SurgeMail Mail Server Changelog

What's new in SurgeMail Mail Server 7.3j Beta

Aug 29, 2018
  • Fixed cleanup_users command
  • Fixed incorrect display of SSLV2 protocol in list when it's actually disabled. (Costmetic)
  • Fixed memory leak introduced in 7.3j-7 related to pop sessions.
  • Fixed hung long timeout issue.
  • Fixed memory leak in mygethostname modification.
  • Trimmed name from 'from' header for g_from_allow matching.
  • Sorted folder display in user self management, and added folders to menu on left for users.
  • Added G_VIRUS_SCANNER_LIST and default list of file types to run the virus scanner on (reduces load and false positives).
  • Added ssl_alias setting which can be used to add alternate ssl hostnames for a domain, like mail.xyz.com, smtp.xyz.com, do there where you want to create a separate ssl certificate for each of those alternate names.
  • Fixed migration so account settings (like quota) are not lost if the account is configured before migration.
  • Added setting g_ssl_auto "true", and command tellmail ssl_update, this completely automates ssl certificate creation/signing. The only requirement is that your server is accessible on port 80, so it cannot do this if you are also running a web server on the same mail server.
  • Added command tellmail resync_folder FOLDERNAME, useful for copying folders to the mirror when first setting it up, typically the train folder or ssl folders or surgeweb templates that you may wish to replicate.
  • Added g_ssl_warn setting that alerts the user if they are using non SSL to login to IMAP/POP/SMTP. The alert is limited to once per week.
  • Fixed crash in /surgemail(spamc_process_filemem)

New in SurgeMail Mail Server 7.3c2 Beta (Jun 12, 2017)

  • Fix: Further fix to communications protocol tweaks which resulted in redbox error rather than green status code when drag and dropping a message from Spam folder to any other folder.
  • Fix: Sporadic CPU loop issue in the contacts export code. Bug has always existed.
  • Fix: Improvements to communication protocol tweak in build 7.2m-7, should now have much better display of actual errors with error codes etc rather than just "Communications failed" fallback error.

New in SurgeMail Mail Server 7.2e (Jan 9, 2017)

  • 7.2d-19 Modified crash handling to prevent deadlock. Added g_smite_skip_from
  • 7.2d-18 bug fix g_smtp_noauth wasn't showing correct log message.
  • 7.2d-17 Added g_virus_cloud setting to enable cloud scanning (primarily for use on smaller systems using clamav, note that this setting does send the samples over the internet so may not be appropriate in all situations).
  • 7.2d-16 Improvements to virus handling to allow easy integration with your choice of system level virus scanners (Windows Defender and ClamAV etc). Legacy support for avast will continue for 12 months but we recommend using the new virus config page to change to one of the above scanners after updating surgemail. Avast support is being phased out due to multiple long standing support/performance issues and tests that show we can achieve better results with system provided scanners and other new features.
  • 7.2d-15 Fixed issue with imap idle command on mirror not seeing new messages immediately.
  • 7.2d-14 Minor fix to imail_inherit
  • 7.2d-13 Fixed rare nwauth race condition on unix which could miss an update from the master occasionally. Issue tellmail resync_nwauth on master to ensure authent matches on the slave.
  • 7.2d-12 Minor fixes to bind'ing to incoming ip address for bounces etc if g_bind_incoming used
  • 7.2d-11 Fixed mapping of url to vdomain where multiple vdomains have the same matching vdomain ip address but only one matches the url.
  • 7.2d-10 Added more letsencrypt support. Setting g_letsencrypt to define the path to the certificates (which are auto coppied and loaded once a day), the domain name is automatically added so one global setting is sufficient. tellmail letsencrypt command added, to generate sample commands to generate certificates. See http://netwinsite.com/surgemail/help/letsencrypt.htm
  • 7.2d-10 Added email based password reset handling. Users can define a recovery email address, and then request a reset link via that email account when trying to login. tellmail question_reminders modified to send to users who have no password recovery questions or recovery email defined. user.cgi user settings modified to allow users to define their recovery email. Add this entry to allow users to do this: g_authent_info name="Password Recovery" field="pass_recover" access="user"
  • and ensure your user database supports that field (nwauth does automatically)
  • 7.2d-9 Added tellmail question_reminders to send emails to users who have not configured their password recovery questions. This command should be run once a year or so. It will send to all users found in the user database (that have not already configured the questions). The template file question_reminder.eml will be used (or created) if it doesn't exist, use this variable inside the template for the usercgi url: ||user_url||
  • 7.2d-8 Fixed fault with imap literal decoding if more than one sent by client in a single command.
  • 7.2d-6 Made tellmail ssl_reload create new domain certificates without needing a restart. Reduce burst logging if uid already set.
  • 7.2d-5 Added g_hacker_days to adjust the time that ip addresses are locked out for, the default was 7 and is now 30.
  • 7.2d-4 atrest fixes, added clear logging for responder not responding to msg.log. Added spam settings changes to security log.
  • 7.2d-3 Fixed crash in atrest feature.
  • 7.2d-2 Added/fixed g_authent_enforce setting (not recommended)
  • 7.2d-1 Changes required for 64bit vs12 build. Some general corrections for time_t usage. Fixed windows backtrace code.

