openship 0.4.4 → 0.4.6

package/dist/server/engine/tools/generate_ssl_keys.sh

@@ -0,0 +1,85 @@
+#!/usr/bin/env bash
+
+# Author:   Zhang Huangbin (zhb _at_ iredmail.org)
+# Purpose:  Create new SSL keys.
+# Project:  iRedMail (http://www.iredmail.org/)
+
+# USAGE:
+# 1) Edit variables which starts with TLS_ below, then save file.
+# 2) Execute shell command:
+#
+#       # bash generate_ssl_keys.sh
+#
+#    It will create two new files under CURRENT directory:
+#
+#       - certs/iRedMail.crt: Used to replace file on iRedMail server:
+#           + on RHEL/CentOS/Scientific Linux: /etc/pki/tls/certs/iRedMail.crt
+#           + on Debian/Ubuntu: /etc/ssl/certs/iRedMail.crt
+#           + on FreeBSD: /etc/ssl/certs/iRedMail.crt
+#       - private/iRedMail.key: Used to replace file on iRedMail server:
+#           + on RHEL/CentOS/Scientific Linux: /etc/pki/tls/private/iRedMail.key
+#           + on Debian/Ubuntu: /etc/ssl/private/iRedMail.key
+#           + on FreeBSD: /etc/ssl/private/iRedMail.key
+#
+# 3) Grant read access to all users. e.g. on RHEL/CentOS/Scientific Linux:
+#
+#   # chmod +r /etc/ssl/certs/iRedMail.crt
+#   # chmod +r /etc/ssl/private/iRedMail.key
+#
+#   If you need more restrict file permission, please use file system ACL instead.
+#   Refer to command 'setfacl' and 'getfacl' for more detail.
+#
+# 4) Restart all services which provides SSL secure connection. e.g. http,
+#    dovecot, postfix, etc. A system reboot should be easier if possible.
+#
+
+export HOSTNAME="$(hostname -f)"
+
+# SSL key related settings.
+# Country.
+export TLS_COUNTRY='CN'
+
+# State.
+export TLS_STATE='GuangDong'
+
+# City.
+export TLS_CITY='ShenZhen'
+
+# Company name here, e.g. Apple Inc.
+export TLS_COMPANY="${HOSTNAME}"
+
+# Department name.
+export TLS_DEPARTMENT='IT'
+
+# Hostname of your mail server.
+export TLS_HOSTNAME="${HOSTNAME}"
+
+# Server admininistrator's email address.
+export TLS_ADMIN="root@${HOSTNAME}"
+
+# Do not edit below lines.
+export ROOTDIR="$(pwd)"
+export SSL_CERT_FILE="${ROOTDIR}/certs/iRedMail.crt"
+export SSL_KEY_FILE="${ROOTDIR}/private/iRedMail.key"
+
+# Create SSL certs/private files.
+generate_ssl_keys()
+{
+    # Create necessary directories.
+    mkdir -p {certs,private} 2>/dev/null
+
+    openssl req \
+        -x509 -nodes -days 3650 -newkey rsa:2048 \
+        -subj "/C=${TLS_COUNTRY}/ST=${TLS_STATE}/L=${TLS_CITY}/O=${TLS_COMPANY}/OU=${TLS_DEPARTMENT}/CN=${TLS_HOSTNAME}/emailAddress=${TLS_ADMIN}/" \
+        -out ${SSL_CERT_FILE} -keyout ${SSL_KEY_FILE} >/dev/null 2>&1
+
+    # Set correct file permission.
+    chmod 0444 ${SSL_CERT_FILE}
+    chmod 0444 ${SSL_KEY_FILE}
+}
+
+generate_ssl_keys && cat <<EOF
+SSL keys were generated:
+    - ${SSL_CERT_FILE}
+    - ${SSL_KEY_FILE}
+EOF

