MDaemon Server v23.0 Release Notes

MDaemon 23.0.2 - June 27, 2023

SPECIAL CONSIDERATIONS

[26982] Outbreak Protection has been restored. Please review your Outbreak Protection settings, as they may have been reset to their default values.

CHANGES AND NEW FEATURES

MDAEMON SERVER

• [5705] Added an option at Setup | Server Settings | MultiPOP to send a notification email after multiple failures when checking a MultiPOP account. Since temporary failures are not uncommon, there is an option for how many consecutive failures it takes to trigger the notification. There is also an option for how many days to wait between notifications, to avoid sending too many of them. The content and recipients of the notification emails can be customized by editing \MDaemon\App\MPOPFailureNotice.dat. By default the notifications are sent after 5 failures, no more than once every 7 days, to the MultiPOP account owner.

REMOTE ADMINISTRATION (MDRA)

• [26473] Added checkbox to "Exclude trusted IPs from AntiVirus scanning"
• [26434] Added the Do not allow authentication on the SMTP port settings
• [26430] Added an option for the ActiveSync Display Name at Setup | Public Folders | Public Folder Manager | Edit
• [26428] Added four more filter options for the user list. Admins Only, Non-Admins Only, Global Admins Only, and Domain Admins Only
• [26433] Added DQS page at Spam Filter -> Data Query Service

SECURITY

• [26433] Added support for Spamhaus Data Query Service (DQS) at Security | Spam Filter.  For more information on Spamhaus DQS visit https://info.spamhaus.com/getting-started-with-dqs.

WEBMAIL

• [26425] Made the unsnooze option more visible with an orange highlight.

OTHER

• [2157] Content Filter - $LIST_ATTACHMENTS_REMOVED$ can be used in rule action (ex "send note", "add warning...")

