/
changelog
494 lines (328 loc) · 18.2 KB
/
changelog
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
symbiosis-email (2015:1216) stable; urgency=medium
* Removed further references to $HOSTNAME in tests.
* Added ruby-cracklib as an install dependency.
* Start services in tests with invoke-rc.d instead of service.
* Tidy how the hostname is set during testing.
-- Patrick J Cherry <patrick@bytemark.co.uk> Wed, 19 Apr 2017 10:39:29 +0100
symbiosis-email (2015:1215) stable; urgency=medium
* Allow underscores in DKIM selectors.
* Allow wildcard whitelisting/blacklistng.
* Added further black/whitelist tests for bad domains.
* Fixed a bug where blacklsted hostnames were not getting checked.
* Updated cipher lists.
* Fix typo ensuring tagged spam does get moved to Spam folder.
-- Patrick J Cherry <patrick@bytemark.co.uk> Tue, 22 Nov 2016 12:16:24 +0000
symbiosis-email (2015:1214) stable; urgency=low
* Bug fix in the Exim4 vhost-default-forward router. Should check if these
home directories exist before setting them.
-- Patrick J Cherry <patrick@bytemark.co.uk> Tue, 09 Aug 2016 12:39:11 +0100
symbiosis-email (2015:1213) stable; urgency=medium
* Fixed incompatibility with updated exim4 (#12673).
-- James Carter <jcarter@bytemark.co.uk> Thu, 17 Mar 2016 13:37:26 +0000
symbiosis-email (2015:1212) stable; urgency=medium
* Fixed symbiosis-email-encrypt-passwords not to have $VERBOSE flag set
permanently.
-- Patrick J Cherry <patrick@bytemark.co.uk> Wed, 03 Feb 2016 13:40:49 +0000
symbiosis-email (2015:1211) stable; urgency=medium
* Removed useless test files from /etc/symbiosis/test.d/exim4_acl_tests.
* Home direcotory now set for the vhost_vacation router in Exim.
* Updated usage of get_param to match new spec in symbiosis-common.
* Exim was using the whole hostname instead of the first component in as the
DKIM selector, which differed from how symbiosis-dns was doing things.
-- Patrick J Cherry <patrick@bytemark.co.uk> Thu, 14 Jan 2016 16:46:05 +0000
symbiosis-email (2015:1118) stable; urgency=medium
* Updated the interface expansion in the remote_smtp transports to work. It
turns out $value gets reset outside the ${extract } expansion.
-- Patrick J Cherry <patrick@bytemark.co.uk> Wed, 18 Nov 2015 14:30:10 +0000
symbiosis-email (2015:1104) stable; urgency=medium
* Changed SSL certificate and key paths in Exim4 and Dovecot to use
/etc/ssl/ssl.combined, which should include the certificate, bundle (where
appropriate) and key.
* Add Debian-exim user to ssl-cert group so it can read the keys in
/etc/ssl.
-- Patrick J Cherry <patrick@bytemark.co.uk> Thu, 05 Nov 2015 14:21:09 +0000
symbiosis-email (2015:1029) stable; urgency=medium
* Local users no longer have to append the hostname to their logins for them
to work.
* Added tests for the dict proxy server.
* Added dependency for latest common package to get Symbiosis::Host#fqdn.
* The poppassd and dict-proxy daemons are now managed by start-stop-daemon
when sysvinit is used.
* Users will shell accounts can login now with just their username, as the
hostname is now added automatically.
* The automatic password hashing program (symbiosis-email-encrypt-passwords)
now skips empty passwords, and has a "verbose" flag to say what is going
on.
* Mail passwords are now automatically hashed on a daily basis.
-- Patrick J Cherry <patrick@bytemark.co.uk> Thu, 29 Oct 2015 16:13:32 +0000
symbiosis-email (2015:1021) stable; urgency=medium
* Added poppassd to provide an interface to change mailbox passwords.
* Fixed SMTP outgoing interface selection (closes #12298).
* Added manpage for symbiosis-email-encrypt-passwords.
-- Patrick J Cherry <patrick@bytemark.co.uk> Wed, 21 Oct 2015 22:32:46 +0100
symbiosis-email (2015:1009) stable; urgency=medium
* Comment out PidFile settings in clamav/freshclam config to aid upgrades.