New in SurgeMail Mail Server 7.0e Beta (Sep 16, 2015)

  • Fix: If set to use html5_uploader, forwarding of existing attachments / forward attach features were broken by the fallback mechanism introduced in 7.0d-8 - oops! - works again now.

New in SurgeMail Mail Server 7.0c (Sep 16, 2015)

  • Fix: (non surgeweb) Patched release build with "7.0d-6 Fixed bug with multiple recipients and quota exceeded on one account resulting in repeated deliveries."

New in SurgeMail Mail Server 7.0c Beta (Aug 25, 2015)

  • New: Enable attachments for iOS (now that iOS supports image attachments and the html5 uploader works on iOS).
  • New: Ability to strip attachments from messages to keep mail but save on disk usage.
  • Fix: Weird formatting (invalid as per RFC) in some attachments failed to decode properly. Now works anyway.

New in SurgeMail Mail Server 6.9c (Mar 24, 2015)

  • Existing beta distribution upgraded to release

New in SurgeMail Mail Server 6.9c Beta (Mar 19, 2015)

  • Fix: Another sporadic crashing bug in surgeweb resolved which has "existed forever". This time in email display and sending code.

New in SurgeMail Mail Server 6.9a Beta (Mar 16, 2015)

  • Fix: Several fixes to surgeweb index handling responsible for sporadic memory leak, surgeweb index corruption and crashes. note: the resolved issue has always existed in surgeweb!

New in SurgeMail Mail Server 6.8f Beta (Dec 24, 2014)

  • 6.8-f10 ADded g_virus_strangers, and scan of /var/log/messages on unexpected restarts for 'surgemail' entries.
  • 6.8-f9 Recoded imap migration/import so it can be safely re-used and won't fetch the same items again.
  • 6.8-f8 Fixed hang in windows installer on upgrade (the hang was after the upgrade completes so can be ignored)
  • 6.8-f7 Changes to allow OSX/Yosemite launchd startup to work properly, after upgrading to Yosemite update surgemail to this version or later, then run:
  • ./surgemail -install_startup
  • 6.8-f6 Fixed logging of 'failed' state, and improved handling when no 'mx' host returned and 'a' address used.
  • 6.8-f5 Fixed fault where settings excluded from mirroring would be removed if the other server had 'no' matching setting, the problem did not occur if both servers had 'different' settings.
  • 6.8-f4 Made legal archive user level search also show results for aliases of the user searching.
  • 6.8-f3 Improved tellmail path so it does also report if user account doesn't exist. Also fixed tellmail lookup to correct host aliases to the real domain name so lookups work.
  • 6.8-f2 Improved g_respond_safer to make it more safe :-), Fixed g_hacker_poison so it correctly applies to smtp login attempts now.

New in SurgeMail Mail Server 6.7a Beta (Sep 2, 2014)

