MDaemon Server v21.5 Release Notes

MDaemon 21.5.2 - February 8, 2022

SPECIAL CONSIDERATIONS

[16456] Hosted email options with MDaemon Private Cloud are now available. To learn more, please visit: http://www.altn.com/Products/MDaemon-Private-Cloud/.

CHANGES

• [25707] MDaemon Connector has been updated to version 7.0.6.
• [25471] XMLAPI - Improved UpdateUser group membership operations.
• [25709] LetsEncrypt - Changed the Log function to use add-content instead of out-file. Add-content uses the default system code page which should enable the log file to be viewed in MDRA. No change will be made to the encoding of the log file until a new log file is created.

FIXES

• [25683] fix to ActiveSync - performance issues
• [25664] fix to ActiveSync - Unable to enable ActiveSync for the final licensed user
• [25681] fix to XMLAPI - Autoresponder schedule being set wrong
• [25667] fix to Pro theme - Cannot add members to a distribution list
• [25678] fix to MDaemon writes auth failures to Windows Event Log even when option is turned off
• [25679] fix to MDaemon's Auth Failures log may have incorrect ACCOUNT values
• [25658] fix to WorldClient theme - Option to recur every X weeks missing in the event editor
• [25676] fix to MDRA - Unable to add an alias using $LOCALDOMAIN$
• [25646] fix to MDRA - When editing group membership it's possible to accidentally revoke your own global admin status
• [25690] fix to MDRA - Using Apply when creating a new Template or new Group causes an error when making additional changes
• [25695] fix to MDRA - Problems editing rules when there are more than 1000 rules
• [25694] fix to Pro theme - Pasting links from Youtube into compose view and sending message results in the links missing in the received message
• [25701] fix to possible message corruption when MDaemon releases or requeues a message
• [25705] fix to Pro theme - Attendees are not notified when meetings are changed
• [25714] fix to Webmail - Previously removed categories on messages reappear with new sessions
• [25698] fix to domain signature with inline image may not be applied properly to a message with an inline image
• [25718] fix to IMAP server does not return BAD response to a command line that's too long
• [25750] fix to possible crash in WorldClient.dll
• [25767] fix to ActiveSync - Unable to sync PIM folders that do not have .MRK files in them if folder name contains extended characters

MDaemon 21.5.1 - December 14, 2021

CHANGES AND NEW FEATURES

• [25395] MDRA - The last view is now remembered for expired sessions, but not for sessions signed out by the user.
• [25396] Webmail - Changed all Login referrences to Sign-in.
• [25397] Pro theme - Added the View Source and Save Source options to the Message View and Message Preview.
• [25248] Content Filter - Added macro support for 'Add an attachment' action.
• [23758] WorldClient theme - Added an option to "Use Auto Formatted Date" at Options | Personalize | Inbox Settings. When the setting is disabled, the message list dates are displayed the same as in LookOut theme.
• [25474] LookOut and WorldClient themes - Users can now select and copy some text from event tooltips in the calendar view. Use CTRL + C to copy.
• [25283] Webmail - Added options at Options | Calendars to enable the event tooltips and to change the hover timer required to see the tooltip.
• [25328] Pro theme - Added a "Favorites" checkbox to toggle at Settings | Folders, Folder Options dialog.
• [25426] Pro theme - Added an overwrite checkbox on the document list view.
• [25393] Pro theme - Added an option to attach documents to a message in the compose view.
• [17687] DSN - Added $RECIPIENT$ macro support to custom DSNFail.dat and DSNDelay.dat files.
• [24960] Content Filter - Increased total character limit for all entries added to the Attachments exclusion list.
• [25171] MDRA - Added version 16.1 to ActiveSync Protocol Restrictions.
• [25478] Pro theme - Made some performance improvements.
• [25624] LetsEncrypt will no longer delete the log file each time it runs.
• [25643] LetsEncrypt - You can add -SkipPortCheck to the command line to skip the port check.
• [25644] LetsEncrypt - added the ability to copy challenge files to an external path.

