2.8.28

Changes

• added ability to define a default relay in relay_dest_domains
• spamassassin: replace msg_too_big & should_check with should_skip #2972
• spamassassin: allow returning DENYSOFT on errors #2967
• dep: use caret version range for all dependencies #2965
• outbound: disable outbound to localhost by default #2952
• connection error logging: use key-value paris #2921
• tls: change default to NOT send TLS client certs #2902
• dep: redis is now a dependency #2896
• use address-rfc2821 2.0.0
• http: use CDN for bootstrap/jquery, drop bower #2891
• drop support for node 10 #2890

New features

• tls: require secure and verified sockets for configured hosts/domains
• tls: add no_starttls_ports - an array of incoming ports where STARTTLS is not advertised
• outbound: add local_mx_ok config #2952
• skip plugins at runtime by pushing name into transaction.skip_plugins #2966
• outbound: add ability to specify delay times for temporary fails in temp_fail_intervals #2969

Fixes

• bounce: correctly set fail recipients #2901
• bounce: correctly set bounce recipients #2899
• Get local_ip from getsockname() instead of server properties #2914
• Received header TLS section adheres more closely to RFC 8314 #2903
• use RFC-2045 Quoted-Printable in email message body
• use RFC-2047 Q encoded-words in email headers