* Removed clamav monitoring as this is now run under systemd.
* Corrected spamassassin pid and process name for monitoring.
* Move d-push support into own meta-package, so as not to pull in unwanted
gubbins.
* Removed reference to non-existent variable in the dict_handler
* Removed unused password_daemon code.
* Added specific versions for various dependencies.
* Remove tc_checkpassword.rb as this is no longer used.
* Updated SSL ciphers for Dovecot.
-- Patrick J Cherry <patrick@bytemark.co.uk> Fri, 09 Oct 2015 17:24:41 +0100
symbiosis-email (2015:0825) stable; urgency=medium
* Updated GnuTLS ciphers in Exim.
* Updated OpenSSL ciphers in Dovecot.
* Added cronjob to regenerate DH params for exim weekly.
* Added manpage for symbiosis-email-dict-proxy.
* Removed symbiosis-email-check-password as it is no longer used.
* This package now cleans up after itself more effectively on remove/purge.
* Added supplementary groups to clamav
* Fixed up vhost_no_local_mail router to work with messages received
externally that are to be forwarded on to somewhere external.
* Updated exim4 host lists.
* Removed bytemark-antispam references.
* Added per domain or per mailbox ratelimiting via config/mailbox-ratelimit
or mailboxes/user/ratelimit.
* Added d-push (z-push) for ActiveSync support.
* Added automatic email password encryption support which can be disabled by
the conf/mailbox-dont-encrypt-passwords flag.
* Tidied maintscripts to use Debian supplied routines for moving/removing
conf files in /etc.
-- Patrick J Cherry <patrick@bytemark.co.uk> Tue, 25 Aug 2015 12:12:21 +0100
symbiosis-email (2015:0618) stable; urgency=medium
* Updated maintainers/uploaders
* Avoid advertising PLAIN and LOGIN over unencrypted connections.
* Replace ye olde checkpassword auth with dict proxy lookup.
* Set default quota grace to 0%.
* Renamed File#exists? to File#exist? everywhere.
* Exim4 now uses the IP in config/ip as the outgoing interface IP.
* Emails tagged with spam get delivered to Maildir/.Spam/
* Fixed acceptance of multi-word email passwords.
-- Patrick J Cherry <patrick@bytemark.co.uk> Wed, 17 Jun 2015 10:47:19 +0100
symbiosis-email (2015:0128) stable; urgency=low
* Updated Debian standards version.
-- Steve Kemp <steve@bytemark.co.uk> Wed, 28 Jan 2015 10:00:01 +0000
symbiosis-email (2014:1021) stable; urgency=medium
* Fixed forwarding mail from one domain to another with non-local mail does
not work when the message originated remotely (#12128).
-- Patrick J Cherry <patrick@bytemark.co.uk> Fri, 07 Aug 2015 21:32:04 +0100
symbiosis-email (2014:1020) stable; urgency=medium
* Fixed exim configuraion to allow mail being forwarded to
locally-hosted domains with mail hosted elsewhere to work if the mail
originates remotely.
-- Patrick J Cherry <patrick@bytemark.co.uk> Wed, 05 Aug 2015 08:33:39 +0100
symbiosis-email (2014:1019) stable; urgency=medium
* Passwords with spaces in now work.
-- Patrick J Cherry <patrick@bytemark.co.uk> Mon, 22 Jun 2015 09:06:19 +0100
symbiosis-email (2014:1018) stable; urgency=medium
[ James Carter ]
* Fix exim4 config for vacation messages (closes #8448).
[ Patrick J Cherry ]
* Accept mail from authenticated users for locally configured hosts that
have their mail elsewhere.
* Updated maintainer/uploaders.
* Avoid advertising PLAIN and LOGIN over unencrypted connections. Fixes
#8473
-- Patrick J Cherry <patrick@bytemark.co.uk> Tue, 31 Mar 2015 13:10:01 +0100
symbiosis-email (2014:1017) stable; urgency=medium
* Disable SSLv3 in Exim4 and Dovecot (CVE-2014-3566).
