openship 0.4.4 → 0.4.6

package/dist/server/engine/samples/postfix/pgsql/domain_alias_catchall_maps.cf

@@ -0,0 +1,5 @@
+hosts       = PH_SQL_SERVER_ADDRESS:PH_SQL_SERVER_PORT
+user        = PH_VMAIL_DB_BIND_USER
+password    = PH_VMAIL_DB_BIND_PASSWD
+dbname      = PH_VMAIL_DB_NAME
+query       = SELECT forwardings.forwarding FROM forwardings,alias_domain,domain WHERE alias_domain.alias_domain='%d' AND forwardings.address=alias_domain.target_domain AND alias_domain.target_domain=domain.domain AND forwardings.active=1 AND alias_domain.active=1

package/dist/server/engine/samples/postfix/pgsql/domain_alias_maps.cf

@@ -0,0 +1,5 @@
+hosts       = PH_SQL_SERVER_ADDRESS:PH_SQL_SERVER_PORT
+user        = PH_VMAIL_DB_BIND_USER
+password    = PH_VMAIL_DB_BIND_PASSWD
+dbname      = PH_VMAIL_DB_NAME
+query       = SELECT forwardings.forwarding FROM forwardings,alias_domain,domain WHERE alias_domain.alias_domain='%d' AND forwardings.address=('%u' || '@' || alias_domain.target_domain) AND alias_domain.target_domain=domain.domain AND forwardings.active=1 AND alias_domain.active=1 AND domain.backupmx=0

package/dist/server/engine/samples/postfix/pgsql/recipient_bcc_maps_domain.cf

@@ -0,0 +1,5 @@
+hosts       = PH_SQL_SERVER_ADDRESS:PH_SQL_SERVER_PORT
+user        = PH_VMAIL_DB_BIND_USER
+password    = PH_VMAIL_DB_BIND_PASSWD
+dbname      = PH_VMAIL_DB_NAME
+query       = SELECT recipient_bcc_domain.bcc_address FROM recipient_bcc_domain, domain WHERE recipient_bcc_domain.domain='%d' AND recipient_bcc_domain.domain=domain.domain AND domain.active=1

package/dist/server/engine/samples/postfix/pgsql/recipient_bcc_maps_user.cf

@@ -0,0 +1,5 @@
+hosts       = PH_SQL_SERVER_ADDRESS:PH_SQL_SERVER_PORT
+user        = PH_VMAIL_DB_BIND_USER
+password    = PH_VMAIL_DB_BIND_PASSWD
+dbname      = PH_VMAIL_DB_NAME
+query       = SELECT recipient_bcc_user.bcc_address FROM recipient_bcc_user,domain WHERE recipient_bcc_user.username='%s' AND recipient_bcc_user.domain='%d' AND recipient_bcc_user.domain=domain.domain AND recipient_bcc_user.active=1 AND domain.backupmx=0 AND domain.active=1

package/dist/server/engine/samples/postfix/pgsql/relay_domains.cf

@@ -0,0 +1,5 @@
+hosts       = PH_SQL_SERVER_ADDRESS:PH_SQL_SERVER_PORT
+user        = PH_VMAIL_DB_BIND_USER
+password    = PH_VMAIL_DB_BIND_PASSWD
+dbname      = PH_VMAIL_DB_NAME
+query       = SELECT domain FROM domain WHERE domain='%s' AND backupmx=1 AND active=1 LIMIT 1

package/dist/server/engine/samples/postfix/pgsql/sender_bcc_maps_domain.cf

@@ -0,0 +1,5 @@
+hosts       = PH_SQL_SERVER_ADDRESS:PH_SQL_SERVER_PORT
+user        = PH_VMAIL_DB_BIND_USER
+password    = PH_VMAIL_DB_BIND_PASSWD
+dbname      = PH_VMAIL_DB_NAME
+query       = SELECT sender_bcc_domain.bcc_address FROM sender_bcc_domain, domain WHERE sender_bcc_domain.domain='%d' AND sender_bcc_domain.domain=domain.domain AND domain.active=1

