Wondershare Filmora

What's new in this version:

MDaemon Email Server 22.0.2
Special considerations:
- Hosted email options with MDaemon Private Cloud are now available

Fixed:
- fix to MDRA - Access Denied errors given accessing Account Editor views
- fix to AntiVirus - gibberish line in AV log when Cyren AV is disabled
- fix to Spam Filter - changed sa-update.exe to use the next mirror in the list if mirror failed with verification
- fix to possible crash in WebAdmin.dll
- fix to ActiveSync - Gmail app crashes when opening a particular meeting request
- fix to Pro theme - Spell check not working in HTML editor
- fix to MDRA - Using the log filter, opening a result that contains umlauts results in an empty window
- fix to AntiVirus - reverted Cyren AV back to version 6.5.2r2
- fix to Pro theme - folder list cached from previous login
- fix to MDRA - When double clicking a session at Main | Active Sessions an iframe with an error appears
- fix to MDRA - Unable to add an account to the list of ActiveSync Accounts at ActiveSync | Account Management
- fix to MDRA - Unable to revoke all accounts at ActiveSync | Account Management
- fix to MDRA - Unable to save gateway forwarding changes
- fix to AntiVirus - possible fix to ClamAV "init-error" when scanning messages
- fix to AntiVirus - Cyren threat lookup disabled by default in UI when it should not be


MDaemon Email Server 22.0.1
Changes and new features:
- MDRA - Added ability to resize and move the dialog popups
- MDRA - Added a Delete All button for Queues, and added the ability to use CTRL + A to select all items in a Queue
- MDRA - Added a table of each user's thirty most recent Webmail sign-ins at Main | Account Manager | Edit account
- AntiVirus - Added an option to enable/disable Cyren's Threat Lookup at AntiVirus | Virus scanning | Use the Cyren... | Configure
- MDRA - Added a new mobile-friendly list control to replace the multi-select list
- A client signature can now be set per group. The client signature will be pushed to members that use Webmail or MDaemon Connector. A group client signature overrides a domain client signature, which overrides the default client signature. In the MDaemon GUI go to Accounts | Groups & Templates to edit a group and set its client signature. Clear the text in the editor to remove a client signature.
- Pro theme - Switched from Jodit to TinyMCE HTML editor
- Pro theme - Added "Message Window Closes on Delete" feature
- Pro theme - The message window will close when deleting the last message in a folder
- Spam Filter - Added an option to log Spam Filter updates at Security | Spam Filter | Updates
- AntiVirus - Updated Cyren AV to version to 6.5.4r21

Fixed:
- fix to EDNS0 is not being used for outbound SMTP and POP connections
- fix to MDRA - Unable to save changes after changing content filter rule condition
- fix to Content Filter - restricted attachments not being applied to nested RAR files
- fix to AntiVirus - possible lock up during virus scanning
- fix to Content Filter - restricted attachments not being applied to nested 7zip files
- fix to Webmail - Published Calendar - Event that spans two days between two months causes empty list view
- fix to possible crash in WorldClient.dll
- fix to Pro theme - Message List - When there is no message preview, double-clicking a message opens three instances
- fix to Webmail - Remember Me often lost when upgrading the MDaemon server
- fix to AntiVirus - wrong version of ClamAV included
- fix to AntiVirus - possible crash if debug logging is enabled for ClamAV
- fix to XMPP Server - possible crash during shutdown
- fix to MDRA - Reflected Cross Site Scripting (XSS) vulnerabilities reported by Pankaj Kumar Thakur from Green Tick Nepal Pvt. Ltd.
- fix to MDRA - Compression Exempt list entries are written to the CFCompress.dat file on a single line
- fix to MDRA - Minger - Shared Secret password is limited to 10 characters
- fix to Pro theme - Cannot send a message with only BCC recipients
- fix to Pro theme - Inline images are not working in the Compose view
- fix to Pro theme - Password Recovery page does not work when 2FA is enabled
- fix to Pro theme - IIS - When message view is set to 500, messages remain when deleting a full page
- fix to Content Filter - header line not MIME-encoded back after being modified
- fix to ActiveSync - all day events may span two days
- fix to MDIM - MDMailCheck - If a user logs out of Webmail and tries to use MDMailCheck to open Webmail the login page will be shown
- fix to Webmail - Logging in from MDIM goes to an error page if 2FA is enabled


MDaemon Email Server 22.0.0
- Hosted email options with MDaemon Private Cloud are now available
- 32-bit MDaemon has been discontinued. MDaemon 22.0 and newer will only be available in 64-bit. If you are currently running a 32-bit version on a supported 64-bit operation system, you can simply install the 64-bit version on top of the existing installation.
- The minimum length for strong passwords must now be at least 8 characters. If your minimum length was set to fewer than 8 characters before updating to MDaemon 22, it will be changed to 8. The default minimum length for strong passwords on new installs is now 10.
- MDaemon is moving away from using the terms "whitelist" and "blacklist". In many cases, they are now "allow list" and "block list". Features that had a "white list" to exempt IPs, addresses, etc., now have an "exempt list". The per-user spam filter contacts folders are now named "Allowed Senders" and "Blocked Senders". The folders for all accounts will be renamed when MDaemon 22 starts up for the first time.

