 
					
						2015-08-14 23:05:08 +00:00 
						 
				 
			
				
					
						
							
							
								Joshua Tauberer 
							
						 
					 
					
						
						
						
						
							
						
						
							848dea83ab 
							
						 
					 
					
						
						
							
							additional error handling for backups with an invalid target  
						
						
						
					 
					
						2015-08-12 11:19:59 +00:00 
						 
				 
			
				
					
						
							
							
								Leo Koppelkamm 
							
						 
					 
					
						
						
						
						
							
						
						
							f96bef43cc 
							
						 
					 
					
						
						
							
							If no prefix is specified, set the path to '', otherwise boto won't list the files  
						
						
						
					 
					
						2015-08-11 13:54:30 +02:00 
						 
				 
			
				
					
						
							
							
								Joshua Tauberer 
							
						 
					 
					
						
						
						
						
							
						
						
							f4e8ee0af9 
							
						 
					 
					
						
						
							
							html errors in the backup template, my bad  
						
						
						
					 
					
						2015-08-09 20:34:08 +00:00 
						 
				 
			
				
					
						
							
							
								Joshua Tauberer 
							
						 
					 
					
						
						
						
						
							
						
						
							9ca116d545 
							
						 
					 
					
						
						
							
							add an option to disable backups  
						
						
						
					 
					
						2015-08-09 20:15:43 +00:00 
						 
				 
			
				
					
						
							
							
								Joshua Tauberer 
							
						 
					 
					
						
						
						
						
							
						
						
							cdd3a64638 
							
						 
					 
					
						
						
							
							after-backup was run with the wrong environment  
						
						
						
					 
					
						2015-08-09 20:08:33 +00:00 
						 
				 
			
				
					
						
							
							
								Joshua Tauberer 
							
						 
					 
					
						
						
						
						
							
						
						
							99e51f8a52 
							
						 
					 
					
						
						
							
							use boto to get actual file sizes of backup files when S3 is used  
						
						
						
					 
					
						2015-08-09 20:08:33 +00:00 
						 
				 
			
				
					
						
							
							
								Joshua Tauberer 
							
						 
					 
					
						
						
						
						
							
						
						
							3b4b57c081 
							
						 
					 
					
						
						
							
							switching between backup options in the admin wasn't working at all  
						
						... 
						
						
						
						* going from s3 to file target wasn't working
* use 'local' in the config instead of a file: url, for the local target, so it is not path-specific
* break out the S3 fields since users can't be expected to know how to form a URL
* use boto to generate a list of S3 hosts
* use boto to validate that the user input for s3 is valid
* fix lots of html errors in the backup admin 
						
					 
					
						2015-08-09 20:08:33 +00:00 
						 
				 
			
				
					
						
							
							
								Joshua Tauberer 
							
						 
					 
					
						
						
						
						
							
						
						
							c7f8ead496 
							
						 
					 
					
						
						
							
							clean up the new backup configuration panel  
						
						
						
					 
					
						2015-08-09 20:08:30 +00:00 
						 
				 
			
				
					
						
							
							
								Joshua Tauberer 
							
						 
					 
					
						
						
						
						
							
						
						
							3f15879578 
							
						 
					 
					
						
						
							
							remove global variables in backup.py  
						
						
						
					 
					
						2015-08-09 17:54:46 +00:00 
						 
				 
			
				
					
						
							
							
								Leo Koppelkamm 
							
						 
					 
					
						
						
						
						
							
						
						
							1cdd205eb7 
							
						 
					 
					
						
						
							
							Missed one max_age  
						
						
						
					 
					
						2015-07-28 20:58:39 +02:00 
						 
				 
			
				
					
						
							
							
								Leo Koppelkamm 
							
						 
					 
					
						
						
						
						
							
						
						
							77099b3bce 
							
						 
					 
					
						
						
							
							Reword backup min_time label  
						
						
						
					 
					
						2015-07-28 00:42:00 +02:00 
						 
				 
			
				
					
						
							
							
								Leo Koppelkamm 
							
						 
					 
					
						
						
						
						
							
						
						
							0d8a4099c1 
							
						 
					 
					
						
						
							
							Add placeholder attribute; use input instead of textarea  
						
						
						
					 
					
						2015-07-28 00:37:48 +02:00 
						 
				 
			
				
					
						
							
							
								Leo Koppelkamm 
							
						 
					 
					
						
						
						
						
							
						
						
							606cf6a941 
							
						 
					 
					
						
						
							
							Fix API typo  
						
						
						
					 
					
						2015-07-28 00:34:26 +02:00 
						 
				 
			
				
					
						
							
							
								Leo Koppelkamm 
							
						 
					 
					
						
						
						
						
							
						
						
							ba9065cada 
							
						 
					 
					
						
						
							
							Don't write collection_status output to file but parse it directly  
						
						
						
					 
					
						2015-07-27 22:30:22 +02:00 
						 
				 
			
				
					
						
							
							
								Leo Koppelkamm 
							
						 
					 
					
						
						
						
						
							
						
						
							e693802091 
							
						 
					 
					
						
						
							
							Rename max_age to min_age  
						
						... 
						
