Commit Graph

Select branches

Hide Pull Requests

2fa

docker

encryption-milter

main

secureupgrade

webauthn

#1

#1

#1000

#1000

#1001

#1001

#1005

#1006

#1007

#1007

#1010

#1014

#1022

#1022

#1024

#1025

#1025

#1027

#1028

#1029

#103

#103

#1030

#1030

#1035

#1035

#1036

#1037

#1039

#1039

#1042

#1042

#1043

#1043

#1044

#105

#1052

#1057

#1057

#1058

#1058

#1065

#1076

#1077

#1078

#1079

#1079

#1083

#1083

#1085

#1085

#1093

#1094

#1096

#1098

#1099

#1103

#1103

#1105

#1108

#111

#1114

#1120

#1121

#1123

#1126

#1126

#113

#1138

#1139

#1140

#1140

#1141

#115

#1150

#1151

#1153

#1155

#1162

#1163

#1165

#1165

#1166

#1168

#1168

#1169

#1169

#1171

#1172

#1173

#1177

#1179

#1181

#1185

#12

#1201

#1206

#1209

#1212

#1215

#1215

#1216

#1216

#1221

#1221

#1223

#1229

#1229

#1231

#1232

#1233

#1233

#1236

#1238

#1238

#1253

#1255

#1258

#1261

#1265

#1265

#1266

#1266

#1268

#1271

#1277

#1278

#1281

#1281

#1287

#1287

#1292

#1294

#1294

#1302

#1305

#1311

#1311

#1312

#1313

#1313

#1330

#1338

#1338

#1345

#1346

#1346

#1347

#1348

#135

#1354

#1359

#1376

#1377

#1377

#1380

#1387

#1387

#1398

#1399

#1400

#1400

#1402

#1406

#1408

#1408

#1412

#1417

#142

#1420

#1427

#1432

#1433

#1434

#1435

#1436

#1438

#144

#1441

#1441

#1443

#1443

#1447

#1448

#1451

#1452

#1454

#1455

#1455

#1456

#1456

#1457

#1458

#146

#1460

#1463

#1464

#1467

#147

#1475

#1476

#1477

#1479

#148

#1480

#1481

#1482

#1487

#1488

#149

#149

#1494

#1497

#1498

#150

#1500

#1504

#1506

#1511

#152

#1520

#1529

#1534

#1545

#1546

#1550

#1551

#1556

#156

#1560

#1563

#1564

#1565

#1568

#1568

#1576

#1577

#1578

#1579

#1580

#1581

#1584

#1588

#1590

#1590

#1603

#1603

#1605

#1606

#1611

#1616

#162

#1620

#1625

#1628

#1628

#1629

#163

#1632

#1633

#1634

#1635

#1636

#1639

#164

#1641

#1642

#1643

#1644

#1644

#1646

#1646

#1648

#1650

#1651

#1652

#1652

#1653

#1654

#1655

#166

#1662

#167

#1670

#1671

#1672

#1673

#1674

#1675

#1676

#1679

#168

#1680

#1684

#1684

#1688

#1689

#1693

#1698

#170

#1702

#1703

#1712

#1716

#1716

#1717

#1720

#1721

#1728

#173

#1731

#1734

#1741

#1742

#1748

#1752

#1754

#1761

#1768

#1770

#1773

#1773

#1775

#178

#1787

#1789

#1790

#1791

#1793

#1795

#1798

#1799

#1800

#1804

#1809

#1812

#1813

#1814

#1817

#1823

#1823

#1827

#1829

#1830

#1836

#1841

#1848

#1853

#1855

#1856

#1856

#1863

#1866

#1869

#1876

#188

#1882

#1882

#1883

#1884

#1884

#1886

#1891

#1892

#1893

#1895

#1899

#1900

#1900

#1905

#1908

#191

#191

#1913

#192

#1920

#1920

#1929

#193

#1932

#1942

#1943

#1947

#1948

#1949

#1950

#1954

#1955

#1958

#1958

#1960

#1965

#1965

#1970

#1976

#2001

#2002

#2008

#201

#2012

#2013

#2015

#2017

#202

#202

#2024

#2033

#2034

#2035

#2038

#2043

#2043

#2044

#2045

#2051

#2054

#2055

#2063

#2064

#2067

#2069

#207

#2074

#2077

#2078

#2079

#2081

#2083

#2090

#21

#2105

#2106

#2109

#2115

#212

#212

#2125

#2126

#2137

#2138

#214

#214

#2151

#2153

#2156

#2157

#2158

#2159

#2162

#2163

#2170

#2182

#2190

#2191

#2192

#2192

#2193

#2193

#2194

#2198

