FreddleSpl0it
f47dc41e8e
Merge branch 'staging' into nightly
2026-11-10 23:09:22 +01:00
FreddleSpl0it
e3a90718c2
Merge pull request #7516 from wbilalz400/fix/webauthn-forced-enrollment-empty-credential
...
[Web] Fix forced WebAuthn TFA enrollment storing an empty credential
2026-11-10 15:21:30 +01:00
FreddleSpl0it
4ced82d554
Merge pull request #7548 from junkerderprovinz/fix/idp-ignore-ssl-error-key
...
[Web] Fix ignore_ssl_error key in identity provider settings
2026-11-10 13:55:15 +01:00
FreddleSpl0it
37d304d075
Merge pull request #7544 from jorgeavlobo/fix/keycloak-admin-token-introspect
...
[Web] Keycloak: skip introspection of an expired admin token and reuse the new one
2026-11-10 01:45:16 +01:00
FreddleSpl0it
b21acd4787
Merge pull request #7637 from mailcow/fix/7557
...
[Web] Domain admins saw sender aliases of other domains
2026-11-10 01:02:39 +01:00
FreddleSpl0it
4ab954dcd1
[Web] Domain admins: show sender ACL and alias entries of their own domains only
2026-11-10 01:01:22 +01:00
FreddleSpl0it
867b9dddab
Merge pull request #7634 from mailcow/fix/7503
...
[Web] Keycloak: accept Base64-encoded mailcow_password
2026-11-09 23:30:20 +01:00
FreddleSpl0it
a4326e6642
[Web] Keycloak Mailpassword Flow: accept Base64-encoded password hashes
2026-11-09 23:28:53 +01:00
FreddleSpl0it
c5e89a9e03
Merge pull request #7633 from mailcow/fix/7501
...
[Web] Forwarding hosts: store IPv6 addresses in canonical form
2026-11-09 23:25:40 +01:00
FreddleSpl0it
45d31b3279
[Web] Forwarding hosts: store IPv6 addresses in canonical form
2026-11-09 23:24:39 +01:00
FreddleSpl0it
f810cecd3a
Merge pull request #7630 from mailcow/fix/7476
...
[Web] force_tfa did not prevent removing 2FA
2026-11-09 23:14:38 +01:00
FreddleSpl0it
cfad223824
[Web] force_tfa: read the flag with JSON_VALUE
2026-11-09 23:13:26 +01:00
FreddleSpl0it
1911847c3b
Merge pull request #7625 from mailcow/fix/6931
...
[Web] Update "Last modified" when tags of a domain or mailbox change
2026-11-09 22:48:21 +01:00
FreddleSpl0it
497872080b
[Web] Update "Last modified" when tags of a domain or mailbox change
2026-11-09 22:46:15 +01:00
FreddleSpl0it
e0640949a2
[Web][Dovecot] Show the last SOGo login in the mailbox list and API
2026-11-09 22:39:42 +01:00
FreddleSpl0it
aededa7ade
Merge branch 'feat/backup' into nightly
2026-11-09 15:50:43 +01:00
FreddleSpl0it
caca501611
[Web] Backup: no changes in demo mode
2026-11-09 15:49:48 +01:00
FreddleSpl0it
d475d1c593
Merge branch 'feat/backup' into nightly
2026-11-09 15:44:47 +01:00
FreddleSpl0it
b881e18b8e
[Web][Restic][Dovecot] Backup: safer restic.sh restores, access check first, own aliases and sync sources kept, runner fixes
2026-11-09 15:22:34 +01:00
FreddleSpl0it
9d44eeadcb
Merge branch 'feat/retention' into nightly
2026-11-09 12:38:18 +01:00
FreddleSpl0it
52d82569a7
Merge pull request #7618 from mailcow/feat/mail-policy
...
[Web] Mail policies, groups: check domain access first
2026-11-09 12:24:46 +01:00
FreddleSpl0it
03ce9fe879
[Web] Mail policies, groups: check domain access first
2026-11-09 12:19:07 +01:00
FreddleSpl0it
6796db6b8f
[Web] Retention: last run for single rules, mode only when editing, check domain access first
2026-11-09 12:09:57 +01:00
FreddleSpl0it
2afb03dd6a
Merge branch 'feat/mail-policy' into nightly
2026-11-09 03:16:30 +01:00
FreddleSpl0it
c304040140
[Web] Mail policies: store list entries the way they are compared, refuse unknown modes
2026-11-09 03:06:19 +01:00
FreddleSpl0it
c48691fca7
[Web][Rspamd] Keep the global archive switch in Redis only
2026-11-09 01:09:43 +01:00
FreddleSpl0it
2fc6868b72
[Web] Archive setting of a mailbox: accept true and false
2026-11-09 01:05:16 +01:00
FreddleSpl0it
6cf0390d58
[Web][Restic][Dovecot][Dockerapi] Add restic backups with restore in the UI
...