FIXES

• [25386] fix to Webmail - Users no longer being asked if they wish to enable desktop notifications in Firefox
• [25133] fix to AntiVirus - ClamAV reports error when scanning a zero byte file
• [25258] fix to DSN - Macros in custom DSN message text are not processed per message
• [25469] fix to XMLAPI - CreateUser operation allows alias to be created for an account that already exists
• [25499] fix to possible MDaemon.exe hang related to gateway LDAP lookup caching
• [25523] fix to MDRA - removing an ActiveSync client may inadvertently remove account-level client settings
• [25515] fix to Pro theme - Clicking Advanced Settings opens two windows
• [25492] fix to MDRA - Adding more than one public folder to a content filter rule's copy action causes incorrect naming
• [25532] fix to MDRA - Add attachment path uses forward slash instead of backslash
• [25454] fix to MDRA - In the Do not filter messages larger than setting, it shows KB instead of MB
• [25505] fix to non-ASCII characters are not encoded correctly when they are exported to an LDAP address book
• [25564] fix to WorldClient theme - Edit link in hover box doesn't show all event info
• [25434] fix to mailing list "Replace 'From:'" options incorrectly process From header
• [23721] fix to mailing list messages may not use the correct smart host settings
• [25573] fix to MDRA - Including quotes (") in the name of a content filter rule results in the rule list not being displayed
• [25543] fix to ActiveSync - accounts without access rights can search public contacts
• [25577] fix to ActiveSync - possible hang when searching public contacts
• [25607] fix to LookOut theme - possible hang after resizing the browser window
• [25609] fix to MDRA - Content filter "if subject header contains" condition gets changed to user defined header
• [25610] fix to possible MDaemon crash if Dynamic Screening whitelist contains invalid IP address
• [25629] fix to Message Indexing - maintenance fails when messages.mrk does not exist
• [25616] fix to MDRA - unable to add/remove per-user autoresponder address exclusions
• [25619] fix to Pro theme - Remember Me not working after server restart
• [25563] fix to Pro theme - Mailbox languages do not change when changing language
• [25628] fix to Pro theme - Memory leak when using external windows
• [25634] fix to Pro theme - Users with long folder names cannot see new message counts
• [25639] fix to MDRA - Access denied when editing group memberships
• [25621] fix to ActiveSync - folders may not sync due to "ImapMrk: Corrupt File Header"
• [25641] fix to MDaemon attempts to send message again if socket error 10053 occurs when sending QUIT
• [25653] fix to MDaemon does not try the next DNS server after an A record query is refused
• [25655] fix to Spam Filter - Sa-Update.exe not downloading updates

MDaemon 21.5.0 - November 9, 2021

SPECIAL CONSIDERATIONS

[24475] The 'X-MDOrigin-Country' header, which Location Screening can add to messages, now has the two-letter ISO 3166 country and continent codes instead of full country and continent names. Be sure to update any filters you may have that look for particular values in this header.

[24943] With the renaming of the Webmail Mobile theme to Pro, there is a possible side effect for users that are using the Mobile theme and have remember me enabled. These users may find that they cannot open attachments. To work around this, the user must simply log out and log back in.

MAJOR NEW FEATURES

[21032] APP PASSWORDS

App passwords are long randomly generated passwords that clients can be configured to log in with instead of a user's account password. When used along with Two-Factor Authentication, which is supported by MDaemon Webmail and Remote Administration, they can help protect an account from unauthorized access. App passwords are supported by MDaemon's SMTP, POP, IMAP, ActiveSync, WebDAV, and XMPP servers.

App passwords are enabled by default. They can be disabled at Accounts | Account Settings | Other | Passwords. Two-Factor Auth can optionally be required for users to set up app passwords (enabled by default). The Web Services screen in the account editor and account templates has an "edit app passwords" permission, enabled by default. The Settings screen in the account editor and account templates has an option for whether an app password must be used to log in to the account using one of the supported protocols, disabled by default.