#2199

#220

#220

#2201

#2202

#2203

#2204

#2207

#2208

#2216

#2218

#2219

#2220

#2220

#2226

#2227

#2236

#2241

#2244

#2247

#2248

#2249

#2252

#2253

#2258

#2258

#2259

#2259

#2260

#2261

#2262

#2263

#2268

#227

#227

#2270

#2271

#2275

#2281

#2287

#2293

#2296

#2298

#2298

#2299

#230

#2301

#2304

#2305

#2306

#2308

#2309

#2309

#2310

#2311

#2315

#2317

#2319

#2319

#232

#2322

#2325

#2328

#2329

#233

#2330

#2332

#2333

#2334

#2340

#2342

#2343

#2345

#2346

#2347

#2349

#2351

#2352

#2356

#2359

#2360

#2365

#2368

#2376

#2377

#2378

#2379

#2380

#2382

#2382

#2383

#2383

#2385

#2387

#2389

#239

#239

#2390

#2401

#2406

#2407

#2409

#2410

#2411

#2413

#2416

#2418

#242

#242

#2422

#2423

#2424

#2425

#2428

#2429

#2431

#2432

#2433

#2436

#2437

#2439

#244

#244

#2440

#2441

#2445

#2445

#2453

#2454

#2457

#2459

#2463

#2464

#2465

#2465

#2469

#2470

#2473

#2474

#2474

#2475

#2475

#2477

#248

#2480

#2482

#2483

#2484

#2485

#2485

#2486

#2486

#2490

#2491

#2493

#2493

#2494

#2494

#2498

#2498

#2499

#25

#25

#2500

#2506

#2506

#2507

#2508

#2509

#2509

#251

#251

#2511

#2512

#2515

#2520

#2522

#2522

#254

#260

#261

#269

#269

#274

#274

#275

#276

#276

#279

#282

#287

#288

#29

#297

#298

#300

#304

#306

#307

#310

#311

#311

#312

#313

#313

#317

#324

#324

#326

#332

#334

#336

#336

#338

#338

#34

#347

#348

#349

#349

#350

#350

#353

#363

#363

#365

#365

#366

#372

#377

#377

#38

#38

#392

#392

#396

#397

#397

#40

#403

#406

#409

#409

#410

#411

#412

#412

#413

#414

#414

#418

#419

#420

#421

#422

#423

#427

#429

#435

#435

#436

#437

#437

#439

#439

#442

#445

#45

#450

#451

#452

#460

#463

#47

#471

#476

#476

#477

#478

#479

#483

#483

#485

#485

#486

#49

#490

#490

#491

#491

#492

#494

#5

#502

#502

#507

#507

#510

#510

#512

#517

#523

#526

#528

#533

#536

#537

#540

#540

#544

#548

#549

#549

#550

#551

#571

#571

#572

#573

#580

#581

#583

#583

#584

#584

#587

#589

#596

#596

#597

#598

#599

#602

#605

#621

#624

#624

#630

#630

#632

#632

#634

#634

#636

#638

#638

#647

#65

#650

#650

#654

#66

#661

#664

#664

#665

#668

#674

#675

#678

#679

#679

#68

#685

#687

#687

#688

#69

#69

#699

#70

#708

#708

#709

#709

#712

#714

#714

#716

#718

#719

#719

#726

#727

#728

#73

#732

#733

#734

#735

#739

#739

#74

#743

#743

#744

#751

#754

#754

#755

#756

#757

#757

#760

#760

#763

#766

#767

#767

#768

#769

#77

#770

#770

#771

#772

#773

#774

#774

#775

#775

#776

#780

#780

#786

#787

#789

#791

#793

#794

#794

#795

#798

#80

#80

#804

#805

#805

#806

#808

#808

#810

#810

#811

#811

#818

#818

#821

#822

#823

#837

#840

#840

#846

#846

#857

#868

#868

#87

#870

#874

#874

#875

#876

#876

#879

#88

#880

#883

#883

#886

#887

#887

#889

#89

#891

#891

#894

#897

#897

#90

#900

#902

#904

#904

#906

#906

#908

#909

#914

#914

#917

#917

#92

#927

#931

#936

#938

#938

#939

#940

#946

#946

#947

#947

#948

#948

#949

#951

#952

#955

#955

#956

#956

#957

#957

#958

#958

#959

#959

#960

#961

#962

#962

#965

#97

#97