package/dist/server/engine/samples/postfix/pgsql/sender_bcc_maps_user.cf

@@ -0,0 +1,5 @@
+hosts       = PH_SQL_SERVER_ADDRESS:PH_SQL_SERVER_PORT
+user        = PH_VMAIL_DB_BIND_USER
+password    = PH_VMAIL_DB_BIND_PASSWD
+dbname      = PH_VMAIL_DB_NAME
+query       = SELECT sender_bcc_user.bcc_address FROM sender_bcc_user,domain WHERE sender_bcc_user.username='%s' AND sender_bcc_user.domain='%d' AND sender_bcc_user.domain=domain.domain AND sender_bcc_user.active=1 AND domain.backupmx=0 AND domain.active=1

package/dist/server/engine/samples/postfix/pgsql/sender_dependent_relayhost_maps.cf

@@ -0,0 +1,6 @@
+hosts       = PH_SQL_SERVER_ADDRESS:PH_SQL_SERVER_PORT
+user        = PH_VMAIL_DB_BIND_USER
+password    = PH_VMAIL_DB_BIND_PASSWD
+dbname      = PH_VMAIL_DB_NAME
+# '%s' will be replaced by the envelope sender address or @domain.
+query       = SELECT relayhost FROM sender_relayhost WHERE account='%s' LIMIT 1

package/dist/server/engine/samples/postfix/pgsql/sender_login_maps.cf

@@ -0,0 +1,5 @@
+hosts       = PH_SQL_SERVER_ADDRESS:PH_SQL_SERVER_PORT
+user        = PH_VMAIL_DB_BIND_USER
+password    = PH_VMAIL_DB_BIND_PASSWD
+dbname      = PH_VMAIL_DB_NAME
+query       = SELECT mailbox.username FROM mailbox,domain WHERE mailbox.username='%s' AND mailbox.domain='%d' AND mailbox.domain=domain.domain AND mailbox.enablesmtp=1 AND mailbox.active=1 AND domain.backupmx=0 AND domain.active=1

package/dist/server/engine/samples/postfix/pgsql/transport_maps_domain.cf

@@ -0,0 +1,5 @@
+hosts       = PH_SQL_SERVER_ADDRESS:PH_SQL_SERVER_PORT
+user        = PH_VMAIL_DB_BIND_USER
+password    = PH_VMAIL_DB_BIND_PASSWD
+dbname      = PH_VMAIL_DB_NAME
+query       = SELECT transport FROM domain WHERE domain='%s' AND active=1 LIMIT 1

package/dist/server/engine/samples/postfix/pgsql/transport_maps_maillist.cf

@@ -0,0 +1,5 @@
+hosts       = PH_SQL_SERVER_ADDRESS:PH_SQL_SERVER_PORT
+user        = PH_VMAIL_DB_BIND_USER
+password    = PH_VMAIL_DB_BIND_PASSWD
+dbname      = PH_VMAIL_DB_NAME
+query       = SELECT maillists.transport FROM maillists,domain WHERE maillists.address='%s' AND maillists.active=1 AND maillists.domain = domain.domain AND domain.active=1

package/dist/server/engine/samples/postfix/pgsql/transport_maps_user.cf

@@ -0,0 +1,5 @@
+hosts       = PH_SQL_SERVER_ADDRESS:PH_SQL_SERVER_PORT
+user        = PH_VMAIL_DB_BIND_USER
+password    = PH_VMAIL_DB_BIND_PASSWD
+dbname      = PH_VMAIL_DB_NAME
+query       = SELECT mailbox.transport FROM mailbox,domain WHERE mailbox.username='%s' AND mailbox.domain='%d' AND mailbox.domain=domain.domain AND mailbox.transport<>'' AND mailbox.active=1 AND mailbox.enabledeliver=1 AND domain.backupmx=0 AND domain.active=1

