ISPConfig 3 issueshttps://git.ispconfig.org/ispconfig/ispconfig3/-/issues2022-01-21T23:14:44Zhttps://git.ispconfig.org/ispconfig/ispconfig3/-/issues/6187DS RECORD functions for API2022-01-21T23:14:44Zfrancois parreaux-eyDS RECORD functions for APIHello,
Following below discussion (link) I propose to add DS RECORD functions for API
https://www.howtoforge.com/community/threads/dnssec-cascade-inside-ispconfig.86988/#post-423182
code added in 'interface/lib/classes/remote.d/dns.i...Hello,
Following below discussion (link) I propose to add DS RECORD functions for API
https://www.howtoforge.com/community/threads/dnssec-cascade-inside-ispconfig.86988/#post-423182
code added in 'interface/lib/classes/remote.d/dns.inc.php'
// ----------------------------------------------------------------------------------------------------------------
//* Get record details
public function dns_ds_get($session_id, $primary_id) {
return $this->dns_rr_get($session_id, $primary_id, 'DS');
}
//* Add a record
public function dns_ds_add($session_id, $client_id, $params, $update_serial=false) {
return $this->dns_rr_add($session_id, $client_id, $params, $update_serial, 'DS');
}
//* Update a record
public function dns_ds_update($session_id, $client_id, $primary_id, $params, $update_serial=false) {
return $this->dns_rr_update($session_id, $client_id, $primary_id, $params, $update_serial, 'DS');
}
//* Delete a record
public function dns_ds_delete($session_id, $primary_id, $update_serial=false) {
return $this->dns_rr_delete($session_id, $primary_id, $update_serial, 'DS');
}
As a reminder, in case you want to have a cascade of zones using DNSSEC, you need to :
1. let's create child.dom.tld
1.a Create zone with 'dnssec_wanted=y'
2. in parent zone ie dom.tld
2.a. Create DS_record pointing to child zone (this is the aim of the functions I am adding)
2.b. Create 2 NS_records pointing to child zone
3. update parent zone dom.tld to have zone signing updated
4. don't forget to create secondary Zones on your secondary bind server
Many thanks for your trust
francoisPE3.2.8francois parreaux-eyfrancois parreaux-eyhttps://git.ispconfig.org/ispconfig/ispconfig3/-/issues/6032API event support2022-01-18T11:43:10ZCédricAPI event supportHello Guys,
Original post : https://www.howtoforge.com/community/threads/working-with-plugin-control-panel-vs-api.86218/
It's appear the API have some event support missing.
![image](/uploads/56395a33728b5d28334ad4eb1a4b44a5/image.png)...Hello Guys,
Original post : https://www.howtoforge.com/community/threads/working-with-plugin-control-panel-vs-api.86218/
It's appear the API have some event support missing.
![image](/uploads/56395a33728b5d28334ad4eb1a4b44a5/image.png)
How to try it:
1. Add error login to your ispconfig vhost (/etc/apache2/sites-enabled/000-ispconfig.vhost)
- add / edit the line : ErrorLog /var/log/ispconfig/httpd/YourVHOST.DOMAIN.TLS/error.log
2. Plugin demonstration :
```php
<?php
class exemple_plugin {
var $plugin_name = 'exemple_plugin';
var $class_name = 'exemple_plugin';
function onLoad() {
global $app;
$app->plugin->registerEvent('mail:mail_user:on_before_insert', 'exemple_plugin', 'fonction_edit');
$app->plugin->registerEvent('mail:mail_user:on_before_update', 'exemple_plugin', 'fonction_edit');
$app->plugin->registerEvent('mail:mail_user:on_before_delete', 'exemple_plugin', 'fonction_del');
}
function fonction_edit($event_name, $page_form){
error_log('You should see this line in the log when you add / edit an email');
}
function fonction_del($event_name, $page_form){
error_log('You should see this line in the log when you remove an email');
}
}
```
3. IMPORTANT : Relog into your ISPConfig control panel
4. Time to try
1. Go to Ispconfig;
- Email > Email Mailbox > Select an existing mailbox > Change something > Save
- When you do that you should see this inside your logfile ![image](/uploads/d64e220d0b9665ce5535c9a3f998cf36/image.png)
2. When you make the same change by the API, nothing is wrote inside the logfile.
- That mean the plugin isn't call by the API.
