Useful Links

1. Diff to last release: v13.2.0...v13.3.0
2. Our Changelog

What's Changed

The main feature that can be found in this release is added very simple OAUTH2 support. DMS now supports authentication via OAuth2 (via XOAUTH2 or OAUTHBEARER SASL mechanisms) from capable services (like Roundcube). This does not replace the need for an ACCOUNT_PROVISIONER (FILE / LDAP), which is required for an account to receive or send mail.

Additionally, MTA-STS support for outbound mail was added to DMS. A bunch of smaller changes have made it into this release as well: Rspamd symbol scores for SPF, DKIM & DMARC have been adjusted to better align with RFC7489; smtputf8 has been disabled directly; scripts were improved (replacing wc -l with grep -c, etc.); and a bug fix for jaq on arm64 was added.

As is usual business, we worked on improving the documentation. Last but not least, the test suite saw bigger changes in the area of helper functions used during tests to send test e-mails.

Merged Pull Requests

• Rspamd: add custom symbol scores for SPF, DKIM & DMARC by @georglauterbach in #3726
• chore: Disable smtputf8 support in config directly by @polarathene in #3750
• tests: Replace wc -l with grep -c by @casperklein in #3752
• ci: .gitattributes - Ensure eol=lf for shell scripts by @polarathene in #3755
• docs: SpamAssassin ENV docs refactor by @polarathene in #3756
• Fix jaq: Download platform specific binary by @casperklein in #3766
• tests: normalizations by @georglauterbach in #3747
• feat: Auth - OAuth2 (Dovecot PassDB) by @thechubbypanda in #3480
• Tiny #3480 follow up: Add missing ENABLE_OAUTH2 var by @casperklein in #3775
• feat: Add MTA-STS support for outbound mail by @jsonn in #3592
• tests: small adjustments by @georglauterbach in #3772
• fix: Revert quoting SA_SPAM_SUBJECT in mailserver.env by @polarathene in #3767
• docs: Rspamd DKIM config simplify via path setting by @denisix in #3702
• fix: Ensure .svbin files are newer than .sieve source files by @polarathene in #3779
• docs: misc improvements by @georglauterbach in #3773
• chore: Add maintenance comment for sed usage by @polarathene in #3789
• tests: Revise process_check_restart.bats by @polarathene in #3780
• fix: Ensure setup dkim generates DKIM keys with ownership matching the parent directory by @ap-wtioit in #3783
• docs: Guidance for binding outbound SMTP with multiple interfaces available by @norrs in #3465
• docs: Add maintenance comment for main.cf:reject_unknown_sender_domain by @polarathene in #3793
• tests: Revise OAuth2 tests by @polarathene in #3795
• release: v13.3 by @georglauterbach in #3781

New Contributors

• @thechubbypanda made their first contribution in #3480
• @denisix made their first contribution in #3702
• @norrs made their first contribution in #3465