- Scheduled, encrypted backups to S3, SFTP, REST or a local folder (new restic-mailcow container)
- Restore of mailboxes and whole domains in the UI, also deleted ones, for admins and domain admins
- Scope set by RESTIC_BACKUP_MODE in mailcow.conf (all, data, config)
- Optional backup before updates (update.sh), helper-scripts/restic.sh for a full restore
2026-11-08 22:56:27 +01:00
FreddleSpl0it
a64ee13670
[Web][Dovecot] Add retention rules: nightly deletion of mail by folder and age for domains, groups and mailboxes
2026-11-07 21:23:13 +01:00
FreddleSpl0it
46c9ec90b0
[Web][Postfix][Dovecot] Mail policies: compare addresses like Postfix, close bypasses via alias forms, temporary aliases, Sieve and cross-domain groups
2026-11-07 17:51:27 +01:00
FreddleSpl0it
4484cfcd42
[Web][Postfix] Add mail policies: per-recipient send/receive rules for mailboxes and groups
2026-11-07 15:55:43 +01:00
FreddleSpl0it
1c24de19c3
[Web] Archive settings, domain and mailbox switches, archive log and API
2026-11-07 00:45:11 +01:00
FreddleSpl0it
fb85a9eb5c
[Postfix][Rspamd] Send archive copies as SMTP journal through Postfix
2026-11-07 00:27:42 +01:00
FreddleSpl0it
2ac2edf0ad
[Web] Add archive module classes
2026-11-07 00:15:08 +01:00
FreddleSpl0it
6a83b9e0f0
[Web] Mailbox protocols do not limit app passwords
2026-11-05 12:46:22 +01:00
FreddleSpl0it
e8f12cd061
[Web] Add Netfilter unban all button
2026-11-04 22:23:16 +01:00
FreddleSpl0it
52f28025a5
[Web][Dovecot] imapsync: Block skipmess in custom params
2026-11-04 12:02:18 +01:00
FreddleSpl0it
3c03f8e567
Merge branch 'fix/sec' into fix/rework-bugs
2026-11-04 11:46:47 +01:00
FreddleSpl0it
9293e4ce43
[Web][Dovecot] Do not count denied logins as failed logins
2026-11-04 10:39:32 +01:00
FreddleSpl0it
a8d1121f0e
[Dovecot][Web] imapsync: verify certificates against the source host, make the check optional per source
2026-11-03 09:31:16 +01:00
FreddleSpl0it
a4b60ae26f
[Netfilter][Dovecot] Count failed master logins, log the client address of successful logins
2026-11-02 14:55:42 +01:00
FreddleSpl0it
7c73199bde
[Web] Groups: limit changes of domain admins to their domains
2026-11-02 10:01:43 +01:00
FreddleSpl0it
5eb3148bd5
[Web] OIDC/LDAP: check the OAuth state, keep the mailbox on token refresh, require unique IdP users
2026-11-02 09:54:54 +01:00
FreddleSpl0it
41467dc47f
[Web] imapsync: change the server of a sync source only with access to all its sync jobs
2026-11-02 09:50:24 +01:00
FreddleSpl0it
a1cbd51d70
[Dovecot][Web] imapsync: restrict custom parameters and source hosts, verify certificates
2026-11-02 09:49:03 +01:00
FreddleSpl0it
510674ee67
[Web] Pending account setup adjustments
2026-10-28 17:11:25 +01:00
FreddleSpl0it
9eb3a79f3b
[Web] Quarantine list adjustments
2026-10-28 16:16:00 +01:00
FreddleSpl0it
d5e3de3ae8
[Web] Add TFA Ratelimit
2026-10-28 16:04:45 +01:00
FreddleSpl0it
44429fa0d0
[Web] App password and API adjustments
2026-10-28 15:29:55 +01:00
FreddleSpl0it
4dd7aead73
[Web] Store PKCE data of OAuth2 authorization codes
2026-10-28 11:57:46 +01:00
FreddleSpl0it