Changes and new features:
Webmail:
- When strong passwords are required, there is now a list of password requirements that displays green and checked off as the user meets the requirements. Also added more descriptive error messages for what is wrong with an invalid password on submission.
- Pro theme - Added a contact hover popup in the message views that gives options to add a contact (if it does not exist), send a message, add to allow sender or add to block sender.
- Added a Two Factor Auth Exception IPs view in Remote Admin. Exception IPs apply to both Webmail and Remote Admin.
- Added options to set a default from address on reply and forward at Settings | Compose.
- Pro theme - Added support for external compose, message, event, contact, task, and note views over HTTP connections.
- Pro theme - Added an option to open the next unread message from the message preview pane and message view.
- Added a 1 minute option to the List Refresh Time at Options | Personalize.
- Added HTTP Strict Transport Security as a default response header.
- Pro theme - Added message snippets to the message list when in multiline mode.
- Pro theme - Added the ability to edit the Display Name of an alias at Settings | Compose. Disabled by default. Can be enabled in MDRA at Main | Webmail Settings | Settings | "Allow users to edit their alias display names".
- Added support for CSRFTokens on the Sign-in page. Enabled when "Use Cross-Site-Request-Forgery tokens" is enabled in MDRA at Main | Webmail Settings | Web Server. If you are using custom templates for Webmail, add a hidden input to the Login form as follows: />
- Public Calendar - Modified the List view to start on the current day and show the next 30 days.
- Added automatic conversion of URLs to hyperlinks in the message view
- Pro theme - Added the Flag column to the mail list sort options
- The names of default folders (Drafts, Sent Items, etc.) are translated into the Webmail user's language no matter which language of MDaemon is installed (previously only the English MDaemon did this).
- Added an option to send Two Factor Auth verification codes to an email address
- Pro theme - Added red color to overdue tasks text in the Tasks list
- LookOut and WorldClient themes - Changed all list category display behavior to match
- Pro theme - Upgraded the XMPP client to version 4.4.0
- The Allowed Senders and Blocked Senders folders now have different icons to indicate that they are special folders
- Added Content-Security-Policy and Referrer-Policy as default response headers
- Webmail - Upgraded CKEditor to v4.18

Remote administration (mdra):
- Added a Two Factor Auth Exception IPs view in Remote Admin. Exception IPs apply to both Webmail and Remote Admin.
- Changed autocomplete="off" to autocomplete="new-password" on password fields to stop FF from autocompleting passwords outside of the login page.
- Added the Notifcation Message Editor at Security | Content Filter | Notifications.
- Added HTTP Strict Transport Security as a default response header.
- Added support for CSRFTokens on the Sign-in page. Enabled when "Use Cross-Site-Request-Forgery tokens" is enabled in MDRA at Remote Admin Settings | Settings.
- Added ability to view and manage custom remote and local queues.
- Added Content-Security-Policy and Referrer-Policy as default response headers.

Security:
- Support for Cyren's threat lookup service has been added to the Cyren AV engine. When the AV engine detects a suspicious file that is not classified by the virus definitions it will generate a hash of the file and query Cyren's threat lookup service. Cyren’s threat lookup service is a 100% cloud-based solution that allows MDaemon to conduct a file integrity check and get up-to-moment classification of malware threats based on Cyren’s global threat intelligence.
- MDaemon now supports TLS 1.3 on newer versions of Windows. Windows Server 2022 and Windows 11 have TLS 1.3 enabled by default. Windows 10 versions 2004 (OS Build 19041) and newer have experimental TLS 1.3 support that can be enabled for inbound connections by setting the following in the registry:

- HKEY_LOCAL_MACHINESYSTEMCurrentControlSetControlSecurityProvidersSCHANNELProtocolsTLS 1.3Server
        DisabledByDefault (DWORD) = 0
        Enabled (DWORD) = 1

- MDaemon logs the cipher suite (e.g., TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) used by SSL/TLS connections.
- Added an option at Accounts | Account Settings | Other | Passwords for strong passwords to require a special character (!"#$%&'()*+,-./:;<=>[email protected][]^_`{|}~). It is enabled by default for new installs and disabled by default for existing installs.
- AV Mailbox Scanner - When an infected message is found during mailbox scan MDaemon's infected counter will be incremented.
- AntiVirus - Updated ClamAV to version 0.104.3.

Activesync:
- Improved FolderSync performance.
- The ActiveSync Connection Monitoring Dialog has a new right-click menu command to terminate a session and block a client.
- Added the ability for Outlook to send mail using an alias. If Reply-To is set to a valid alias for the sending account, the message will be sent via that alias.
- Added support for EAS 16.1 Find command. Removed the protocol restriction preventing iOS from using EAS 16.1

Other:
- Content Filter - Added support for $CONTACT...$ macros in the "Append a corporate signature" action. These macros can be used to personalize the signature with information from the sender's contact in their public contacts folder. Search the documentation for "Signature Macros" for a full list of supported macros.
- Content Filter - Added an action to extract attachment and add attachment linking into the message.
- Summary Emails for the holding, quarantine, and bad queue may now have links to release, re-queue, or delete each message. This option is enabled by default. It can be disabled at Queues | Mail Queues / DSN | Mail Queues | Holding Queue. The Remote Administration URL must be set for the links to be generated.
- LetsEncrypt - Updated the script to work with PS 7.
- Added a Deferred Delivery option at Setup | Server Settings | Message Recall to replace the 'Date:' header with the current date and time when a message is released from the Deferred Queue. It is disabled by default.
- MDaemon Connector has been updated to version 7.0.7.
- XMLAPI - Added support for forwarding scheduling.