-- Patrick J Cherry <patrick@bytemark.co.uk> Fri, 17 Oct 2014 10:31:03 +0100
symbiosis-email (2014:0627) stable; urgency=medium
* Added further tests to exim4 delivery
* Fixed firewall patterns (CVE-2014-3979)
-- Patrick J Cherry <patrick@bytemark.co.uk> Fri, 27 Jun 2014 19:17:21 +0100
symbiosis-email (2014:0214) stable; urgency=low
* Updated dovecot tests to work.
* Added bug control.
* renamed symbiosis-check-mailbox-password symbiosis-email-check-password.
* removed DH_VERBOSE flag in rules.
-- Patrick J Cherry <patrick@bytemark.co.uk> Fri, 14 Feb 2014 13:05:19 +0000
symbiosis-email (2014:0115) stable; urgency=low
* Fixed up helo check for authorized connections.
* Fixed up vacaction messages to use sensible reply_to/from headers.
-- Patrick J Cherry <patrick@bytemark.co.uk> Wed, 15 Jan 2014 16:19:42 +0000
symbiosis-email (2014:0113) stable; urgency=low
* Updated maintainer and uploaders.
-- Patrick J Cherry <patrick@bytemark.co.uk> Mon, 13 Jan 2014 17:04:46 +0000
symbiosis-email (2014:0108) stable; urgency=low
* Added support for local mailboxes in exim4.
* Added tests for local mailboxes in exim4.
* Updated preinst to remove obsolete files.
* Updated preinst to blitz exim4.conf before upgrades to prevent upgrade
failure.
* Fixed failure when validating vhost aliases with an optional suffix.
* New exim4 log patterns for firewall.
* Updated resource control limits to allow more simulataneous connections.
-- Patrick J Cherry <patrick@bytemark.co.uk> Wed, 08 Jan 2014 12:36:19 +0000
symbiosis-email (2013:0731) stable; urgency=low
* Removed dovecot-managesieved and dovecot-sieve as dependencies, added
dovecot-sieve in their place.
-- John Hackett <jhackett@bytemark.co.uk> Wed, 31 Jul 2013 13:47:00 +0100
symbiosis-email (2013:0729) stable; urgency=low
* Added dovecot-managesieved and dovecot-sieve as dependencies.
-- John Hackett <jhackett@bytemark.co.uk> Mon, 29 Jul 2013 14:58:00 +0100
symbiosis-email (2012:1031) oldstable; urgency=low
* Dovecot LDA now returns a temporary failure when a mailbox is overquota,
ensuring it behaves like Exim4 in this situation.
* Corrected default mailbox quota parameter filename to be mailbox-quota
everywhere, rather than default_mailbox_quota or default-mailbox-quota.
* Exim4 quotas now support the documented suffixes of k, M, G, ki, Mi, Gi.
* Exim4 quotas are now based on the size of just one Maildir, rather than
any sub-folders, ensuring enforcement for deliveries made during an Exim
filter.
* Re-strengthened dependencies such that spamassassin & clamav scanners are
required and not merely recommended, since the post-install script assumes
both are instralled.
* When users log in over IMAP/POP3/SMTP the maildirsize quota file, which
the Dovecot LDA relies on, is now rebuilt.
* Exim4 now tags maildir-delivered messages with their size, which it later
uses for quota calculations.
* Dovecot will now automatically create the maildir during delivery if not
already there.
* Added more tests for both Exim4 and Dovecot.
* The IMAP quota is now named, so it shouldn't break apple mail, according
to the Dovecot documentation.
-- Patrick J Cherry <patrick@bytemark.co.uk> Wed, 31 Oct 2012 17:16:45 +0000
symbiosis-email (2012:0815) stable; urgency=low
[ Steve Kemp ]
* Weaken dependencies such that spamassassin & clamav scanners are
merely recommended and not required.
[ Patrick J Cherry ]
* Updated monitoring scripts to be sensible about when they run
clamd/spamassassin tests in light of the fact they are no longer hard
dependencies.
-- Patrick J Cherry <patrick@bytemark.co.uk> Wed, 15 Aug 2012 17:28:02 +0100
symbiosis-email (2012:0509) stable; urgency=high
* Fixed bug whereby mailboxes can be accessed using any old password.
* Added tests to make sure that this never happens again.
