Skip to main content

Details of this iRedMail installation

Admin of domain fmail.simmy.ch:

  • Account: postmaster@fmail.simmy.ch
  • Password: bs3FUy3JQfam&U

 You can login to iRedAdmin with this account, login name is full email address.

First mail user:

  • Username: postmaster@fmail.simmy.ch
  • Password: bs3FUy3JQfam&U
  • SMTP/IMAP auth type: login
  • Connection security: STARTTLS or SSL/TLS
    You can login to webmail with this account, login name is full email address.
  • Enabled services:
    • rsyslog
    • postfix
    • slapd
    • mysql
    • nginx
    • php8.2-fpm
    • dovecot
    • clamav-daemon
    • amavis
    • clamav-freshclam
    • sogo
    • memcached
    • fail2ban
    • cron nftables

SSL Configuration

SSL cert keys (size: 4096):
    - /etc/ssl/certs/iRedMail.crt
    - /etc/ssl/private/iRedMail.key

Mail Storage:

  • Mailboxes: /var/vmail/vmail1
  • Mailbox indexes: 
    • Global sieve filters: /var/vmail/sieve
    • Backup scripts and backup copies: /var/vmail/backup

OpenLDAP:

  • LDAP suffix: dc=simmy,dc=ch
  • LDAP root dn: cn=Manager,dc=simmy,dc=ch, password: La4knk4Emg59U4hQ6zQorqlA0KmzrSKr
  • LDAP bind dn (read-only): cn=vmail,dc=simmy,dc=ch, password: SlwsYG3JUM2X2j5vyhLZ7MQx6Ozq5lQZ
  • LDAP admin dn (read-write): cn=vmailadmin,dc=simmy,dc=ch, password: kvVVSgWa12gxkflrY3FwG94MrVfofg51
  • LDAP base dn: o=domains,dc=simmy,dc=ch
  • LDAP admin base dn: o=domainAdmins,dc=simmy,dc=ch
  • Configuration files:
    • /etc/ldap
    • /etc/ldap/slapd.conf
    • /etc/ldap/ldap.conf
    • /etc/ldap/schema/iredmail.schema
  • Log file related:
    • /etc/rsyslog.conf
    • /var/log/openldap/openldap.log
    • /etc/logrotate.d/openldap
  • Data dir and files:
    • /var/lib/ldap
    • /var/lib/ldap/simmy.ch
  • RC script:
    • /etc/init.d/slapd
  • See also:
    • /root/iRedMail-1.6.8/runtime/ldap_init.ldif

Backup LDAP data:

  • Script: /var/vmail/backup/backup_openldap.sh
  • See also:
            # crontab -l -u root

MySQL:

  • Root user: root, Password: "33Zd*sG!!Kxky*" (without quotes)
  • Bind account (read-only):
    • Username: vmail, Password: 1a1Hb1dhSVojvZ0TE7NdX9QUgm1a2ZQI
  • Vmail admin account (read-write):
    Username: vmailadmin, Password: gbb87oKUEbBiXsF29aZa5btyBLJclU1W
  • Config file: /etc/mysql/my.cnf
  • RC script: /etc/init.d/mysql

Backup MySQL database:

  • Script: /var/vmail/backup/backup_mysql.sh
  • See also:
            # crontab -l -u root

 

Postfix:

  •   Configuration files:
            - /etc/postfix
            - /etc/postfix/aliases
            - /etc/postfix/main.cf
            - /etc/postfix/master.cf
  • SQL/LDAP lookup config files:
            - /etc/postfix/ldap

Dovecot:

  • Configuration files:
            - /etc/dovecot/dovecot.conf
            - /etc/dovecot/dovecot-ldap.conf (For OpenLDAP backend)
            - /etc/dovecot/dovecot-mysql.conf (For MySQL backend)
            - /etc/dovecot/dovecot-pgsql.conf (For PostgreSQL backend)
            - /etc/dovecot/dovecot-used-quota.conf (For real-time quota usage)
            - /etc/dovecot/dovecot-share-folder.conf (For IMAP sharing folder)
  • Syslog config file:
            - /etc/rsyslog.d/1-iredmail-dovecot.conf (present if rsyslog >= 8.x)
  • RC script: /etc/init.d/dovecot
  • Log files:
            - /var/log/dovecot/dovecot.log
            - /var/log/dovecot/sieve.log
            - /var/log/dovecot/lmtp.log
            - /var/log/dovecot/lda.log (present if rsyslog >= 8.x)
            - /var/log/dovecot/imap.log (present if rsyslog >= 8.x)
            - /var/log/dovecot/pop3.log (present if rsyslog >= 8.x)
            - /var/log/dovecot/sieve.log (present if rsyslog >= 8.x)
  • See also:
            - /var/vmail/sieve/dovecot.sieve
            - Logrotate config file: /etc/logrotate.d/dovecot

 

Nginx:

  •  Configuration files:
            - /etc/nginx/nginx.conf
            - /etc/nginx/sites-available/00-default.conf
            - /etc/nginx/sites-available/00-default-ssl.conf
  • Directories:
            - /etc/nginx
            - /var/www/html
  • See also:
            - /var/www/html/index.html

 

php-fpm:

  • Configuration files: /etc/php/8.2/fpm/pool.d/www.conf

PHP:

  • PHP config file for Nginx: 
  • Disabled functions:
    • posix_uname,
    • eval,pcntl_wexitstatus,
    • posix_getpwuid,
    • xmlrpc_entity_decode,
    • pcntl_wifstopped,
    • pcntl_wifexited,
    • pcntl_wifsignaled,
    • phpAds_XmlRpc,
    • pcntl_strerror,
    • ftp_exec,
    • pcntl_wtermsig,
    • mysql_pconnect,
    • proc_nice,
    • pcntl_sigtimedwait,
    • posix_kill,
    • pcntl_sigprocmask,
    • fput,phpinfo,
    • system,
    • phpAds_remoteInfo,
    • ftp_login,
    • inject_code,
    • posix_mkfifo,
    • highlight_file,
    • escapeshellcmd,
    • show_source,
    • pcntl_wifcontinued,
    • fp,pcntl_alarm,
    • pcntl_wait,
    • ini_alter,
    • posix_setpgid,
    • parse_ini_file,
    • ftp_raw,
    • pcntl_waitpid,
    • pcntl_getpriority,
    • ftp_connect,
    • pcntl_signal_dispatch,
    • pcntl_wstopsig,
    • ini_restore,
    • ftp_put,
    • passthru,
    • proc_terminate,
    • posix_setsid,
    • pcntl_signal,
    • pcntl_setpriority,
    • phpAds_xmlrpcEncode,
    • pcntl_exec,
    • ftp_nb_fput,
    • ftp_get,
    • phpAds_xmlrpcDecode,
    • pcntl_sigwaitinfo,
    • shell_exec,
    • pcntl_get_last_error,
    • ftp_rawlist,
    • pcntl_fork,
    • posix_setuid

ClamAV:

    * Configuration files:
        - /etc/clamav/clamd.conf
        - /etc/clamav/freshclam.conf
        - /etc/logrotate.d/clamav
    * RC scripts:
            + /etc/init.d/clamav-daemon
            + /etc/init.d/clamav-freshclam

Amavisd-new:

    * Configuration files:
        - /etc/amavis/conf.d/50-user
        - /etc/postfix/master.cf
        - /etc/postfix/main.cf
    * RC script:
        - /etc/init.d/amavis
    * SQL Database:
        - Database name: amavisd
        - Database user: amavisd
        - Database password: CD29UskrVQrnmOmpUFFjjK9rIkSG8hTL

DNS record for DKIM support:

; key#1 2048 bits, s=dkim, d=fmail.simmy.ch, /var/lib/dkim/fmail.simmy.ch.pem
dkim._domainkey.fmail.simmy.ch.    3600 TXT (
  "v=DKIM1; p="
  "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrGqXyV/sPx7xEDcdVlQ"
  "Z+d+ppkN2SM511wsICsqYqdJm594s7ThzKB4QKcw2NSCx3p+rtFMKGEj6tkBzHgm"
  "yB7E1aT09SPfxWpK8udMi4MrvZ5uQtpyaihi28DNgUpkqCHnLFBC4SBvQthorHk5"
  "uvAr83Wsoxlh2KzXGNKW2xX/4/720lDChYiS3OcpgHQHSE1ZfvWQqrdoCN9GUo7E"
  "wsszInYC3ryTYTugjMlzkj+mMr2yp2+Nl+UXjz08KdGWaSsKZi4TASjJ7XD2u7gY"
  "QS0ZjXPVjpbc3l3kcaNlvGjxiaj7/h1vJjZzj8MT5ij2IpkHzTCGk/yAF6OJrjS9"
  "3QIDAQAB")

SpamAssassin:

    * Configuration files and rules:
        - /etc/mail/spamassassin
        - /etc/mail/spamassassin/local.cf

iRedAPD - Postfix Policy Server:

    * Version: 5.3.3
    * Listen address: 127.0.0.1, port: 7777
    * SQL database account:
        - Database name: iredapd
        - Username: iredapd
        - Password: LpIT44gQyFSu3WXfq7ct9zEtknVcBAft
    * Configuration file:
        - /opt/iredapd/settings.py
    * Related files:
        - /opt/iRedAPD-5.3.3
        - /opt/iredapd (symbol link to /opt/iRedAPD-5.3.3

iRedAdmin - official web-based admin panel:

    * Version: 2.5
    * Root directory: /opt/www/iRedAdmin-2.5
    * Config file: /opt/www/iRedAdmin-2.5/settings.py
    * Web access:
        - URL: https://mail.simmy.ch/iredadmin/
        - Username: postmaster@fmail.simmy.ch
        - Password: bs3FUy3JQfam&U
    * SQL database:
        - Database name: iredadmin
        - Username: iredadmin
        - Password: 1V5KlAzxzayLZbZ8HTNrqS81vNBSqsbD

Roundcube webmail:

/opt/www/roundcubemail-1.6.5

    * Config file: /opt/www/roundcubemail-1.6.5/config
    * Web access:
        - URL: http://mail.simmy.ch/mail/ (will be redirected to https:// site)
        - URL: https://mail.simmy.ch/mail/ (secure connection)
        - Username: postmaster@fmail.simmy.ch
        - Password: bs3FUy3JQfam&U
    * SQL database account:
        - Database name: roundcubemail
        - Username: roundcube
        - Password: ai8Ytldxa1eCEZFdKFIWGHZzZbrKgkF6
    * Cron job:
        - Command: "crontab -l -u root"

SOGo Groupware:

    * Web access: https://mail.simmy.ch/SOGo/
    * Main config file: /etc/sogo/sogo.conf
    * Nginx template file: /etc/nginx/templates/sogo.tmpl
    * Database:
        - Database name: sogo
        - Database user: sogo
        - Database password: sEJLnxLMshHtoPXxEuAqTwkOisMA3yBG
    * SOGo sieve account (Warning: it's a Dovecot Master User):
        - file: /etc/sogo/sieve.cred
        - username: sogo_sieve_master@not-exist.com
        - password: sc05B9ZP1XectBXyw5Fgi9pXb6E8rFHv
    * See also:
        - cron job of system user: sogo

netdata (monitor):

    - Config files:
        - All config files: /opt/netdata/etc/netdata
        - Main config file: /opt/netdata/etc/netdata/netdata.conf
        - Modified modular config files:
            - /opt/netdata/etc/netdata/go.d
            - /opt/netdata/etc/netdata/python.d
    - HTTP auth file (if you need a new account to access netdata, please
      update this file with command like 'htpasswd' or edit manually):
        - /etc/nginx/netdata.users
    - Log directory: /opt/netdata/var/log/netdata
    - SQL:
        - Username: netdata
        - Password: MMqLITzHQP0U32s2gEN7VmBHXw6ihuzI
        - NOTE: No database required by netdata.