package/dist/server/engine/tools/kill_high_cpu_sogo_process.sh

@@ -0,0 +1,32 @@
+#!/usr/bin/env bash
+#
+# Purpose: Kill SOGo child processes which have been running too long, they
+#          may cause high CPU usage.
+# Author: Zhang Huangbin <zhb@iredmail.org>
+# Based on Jan-Frode Myklebust's script published on 04 Apr 2013:
+#   https://www.mail-archive.com/users@sogo.nu/msg14152.html
+
+# Allow to run for how long (in minutes). e.g. 15, 25.
+LONGEST=10
+
+# Kill a pid.
+k() {
+    # Usage: k <pid>
+    pid="${1}"
+
+    echo "Killing PID $pid"
+    ps -fp $pid
+    kill -9 $pid
+}
+
+ps -u sogo -opid,ppid,cputime | grep -v PPID | while read pid ppid time; do
+    # Don't kill main daemon (ppid=1).
+    if [[ X"$ppid" != X"1" ]]; then
+        hours="$(echo $time | cut -d: -f1 | sed 's/^0//')"
+        minutes="$(echo $time | cut -d: -f2 | sed 's/^0//')"
+
+        if [[ $minutes -gt ${LONGEST} ]] || [[ $hours -gt 0 ]]; then
+            k ${pid}
+        fi
+    fi
+done

package/dist/server/engine/tools/ldap_assign_user_to_groups.py

@@ -0,0 +1,151 @@
+#!/usr/bin/env python3
+# encoding: utf-8
+
+# Author: Zhang Huangbin <zhb _at_ iredmail.org>
+# Purpose: Assign one user to specified groups.
+
+# USAGE
+#
+#   * Set correct LDAP server address (LDAP_URI), LDAP suffix (LDAP_SUFFIX),
+#     bind dn (BINDDN) and password (BINDPW).
+#
+#   * Run this script:
+#
+#       $ python3 ldap_assign_user_to_groups.py [options] user@domain.com group@domain.com [group2@domain.com ...]
+
+# LDAP server address.
+LDAP_URI = 'ldap://127.0.0.1:389'
+LDAP_SUFFIX = 'dc=example,dc=com'
+
+# LDAP base dn, bind dn/password.
+BASEDN = 'o=domains,%s' % LDAP_SUFFIX
+BINDDN = 'cn=Manager,%s' % LDAP_SUFFIX
+BINDPW = 'www'
+
+
+import sys
+import ldap
+
+def usage():
+    print("""Usage:
+
+$ python3 ldap_assign_user_to_groups.py [options] user@domain.com new_group@domain.com [new_group_2@domain.com ...]
+
+Note: Non-existing group will be ignored.
+
+Optional arguments:
+
+    --remove Remove memberships. If no mailing list specified, it will remove
+             ALL assigned mailing lists.
+
+Samples:
+
+*) Remove all memberships:
+    python3 ldap_assign_user_to_groups.py --remove user@domain.com
+
+*) Remove memberships of specified mailing lists:
+    python3 ldap_assign_user_to_groups.py --remove user@domain.com group1@domain.com group2@domain.com
+
+*) Assign user to new mailing lists:
+    python3 ldap_assign_user_to_groups.py user@domain.com group1@domain.com group2@domain.com
+""")
+
+
+if len(sys.argv) < 3:
+    usage()
+    sys.exit()
+
+args = sys.argv
+args.pop(0)
+
+is_remove = False