Users can manage app passwords in Webmail, at Options | Security, or Remote Administration, at My Account | App Passwords. The UI displays a list of the user's app passwords, with their name, creation timestamp, last used timestamp, and last used IP address. App passwords can be created, renamed, and deleted (revoked). An app password is displayed only once, when it is generated. If a password is lost, delete it and generate a new one. A different app password should be generated for each of a user's clients. If the user stops using a client or loses a device, any app passwords for them should be deleted. As a security measure, all of an account's app passwords are deleted when the account's password is changed.

CHANGES AND NEW FEATURES

WEBMAIL

• [24438] Renamed the Mobile theme to the Pro theme.
• [13407] Added an Unsubscribe link next to the From address when the List-Unsubscribe header exists in a message. This can be disabled at Settings | Personalize.
• [20461] Added ability to import email into the current message list.
• [24087] Pro theme - Added Cross-Site-Request-Forgery tokens for more secure transactions. The feature is disabled by default. To enable it through MDRA go to Main | Webmail Settings | Web Server and check "Use Cross-Site-Request-Forgery tokens".
• [22154] Pro theme - Added an option at Settings | Personalize to enable Dark mode.
• [24133] Pro theme - Added a link to "Track my package" in opened messages.
  • Carrier tracking numbers being watched by default are USPS, UPS, OnTrac, FedEx, and DHL.
  • The default configuration file is \MDaemon\WorldClient\package_tracking.json
  • Admins can add more carriers by creating \MDaemon\WorldClient\package_tracking.custom.json using the same format as the default config file.
  • At least one service name, a tracking url, and at least one valid regular expression is required.
  • Include service names that may appear in a message to reduce the chances of false positive matches.
• [24124] Updated the Dropbox integration to use the refresh_token provided by Dropbox to reconnect users without interaction with the OAuth dialog. When the access_token expires, Webmail will attempt to use the refresh_token to get a new access_token. No longer necessary settings have been removed from the Cloud Apps page. The admin does NOT need to make any changes to the Dropbox app at Dropbox.com.
• [22940] Pro theme - Added a password strength meter.
• [24192] Search All / Subfolders requests no longer search unsubscribed folders when unsubscribed folders are hidden.
• [23501] Added a checkbox named "Skip Search" to exclude specific folders from Search All / Subfolders requests.
• [24151] Added a setting in Remote Admin that allows the Two Factor Authentication Remember Me checkbox to be hidden.
• [24186] Added a blur effect for the background when the user session is expired.
• [24207] Pro theme - Added the Message List Layout dialog to the smaller browser size. Only the Message List Density setting is displayed.
• [24165] Added an Automatic CC and BCC feature at Settings | Compose.
• [20666] Added an option in WorldClient\Domains.ini [Default:Settings] PreventComposeWithAlias. Setting is off by default.
• [20172] Lite theme - Added auto-save draft message to the Compose view.
• [23221] Pro theme - Added the Voice Recorder.
• [17966] Added an option in the Options | Folders view to allow users to skip contact folders in auto-complete searches. Added the option in the right click menu as well.
• [24222] Pro theme - Added the image slideshow feature for the message view.
• [24209] Pro theme - Added a card view for the contacts list.
• [9877] Added a Webmail log entry for the User-Agent when a user logs in.
• [20852] Added a notification in the Compose view if a local recipient has their autoresponder enabled.
• [20994] WorldClient theme - Added a paperclip icon to event tiles that have attachments.
• [24474] Maximum attachment size is set to 25 MB for new installs.
• [24492] Pro theme - Moved the "new item" button from the toolbar to the space above the folder list for desktop sizes.
• [24493] Pro theme - Added a plus icon next to "Personal" to create a new calendar in the calendar view.
• [17840] Pro theme - Added an event tooltip with edit options and send an email to an attendee option.
• [24679] Pro theme - Made the search bar always visible for browser window widths of 1200px or greater.
• [20414] Pro theme - Added a dialog to allow users to remove a contact from the the BlackList when adding them to the WhiteList and vice versa.
• [24725] Pro theme - Added an error message when there is an error creating or renaming a folder.
• [6309] Pro theme - Added support for HTML notes in Events, Contacts, Tasks, and Notes.
• [24796] Pro theme - Replaced the current HTML editor (CKEditor) with Jodit.
• [24955] Pro Theme - Changed the basic header view to show the From email address.
• [25262] Changed the "Delete All" folder action to "Empty Folder"
• [25260] WorldClient theme - Added "Change Password" and "Change Recovery Email" buttons to the Security page
• [25358] Pro theme - Changed the refresh button to refresh all folder counts
• [24526] Messages are sent to MDaemon's MSA port (587) by default instead of the SMTP port (25).