Fixed:
- fix to DSN messages are not DKIM signed
- fix to settings for the 'Everyone' and 'MasterEveryone' mailing lists are reset at startup
- fix to Pro theme - does not save language settings from login
- fix to Pro theme - Disabling HTML Compose prevents message composition
- fix to Pro theme - Messages with no body do not finish loading
- fix to Pro theme - relative URLs in emails are being converted to absolute paths in the plain/text part
- fix to Pro theme - When Auto-Cancel Saved Search is unchecked searches are still canceled when switching between folders
- fix to Pro theme - Saved Searches do not show up in the folder list if there are none
- fix to spam released from trap/holding queue going to junk mail folder
- fix to CalDAV - invalid iCalendar generated from event with HTML comments
- fix to disabling Dynamic Screening via the configuration property sheet does not work as expected
- fix to Webmail - Text not translated on Folder Options page
- fix to MDRA - Upload Custom Image not working
- fix to Pro theme - Cannot copy or move an entire page of messages to another folder
- fix to SMTP server closes connection when it receives a BDAT 0 LAST command
- fix to MDRA - Browse Users and Browse Groups buttons may not work when running in IIS
- fix to ActiveSync - attachments in meeting events may not be shown
- fix to ActiveSync - memory leaks
- fix to ActiveSync - SendMail operations from a particular client fail with a bad request error
- fix to ActiveSync - BlackBerry Hub unable to sync mail
- fix to ActiveSync - BlackBerry Hub doesn't show attachment
- fix to XMLAPI - not validating the format of date/time values
- fix to MDRA - incorrect German translation of From and To in the Reports section
- fix to Webmail - In the Task list, printable ASCII symbols are displayed in their HTML-encoded form
- fix to Active Directory monitoring Windows domains limited to 17 characters
- fix to MDRA - account data is not moved to new location when mail folder is changed
- fix to SMTP response code mismatch when "Send heuristic results to SMTP clients" is enabled
- fix to possible crash in WorldClient.dll
- fix to Attachment Linking - when logged into WebMail with HTTPS attachment link will not work
- fix to Webmail - XSS vulnerability
- fix to mailing list headers and footers may not be applied to messages with attachments or inline images
- fix to Content Filter not expanding $MESSAGEID$ macro properly for a particular message
- fix to Pro theme - deleting a message from the message preview results in the wrong message being selected next
- fix to Pro theme - Possible to double click on Save in Contact, Event, Task, and Note editors and create multiple items
- fix to possible crash in WorldClient.dll
- fix to ActiveSync - iOS clients can delete public contacts without having the required permissions


MDaemon Email Server 21.5.2
Changed:
- MDaemon Connector has been updated to version 7.0.6.
- XMLAPI - Improved UpdateUser group membership operations.
- LetsEncrypt - Changed the Log function to use add-content instead of out-file. Add-content uses the default system code page which should enable the log file to be viewed in MDRA. No change will be made to the encoding of the log file until a new log file is created.

Fixed:
- ActiveSync - performance issues
- ActiveSync - Unable to enable ActiveSync for the final licensed user
- XMLAPI - Autoresponder schedule being set wrong
- Pro theme - Cannot add members to a distribution list
- MDaemon writes auth failures to Windows Event Log even when option is turned off
- MDaemon's Auth Failures log may have incorrect ACCOUNT values
- WorldClient theme - Option to recur every X weeks missing in the event editor
- MDRA - Unable to add an alias using $LOCALDOMAIN$
- MDRA - When editing group membership it's possible to accidentally revoke your own global admin status
- MDRA - Using Apply when creating a new Template or new Group causes an error when making additional changes
- MDRA - Problems editing rules when there are more than 1000 rules
- Pro theme - Pasting links from Youtube into compose view and sending message results in the links missing in the received message
- possible message corruption when MDaemon releases or requeues a message
- Pro theme - Attendees are not notified when meetings are changed
- Webmail - Previously removed categories on messages reappear with new sessions
- domain signature with inline image may not be applied properly to a message with an inline image
- IMAP server does not return BAD response to a command line that's too long
- possible crash in WorldClient.dll
- ActiveSync - Unable to sync PIM folders that do not have .MRK files in them if folder name contains extended characters