-- Patrick J Cherry <patrick@bytemark.co.uk> Wed, 09 May 2012 12:35:01 +0100
symbiosis-email (2012:0418) stable; urgency=low
* clamav-daemon now has its temporary directory specified in
/etc/defaults/clamav-daemon.
* exim4 tests now makes sure that the exim4 process is closed at the end of
each ACL test.
-- Patrick J Cherry <patrick@bytemark.co.uk> Wed, 18 Apr 2012 10:57:43 +0100
symbiosis-email (2012:0301) stable; urgency=low
* Tweaked exim4 config to create mailboxes + subscribe when using Dovecot
LDA.
* Tweaked exim4 config to preserve the domain when delivering using the
vhost_alias router.
-- Patrick J Cherry <patrick@bytemark.co.uk> Thu, 01 Mar 2012 13:50:06 +0000
symbiosis-email (2012:0222) stable; urgency=low
* Updated copyright and documentation links.
-- Patrick J Cherry <patrick@bytemark.co.uk> Wed, 22 Feb 2012 14:08:32 +0000
symbiosis-email (2012:0221) stable; urgency=low
* Updated firewall patterns to check mail.log, rather than mail.err.
* Password file permissions are now updated on read to 0600, if possible.
* Updated depends to require latest symbiosis-common packages.
-- Patrick J Cherry <patrick@bytemark.co.uk> Tue, 21 Feb 2012 10:14:16 +0000
symbiosis-email (2012:0215) stable; urgency=low
* Remove old cron-jobs in postinst.
* Added Domain::Mailbox#password_file method.
-- Patrick J Cherry <patrick@bytemark.co.uk> Mon, 20 Feb 2012 21:15:40 +0000
symbiosis-email (2012:0208) stable; urgency=low
* Updated test scripts not to have executable bit set, or a shebang line.
* Updated debian control files to use relationships properly, as per section
7.6 of the Debian Policy Manual.
* Updated postinst to remove old dovecot test.
-- Patrick J Cherry <patrick@bytemark.co.uk> Tue, 07 Feb 2012 17:22:13 +0000
symbiosis-email (2012:0201) stable; urgency=low
* Removed host rdns lookups for trusted IPs (i.e. ones permitted to relay /
local ones) to avoid monit errors during times of DNS flakiness.
* Dovecot ManageSieve now on IPv6.
* ManageSieve port now added to the firewall patterns list.
* Removed spurious crontab.
-- Patrick J Cherry <patrick@bytemark.co.uk> Wed, 01 Feb 2012 20:44:49 +0000
symbiosis-email (2012:0124) stable; urgency=low
* Enabled TLSv1 for outlook compatibility with exim4.
* Tightened dependencies to fix conflicts in lenny upgrades
* Fixed exim4 and dovecot tests to work betterly.
* Fixed bug introduced earlier that prevented mail passwords being
authenticated. Also improved mailbox tests to work
* Moved tc_checkpassword to email package, where it belongs and fixed it up.
-- Patrick J Cherry <patrick@bytemark.co.uk> Tue, 24 Jan 2012 13:29:08 +0000
symbiosis-email (2012:0117) stable; urgency=low
* /usr/sbin/symbiosis_checkpassword now called
symbiosis-check-mailbox-password.
* symbiosis-check-mailbox-password now written in ruby
* Tests improved
* Ruby domain/mailbox library written
* Mailbox quotas added
* Sieve support added
-- Patrick J Cherry <patrick@bytemark.co.uk> Tue, 17 Jan 2012 17:14:13 +0000
symbiosis-email (2011:1209) stable; urgency=low
* Updated standards version (no change).
-- Steve Kemp <steve@bytemark.co.uk> Fri, 09 Dec 2011 15:46:31 +0000
symbiosis-email (2011:1201) stable; urgency=low
* Added dependency on symbiosis-common for SSL certificate generation
* Fixed TLS cipher params for exim4.
-- Patrick J Cherry <patrick@bytemark.co.uk> Thu, 01 Dec 2011 11:49:28 +0000
symbiosis-email (2010:1130) stable; urgency=low
* Updated exim4 config to route via DNS for local domains only when those
domains have MX or SRV records pointing elsewhere (i.e. not A records).