FIXES

• [26517] fix to ActiveSync - Meeting invitations may not be sent when a meeting is created using an EAS 16.1 client
• [26855] fix to ActiveSync - Meeting response is not sent when accepting invitation from iOS device using EAS 16.1
• [26842] fix to ActiveSync - Possible crash when there are very many connected clients
• [26826] fix to ActiveSync - Session may not be removed from Connection Monitor after GetItemEstimate command
• [26424] fix to Pro theme - Message list has whitespace at the end of a row
• [26484] fix to Pro theme - Unable to make the message preview bottom smaller (minimum height is 200px, minimum width is 330px)
• [26330] fix to Pro theme - Deleted Items folder is showing the folder list above the Inbox after being remembered
• [26502] fix to Pro theme - An expired Remember Me token may result in a never ending loading screen
• [26573] fix to Content Filter - Messages encrypted by a content filter rule are not DKIM signed
• [25725] fix to Content Filter - "Add attachment" rule causes incorrect MIME structure in email
• [26885] fix to MDRA - AV Updater page shows incorrect IKARUS signature date
• [26881] fix to MDRA - Possible crash when searching
• [26888] fix to MDRA - Message Search not finding messages when searching for foreign characters
• [26882] fix to AntiVirus - Some messages were considered non-scan that should have been tagged as infected
• [26879] fix to MDaemon - Possible crash at startup if ClstrSvc is disabled in Plugins.dat
• [26895] fix to MDaemon GUI - Incorrect command text in ActiveSync Clients right-click menu
• [26858] fix to ActiveSync - possible server hang
• [26880] fix to AntiVirus - IKARUS scanserver service not stopped when IKARUS is disabled
• [26900] fix to MDRA - List Administrators have the ability to edit the global Mailing List Settings
• [26904] fix to AntiVirus - IKARUS reporting a ZIP file with an EXE as non-scan
• [26909] fix to possible crash in WorldClient.dll
• [26906] fix to Pro theme - Marking a message as spam from the message preview window may cause the screen to go blank
• [26917] fix to LookOut and WorldClient themes - message list reloads when a message is clicked even if nothing changes in the list
• [26913] fix to MDRA - Save and close does not disable new account dialog while waiting on MDaemon
• [26886] fix to MDaemon - Error routing messages to mail directory that ends with period
• [26926] fix to MDRA - content filter rule list view cuts off bottom entry
• [26939] fix to Lite theme - Deleting a folder prompts you with "Are you sure you want to empty the trash?"
• [26929] fix to ActiveSync - 100% CPU hang when validating PIM mrk file integrity
• [26927] fix to ActiveSync - PIM Items not always being persisted to disk when add or change is made
• [26937] fix to Webmail - Memory leaks when exporting or sending contacts or events
• [22728] fix to MultiPOP - Previously downloaded messages are being randomly redownloaded
• [26970] fix to ActiveSync - Recipient Cache entries not emitting correctly
• [26943] fix to ActiveSync - Possible crash in MDAirSync.dll
• [26942] fix to Pro theme - Theme does not load if the server uses a proxy and downgrades the connection from HTTPS to HTTP. Added a setting at MDaemon\WorldClient\Domains.ini [Default:Settings] WorldClientAPI:AllowHttpsToHttpDowngrades
• [26944] fix to WorldClient theme - White dots above toolbar icons when viewing message
• [26948] fix to LetsEncrypt - Error email being sent if an error is returned when trying to remove old certificates
• [26961] fix to LetsEncrypt - Not logging errors returned by New-AcmeOrder
• [26958] fix to MDaemon - Entries added to the SPF Cache are limited to 1024 characters
• [26953] fix to Content Filter GUI - Temporary hang when trying to display a long tooltip
• [26973] fix to Content Filter GUI - Cannot disable the "Add warning to top of message body if attachment is removed" option
• [26974] fix to ActiveSync - Windows Mail on Windows 10/11 reporting failure when downloading attachments
• [26969] fix to ActiveSync - Windows Mail on Windows 10/11 causing excessive Sync operations
• [26878] fix to Webmail - When you drag and drop an attachment it saves a link instead of the file
• [26864] fix to MDaemon GUI - DMARC Reporting contact email cannot be set to account on other domain sharing host
• [26988] fix to LetsEncrypt - FQDN may not be used as subject of certificate
• [26992] fix to MDaemon GUI - ActiveSync right click menu has "Disable ActiveSync ActiveSync"
• [26981] fix to ActiveSync - Crash in ActiveSync server
• [26908] fix to Pro theme - If there is no inline image in your message, the text breaks will be missing when it's sent
• [24368] fix to MDaemon GUI - Toggling XMPP server may not set it to disabled
• [26689] fix to MDaemon - XMPP server may not be started when MDaemon is restarted
• [27000] fix to Webmail - Cannot create a new App Password if the user password has an & in it
• [27009] fix to ActiveSync - Numerous Sync State Locked warnings when iOS devices make simultaneous Sync requests
• [26997] fix to Content Filter - Possible crash in CFEngine.exe
• [27019] fix to MDaemon Instant Messenger - Languages other than English are not displayed
• [26956] fix to ActiveSync - Performance issues when servicing thousands of clients

MDaemon 23.0.1 - April 18, 2023

SPECIAL CONSIDERATIONS

[16456] Hosted email options with MDaemon Private Cloud are now available. To learn more, please visit: http://www.altn.com/Products/MDaemon-Private-Cloud/.

[26765] Cyren Anti-Virus has been replaced with IKARUS Anti-Virus. Cyren recently announced its plans to discontinue operations with little warning. This necessitated the need for us to find a new anti-virus partner. After a thorough evaluation, IKARUS stood out for its excellent detection rate and speed. The IKARUS Anti-Virus automatically updates its definitions every 10 minutes. Scanning with IKARUS is disabled if your AntiVirus license is expired.

[26802] Cyren Outbreak Protection been removed. Cyren recently announced its plans to discontinue operations with little warning. We are actively researching and considering viable antispam technologies as suitable additions to the existing antispam mechanisms found in our software products.