#970

#972

#974

#975

#975

#976

#976

#983

#984

#988

#992

#996

14.08-beta

v0.01

v0.02

v0.03

v0.04

v0.05

v0.06

v0.07

v0.08

v0.09

v0.10

v0.11

v0.11b

v0.12

v0.12b

v0.12c

v0.13a

v0.13b

v0.14

v0.15

v0.15-rc1

v0.15a

v0.16

v0.17

v0.17b

v0.17c

v0.18

v0.18b

v0.18c

v0.19

v0.19a

v0.19b

v0.20

v0.21

v0.21b

v0.21c

v0.22

v0.23

v0.23a

v0.24

v0.25

v0.26

v0.26b

v0.26c

v0.27

v0.28

v0.29

v0.30

v0.40

v0.41

v0.42

v0.42b

v0.43

v0.44

v0.45

v0.46

v0.47

v0.48

v0.50

v0.51

v0.52

v0.53

v0.53a

v0.54

v55

v56

v57

v57a

v60

v60.1

v61

v61.1

v62

v63

v64

v65

v66

v67

v68

v69

v69a

v69b

v70

v71

v71a

v72

v73

Mono Color

• a1a80b295e update docs a bit Joshua Tauberer 2014-06-18 23:12:05 -0400
• 94a140a27a linkify README Joshua Tauberer 2014-06-18 23:04:06 -0400
• 126ea94ccf drop support for ADSP which since last November is no longer recommended per http://datatracker.ietf.org/doc/status-change-adsp-rfc5617-to-historic/ Joshua Tauberer 2014-06-18 22:56:55 -0400
• 0f72f78eea add DNSSEC/DANE TLSA to the README Joshua Tauberer 2014-06-19 02:19:05 +0000
• 782ad04b10 use DANE when sending mail: if the recipient MX has a DANE TLSA record in DNS then Postfix will necessarily encrypt the mail in transport Joshua Tauberer 2014-06-19 01:58:14 +0000
• 95e61bc110 add DANE TLSA records to the PUBLIC_HOSTNAME's DNS Joshua Tauberer 2014-06-19 01:39:27 +0000
• 699bccad80 missing spaces in nsd.conf (has no effect but looks proper) Joshua Tauberer 2014-06-18 23:53:52 +0000
• afb6c26c8b run bind9 on the loopback interface for ensuring we are using a DNSSEC-aware nameserver to resolve our own DNS queries (i.e. when sending mail) since we can't trust that the network configuration provided for us gives us a DNSSEC-aware DNS server Joshua Tauberer 2014-06-18 19:41:35 -0400
• 761fac729b nsd.conf wasn't properly using the signed zone files Joshua Tauberer 2014-06-18 23:30:35 +0000
• dd15bf4384 use a better sort order for records in DNS zone files Joshua Tauberer 2014-06-17 23:34:06 +0000
• 14396e58f8 dont create a separate zone for PUBLIC_HOSTNAME if it is a subdomain of another zone (hmm, this is a general principle that could apply to any two domains the box is serving) Joshua Tauberer 2014-06-17 23:30:00 +0000
• 33f06f29c1 let the user override some DNS records Joshua Tauberer 2014-06-17 21:39:26 +0000
• 88709506f8 add DNSSEC Joshua Tauberer 2014-06-17 22:21:12 +0000
• 1ca7c0c6e1 Update README.md jordanrinke 2014-06-13 12:52:21 -0700
• 3560bfedb7 add ipset save/load/flush jordanrinke 2014-06-13 12:51:41 -0700
• 5dd3f71343 Initial commit jordanrinke 2014-06-13 12:41:04 -0700
• aaa735dbfe write nsd.conf zones in a predictable order so that we don't keep rewriting it Joshua Tauberer 2014-06-12 22:28:37 -0400
• e9cde52a48 two more cases of shelling out external programs in a more secure way, see cecda9cec5 Joshua Tauberer 2014-06-12 21:06:04 -0400
• c925f72b0b remove obsoleted parts of setup/dns.sh Joshua Tauberer 2014-06-12 20:18:53 -0400
• e18c51293d update News Challenge status in README Joshua Tauberer 2014-06-10 18:48:09 -0400
• d28d07f78e increase the postfix message size limit from 10MB to 128MB Joshua Tauberer 2014-06-10 10:21:43 +0000
• cad868c6c9 reorganize mail.sh a little Joshua Tauberer 2014-06-10 10:19:49 +0000