+if '--remove' in args:
+    args.remove('--remove')
+    is_remove = True
+
+user = args.pop(0)
+groups = args
+
+if not groups and not is_remove:
+    print("<<< ERROR >>> No group specified.")
+    usage()
+    sys.exit()
+
+print("* Connecting to LDAP server: %s" % LDAP_URI)
+conn = ldap.initialize(uri=LDAP_URI, trace_level=0)
+conn.bind_s(BINDDN, BINDPW)
+
+if not is_remove:
+    print("* Querying existing mailing lists.")
+
+    qr_filter = '(&(objectClass=mailList)(|'
+    for g in groups:
+        qr_filter += '(mail=%s)(shadowAddress=%s)' % (g, g)
+    qr_filter += '))'
+
+    print("* Query filter:", qr_filter)
+
+    qr = conn.search_s(BASEDN,
+                       ldap.SCOPE_SUBTREE,
+                       qr_filter,
+                       ['mail'])
+
+    if qr:
+        groups = []
+        for (dn, entry) in qr:
+            groups += entry['mail']
+
+        print("* Found %d mailing list(s)." % len(groups))
+    else:
+        sys.exit("* No specified groups found in LDAP.")
+
+print("* Get user's dn and membership of mailing list(s).")
+(user_name, domain) = user.split('@', 1)
+user_dn = 'mail=%s,ou=Users,domainName=%s,%s' % (user, domain, BASEDN)
+try:
+    qr = conn.search_s(user_dn,
+                       ldap.SCOPE_BASE,
+                       '(mail=%s)' % user,
+                       ['mail', 'memberOfGroup'])
+except ldap.NO_SUCH_OBJECT:
+    print("* <<< ERROR >>> User doesn't exist: %s" % user)
+    sys.exit()
+
+(dn, entry) = qr[0]
+
+# Get existing, assigned mailing lists.
+existing_groups = entry.get('memberOfGroup', [])
+if existing_groups:
+    print("* Existing membership: %s" % ', '.join(existing_groups))
+else:
+    print("* User is not member of any mailing list.")
+
+# New groups
+if is_remove:
+    if groups:
+        print("* Remove membership: %s" % ', '.join(groups))
+        new_groups = list(set(existing_groups) - set(groups))
+    else:
+        print("* Remove ALL memberships.")
+        new_groups = []
+
+    # Set to None to remove attribute `memberOfGroup`
+    if not new_groups:
+        print("* No membership left, remove attribute `memberOfGroup`.")
+        new_groups = None
+else:
+    new_groups = list(set(existing_groups + groups))
+    print("* New membership: %s" % ', '.join(new_groups))
+
+mod_attrs = [(ldap.MOD_REPLACE, 'memberOfGroup', new_groups)]
+
+try:
+    print("* Updating membership.")
+    conn.modify_s(dn, mod_attrs)
+    print("* Updated.")
+
+    # Unbind connection.
+    print("* Unbind LDAP server.")
+    conn.unbind()
+except Exception as e:
+    print("<<< ERROR >>> %s" % repr(e))

