Skip to main content

Details of this iRedMail installation

Admin of domain fmail.simmy.ch:

  • Account: postmaster@fmail.simmy.ch
  • Password: *

 You can login to iRedAdmin with this account, login name is full email address.

First mail user:

  • Username: postmaster@fmail.simmy.ch
  • Password: *
  • SMTP/IMAP auth type: login
  • Connection security: STARTTLS or SSL/TLS
    You can login to webmail with this account, login name is full email address.
  • Enabled services:
    • rsyslog
    • postfix
    • slapd
    • mysql
    • nginx
    • php8.2-fpm
    • dovecot
    • clamav-daemon
    • amavis
    • clamav-freshclam
    • sogo
    • memcached
    • fail2ban
    • cron nftables

SSL Configuration

SSL cert keys (size: 4096):
    - /etc/ssl/certs/iRedMail.crt
    - /etc/ssl/private/iRedMail.key

Mail Storage:

  • Mailboxes: /var/vmail/vmail1
  • Mailbox indexes: 
    • Global sieve filters: /var/vmail/sieve
    • Backup scripts and backup copies: /var/vmail/backup

OpenLDAP:

  • LDAP suffix: dc=simmy,dc=ch
  • LDAP root dn: cn=Manager,dc=simmy,dc=ch, password: *
  • LDAP bind dn (read-only): cn=vmail,dc=simmy,dc=ch, password: *
  • LDAP admin dn (read-write): cn=vmailadmin,dc=simmy,dc=ch, password: *
  • LDAP base dn: o=domains,dc=simmy,dc=ch
  • LDAP admin base dn: o=domainAdmins,dc=simmy,dc=ch
  • Configuration files:
    • /etc/ldap
    • /etc/ldap/slapd.conf
    • /etc/ldap/ldap.conf
    • /etc/ldap/schema/iredmail.schema
  • Log file related:
    • /etc/rsyslog.conf
    • /var/log/openldap/openldap.log
    • /etc/logrotate.d/openldap
  • Data dir and files:
    • /var/lib/ldap
    • /var/lib/ldap/simmy.ch
  • RC script:
    • /etc/init.d/slapd
  • See also:
    • /root/iRedMail-1.6.8/runtime/ldap_init.ldif

Backup LDAP data:

  • Script: /var/vmail/backup/backup_openldap.sh
  • See also:
    crontab -l -u root

MySQL:

  • Root user: root, Password: "*" (without quotes)
  • Bind account (read-only):
    • Username: vmail, Password: *
  • Vmail admin account (read-write):
    Username: vmailadmin, Password: *
  • Config file: /etc/mysql/my.cnf
  • RC script: /etc/init.d/mysql

Backup MySQL database:

  • Script: /var/vmail/backup/backup_mysql.sh
  • See also:
crontab -l -u root

    Postfix:

    •   Configuration files:
              - /etc/postfix
              - /etc/postfix/aliases
              - /etc/postfix/main.cf
              - /etc/postfix/master.cf
    • SQL/LDAP lookup config files:
              - /etc/postfix/ldap

    Dovecot:

    • Configuration files:
              - /etc/dovecot/dovecot.conf
              - /etc/dovecot/dovecot-ldap.conf (For OpenLDAP backend)
              - /etc/dovecot/dovecot-mysql.conf (For MySQL backend)
              - /etc/dovecot/dovecot-pgsql.conf (For PostgreSQL backend)
              - /etc/dovecot/dovecot-used-quota.conf (For real-time quota usage)
              - /etc/dovecot/dovecot-share-folder.conf (For IMAP sharing folder)
    • Syslog config file:
              - /etc/rsyslog.d/1-iredmail-dovecot.conf (present if rsyslog >= 8.x)
    • RC script: /etc/init.d/dovecot
    • Log files:
              - /var/log/dovecot/dovecot.log
              - /var/log/dovecot/sieve.log
              - /var/log/dovecot/lmtp.log
              - /var/log/dovecot/lda.log (present if rsyslog >= 8.x)
              - /var/log/dovecot/imap.log (present if rsyslog >= 8.x)
              - /var/log/dovecot/pop3.log (present if rsyslog >= 8.x)
              - /var/log/dovecot/sieve.log (present if rsyslog >= 8.x)
    • See also:
              - /var/vmail/sieve/dovecot.sieve
              - Logrotate config file: /etc/logrotate.d/dovecot

    Nginx:

    •  Configuration files:
              - /etc/nginx/nginx.conf
              - /etc/nginx/sites-available/00-default.conf
              - /etc/nginx/sites-available/00-default-ssl.conf
    • Directories:
              - /etc/nginx
              - /var/www/html
    • See also:
              - /var/www/html/index.html

    php-fpm:

    • Configuration files: /etc/php/8.2/fpm/pool.d/www.conf

    PHP:

    • PHP config file for Nginx: 
    • Disabled functions:
      • posix_uname,
      • eval,pcntl_wexitstatus,
      • posix_getpwuid,
      • xmlrpc_entity_decode,
      • pcntl_wifstopped,
      • pcntl_wifexited,
      • pcntl_wifsignaled,
      • phpAds_XmlRpc,
      • pcntl_strerror,
      • ftp_exec,
      • pcntl_wtermsig,
      • mysql_pconnect,
      • proc_nice,
      • pcntl_sigtimedwait,
      • posix_kill,
      • pcntl_sigprocmask,
      • fput,phpinfo,
      • system,
      • phpAds_remoteInfo,
      • ftp_login,
      • inject_code,
      • posix_mkfifo,
      • highlight_file,
      • escapeshellcmd,
      • show_source,
      • pcntl_wifcontinued,
      • fp,pcntl_alarm,
      • pcntl_wait,
      • ini_alter,
      • posix_setpgid,
      • parse_ini_file,
      • ftp_raw,
      • pcntl_waitpid,
      • pcntl_getpriority,
      • ftp_connect,
      • pcntl_signal_dispatch,
      • pcntl_wstopsig,
      • ini_restore,
      • ftp_put,
      • passthru,
      • proc_terminate,
      • posix_setsid,
      • pcntl_signal,
      • pcntl_setpriority,
      • phpAds_xmlrpcEncode,
      • pcntl_exec,
      • ftp_nb_fput,
      • ftp_get,
      • phpAds_xmlrpcDecode,
      • pcntl_sigwaitinfo,
      • shell_exec,
      • pcntl_get_last_error,
      • ftp_rawlist,
      • pcntl_fork,
      • posix_setuid

    ClamAV:

    • Configuration files:
              - /etc/clamav/clamd.conf
              - /etc/clamav/freshclam.conf
              - /etc/logrotate.d/clamav
    • RC scripts:
                  + /etc/init.d/clamav-daemon
                  + /etc/init.d/clamav-freshclam

    Amavisd-new:

    • Configuration files:
              - /etc/amavis/conf.d/50-user
              - /etc/postfix/master.cf
              - /etc/postfix/main.cf
    • RC script:
              - /etc/init.d/amavis
    • SQL Database:
              - Database name: amavisd
              - Database user: amavisd
              - Database password: CD29UskrVQrnmOmpUFFjjK9rIkSG8hTL

    DNS record for DKIM support:

    ; key#1 2048 bits, s=dkim, d=fmail.simmy.ch, /var/lib/dkim/fmail.simmy.ch.pem
    dkim._domainkey.fmail.simmy.ch.    3600 TXT (
      "v=DKIM1; p="
      "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrGqXyV/sPx7xEDcdVlQ"
      "Z+d+ppkN2SM511wsICsqYqdJm594s7ThzKB4QKcw2NSCx3p+rtFMKGEj6tkBzHgm"
      "yB7E1aT09SPfxWpK8udMi4MrvZ5uQtpyaihi28DNgUpkqCHnLFBC4SBvQthorHk5"
      "uvAr83Wsoxlh2KzXGNKW2xX/4/720lDChYiS3OcpgHQHSE1ZfvWQqrdoCN9GUo7E"
      "wsszInYC3ryTYTugjMlzkj+mMr2yp2+Nl+UXjz08KdGWaSsKZi4TASjJ7XD2u7gY"
      "QS0ZjXPVjpbc3l3kcaNlvGjxiaj7/h1vJjZzj8MT5ij2IpkHzTCGk/yAF6OJrjS9"
      "3QIDAQAB")


    SpamAssassin:

    • Configuration files and rules:
              - /etc/mail/spamassassin
              - /etc/mail/spamassassin/local.cf

    iRedAPD - Postfix Policy Server:

    • Version: 5.3.3
    • Listen address: 127.0.0.1, port: 7777
    • SQL database account:
              - Database name: iredapd
              - Username: iredapd
              - Password: *
    • Configuration file:
              - /opt/iredapd/settings.py
    • Related files:
              - /opt/iRedAPD-5.3.3
              - /opt/iredapd (symbol link to /opt/iRedAPD-5.3.3

    iRedAdmin - official web-based admin panel:

    • Version: 2.5
    • Root directory: /opt/www/iRedAdmin-2.5
    • Config file: /opt/www/iRedAdmin-2.5/settings.py
    • Web access:
              - URL: https://mail.simmy.ch/iredadmin/
              - Username: postmaster@fmail.simmy.ch
              - Password: bs3FUy3JQfam&U
    • SQL database:
              - Database name: iredadmin
              - Username: iredadmin
              - Password: *
    • Roundcube webmail:

    /opt/www/roundcubemail-1.6.5

    • Config file: /opt/www/roundcubemail-1.6.5/config
    • Web access:
              - URL: http://mail.simmy.ch/mail/ (will be redirected to https:// site)
              - URL: https://mail.simmy.ch/mail/ (secure connection)
              - Username: postmaster@fmail.simmy.ch
              - Password: *
    • SQL database account:
              - Database name: roundcubemail
              - Username: roundcube
              - Password: *
    • Cron job:
              - Command: "crontab -l -u root"

    SOGo Groupware:

    • Web access: https://mail.simmy.ch/SOGo/
    • Main config file: /etc/sogo/sogo.conf
    • Nginx template file: /etc/nginx/templates/sogo.tmpl
    • Database:
              - Database name: sogo
              - Database user: sogo
              - Database password: *
    • SOGo sieve account (Warning: it's a Dovecot Master User):
              - file: /etc/sogo/sieve.cred
              - username: sogo_sieve_master@not-exist.com
              - password: *
    • See also:
              - cron job of system user: sogo

    netdata (monitor):

    • Config files:
              - All config files: /opt/netdata/etc/netdata
              - Main config file: /opt/netdata/etc/netdata/netdata.conf
              - Modified modular config files:
                  - /opt/netdata/etc/netdata/go.d
                  - /opt/netdata/etc/netdata/python.d
    • HTTP auth file (if you need a new account to access netdata, please
            update this file with command like 'htpasswd' or edit manually):
              - /etc/nginx/netdata.users
    • Log directory: /opt/netdata/var/log/netdata
    • SQL:
              - Username: netdata
              - Password: *
              - NOTE: No database required by netdata.