Version 6.4 Revision History

6.4c.2 2-Jun-2023

• SECURITY: S/MIME signatures with elliptic curves certificates (including GOST R 34.10-2012) are supported now.
• QUEUERULES: the Execute action is no more available in account-level Rules.
• ACCOUNTS: the "OS UserName" setting has been removed.
• ACCOUNTS: the "OS Password" setting has been removed.
• KERNEL: the dependency on the libcrypt library on Unix platforms has been removed.
• CLUSTER: remote reading of Calendar folders has been improved.
• MEDIASERVER: media distribution from a separate media mixer channel has been implemented.
• WEBADMIN: PKI: importing a Private Key has been separated from generating one.
• NETWORK: the named Address Lists have been implemented.
• CLI: the GetAddrLists, SetAddrLists, GetClusterAddrLists, SetClusterAddrLists methods have been implemented.
• ACCOUNTS: the "Permitted Login Addresses" setting has been implemented.
• DOMAINS: the "Client IP Addresses" setting has been removed.
• NETWORK: the Temporary Client IPs have been removed.
• NETWORK: the Client IP Addresses have been redesigned.
• NETWORK: the Blacklisted IP Addresses have been redesigned and moved to SMTP settings page.
• DIRECTORY: a caching of the most used Directory data has been implemented.
• CG/PL: a special false-value object representing boolean false has been implemented.
• HTTP: the public access to the root of the file storage is disabled by default.
• Bug Fix: LICENSING: 6.4c1: some combinations of license keys were processed incorrectly.
• Bug Fix: KERNEL: 6.4c1: the Temporary Debug IP Addresses were not propagated in clusters.
• Bug Fix: WEBADMIN: 6.4c1: possible server crash on the domains list page.
• Bug Fix: WEBADMIN: 6.4c1: domain administrator rights were checked incorrectly.
• Bug Fix: QUEUERULES: editing some custom rules might cause a server crash.
• Bug Fix: CALENDAR: creating an event without attendees in a delegated calendar might cause a server crash.

6.4c.1 29-Dec-2022

• Samoware: Samoware HTML Version 6.4c.1 is included.
• KERNEL: the Child Processes Manifesto has been implemented.
• ACCOUNTS: the "Path to Outer Trash Bin" setting has been implemented (a "Second Stage Recycle Bin" concept).
• MAILBOX: logging format improved.
• HTTP: the support for Content-Encoding: gzip header in incoming data has been implmented.
• HTTP: incoming connections through trusted proxy servers are handled better now.
• CG/PL: the Convert function now supports "gzip", "gzip-zlib", "gunzip", "base32" parameters.
• WEBUSER: QR codes for Time-based One Time Passwords (TOTP) generator application binding has been implemented.
• KERNEL: the support of Time-based One Time Passwords algorythm for two-factor authentication has been implemented.
• KERNEL: the integration with IP Geolocation services has been implemented.
• CLI: the IPGeolocation method has been implemented.
• CG/PL: the IPGeolocation function has been implemented.
• XIMSS: the IPGeolocation command has been implemented.
• AIRSYNC: added support for the AccountOnlyRemoteWipe operation.
• QUEUE: the postponed message delivery functionality has been implemented.
• QUEUERULES: the Attachment Name condition has been implemented.
• QUEUERULES: the Body Words condition has been implemented.
• QUEUERULES: the From, Sender, To/Cc conditions can check against group membership.
• QUEUERULES: the Store in action now supports [IGNOREFAILURES] prefix.
• QUEUERULES: the macro substitution for source IP address has been implemented.
• ADMIN: the Can Kill Sessions access right has been implemented.
• WEBADMIN: user sessions now can be killed.
• WEBADMIN: incoming SMTP, HTTPU, HTTPA, PWD, LDAP, POP, IMAP, FTP, XIMSS, XMPP connections now can be killed.
• WEBADMIN: outgoing SMTP and XMPP connections now can be killed.
• CLI: the KillModuleJob method has been implemented.
• KERNEL: when an IP Address is blocked due to failed logins or protocol errors all sessions from that IP address are now killed.
• KERNEL: the Temporary Debug IP Addresses list has been implemented.
• WEBADMIN: the monitor of the Temporary Debug IP Addresses list has been implemented.
• CLI: the TempDebugIP, GetTempDebugIPs, SetTempDebugIPs methods has been implemented.
• SECURITY: Scheme 2 for Password-Based Encryption (PKCS#5 v2.1) is supported now.
• SECURITY: RFC6986 (GOST R 34.11-2012: Hash Function) has been implemented.
• SECURITY: RFC7091 (GOST R 34.10-2012: Digital Signature Algorithm) has been implemented.
• SECURITY: RFC7801 (GOST R 34.12-2015: Cipher "Kuznyechik") has been implemented.
• SECURITY: RFC8891 (GOST R 34.12-2015: Cipher "Magma") has been implemented.
• KERNEL: the search algorithm for calendar items in messages has been improved.
• KERNEL: dropping Root privileges is now available in Linux OS.
• XIMSS: added support for the forwardInline message retrieval mode.
• XIMSS: the fileRights method has been implemented.
• XIMSS: the verifyIdentity method has been implemented.
• XIMSS: the getCalAlarms and setCalAlarms methods have been implemented.
• GROUPS: implemented the option to receive mail only from the group members.
• ROUTER: the _dis suffix support has been implemented for Directory-assisted relaying.
• HTTPO: secure connections use the Target Domain TLS extension.
• KERNEL: Forwarder objects now may have additional attributes.
• CLI: the UpdateForwarder method has been implemented.
• WEBADMIN: the "Real Name" and "Comment" attributes now may be set for Forwarders.
• WEBADMIN: the "Comment" attribute now may be set for Accounts, Groups and Named Tasks.
• SMTP: the Senders Address Profiles have been implemented.
• CLI: the GetSMTPRecvProfiles, SetSMTPRecvProfiles methods have been implemented.
• SMTP: sending from Client IPs no more allows unauthenticated relaying.
• SMTP: the "Relay to Hosts We Backup" setting has been replaced with --SMTPRelayToHostsWeBackup command line option.
• SMTP: the "NO-SOLICITING" setting has been replaced with --SMTPNoSoliciting command line option.
• SMTP: the "Advertise AUTH to" and "Advertise 8BITMIME to" settings are deprecated. Now they are advertised to everyone.
• NETWORK: the LAN Segments have been implemented.
• NETWORK: the "Client-only Logins" option has been removed.
• LIST: the "Verify Owner Using" setting has been removed. Now only authentication is required.

