FreddleSpl0it
f47dc41e8e
Merge branch 'staging' into nightly
2026-11-10 23:09:22 +01:00
FreddleSpl0it
04c9413ed9
[Rspamd] Remove the URLhaus and MalwareBazaar maps retired by abuse.ch
2026-11-10 13:50:48 +01:00
FreddleSpl0it
7a3f1cbd41
Merge pull request #7530 from ThxGiving/fix/eas-auth-challenge
...
[Nginx] Send Basic auth challenge for unauthenticated ActiveSync requests
2026-11-10 01:39:28 +01:00
FreddleSpl0it
616717bc0d
Merge pull request #7639 from mailcow/fix/7580
...
[Rspamd] Remove MX check overrides that rspamd ignores
2026-11-10 01:28:42 +01:00
FreddleSpl0it
6fd271ee64
[Rspamd] Remove MX check overrides that rspamd ignores
2026-11-10 01:27:52 +01:00
FreddleSpl0it
eefc17274e
Merge pull request #7636 from mailcow/fix/7545
...
[Rspamd] WHITELISTED_FWD_HOST was skipped at the reject threshold
2026-11-10 00:57:45 +01:00
FreddleSpl0it
4878840bdd
[Rspamd] Forwarding hosts: check them as prefilter and scan the mail completely
2026-11-10 00:56:53 +01:00
FreddleSpl0it
869bcb3c42
Merge pull request #7635 from mailcow/fix/7518
...
[Rspamd] Domain footer broke DKIM for mail without Content-Transfer-Encoding
2026-11-09 23:36:42 +01:00
FreddleSpl0it
0bcde13500
[Rspamd] Domain footer: add the Content-Transfer-Encoding header to the delivered mail
2026-11-09 23:34:57 +01:00
FreddleSpl0it
24780ea5fb
Merge pull request #7632 from mailcow/fix/7489
...
[Rspamd] Quarantine stored nothing without Q_EXCLUDE_DOMAINS
2026-11-09 23:22:11 +01:00
FreddleSpl0it
38b031e10c
[Rspamd] Quarantine: store mail when Q_EXCLUDE_DOMAINS is not set
2026-11-09 23:21:14 +01:00
FreddleSpl0it
6d20463acb
Merge pull request #7629 from mailcow/fix/7454
...
[Nginx] Edit and quarantine links: allow a trailing slash
2026-11-09 23:09:05 +01:00
FreddleSpl0it
1a42c19050
[Nginx] Accept a trailing slash in /edit and /qhandler links
2026-11-09 23:08:14 +01:00
FreddleSpl0it
7cc8cac705
Merge pull request #7627 from mailcow/fix/7318
...
[Rspamd] Mails between 50 and 100 MiB were deferred forever
2026-11-09 23:01:43 +01:00
FreddleSpl0it
3fd1d017cf
[Rspamd] Raise max_message above the Postfix message size limit
2026-11-09 23:00:38 +01:00
FreddleSpl0it
8597954f91
Merge pull request #7626 from mailcow/fix/7179
...
[Rspamd] Sub-addressing: read the tag from the original SMTP recipient
2026-11-09 22:55:05 +01:00
FreddleSpl0it
2b4ffe8808
[Rspamd] Sub-addressing: read the tag from the original SMTP recipient
2026-11-09 22:53:07 +01:00
FreddleSpl0it
e0640949a2
[Web][Dovecot] Show the last SOGo login in the mailbox list and API
2026-11-09 22:39:42 +01:00
FreddleSpl0it
d475d1c593
Merge branch 'feat/backup' into nightly
2026-11-09 15:44:47 +01:00
FreddleSpl0it
9d44eeadcb
Merge branch 'feat/retention' into nightly
2026-11-09 12:38:18 +01:00
FreddleSpl0it
1238e6fb58
[Dovecot][Nginx] Retention: guard doveadm arguments, larger reports, run as vmail
2026-11-09 12:08:44 +01:00
FreddleSpl0it
2afb03dd6a
Merge branch 'feat/mail-policy' into nightly
2026-11-09 03:16:30 +01:00
FreddleSpl0it
7a1b68c5e2
[Postfix] No mail policy check on the watchdog port 589
2026-11-09 03:04:54 +01:00
FreddleSpl0it
ce2062db5f
[Dovecot] Disable the old Sieve notify extension, it sends as postmaster past the mail policies
2026-11-09 02:52:08 +01:00
FreddleSpl0it
c48691fca7
[Web][Rspamd] Keep the global archive switch in Redis only
2026-11-09 01:09:43 +01:00
FreddleSpl0it
043029137a
[Postfix] Archive copies win over MX-based transports on port 591
2026-11-09 00:56:40 +01:00
FreddleSpl0it
6cf0390d58
[Web][Restic][Dovecot][Dockerapi] Add restic backups with restore in the UI
...