MDaemon Email Server 21.5.1
Changes and new features:
- MDRA - The last view is now remembered for expired sessions, but not for sessions signed out by the user
- Webmail - Changed all Login referrences to Sign-in
- Pro theme - Added the View Source and Save Source options to the Message View and Message Preview
- Content Filter - Added macro support for 'Add an attachment' action
- WorldClient theme - Added an option to "Use Auto Formatted Date" at Options | Personalize | Inbox Settings. When the setting is disabled, the message list dates are displayed the same as in LookOut theme.
- LookOut and WorldClient themes - Users can now select and copy some text from event tooltips in the calendar view. Use CTRL + C to copy.
- Webmail - Added options at Options | Calendars to enable the event tooltips and to change the hover timer required to see the tooltip
- Pro theme - Added a "Favorites" checkbox to toggle at Settings | Folders, Folder Options dialog
- Pro theme - Added an overwrite checkbox on the document list view
- Pro theme - Added an option to attach documents to a message in the compose view
[17687] DSN - Added $RECIPIENT$ macro support to custom DSNFail.dat and DSNDelay.dat files
- Content Filter - Increased total character limit for all entries added to the Attachments exclusion list
- MDRA - Added version 16.1 to ActiveSync Protocol Restrictions
- Pro theme - Made some performance improvements
- LetsEncrypt will no longer delete the log file each time it runs
- LetsEncrypt - You can add -SkipPortCheck to the command line to skip the port check
- LetsEncrypt - added the ability to copy challenge files to an external path

Fixed:
- fix to Webmail - Users no longer being asked if they wish to enable desktop notifications in Firefox
- fix to AntiVirus - ClamAV reports error when scanning a zero byte file
- fix to DSN - Macros in custom DSN message text are not processed per message
- fix to XMLAPI - CreateUser operation allows alias to be created for an account that already exists
- fix to possible MDaemon.exe hang related to gateway LDAP lookup caching
- fix to MDRA - removing an ActiveSync client may inadvertently remove account-level client settings
- fix to Pro theme - Clicking Advanced Settings opens two windows
- fix to MDRA - Adding more than one public folder to a content filter rule's copy action causes incorrect naming
- fix to MDRA - Add attachment path uses forward slash instead of backslash
- fix to MDRA - In the Do not filter messages larger than setting, it shows KB instead of MB
- fix to non-ASCII characters are not encoded correctly when they are exported to an LDAP address book
- fix to WorldClient theme - Edit link in hover box doesn't show all event info
- fix to mailing list "Replace 'From:'" options incorrectly process From header
- fix to mailing list messages may not use the correct smart host settings
- fix to MDRA - Including quotes (") in the name of a content filter rule results in the rule list not being displayed
- fix to ActiveSync - accounts without access rights can search public contacts
- fix to ActiveSync - possible hang when searching public contacts
- fix to LookOut theme - possible hang after resizing the browser window
- fix to MDRA - Content filter "if subject header contains" condition gets changed to user defined header
- fix to possible MDaemon crash if Dynamic Screening whitelist contains invalid IP address
- fix to Message Indexing - maintenance fails when messages.mrk does not exist
- fix to MDRA - unable to add/remove per-user autoresponder address exclusions
- fix to Pro theme - Remember Me not working after server restart
- fix to Pro theme - Mailbox languages do not change when changing language
- fix to Pro theme - Memory leak when using external windows
- fix to Pro theme - Users with long folder names cannot see new message counts
- fix to MDRA - Access denied when editing group memberships
- fix to ActiveSync - folders may not sync due to "ImapMrk: Corrupt File Header"
- fix to MDaemon attempts to send message again if socket error 10053 occurs when sending QUIT
- fix to MDaemon does not try the next DNS server after an A record query is refused
- fix to Spam Filter - Sa-Update.exe not downloading updates


MDaemon Email Server 21.5.0
- Hosted email options with MDaemon Private Cloud are now available. To learn more, please visit: http://www.altn.com/Products/MDaemon-Private-Cloud/.
- The 'X-MDOrigin-Country' header, which Location Screening can add to messages, now has the two-letter ISO 3166 country and continent codes instead of full country and continent names. Be sure to update any filters you may have that look for particular values in this header.
- With the renaming of the Webmail Mobile theme to Pro, there is a possible side effect for users that are using the Mobile theme and have remember me enabled. These users may find that they cannot open attachments. To work around this, the user must simply log out and log back in.


MDaemon Email Server 19.5.5
- fix to Webmail - XSS vulnerabilities
- fix to CalDAV - Potential memory corruption and crash


MDaemon Email Server 19.5.4
- fix to ActiveSync - Possible server crash
- fix to ActiveSync - PIM item changes from one client are not synchronized to other clients
- fix to ActiveSync - Server may shut down after several weeks of uptime
- fix to ActiveSync - Slow performance loading very large SYNCMAP files
- fix to ActiveSync - Calendar sync not working properly with Outlook mobile app
- fix to CalDAV - Potential memory corruption and crash
- fix to CalDAV - Crash when synchronizing IMAP folder with very long path on disk
- fix to Mobile theme - When spell check is enabled, replies and forwarded messages are not sent
- fix to Mobile theme - No login page shows up on iOS 10
- fix to Mobile theme - IE/Edge compose being restricted to width of unexpanded HTML compose toolbar
- fix to Mobile theme - Searching for UTF8 characters fails to show expected results
- fix to MDRA - Unable to select a Default Type on the settings tab when editing a mailing list
- fix to MDRA - Deadlock may occur
- fix to MDRA - Existing domain signatures are not displayed
- fix to MDaemon GUI - Possible crash when clicking Edit on the ActiveSync Client Settings screen


MDaemon Email Server 19.5.3
- fix to MDaemon service may hang at startup and prevent other services from starting