Also the support of multi event would be great (before/after)
Regards,3.2.8https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/1096Set the limit for low disk space warning2022-01-18T11:42:24ZNeeded?!Set the limit for low disk space warningCurrent: The limit when a warning appears is set and the admin don't can edit the limit in the Panel.
Solution: Make that the admin can self set the limit in the Admin Panel in the system settings.Current: The limit when a warning appears is set and the admin don't can edit the limit in the Panel.
Solution: Make that the admin can self set the limit in the Admin Panel in the system settings.3.2.8https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/5983Show rendered bind dns zone in extra tab2022-01-18T11:41:20ZHelmoShow rendered bind dns zone in extra tabI like to show the 'finished' zone to users. Both for transparency, and data portability.
The code in !1379 adds a third tab and prints the zonefile, stored in the database after rendering in the backend.I like to show the 'finished' zone to users. Both for transparency, and data portability.
The code in !1379 adds a third tab and prints the zonefile, stored in the database after rendering in the backend.3.2.8HelmoHelmohttps://git.ispconfig.org/ispconfig/ispconfig3/-/issues/6265Slovak translation for templates2022-01-14T12:04:37ZJakub BlažejSlovak translation for templatesAdd slovak translation for email templates and default website contentAdd slovak translation for email templates and default website content3.2.8https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/6240Create symlinks for conveniance, SFTP user should not land in an empty dir.2022-01-14T12:01:05ZHelmoCreate symlinks for conveniance, SFTP user should not land in an empty dir.Title says it all... for some users it's weird to land in an empty directory when connection via sftp.
I've grown the habit of placing a few symlinks there... MR coming.Title says it all... for some users it's weird to land in an empty directory when connection via sftp.
I've grown the habit of placing a few symlinks there... MR coming.3.2.8https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/6258Purge email from Inbox after X amount of days2022-01-07T11:47:11ZDannyPurge email from Inbox after X amount of daysI have a feature request:
I would like to be able to purge email after X amount of days from ISPConfig. I have some monitoring mailboxes that are not maintained, but need some kind of history to be kept until purging it (thus X days).I have a feature request:
I would like to be able to purge email after X amount of days from ISPConfig. I have some monitoring mailboxes that are not maintained, but need some kind of history to be kept until purging it (thus X days).https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/6239Add ipv6 option for dns_templatezone_add()2021-12-21T12:23:38ZHelmoAdd ipv6 option for dns_templatezone_add()The remote API is missing the ipv6 option.The remote API is missing the ipv6 option.3.2.8HelmoHelmohttps://git.ispconfig.org/ispconfig/ispconfig3/-/issues/5889Place reject_rbl_client after permit_sasl_authenticated in postfix config2021-12-21T12:16:10ZHelmoPlace reject_rbl_client after permit_sasl_authenticated in postfix configAfter updating a mailserver to 3.2 I noticed that some users were being `blocked using zen.spamhaus.org;` on their authenticated smtp connection.
It looks like the whole subnet of that access provider is on the spamhause list.
I've now...After updating a mailserver to 3.2 I noticed that some users were being `blocked using zen.spamhaus.org;` on their authenticated smtp connection.
It looks like the whole subnet of that access provider is on the spamhause list.
I've now changed it manually in the main.cf, to place permit_sasl_authenticated before the rbl check.
The patch below probably does that for future updates. If you agree I can make a MR that also changes it in the non-debian variants.