Summary

• The "Path to Outer Trash Bin" setting has been implemented (a "Second Stage Recycle Bin" concept).
• The "OS UserName" setting has been removed.
• The "OS Password" setting has been removed.
• The "Permitted Login Addresses" setting has been implemented.

• The Can Kill Sessions access right has been implemented.

• Added support for wiping remote account only (without restoring device to factory defaults).

• The Convert function now supports "gzip", "gzip-zlib", "gunzip", "base32" parameters.
• The IPGeolocation function has been implemented.

• The IPGeolocation method has been implemented.
• The KillModuleJob method has been implemented.
• The TempDebugIP, GetTempDebugIPs, SetTempDebugIPs methods have been implemented.
• The UpdateForwarder method has been implemented.
• The GetSMTPRecvProfiles, SetSMTPRecvProfiles methods have been implemented.
• The GetAddrLists, SetAddrLists, GetClusterAddrLists, SetClusterAddrLists methods have been implemented.

• A caching of the most used Directory data has been implemented.

• The "Client IP Addresses" setting has been removed.

• The support for Content-Encoding: gzip header in incoming data has been implemented.
• The support for incoming connections through trusted HTTP proxy servers has been implemented.

• The Child Processes Manifesto has been implemented.
• Dropping Root privileges is now available in Linux OS.
• The support of Time-based One Time Passwords algorythm for two-factor authentication has been implemented.
• The integration with IP Geolocation services has been implemented.
• When an IP Address is blocked due to failed logins or protocol errors all sessions from that IP address are now killed.
• The Temporary Debug IP Addresses list has been implemented.
• Forwarder objects now may have additional attributes.
• The dependency on the libcrypt library on Unix platforms has been removed.
• In composed messages the "Message-ID" headers now contain the sender's domain name rather than the Main Domain name.

• The "Verify Owner Using" setting has been removed. Now only authentication is required.

• Logging format improved.

• Media distribution from a separate media mixer channel has been implemented

• The named Address Lists have been implemented.
• The LAN Segments have been implemented.
• The "Client-only Logins" option has been removed.
• The Temporary Client IPs have been removed.
• The Client IP Addresses have been redesigned.
• The Blacklisted IP Addresses have been redesigned and moved to SMTP settings page.

• The postponed message delivery functionality has been implemented.

• The Attachment Name condition has been implemented.
• The Store in action now supports [IGNOREFAILURES] prefix.
• The macro substitution for source IP address has been implemented.
• The Body Words condition has been implemented.
• The From, Sender, To/Cc conditions can check against group membership.
• The Execute action is no more available in account-level Rules.

• The Senders IP Address Profiles have been implemented.
• Sending from Client IPs no more allows unauthenticated relaying.
• The "Relay to Hosts We Backup" setting has been replaced with --SMTPRelayToHostsWeBackup command line option.
• The "NO-SOLICITING" setting has been replaced with --SMTPNoSoliciting command line option.
• The "Advertise AUTH to" and "Advertise 8BITMIME to" settings are deprecated. Now they are advertised to everyone.

• The numTempBlocked, numTempDebug, numTempUnblockable, numFailedLogins, numProtocolErrors elements have been added.

• User sessions now can be killed.
• Incoming SMTP, HTTPU, HTTPA, PWD, LDAP, POP, IMAP, FTP, XIMSS, HTTPU, HTTPA, XMPP connections now can be killed.
• Outgoing SMTP connections now can be killed.
• The monitor of the Temporary Debug IP Addresses list has been implemented.
• The "Real Name" and "Comment" attributes now may be set for Forwarders.
• The "Comment" attributes now may be set for Accounts, Groups and Named Tasks.
• PKI: importing a Private Key has been separated from generating one.

• QR codes for Time-based One Time Passwords (TOTP) generator application binding has been implemented.

• The IPGeolocation command has been implemented.
• Added support for the forwardInline message retrieval mode.
• The fileRights method has been implemented.
• The verifyIdentity method has been implemented.
• The getCalAlarms and setCalAlarms methods have been implemented.
• The mailboxModified message has been improved.