sagredo.eu - Linux notes - by Roberto Puzzanghera
Changelog Jul 25, 2026 (v. 4.0) hook scripts and below documentation completeley reviewed. - Added a new dehydrated-renew wrapper script to execute certificate renewal and perform service synchronization for SNI only when one or more certificates have actually changed. - Introduced a change flag mechanism ( dehydrated.changed ) to avoid unnecessary service reloads and restarts if any certificate…
Latest version 2026.04.07 (github) Changelog Readme Call for testers I just made a change to the entire codebase (PR here and here ), aimed at bringing qmail code into compliance with the C23 specification and the latest GCC and Clang compilers. It's been working flawlessly on my production server for a few weeks now. The build has been tested on Linux, FreeBSD, OpenBSD, NetBSD, and with GCC up to…
Info: https://roundcube.net Version: 1.7.3 Roundcube is a full featured webmail with a nice interface. Changelog Aug 10, 2026 - version 1.7.3 Mar 9, 2025 added $config['quota_zero_as_unlimited'] = true; to show quota unlimited instead of unknown for accounts with unlimited quota Read the release note at https://github.com/roundcube/roundcubemail/blob/master/CHANGELOG.md for more info.
More info here Version: 8.0.0 The clamav-unofficial-sigs script provides a simple way to download, test, and update third-party signature databases provided by Sanesecurity, FOXHOLE, OITC, Scamnailer, BOFHLAND, CRDF, Porcupine, Securiteinfo, MalwarePatrol, Yara-Rules Project, urlhaus, etc. The script will also generate and install cron, logrotate, and man files. Upgrading Upgrading to major…
Changelog May 14, 2026 - dovecot 2.4.4 released. Changed dovecot_config_version and dovecot_storage_version in dovecot.conf - the new version has lua as a dependency. Added --without-lua at configure command Feb 25, 2026 - Added Server Name Indication (SNI) settings in sni.conf.template, imported from local.conf commit - userdb iterate query now orders by domain and username commit -…
Info: http://www.clamav.net Latest version: 1.5.2 Clam AntiVirus is an open source (GPL) anti-virus toolkit for UNIX, designed especially for e-mail scanning on mail gateways. Changelog Mar 4, 2026 - clamav upgraded to v 1.5.2 Oct 11, 2025 - clamav upgraded to v 1.5.0. A recent version of rust is needed (successfully using 1.88 here). Just reinstall as explained below. No particular change is…
VPopMail version: 5.6.13 github: sagredo-dev/vpopmail Download Changelog README.vdelivermail Inter7's original page Vpopmail provides an easy way to manage virtual email domains and non /etc/passwd email accounts on your mail servers. Changelog Feb 11, 2026 - vlimits.c : avoids no file found exit when .qmailadmin-limits is not existent because no limits are defined yet ( a565779 ) - added sql…
Original author: Inter7 Version 2.4.7 Changelog Download from github My old patches vqadmin is a web based control panel that allows system administrators to perform actions which require root access — for example, adding and deleting domains. As you can see, VqAdmin has a new version with a new skin, all my patches (with ALI's patch included) and a lot of work in polishing the code. I also…
qmail-spp provides plug-in support for qmail-smtpd. It allows you to write external programs and use them to check SMTP command argument validity. The plug-in can trigger several actions, like denying a command with an error message, logging data, adding a header and much more. Author: Pawel Foremski More info here Today I played for the first time with an ancient patch for qmail : qmail-spp . I…
Download my shell script Now that we have the spam filters in place we have to feed our bayesian system and report our spam to Razor , Pyzor and Spamcop . The obvious thing that comes in mind at this point could be to call sa_learn and spamassassin --report in cascade when clicking in the Roundcube webmail's "Mark as Junk" button (look at the cmd_learn and multi_driver drivers of the markasjunk…
Tired of the nightmares of remotely compiling the kernel with Linux-VServer , a software that I'm pleased with despite of some lack of documentation, these days I was playing with LXC , which is included and supported by Slackware and for which the Linux kernel doesn't need any patching because it already embeds the hacks for LXC containers. To convert an existing Linux-VServer container in a…
Finally I managed to get rid of the old Drupal platform that I used for this site. I found the time to migrate the Drupal's database and to rewrite the old style. On the other hand, over the last 15 years I've been carrying on the development of a CMS of mine (based on php/mariadb), which was not originally used for this site because of the lack of the time needed to build a new theme. Now this…
Massive Christmas present by my italian friend Luca Franceschini of digitalmind . He merged his combo with my combined patch (2016.12.02 version) adding several (heavily customized) patches and functionalities. Luca is a C programmer and an expert system administrator who manages big servers.