• 8bd62aa3bc increase duplicity's volume size from the default of 25MB to 100MB so we create fewer files Joshua Tauberer 2014-06-09 13:47:41 +0000
• 5490142df5 re-do the backup script to use the duplicity program Joshua Tauberer 2014-06-09 09:34:52 -0400
• cecda9cec5 management: shell out external programs in a more secure way Joshua Tauberer 2014-06-09 08:09:45 -0400
• 93be8d9f67 Create dshield_auto.sh Onder Vincent Koc 2014-06-09 12:03:27 +0100
• fbbce3c0fa Initial commit Onder Vincent Koc 2014-06-09 11:55:36 +0100
• 70bd96f643 Merge pull request #70 from mkropat/ipv6-support Joshua Tauberer 2014-06-08 19:03:33 -0400
• fb957d2de7 Populate default values before echoing help text Michael Kropat 2014-06-08 18:44:08 -0400
• cd1802fecc Filter privacy-sensitive headers on outgoing mail Joshua Tauberer 2014-06-08 17:30:37 -0400
• ae67409603 Support dual-stack IPv4/IPv6 mail servers Michael Kropat 2014-06-08 18:32:52 -0400
• 2c4212fa36 use editconf.py to mangle /etc/postfix/master.cf Joshua Tauberer 2014-06-08 17:23:06 -0400
• 5b72e5419d fix shebang lines in the tests to take advantage of any activated python environment Joshua Tauberer 2014-06-08 17:22:52 -0400
• ad520b45ff adding a new script archive_conf_files.sh to dump the contents of all files modified by editconf.py so testing is easier Joshua Tauberer 2014-06-08 17:21:13 -0400
• eeebc3de70 Merge bb63d5774a into ca34c1b1ae Michael Kropat 2014-06-08 20:33:36 +0000
• bb63d5774a Remove submission options configuration Michael Kropat 2014-06-08 16:31:51 -0400
• d904feb399 Filter privacy-sensitive headers on outgoing mail Michael Kropat 2014-06-08 15:18:36 -0400
• ca34c1b1ae Merge pull request #68 from mkropat/protect-key Joshua Tauberer 2014-06-07 20:19:40 -0400
• 42bf624045 Protect private key from being world-readable Michael Kropat 2014-06-07 19:40:50 -0400
• 3fa8e384d4 improve hostname/IP default values Joshua Tauberer 2014-06-07 14:57:22 -0400
• b60ca25e53 add comments to the new get_default_hostname etc. functions, and simplify the logic in the Vagrantfile and start.sh so that we always call into the same two functions Joshua Tauberer 2014-06-07 14:55:57 -0400
• 43ef49c737 Improve hostname/IP default values Michael Kropat 2014-06-07 13:54:58 -0400
• add1545deb Merge pull request #65 from mkropat/mkropat/password-mask Joshua Tauberer 2014-06-06 17:18:33 -0400
• 5774205bc2 Mask password input on stdin Michael Kropat 2014-06-06 17:07:30 -0400
• 242cadebc8 allow dashes in emails during validation, and for aliases allow a much wider range of characters, fixes #64 Joshua Tauberer 2014-06-06 09:58:58 -0400
• f1dac1fe13 show less output when updating DNS configuration Joshua Tauberer 2014-06-06 08:41:57 -0400
• 389c354c8f Vagrant updates Joshua Tauberer 2014-06-06 08:20:26 -0400
• f9c3f33e74 move the SSH password login check out of setup because it interfers with Vagrant and into a separate script that we'll use for auditing in a later phase Joshua Tauberer 2014-06-06 08:17:49 -0400
• 6194c63f76 add management comments for checking for updated Ubuntu packages and applying updates Joshua Tauberer 2014-06-05 20:57:25 +0000
• cab7321dbb remove vestigal docker compatibility that prevented starting services during setup Joshua Tauberer 2014-06-04 20:04:26 -0400
