<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0//EN" "http://www.w3.org/TR/REC-html40/strict.dtd">
<html><head><meta name="qrichtext" content="1" /><style type="text/css">
p, li { white-space: pre-wrap; }
</style></head><body style=" font-family:'Tahoma'; font-size:8.25pt; font-weight:400; font-style:normal;">
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">On Sunday 10 August 2014 22:52:18 jonte+kolab@yojimbo.org wrote:<br /></p>
<p style=" margin-top:12px; margin-bottom:12px; margin-left:40px; margin-right:40px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">Hi there,</p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:40px; margin-right:40px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><br /></p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:40px; margin-right:40px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">I'm sort of new here and thought I would drop by and give an thumbs up for a very nicely run project. While I haven't really done much the project caught my eye about 6 month ago while looking for something suitable for an friend to run. Having used <span style=" font-weight:600;">Roundcube</span> Mail for a very long time it dropped by there and that's how I found this place.</p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:40px; margin-right:40px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">For the first couple of months I just read the docs, then in may I tried building an test machine for the first time and ehmm nope that didn't work. Was the broken cyrus, so installing from the devel tree got the system running but it still lacked the resource management I saw in the docs but couldn't figure out why it wasn't working. </p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:40px; margin-right:40px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><br /></p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:40px; margin-right:40px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">Last week I had another look and <span style=" font-style:italic;">wow</span> 3.3 is in beta, here is the <span style=" font-weight:600; font-style:italic;">resource management</span>... ehmm for <span style=" font-style:italic;">CentOS</span> that didn't work, <span style=" font-style:italic;">Roundcube</span> just didn't startup. OH and the <span style=" font-style:italic;">kolab-webadmin-3.2-5.el6.kolab_3.3.noarch.rpm</span> is unsigned. oh well it's a beta.</p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:40px; margin-right:40px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><br /></p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:40px; margin-right:40px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">So here are a few observation, but without running an actual machine in production of course, and yea it's CentOS</p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:40px; margin-right:40px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><br /></p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:40px; margin-right:40px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">3.2 works very well with the default install, both the Cyrus imapd issue and the clamd.amavisd now installs without having to patch the setup script or using beta packages.</p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:40px; margin-right:40px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">For some reason the documentation still say that selinux have to be turned off, this is possibly the case, but the <a href="https://github.com/kanarip/kolab-selinux"><span style=" text-decoration: underline; color:#0000ff;">https://github.com/kanarip/kolab-selinux</span></a> got it almost right.</p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:40px; margin-right:40px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">I turn on both </p>
<pre style=" margin-top:12px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0; background-color:#f9f9f9;"><span style=" font-family:'Courier New,courier'; font-size:13px; color:#000000; background-color:#f9f9f9;">/usr/sbin/setsebool -P httpd_can_sendmail on # Cyres etc most things email</span></pre>
<pre style=" margin-top:0px; margin-bottom:12px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0; background-color:#f9f9f9;"><span style=" font-family:'Courier New,courier'; font-size:13px; color:#000000; background-color:#f9f9f9;">/usr/sbin/setsebool -P httpd_can_network_connect on # Filters in Roundmail</span></pre>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:40px; margin-right:40px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">As for the <span style=" font-style:italic;">kolab.te</span> file, it's slightly wrong probably due to the time since it was updated, I needed to change one line to add the <span style=" font-weight:600; font-style:italic;">initrc_t</span> type. </p>
<pre style=" margin-top:12px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0; background-color:#f9f9f9;"><span style=" font-family:'Courier New,courier'; font-size:13px; color:#000000; background-color:#f9f9f9;">#============= cyrus_t ==============</span></pre>
