H-Sphere version: 3.0 and up

Updates:

• Spamassassin 3.2.5
• ClamAV 0.93.3

Fixes:

• Included 'qmail-todo' patch to solve the bug: "busy mail server qmail-todo process"
• Fixed problem when Qmail configuration option newline had no effect
• Fixed bug with qmail-smtpd and rblspp crashing with segfaults

Released with H-Sphere 3.1 Patch 1.

Updates:

• ClamAV 0.93.1
• Fixed digital Signatures And FreeBSD Freshclam
• Fixed H-Sphere clamd memory utilization on CentOS 4 and 5
• Fixed AntiSpam and AntiVirus problems on FBSD 6.x

Released with H-Sphere System Packages Update.

Updates:

• ClamAV 0.92.1

Released with H-Sphere System Packages Update.

Updates:

• Spamassassin 3.2.4

Released with H-Sphere System Packages Update.

Updates and fixes:

• ClamAV 0.92
• Fixed ClamAV Vulnerability

Released with H-Sphere System Packages Update.

Fixes:

• Added POLLERR check for descripters in sslserver implementation
• Disabled ArchiveMaxFileSize directive in clamav.conf
• Fixed CRAM-MD5 authentication in case of wrong authorization

Released with H-Sphere System Packages Update.

Improvements and updates:

• Fixes related to RFC 3848, additional ESMTP keyword format - "M" letter marks open relay sessions.
• Added possibility to exclude SA/CA check for authorized users and/or relay boxes completely
• DCC 1.3.66
• Minor startup file fixes related to SMTPS service

Released with H-Sphere System Packages Update.

Improvements and updates:

• Added possibility to enable ESMTP check in qmail-remote client:
  • ESMTP STARTTLS extension defined in RfC RFC3207
  • ESMTP SIZE extension defined in RfC 1870
  • ESMTP PIPELINING extension defined in RfC 2920
  • Each extension enabled separately via mconnectext control file
More: http://opensource.sf-tec.de/qmail
• qmHandle v. 1.3.2 which provides flexible search engine for headers/body of the messages using regular expression

Fixes:

• Extended RBL command line parameters string forming in startup file (in the case 'A' record RBL dbs)
• Added fixes to preserve custom SSL settings
• Changing authsender parameter according to smtpauth parameter value

Added in H-Sphere System Packages Update.

Improvements and updates:

• ClamAV 0.91.2
• Eliminated vulnerabilities in ClamAV
• DCC version 1.3.58
• Improved traffic calculation procedure:
  • Added additional headers: X-Sender and X-RCPT-TO (X-Sender if authsender parameter=2)
  • The headers help to resolve traffic calculation problem in the case of dynamic open relay and mail resources with multiple forwards
• MAXSAMSGSIZE variable is parsed by MTA to exclude spamc execution if MAXSAMSGSIZE=0 (disabled antispam check for specific IP/subnet)

Added in H-Sphere 3.0 Patch 5 and H-Sphere System Packages Update.

Improvements and updates:

• SpamAssassin 3.2.3
• Other improvements included into previous hsphere-mail-service-4-29

Released with H-Sphere System Packages Update

Improvements and updates:

• SpamAssassin 3.2.2
• Added catchall parameter (options control file). If catchall=0, then CatchAll mail resource becomes disabled globally (by default catchall=1).
• Added rejectdiscardedmail parameter (options control file). If rejectdiscardedmail=1, then mail resource will be rejected in discard mode at SMTP level (by default rejectdiscardedmail=0).

Improvements and updates:

• ClamAV 0.91.1

Fixes:

• Added Bayes plugin in init.pre to enable bayes scoring
• Enabled reverse DNS check for tcpserver/sslserver if Spamassassin (SA) network checks are enabled
• Changed SA SQL driver for MySQL db access from Mail::SpamAssassin::BayesStore::SQL to Mail::SpamAssassin::BayesStore::MySQL

Released with H-Sphere System Packages Update

Improvements and updates:

• ClamAV 0.91
• dcc-dccproc-1.3.57
• Added Diffie-Hellman (DH) file generation during package install to decrease sslserver service load (for this, /hsphere/local/config/mail/scripts/mail-ssl-proto script as a cron task may be used).