MDaemon Email Server 19.5.2
Changes:
- SMTP server will respond with "Sender Disabled" rather than "Sender Unknown" for disabled mailing lists and the reply code will be 550 if the option to respond to disabled accounts with a 550 code is enabled.
- Inbound Queue count in UI will show message recall delay value if that feature is being used so that you won't sit there wondering why the Inbound Queue isn't processing messages.
- The UI with throw a warning if the advanced settings option is enabled at F2|Unknown Mail and no host value is specified.
- The Learn.bat file (used by the bayesian system) was slightly reworked for simplification and efficiency.
- When editing a mailing list the account picker object will pre-select existing local members and will remove de-selected local members.
- The mailing list editor membership page has been improved by adding a Domain column to sort on and by saving/restoring the column widths. Also the import process had its string-table localized.
- Changed language on MDPGP UI to show that --pgpk command requires mail sent to self.
- Public Folder Manager tree-view data is no longer automatically expanded.
- The Account Editor|Settings button which shows subscribed lists now reports properly on membership to [email protected] and [email protected] lists based on whether the account is hidden (private) or not. Also, I changed the wording of the checkbox which hides (makes private) the account so that referring to the HELP is no longer necessary. Finally, remember to click Apply if you change the hidden state of the account or pressing the button to show list membership will not be up-to-date.
- Updated tooltip and warning text to indicate that freezing the Remote queue also freezes the Retry queue.
- The $MAILDIR$ macro has been deprecated and removed.
- The System log will be updated any time someone deletes an account using the console GUI.
- Hijack Detection no longer has a hard-coded exception for the [email protected] alias. There is a white-list feature for Hijack Detection which can be used to make anyone an exception (if necessary).
- Added a Forwarding column to the Account Manager which shows a Yes or No (whether forwarding or not) along with the account's forwarding address. Since it's possible to have a forwarding address configured but not currently in use the column could show something like "No: [email protected]"
- The Account Manager will save the widths of all its columns when you click OK.
- The Sender Blacklist will now (also) be checked following each MAIL command. Since there isn't yet a RCPT domain to test the list against the MAIL value is checked only against the "All Domains" section of the Sender Blacklist.
- The Spam Filter|DNS-BL|Settings option "Ignore DNS-BL result if not in 127.0.0.1 - 127.255.255.255 range" has been removed. Any response outside that range is automatically ignored (no option necessary these days).
- MDRA - Updated context sensitive help links for Categories.
- The "Npcap Loopback Adapter" is ignored when reading DNS servers from Windows.
- Updated MDaemon Connector to version 6.5.1.
- LetsEncrypt will now check the version of Powershell that is on the machine and exit the script when the required version is not present.
- LetsEncrypt will now add the MDaemonLetsEncryptModules directory to the PSModulePath environment variable for the session if it is not included.
- LetsEncrypt will now delete and recreate the account when changing between the staging and live LetsEncrypt systems.
- LetsEncrypt will now retrieve errors from LetsEncrypt when a challenge fails and write the information to the screen and to the log file.
- The ACME-PS module used for communicating with LetsEncrypt has been updated to the latest version.

Fixes:
- fix to Webmail - commas in the name part of an email address are not being properly handled in some instances
- fix to MDRA - Cannot save the default value of the skip rule action or the message processing priority action
- fix to MDRA - unable to remove activesync profiles
- fix to WorldClient theme - Importing/Exporting Contacts or Calendar Events - radio buttons hidden in some languages, e.g. Japanese
- fix to LookOut theme - When forwarding some messages, cke_protected is added to the body
- fix to LookOut theme - HTML encoding visible in contact comments, department, company, etc.
- fix to Lite and WorldClient themes - Missing event recurrence settings
- fix to MDRA - Some settings are missing under ActiveSync Client Settings
- fix to Webmail - MDPGP Results language is confusing and needs to be updated
- fix to sub-addressing not working with wild-card domain aliases
- fix to auto-freeze of inbound queue on configured number of disk i/o errors not working
- fix to MDPGP causing double the message recall delay
- fix to alias editor sometimes allowing entry of alias already in use
- fix to wrong data in SMTP response when over quota sender tries to send mail
- fix to Mobile theme - Themes unavailable on Personalize settings page when HideLoginTheme=Yes; Languages unavailable on Personalize settings page when HideLoginLanguage=Yes
- fix to Webmail - Use HTTP Compression setting not being honored
- fix to Mobile theme - Cannot download attachments in folders other than Inbox
- fix to Mobile theme - Missing translations
- fix to Webmail - The date range in saved searches is saved, but it is not used in the search
- fix to ASMC - After migrating an account twice, folders with ampersands have an extra hyphen added
- fix to ASMC - Events recurring yearly are not migrated correctly
- fix to Dynamic Screening - IP is not blocked after many login attempts with the same password but different accounts
- fix to MDRA - When forced to change your password, you are prompted twice to change it
- fix to Dynamic Screen sometimes being invoked after a single (rather than configured number) of failed RCPTs
- fix to Webmail may not display the entire body of certain messages
- fix to MDaemon.exe crash in AclShlFx.dll during the daily ACL cleanup
- fix to Antivirus - if it takes clamd.exe longer than 5 minutes to scan a file then clamd.exe will get restarted even if it is still able to process other files
- fix to Mobile theme - Events are created one day in the past depending on the time zone specified
- fix to Mobile theme - Umlauts in folder names do not display correctly in Calendars list
- fix to Mobile theme - when changing the theme at Settings | Personalize the new theme is not saved for the logon page
- fix to Mobile theme - message bodies of draft messages composed in plain text are not displayed
- fix to MDRA - Client Signatures are not deleted when the input is empty
- fix to LookOut theme - External message Add Filter button not working
- fix to Webmail displays a backslash in front of quotes in subjects that have non-ASCII characters
- fix to Content Filter exclusion may not work when display name contains Japanese characters
- fix to ActiveSync - Data wipes are triggered for accounts after upgrading to MDaemon 19.5.1
- fix to MD Configuration Session hang
- fix to OR clause in Active Directory Monitoring search filter causes non-matching account imports
- fix to Webmail - When HTML Compose is off, the first dropped attachment in the Compose view does not show up
- fix to Webmail - Wrong messages may be attached when doing Forward as Attachment from Search Results
- fix to WorldClient theme - AM/PM are displayed incorrectly in the message list for some languages
- fix to Dynamic Screening - TrustedIPs.dat created in MDaemonData
- fix to Dynamic Screening - "0x41504000 Mgmt Logon: Internal" logged repeatedly while Configuration Session is running
- fix to ActiveSync - Umlauts displayed incorrectly in autoresponses when autoresponder is created via ActiveSync
- fix to Webmail - PIM attachments fail to upload
- fix to Antivirus - AV update log viewer shows "No sessions" for ClamAV update logs
- fix to Mobile theme - When HTML Compose is disabled, messages are still sent in HTML
- fix to Antivirus - Security|Antivirus|AV Updater shows incorrect ClamAV information
- fix to ActiveSync - Possible crash while syncing a meeting invite with garbage text
- fix to Mobile theme - Styles change in the compose view after an auto-save draft occurs
- fix to ActiveSync - Random AD authentication failures
- fix to MultiPOP - Previously downloaded messages are being randomly redownloaded