						
						
						Also clarify a comment and remove an unneeded type check 
						
					 
					
						2015-07-27 22:18:19 +02:00 
						 
				 
			
				
					
						
							
							
								Leo Koppelkamm 
							
						 
					 
					
						
						
						
						
							
						
						
							fa0dd684da 
							
						 
					 
					
						
						
							
							Add archive-dir argument to collection-status  
						
						
						
					 
					
						2015-07-27 22:13:28 +02:00 
						 
				 
			
				
					
						
							
							
								Leo Koppelkamm 
							
						 
					 
					
						
						
						
						
							
						
						
							43fb7fe635 
							
						 
					 
					
						
						
							
							Remove unused variable  
						
						
						
					 
					
						2015-07-27 22:11:43 +02:00 
						 
				 
			
				
					
						
							
							
								Leo Koppelkamm 
							
						 
					 
					
						
						
						
						
							
						
						
							91e4ea6e2f 
							
						 
					 
					
						
						
							
							Infer target_type from url  
						
						
						
					 
					
						2015-07-27 22:09:58 +02:00 
						 
				 
			
				
					
						
							
							
								Leo Koppelkamm 
							
						 
					 
					
						
						
						
						
							
						
						
							1e3e34f15f 
							
						 
					 
					
						
						
							
							Make backup API RESTful  
						
						
						
					 
					
						2015-07-27 22:00:36 +02:00 
						 
				 
			
				
					
						
							
							
								Leo Koppelkamm 
							
						 
					 
					
						
						
						
						
							
						
						
							2e6c410336 
							
						 
					 
					
						
						
							
							Make backups more configurable  
						
						... 
						
						
						
						Backup location and maximum age can now be configured in the admin panel.
For now only S3 is supported, but adding other duplicity supported backends should be straightforward. 
						
					 
					
						2015-07-27 21:53:34 +02:00 
						 
				 
			
				
					
						
							
							
								Joshua Tauberer 
							
						 
					 
					
						
						
						
						
							
						
						
							0293e04311 
							
						 
					 
					
						
						
							
							fix control panel links, broken in Firefox (worked in Chrome)  
						
						... 
						
						
						
						see https://discourse.mailinabox.email/t/bug-present-for-ages/694/3  
						
					 
					
						2015-07-25 14:12:45 +00:00 
						 
				 
			
				
					
						
							
							
								Joshua Tauberer 
							
						 
					 
					
						
						
						
						
							
						
						
							1900e512f2 
							
						 
					 
					
						
						
							
							improve the sort order of domains - siblings to the primary hostname were not sorted right  
						
						
						
					 
					
						2015-07-21 11:25:11 +00:00 
						 
				 
			
				
					
						
							
							
								David Piggott 
							
						 
					 
					
						
						
						
						
							
						
						
							123ac4fd33 
							
						 
					 
					
						
						
							
							s/email/address/ in aliases UI variable names  
						
						... 
						
						
						
						This makes the frontend consistent with the backend. 
						
					 
					
						2015-07-20 12:51:57 +01:00 
						 
				 
			
				
					
						
							
							
								David Piggott 
							
						 
					 
					
						
						
						
						
							
						
						
							423bb8e317 
							
						 
					 
					
						
						
							
							Fix remove-alias button breakage  
						
						
						
					 
					
						2015-07-20 12:51:57 +01:00 
						 
				 
			
				
					
						
							
							
								David Piggott 
							
						 
					 
					
						
						
						
						
							
						
						
							e6ff280984 
							
						 
					 
					
						
						
							
							Store and set alias receivers and senders separately for maximum control  
						
						
						
					 
					
						2015-07-20 12:51:57 +01:00 
						 
				 
			
				
					
						
							
							
								David Piggott 
							
						 
					 
					
						
						
						
						
							
						
						
							3fdfad27cd 
							
						 
					 
					
						
						
							
							Add support for bidirectional mail alias controls  
						
						... 
						
