Commit Graph

415 Commits

Author SHA1 Message Date
Maurus Decimus 088f0c81ac Fix MTA: Queue strategy and quota expressions that branch on source never match at enqueue 2026-08-16 17:24:22 +02:00
Maurus Decimus ccceff541f IDN fixes 2026-08-16 15:12:43 +02:00
Maurus Decimus 3c00a73a87 Fix MTA: DSN bounces are emitted with a malformed Message-ID wrapped in doubled angle brackets 2026-08-16 11:38:55 +02:00
Maurus Decimus d104d7a3cf Fix Sieve: include statements fail to find system and user global scripts whose name contains uppercase characters 2026-08-16 11:23:37 +02:00
Maurus Decimus 73d27006e1 HTTP: Shared reqwest clients 2026-08-14 18:24:55 +02:00
Maurus Decimus ec86180c0f MTA queue and RocksDB improvements 2026-08-13 18:58:29 +02:00
Maurus Decimus d2d16a0186 Reporting: inboundReportMaxSize setting, which bounds the size of a decompressed inbound DMARC or TLS report 2026-08-12 16:37:16 +02:00
Maurus Decimus 2c28b5a536 Fix MTA: FUTURERELEASE HOLDUNTIL uses Unix timestamps instead of RFC 3339 date-times 2026-08-10 12:19:45 +02:00
Maurus Decimus 5a35d7e211 Fix MTA: DSN delivery date uses wrong timestamp 2026-08-09 08:32:51 +02:00
Maurus Decimus e1b8bd1f66 Fix MTA: Certificates for domains publishing an enforcing MTA-STS policy are always validated, even in the fallback TLS strategy 2026-08-09 08:21:04 +02:00
Maurus Decimus 436deaf592 Fix CardDAV: Accept: text/vcard version negotiation is ignored whenever another parameter such as q or charset follows version= 2026-08-08 20:02:07 +02:00
Maurus Decimus 61df5a1857 Bump dependencies 2026-08-03 18:11:26 +02:00
Maurus Decimus 8fdd639f62 Fix Recovery mode: Download WebUI if missing 2026-08-02 16:40:30 +02:00
Maurus Decimus 1bd4ddd73d Fix MTA: BDAT chunks sent without a valid MAIL FROM are answered with 552 5.3.4 Message too big for system instead of 503 5.5.1 2026-08-02 16:19:03 +02:00
Maurus Decimus 87f3fc06e2 Fix DMARC: Failure reports state Identity-Alignment: none when a mechanism authenticated successfully but against an identity that is not aligned with the From domain 2026-08-02 15:01:44 +02:00
Maurus Decimus efee3ec15b MTA: Allow System Sieve scripts to access orcpt during the DATA stage 2026-08-02 11:44:11 +02:00
Maurus Decimus 092c3217e4 JMAP Email Delivery Push Notifications 2026-07-29 18:41:21 +02:00
Maurus Decimus aa9f47cdb6 Fix Auth: Scoped credentials with SysApiKeyCreate or SysApiKeyUpdate permissions can regain its own accounts full rights 2026-07-23 15:49:30 +02:00
Maurus Decimus 425d034ae7 Use of Voluntary Application Server Identification (VAPID) in JMAP Web Push 2026-07-20 13:55:00 +02:00
Maurus Decimus 3cc348726b Fix MTA: queue_name variable not available in rate limiter expressions 2026-07-19 23:09:31 +02:00
Maurus Decimus f967132971 Fix MTA: DMARC is skipped when MAIL FROM SPF is unavailable 2026-07-19 15:44:06 +02:00
Maurus Decimus 6fb4d2b628 IMAP: Mailbox object-quota only enforced in JMAP 2026-07-19 07:52:31 +02:00
Maurus Decimus 0f6fb0c321 Fix MTA: Resume queue processing does not work 2026-07-12 15:51:37 +02:00