package/dist/server/engine/samples/postfix/pgsql/virtual_alias_maps.cf

@@ -0,0 +1,5 @@
+hosts       = PH_SQL_SERVER_ADDRESS:PH_SQL_SERVER_PORT
+user        = PH_VMAIL_DB_BIND_USER
+password    = PH_VMAIL_DB_BIND_PASSWD
+dbname      = PH_VMAIL_DB_NAME
+query       = SELECT forwardings.forwarding FROM forwardings,domain WHERE forwardings.address='%s' AND forwardings.domain=domain.domain AND forwardings.active=1 AND domain.backupmx=0 AND domain.active=1

package/dist/server/engine/samples/postfix/pgsql/virtual_mailbox_domains.cf

@@ -0,0 +1,5 @@
+hosts       = PH_SQL_SERVER_ADDRESS:PH_SQL_SERVER_PORT
+user        = PH_VMAIL_DB_BIND_USER
+password    = PH_VMAIL_DB_BIND_PASSWD
+dbname      = PH_VMAIL_DB_NAME
+query       = (SELECT domain FROM domain WHERE domain='%s' AND backupmx=0 AND active=1 LIMIT 1) UNION (SELECT alias_domain.alias_domain FROM alias_domain,domain WHERE alias_domain.alias_domain='%s' AND alias_domain.active=1 AND alias_domain.target_domain=domain.domain AND domain.active=1 AND domain.backupmx=0 LIMIT 1)

package/dist/server/engine/samples/postfix/pgsql/virtual_mailbox_maps.cf

@@ -0,0 +1,5 @@
+hosts       = PH_SQL_SERVER_ADDRESS:PH_SQL_SERVER_PORT
+user        = PH_VMAIL_DB_BIND_USER
+password    = PH_VMAIL_DB_BIND_PASSWD
+dbname      = PH_VMAIL_DB_NAME
+query       = SELECT (mailbox.storagenode || '/' || mailbox.maildir || '/Maildir/') FROM mailbox,domain WHERE mailbox.username='%s' AND mailbox.active=1 AND mailbox.enabledeliver=1 AND domain.domain = mailbox.domain AND domain.active=1

package/dist/server/engine/samples/postfix/postscreen_access.cidr

@@ -0,0 +1,6 @@
+# Rules are evaluated in the order as specified.
+#1.2.3.4 permit
+#2.3.4.5 reject
+
+# Permit local clients
+127.0.0.0/8 permit

package/dist/server/engine/samples/postgresql/sql/add_first_domain_and_user.sql

@@ -0,0 +1,34 @@
+-- Connect as vmailadmin
+-- \c PH_VMAIL_DB_NAME PH_VMAIL_DB_ADMIN_USER;
+\c PH_VMAIL_DB_NAME;
+
+-- Add your first domain
+INSERT INTO domain (domain, transport, settings, created)
+            VALUES ('PH_FIRST_DOMAIN', 'PH_TRANSPORT', 'default_user_quota:1024;', NOW());
+
+-- Add your first normal user
+INSERT INTO mailbox (username,
+                     password,
+                     name,
+                     maildir,
+                     quota,
+                     domain,
+                     isadmin,
+                     isglobaladmin,
+                     created)
+             VALUES ('PH_DOMAIN_ADMIN_EMAIL',
+                     'PH_DOMAIN_ADMIN_PASSWD_HASH',
+                     'PH_DOMAIN_ADMIN_NAME',
+                     'PH_DOMAIN_ADMIN_MAILDIR_HASH_PART',
+                     1024,
+                     'PH_FIRST_DOMAIN',
+                     0,
+                     1,
+                     NOW());
+
+INSERT INTO forwardings (address, forwarding, domain, dest_domain, is_forwarding)
+           VALUES ('PH_DOMAIN_ADMIN_EMAIL', 'PH_DOMAIN_ADMIN_EMAIL', 'PH_FIRST_DOMAIN', 'PH_FIRST_DOMAIN', 1);
+
+-- Mark first mail user as global admin
+INSERT INTO domain_admins (username, domain, created)
+                   VALUES ('PH_DOMAIN_ADMIN_EMAIL', 'ALL', NOW());