  • 6.7b-33 Tweaked spam sanity checks for improved scoring with g_sf_binary.
  • 6.7b-32 Added setting G_RENAME_CONTENT which can be used with g_rename_files to modify mime types as well, typical setting would be:  "application*zip*"
  • 6.7b-31 Adjusted g_from settings to permit message if sender==from
  • 6.7b-30 Added X-Mash header to detect duplicate messages from different sources.
  • Improved logging in mail.err if/when ssl certificates fail. Made sure sha256 was always used for CSR requests.
  • 6.7b-28 More changes for SurgeWeb in it's own process.
  • 6.7b-27 Experimental setting to move surgeweb to a separate process, g_surgeweb_process
  • 6.7b-25 Modified burst behaviour to be more resilient in the face of rename errors and avoid creating uid gaps.
  • 6.7b-24 Fixed g_bounce_paranoid so it obeys g_bounce_to setting.
  • 6.7b-23 Made g_user_send_white a multi line setting
  • 6.7b-22 tweaked msleep to no less than 20ms in most cases to avoid strange osx wakeup limits
  • 6.7b-21 minor changes to thread comparison and mutex code.
  • 6.7b-20 turned dmalloc off again due to performance issue.
  • 6.7b-18 turned dmalloc on
  • 6.7b-17 Added country information to g_smtp_safe email if g_country_ip is enabled.  Minor change to imap idle thread handling
  • 6.7b-16 Fixed fault in g_hacker_max handling of password guessing in some situations.
  • 6.7b-15 Added setting to give return address for friends status messages. g_user_status_from.
  • 6.7b-14 Minor logging change to friend release to track duplicate issue.
  • 6.7b-12 Added daily quota limit for encrypted messages, domain level setting,  encrypt_limitsz "100mb"
  • 6.7b-11 Memory leaks and change to na_accounts if 'show' field is set then username field is not used as search field.
  • 6.7b-9 Fixed memory leak (only relevant if you had g_dns_disk "true") introduced in 6.6d-13 approx.
  • 6.7b-8 Minor changes to surgevault forms.
  • 6.7b-7 Changed wording for attached files in surgevault
  • 6.7b-6 Added some info to mutex crash logging.
  • 6.7b-5 Set viewed encrypted messages to no cache in surgevault.
  • 6.7b-4 Changed some error responses in surgevault.
  • 6.7b-3 Fixed g_breakin_n behaviour.
  • 6.7b-2 Fixed legal archive so it can activate without a usertoken if not previously activated.

New in SurgeMail Mail Server 6.3d (Feb 20, 2013)

  • 6.3d-20 Added setting g_user_access_webonly, if set then user access rules like 'spam,filter,virus' only stop the web user interface (so users cannot mess with settings) but doesn't stop the action of spam,virus checking etc for that user. 
  • Fixed slow memory leak in pop/migration import.
  • 6.3d-19 Added config checker code to test g_dns_host with a couple of rbl and mx lookups. Note using a public dns like google's 8.8.8.8 servers will stop rbl lookups working correctly, you must use a real local dns server (your isp will almost certainly be providing one)
  • 6.3d-18 Fixed crash in fedora (or new glibc) due to crypt() returning null on bad input. (fix is in nwauth and surgemail)
  • 6.3d-17 Added Message-ID to expire messages.
  • 6.3d-17 Fixed fault with ucount2.dat growing very large when deleting a large domain.
  • 6.3d-17 Added options to user creation API to create folders and populate mdir folder with files.  New options are &create_folders=Folder1,Folder2&mdir_copy=xmdir_template, this would create Folder1, Folder2, And it would copy (surgemail root)/xmdir_template files into the new users 'mdir' folder.
  • 6.3d-16 Fixed problem with SurgeWall domains not applying blocklist entries.  Revert behaviour with G_SURGEWALL_IGNORE_ERROR
  • 6.3d-15 Fixed slow memory leak in imap list command.
  • 6.3d-12 Improved mirror handling if slave is NOT set to allow config changes and a resync_config has never succeeded.
  • 6.3d-11 Fixed minor domain admin issue, fixed spf handling for ipv6 rules, fixed
  •  encrypt reply messages double line spacing issue.Fixed bug with /bind in gateway setting causing bad dns lookups.
  • 6.3d-10 Increased size of sf_mfilter scanning to 40k to help with spam filtering..Added g_migrate_onsmtp, if true it will do a migration if a user does an smtp login as well as pop / imap...
  • Fixed problem with imap envelope response for very long list of recipients. recipients.
  • Fixed possible memory leak in pair append from imap header read of 'message'.

New in SurgeMail Mail Server 4.2d4 Beta (Feb 17, 2010)

  • Fix: Patch of current production release for crashing bug for certain oddly formatted spam messages.
  • Fix: Fixed missing files in the help pages installed on the mailserver.