REMOTE ADMINISTRATION (MDRA)

• [16302] Updated trusting local domain host warning to prevent adding the local domain host when clicking "No".
• [11289] Added the ability to drag and drop content filter rules. The copy, edit, and delete buttons are now on each respective rule.
• [24088] Added Cross-Site-Request-Forgery tokens for more secure transactions. The feature is enabled by default. To disable it go to Main | Remote Admin Settings | Settings and uncheck "Use Cross-Site-Request-Forgery tokens".
• [24167] Added a password strength meter to some password fields.
• [24151] Added an option for Webmail and Remote Admin Two Factor Authentication Remember Me at Main | Webmail Settings | Settings and per domain at Setup | Domain Manager | Edit | Webmail Settings.
• [14331] Added Blocked IPs and Refused IPs reports for Dynamic Screening.
• [24239] Added the Groups and Client Types views under ActiveSync.
• [24255] Updated the ActiveSync | Diagnostic and Tuning pages.
• [24278] Added a browser usage by OS chart and table at Reports | Traffic | Webmail Login Statistics.
• [10444] Added buttons to open a popup for browsing users and groups to add to mailing lists at Main | Mailing Lists | Edit | New. Only Domain Admins or Global Admins have access to the buttons.
• [24847] Added Account Only Wipe options at Main | My Account | ActiveSync Clients and at ActiveSync | Client Management.
• [15277] Change logging has been added. It will log every change that is made via Remote Administration.
• [25000] Updated Message Recall to match the MDaemon GUI.
• [25050] Added the "Extract attachments from winmail.dat" option at Security | Content Filter | Compression.
• [25267] Added Slovenian language to MDaemon Remote Administration.

OTHER

• [24220] Added support for SMTP Command Pipelining (RFC 2920). MDaemon will send MAIL, RCPT, and DATA commands in batches instead of individually, which improves performance over high latency network links. SMTP pipelining is always enabled for inbound connections. It is enabled by default for outbound connections, but can be disabled at Setup | Server Settings | Servers & Delivery | Servers.
• [24252] Added support for SMTP CHUNKING (RFC 3030). CHUNKING allows non-line-oriented messages to be transferred. It is enabled by default for inbound connections, but disabled by default for outbound. Bare line feeds in received messages are converted to carriage return line feeds by default. These defaults can be changed by setting [Special] SMTPChunkingInbound=Yes/No, SMTPChunkingOutbound=Yes/No, and SMTPChunkingAllowBareLF=Yes/No in \MDaemon\App\MDaemon.ini.
• [24247] Content Filter - Updated the default restricted attachments list.
• [21277] XMLAPI - Added Support to report/modify settings from Setup/Server Settings/Logging.
• [24386] ActiveSync Server start/stop entries are written to MDaemon's System log.
• [24089] ActiveSync - Corrupt Message Notifications are sent less often.
• [24221] Clustering - Added support for synchronizing reminders from secondary nodes.
• [24714] Dynamic Screening - Added option to log location data using ISO codes instead of names.
• [23746] Dynamic Screening - Improved the logic used for ignore attempts using identical passwords.
• [24817] XMLAPI - Added support for ActiveSync AlwaysSendMeetingUpdates setting.
• [24881] XMLAPI - Added support for semaphore file creation.
• [19329] MDaemon Instant Messenger - Improved group chat feature by adding ability to multi-select chat buddies for group chat. Also added an option to auto-accept chat room requests.
• [24665] MDaemon GUI - Location Screening has a new option for whether a 'X-MDOrigin-Country' header is added to messages. It is enabled by default.
• [2118] Content Filter - Added rule action to add attachment to message.
• [25200] MDaemon GUI - An option for whether to allow logon using aliases has been added at Accounts | Account Settings | Aliases | Settings. It is enabled by default.
• [25315] MDaemon Connector has been updated to version 7.0.5.
• [24667] The default delivery confirmation message text (in \MDaemon\App\Receipt.dat) has been changed to use the $HEADER:X-RCPT-TO$ macro instead of $RECIPIENT$ to avoid disclosing the actual email address an alias resolves to.