package/dist/server/engine/samples/postgresql/sql/grant_permissions.sql

@@ -0,0 +1,14 @@
+\c PH_VMAIL_DB_NAME;
+
+-- Set correct privilege for ROLE: vmail
+GRANT SELECT ON
+    admin, alias, alias_domain, anyone_shares,
+    deleted_mailboxes, domain, domain_admins,
+    forwardings,
+    mailbox, maillists, maillist_owners, moderators,
+    recipient_bcc_domain, recipient_bcc_user,
+    sender_bcc_domain, sender_bcc_user, sender_relayhost, share_folder
+    TO PH_VMAIL_DB_BIND_USER;
+
+-- Update per-user real-time mailbox usage
+GRANT SELECT, UPDATE, INSERT, DELETE ON used_quota TO PH_VMAIL_DB_BIND_USER;

package/dist/server/engine/samples/postgresql/sql/init_vmail_db.sql

@@ -0,0 +1,15 @@
+-- Crete role: vmail, read-only.
+CREATE USER PH_VMAIL_DB_BIND_USER
+    WITH ENCRYPTED PASSWORD 'PH_VMAIL_DB_BIND_PASSWD'
+    NOSUPERUSER NOCREATEDB NOCREATEROLE;
+
+-- Create role: vmailadmin, read + write.
+CREATE USER PH_VMAIL_DB_ADMIN_USER
+    WITH ENCRYPTED PASSWORD 'PH_VMAIL_DB_ADMIN_PASSWD'
+    NOSUPERUSER NOCREATEDB NOCREATEROLE;
+
+-- Create database to store mail accounts
+CREATE DATABASE PH_VMAIL_DB_NAME WITH TEMPLATE template0 ENCODING 'UTF8';
+
+-- Grant privilege
+ALTER DATABASE PH_VMAIL_DB_NAME OWNER TO PH_VMAIL_DB_ADMIN_USER;

package/dist/server/engine/samples/rsyslog.d/1-iredmail-dovecot.conf

@@ -0,0 +1,23 @@
+# Debug
+if $syslogfacility-text == 'PH_IREDMAIL_SYSLOG_FACILITY' and ($msg contains ": Debug:") then -PH_DOVECOT_LOG_FILE
+& stop
+
+# sieve and LMTP
+if $syslogfacility-text == 'PH_IREDMAIL_SYSLOG_FACILITY' and ($msg contains "lmtp(" or $msg contains "lda(") then -PH_DOVECOT_SYSLOG_FILE_LDA
+& stop
+
+# IMAP
+if $syslogfacility-text == 'PH_IREDMAIL_SYSLOG_FACILITY' and ($msg contains "imap(" or $msg contains "imap-login:") then -PH_DOVECOT_SYSLOG_FILE_IMAP
+& stop
+
+# POP3
+if $syslogfacility-text == 'PH_IREDMAIL_SYSLOG_FACILITY' and ($msg contains "pop3(" or $msg contains "pop3-login:") then -PH_DOVECOT_SYSLOG_FILE_POP3
+& stop
+
+# managesieve
+if $syslogfacility-text == 'PH_IREDMAIL_SYSLOG_FACILITY' and ($msg contains "managesieve(" or $msg contains "managesieve-login:") then -PH_DOVECOT_SYSLOG_FILE_SIEVE
+& stop
+
+# All other Dovecot log
+if $syslogfacility-text == 'PH_IREDMAIL_SYSLOG_FACILITY' and $programname startswith "dovecot" then -PH_DOVECOT_LOG_FILE
+& stop