Fixes:

• Fixed X-Envelop header for forwarded messages
• Fixed qmail sendmail wrapper configuration on FreeBSD boxes
• Fixed output of "CAPA" command in qmail-popup daemon (important for php imap API)
• Fixed dummy user check for domains, where catchall is enabled (HS 3.1+)

Released with H-Sphere System Packages Update

Improvements and fixes:

• ClamAV 0.90.3
• SpamAssassin-3.2.1
• blackholedsender db - configured to work with wildcard patterns
• Fixed user check procedure in the case 'default@domain' mail recipient
• Improved filtering of wildcard sender patterns for autoresponder and mail SMS (HS 3.1.0+)
• Included usercheck for dummy users in 'master+relay' or 'relay' mail server configuration (for HS 3.1.0+)
• Fixed startup issue for POP3 SSL service

Released with H-Sphere System Packages Update and H-Sphere 3.0 Patch 2

Improvements and fixes:

• SpamAssassin-3.2.0
• Disabled TLS by default (mail-ssl-proto script for switching on)
• Decreased SSL timeout (POP3S, SMTPS protocols) to 1 minute
• Qmail startup file fixes

hsphere-mail-service-4-25 is released with H-Sphere System Packages Update

hsphere-mail-service-4-25 source files are available at http://www.psoft.net/shiv/HS/bundles/hsphere-mail-service-4-25.tgz

Improvements:

• ClamAV 0.90.2 that fixes a security hole.
• Optional STARTTLS (RFC 2487) support in conjunction with sslserver, includes:
  • UCSPI-SSL implementation patched by UCSPI-TLS extension
  • SPAMCONTROL STARTTLS/STLS SMTP/POP3 protocol implementation
  • Changes related to choosing SSLv2/3/TLSv1 protocols
  • Chrooted configuration
• ClamAV daemon works under clamav user
• Extended autoresponder functionality (HS 3.1+):
  • Autoreply to allowed SENDER patterns only, configuration at the separate mail resource level
  • Autoreply if SENDER originating IP corresponds to a target receipient IP only:
    • used SPF check, only PASS rule is allowed
    • if SPF record is absent, MX records check for SENDER domain is initiated
• Qmail-sms utility (for HS 3.1+, included as a mail resource):
  • Ported on FreeBSD OS
  • Added SENDER pattern filtering

Fixes:

• Fixed per IP limit check inconsistencies
• SIZE extension for some mail clients
• SMTP logging and SMTP AUTH issue
• Mail filtering on Centos 4 64bit platforms
• Rules Du Jour update procedure

hsphere-mail-service-4-24 is released with H-Sphere System Packages Update

Fixes:

• ClamAV updated to version 0.90.1
• NodalCoreAcceleration option in clamav.conf is set to default
• DCC (Distributed Checksum Clearinghouse) client updated to version 1.3.52

hsphere-mail-service-4-23 is released with H-Sphere System Packages Update

Improvements:

• ClamAV 0.90 introduces lots of new interesting features and marks a big step forward in the development of antivirus engine. Over 90.000 signatures in the database. Main improvements:
  • The availability of scripted updates - instead of transferring the whole cvd file at each update, only the differences between the latest cvds and the previous versions will be transferred.
  • RAR3, SIS and SFX archives support is finally available together with new unpackers and decryptors: pespin, sue, yc, wwpack32, nspack, mew, upack and others.
  • ClamAV now includes better mechanisms for scanning ELF, PDF and tar files.
  • Improved email decoding to reduce both the memory requirements and the time taken to process attachments.
  • On the performance side, implemented support for the MULTISCAN command in clamd, allowing to scan multiple files simultaneously.
  • Support for a new phishing signatures format that has proved very effective in detecting phishing emails. (NOT INCLUDED yet, as this requires configuration with --enable-experimental option).
• SpamAssassin 3.1.8 with a security hole fix.
• SPAMCONTROL Version 2.4.17.
  • GREETDELAY to discourage botnet spam SMTP servers.
  • Extensible logging format.
  • Logging for failed SMTP sessions.
  • Reference badsignatures implementation and additional badloadertypes filter (this part is optimized avoiding using cdbs)
• Added stricthelocheck parameter (options file, disabled by default), which considers HELO command obligatory.
• Added chksignature and chkloadertype (options files, disabled by default), which provide badsignatures and badloadertypes filtering for mail resources with enabled antivirus check.
• Exclusively for testing purposes added includeoriginmsg boolean parameter (options file, disabled by default). It provides full message inclusion in the bounce email.
• Removed expired --badurls spamd option.

Fixes:

• intialization variables in qmail startup file (FreeBSD boxes)
• Added required MIMEHeader SpamAssassin plugin to init.pre conf file.
• command line misconfiguration with anti-rbl list and default rblsmtpd mode
• Added set of more stricted file/directory permissions
• Fixed problem with qmail-pop3d daemon which occured in previous mail update and caused high load of IMAP service

hsphere-mail-service-4-22 source files are available at http://www.psoft.net/shiv/HS/bundles/hsphere-mail-service-4-22.tgz

Improvements:

• Added qmail-spp engine aimed to add rblspp plugin
• Added qmail-spp which provides plugin support for qmail SMTP daemon (qmail-smtpd)
• Added rblspp plugin as a replacement for rblsmtpd. It resolves the RBL check delay problem for successful SMTP authenticated connections
• Additional RBL configuration:
  • allowed addition of anti-RBL source
  • added setting of modes which are allowed by rblsmtpd or rblspp:
    • used a 553 error code for IP addresses listed in the RBL instead of default, 451
    • always considering dns lookups failure as a temporary error, 451
• Extended qmail's pop3 daemon (qmail-pop3d.c) functionality - added seen flag on files in maildir for messages involved in RETR or TOP commands
• Implemented auto-configuration of spamd service when MySQL database is remotely located

Fixes:

• Changed SMTP status code in case message size exceeds Internationalized Email Headers draft requirements (from 558 to 552)
• Fixed the problem with SpamAssassin and ClamAV filters for catchall mail resources for some OSs
• Fixed the issue with ezmlm locking when NFS storage is used

hsphere-mail-service-4-21 released with 2.5 Patch 9 and 3.0 RC 4.

Fixes:

• ClamAV 0.88.7 that fixes a securyty hole

hsphere-mail-service-4-20 is released with H-Sphere 3.0 RC 3

Fixes:

• Fixed mailbox disk usage calculation with size greater than 4GB
• Fixed formation of X-Envelope header with dot in the user part of the email address
• Fixed local bouncing after unsuccessful remote delivery

hsphere-mail-service-4-19 is released with H-Sphere 2.5 Patch 7

Updates and Improvements:

• ClamAV updated to version 0.88.6
• According to AOL (the largest ISP) recommendations, X-Originating-IP header was added
• File locking and NFS storage:
  • now vpopmail & ezmlm file locking is automatically switched off in case of NFS shared storage
  • spamd and clamd supervise are moved to local disk storage in case of NFS
  • Criteria for the 2 above-mentioned modes: presence of /etc/hsphere/lb.id configuration file
• Included OpenProtect's SpamAssassin sa-update channel engine
• Added X-Envelope-To header required by some mail clients (xenveloptoheader parameter is now disabled by default)
• Fixed qmail startup file to avoid hanging during remote service restart

hsphere-mail-service-4-18 is released with H-Sphere System Packages Update

Updates and Improvements:

• Fixed problem with capital letter B in the envelope recipient address.