FIXES

• [24238] fix to SMTP server may allow out of sequence commands
• [24276] fix to Pro theme - Folder list updates inconsistently
• [24353] fix to MDRA - Cannot disable feature "Only send antivirus update notification on failure"
• [24297] fix to Pro theme - info icon in Message View Layout popup should not exist
• [24491] fix to Webmail and MDRA - Two Factor Authentication one time password is reusable
• [24712] fix to Pro theme - Autocomplete box never goes away
• [24711] fix to Pro theme - Session has expired error when logging out
• [24700] fix to Pro theme - Body of message is not focused on when replying
• [24719] fix to Webmail - MDaemon sends the accepted meeting request message addressed from the wrong user when accepting in calendar view
• [24787] fix to MDRA - Problems with the "Use HTML" setting when adding a footer or adding to the top
• [24822] fix to Pro theme - Unable to open a new message after using Shift+Del to permanently delete a message
• [24814] fix to MDRA - Enabling a group in an account does not apply its selected template
• [24800] fix to Webmail - Email search results do not clear when selecting another section in webmail
• [24795] fix to Pro theme - Importing Events or Contacts with attachments takes time and there is nothing to inform the user that the import is ongoing
• [24909] fix to MDRA - domain editor has blank SMTP host name for domain admins
• [24859] fix to Pro theme - onSpam is not a function in external message window
• [24925] fix to XMPP Server - Server does not create chat rooms correctly
• [24864] fix to Webmail - Corrupted text added to message body when removing an attachment
• [24632] fix to ASMCUI - Command line still contains XMLAPI options though /ImportFile method is selected
• [24513] fix to ASMC - When importing contacts, duplicate GUID and Modified entries are created.
• [24634] fix to ASMC - Only create mailbox folders for Folder Types specified in migration
• [24279] fix to MD GUI - Resetting Root Node counters does not reset Dynamic Screening or ActiveSync counters
• [24433] fix to MD GUI - Wrong dialog opens when double clicking Accounts/ActiveSync
• [24617] fix to MD GUI - ActiveSync Accounts and Clients dialogs in the Domain Manager may show the wrong domain
• [24350] fix to Clustering - possible hang when moving mail queues
• [24618] fix to Clustering - possible crash at startup
• [24930] fix to Webmail - Invalid cookie for the requested session when downloading PDF files in Chrome
• [24949] fix to MDRA - Cannot edit a domain that has capitalization in the Domain name
• [24966] fix to MDRA - Cannot save autoresponder script in template
• [24992] fix to Pro theme - Very long email addresses cause the address to overflow the container in the To field of the compose view
• [25015] fix to MDRA - Attachment linking is not disabled when clustering is enabled
• [25021] fix to MDRA - possible crash when clicking "Restrict MDaemon folder access to Admins, Backup Operators, and System"
• [25097] fix to MDRA - Account Manager Filter does not display MDaemon Connector accounts
• [25083] fix to Pro theme - Contact, Task, and Note list does not refresh when a new item is created
• [25081] fix to Pro theme - DefaultFromAddress not being used in the Compose view
• [25077] fix to MDRA - In the Quotas settings, any value containing Japanese characters displays corrupt
• [24980] fix to LookOut theme - the "Show Snoozed" messages button does not do anything
• [25132] fix to Webmail - Whitelist and Blacklist folders are not regenerated if accidentally deleted by users
• [25075] fix to MDRA - Log actions taken on messages from the Queues pages
• [25172] fix to AV updater - Send notification if virus definitions have not updated checkbox gets value from CyrenAV
• [25179] fix to Pro theme - Enable/disable Two Factor Authentication options are reversed when logging out and back in
• [25189] fix to Pro theme - Email admin lost TFA device does not work
