1
0
mirror of https://github.com/mail-in-a-box/mailinabox.git synced 2024-12-18 06:37:06 +00:00
mailinabox/setup
Joshua Tauberer 23d2df7a93 v0.11
---------------------

Advisories:
* Users can no longer spoof arbitrary email addresses in outbound mail. When sending mail, the email address configured in your mail client must match the SMTP login username being used, or the email address must be an alias with the SMTP login username listed as one of the alias's targets.
* This update replaces your DKIM signing key with a stronger key. Because of DNS caching/propagation, mail sent within a few hours after this update could be marked as spam by recipients. If you use External DNS, you will need to update your DNS records.
* The box will now install software from a new Mail-in-a-Box PPA on Launchpad.net, where we are distributing two of our own packages: a patched postgrey and dovecot-lucene.

Mail:
* Greylisting will now let some reputable senders pass through immediately.
* Searching mail (via IMAP) will now be much faster using the dovecot lucene full text search plugin.
* Users can no longer spoof arbitrary email addresses in outbound mail (see above).
* Fix for deleting admin@ and postmaster@ addresses.
* Roundcube is updated to version 1.1.2, plugins updated.
* Exchange/ActiveSync autoconfiguration was not working on all devices (e.g. iPhone) because of a case-sensitive URL.
* The DKIM signing key has been increased to 2048 bits, from 1024, replacing the existing key.

Web:
* 'www' subdomains now automatically redirect to their parent domain (but you'll need to install an SSL certificate).
* OCSP no longer uses Google Public DNS.
* The installed PHP version is no longer exposed through HTTP response headers, for better security.

DNS:
* Default IPv6 AAAA records were missing since version 0.09.

Control panel:
* Resetting a user's password now forces them to log in again everywhere.
* Status checks were not working if an ssh server was not installed.
* SSL certificate validation now uses the Python cryptography module in some places where openssl was used.
* There is a new tab to show the installed version of Mail-in-a-Box and to fetch the latest released version.

System:
* The munin system monitoring tool is now installed and accessible at /admin/munin.
* ownCloud updated to version 8.0.4. The ownCloud installation step now is reslient to download problems. The ownCloud configuration file is now stored in STORAGE_ROOT to fix loss of data when moving STORAGE_ROOT to a new machine.
* The setup scripts now run `apt-get update` prior to installing anything to ensure the apt database is in sync with the packages actually available.
2015-06-29 20:58:35 -04:00
..
bootstrap.sh v0.11 2015-06-29 20:58:35 -04:00
csr_country_codes.tsv when asking for a CSR country code, give the user a list 2014-08-21 17:28:04 +00:00
dkim.sh dkim 2048 bits - migration and zone file generation changes 2015-06-25 13:06:29 +00:00
dns.sh add 'ip-transparent: yes' to nsd.conf 2015-05-04 11:24:40 +00:00
firstuser.sh move the user-interactive questions and other parts of start.sh into new files 2014-08-25 08:09:37 -04:00
functions.sh need my new email_validator library during questions 2015-05-03 11:02:23 -04:00
mail-dovecot.sh simplify build/setup of dovecot-lucene package 2015-06-03 15:48:35 -04:00
mail-postfix.sh Merge pull request #427 from pichak/add-sender-login-mismatch 2015-06-24 18:03:03 -04:00
mail-users.sh Merge pull request #427 from pichak/add-sender-login-mismatch 2015-06-24 18:03:03 -04:00
management.sh bump to latest version of my email_validator library 2015-06-23 16:43:35 -04:00
migrate.py dkim 2048 bits - migration and zone file generation changes 2015-06-25 13:06:29 +00:00
munin.sh more work on munin 2015-05-25 17:03:52 +00:00
network-checks.sh prevent apt from asking the user any questions 2015-02-13 13:41:52 +00:00
owncloud.sh Issue #449 2015-06-24 14:06:01 +02:00
preflight.sh preflight memory check: units problems 2015-01-11 14:13:35 +00:00
questions.sh bump to latest version of my email_validator library 2015-06-23 16:43:35 -04:00
spamassassin.sh increase spampd maximum message size from 64KB to 500KB, matching the spamc default 2015-04-09 14:46:02 +00:00
ssl.sh Typo 2015-01-29 17:03:20 +00:00
start.sh Use netcat to check if mailinabox webservice is available 2015-06-18 08:04:46 -04:00
system.sh Use netcat to check if mailinabox webservice is available 2015-06-18 08:04:46 -04:00
web.sh don't expose PHP version in the X-Powered-By header, closes #439, fixes #433 2015-06-18 11:12:03 +00:00
webmail.sh Roundcube 1.1.2 2015-06-17 11:00:15 +00:00
zpush.sh upgrade to ownCloud 8.0.2 2015-03-28 11:08:57 -04:00