MDaemon Email Server 19.5.1
- fix to ActiveSync - clients that required previous approval need to be re-approved
- fix to ActiveSync - Unable to login when using domain and full email address
- fix to Mobile theme - Sending plain text emails results in an empty message body
- fix to Mobile theme - Cannot download attachments in folders other than Inbox
- fix to Mobile theme - Cannot add inline images to a new message
- fix to Webmail - Images in the default client signature may not be displayed in Webmail
- fix to MDRA - When adding an image to a Default Client Signature, the image file is placed on the root of the C drive
- fix to licensed features may be disabled after renewing an MDaemon registration key that had been switched to trial mode
- fix to memory leak in DAV server if folder contains over 1000 events or contacts


MDaemon Email Server 19.5.0
Changes and New Features:
- MDPGP: The Content Filter's "encrypt message with user's public key" action now works with the following limitations (it was broken in previous versions): It must be the last action in a multi-action rule. It must be the last rule in a multi-rule set. Basically, all content filter processing on a message stops when the first encryption action takes place (so make this action/rule the last in the processing chain). You want the encryption action to be last anyway so that other actions which might modify the message can take place first. At present, encryption via content filter will prevent user signatures and domain signatures from being appended to the encrypted message. This will take more work to change later. Lastly, the Content Filter's "decrypt message with user's private key" action was not working properly. When using this action make it the first thing done so that other rules which come after will have a decrypted version of the message to work on.
- MDPGP: Decryption routine will now decrypt PGP blocks in-line. Previously, PGPMime message format was required. Messages may contain multiple encrypted blocks and the inline decryption routine will decrypt those it can and skip over those it can't. Remember that MDPGP decrypts messages as it places them into the user's folder so decrypted content exists on MDaemon's mail volume(s). Be sure and use OS tools to secure critical folders from unauthorized access.
- LetsEncrypt now includes an option to delete certificates that were issued by LetsEncrypt, have a subject the same as the FQDN in MDaemon and with an expiration date over 30 days ago. A checkbox to control this was added to Ctrl+S|SSL & TLS|Let's Encrypt. This option is enabled by default.
- Quota reports no longer include disabled or frozen accounts by default. You can change this with a new checkbox at Ctrl+U|Other|Quotas.
- LetsEncrypt: By default PowerShell only supports SSLv3 and TLS1.0. Code was added to enable TLS1.0, 1.1, and 1.2 for the active session. PowerShell also honors the operating system settings for client SSL/TLS protocol support, so if you disable support for TLS 1.0 as a client protocol in the operating sytem, PowerShell will not attempt to use it.
- The QUEUERUN SEM file has been deprecated and removed.
- Added option to enable macro detection in documents and adjust heuristic level for Cyren AV.
- MDRA - Added Let's Encrypt settings.
- MDRA - Added more DKIM Signing settings.
- MDRA - Added the Archive Now option under Logs -> Log Settings -> Maintenance.
- MDRA - Added the "Compact database now" button under Logs -> Log Settings -> Statistics Log.
- MDRA - Added the EDNS settings and an MXCache.dat editor under Setup -> Server Settings -> DNS.
- MDRA - Added ways to request trial keys for AntiVirus, ActiveSync, and MDaemon Connector.
- MDRA - Added "Remove contact which are missing name or phone data" button to the User Editor.
- MDRA - Added "Bind to new port values now" button at Setup -> Server Settings -> Ports.
- MDRA - Added "Edit Attachment Linking settings" to User Editor -> Attachments.
- MDRA - Added warning for admins that are attempting to freeze or disable their own accounts.
- MDRA - Added an alert to inform Trial users how many days are remaining in their trial.
- MDRA - Added feature to prevent admins from deleting their own accounts.
- MDRA - Added the mailing list subscription type below the mailing list address on the Main -> My Mailing Lists page.
- MDRA - Added a categories editor at Main -> Webmail Settings -> Categories to allow admins to manage Domain categories and default User personal categories.
- MDRA - Added buttons to view the file being edited for Security -> Screening -> (Sender Blacklist, Recipient Blacklist, IP Screen, and Host Screen). Added an import file option to the file view.
- MD GUI will throw a warning when disabling SPF or DKIM while DMARC is enabled.
- SMTP server will respond with "disabled" rather than "unknown" if account exists but is disabled or frozen.
- MD GUI will throw warnings and offer fixes on config conflicts between non-reversible encryption and APOP/CRAM-MD5 use.
- DMARC fo=1 option no longer generates protocol specific failure reports when DMARC itself passes.
- F2|Server Settings|Pruning has several new options for deleting items based on age.
- Webmail - Improved autocomplete performance for large address books.
- Updated MDaemon Connector to version 6.5.0.
- MDRA - Changed "Viruses Blocked" report title to "Viruses Detected" since the log entries include blocked, quarantined, and accepted viruses.
- ASMC - Passwords are no longer logged in the ASMC log file.
- ASMC - When SSL is not being used and a 501.1 error is returned a warning will be logged to indicate that you should retry using SSL.
- Ctrl+W|Webmail and Remote Administration|Web Server tabs have new options added to enable use of the X-Forwarded-For header which is sometimes added by proxy servers. This option is disabled by default. Enable it only if your proxy server inserts this header.