```patch
diff --git a/install/tpl/debian_postfix.conf.master b/install/tpl/debian_postfix.conf.master
index b75232e6e..dcd5f592d 100644
--- a/install/tpl/debian_postfix.conf.master
+++ b/install/tpl/debian_postfix.conf.master
@@ -28,7 +28,7 @@ proxy_read_maps = $local_recipient_maps $mydestination $virtual_alias_maps $virt
smtpd_helo_required = yes
smtpd_helo_restrictions = reject_invalid_helo_hostname, permit_mynetworks, check_helo_access regexp:{config_dir}/helo_access, permit_sasl_authenticated, reject_non_fqdn_helo_hostname, check_helo_access regexp:{config_dir}/blacklist_helo, {reject_unknown_helo_hostname}, permit
smtpd_sender_restrictions = {reject_aslm} check_sender_access regexp:{config_dir}/tag_as_originating.re, permit_mynetworks{reject_slm}, permit_sasl_authenticated, reject_non_fqdn_sender, check_sender_access regexp:{config_dir}/tag_as_foreign.re, check_sender_access proxy:mysql:{config_dir}/mysql-virtual_sender.cf
-smtpd_client_restrictions = check_client_access proxy:mysql:{config_dir}/mysql-virtual_client.cf, permit_inet_interfaces, permit_mynetworks{rbl_list}, permit_sasl_authenticated, reject_unauth_pipelining {reject_unknown_client_hostname}, permit
+smtpd_client_restrictions = check_client_access proxy:mysql:{config_dir}/mysql-virtual_client.cf, permit_inet_interfaces, permit_mynetworks, permit_sasl_authenticated{rbl_list}, reject_unauth_pipelining {reject_unknown_client_hostname}, permit
smtpd_etrn_restrictions = permit_mynetworks, reject
smtpd_data_restrictions = permit_mynetworks, reject_unauth_pipelining, reject_multi_recipient_bounce, permit
smtpd_client_message_rate_limit = 100
```3.2.8https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/4754Add support for ASP.NET2021-12-02T11:48:02ZMartinAdd support for ASP.NETIt would be nice if ispconfig could support ASP.NET.
### Install .NET Core
https://www.microsoft.com/net/core#linuxubuntu
### ASP.NET Core on Linux with Nginx
https://docs.microsoft.com/en-us/aspnet/core/publishing/linuxproduction
###...It would be nice if ispconfig could support ASP.NET.
### Install .NET Core
https://www.microsoft.com/net/core#linuxubuntu
### ASP.NET Core on Linux with Nginx
https://docs.microsoft.com/en-us/aspnet/core/publishing/linuxproduction
### ASP.NET Core on Linux with Apache
https://docs.microsoft.com/en-us/aspnet/core/publishing/apache-proxyhttps://git.ispconfig.org/ispconfig/ispconfig3/-/issues/4792rfe: lmtp for amavis and dovecot2021-11-29T11:48:58ZJesse Norellrfe: lmtp for amavis and dovecotrfe: use lmtp to send mail to amavis and final delivery to dovecot. This gives both services the ability to reply with a dsn for each recipient (improves delivery), and is a little more efficient (not much different for amavis, but dove...rfe: use lmtp to send mail to amavis and final delivery to dovecot. This gives both services the ability to reply with a dsn for each recipient (improves delivery), and is a little more efficient (not much different for amavis, but dovecot saves a fork/exec for every message).
## Changes required
Required config changes are quite simple, in current (eg. 3.1.6) config for postfix + dovecot to send to amavis via lmtp you simply need these in main.cf:
``lmtp_data_done_timeout = 1200
lmtp_send_xforward_command = yes
``
Then change the `amavis` transport name to `lmtp` in the 'tag_as_*.re' files:
``sed -i s/amavis/lmtp/g /etc/postfix/tag_as_*.re
``
The dovecot config is in /etc/dovecot/dovecot.conf:
``protocols = imap pop3 lmtp <---- line #2
lmtp_rcpt_check_quota = yes <---- new
``
And in main.cf change `virtual_transport = lmtp:unix:private/dovecot-lmtp`.
You can then remove the `dovecot` and `amavis` transports in master.cf.3.2https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/2829Add nginx reverse proxy support in ISPConfig2021-09-27T13:40:57ZTill BrehmAdd nginx reverse proxy support in ISPConfigAdd nginx reverse proxy support in ISPConfigAdd nginx reverse proxy support in ISPConfighttps://git.ispconfig.org/ispconfig/ispconfig3/-/issues/6224Add DNS api functions for LOC type2021-09-08T09:46:27ZHelmoAdd DNS api functions for LOC typeI noticed that the meta data for the LOC and DS functions was added by mistake ages ago in ecb8fc2c5b3c1b42e15e3e44d287a650ef3b6aa6 but no implementation.
While preparing a MR I noticed that DS functions are already proposed in #6187 so...I noticed that the meta data for the LOC and DS functions was added by mistake ages ago in ecb8fc2c5b3c1b42e15e3e44d287a650ef3b6aa6 but no implementation.
