nuxij/nuxmail

Plugins for Haraka server (http://haraka.github.io/)

nuxMail

In here be some plugins (and docs :D) I've written to run my mail server. Submit an issue if you see one!

Plugins

Inbound

• jme.rcpt_to.aliases

  • This is a simple aliases plugin that allows chaining.

• jme.rcpt_to.disposable

  • This is the plugin from the haraka plugin tutorial. A nice idea so I kept it.

• jme.rcpt_to.mailboxes

  • This plugin allows you to specify exactly which user mailboxes you will accept mail for.

    Because it manages users per domain, it has the benefit of managing which domains you accept mail to as well, so it should replace "rcpt_to.in_host_list" as the final plugin before the queue. They DO NOT work together.

    This plugin is redundant if you push your mail directly to something like an IMAP server, since that will manage your users for you, but it's useful if you want to direct to, say, a ~/Maildir structure directly.

• jme.queue.pipe_command

  • This plugin allows piping of emails to external commands, via stdin. Used in conjunction with jme.rcpt_to.aliases.

Outbound

• jme.auth.flat_file.sha512crypt

  • This plugin provides flat-file user authentication as per the default auth/flat_file plugin, but stores SHA512-CRYPT password hashes, instead of cleartext passwords.

• jme.queue_outbound.accounts

  • This plugin provides user authorisation for MAIL_FROM addresses.

    An authenticated user can only send from addresses that are listed in the configuration. This works well in conjunction with rcpt_to alias plugins to ensure that users can only send email from the aliases that redirect to them, rather than any address they like.

nuxmail's Issues

New plugin request: Auth that uses bcrypt for password storage

The default auth/flat_file plugin stores passwords on disk in cleartext. It would be nice to store them a little more securely with something like bcrypt.

Aliases plugin doesn't support grouping

It would be nice if the 'rcpt_to.aliases' plugin allowed you to target multiple users for an alias, therefore allowing groups. For instance:

"aliases": {
    "example.com": {
        "admins": ["root", "joe"],
    }
}

'jme.auth.flat_file.sha512bcrypt' plugin doesn't support custom rounds count.

At the moment the plugin relies on hashes that don't have round specifiers in them, using the default config of 5000 rounds. This should be changed so that it will support both the default, without a round specifier and custom round counts too. i.e. --

Default (5000): $6$8uHLabRw5l3sjPXu$E3qi.Dtie2j6zj7hCnMN0S0oomXMQ4QHv5MrrgotvcqoJkPO6BhM1wbRmVbqJjc4ZN/mtHBk5WywhwFKHeNdE0

Custom (10000): $6$rounds=10000$DuCleENfZzMcoFZi$0wu1ZW2PPWF/TReYBgnb5bt7ilmz60rvaBzjOiUX92c4klcedRdEtn8goPugC.Oj3kKjOybWLBsGajXkLYScu1

'rcpt_to.mailboxes' plugin errors about the 'connection' object.

Error from log below:

[CRIT] [4500212D-502F-4170-8FDF-02FCCC918CF7.1] [core] Plugin jme.rcpt_to.mailboxes failed: ReferenceError: connection is not defined
    at hostInConfig (/opt/haraka/haraka-in/plugins/jme.rcpt_to.mailboxes.js:24:3)

Disposable plugin doesn't pass on a rewritten address.

Plugin: jme.rcpt_to.disposable

To function correctly, the plugin should rewrite valid addresses to their non-dated version. i.e. [email protected] should become [email protected]