[26778] IMAP keyword flags support can now be enabled or disabled via the setting [Special] IMAPKeywordFlags=Yes/No in \MDaemon\App\MDaemon.ini. IMAP keyword flags are disabled by default when updating MDaemon from a version before 23, to avoid the potential loss of message tags in Thunderbird mail clients. When Thunderbird connects to an IMAP server that supports keyword flags, it overwrites its local message tags with tags read from the server, which are initially blank. IMAP keyword flags are enabled by default for new installs and when updating from version 23.0.0.

CHANGES AND NEW FEATURES

SECURITY

• [26738] Updated ClamAV to version 0.105.2.

OTHER

• [26759] LetsEncrypt - Updated script to check orders that are ready or valid.

FIXES

• [26729] fix to MDRA - While creating a new user, the "Loading..." box does not go away after switching domains
• [26731] fix to Pro theme - Changing a special folder displays the original folder after a successful change
• [26732] fix to Pro theme - Default folders with non-ASCII characters are written incorrectly to the User.ini file
• [26748] fix to some POP3 clients will not download new messages since upgrade to 23.0.0
• [26764] fix to LookOut and WorldClient themes - Unable to delete, copy, or move contacts
• [26710] fix to ActiveSync - iOS device sending MoveItems request repeatedly when moving event to a public calendar
• [26726] fix to ActiveSync - When performing a search of all mailboxes using an iOS device, the Element Not Found error occurs
• [26607] fix to ActiveSync - Messages do not appear in Microsoft Mail
• [26744] fix to ActiveSync - Non-default mail folders extracted from PST file are not synced
• [26768] fix to ActiveSync - Crash when client attempts to monitor shared folder root
• [26770] fix to ActiveSync - Possible crash when moving messages to another folder
• [26790] fix to Pro theme - Unable to save contacts to distribution list
• [26777] fix to LookOut and WorldClient themes - Searching messages for non-ASCII characters fails
• [26664] fix to Pro theme - EnableVoiceRecorder setting is not being honored
• [26483] fix to Pro theme - Adding too many recipients causes the message box to disappear
• [25674] fix to Content Filter - Option to decompress attachments will delete message attached to an email
• [26665] fix to Content Filter - Route file not always copied over when using rules to move messages to folder
• [26525] fix to MDaemon collects MultiPOP mail for disabled accounts
• [26497] fix to self-signed certificates generated by MDaemon cannot be trusted by recent versions of Chrome and Android
• [26742] fix to ActiveSync - Categories set on messages in Outlook may disappear moments later
• [26807] fix to ActiveSync - Changes to individual occurrences of recurring events may not be synced to server
• [26809] fix to possible crash in MDaemon.exe
• [26813] fix to possible crash in MDASMgmt.dll
• [26827] fix to WorldClientAPI does not respond with 404 Not Found for bad origins
• [26832] fix to ActiveSync - Server may send wrong error code when sync state is locked
• [26447] fix to ActiveSync - events created with no reminder on iOS are synced to the server with a 0 minute reminder
• [26856] fix to possible crash in MDUser.dll

