MDaemon Server v26.5 Release Notes

MDaemon 26.5.0 - 2026-10-20

CHANGES AND NEW FEATURES

MDAEMON SERVER

• [10408] The simple message ticketing system now has an option to use a sequential ticket number instead of a random alphanumeric ticket ID. This can be enabled in the public folder editor. The ticket numbers are six digits by default, starting with 100001. To change the number of digits, edit \MDaemon\App\CFilter.ini and set [Ticketing] SequenceDigits (minimum 4).
• [13866] The simple message ticketing system can now tag outbound messages to have a ticket number so the response will be treated as a ticketing email. Send a message with a subject that starts with {FolderName}. To use this with existing ticketing folders, you will need to have MDaemon delete and recreate the ticketing rules. To do this, edit the public folder, make a change (toggle ticketing off and on, for example), and Save.
• [18547] Added PROXY protocol support, allowing MDaemon to sit behind HAProxy or similar load balancers and receive the original client IP address. When enabled, all SMTP, POP, IMAP, HTTP, and XMPP connections from the load balancer's IP address expect a PROXY protocol header immediately upon TCP connection before any application or TLS data. Configure at Setup > Server Settings > PROXY Protocol.
• [12931] MDaemon now automatically creates Windows Firewall rules that allow inbound TCP and/or UDP connections to MDaemon's executables. If a rule already exists, a new one is not created.
• [14022] Host Screening has a new option to add the IP of an SMTP connection refused by Host Screening to the Dynamic Screening Block List. This option is disabled by default.
• [23679] The CSV file produced by exporting accounts to CSV now has a Groups field that lists the groups each account is a member of.
• [23914] When editing a group's members, there are now Import and Export buttons to read or write the members to a text file (one member per line).
• [25787] The "Log ID string in mail session logs" option is now enabled by default.
• [6941] Added support for the IMAP MOVE command (RFC 6851).

REMOTE ADMINISTRATION

• [29713] Replaced FusionCharts with Apache echarts
• [29624] Updated RA to use MDaemon's own html editor based on TipTap instead of CKEditor
• [29906] Updated the text for "Enable MDaemon Instant Messenger" and "Enable instant messaging" at Main > Webmail Settings > MDIM to clarify their purposes and moved the remaining settings that apply broadly to the Setup > XMPP Server page
• [29415] Added Indonesian Language

WEBMAIL

• [29314] All themes now use a unified logon screen, instead of a differently themed logon for each theme
• [29423] WorldClient theme - Updated the WorldClient theme with a new look and better Chat view integration
• [30327] The WorldClient theme is now the default Webmail theme for new installs. When updating, the installer will ask if you want to change your default to the WorldClient theme.
• [29542] Pro theme - Switched from TinyMCE html editor to an internal Tiptap based html editor
• [29378] Pro and WorldClient themes - Added Spam and Not Spam quick actions to messages in the message list
• [29597] WorldClient theme - Added a "Show/Hide Details" toggle to the message view header section
• [29636] The recall button is now available for deferred delivery messages when recall delay is set to 0
• [29382] Pro theme - Security settings now prompt for your current password in a dialog when setting up an Authenticator App, Email Verification, an App Password, or a recovery email—no more filling in a separate password field first.
• [13066] WorldClient and Pro themes - Added hyperlinks to contact web addresses and PIM notes
• [29464] Added the ability to customize the css for the Sign-In page for Remote Administration and Webmail from RA's Main > Remote Admin Settings > Branding and Main > Webmail Settings > Branding respectively
• [29349] Pro theme - Added the ability to download PIM attachments from the item preview for Contacts, Events, Tasks, and Notes
• [29783] Web Conferences scheduled through Webmail now include the links in the body of the event in addition to the location
• [30555] Revised Webmail's Help File - Expanded and updated every page in the help file, including redesigning its formatting, fonts and styles to make it more readable.

OTHER

• [29600] LetsEncrypt - Added support for a switch to re-use certificate keys
• [29105] The bundled web servers that run Webmail and Remote Administration now reject HTTP 1.0 requests by default. They require HTTP 1.1. To change this, set [WebServer] RejectHTTP1.0=No in \MDaemon\WorldClient\WorldClient.ini and \MDaemon\WebAdmin\WebAdmin.ini.
• [28596] XMLAPI - App passwords can be used to log in. A session created using an app password does not have admin rights.
• [29734] MDaemon Connector has been updated to version 8.0.6.
• [29526] CalDAV/CardDAV - Added support for the sync-collection REPORT (RFC 6578), allowing clients such as Apple Contacts and Calendar on macOS to synchronize using sync tokens. Deleted calendar items, contacts, and tasks are now tracked as tombstones in the PIM data files so deletions propagate to sync clients. Tombstones are purged after 30 days by default; to change this, edit \MDaemon\App\MDaemon.ini and set [Special] PimTombstoneRetentionDays (0 = never purge).
• [29781] Updated MDRA, XMPP, and WorldClient theme - Added "Allow users to prevent the server from archiving messages" at Setup > XMPP Server (enabled by default). When it's disabled, the setting is hidden from users in WorldClient and XMPP ignores the "no-store" and "no-store-permanent" hints
• [29826] XMPP Server now logs info for clients that connect to it
• [29921] Updated ClamAV to version 1.4.6
• [29943] Content Filter - Updated unrar64.dll to version 7.23
• [29360] CalDAV - Added an INI setting to prevent the CalDAV server from sending meeting notifications, for when all clients send their own notifications. Edit \MDaemon\WorldClient\WorldClient.ini and set [WebDAV] SuppressEventNotifications=Yes.
• [24653] ASMC - Added support for EAS protocol version 16.1, which Microsoft 365 now requires.