Maurus Decimus 2543ec7067 Bump dependencies 2026-07-12 11:39:02 +02:00
Maurus Decimus d368b53ca1 DMARCbis implementation 2026-07-05 16:34:57 +02:00
Maurus Decimus fb993f0cc1 Cluster: Broadcast MTA queue refresh events to all nodes 2026-07-05 12:05:46 +02:00
Maurus Decimus 94b33187a0 DKIM2 tests 2026-07-03 20:07:37 +02:00
Maurus Decimus c5796b4e7a DKIMv2 signing 2026-07-03 16:51:57 +02:00
Maurus Decimus 186d9feecb DKIM2 verification 2026-07-01 16:20:02 +02:00
Maurus Decimus e3c6f95bfd Bump to mail-auth 0.11 2026-06-30 11:53:55 +02:00
Maurus Decimus 0eb08b9fb3 Fix DANE: Treat DNSSEC bogus as a temporary failures to prevent downgrade attacks 2026-06-25 19:24:10 +02:00
Maurus Decimus 93b3b70616 Redis Sentinel support as an in-memory store and cluster coordinator backend (closes #2430) 2026-06-25 10:26:23 +02:00
Maurus Decimus df164e07c8 DANE: Verify DNSSEC is supported by the resolver before attempting to validate TLSA records 2026-06-22 23:13:45 +02:00
Maurus Decimus 94bea19f01 DANE: Improper TLSA record validation (#2328 - credits to @vdukhovni) 2026-06-21 15:23:53 +02:00
Maurus Decimus 0958d97925 International Domain Names (IDN) support (closes #207) 2026-06-20 09:02:26 +02:00
Maurus Decimus ad47f03f48 DANE: Improper TLSA record validation (fixes #2328) 2026-06-19 17:14:26 +02:00
Maurus Decimus 3f2c5632b8 Fix OIDC: Add default domain name to groups that are not email addresses 2026-06-16 21:51:48 +02:00
Maurus Decimus 2cb765ed37 Fix CardDAV: Version requests included in address-data are ignored 2026-06-15 12:57:37 +02:00
Maurus Decimus e559cf5ab5 Fix MTA: Re-scheduling or editing a queued message reports success but persists nothing for recipients in a non-default virtual queue 2026-06-15 12:20:49 +02:00
Maurus Decimus 33f288d0ea Fix JMAP: */changes methods leak ids of non-shared objects 2026-06-10 13:51:36 +02:00
Maurus Decimus 838a839290 OAuth: Rework access tokens to an AES-256-GCM-SIV AEAD format that carries the account name for proxy routing and revokes tokens on credential change 2026-06-03 18:14:48 +02:00
Maurus Decimus 1fb87eda64 MTA: Implement spamtest in trusted Sieve scripts 2026-05-26 21:08:06 +02:00
Maurus Decimus dc4191a542 Fix MTA: Expand lists and resolve catch-all addresses when building autogenerated messages 2026-05-26 19:07:33 +02:00
Maurus Decimus e7f532ec6d Fix MTA: Always update next DSN notify times 2026-05-25 15:54:40 +02:00
Maurus Decimus 777cf1252b RateLimit header fields for HTTP 2026-05-23 11:41:43 +02:00
Maurus Decimus 08b02c9e91 MTA: Log when messages are rejected or discarded by the spam classifier. 2026-05-19 19:06:54 +02:00
Maurus Decimus 628d5520f6 Fix LDAP: Synchronize accounts when expanding mailing list recipients 2026-05-19 18:01:54 +02:00
Maurus Decimus f048e0f0bb Sieve: Allow User Sieve scripts to access orcpt 2026-05-19 17:40:45 +02:00
Maurus Decimus 415036dd64 Fix DAV: acl-principal-prop-set REPORT enforced the wrong privilege 2026-05-12 15:47:32 +02:00
Maurus Decimus bdba3f20e1 v0.16.5 2026-05-11 17:14:26 +02:00