Skip to content

v13.0.0

Choose a tag to compare

View all tags
@georglauterbach georglauterbach released this 26 Nov 15:31
· 401 commits to master since this release
v13.0.0
b663e10
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Verified
Learn about vigilant mode.

Please refer to the CHANGELOG to get the complete and comprehensive overview of this release. Here is the full git-diff: v12.1.0...v13.0.0.

Summary

v13.0.0 contains a lot of changes! In fact, we never had more pull requests in a single release before 🚀 Thus, please read the following changes thoroughly!

Breaking Changes

LDAP

The environment variables LDAP_SERVER_HOST, DOVECOT_URIS, and SASLAUTHD_LDAP_SERVER will now log an error if the LDAP URI scheme is missing. Previously, there was an implicit fallback to ldap:// (see #3522).

Moreover, ENABLE_LDAP=1 is no longer supported. Please use ACCOUNT_PROVISIONER=LDAP.

Rspamd

The deprecated path for the Rspamd custom commands file (/tmp/docker-mailserver/rspamd-modules.conf) now prevents successful startup. The correct path is /tmp/docker-mailserver/rspamd/custom-commands.conf.

Dovecot

Dovecot mail storage per account in /var/mail previously shared the same path for the accounts home directory (#3335). The home directory now is a subdirectory home/. This change better supports sieve scripts. You will need to manually move (manageseive) Sieve scripts from <SERVER>/<ACCOUNT>/sieve to <SERVER>/<ACCOUNT>/home/sieve and re-enable them with managesieve. This change has not been implemented yet with ACCOUNT_PROVISIONER=LDAP.

Postfix

/etc/postfix/master.cf has renamed the "smtps" service to "submissions" (#3235).

  • This is the modern /etc/services name for port 465, aligning with the similar "submission" port 587.
  • If you have configured Proxy Protocol support with a reverse proxy via postfix-master.cf (as per our docs guide), you will want to update smtps to submissions there.

Postfix now defaults to supporting DSNs (Delivery Status Notifications) only for authenticated users (via ports 465 + 587). This is a security measure to reduce spammer abuse of your DMS instance as a backscatter source. (#3572). If you need to modify this change, please let us know by opening an issue / discussion. You can opt out (enable DSNs) via the postfix-main.cf override support using the contents: smtpd_discard_ehlo_keywords =. Likewise for authenticated users, the submission(s) ports (465 + 587) are configured internally via master.cf to keep DSNs enabled (since authentication protects from abuse). If necessary, DSNs for authenticated users can be disabled via the postfix-master.cf override with the following contents:

submission/inet/smtpd_discard_ehlo_keywords=silent-discard,dsn
submissions/inet/smtpd_discard_ehlo_keywords=silent-discard,dsn

Miscellaneous

This section only contains the most important updates; for a full list, consult our CHANGELOG.

  • The default DKIM key size was changed to 2048.
  • Getmail was added as an alternative to Fetchmail.
  • New environment variables were added: MARK_SPAM_AS_READ, DMS_VMAIL_UID/DMS_VMAIL_GID, and RSPAMD_CHECK_AUTHENTICATED.

Our documentation was updated heavily across many pages; especially the debugging section should be much more helpful now.

Rspamd saw many adjustments as well:

  • The configuration of the anti-virus engines (for ClamAV) was updated
  • Ham is now learned in a better way
  • logrotate was implemented for Rspamd logs
  • The default config location for DKIM was changed to be preserved in a volume now, internal symlinks were removed in favor of simplicity, DKIM key permissions are now verified.

Merged Pull Requests

New Contributors

Contributors

felixn, jsonn, and 22 other contributors
Assets 2
Loading