FIXES

• [29268] fix to MDRA - Column width adjustments do not maintain columns
• [28957] fix to Webmail - Non-ASCII message categories do not sync between Webmail and ActiveSync
• [29438] fix to SMTP server - possible connection error after delivery to IP address specified in MX cache fails
• [29483] fix to the WorldClient theme - A message sent as urgent shows the recipient incorrectly in the To column of the Sent Items folder
• [29275] fix to Pro theme - Adding a second calendar to the view shows the current month instead of month selected
• [29265] fix to MDRA - IMAP rules are not created/deleted when changing "Filter messages which fail the DMARC test into spam folders"
• [29445] fix to Pro theme - The calendar export feature does not export CSV files
• [29558] fix to RTCServer hangs on startup when cscript.exe is restricted by network or other rules
• [29589] fix to Pro theme - Recipient Unknown error response is missing the email address
• [29608] fix to Saving Mobile field to Contact does not work in Pro theme or WorldClient theme
• [29635] fix to Pro Theme - Scheduling Assistant is not querying free/busy for attendees
• [29637] fix to XMLAPI - WorldClient/TFAllowed and WorldClient/TFRequired elements can't be modified
• [29439] fix to Webmail - "Remember Me" on logon and verification code pages doesn't always work
• [29616] fix to Webmail - OIDC fails if reverse proxy requests an optional client certificate
• [29609] fix to Webmail - When accepting a particular invite, the text displayed in the acceptance message is broken when viewed in Outlook
• [29554] fix to Webmail - Password reset after expired fails when remember me is in use
• [29004] fix to Webmail - Meeting cancellation notifications are not sent when removing an accepted attendee when multiple attendees exist
• [28815] fix to Webmail - Adding external calendars containing many events causes high CPU usage and login failures
• [29649] fix to ActiveSync - BlueMail does not display inline images
• [29071] fix to Webmail - Japanese is truncating plain text messages in Firefox
• [28506] fix to Webmail - Event not updated when accepting a single calendar entry update of a recurring event across time zones
• [29659] fix to MDRA - Search bar has X wrapped to next line
• [29652] fix to SMTP server - DKIM verification settings apply to ARC
• [29559] fix to XMLAPI - Account creation fails if minimum password length is greater than 15
• [28334] fix to LookOut theme - Using Edge's "Last Used" auto fill option causes the browser to hang
• [23821] fix to LookOut theme - Editing a recurring event to change the day from main event edit page does not work, must change on recurrence page
• [23796] fix to Webmail - Calendar moves first occurrence of an event when changing the date
• [23297] fix to Webmail - Recurring event attendee missing the last item
• [29667] fix to WDaemon - HTTP 100 Continue response not sent when expected
• [11348] fix to Webmail - Unable to edit an occurrence of a recurring event if time zone conversion to the user's local time causes the occurrence to occur a day earlier or later
• [27742] fix to Pro theme - Folder IDs are mixed up after creating a new folder and a remember sign-in occurs
• [29615] fix to MDRA - DS Enable Auth Failure tracking, Block List, and Allow List checkboxes visible on multiple pages
• [29619] fix to MDRA - Unable to change default SMTP Hostname
• [29618] fix to MDRA - Creating a new public folder will not allow a non-existent submission address to be saved
• [23893] fix to MDRA - Mailing List Settings for Everyone and MasterEveryone lists should mirror the MD GUI
• [28840] fix to MDRA - "Unable to format string" when editing account templates in Japanese
• [29704] fix to MDRA - Remember Me - replay will kill the cookies that were just issued and result in remember me failure
• [23313] fix to Webmail - auto pick next available event block fails at the hour when daylight saving time starts
• [29702] fix to MDRA - Groups - Display problems when using certain Japanese characters
• [29745] fix to CalDAV/CardDAV - If-None-Match: * precondition ignored on PUT, allowing an existing event, task, or contact to be silently overwritten
• [29747] fix to WebDAV - PROPFIND allprop/propname return an empty multistatus instead of the resource's properties
• [29768] fix to Webmail - Recurrence End Date not saved correctly
• [29803] fix to XMLAPI - possible hang after making an UpdateUser request
• [29736] fix to XMPP Server - does not honor MDaemon log settings for max file size and file rotation
• [29739] fix to MDRA - Unable to change the Key from MDaemon key to MDPC key
• [29735] fix to Pro theme - After setting the Default From Address, it is not used when composing a message
• [29810] fix to shared folders - Saving folder permissions grants admin access to users who have create access, and removes admin access from users who do not