New in SurgeMail Mail Server 4.2d3 Beta (Feb 17, 2010)

  • Fix: Get the "download all fix" noted in surgeweb changes into the production release distributions.
  • Possible signs of this issue having been hit: Major jumps in diskusage by the surgeweb folder, restart reports in startstop.log referring to MZIP mutex.
  • Note: Subsequent to this build (4.2d3-3) it was noted that if this issue is hit, these temp folders files are not actually getting deleted after a few days as I thought they were, this is fixed is in builds 4.2g-6+ (or if this space needs to be recovered more urgently manually delete large attachments.zip files in the surgemail/surgeweb/work tree).

New in SurgeMail Mail Server 4.2d2 Beta (Dec 6, 2009)

  • Fix: Several surgeweb fixes already in the 42e* builds.

New in SurgeMail Mail Server 4.2d Beta (Nov 9, 2009)

  • New: SurgeWeb changes as per: surgeweb changes.
  • Fix: Prevent invalid pstat entries that were getting created on some systems and fix the current pstat.dat database (some systems this was HUGE).
  • Fix: Windows only system library timezone bugfix to fix the off by one hour issue.
  • Fix: Fixed occasional unreliability of nwauth mirrorring (required both mirrored servers to be upgraded).
  • Fix: Bug if g_friends_add_trusted used.
  • Fix: Several sporadic crashing bugs.

New in SurgeMail Mail Server 4.2a2 Beta (Sep 24, 2009)

  • New: Extensive improvements to the SurgeWeb "Ajax / Web 2.0" web email interface (for more information see surgeweb changes, and known bug list ).
  • New: SurgeVault email encryption (feature is PRERELEASE - contact [email protected] if you want to try using this).
  • New: Force use of ssl on webmail/surgweb/user.cgi (but not blogs and surgeplus) using g_ssl_require_web.
  • New: Improved DNS handling sending requests to multiple servers.
  • New: Split g_from_valid into g_from_valid (recommended) and g_to_valid (unwise to use).
  • New: Allow use of spaces in passwords (NOT RECOMMENDED) using g_authent_spaces and nwauth 4.0r+.
  • New: To header added to the HTML spam status email.
  • Fix: Domain quota issue (not workign if mailbox had trailing slash).
  • Fix: Naked LF could slip through in very specific circumstances.
  • Fix: Some imap response fixes to make sure thunterbird did not get confused sometimes wrt showing new messages.
  • Fix: Retry times were not getting obeyed for messages that could not even open a connection to the destination server.
  • Fix: Webmail trash emptying related quota drift issue.
  • Fix: Two mutex related fixes.
  • Fix: Some imap response fixes to make sure thunterbird did not get confused sometimes wrt showing new messages.
  • Fix: Minor IPV6 fixes.

New in SurgeMail Mail Server 4.0u4 Beta (Jun 10, 2009)

  • Fix: memory leak fixed in probe code.
  • Fix: webmail has correct version number.
  • Fix: domain with letters a-f only fix is actually in this build.

New in SurgeMail Mail Server 4.0u3 Beta (May 28, 2009)

  • New: Continued improvements to the SurgeWeb "Ajax / Web2" web email interface (for more information see surgeweb documentation, surgeweb changes, and known bug list )
  • New: Blogs make use of surgeweb cross browser html editor - old editor / text mode can be enabled per blog in advanced settings
  • New: Basic support for IPV6 under windows and linux (beta and requires g_ipv6_enable)
  • Fix: webmail template fix so that the html editor is not displayed for IE8 (the same as has always been done for IE7). The fix is part of this build - the webmail version was upped to 3.1t-12, but the incremented version number did not make it into the build.

New in SurgeMail Mail Server 4.0k Beta (Apr 20, 2009)

  • New: Continued improvements to the SurgeWeb "Ajax / Web2" web email interface (for more information see surgeweb documentation, surgeweb changes, and known bug list ).
  • New: User.cgi has a blocklist feature (just like friends but blocks by address) so you can block by address without having to add a zillion filtering rules.
  • Fix: Trend graphing overflow problem + several fixes to several issues that became apparent as result of first fix.
  • Fix: Mirrorring of settings that don't exist on the master.
  • Fix: CPU bug if ports were disabled.
  • Fix: IMAP idle command was not showing new messages under certain conditions for non inbox folders.
  • Fix: Timezone related "out by one hour" fix for windows 2003.
  • Fix: Several fixes dlist member removal via web admin interface.
  • Fix: Several fixes to surgeplus photo sharing.
  • Fix: Crash when some messages (generally spam) were viewed through user.cgi.
  • Fix: Archive viewer was missing the last 30 odd characters of messagas.
  • Fix: Forward / responder was failing to respond and deliver locally in some circumstances.
  • Fix: Mutex locking problems on multicpu servers.
  • Fix: Made g_imap_timeout apply to the idle command.
  • Fix: Dlist memory leak.
  • Fix: Lockup if authent module doesn't respond nicely to -version request.