package/dist/server/engine/samples/rsyslog.d/1-iredmail-fail2ban.conf

@@ -0,0 +1,2 @@
+if $programname startswith 'fail2ban' or ($programname == 'journal' and $msg startswith 'fail2ban') then -PH_FAIL2BAN_LOG_FILE
+& stop

package/dist/server/engine/samples/rsyslog.d/1-iredmail-iredapd.conf

@@ -0,0 +1,12 @@
+# Log to /var/log/iredapd/iredapd.log
+#
+# Notes:
+#
+#   - $syslogfacility-text must be same as value of parameter SYSLOG_FACILITY
+#     in iredapd config file. Defaults to 'local5' (defined in
+#     libs/default_settings.py).
+#
+#   - Directory /var/log/iredapd/ must be owned by syslog daemon user/group.
+#
+if $syslogfacility-text == 'PH_IREDMAIL_SYSLOG_FACILITY' and ($syslogtag startswith 'iredapd' or $msg startswith 'iredapd') then -PH_IREDAPD_LOG_FILE
+& stop

package/dist/server/engine/samples/rsyslog.d/1-iredmail-mlmmjadmin.conf

@@ -0,0 +1,12 @@
+# Log to /var/log/mlmmjadmin/mlmmjadmin.log
+#
+# Notes:
+#
+#   - $syslogfacility-text must be same as value of parameter SYSLOG_FACILITY
+#     in mlmmjadmin config file. Defaults to 'local5' (defined in
+#     libs/default_settings.py).
+#
+#   - Directory /var/log/mlmmjadmin/ must be owned by syslog daemon user/group.
+#
+if $syslogfacility-text == 'PH_IREDMAIL_SYSLOG_FACILITY' and $programname startswith 'mlmmjadmin' then -PH_MLMMJADMIN_LOG_FILE
+& stop

package/dist/server/engine/samples/rsyslog.d/1-iredmail-openldap.conf

@@ -0,0 +1,2 @@
+if $syslogfacility-text == 'PH_OPENLDAP_SYSLOG_FACILITY' and $programname == 'slapd' then -PH_OPENLDAP_LOG_FILE
+& stop

package/dist/server/engine/samples/rsyslog.d/1-iredmail-phpfpm.conf

@@ -0,0 +1,3 @@
+# php-fpm
+if $syslogfacility-text == 'PH_IREDMAIL_SYSLOG_FACILITY' and $syslogtag startswith 'php-fpm' then -PH_PHP_FPM_LOG_MAIN
+& stop

