amorfo77/mailcow-dockerized
1
0
Fork 0
mirror of https://github.com/mailcow/mailcow-dockerized.git synced 2026-08-18 21:13:18 +00:00
Code Issues Projects Releases Wiki Activity
7,663 Commits 37 Branches 93 Tags
6b9d8757735bc70f8475e9c07d23ef4de8f5f051
Commit Graph
40 Commits
Author SHA1 Message Date
FreddleSpl0itandGitHub 6b9d875773 Merge pull request #7347 from smpaz7467/fix/dns-zonefile-absolute-rhs 
[Web] use absolute RHS names in generated DNS zonefile
 2026-08-18 14:30:50 +02:00
FreddleSpl0it 91d3b7246a [Web] Minor hardening across web UI and nginx 2026-08-18 09:08:17 +02:00
Stephen RitzandClaude Opus 4.8 e5d0ed8c4c [Web] use absolute RHS names in generated DNS zonefile 
The DNS overview "Download" produces a $ORIGIN zonefile, but the
right-hand side of MX, CNAME and SRV records was emitted as a relative
name. A target such as mail.example.net is then read relative to the
origin and expands to mail.example.net.example.org., which is wrong.

The only prior attempt at making names absolute was
str_replace($domain, $domain . '.', ...), which appended a dot only to
targets that happened to contain the origin domain, so cross-domain
targets stayed relative. That same replace also corrupted any TXT value
containing the origin (e.g. a DMARC rua=mailto:x@example.org became
...@example.org.).

Absolutize the RHS per record type at export time only: MX and CNAME
targets, and the SRV target token, get a trailing dot; ports, the SRV
root target ".", IP addresses and TXT character strings are left as is.
The records used for the on-page DNS validation are untouched, so
matching against dns_get_record() output still works.

Fixes #6984

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
 2026-07-14 16:33:46 -07:00
CopilotGitHubDerLinkmancopilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>DerLinkman
 		038b2efb75 Add MTA-STS support for alias domains (#6972) 
* Initial plan

* Add MTA-STS support for alias domains

Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com>

* Improve domain normalization and code style in mta-sts.php

Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com>

* Add error handling for idn_to_ascii in mta-sts.php

Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com>

* Add database error handling for alias domain query

Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com>

* Add ACME certificate support for MTA-STS on alias domains

Query alias_domain table to find aliases with MTA-STS enabled target domains and request certificates for mta-sts.<alias-domain> subdomains.

Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com>

* compose: bump image tag to 1.95

* Add MTA-STS DNS records display for alias domains in UI

When viewing an alias domain's DNS diagnostics, check if the target domain has MTA-STS enabled and display the required DNS records for the alias domain.

Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: DerLinkman <62480600+DerLinkman@users.noreply.github.com>
Co-authored-by: DerLinkman <niklas.meyer@servercow.de>
 2025-12-15 16:29:21 +01:00
DerLinkmanGitHubFreddleSpl0it
 		c39712af67 pf/php: add mta-sts support (outbound) (#6686) 
* added mta-sts-resolver into postfix config + daemon

* [Web] Add MTA-STS support

* [Web] Fix mta-sts server_name

* updated .gitignore

* [ACME] fetch cert for mta-sts subdomain

* [Web] change MTA-STS id to human-readable timestamp

* [Web] Remove MTA-STS version STSv2

* [Web] Fix MTA-STS DNS check

* [Web] add max_age limit for MTA-STS policy

* Added tooltips and info texts to mta-sts webui page

* postfix: replace mta-sts-resolver with postfix-tlspol

---------

Co-authored-by: FreddleSpl0it <75116288+FreddleSpl0it@users.noreply.github.com>
 2025-08-26 09:57:05 +02:00
FreddleSpl0it 18444bd284 [BS5] fix minor issues 2022-06-28 07:21:26 +02:00
andryyy 50c90badb0 [Web] Cast all DNS check results to arrays 2021-08-21 15:47:17 +02:00
andryyy 2cd0b56b14 [Web] Various PHP 8 fixes, partly fixes #4219 2021-08-09 08:28:22 +02:00
Kristian FeldsamandGitHub f73ac284e5 [Web] Improve responsive design (#4171) 
Complete styling for mobile devices

Signed-off-by: Kristian Feldsam <feldsam@gmail.com>
 2021-07-09 08:21:09 +02:00
Kristian FeldsamandGitHub 9c6995c82d [web] dns diag spf record syntax link updated (#4175) 
Added old one on new domain name

