modoboa

modoboa copied to clipboard

Installer config should have tighter security

1

# Impacted versions * OS Type: Debian/Ubuntu, Centos/Redhat, Arch, Gentoo, Slack, ... Ubuntu * OS Version: Number or Name 18.04.5 * Modoboa: 1.17.0 * installer used: Yes _Software is not...

trinkel

# Impacted versions * OS Type: Debian (but should apply to all OS) * OS Version: 10.7 * Modoboa: 1.17.0 * installer used: Yes # Steps to reproduce Use the...

cyrilst

Annoing warning in error log with mysql DB

5

# Impacted versions * Modoboa: 1.10.4 * installer used: Yes * Webserver: Nginx # Steps to reproduce Install modoboa with mysql, not mariadb. Set in installer.cfg ``` [database] engine =...

niko-lay

Pass parameters for shell function call using an array rather than (unquoted) string substitution

4

Description of the issue/feature this PR addresses: Modoboa assembles strings for shell commands using string substitution without quoting the parameters, leading, at least potentially (I haven't checked), to vulnerabilities (shell...

ntninja

# Impacted versions * Modoboa: 1.10.x (but probably any) * installer used: No * Webserver: Nginx + Gunicorn + Docker # Steps to reproduce 1. Log into your (admin) user...

ntninja

FIX: relaydomain: next hop should matched with the domain's actual MX list

3

FIX: relaydomain: next hop should matched with the domain's actual MX list If you create a relaydomain, than the DKIM and SPF checks are useful, because they check that in...

tsabi

[WIP] Fix Modoboa crashes when Postfix maps become modified

3

*Description of the issue/feature this PR addresses:* Modoboa's Postfix map file generator will generate a broken `modoboa-postfix-maps.chk` file if it fails to validate the existing map files due to user...

ntninja

Allowed characters in email addresses

7

I've just been upgrading one of my dovecot servers and noticed the `auth_username_chars` settings in `10-auth.conf` ``` # List of allowed characters in username. If the user-given username contains #...

ghost

Private DNSBL listed in DNSBL check: dnsbl.cyberlogic.net

18

# Impacted versions * Modoboa: git HEAD * Installer used: irrelevant * Webserver: irrelevant # Steps to reproduce Look at email box, see that I have received various emails from...

whyscream

Feature Request: Customizable Password Policy

3

Currently passwords must be at least 8 characters, with one uppercase and one number. This is not very flexible. Please provide a simple UI control to set minimum length and...

neonknight