This version was released with System packages update

hsphere-mail-service-4-17 source files are available at http://www.psoft.net/shiv/HS/bundles/hsphere-mail-service-4-17.tgz

Updates and Improvements:

• SpamAssassin 3.1.7
• Other improvements and fixes included into private hsphere-mail-service-4-14

Updates and Improvements:

• SpamAssassin 3.1.6
• Set bayes_sql_override_username SA parameter in local.cf by default
• Other improvements and fixes included into private hsphere-mail-service-4-14

Updates and Improvements:

• Fixed problem with recipient email address with space(s) when CatchAll is enabled
• Added new maxwrongrcpts parameter which limits the maximum number of wrong recipients
• Overviewed bouncing policy scheme:
  • bouncingip allows sending bounce mail via separate IP
  • strictbounce allows:
    - for bounce to act as double bounce
    - for bounce and double bounce to act as triple bounce (when bounce message is discarded)
  • temperror considers temporary error a permanent one for local, remote, and local & remote mails

Updates and Improvements:

• SpamAssassin 3.1.5.
• Enabling tcpserver verbose mode only when smtplog equals 2.
• Vpopmail fixes:
  • Increased buffer for vaddfilter and vdelfilter utils.
  • correct unlocking open-smtp file when tcp.smtp.cdb is locked
• Improved mail statistics gathering scheme to be more reliable

This version was released with H-Sphere 2.5 Patch 5

Fixes and Improvements:

Fixes and Improvements:

• ClamAV updated to version 0.88.3

Note: hsphere-mail-service-4-11 is included into H-Sphere 2.5 Patch 4.

Changes and Improvements:

• Spamassassin updated to version 3.1.3
• Included user's bad Mime Types configuration
• Restricted MySQL access to Spamassassin database (only for localhost)

hsphere-mail-service-4-10 released with H-Sphere 2.5 Patch 2.

Changes and Improvements:

• Spamassassin updated to version 3.1.2
• Updated Vpopmail to 5.4.13
• Fixed the issue with mail duplication in case of specific mail alias configuration
• Extended maillog format (including SMTP related notifications)
• Updated RulesDuJour to version 1.28 that adds a set of additional rules and removes deprecated ones
• Security improvement: all mail related users now get /sbin/nologin shell.
• Changed init.pre SpamAssassin configuration file: when containing THIS IS DEFAULT PSOFT CONF. string, it is overwritten

hsphere-mail-service-4-9 source files are available at: http://www.psoft.net/shiv/HS/bundles/hsphere-mail-service-3-20.tgz (the same as for hsphere-mail-service-3-20)

Fixes and Improvements:

• ClamAV security hole eliminated
Note: hsphere-mail-service-4-8 is released with H-Sphere System Packages Update

Fixes and Improvements:

• SpamAssassin updated to version 3.11.
• ClamAV 0.88.1 security update

Additional boolean configuration parameters:

• uquotacheck provides message bouncing during SMTP session in case of mailbox quota overflow.
• localtime provides generation of date stamps in local timezones for various qmail programs.

• Logging SPF related info (LOG_MAIL syslog facility).
• Additional SpamAssassin configurable parameters:
  • maxsascore (Score, after which spam messages will be removed; default: 100000)
  • samsgsize (Specify maximum message size, in bytes, to be sent to spamd, otherwise this step will be skipped; default: 250k)
  • satimeout (Timeout in seconds for communications to spamd; default: 600).
• Optimized vpopmail authentication mechanism in mysql mode - dynamic relay settings are stored and read by tcpserver from MySQL DB. Static relay settings remain in tcp.smtp.cdb - this is useful to provide more flexible mail server parameters tuning by setting predefined variables.
• Added opensmtptimeout parameter. It allows to set open relay lifetime, in minutes, after POP-before-SMTP authentication; default: 3 hours.

This version incorporates improvements and fixes of hsphere-mail-service-3-14.

This is the next generation mail system built especially for H-Sphere 2.5 and up.