package/dist/server/engine/samples/spamassassin/local.cf

@@ -0,0 +1,186 @@
+#---------------------------------------------------------------------
+# This file is part of iRedMail, which is an open source mail server
+# solution for Red Hat(R) Enterprise Linux, CentOS, Debian and Ubuntu.
+#
+# iRedMail is free software: you can redistribute it and/or modify
+# it under the terms of the GNU General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# iRedMail is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU General Public License for more details.
+#
+# You should have received a copy of the GNU General Public License
+# along with iRedMail.  If not, see <http://www.gnu.org/licenses/>.
+#---------------------------------------------------------------------
+
+#
+# Sample SpamAssassin rules. It should be located at:
+#   /etc/mail/spamassassin/local.cf
+#
+# Shipped within iRedMail project:
+#   * http://iRedMail.googlecode.com/
+#
+# See also:
+#    $ man Mail::SpamAssassin::Conf
+#
+
+
+# These two lines will not affect due to Amavisd use its
+# own variables setting in /etc/amavisd.conf.
+required_score      5.0
+rewrite_header      subject [ SPAM ]
+
+report_safe         0
+lock_method         flock
+
+#
+# Bayesian support
+#
+# References:
+# - http://wiki.apache.org/spamassassin/BayesInSpamAssassin
+# - http://svn.apache.org/repos/asf/spamassassin/branches/3.3/sql/README.bayes
+# Addition plugin for Roundcube webmail to call sa-learn
+# - http://www.tehinterweb.co.uk/roundcube/#pimarkasjunk2
+#
+use_bayes          1
+bayes_auto_learn   1
+bayes_auto_expire  1
+
+# Store bayesian data in MySQL.
+# Please make sure you have correct server address, port and database name.
+#bayes_store_module Mail::SpamAssassin::BayesStore::MySQL
+#bayes_sql_dsn      DBI:mysql:sa_bayes:127.0.0.1:3306
+
+# Store bayesian data in PostgreSQL.
+# Please make sure you have correct server address, port and database name.
+#bayes_store_module Mail::SpamAssassin::BayesStore::PgSQL
+#bayes_sql_dsn      DBI:Pg:database=sa_bayes;host=127.0.0.1;port=5432
+
+# SQL username and password.
+#bayes_sql_username db_username
+#bayes_sql_password db_password
+
+# Override the username used for storing data in the database.
+# This could be used to group users together to share bayesian filter data.
+# You can also use this config option to trick sa-learn to learn data as a specific user.
+#bayes_sql_override_username vmail
+
+# Increase score for message which contains blacklisted or phishing URI
+# URIBL
+#score URIBL_SBL 3
+# dbl.spamhaus.org
+#score URIBL_DBL_SPAM 3
+#score URIBL_DBL_PHISH 3
+#score URIBL_DBL_MALWARE 3
+#score URIBL_DBL_BOTNETCC 3
+#score URIBL_DBL_ABUSE_SPAM 3
+#score URIBL_DBL_ABUSE_REDIR 3
+#score URIBL_DBL_ABUSE_PHISH 3
+#score URIBL_DBL_ABUSE_MALW 3
+#score URIBL_DBL_ABUSE_BOTCC 3
+#score URIBL_DBL_ERROR 0
+# multi.surbl.org
+#score URIBL_WS_SURBL 3
+#score URIBL_PH_SURBL 3
+#score URIBL_MW_SURBL 3
+#score URIBL_CR_SURBL 3
+#score URIBL_ABUSE_SURBL 3
+#score SURBL_BLOCKED 0
+# multi.urlbl.com
+#score URIBL_BLACK 3
+#score URIBL_RED 3
+#score URIBL_BLOCKED 0
+
+# DNSBL
+#score RCVD_IN_SBL 5
+#score RCVD_IN_XBL 5
+#score RCVD_IN_PBL 5
+
+# Turn off ALL DNSBL (DNS Blocklists)
+#skip_rbl_checks  1
+# Turn off DNSBL: rhsbl.ahbl.org.
+# Check /usr/share/spamassassin/20_dnsbl_test.cf to see the rule name.
+score DNS_FROM_AHBL_RHSBL 0
+
+score URIBL_AB_SURBL 0 0.3306 0 0.3812
+score URIBL_JP_SURBL 0 0.3360 0 0.4087
+score URIBL_OB_SURBL 0 0.2617 0 0.3008
+score URIBL_PH_SURBL 0 0.2240 0 0.2800
+score URIBL_SBL 0 0.1094 0 0.1639
+score URIBL_SC_SURBL 0 0.3600 0 0.4498
+score URIBL_WS_SURBL 0 0.1533 0 0.2140
+
+# For SpamAssassin-3.2.x. Reference:
+# http://spamassassin.apache.org/full/3.2.x/doc/Mail_SpamAssassin_Plugin_SPF.html
+#do_not_use_mail_spf 0
+#do_not_use_mail_spf_query   1
+#ignore_received_spf_header  1
+
+# Trusted networks. Examples:
+#   192.168/16            # all in 192.168.*.*
+#   212.17.35.15          # just that host
+#   !10.0.1.5 10.0.1/24   # all in 10.0.1.* but not 10.0.1.5
+#   DEAD:BEEF::/32        # all in that ipv6 prefix
+# Local host (127.0.0.1) will automatically be trusted implicitly.
+#trusted_networks 192.168/16
+
+# Whitelist from SPF.
+#whitelist_from_spf joe@example.com fred@example.com
+#whitelist_from_spf *@example.com
+
+# Whitelist from DKIM.
+loadplugin Mail::SpamAssassin::Plugin::DKIM
+whitelist_from_dkim *@paypal.com
+whitelist_from_dkim *@linkedin.com
+whitelist_from_dkim *@twitter.com
+whitelist_from_dkim *@bounce.twitter.com
+
+# Whitelist domains.
+# Reference: http://wiki.apache.org/spamassassin/ManualWhitelist
+#whitelist_from         *@gmail.com
+
+# Locales.
+ok_locales          all
+
+# Some sample custom file rules. Refer to SpamAssassin wiki site for more
+# details: http://wiki.apache.org/spamassassin/WritingRules
+#
+# Filter Headers.
+# -- Subject
+#header LOCAL_DEMONSTRATION_SUBJECT      Subject =~ /\btest\b/i
+#score LOCAL_DEMONSTRATION_SUBJECT       0.1
+# -- From
+#header LOCAL_DEMONSTRATION_FROM From =~ /test\.com/i
+#score LOCAL_DEMONSTRATION_FROM  0.1
+# -- Look at all the headers and match if any of them contain the specified regex:
+#header LOCAL_DEMONSTRATION_ALL  ALL =~ /test\.com/i
+#score LOCAL_DEMONSTRATION_ALL   0.1
+#
+# Filter mail body.
+#body LOCAL_DEMONSTRATION_RULE /test/
+#score LOCAL_DEMONSTRATION_RULE 0.1
+#describe LOCAL_DEMONSTRATION_RULE This is a simple test rule
+
+# Decrease score for authenticated senders.
+# IMPORTANT NOTES:
+#
+#   1) Please replace 'your\.server\.com' by the value of Postfix parameter
+#      "myhostname".
+#   2) Please set 'smtpd_sasl_authenticated_header = yes' in Postfix main.cf.
+#
+#header AUTHENTICATED_SENDER Received =~ /Authenticated\ sender\:.*by\ your\.server\.com/
+#describe AUTHENTICATED_SENDER Header 'Received:' contains 'Authenticated sender:'
+#score AUTHENTICATED_SENDER -3
+
+# Checks if domain name of an envelope sender address matches the domain name
+# of the first untrusted relay (if any), or any trusted relay otherwise.
+# https://wiki.apache.org/spamassassin/Rules/RP_MATCHES_RCVD
+score RP_MATCHES_RCVD 0
+
+# SPF mismatch
+score SPF_FAIL 5
+
+razor_config PH_SA_PLUGIN_RAZOR_CONF