MDaemon 23.0.0 - February 8, 2023

CHANGES AND NEW FEATURES

MDAEMON SERVER

• [6984] Added IMAP server support for keyword flags. This allows email clients such as Mozilla Thunderbird to store Message Tags on the server, which lets you see tags set in one client in another instance of the client.
• [26376] Improved the IMAP server's performance when opening large mail folders.
• [23873] MTA-STS now has an exempt list, so problem domains can be made exempt instead of MTA-STS needing to be turned off when failures affect deliverability.
• [18486] MDaemon sends a warning email to admins when SSL certificates configured for use by MDaemon, Webmail, or Remote Administration are about to expire.
• [22800] Added OAuth 2.0 support for MultiPOP mail collection from Gmail and Office 365. OAuth 2.0 is modern authentication, which these services will require once they disable support for legacy/basic authentication. Simplified setup instructions are:
  1. Create an app using the Google API Console (for Gmail) or Azure Active Directory (Office 365).
  2. Enter the app's Client ID and Secret in MDaemon at Setup | Server Settings | MultiPOP.
  3. On the Account Editor's Web Services screen, enable "edit MultiPOP settings" for the accounts that need to use OAuth.
  4. On the Account Editor's MultiPOP screen, select the Gmail ("pop.gmail.com:995") or Office 365 ("outlook.office365.com:995") entry, check "Use OAuth", click Replace, then save. Users can also do this for themselves in Webmail or MDRA.
  5. Users then need to authorize the accounts in Webmail. On the Settings | Mailboxes page, click the "Authorize" button for the Gmail or Office 365 entry. Sign in to Google or Microsoft and consent to the application. Users may need to reauthorize on a weekly basis.
  Detailed setup instructions can be found in Knowledge Base articles https://knowledge.mdaemon.com/how-to-setup-oauth-google (Gmail) and https://knowledge.mdaemon.com/how-to-setup-oauth-m365 (Office 365).
• [26476] The "MultiPOP always deletes mail..." option has moved from Setup | Event Scheduling | Mail Scheduling | MultiPOP Collection to Setup | Server Settings | MultiPOP.

WEBMAIL

• [10314] Integrated Google Drive into Webmail Documents. Users can view their Drives, Folders, and Files that are in Google Drive. Users can upload, download, move, copy, rename, and delete files, as well as copy/move files to and from the local document folders. If the user wants to edit a document, clicking the option to View the file in Google Drive will allow the user to make edits in accordance with their permissions in Google Drive. To Setup the integration view the Knowledge Base Article at https://knowledge.mdaemon.com/mdaemon-google-drive-setup.
• [26164] Pro theme - Added read receipts support.
• [26236] Pro theme - Added an option to disable the HTML editor context menu.
• [25647] Pro theme - Added the ability to resize the folder list.
• [24927] Added option to enable drag and drop folders at Settings | Folders. Setting is enabled by default.
• [26275] Made the session cookie Secure over HTTPS.
• [26278] WorldClient no longer modifies the robots.txt file on startup.
• [26309] The built-in web server prevents the download of .dll files from the HTML directory.
• [26535] Pro theme - Changed the validation process to allow BCC only recipients when composing a message.

REMOTE ADMINISTRATION (MDRA)

• [26188] Added an option at Main | Webmail Settings | Settings and at Main | Domain Manager | Edit | Webmail Settings to "Allow users to receive Two Factor Authentication verification codes over email". This setting is enabled by default.
• [26274] Changed the default permissions when adding a new ACL entry to Lookup and Read.
• [26257] Test buttons at Spam Filter | DNS-BL | Hosts and Setup | Active Directory | Authentication are now disabled while the process is ongoing.
• [26312] The built-in web server prevents the execution and download of .dll files in the Templates directory.
• [25041] Updated the UI to use a stacked menu for widths of 1024px and greater. Added a user settings page that can be accessed by clicking the username in the top right. User settings include a Dark Mode, font size options, and the current language.
• [26304] Changed the account delete confirmation to use the custom confirmation feature.

SECURITY

• [26114] Dynamic Screening - There is a new option titled Block Logon Policy Violations. If the logon policy to require full email addresses is active, and Block Logon Policy Violations is active, then the offending IP address will be blocked immediately. Also added a new option for Auth Failures, to only ignore duplicate passwords for valid accounts. This means that if a password change was done at a client, then another client still running the old password will still have ignore duplicates enabled, since it would have the correct logon name. A bot trying random logons with a similar password would not have that same benefit, and will be blocked as soon as it surpasses the auth failure threshold. This will help to defeat bots much quicker. The XML API DynamicScreen operation has been updated to reflect these new features.

MDaemon is a registered trademark of MDaemon Technologies, Ltd.

Copyright ©1996-2023 MDaemon Technologies, Ltd.