• 295981828f Vagrantize Joshua Tauberer 2014-06-04 19:39:58 -0400
• 3961e1aec3 test_dns: more error handling Joshua Tauberer 2014-06-04 19:31:55 -0400
• 7fa4862f1a refactor dns_update so that the zone is first generated in a file-format agnostic way Joshua Tauberer 2014-06-04 19:00:31 -0400
• 8ed15168c0 the new dns_update totally forgot to write the OpenDKIM tables Joshua Tauberer 2014-06-04 18:44:13 -0400
• 2f0d036504 the bc package is no longer needed since redoing dns_update Joshua Tauberer 2014-06-04 17:27:01 -0400
• d6e6cfd3c9 mail test: catch typical connecting errors and display nicer output Joshua Tauberer 2014-06-04 17:13:06 -0400
• fff06f7d71 improve DNS test output Joshua Tauberer 2014-06-04 17:01:49 -0400
• 2bbb7a5e7e remove Docker stuff since it doesnt work Joshua Tauberer 2014-06-04 10:57:23 -0400
• a35fa12465 script to check the SSL certificate, with instructions for turning the self-signed certificate into a properly signed certificate Joshua Tauberer 2014-06-04 11:32:37 +0000
• ea62c2419d typo in updating DKIM, dont regenerate the DKIM private key each time setup is run Joshua Tauberer 2014-06-03 21:42:33 +0000
• 2a9349a64e show the SSL certificate's fingerprint during setup so the user can sort of pin it Joshua Tauberer 2014-06-03 21:39:49 +0000
• bb7905aefd on second and later runs of start.sh, recall the inputs the user entered the last time Joshua Tauberer 2014-06-03 21:31:13 +0000
• 24edd5ce91 the SSL CSR must be generated with a country code Joshua Tauberer 2014-06-03 21:17:10 +0000
• 89730bd643 new backup script, see #11 Joshua Tauberer 2014-06-03 20:21:17 +0000
• 51dd2ed70b update nginx SSL options, fixes #61 Joshua Tauberer 2014-06-03 14:06:02 +0000
• c54b0cbefc move management into a daemon service running as root Joshua Tauberer 2014-06-03 13:24:48 +0000
• da15ae5375 rename the scripts directory to setup Joshua Tauberer 2014-06-03 11:12:38 +0000
• af03feb389 remove permit_dnswl_client because postfix has odd behavior when an IP address is not listed: it turns all bounces into deferrals (retry) Joshua Tauberer 2014-05-23 08:58:49 +0000
• 19aba091d7 test_mail: if EHLO test fails continue testing the rest, since user may be waiting on DNS propagation Joshua Tauberer 2014-05-17 08:32:40 -0400
• f91830f0e3 clean up README a bit; moving the bit Rationale into the github wiki Joshua Tauberer 2014-05-15 08:57:38 -0400
• 6d473f81ac add more postfix rules: reject_non_fqdn_sender, reject_unknown_sender_domain, reject_rhsbl_sender, and permit_dnswl_client Joshua Tauberer 2014-05-15 12:10:35 +0000
• 540f0a2dc4 Merge 06238a81c3 into b646771517 OKNoah 2014-05-14 22:55:20 +0000
• b646771517 redirect all HTTP to HTTPS and enable HSTS, closes #18 Joshua Tauberer 2014-05-14 12:15:11 +0000
• 091a58ac94 dns_update needs to run with bash when run directly, see #39 Joshua Tauberer 2014-05-12 23:38:40 +0000
• c722625041 test_dns: add ADSP and DMARC tests, see #14 Joshua Tauberer 2014-05-10 08:01:10 -0400
• c403895f95 test_dns: properly test the non-primary domain of a box (for email addresses on domains besides PUBLIC_HOSTNAME) Joshua Tauberer 2014-05-10 07:15:31 -0400
• bdadf3017d test_dns: handle case where a DNS record is missing (vs incorrect) Joshua Tauberer 2014-05-10 07:11:26 -0400