package/dist/server/engine/tools/ldap_move_members_to_another_group.py

@@ -0,0 +1,129 @@
+#!/usr/bin/env python3
+# encoding: utf-8
+
+# Author: Zhang Huangbin <zhb _at_ iredmail.org>
+# Purpose: Move or copy ALL members of specified mailing list to another
+#          mailing list.
+
+# USAGE
+#
+#   * Set correct LDAP server address (LDAP_URI), LDAP suffix (LDAP_SUFFIX),
+#     bind dn (BINDDN) and password (BINDPW).
+#
+#   * Run this script:
+#
+#       $ python3 ldap_move_members_to_another_group.py [options] old_group@domain.com new_group@domain.com [new_group2@domain.com ...]
+
+# LDAP server address.
+LDAP_URI = 'ldap://127.0.0.1:389'
+LDAP_SUFFIX = 'dc=example,dc=com'
+
+# LDAP base dn, bind dn/password.
+BASEDN = 'o=domains,%s' % LDAP_SUFFIX
+BINDDN = 'cn=Manager,%s' % LDAP_SUFFIX
+BINDPW = 'www'
+
+
+import sys
+import ldap
+
+def usage():
+    print("""Usage:
+
+$ python3 ldap_move_members_to_another_group.py [options] old_group@domain.com [new_group@domain.com new_group_2@domain.com ...]
+
+Available optional options:
+
+    --copy Assign members of old group to new groups without removing
+           membership of old group. That means user will be member of both
+           old and new groups.
+
+           If no --copy specified, this script will remove membership of old
+           group.
+
+Samples:
+
+*) Copy all members of old_group@domain.com to new_group@domain.com
+    python3 ldap_move_members_to_another_group --copy old_group@domain.com new_group@domain.com
+
+*) Copy all members of old_group@domain.com to new_group@domain.com, and remove
+   ALL members of old_group@domain.com.
+    python3 ldap_move_members_to_another_group old_group@domain.com new_group@domain.com
+
+*) Remove all members (just remove membership, not remove mail accounts) of
+   old_group@domain.com.
+    python3 ldap_move_members_to_another_group old_group@domain.com
+""")
+
+
+if len(sys.argv) < 3:
+    usage()
+    sys.exit()
+
+args = sys.argv
+args.pop(0)
+
+is_copy = False
+if '--copy' in args:
+    is_copy = True
+    args.remove('--copy')
+
+old_group = args.pop(0)
+new_groups = args
+
+# Initialize LDAP connection.
+print("* Connecting to LDAP server: %s" % LDAP_URI)
+conn = ldap.initialize(uri=LDAP_URI, trace_level=0)
+conn.bind_s(BINDDN, BINDPW)
+
+# Get all members of old mailing list.
+print("* Get all members of old mailing list: %s" % old_group)
+
+qr_filter = '(&(objectClass=mailUser)(memberOfGroup=%s))' % old_group
+print("* Query filter:", qr_filter)
+
+qr = conn.search_s(BASEDN,
+                   ldap.SCOPE_SUBTREE,
+                   qr_filter,
+                   ['memberOfGroup'])
+
+total = len(qr)
+
+if total:
+    print("* Old mailing list has %d member(s)." % total)
+else:
+    sys.exit("* Old mailing list doesn't have any member. Exit.")
+
+# accumulate counter
+count = 1
+
+for user in qr:
+    (dn, entry) = user
+
+    # Get all assigned mailing lists.
+    groups = entry['memberOfGroup']
+
+    if not is_copy:
+        # Remove old mailing list
+        groups.remove(old_group)
+
+    # Assign to new mailing list
+    if new_groups:
+        groups = list(set(groups + new_groups))
+
+    # Use only value of rdn.
+    mod_attrs = [(ldap.MOD_REPLACE, 'memberOfGroup', groups)]
+
+    try:
+        print("* (%d of %d) Updating object: %s" % (count, total, dn))
+        conn.modify_s(dn, mod_attrs)
+    except Exception as e:
+        print("<<< ERROR >>> %s" % repr(e))
+
+    count += 1
+
+# Unbind connection.
+print("* Unbind LDAP server.")
+conn.unbind()
+
+print("* Done.")