- Added a Webmail option for whether users are allowed to create email signatures. Set the default at Setup | Web & IM Services | Webmail | Settings or per domain on the Domain Manager's "Webmail" screen.
- SMTP server will reply with "550 5.7.0 Authentication rejected" when otherwise valid credentials are unacceptable for policy reasons.
- Updated Cyren AV engine to version 6.2.2-rc2.
- Webmail - Stopped using Webmail HTTP.log to log server to server HTTP requests and now logging to Webmail.log.
- Account editor will throw a warning and disallow switching to other tabs until full name/mailbox data entered.

Fixes:
- fix to SPF record may not be found if the DNS response is truncated
- fix to MDRA - Using Apply and then Save and Close results in duplicate entry in Minger list
- fix to LookOut and WorldClient themes - Changing Special Folders in Non-English Webmail profiles causes Webmail to change folder values
- fix to LookOut and WorldClient themes - New folders are created with non-English names when saving Options | Folders page
- fix to MDRA - If the setting ExpireTime is missing from WebAdmin.ini, MDRA does not show a default value
- fix to RAW CC header data possibly truncated in final generated message(s)
- fix to MultiPOP UI getting confused when password starts with hypen character
- fix to Minger server does not return "disabled" response for disabled mailing lists
- fix to MD GUI accepting foreign addresses for public folder submission
- fix to MD GUI crash when sharing a folder that contains hundreds of subfolders
- fix to WorldClient theme - When selecting a different calendar in new event, the event is not added to that calendar
- fix to MDRA - Cannot disconnect Webmail sessions
- fix to Webmail - Private access links for Shared and Public calendars produce an xml error
- fix to MDRA - Non-admins can add and edit an alias in their account, but they cannot delete it
- fix to account signature file not deleted when account is deleted
- fix to corrupt email address when the MDaemon system account mailbox alias is less than 7 characters long
- fix to all links to contacts in Outlook are broken when a distribution list is edited in Webmail
- fix to possible Webmail crash when searching messages
- fix to MDRA - Attachment Linking "White List" editor does not save changes
- fix to possible Webmail crash when using message list threading
- fix to Webmail - When HideBlacklistFolder=Yes exists, the BlackList Sender option is still available
- fix to SPF policies are truncated after 1024 characters
- fix to MDRA - admins can remove their own access without a warning
- fix to users not being able to change passwords when using non-reversible encryption and the ODBC account backend
- fix to some MSA-specific processing not being done for SSL SMTP connections when SSLSMTPIsMSA=Yes
- fix to unable to upload/post specifc recurring calendar event via CalDAV
- fix to MDRA - Registration info screen does not show any values in the Country dropdown
- fix to messages with improperly formatted categories causing the iOS mail client to crash
- fix to Outlook using ActiveSync not recognizing changes to Calendar permissions
- fix to unable to upload calendar using Outlook's "Publish to WebDAV Server" feature
- fix to MDRA - Crash when accessing account ActiveSync Clients page
- fix to MDRA - Access denied error when domain admin clicks on ActiveSync Clients or ActiveSync Assigned Policy
- fix to SPF code returning permerror when it shouldn't
- fix to mailing list message not being released from quarantine queue properly
- fix to smart route code sometimes using wrong smart host
- fix to IP address editbox accepting non-IP address data
- fix to signed messages not getting attachments stripped out at times
- fix to Webmail - Remember Me skips the Two Factor Auth validation page when restoring an existing session
- fix to LookOut and WorldClient themes - Slow loading folders could result in unending loading
- fix to MDaemon.exe crash when checking recipient blacklist with an invalid entry
- fix to using CONTACTS:domain in a mailing list causes certain messages to go into the wrong queue
- fix to MDRA - Form field [loglevel] not found error on Global ActiveSync Client Settings page
- fix to MDRA - ActiveSync - When AS is disabled on domain level, a domain admin still sees the AS Client Settings tab on a user
- fix to AutoDiscover does not tell clients to use SSL when the redirect to HTTPS option is enabled
- fix to incorrect IMAP server handling of the % wildcard for LIST and LSUB commands
- fix to a possible hang in Cyren AV processing
- fix to Webmail - When renaming a folder, capitalization is not saved
- fix to several errors converting and handling bad RAW message files
- fix to changed occurrences of a meeting created using ActiveSync may be lost when an attendee sends a meeting response
- fix to Dynamic Screening gateway UI not allowing certain IP addresses to be added
- fix to AutoDiscover not honoring the MDaemon.ini [Special] FullEmailLogin setting
- fix to orphaned multi-line message-id header data possibly being included in list mail
- fix to LookOut and WorldClient themes - Calendar Import from URL broken in IE
- fix to incorrect info about use of "spf" tag in SPFXcpt.dat file help text
- fix to releasing a message that isn't spam getting the spam stripping treatment anyway
- fix to MDRA - ActiveSync - Domains disabled by default still display ActiveSync links in Domain Manager
- XMLAPI: Deleting or modifying PIM items doesn't account for ensuring updates are sent to MC Clients.
- ActiveSync: PIM Validation does not correctly fix identical/duplicate iCalUid values.
- fix to Antivirus - sometimes AV engine does not wait long enough for ClamD to finish loading so it will repeatedly shut down ClamD and restart it
- fix to memory leak in DAV server if folder contains over 1000 events or contacts
- fix to DNSBL "Open Resolver" and "Excessive Queries" response codes are not correctly parsed