- Scheduled, encrypted backups to S3, SFTP, REST or a local folder (new restic-mailcow container)
- Restore of mailboxes and whole domains in the UI, also deleted ones, for admins and domain admins
- Scope set by RESTIC_BACKUP_MODE in mailcow.conf (all, data, config)
- Optional backup before updates (update.sh), helper-scripts/restic.sh for a full restore
2026-11-08 22:56:27 +01:00
FreddleSpl0it
a64ee13670
[Web][Dovecot] Add retention rules: nightly deletion of mail by folder and age for domains, groups and mailboxes
2026-11-07 21:23:13 +01:00
FreddleSpl0it
46c9ec90b0
[Web][Postfix][Dovecot] Mail policies: compare addresses like Postfix, close bypasses via alias forms, temporary aliases, Sieve and cross-domain groups
2026-11-07 17:51:27 +01:00
FreddleSpl0it
4484cfcd42
[Web][Postfix] Add mail policies: per-recipient send/receive rules for mailboxes and groups
2026-11-07 15:55:43 +01:00
FreddleSpl0it
1c24de19c3
[Web] Archive settings, domain and mailbox switches, archive log and API
2026-11-07 00:45:11 +01:00
FreddleSpl0it
fb85a9eb5c
[Postfix][Rspamd] Send archive copies as SMTP journal through Postfix
2026-11-07 00:27:42 +01:00
FreddleSpl0it
adb1c74ce3
Merge pull request #7589 from mailcow/fix/rework-bugs
...
Fixes for the reworks: imapsync, logins/netfilter, groups, startup, hardening
2026-11-04 16:32:46 +01:00
FreddleSpl0it
3c03f8e567
Merge branch 'fix/sec' into fix/rework-bugs
2026-11-04 11:46:47 +01:00
FreddleSpl0it
9293e4ce43
[Web][Dovecot] Do not count denied logins as failed logins
2026-11-04 10:39:32 +01:00
FreddleSpl0it
a4b60ae26f
[Netfilter][Dovecot] Count failed master logins, log the client address of successful logins
2026-11-02 14:55:42 +01:00
FreddleSpl0it
e96fb24a67
[Nginx][Web] Pass the client address to sogo-auth for EAS/DAV logins
2026-11-02 14:44:09 +01:00
FreddleSpl0it
5c762d9949
[Dovecot][Netfilter] Report failed logins from mailcowauth.php, anchor default rules
2026-11-02 14:11:56 +01:00
milkmaker
1cb0656924
update postscreen_access.cidr ( #7584 )
2026-11-01 21:43:41 +01:00
FreddleSpl0it
a21604cd7b
[Web][Rspamd] Quarantine link adjustments
2026-10-28 17:06:17 +01:00
FreddleSpl0it
4c7e2ec036
[Nginx] Limit request body size, configurable via NGINX_MAX_BODY_SIZE
2026-10-28 16:54:26 +01:00
FreddleSpl0it
085d10118d
[Nginx][Web] Client address and autodiscover adjustments
2026-10-28 16:36:16 +01:00
FreddleSpl0it
e986803980
[Rspamd] Render domain footers without the template engine
2026-10-28 15:50:56 +01:00
FreddleSpl0it
7457fd59aa
[Web][Dovecot] Do not count logins as failed while the identity provider is unavailable
2026-10-27 12:46:24 +01:00
FreddleSpl0it
2c5718c9c9
[Web][Dovecot][SOGo][DockerApi] Add mailbox groups, shared mailboxes and identity provider sync
2026-10-27 10:01:33 +01:00
FreddleSpl0it
7c62a57910
[Web][Dovecot] Rework imapsync: sync sources, OAuth2 (XOAUTH2), worker pool, Python runner
2026-10-22 10:07:52 +02:00
FreddleSpl0it
015fd04a37
[PHP] Update base to Alpine 3.24, build PECL extensions from GitHub
2026-10-21 11:06:14 +02:00
Sebastian Müller
8db3cae826
[Nginx] Send Basic auth challenge for unauthenticated ActiveSync requests
...
Outlook for iOS/Android connects through Microsoft's sync service, which
sends each EAS command without credentials first and only retries with
Basic auth after a 401 + WWW-Authenticate challenge. SOGo answers these
unauthenticated POSTs (Provision, FolderSync, Sync, ...) with 403, so the
Outlook apps never get past Provision and show an empty mailbox (#5846 ).
Answer requests without an Authorization header with a Basic challenge
in nginx before they reach SOGo. Clients that send credentials up front
are not affected.
2026-10-20 20:48:30 +02:00
FreddleSpl0it
ff6329d01b
[Rspamd] Fix CTE and boundary prefix in domain wide footer
2026-10-06 09:41:34 +02:00
Ralf Bergs
e88c734d0a
Fixed typo (changing RESOVLER to RESOLVER).
2026-10-03 12:30:32 +02:00
FreddleSpl0it
milkmaker
Sebastian Müller
Ralf Bergs