package/dist/server/engine/tools/migrate_sql_alias_table.py

@@ -0,0 +1,177 @@
+#!/usr/bin/env python3
+# This file is used to migrate SQL table `vmail.alias` for SQL backends.
+#
+# Requirements:
+#
+# * Python 3
+# * Make sure you have new SQL tables ready: alias_moderators, forwardings.
+# * For PostgreSQL, please make sure SQL user 'vmail' has 'SELECT' privilege on
+#   newly created sql tables.
+
+import sys
+import web
+
+web.config.debug = False
+
+# Read iRedAdmin config file `settings.py` from one of expected paths
+sys.path.insert(0, '/usr/local/www/iredadmin')      # FreeBSD
+sys.path.insert(0, '/opt/www/iredadmin')            # Debian/Ubuntu
+sys.path.insert(0, '/var/www/iredadmin')            # CentOS/OpenBSD
+sys.path.insert(0, '/usr/share/apache2/iredadmin')  # Debian/Ubuntu (old iRedMail releases)
+
+import settings
+print("* Read SQL username/password from iRedAdmin config file:", settings.__file__)
+print("* Backend:", settings.backend)
+
+if settings.backend in ['ldap', 'mysql']:
+    sql_dbn = 'mysql'
+elif settings.backend in ['pgsql']:
+    sql_dbn = 'postgres'
+else:
+    sys.exit('* << ERROR >>: Unsupported backend (%s).' % settings.backend)
+
+try:
+    if sql_dbn == 'postgres':
+        db = web.database(dbn=sql_dbn,
+                          host=settings.vmail_db_host,
+                          port=int(settings.vmail_db_port),
+                          db=settings.vmail_db_name,
+                          user=settings.vmail_db_user,
+                          pw=settings.vmail_db_password)
+    else:
+        db = web.database(dbn=sql_dbn,
+                          host=settings.vmail_db_host,
+                          port=int(settings.vmail_db_port),
+                          db=settings.vmail_db_name,
+                          user=settings.vmail_db_user,
+                          pw=settings.vmail_db_password,
+                          charset='utf8',
+                          use_unicode=False)
+
+    db.supports_multiple_insert = True
+except Exception as e:
+    print("<< ERROR >> Cannot connecting to SQL server:", e)
+    sys.exit()
+
+def __bytes2str(b) -> str:
+    """Convert object `b` to string."""
+    if isinstance(b, str):
+        return b
+
+    if isinstance(b, (bytes, bytearray)):
+        return b.decode()
+    elif isinstance(b, memoryview):
+        return b.tobytes().decode()
+    else:
+        return repr(b)
+
+
+def bytes2str(b):
+    """Convert `b` from bytes-like type to string."""
+    if isinstance(b, (list, web.db.ResultSet)):
+        s = [bytes2str(i) for i in b]
+    elif isinstance(b, tuple):
+        s = tuple([bytes2str(i) for i in b])
+    elif isinstance(b, set):
+        s = {bytes2str(i) for i in b}
+    elif isinstance(b, (dict, web.utils.Storage)):
+        new_dict = {}
+        for (k, v) in list(b.items()):
+            new_dict[k] = bytes2str(v)  # v could be list/tuple/dict
+        s = new_dict
+    else:
+        s = __bytes2str(b)
+
+    return s
+
+
+# Check required tables
+for tbl in ['forwardings', 'alias_moderators']:
+    try:
+        db.select(tbl, limit=1)
+    except:
+        print("<<< ERROR >>> SQL table '%s' doesn't exist. Please create it first." % tbl)
+        sys.exit()
+
+# Get all existing accounts
+records = db.select('alias', what='address,goto,moderators,domain,active,islist,is_alias')
+
+total = len(records)
+counter = 1
+for r in records:
+    # standard mail alias account
+    is_list = 0
+    # per-account alias address
+    is_alias = 0
+    # forwarding addresses of mail user
+    is_forwarding = 0
+
+    if r.islist == 1:
+        is_list = 1
+        _type = 'mail alias'
+    elif r.is_alias == 1:
+        is_alias = 1
+        _type = 'per-account alias address'
+    else:
+        is_forwarding = 1
+        _type = 'mail user'
+
+    account = bytes2str(r.address).lower()
+    active = int(r.active)
+    domain = bytes2str(r.domain).lower()
+
+    goto = bytes2str(r.goto).strip(' ')
+    goto = goto.replace(' ', '')
+    goto = goto.replace(';', ',')
+    members = list(set([i.strip().lower() for i in goto.strip(' ').split(',')]))
+
+    # Migrating forwardings
+    print("* [%d/%d] Migrating %s %s" % (counter, total, _type, account))
+    for m in members:
+        if m:
+            try:
+                dest_domain = m.split('@', 1)[-1]
+
+                db.insert('forwardings',
+                          address=account,
+                          forwarding=m,
+                          domain=domain,
+                          dest_domain=dest_domain,
+                          active=active,
+                          is_list=is_list,
+                          is_alias=is_alias,
+                          is_forwarding=is_forwarding)
+
+            except Exception as e:
+                if e[0] == 1062 or 'duplicate' in repr(e):
+                    # Duplicate record
+                    pass
+                else:
+                    print("Error while migrating %s %s: %s" % (_type, m, repr(e)))
+
+    # Migrating moderators of mail alias account
+    moderators = []
+    if is_list == 1:
+        if r.moderators:
+            moderators = [i.lower() for i in set(r.moderators.strip(' ').split(','))]
+
+    if moderators:
+        for m in moderators:
+            try:
+                dest_domain = m.split('@', 1)[-1]
+
+                db.insert('alias_moderators',
+                          address=account,
+                          moderator=m,
+                          domain=domain,
+                          dest_domain=dest_domain)
+            except Exception as e:
+                if e[0] == 1062 or 'duplicate' in repr(e):
+                    # Duplicate record
+                    pass
+                else:
+                    print("Error while migrating moderators of alias account %s: %s" % (m, repr(e)))
+
+    counter += 1
+
+print("* DONE.")