package/dist/server/engine/samples/spamassassin/razor.conf

@@ -0,0 +1 @@
+debuglevel = 0

package/dist/server/engine/samples/systemd/clamd.service.d/override.conf

@@ -0,0 +1,2 @@
+[Service]
+TimeoutSec = 600

package/dist/server/engine/samples/systemd/mariadb.service.d/override.conf

@@ -0,0 +1,3 @@
+# Reference: https://mariadb.com/kb/en/the-mariadb-library/server-system-variables/#open_files_limit
+[Service]
+LimitNOFILE=infinity

package/dist/server/engine/samples/systemd/slapd.service.d/override.conf

@@ -0,0 +1,6 @@
+[Service]
+# Clean the ExecStart first
+ExecStart=
+
+# Re-define ExecStart
+ExecStart=/usr/sbin/slapd -u PH_SYS_USER_LDAP -h "ldapi:/// ldap://PH_LDAP_SERVER_HOST:PH_LDAP_SERVER_PORT/" -f PH_OPENLDAP_SLAPD_CONF

package/dist/server/engine/samples/yum/CentOS-Linux-AppStream.repo

@@ -0,0 +1,6 @@
+[appstream]
+name=CentOS-$releasever - AppStream
+baseurl=http://mirror.centos.org/$contentdir/$releasever/AppStream/$basearch/os/
+gpgcheck=1
+enabled=1
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial

package/dist/server/engine/samples/yum/CentOS-Linux-PowerTools.repo

@@ -0,0 +1,6 @@
+[powertools]
+name=CentOS-$releasever - PowerTools
+baseurl=http://mirror.centos.org/$contentdir/$releasever/PowerTools/$basearch/os/
+gpgcheck=1
+enabled=1
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial

package/dist/server/engine/samples/yum/CentOS-Stream-AppStream.repo

@@ -0,0 +1,7 @@
+[appstream]
+name=CentOS Stream $releasever - AppStream
+mirrorlist=http://mirrorlist.centos.org/?release=$stream&arch=$basearch&repo=AppStream&infra=$infra
+#baseurl=http://mirror.centos.org/$contentdir/$stream/AppStream/$basearch/os/
+gpgcheck=1
+enabled=1
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial

package/dist/server/engine/samples/yum/CentOS-Stream-PowerTools.repo

@@ -0,0 +1,7 @@
+[powertools]
+name=CentOS Stream $releasever - PowerTools
+mirrorlist=http://mirrorlist.centos.org/?release=$stream&arch=$basearch&repo=PowerTools&infra=$infra
+#baseurl=http://mirror.centos.org/$contentdir/$stream/PowerTools/$basearch/os/
+gpgcheck=1
+enabled=0
+gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial

package/dist/server/engine/samples/yum/symas-openldap.repo

@@ -0,0 +1,6 @@
+[symas-openldap]
+name=Symas OpenLDAP for Linux RPM repository
+baseurl=https://repo.symas.com/repo/rpm/SOFL/rhel8
+gpgkey=https://repo.symas.com/repo/gpg/RPM-GPG-KEY-symas-com-signing-key
+gpgcheck=1
+enabled=1

package/dist/server/engine/tools/add_enabled_service.py

@@ -0,0 +1,60 @@
+#!/usr/bin/env python3
+# encoding: utf-8
+
+# Author:   Zhang Huangbin <zhb _at_ iredmail.org>
+# Purpose:  Add enabledService=<X> for existing mail users.
+
+import ldap
+
+# Note: bind_dn must have write privilege on LDAP server.
+uri = 'ldap://127.0.0.1:389'
+basedn = 'o=domains,dc=example,dc=com'
+bind_dn = 'cn=Manager,dc=example,dc=com'
+bind_pw = 'passwd'
+
+print("* Connecting to LDAP server:", uri)
+conn = ldap.initialize(uri=uri, trace_level=0)
+conn.bind_s(bind_dn, bind_pw)
+
+print("* Get all mail accounts...")
+allUsers = conn.search_s(basedn,
+                         ldap.SCOPE_SUBTREE,
+                         "(objectClass=mailUser)",
+                         ['mail', 'enabledService'])
+
+total = len(allUsers)
+print("* Total %d user(s)." % total)
+
+# Values of 'enabledService' which need to be added.
+services = [b'sogo']
+
+# Counter.
+count = 1
+
+for user in allUsers:
+    (dn, entry) = user
+    mail = entry['mail'][0]
+    if 'enabledService' not in entry:
+        continue
+
+    enabledService = entry['enabledService']
+
+    # Get missing values.
+    values = [s.lower() for s in services if s not in enabledService]
+
+    if values:
+        mod_attrs = [(ldap.MOD_ADD, 'enabledService', values)]
+
+        if len(mod_attrs) > 0:
+            print("* (%d of %d) Updating user: %s" % (count, total, mail))
+            conn.modify_s(dn, mod_attrs)
+    else:
+        print("* (%d of %d) [SKIP] No update required: %s" % (count, total, mail))
+
+    count += 1
+
+# Unbind connection.
+print("* Unbind LDAP server.")
+conn.unbind()
+
+print("* Update completed.")