<pre style=" margin-top:0px; margin-bottom:12px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0; background-color:#f9f9f9;"><span style=" font-family:'Courier New,courier'; font-size:13px; color:#000000; background-color:#f9f9f9;">allow cyrus_t initrc_t:unix_stream_socket connectto;</span></pre>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:40px; margin-right:40px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">Finally I added mod_security, since its after all a web server, so the http application firewall seems to fit very nicely for an security conscious individual ( reads: paranoid ).</p>
<pre style=" margin-top:12px; margin-bottom:12px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0; background-color:#f9f9f9;"><span style=" font-family:'Courier New,courier'; font-size:13px; color:#000000; background-color:#f9f9f9;">yum -y install mod_security mod_security_crs mod_security_crs-extras</span></pre>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:40px; margin-right:40px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">You probably don't need extras, but I was playing around. Ah the pain. Anyway, 2 things really needs adjusted:</p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:40px; margin-right:40px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><br /></p>
<ul type="square" style="margin-top: 0px; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; -qt-list-indent: 1;"><li style=" font-family:'sans-serif'; font-size:13px;" style=" margin-top:4px; margin-bottom:1px; margin-left:20px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-size:13px;">To enable active sync, find id 900012 in</span></li></ul>
<pre style=" margin-top:12px; margin-bottom:12px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0; background-color:#f9f9f9;"><span style=" font-family:'Courier New,courier'; font-size:13px; color:#000000; background-color:#f9f9f9;">/etc/httpd/modsecurity.d/modsecurity_crs_10_config.conf</span></pre>
<ul type="square" style="margin-top: 0px; margin-bottom: 0px; margin-left: 0px; margin-right: 0px; -qt-list-indent: 1;"><li style=" font-family:'sans-serif'; font-size:13px;" style=" margin-top:4px; margin-bottom:1px; margin-left:20px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-size:13px;">add: application/vnd.ms-sync.wbxm</span></li></ul>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-family:'sans-serif'; font-size:13px;"><br /></span></p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><span style=" font-family:'sans-serif'; font-size:13px;">Or you can add the following to the file </span><span style=" font-family:'sans-serif'; font-size:13px; font-weight:600;">/etc/httpd/conf.d/kolab-syncroton.conf</span></p>
<pre style=" margin-top:12px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0; background-color:#f9f9f9;"><span style=" font-family:'Courier New,courier'; font-size:13px; color:#000000; background-color:#f9f9f9;"><LocationMatch "^/Microsoft-Server-ActiveSync"></span></pre>
<pre style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0; background-color:#f9f9f9;"><span style=" font-family:'Courier New,courier'; font-size:13px; color:#000000; background-color:#f9f9f9;"> SecRuleRemoveById 960010</span></pre>
<pre style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0; background-color:#f9f9f9;"><span style=" font-family:'Courier New,courier'; font-size:13px; color:#000000; background-color:#f9f9f9;"> SecRuleRemoveById 960017 </span></pre>
<pre style=" margin-top:0px; margin-bottom:12px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0; background-color:#f9f9f9;"><span style=" font-family:'Courier New,courier'; font-size:13px; color:#000000; background-color:#f9f9f9;"></LocationMatch></span></pre>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:40px; margin-right:40px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">For the WAP pages, you need to add the following to the file <span style=" font-family:'sans-serif'; font-size:13px; font-style:italic;">/etc/httpd/conf.d/kolab-webadmin.conf</span></p>
<pre style=" margin-top:12px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0; background-color:#f9f9f9;"><span style=" font-family:'Courier New,courier'; font-size:13px; color:#000000; background-color:#f9f9f9;"><LocationMatch "^/kolab-webadmin/.*"></span></pre>
<pre style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0; background-color:#f9f9f9;"><span style=" font-family:'Courier New,courier'; font-size:13px; color:#000000; background-color:#f9f9f9;"> SecRuleRemoveById 950007</span></pre>
<pre style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0; background-color:#f9f9f9;"><span style=" font-family:'Courier New,courier'; font-size:13px; color:#000000; background-color:#f9f9f9;"> SecRuleRemoveById 960011</span></pre>
<pre style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0; background-color:#f9f9f9;"><span style=" font-family:'Courier New,courier'; font-size:13px; color:#000000; background-color:#f9f9f9;"> SecRuleRemoveById 960015</span></pre>
<pre style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0; background-color:#f9f9f9;"><span style=" font-family:'Courier New,courier'; font-size:13px; color:#000000; background-color:#f9f9f9;"> SecRuleRemoveById 960024</span></pre>