Signed-off-by: Kristian Feldsam <feldsam@gmail.com>
 2021-07-07 06:40:37 +02:00
andryyy 8b08d09ca2 [Web] Remove XMPP options 
[Web] Add Rspamd preset #4
[Web] Do not show failed SASL logins (and also remove them from db)
 2021-06-30 10:13:29 +02:00
andryyy 9c075af2d9 [Web] Bye Glyphicons, hello BS5 icons\!; [Web] Change font to Noto for better compatibility; 2021-05-22 12:13:37 +02:00
andryyy 5809e5b82e [mailcow] Fix C22 -> C2S 2021-02-12 11:22:43 +01:00
andryyy 06c89bac7d [Web] Implement XMPP 
[Web] Various small fixes and enhancements
 2021-02-11 09:34:21 +01:00
André PetersandGitHub 107e619893 Update dns_diagnostics.php 2020-08-13 14:09:13 +02:00
andryyy 1c8cca8187 [Web] MAILCOW_HOSTNAME should not be a CNAME 2020-08-13 10:45:44 +02:00
andryyy 4a8edd5b88 [Web] Fix download link for dns zone file 2020-08-07 22:13:03 +02:00
Michael KuronandGitHub bae250cc81 DNS: add link for downloading zonefile (#3633) 
* DNS: add link for downloading zonefile

* DNS zonefile: add placeholders for optional entries
 2020-07-12 09:39:39 +02:00
andryyy a6af7cbc2e [Web] Expand IPv6 addresses for better comparison 2020-05-26 20:04:22 +02:00
andryyy b6933fdb96 [Web] Improve SPF checks 2020-05-25 16:13:51 +02:00
Marcel KnorrGitHubMarcel Knorr
 		24e8a798c8 [Web] Fixed DKIM regex to allow arguments after the public key (#3462) 
Co-authored-by: Marcel Knorr <marcel.knorr@mk-soft.net>
 2020-04-09 22:21:17 +02:00
ntimo cb9ab928b3 [Web] Replaced die(); with exit(); due to code conventions 2019-10-04 08:40:24 +02:00
andryyy 59798357f7 [Web] Fix SPF link 2019-06-16 16:00:14 +02:00
Michael KuronandGitHub 1bb618d563 Update dns_diagnostics.php 2018-10-15 20:53:41 +02:00
Tobias "Knight" SandGitHub 3522f3e83f kitterman.com redirects to TLS by default 
curl -I http://www.kitterman.com/dmarc/assistant.html
HTTP/1.1 302 Found
Date: Sun, 05 Aug 2018 02:53:18 GMT
Server: Apache/2.4.34
Location: https://www.kitterman.com/dmarc/assistant.html
Content-Type: text/html; charset=iso-8859-1
 2018-08-05 04:54:09 +02:00
André 76c747041d [Web] DNS check: only look for v=dkim1, k=rsa and p=key 2018-07-25 00:54:37 +02:00
andre.peters 520bc6950f [Web] Fixes TLSA for self-signed certs, closes #997 2018-02-03 19:14:14 +01:00
andre.peters 3feabe00a2 [Web] Fixes TLSA for self-signed certs, closes #997 2018-02-03 19:13:15 +01:00
andre.peters 7fd6a1260c [Web] Remove 'allow ip' 2018-01-16 12:43:09 +01:00
andre.peters dca9ae4a34 [Web] Remove 'allow ip' 2018-01-16 12:42:46 +01:00
andre.peters c227675262 [Web] Remove 'allow ip' 2018-01-16 12:41:30 +01:00
André PetersandGitHub f1f7749b85 Update dns_diagnostics.php 
Sprintf makes multi-lang easier.
Fix indents
 2018-01-16 09:33:39 +01:00
Kristián Feldsam 2a8bdc8dea DNS Diagnostics - Ehnaced SPF record check 
Signed-off-by: Kristián Feldsam <feldsam@gmail.com>
 2018-01-16 00:07:25 +01:00
Kristián Feldsam 9f258df883 DNS Diagnostics - Allow for domain administrator 
Signed-off-by: Kristián Feldsam <feldsam@gmail.com>
 2018-01-16 00:07:19 +01:00
André PetersandGitHub 74bd635505 Update dns_diagnostics.php 
Oops, forgot 2 vars.
 2018-01-03 21:00:29 +01:00
André PetersandGitHub 2b93ad62b5 Merge branch 'dev' into dns 2018-01-03 20:52:33 +01:00
andre.peters 7a54b5cb67 [Web] Some minor fixes/changes to DNS diagnostics 2018-01-03 20:49:38 +01:00
Michael Kuron 0a4424f251 Merge remote-tracking branch 'upstream/dev' into dns 2018-01-03 12:38:24 +01:00
andre.peters 34b7ab7104 [Web] Add DNS diagnostics as modal, some minor fixes, todo: Detect IPv4/6 by multiple sources and random selection 2018-01-02 18:17:27 +01:00
andre.peters d76d103c76 [Web] Move DNS diagnostic to modal, some minor fixes 2018-01-02 10:24:48 +01:00