package/dist/server/engine/update/0.9.8/amavisd.mysql

@@ -0,0 +1,29 @@
+-- If subject contains emoji, varchar doesn't work well.
+ALTER TABLE msgs MODIFY COLUMN subject VARBINARY(255) DEFAULT '';
+ALTER TABLE msgs MODIFY COLUMN from_addr VARBINARY(255) DEFAULT '';
+
+-- mail address without address extension: user+abc@domain.com -> user@domain.com
+ALTER TABLE maddr ADD COLUMN email_raw varbinary(255) NOT NULL DEFAULT '';
+
+-- index
+CREATE INDEX maddr_idx_email_raw ON maddr (email_raw);
+
+-- Create trigger to save email address withou address extension
+-- user+abc@domain.com -> user@domain.com
+DELIMITER //
+CREATE TRIGGER `maddr_email_raw`
+    BEFORE INSERT
+    ON `maddr`
+    FOR EACH ROW
+    BEGIN
+        IF (NEW.email LIKE '%+%') THEN
+            SET NEW.email_raw = CONCAT(SUBSTRING_INDEX(NEW.email, '+', 1), '@', SUBSTRING_INDEX(new.email, '@', -1));
+        ELSE
+            SET NEW.email_raw = NEW.email;
+        END IF;
+    END;
+//
+DELIMITER ;
+
+-- Update all existing records.
+UPDATE maddr SET email_raw=email WHERE email_raw='';

package/dist/server/engine/update/0.9.8/amavisd.pgsql

@@ -0,0 +1,39 @@
+-- If subject/from_addr contains emoji, varchar doesn't work well.
+ALTER TABLE msgs ALTER COLUMN subject DROP DEFAULT;
+ALTER TABLE msgs ALTER COLUMN subject TYPE bytea USING subject::bytea;
+ALTER TABLE msgs ALTER COLUMN subject SET DEFAULT '';
+
+ALTER TABLE msgs ALTER COLUMN from_addr DROP DEFAULT;
+ALTER TABLE msgs ALTER COLUMN from_addr TYPE bytea USING subject::bytea;
+ALTER TABLE msgs ALTER COLUMN from_addr SET DEFAULT '';
+
+-- mail address without address extension: user+abc@domain.com -> user@domain.com
+ALTER TABLE maddr ADD COLUMN email_raw VARCHAR(255) NOT NULL DEFAULT '';
+
+-- index
+CREATE INDEX maddr_idx_email ON maddr (email);
+CREATE INDEX maddr_idx_email_raw ON maddr (email_raw);
+CREATE INDEX maddr_idx_domain ON maddr (domain);
+
+-- Create trigger to save email address withou address extension
+-- user+abc@domain.com -> user@domain.com
+-- CREATE OR REPLACE FUNCTION strip_addr_extension(bytea, varchar, integer) RETURNS TRIGGER AS $$
+CREATE OR REPLACE FUNCTION strip_addr_extension()
+RETURNS TRIGGER AS $$
+BEGIN
+    IF (NEW.email LIKE '%+%') THEN
+        NEW.email_raw := split_part(convert_from(NEW.email, 'UTF8'), '+', 1) || '@' || split_part(convert_from(NEW.email, 'UTF8'), '@', 2);
+    ELSE
+        NEW.email_raw := convert_from(NEW.email, 'UTF8');
+    END IF;
+    RETURN NEW;
+END;
+$$ LANGUAGE plpgsql;
+
+CREATE TRIGGER maddr_email_raw
+    BEFORE INSERT ON maddr
+    FOR EACH ROW
+    EXECUTE PROCEDURE strip_addr_extension();
+
+-- Update all existing records.
+UPDATE maddr SET email_raw=email WHERE email_raw='';