MDaemon Email Server 19.0.3
- fix to AutoDiscover does not return the SMTP port when the dedicated SSL ports are enabled
- fix to ActiveSync server may crash when sending a read receipt
- fix to CALDAV: saving a calendar with a reminder set in eM Client returns an error and the event is not displayed in the calendar
- fix to ActiveSync: Work around WP8/WP10 < MoreAvailable /> client bug
- fix to ActiveSync: Creating ActiveSync profiles using alias counts against ActiveSync license
- fix to XMPPServer: possible crashing problem with BOSH server
- fix to possible crash in mdautodiscover.dll
- fix to SPF policies are truncated after 512 characters
- fix to Antivirus: sometimes AV engine does not wait long enough for ClamD to finish loading so it will repeatedly shut down ClamD and restart it


MDaemon Email Server 19.0.1
- Hosted email options with MDaemon Private Cloud are now available. To learn more, please visit: http://www.altn.com/Products/MDaemon-Private-Cloud/.
- To simplify IIS configuration, the ISAPI DLLs MDMgmtWS.dll and MDDP.dll have been moved out of the MDaemonApp directory and into MDaemonISAPIMDMgmtWS and MDaemonISAPIMDDP. If you had already set up IIS to reference these DLLs you will need to reconfigure IIS to access them from their new locations.


MDaemon Email Server 19.0
- Hosted email options with MDaemon Private Cloud are now available
- MDaemon's disk space calculations were being made inconsistently in several places (for example, sometimes using 1000, sometimes using 1024 bytes for a kilobyte computation). This has been fixed to use 1024 consistently. As a result your users' disk space quota values may be slightly different than in previous versions. Please check and make whatever adjustments (if any) you feel are required
- The "Start MDaemon" Start Menu shortcut on new installs now defaults to opening a browser to MDaemon Remote Administration rather than opening an MDaemon Configuration Session. To change this, edit MDaemonAppMDaemon.ini and set [MDLaunch] OpenConfigSession=Yes/No and OpenRemoteAdmin=Yes/No, or use the "Open MDaemon Configuration Session" or "Open MDaemon Remote Administration" shortcuts instead of "Start MDaemon". Set the "Remote Administration URL" at Setup | Web & IM Services | Remote Administration | Web Server if the auto-generated URL does not work or if Remote Administration runs in an external web server. If a working URL cannot be determined, a Configuration Session will be opened instead
- The option "Only send antivirus update notification on failure" is now enabled by default, and when updating to MDaemon 19, it will be enabled the first time MDaemon starts up
- SyncML has been deprecated and removed


MDaemon Email Server 18.5.3
Changes and new features:
- Updated to MDaemon Connector version 5.6.2

Fixes:
- Warn on Missing Attachments always warns in German
- LookOut and WorldClient themes - Using "Add to Contacts" option causes Russian names to be corrupted
- Attached EML files do not open up in a new tab when you click on them
- When disabling ActiveSync for a secondary domain via Domain Manager, it disables it for the primary domain instead