Routine Maintenance¶

Regular maintenance tasks to keep Mailborder running smoothly.

Daily Tasks¶

Check System Status¶

sudo mb-status

Verify: - All services running - No errors in logs - Queue depth normal (<100) - Disk space adequate (>20%)

Review Quarantine¶

Check for false positives:

sudo mb-quarantine-list --since "yesterday"

Release legitimate emails:

sudo mb-quarantine-release <message-id>

Monitor Email Volume¶

Check statistics:

sudo mb-filter-stats --daily

Look for: - Unusual volume spikes - High spam rates - Virus detections

Weekly Tasks¶

Review Logs¶

Check for errors:

sudo grep ERROR /var/log/mailborder/*.log | tail -n 50

Review failed logins:

sudo grep "Failed login" /var/log/mailborder/auth.log | wc -l

Update Signatures¶

Manual update:

sudo mb-update --all

Verify:

sudo sigtool --info /var/lib/clamav/daily.cvd

Backup Verification¶

Test last backup:

sudo mb-backup-verify /var/backups/mailborder/latest.tar.gz

Database Cleanup¶

Remove old logs:

sudo mb-maintenance --database-cleanup

Performance Check¶

Monitor resources:

top
free -m
df -h

Monthly Tasks¶

Database Optimization¶

Optimize tables:

sudo mb-maintenance --optimize-db

Review Security¶

Failed login summary:

sudo mb-audit-log --type login --failed --since "30 days ago"

Review user accounts:

sudo mb-admin-list
# Disable unused accounts

Certificate Check¶

Check SSL expiration:

sudo openssl x509 -in /etc/ssl/certs/mailborder.crt -noout -enddate

Renew if <30 days:

sudo certbot renew

Configuration Backup¶

Export settings:

sudo mb-backup --config-only

System Updates¶

Update packages:

sudo apt update
sudo apt upgrade mailborder

Quarterly Tasks¶

Full System Audit¶

Run comprehensive check:

sudo mb-doctor > /tmp/quarterly-audit.txt

Review Statistics¶

Generate report:

sudo mb-report --quarterly --email admin@example.com

User Access Review¶

Review privileges: - Disable former employees - Adjust access levels - Remove unused accounts - Verify 2FA enabled

Whitelist/Blacklist Review¶

Clean up entries:

# Remove expired
sudo mb-whitelist remove --expired
sudo mb-blacklist remove --expired

# Remove inactive (no matches in 90 days)
sudo mb-whitelist remove --inactive 90
sudo mb-blacklist remove --inactive 90

Annual Tasks¶

License Renewal¶

Check license:

sudo mb-license --status

Renew before expiration.

Major Version Updates¶

Plan upgrade: - Read changelog - Test in staging - Schedule maintenance window - Backup everything - Perform upgrade

Security Audit¶

Comprehensive review: - Password policies - User access levels - SSL/TLS configuration - Firewall rules - Backup encryption

Documentation Review¶

Update documentation: - Configuration changes - New procedures - Contact information - Emergency procedures

Automated Maintenance¶

Enable Auto-Maintenance¶

Configure:

sudo mb-config set maintenance.auto_enabled true
sudo mb-config set maintenance.schedule "daily 03:00"

Tasks automated: - Database cleanup - Log rotation - Quarantine cleanup - Signature updates

Monitor Auto-Maintenance¶

Check last run:

sudo mb-cron history | grep maintenance

Review results:

sudo tail -f /var/log/mailborder/mb-cron.log

Maintenance Windows¶

Schedule Downtime¶

For major tasks:

Notify users (24h advance notice)
Stop accepting mail temporarily
Perform maintenance
Verify functionality
Resume operations

Emergency Maintenance¶

Unplanned downtime:

Document issue
Notify stakeholders
Fix problem
Post-mortem review

Maintenance Checklist¶

Print and use:

Daily Checklist:
□ Run mb-status
□ Check queue depth
□ Review error logs
□ Check disk space

Weekly Checklist:
□ Review quarantine
□ Update signatures
□ Check backups
□ Review statistics

Monthly Checklist:
□ Optimize database
□ Review security logs
□ Check SSL cert
□ System updates
□ Configuration backup

Quarterly Checklist:
□ Full system audit
□ User access review
□ Generate report
□ Clean up lists

Annual Checklist:
□ License renewal
□ Major updates
□ Security audit
□ Documentation review