While preparing a MR I noticed that DS functions are already proposed in #6187 so this one just for dns_loc_*
The error I got that triggered me:
`SoapFault: Method dns_ds_add does not exist in SoapClient->__call()`3.2.6https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/5732Limit email backup tab through client limits2021-09-07T08:21:17ZThomLimit email backup tab through client limitsAdd option to enable/disable the email backup tab through the backup templates, either with a checkbox or a limit and when set to 0, hide it.
Based on discussion at !451Add option to enable/disable the email backup tab through the backup templates, either with a checkbox or a limit and when set to 0, hide it.
Based on discussion at !4513.2.6ThomThomhttps://git.ispconfig.org/ispconfig/ispconfig3/-/issues/6213Add support for Debian 112021-09-07T07:07:44ZTill BrehmAdd support for Debian 11Add Debian 11 support in ISPConfig.Add Debian 11 support in ISPConfig.3.2.6Till BrehmTill Brehmhttps://git.ispconfig.org/ispconfig/ispconfig3/-/issues/6167rspamd: enable arc signing2021-08-31T09:16:05ZJesse Norellrspamd: enable arc signingRFE: enable ARC signing in rspamd. With the current rspamd options/implementation I would only enable signing for incoming mail (not authenticated or local), selecting the domain from the recipient addr - these are all default settings ...RFE: enable ARC signing in rspamd. With the current rspamd options/implementation I would only enable signing for incoming mail (not authenticated or local), selecting the domain from the recipient addr - these are all default settings in modules.d/arc.conf - and simply point the selector map and key path map to the same as used for dkim signing.3.2.6Jesse NorellJesse Norellhttps://git.ispconfig.org/ispconfig/ispconfig3/-/issues/6191improve letsencrypt renew hook2021-08-31T09:15:59ZJesse Norellimprove letsencrypt renew hookChange the letsencrypt renew hook to allow a custom script to run in addition to (rather than just instead of) the default one. The pre and post hooks already do this.
https://www.howtoforge.com/community/threads/hook-evolution-for-isp...Change the letsencrypt renew hook to allow a custom script to run in addition to (rather than just instead of) the default one. The pre and post hooks already do this.
https://www.howtoforge.com/community/threads/hook-evolution-for-ispconfig-le-renewal.87185/3.2.6Jesse NorellJesse Norellhttps://git.ispconfig.org/ispconfig/ispconfig3/-/issues/6198clarify "ISPConfig v2 detected" message2021-08-31T09:15:48ZJesse Norellclarify "ISPConfig v2 detected" messageClarify the "ISPConfig v2 detected" message, perhaps a few less support tickets.Clarify the "ISPConfig v2 detected" message, perhaps a few less support tickets.3.2.6https://git.ispconfig.org/ispconfig/ispconfig3/-/issues/6210periodically force jailkit update2021-08-31T09:15:39ZJesse Norellperiodically force jailkit updateIt wouldn't hurt to force all jails to update periodically, so eg. changes to sections in jk_init.ini get propogated.It wouldn't hurt to force all jails to update periodically, so eg. changes to sections in jk_init.ini get propogated.3.2.6Jesse NorellJesse Norellhttps://git.ispconfig.org/ispconfig/ispconfig3/-/issues/6174DNS doesn't accept single character domain2021-08-17T22:53:30ZDominikDNS doesn't accept single character domainWith several new TLDs it is possible to use a single character Domain. Even with some of the old well-known domains including .de in meanwhile it is possible to have a domain with only one character like "a.de". One of my customer owns s...With several new TLDs it is possible to use a single character Domain. Even with some of the old well-known domains including .de in meanwhile it is possible to have a domain with only one character like "a.de". One of my customer owns such a domain with one of the new generic domains (in this case: .cymru). My solution was really simple:
I changed the corresponding regex in /usr/local/ispconfig/interface/web/dns/form/dns_soa.tform.php and dns_slave.tform.php and then it worked.
Unfortunatelly it is not allowed to have a single character domain in all TLDs - so there are TLDs out there that still allow only two-character domains and even some that allow only three-character domains. So what is the right solution now? Including an intelligence that knows the minimal length for all TLDs? Or just my simple solution and allow one character in every case?3.2.6ThomThom