proftpd home page List of directives version used: 1.3.6 This is how I have setup mod_tls ( ftpes ) and mod_sftp inside proftpd . Finally I managed to make them live together in two separate daemons. First of all, here is a speed test ( ftpes seems to be a bit faster in upload mode): ftpes upload: about 22.4 K/s download: more than 800 K/s sftp upload about 18.2 K/s download: more than 800 K/s…
More info: http://www.fehcom.de/ipnet/ucspi-tcp6.html Author: Erwin Hoffmann. IPv6 capabilities have been included by Felix von Leitner's IPv6 patch . The original ucspi-tcp 0.88 is by D.J. Bernstein Version: 1.13.08 ucspi-tcp6 is a fork of Bernsteins' ucspi-tcp 0.88 program, which includes, among the other things, ipv6 capabilities to the original ucspi-tcp. tcpserver and tcpclient are…
More info: http://www.fehcom.de/ipnet/ucspi-ssl.html Author: Erwin Hoffmann Version: 0.13.08 sslserver, sslclient, and sslhandle are command-line tools for building SSL client-server applications. sslserver listens for IPv6 and/or IPv4 connections, and runs a program for each connection it accepts. The program environment includes variables that hold the local and remote host names, IP addresses,…
More info here Version: fehQlibs-31 fehQlibs are supplementary C libraries by Erwin Hoffmann. They are needed for ucspi-tcp6 and ucspi-ssl. Install as follows in /usr/local: FEQLIBS_VER=31 cd /usr/local wget https://www.fehcom.de/ipnet/fehQlibs/fehQlibs-${FEQLIBS_VER}.tgz tar xzf fehQlibs-${FEQLIBS_VER}.tgz chown -R root:root fehQlibs-${FEQLIBS_VER} cd fehQlibs-${FEQLIBS_VER} Change the…
Server Name Indication ( SNI ) is a TLS extension that enables a server to present different certificates based on the hostname requested by the client during the TLS handshake. In modern email environments, multiple domains frequently share the same IP address for SMTP , IMAP , POP3 and submission services. Without SNI , a mail server can expose only a single certificate per listening socket,…
Jul 6, 2026 - clamav-unofficial-sigs upgraded to v. 8.0.0 - roundcube upgraded to v 1.7.2 Jul 1, 2026 - I added notes on how to install an hCaptcha filter on mailman/Postorius May 10, 2026 roundcube upgraded to v. 1.7.1 (security release) May 14, 2026 - dovecot upgraded to v. 2.4.4 May 10, 2026 roundcube upgraded to v. 1.7.0 Apr 7, 2026 - qmail v. 2026.04.07 Mar 30, 2026 - dovecot 2.4.3 released…
Mailman is free software for managing electronic mail discussion and e-newsletter lists. Mailman is integrated with the web, making it easy for users to manage their accounts and for list owners to administer their lists. Mailman supports built-in archiving, automatic bounce processing, content filtering, digest delivery, spam filters, and more. Mailman is free software, distributed under the GNU…
Changelog Jun 25, 2026 - netqmail branch for OpenBSD users available Aug 19, 2025 - netqmail-1.07.1: now compiles with gcc 15.3 Feb 10, 2025 - the original netqmail sources are now compatible with latest gcc and clang compilers - renamed as netqmail-1.07 the original netqmail sources after the update
Quoting D. J. Bernstein definition qmail is a secure, reliable, efficient, simple message transfer agent. It is designed for typical Internet-connected UNIX hosts References D. J. Bernstein's qmail site http://cr.yp.to/qmail.html Old qmail.org site Life with qmail Erwin Hoffman's "qmail support" site John Simpson's "qmail information" pages see also: my qmail picture ( DJB Original pictures ) You…
The Pigeonhole project provides Sieve support as a plugin for Dovecot's Local Delivery Agent (LDA) and also for its LMTP service. The plugin implements a Sieve interpreter, which filters incoming messages using a script specified in the Sieve language. The Sieve script is provided by the user and, using that Sieve script, the user can customize how incoming messages are handled. Messages can be…
Changelog May 7, 2026 Razor-Agent-Client upgraded to v. 2.88 Jun 3, 2025 - disabled IPv6 on DCC as servers are not always responding (tx Shailendra Shukla) Dec 26, 2023 Pyzor installed from github, as version 1.0.0 is not python3 compliant (thanks Mike) This page concerns the setup of several filtering networks which help spamassassin to decide if a given message is spam or not. Enabling them,…
Official repository: http://plugins.roundcube.net/ Changelog Apr 27, 2026 - qmailforward upgraded to v1.0.5 (bug fix: sql call is not done if the forward is not a valid email address) Dec 19, 2025 - composer is now installed in /usr/local/bin and not in RC dir Apr 19, 2025 - sauserprefs upgraded to v. 1.20.2 Mar 23, 2025 - the password plugin's vpopmaild driver is working again, as vpopmaild has…
SURBLs are lists of web sites that have appeared in unsolicited messages. Unlike most lists, SURBLs are not lists of message senders. Web sites seen in unsolicited messages tend to be more stable than the rapidly changing botnet IP addresses used to send the vast majority of them. Sender lists like zen.spamhaus.org can be used in a first stage filter to help identify 80% to 90% of unsolicited…
Rsync is a fast and extraordinarily versatile file copying tool. It can copy locally, to/from another host over any remote shell, or to/from a remote rsync daemon. It offers a large number of options that control every aspect of its behavior and permit very flexible specification of the set of files to be copied. It is famous for its delta-transfer algorithm, which reduces the amount of data sent…
MariaDB uses asynchronous replication based on binary logs (binlog). Master (source) writes changes to the binary log, slave (replica) reads the binlog from the master and replays events locally. Replication is one-way by default (master to slave). Master configuration Configure MariaDB by editing /etc/my.cnf.d/mariadb-server.cnf [mysqld] server-id=1 log_bin=binlog binlog_format=ROW bind-address =…