Closes #1306.
-- Patrick Cherry <patick@bytemark.co.uk> Tue, 30 Nov 2010 10:45:14 +0000
symbiosis-email (2010:1111) stable; urgency=low
* Tightened up SSL cipher versions in Dovecot
* Removed Exim4 version number from SMTP banner
-- Patrick Cherry <patick@bytemark.co.uk> Thu, 11 Nov 2010 14:40:47 +0000
symbiosis-email (2010:0914) stable; urgency=low
* Moved config from bytemark-vhost.d to symbiosis.d
* Moved checkpassword script to dovecot_checkpassword
* Added manpages
* Tidied packaging
* Updated Makefiles to check for 00-header before rebuilding the
configuration files for exim4 and dovecot.
* Added tests to the symbiosis-test directory
-- Patrick J Cherry <patrick@bytemark.co.uk> Tue, 14 Sep 2010 21:53:23 +0100
symbiosis-email (2010:0909) stable; urgency=low
* Added in localhost rewriting
* Fixed tests
* Fixed vhost_aliases router to behave like vhost_forward
* Only run our rewriter cronjob if the script is available.
-- Steve Kemp <steve@bytemark.co.uk> Wed, 09 Sep 2010 12:05:12 +0100
symbiosis-email (2010:0603) stable; urgency=low
* Split dovecot config into a multiple file layout (like exim4)
* Unified exim4 and dovecot makefiles
* Exim4 now uses dovecot sasl for authentication.
* Exim4 no longer delays mail following errors in forward files
* Regex in /usr/sbin/checkpassword sanitised
* Bytemark antispam config removed.
* Renamed packages
* Switched to dpkg-source 3.0 (native) format
-- Steve Kemp <steve@bytemark.co.uk> Thu, 03 Jun 2010 13:51:30 +0100
bytemark-vhost-email (20090707183051) stable; urgency=low
* Fixed exim4 config to defer mail from non-bytemark antispam hosts if
bytemark-antispam is present.
-- Patrick J. Cherry <patrick@bytemark.co.uk> Tue, 07 Jul 2009 18:30:52 +0100
bytemark-vhost-email (20090707175243) stable; urgency=low
* Updated checkpassword to have a better regex
-- Patrick J. Cherry <patrick@bytemark.co.uk> Tue, 07 Jul 2009 17:52:44 +0100
bytemark-vhost-email (20090707161820) stable; urgency=low
* Removed mention of the Bytemark antispam servers
-- Steve Kemp <steve@bytemark.co.uk> Tue, 7 Jul 2009 16:18:20 +0000
bytemark-vhost-email (20090707153244) stable; urgency=low
* Per-Lenny vhost repository, rather than branches
-- Steve Kemp <steve@bytemark.co.uk> Tue, 7 Jul 2009 15:32:44 +0000
bytemark-vhost-email (20090707125946) stable; urgency=low
* Fix login
-- Steve Kemp <steve@bytemark.co.uk> Tue, 7 Jul 2009 12:59:42 +0000
bytemark-vhost-email (20090522105210) stable; urgency=low
* New release for Lenny.
-- Steve Kemp <steve@bytemark.co.uk> Fri, 22 May 2009 10:52:10 +0000
bytemark-vhost-email (20081117170844) stable; urgency=low
* Install firewall blacklist patterns.
-- Steve Kemp <steve@bytemark.co.uk> Mon, 17 Nov 2008 17:09:08 +0000
bytemark-vhost-email (20081110153347) stable; urgency=low
* Install a dependency upon rdoc
-- Steve Kemp <steve@bytemark.co.uk> Wed, 12 Nov 2008 15:22:51 +0000
bytemark-vhost-email (20081110153346) stable; urgency=low
* Install a non-corrupt cron-job
-- Steve Kemp <steve@bytemark.co.uk> Tue, 11 Nov 2008 13:13:13 +0000
bytemark-vhost-email (20081110153344) stable; urgency=low
* The Bytemark Virtual Hosting Package bytemark-vhost-email
- Support may be found at http://vhost.bytemark.co.uk/
-- Steve Kemp <steve@bytemark.co.uk> Mon, 10 Nov 2008 15:33:44 +0000