• d5971e383b add ADSP and DMARC records; see #14 Joshua Tauberer 2014-05-10 11:57:52 +0000
• a8938e107e DKIM: For the benefit of ADSP and DMARC (not yet impl), each sending domain should be its signing domain Joshua Tauberer 2014-05-10 11:42:27 +0000
• cfcb5f5bbd merge: @PirosB3 and @pjz suggested using pjzz/phusion-baseimage as the base image for docker Joshua Tauberer 2014-05-06 10:05:14 -0400
• 80b367ab07 test_mail: gracefully handled when the server has no reverse DNS available Joshua Tauberer 2014-05-06 10:02:29 -0400
• 63ef8f7b04 missing wget dependency used by roundcube installation Joshua Tauberer 2014-05-06 10:02:06 -0400
• e247929386 docker: don't start services ourself Joshua Tauberer 2014-05-06 09:59:53 -0400
• 1db0dd3092 system.sh: make apt-get upgrade quieter Joshua Tauberer 2014-05-06 09:57:11 -0400
• fbd7d731e8 docker: fix startup scripts for nsd and dovecot to run them in the foreground Joshua Tauberer 2014-05-06 09:56:20 -0400
• 0659a0bb16 Merge branch 'better_docker' of https://github.com/pjz/mailinabox into pjz-better_docker Joshua Tauberer 2014-05-02 14:54:21 -0400
• 189dd6000e docker: re-run the start script on the container's first run because it won't know its hostname or IP address until then Joshua Tauberer 2014-05-02 14:23:56 -0400
• 3fdcbe542f don't ask the user to create an email account if the shell is non-interactive and provide a better default for the domain name Joshua Tauberer 2014-05-02 14:22:59 -0400
• 89bb5da986 dns: missing dependency on bc Joshua Tauberer 2014-05-02 14:18:26 -0400
• 5ceec760b9 Better Dockerfile support Paul Jimenez 2014-05-02 09:35:21 -0400
• acec82950b docker: disable the ufw firewall because it is not supported in a docker container and produces a lot of error output (by reverting a510e08f9e and setting an environment variable) Joshua Tauberer 2014-05-01 22:39:45 -0400
• 2f6e0ded7a docker: cleanup comments and make the installation of sshd quieter Joshua Tauberer 2014-05-01 22:33:14 -0400
• f0afa7e8dc docker: add some example run commands for debugging a container or having it take over host ports Joshua Tauberer 2014-05-01 22:29:00 -0400
• 89240a4fab docker: do ADD container/docker later on so that the Dockerfile can be updated and still reuse a cached image after the major setup steps are done Joshua Tauberer 2014-05-01 22:18:45 -0400
• 16c0a9d342 docker: if container was launched with a tty start bash otherwise loop forever to keep the container going Joshua Tauberer 2014-05-01 22:16:14 -0400
• 7999eae857 Merge pull request #47 from randallsquared/master Joshua Tauberer 2014-05-01 18:21:19 -0400
• 8fcb10cc0a don't reject alias-only domains Randall Randall 2014-05-01 22:14:04 +0000
• 74ec3d9696 ssl: there is no need to use -des3 in key generation if we're just going to remove the passphrase Joshua Tauberer 2014-05-01 16:47:22 -0400
• 532c9aa7fd move the Dockerfile to the root to allow the working directory of the repo to be pushed inside the image (rather than inside the container getting a fresh mailinabox from github) so changes in the working copy can be tested in Docker quickly / without pushing to github Joshua Tauberer 2014-05-01 15:51:29 -0400
• 19f5f144ae installing roundcube from debian would cause update from ubuntu later, now install from Ubuntu debs Joshua Tauberer 2014-05-01 20:28:40 +0000