• [25176] fix to AV - When a virus is detected in winmail.dat the winmail.dat is removed from the message instead of the message getting quarantined
• [25188] fix to AV - Scan fails with Winmail.dat files containing attachments with special characters
• [25192] fix to DMARC processing is skipped for certain messages
• [25234] fix to possible MDaemon.exe crash when generating quarantine queue summary email
• [25237] fix to Pro theme - unable to send a message without a subject
• [25273] fix to XMLAPI - Create/UpdateUser does not set NTAccount value when specified
• [25086] fix to MDPGP - Invalid CRC error when decrypting particular messages
• [25256] fix to DSN message has remote server's BATV tag removed, which may cause delivery failure
• [25263] fix to Pro theme - Strings in folder context menu not translated
• [25266] fix to WorldClient and LookOut themes - if you import an ics file with thousands of events it looks like nothing is happening
• [25261] fix to Webmail - some HTML messages are not displayed properly
• [25269] fix to Webmail - XSS vulnerabilities
• [25305] fix to meeting updates can cause duplicates in Outlook if an account using MDaemon Connector is set to automatically process meeting requests
• [22378] fix to MDMigrator Unable to export message, pConvSess->MAPIToMIMEStm failed [0x80070005] in WriteMimeMessage
• [25317] fix to Pro theme - unable to clear search results after opening email
• [25243] fix to MDRA - Message Search may not find words that contain non-ASCII characters
• [24763] fix to Webmail - Attachments in meeting invites are not displayed correctly in Outlook
• [24934] fix to MDaemon GUI - Header Translation edits are not saved
• [25217] fix to MDaemon GUI - Domain Manager allows a domain with the same name as a disabled gateway to be created
• [25090] fix to mailing list administrators are not updated when renaming a domain
• [23962] fix to SPF lookups fail for certain multi-line SPF records
• [25285] fix to only the first mailing list's Last Access value is updated when a message is sent to multiple mailing lists
• [24331] fix to AD Monitoring replaces lowercase umlaut characters with uppercase letters
• [24189] fix to forwarding to a public folder submission address fails
• [25352] fix to possible hang in MdMbSrch.dll when indexing new mail items
• [25351] fix to WorldClient theme - Contact phone number is displayed incorrectly when parentheses or a plus sign exist
• [25343] fix to WorldClient theme - When setting invitee as Optional, it reverts to Required when saving
• [25353] fix to ActiveSync - search of all mailboxes returns no results
• [25078] fix to Content Filter - restricted attachment may not be quarantined
• [25346] fix to Pro theme - Message view right, unable to resize preview window using FF
• [25354] fix to Content Filter - "Compress outbound local domain attachments" option does not work
• [23299] fix to STARTTLS white list not being honored in all cases
• [25359] fix to Pro theme - IE11 - Users get a blank screen
• [23055] fix to public contact for an account may not be deleted when setting it as private using a template
• [25365] fix to MDaemon GUI - Domain Sharing password edit box does not allow enough characters
• [25372] fix to Pro theme - right clicking on a message in the message list and selecting Spam/Not Spam is not moving the message
• [25369] fix to high CPU usage in MDaemon.exe while verifying a particular DKIM signature
• [25268] fix to Content Filter - sender/recipient password-protected exclusion "Apply" button disabled when removing entry
• [25383] fix to MDRA - When editing group membership, the windows overlaps the last account in the list
• [23168] fix to Content Filter - "Append a corporate signature" with HTML may cause DKIM signature to fail
• [25201] fix to ATRN connections fail if they are on the STARTTLS Required List
• [25407] fix to message recall fails for messages in the the Deferred queue with no To header
• [25451] fix to Webmail - CKEditor upgraded to version 4.16.2 to get vulnerability fixes
• [25526] fix to possible crash in MDaemon.exe