						
						
						This is an extension of #427 . Building on that change it adds support in the
aliases table for flagging aliases as:
 1. Applicable to inbound and outbound mail.
 2. Applicable to inbound mail only.
 3. Applicable to outbound mail only.
 4. Disabled.
The aliases UI is also updated to allow administrators to set the direction of
each alias.
Using this extra information, the sqlite queries executed by Postfix are
updated so only the relevant alias types are checked.
The goal and result of this change is that outbound-only catch-all aliases can
now be defined (in fact catch-all aliases of any type can be defined).
This allow us to continue supporting relaying as described at
https://mailinabox.email/advanced-configuration.html#relay 
without requiring that administrators either create regular aliases for each
outbound *relay* address, or that they create a catch-all alias and then face a
flood of spam.
I have tested the code as it is in this commit and fixed every issue I found,
so in that regard the change is complete. However I see room for improvement
in terms of updating terminology to make the UI etc. easier to understand.
I'll make those changes as subsequent commits so that this tested checkpoint is
not lost, but also so they can be rejected independently of the actual change
if not wanted. 
						
					 
					
						2015-07-20 12:51:57 +01:00 
						 
				 
			
				
					
						
							
							
								Joshua Tauberer 
							
						 
					 
					
						
						
						
						
							
						
						
							d3bbc0ec95 
							
						 
					 
					
						
						
							
							bug in new secondary nameservers  
						
						... 
						
						
						
						forgot a 'continue' statement
see 216acb0eebfixes  #497  
						
					 
					
						2015-07-20 11:25:16 +00:00 
						 
				 
			
				
					
						
							
							
								Joshua Tauberer 
							
						 
					 
					
						
						
						
						
							
						
						
							541d9252f6 
							
						 
					 
					
						
						
							
							allow PEM files to have non-Unix line endings  
						
						
						
					 
					
						2015-07-17 11:44:28 +00:00 
						 
				 
			
				
					
						
							
							
								PortableTech 
							
						 
					 
					
						
						
						
						
							
						
						
							415f95b792 
							
						 
					 
					
						
						
							
							Add TLSA record for HTTPS connections.  
						
						... 
						
						
						
						While not widely supported, there are some browser addons that can
validate DNSSEC and TLSA for additional out-of-band verification of
certificates when browsing the web.  Costs nothing to implement and
might improve security in some situations. 
						
					 
					
						2015-07-13 09:12:13 -04:00 
						 
				 
			
				
					
						
							
							
								Joshua Tauberer 
							
						 
					 
					
						
						
						
						
							
						
						
							5dd5fc4a1c 
							
						 
					 
					
						
						
							
							clean up multiple secondary nameservers and zone xfr ip addresses  
						
						
						
					 
					
						2015-07-10 15:42:33 +00:00 
						 
				 
			
				
					
						
							
							
								Brian Bustin 
							
						 
					 
					
						
						
						
						
							
						
						
							09133c8f59 
							
						 
					 
					
						
						
							
							Initial backend changes to make it possible to have one or more secondary name servers  
						
						
						
					 
					
						2015-07-10 14:59:38 +00:00 
						 
				 
			
				
					
						
							
							
								Joshua Tauberer 
							
						 
					 
					
						
						
						
						
							
						
						
							acd91665b5 
							
						 
					 
					
						
						
							
							setting an alias to forward to two or more addresses was broken since  aa33428311 
						
						... 
						
						
						
						fixes  #482  
					
						2015-07-04 15:28:45 +00:00 
						 
				 
			
				
					
						
							
							
								Joshua Tauberer 
							
						 
					 
					
						
						
						
						
							
						
						
							ff4780d5fb 
							
						 
					 
					
						
						
							
							better error handling of invalid PEM files  
						
						
						
					 
					
						2015-07-03 14:00:59 +00:00 
						 
				 
			
				
					
						
							
							
								Joshua Tauberer 
							
						 
					 
					
						
						
						
						
							
						
						
							0924f8ca7a 
							
						 
					 
					
						
						
							
							allow for PEM private keys in the 'BEGIN PRIVATE KEY' format too  
						
						... 
						
						
						
						see https://discourse.mailinabox.email/t/another-upgrade-failure/630/5  
						
					 
					
						2015-07-02 15:37:26 -04:00 
						 
				 
			
				
					
						
							
							
								Joshua Tauberer 
							
						 
					 
					
						
						
						
						
							
						
						
							e57e08088a 
							
						 
					 
					
						
						
							
							the control panel would not allow installing a certificate for a www redirect domain,  fixes   #475  
						
						
						
					 
					
						2015-07-02 10:53:54 +00:00 
						 
				 
			
				
					
						
							
							
								Joshua Tauberer 
							
						 
					 
					
						
						
						
						
							
						
						
							42a506231b 
							
						 
					 
					
						
						
							
							don't automatically create the administrator@ alias (e.g. on first user creation) because we dont know what it should be an alias to (leave this to be resolved manually),  fixes   #470  
						
						... 
						
						
						
						Was broken by 462a79cf47 
						
					 
					
						2015-06-30 09:16:22 -04:00