package/dist/server/engine/update/0.9.8/iredmail.mysql

@@ -0,0 +1,53 @@
+-- USE vmail;
+
+-- DROP column
+ALTER TABLE mailbox DROP COLUMN local_part;
+
+-- New SQL column
+ALTER TABLE mailbox ADD COLUMN enableimaptls TINYINT(1) NOT NULL DEFAULT 1;
+ALTER TABLE mailbox ADD INDEX (enableimaptls);
+ALTER TABLE mailbox ADD COLUMN enablepop3tls TINYINT(1) NOT NULL DEFAULT 1;
+ALTER TABLE mailbox ADD INDEX (enablepop3tls);
+ALTER TABLE mailbox ADD COLUMN enablesievetls TINYINT(1) NOT NULL DEFAULT 1;
+ALTER TABLE mailbox ADD INDEX (enablesievetls);
+
+-- Rename table
+RENAME TABLE alias_moderators TO moderators;
+
+-- Column used to limit number of mailing lists a domain admin can create
+ALTER TABLE domain ADD COLUMN maillists INT(10) NOT NULL DEFAULT 0;
+
+-- Column used to mark sql record is a mailing list
+ALTER TABLE forwardings ADD COLUMN `is_maillist` TINYINT(1) NOT NULL DEFAULT 0;
+ALTER TABLE forwardings ADD INDEX (`is_maillist`);
+
+-- Table used to store mailing list accounts
+CREATE TABLE IF NOT EXISTS maillists (
+    id BIGINT(20) UNSIGNED AUTO_INCREMENT,
+    address VARCHAR(255) NOT NULL DEFAULT '',
+    domain VARCHAR(255) NOT NULL DEFAULT '',
+    -- Per mailing list transport. for example: 'mlmmj:example.com/listname'.
+    transport VARCHAR(255) NOT NULL DEFAULT '',
+    accesspolicy VARCHAR(30) NOT NULL DEFAULT '',
+    maxmsgsize BIGINT(20) NOT NULL DEFAULT 0,
+    -- name of the mailing list
+    name VARCHAR(255) NOT NULL DEFAULT '',
+    -- short introduction of the mailing list on subscription page
+    description TEXT,
+    -- a server-wide unique id (a 36-characters string) for each mailing list
+    mlid VARCHAR(36) NOT NULL DEFAULT '',
+    -- control whether newsletter-style subscription from website is enabled
+    -- 1 -> enabled, 0 -> disabled
+    is_newsletter TINYINT(1) NOT NULL DEFAULT 0,
+    settings TEXT,
+    created DATETIME NOT NULL DEFAULT '1970-01-01 01:01:01',
+    modified DATETIME NOT NULL DEFAULT '1970-01-01 01:01:01',
+    expired DATETIME NOT NULL DEFAULT '9999-12-31 00:00:00',
+    active TINYINT(1) NOT NULL DEFAULT 1,
+    PRIMARY KEY (id),
+    UNIQUE INDEX (address),
+    UNIQUE INDEX (mlid),
+    INDEX (is_newsletter),
+    INDEX (domain),
+    INDEX (active)
+) ENGINE=InnoDB;