New in SurgeMail Mail Server 4.0g Beta (Mar 23, 2009)

  • Fix: When downloading multiple messages during caching, charset of iconv conversion of first messge to require conversion to utf-8 would be used on all messages that required conversion.

New in SurgeMail Mail Server 4.0c Beta (Mar 9, 2009)

  • Fixes a "minor security issue to the new IMAP module".
  • Adds an "Ajax/Web2" web email interface.
  • Provides "minor fixes to latest production release."

New in SurgeMail Mail Server 4.0a Beta (Jan 14, 2009)

  • New: SurgeWeb new "Ajax / Web2" high performance web email interface (still being worked on though, for more information see surgeweb documentation, surgeweb changes, and known bug list ).
  • New: New archive searching interface with CRC validation to confirm the messages in the achive have not been tampered with.
  • New: Arbitrary error translation of error messages (g_error_xlate).
  • New: Setting to adjust max number of messages in a folder (g_imap_max_messages) - defaults to 200,000.
  • New: Imap burst loggin to delivery log so message->uid renames can be traced.
  • New: Default page not returned for invalid cgi requests - stops "dumb tools" reporting surgemail as compromised (old behaviour can be restored with g_web_old_behaviour).
  • New: Bounce other messages if first message is mending awaiting friends bounce (g_friends_bounce_second).
  • New: Require friend confirmation if email appears to be in language not in list of accepted languages.
  • Fix: High use reports were getting confused by addresses longer than 100 characters (these get truncated in the delivery logs).
  • Fix: Thunderbird timeout with large imap folders.
  • Fix: Tellmail archive search fixes for: g_maildir_netwin, date based archive before first rollover.
  • Fix: Sporadic crash in archive extract.
  • Fix: SPF related fix where DNS errors sometimes generated.
  • Fix: Message attachments sometimes not showing in Thunderbird.
  • Fix: CR/LF handling when attaching footer files on unix.
  • Fix: In FF3 the admin interface login resulted in multiple login dialog boxes.
  • Fix: Editing dlist/lists.dat directly in raw format from admin interface sometimes deleted it completely.
  • Fix: Responder now works when late forwarding isused.
  • Fix: Webmail APOP was sporadically crashing webmail.
  • Fix: Avast for windows would stop messages with very high compression ratio with an error, these are now allowed and logged with a "possible compression bomb" warning.
  • Fix: Address was being synched when mirrorring config files, address field is now not mirrorred.
  • Fix: Improvements to the noforgeme handling.
  • Fix: Bounce handling of surgewall filtering rules.
  • Fix: Admin login spodarically "froze" due to file lock on users.lst file.
  • Fix: A number of other minor fixes.

New in SurgeMail Mail Server 3.9g (Jun 16, 2008)

  • New: Allow headers "exists" check in users filtering rules
  • New: Allow raw message content to be dispalyed from user cgi spam and friends pages
  • Fix: User filtering "or rules" were not correctly handled sometimes.
  • Fix: Imap login on mirror server was not deleting old messages
  • Fix: Originating ip and orbs headers not added for authenticated users
  • Fix: Various other various minor fixes

New in SurgeMail Mail Server 3.9e (Apr 16, 2008)

  • Fix: Minor new IMAP module fixes
  • Fix: Several other minor fixes

New in SurgeMail Mail Server 3.9c (Mar 17, 2008)

  • Fix: pstat database file backed up and cleared when switching binaries with incompatible data types (eg. switching 32 / 64 bit binaries) - previously this would corrupt pstat database
  • Fix: Blacklist related crash fixed
  • Fix: Improved quota handling in new imap code
  • Fix: Reduced disk loading on webmail (due to reduced flushing)
  • Fix: Variety of other minor fixes