iRedMail
// Document IndexAttention
Remote Upgrade Assistance
Check out our remote upgrade support if you need assistance.
/etc/iredmail-release with new iRedMail version numberiRedMail stores the release version in /etc/iredmail-release after
installation, it's recommended to update this file after you upgraded iRedMail,
so that you can know which version of iRedMail you're running. For example:
1.8.9
/usr/local/bin/fail2ban_banned_dbFail2ban script (/usr/local/bin/fail2ban_banned_db) failed to store
banned IP address if the country name or reverse DNS name contains a
single quote, e.g. "Lao People's Democratic Republic". Please follow
steps below to fix it.
Download hardened version and override the one on your server:
wget -O /usr/local/bin/fail2ban_banned_db \
https://raw.githubusercontent.com/iredmail/iRedMail/refs/tags/1.8.9/samples/fail2ban/bin/fail2ban_banned_db
chown root:root /usr/local/bin/fail2ban_banned_db
chmod 0550 /usr/local/bin/fail2ban_banned_db
If you're running FreeBSD or OpenBSD, please replace the shabang line with command below:
perl -pi -e 's#/usr/bin/env bash#/usr/local/bin/bash#g' /usr/local/bin/fail2ban_banned_db
No service restart required.
Roundcube Security Fixes
CentOS 7: please stick to Roundcube 1.5.2
It's time to leave your comfort zone and upgrade this server to at least CentOS Stream 8 or Rocky Linux 8.
If you're running CentOS 7, please upgrade to Roundcube 1.5.2 instead. Roundcube 1.5.3 requires PHP-7, but CentOS 7 ships PHP-5.4 which is not supported by Roundcube 1.5.3 and later releases, including 1.6.x.
Unfortunately, Roundcube 1.5.2 does NOT contains multiple security fixes which shipped in Roundcube 1.5.6 and 1.6.5.
CentOS Stream / Rocky / AlmaLinux 8 and 9
Roundcube 1.7.0 and later releases requires PHP 8.1 or later, please switch to PHP 8.2 with commands below BEFORE upgrading Roundcube:
dnf module enable -y php:8.2
dnf module switch-to -y php:8.2
Ubuntu 18.04: please stick to Roundcube 1.5.15
Ubuntu 18.04 runs old php version which is not supported by Roundcube 1.6 and 1.7.
Roundcube 1.7.0 introduces "mandatory public_html/ entry-point for HTTP
servers, protecting all installations better", it requires changes in Nginx
config file. If you didn't apply those changes yet, please check upgrade
tutorial for iRedMail-1.8.1 and apply
changes first.
Download the Roundcube 1.7.5 complete package and upgrade, then restart Nginx service:
wget https://github.com/roundcube/roundcubemail/releases/download/1.7.5/roundcubemail-1.7.5-complete.tar.gz
tar zxf roundcubemail-1.7.5-complete.tar.gz
cd roundcubemail-1.7.5
./bin/installto.sh /opt/www/roundcubemail
systemctl restart nginx
Please follow below tutorial to upgrade iRedAPD to the latest stable release: Upgrade iRedAPD to the latest stable release
If you have netdata installed, you can upgrade it by following this tutorial: Upgrade netdata.