• [29880] fix to Webmail - "Change Verification Code Email" feature does not work
• [16905] fix to Content Filter - Regular expressions do not support non-ASCII characters
• [29883] fix to Content Filter - Case insensitive comparisons do not support non-ASCII characters
• [29910] fix to RTCServer - the TLS cerficate chain is lost when extracted from the MDaemon certificate
• [29924] fix to RTCServer - External users are unable to connect media and cannot send chat messages on their first time signing in
• [29791] fix to MDRA - The "rewrite_header subject" line in local.cf is duplicated if blank when Spam Filter changes are saved
• [29700] fix to Attachment Linking - Spaces in filenames are replaced with underscores
• [29970] fix to ActiveSync - Delay when sending messages due to many duplicate entries in the Recipient Information Cache
• [29969] fix to MDRA - Possible crash when viewing a message with malformed headers
• [18043] fix to Content Filter - Zip files inside of winmail.dat are not checked for restricted attachments
• [29602] fix to ActiveSync - Shared PIM folder contents are loaded from disk more often than necessary
• [29852] fix to "Automatically place new meeting requests on calendar, marked Tentative" is disabled when account is configured to extract attachments to the Documents folder
• [29720] fix to ActiveSync - Possible hang when searching public contacts using EAS protocol version 16.1
• [30013] fix to Webmail - A cleared reminder may cause the loss of incoming reminders
• [29963] fix to DKIM verification uses the DNS servers configured in Windows instead of what's configured in MDaemon
• [30031] fix to Webmail - possible crash or memory leak when editing an occurrence of a recurring event that has additional reminders
• [30006] fix to XMLAPI - CreateUser intermittently rejects a valid password
• [30032] fix to ActiveSync - Samsung client may not display calendar items when using EAS protocol version 16.1
• [30061] fix to XMLAPI - QueryServiceState request may hang
• [30100] fix to XMLAPI - CreateUser, UpdateUser, and GetUserInfo use inconsistent units for Quotas/MaxDiskSpace and Quotas/Usage/DiskSpace (now all are in KB)
• [30115] fix to MDRA - DNS-BL "Test" button queries Windows DNS instead of MDaemon's configured servers and reports success on Spamhaus 127.255.255.x error codes
• [30104] fix to MDaemon Server - possible crash when there are too many outbound SMTP connections
• [30136] fix to WebAuthn - Passkeys are rejected as possibly cloned and deleted during normal use
• [30150] fix to XMLAPI - authorization issues with Service Accounts
• [30249] fix to WebAuthn - possible crash
• [30277] fix to WebAuthn - possible exposure of real user email address
• [30289] fix to WorldClient and Pro themes - Document Link dialog does not show the existing link
• [30154] fix to XMLAPI - GetUserInfo reports the Inbound mail restriction action in place of the Outbound action
• [30317] fix to XMLAPI - On a non-English MDaemon, mail restrictions set through the XML API cause messages to be silently deleted
• [30345] fix to handle leak when compromised password checks are enabled
• [30386] fix to MDMigrator - contacts migrated from Exchange show an internal Exchange name (/o=.../cn=Recipients/cn=...) instead of the email address
• [30343] fix to Remote Admin - Users are unable to sign-in after changing their password when 2FA is enabled for the user
• [30263] fix to XMLAPI - typos in CreateUser and UpdateUser samples ("MustChangepassword" should be "MustChangePassword")
• [30261] fix to CalDAV - Accepting a meeting on a shared calendar sends the reply from the delegate instead of the calendar owner
• [30268] fix to XMLAPI - FolderOperation request may cause crash
• [30412] fix to CalDAV - Sharing a calendar with another user reports success but does not give that user access when the client lists the calendar owner first
• [30360] fix to Webmail - keyboard shortcut inconsistencies
• [30355] fix to Webmail - Shortcut Keys feature makes keyboard unusable for HTML text entry boxes in Settings dialog screens
• [30504] fix to Webmail - "Personal" email notification choice shows blank if it was saved when "Personal Folders" was the setting value
• [30460] fix to WorldClient theme - Comment and Folder columns in the Contacts list are always blank
• [30520] fix to ActiveSync - memory leak when processing MoveItems command
• [30427] fix to WebDAV - possible crash in MDWebDAV.dll
• [30513] fix to Webmail - fix to text containing HTML characters (such as <,>, & or quotes) being treated as part of the page in some views instead of being displayed as text
• [30525] fix to Webmail - Set Favorite Folder Nickname is missing from the Pro theme, and nicknames containing & are displayed incorrectly in the WorldClient and Pro themes
• [30575] fix to MDaemon Server - possible crash in MDaemon.exe
• [30508] fix to ActiveSync - possible crash in MDAirSync.dll