<pre style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0; background-color:#f9f9f9;"><span style=" font-family:'Courier New,courier'; font-size:13px; color:#000000; background-color:#f9f9f9;"> SecRuleRemoveById 981173</span></pre>
<pre style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0; background-color:#f9f9f9;"><span style=" font-family:'Courier New,courier'; font-size:13px; color:#000000; background-color:#f9f9f9;"> SecRuleRemoveById 981243</span></pre>
<pre style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0; background-color:#f9f9f9;"><span style=" font-family:'Courier New,courier'; font-size:13px; color:#000000; background-color:#f9f9f9;"> SecRuleRemoveById 981245</span></pre>
<pre style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0; background-color:#f9f9f9;"><span style=" font-family:'Courier New,courier'; font-size:13px; color:#000000; background-color:#f9f9f9;"> SecRuleRemoveById 981246</span></pre>
<pre style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0; background-color:#f9f9f9;"><span style=" font-family:'Courier New,courier'; font-size:13px; color:#000000; background-color:#f9f9f9;"> SecRuleRemoveById 981257</span></pre>
<pre style=" margin-top:0px; margin-bottom:12px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0; background-color:#f9f9f9;"><span style=" font-family:'Courier New,courier'; font-size:13px; color:#000000; background-color:#f9f9f9;"></LocationMatch></span></pre>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:40px; margin-right:40px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">And now everything seems to work. If you're going to play around with mod_security, please know what your doing, it's an pain to figure out what's wrong. I cheated and used </p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:40px; margin-right:40px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><a href="http://www.samhobbs.co.uk/2014/05/apache-modsecurity-whitelist-generator-script"><span style=" font-weight:600; text-decoration: underline; color:#0000ff;">http://www.samhobbs.co.uk/2014/05/apache-modsecurity-whitelist-generator-script</span></a> to track down which modules where venerable, and it would probably be best if the mechanism didn't trigger these alerts, but I'm not an developer so it's probably safe. </p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:40px; margin-right:40px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><br /></p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:40px; margin-right:40px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">In conclusion I'm looking forward to 3.3 with the resource module coming out of beta and being released. Keep up the good work and keep your SElinux enabled. </p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:40px; margin-right:40px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><br /></p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:40px; margin-right:40px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">Cheers,</p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:40px; margin-right:40px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"> Jonte.</p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:40px; margin-right:40px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"> </p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:40px; margin-right:40px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><br /></p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><br /><br />Jonte some great info there for this noob :)</p>
<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; "> </p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">Being a noob I always get caught by security be it selinux, firewall or apache security.</p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">Would be great to have "setup-kolab-security" that does the security layer after you have a proven install.</p>
<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; "> </p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">Stuart</p>
<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; "> </p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">PS stopped using my Zarafa webclient as it was problematic. Jumped to thunderbird. What have Mozilla done to Thunderbird!! uninstall.</p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;">Kontact I like and I know urgh windows! but if anyone has any tips how to improve its perfomance please send me a personal email.</p>
<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; "> </p>
<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; "> </p>
<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; "> </p>
<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; "> </p><hr size="1px" noshade style="clear:both;margin-top:10px;height:1px;">
<div style="font:12px Verdana,sans-serif;color:Black;background:white;padding:3px;line-height:1.3em">
<span style="font-weight:bold;">Free Online Photosharing</span> - Share your photos online with your friends and family!<br>
Visit <a href="http://www.inbox.com/photosharing">http://www.inbox.com/photosharing</a> to find out more!</div>
</body></html>