Mail-in-a-Box v0.04 Release Notes

Release Date: 2014-10-15 // over 9 years ago
  • ๐Ÿ’ฅ Breaking changes:

    • On-disk backups are now retained for a minimum of 3 days instead of 14. Beyond that the user is responsible for making off-site copies.
    • ๐Ÿ‘ IMAP no longer supports the legacy SSLv3 protocol. SSLv3 is now known to be insecure. I don't believe any modern devices will be affected by this. HTTPS and SMTP submission already had SSLv3 disabled.

    Control panel:

    • The control panel has a new page for installing SSL certificates.
    • The control panel has a new page for hosting static websites.
    • The control panel now shows mailbox sizes on disk.
    • It is now possible to create catch-all aliases from the control panel.
    • Many usability improvements in the control panel.

    DNS:

    • Custom DNS A/AAAA records on subdomains were ignored.
    • It is now possible to set up a secondary DNS server.
    • โšก๏ธ DNS zones were updating even when nothing changed.
    • Strict SPF and DMARC settings are now set on all subdomains not used for mail.

    ๐Ÿ”’ Security:

    • ๐Ÿ‘ DNSSEC is now supported for the .email TLD which required a different key algorithm.
    • Nginx and Postfix now use 2048 bits of DH parameters instead of 1024.

    Other:

    • Spam filter learning by dragging mail in and out of the Spam folder should hopefully be working now.
    • Some things were broken if the machine had an IPv6 address.
    • Other things were broken if the machine was on a non-utf8 locale.
    • No longer implementing webfinger.
    • โœ‚ Removes apache before installing nginx, in case it has been installed by distro.