Releases: t-lo/mailserver
Mailserver v1.4.2
Patch level feature release, adding
- A supervisor RPC socket configuration inside the mailserver container so
supervisorctlcan be used. - A "trickle" transport for delayed sending of bulk messages to certain destination domains. See the operations wiki page for more information on customising trickling.
NOTE
- when upgrading from 1.3.x or lower, please read https://github.com/t-lo/mailserver/releases/tag/mailserver-v1.4.0.
- when upgrading from 1.2.x or lower, please read https://github.com/t-lo/mailserver/releases/tag/mailserver-v1.3.0.
Mailserver v1.4.1
Patch level release; minor improvements:
- fix a minor issue with
dns_check.sh - Add mailserver version to the main dashboard.
NOTE
- when upgrading from 1.3.x or lower, please read https://github.com/t-lo/mailserver/releases/tag/mailserver-v1.4.0.
- when upgrading from 1.2.x or lower, please read https://github.com/t-lo/mailserver/releases/tag/mailserver-v1.3.0.
Mailserver v1.4.0
Mailserver v1.4.0 ships wholesale updated dependencies and services.
This includes a breaking change in the dovecot configuration. To upgrade, the mail server's dovecot configuration must be replaced manually, and any changes and customisations must be ported. See https://github.com/t-lo/mailserver/wiki/Upgrade-to-1.4.x-(Dovecot-2.4.x)-from-1.3.x-or-lower for more information. NOTE that managesieve / pidgeonhole shipped with dovecot 2.4.x has a known issue with the "login" authentication. Clients will need to be configured to use "plain" instead (see https://github.com/t-lo/mailserver/wiki/Upgrade-to-1.4.x-(Dovecot-2.4.x)-from-1.3.x-or-lower#issues-with-dovecot-24x-managesieve--pidgeonhole).
Note that if you are using mailman and upgrading from 1.2.x or lower, you'll need to manually migrate the database. Please follow the instructions at https://github.com/t-lo/mailserver/wiki/Upgrade-mailman-contrib-from-mailserver-1.2.x-or-lower-to-mailserver-1.3.0 to manually migrate the mailman database to postgres 16.
Release version information
- alpine: 3.23.2
- postfix: postfix-3.10.7-r0
- certbot: certbot-5.1.0-r0
- opendkim: opendkim-2.11.0-r4
- opendmarc: opendmarc-1.4.2-r3
- caddy: caddy-2.10.2-r2
- dovecot: dovecot-2.4.2-r1
- fail2ban: fail2ban-1.1.0-r2
- supervisor: supervisor-4.3.0-r0
- Postfix prometheus exporter: 0.3.0
- Fail2Ban prometheus exporter: 0.10.3
Mailserver v1.3.0
Mailserver v1.3.0 ships wholesale updated dependencies and services.
This includes a breaking change in the mailman contrib. If you are using mailman, please follow the instructions at https://github.com/t-lo/mailserver/wiki/Upgrade-mailman-contrib-from-mailserver-1.2.x-or-lower-to-mailserver-1.3.0 to manually migrate the mailman database to postgres 16.
Release version information
- alpine: 3.21.3
- postfix: postfix-3.9.3-r0
- certbot: certbot-3.0.1-r0
- opendkim: opendkim-2.11.0-r3
- opendmarc: opendmarc-1.4.2-r1
- caddy: caddy-2.8.4-r6
- dovecot: dovecot-2.3.21.1-r0
- fail2ban: fail2ban-1.1.0-r2
- supervisor: supervisor-4.2.5-r5
- Postfix prometheus exporter: 0.3.0
- Fail2Ban prometheus exporter: 0.10.2
Mailserver v1.2.2
Security release.
If you're using Mailserver on a host that has a routable IPv6 address you should update.
If you're still using Mailserver v1.1.x and don't want to upgrade to the new separate systemd services for monitoring, please consider cherry-picking e3ae638 to your start_mailserver.sh.
This release works around an oddity with docker-proxy's IPv6 to IPv4 routing on ports exported with -p / --publish. Published ports accept connections from both IPv4 and IPv6 remotes on the host by default. IPv4 connections will be routed into the container with their original remote source address. However, IPv6 connections will be converted into IPv4 and will have the docker host IP as source address. The connection will look like it is originating from within the mailserver container's private network.
In other words, all external hosts connecting via IPv6 will be treated like local connections.
Since local networks have a different (often elevated) trust relationship with the mailserver, this potentially has security implications, depending on the respective local set-up.
The release works around this by explicitly publishing all ports on 0.0.0.0, thus forcing IPv4.
Release version information
- alpine: 3.20.0
- postfix: postfix-3.9.0-r1
- certbot: certbot-2.10.0-r1
- opendkim: opendkim-2.11.0-r3
- opendmarc: opendmarc-1.4.2-r1
- caddy: caddy-2.7.6-r5
- dovecot: dovecot-2.3.21-r17
- fail2ban: fail2ban-1.1.0-r0
- supervisor: supervisor-4.2.5-r5
- Postfix prometheus exporter: 0.3.0
- Fail2Ban prometheus exporter: 0.10.1
Mailserver-v1.2.1
Version refresh release. Updated Alpine to 1.20 (from 1.19.1) including all implied package refreshes (see below).
Minor dashboarding improvements: we now show certificate expiration (and time to expire) in the main dashboard.
A race condition with the monitoring service when restarting the main mailserver has been fixed.
Release version information
- alpine: 3.20.0
- postfix: postfix-3.9.0-r1
- certbot: certbot-2.10.0-r1
- opendkim: opendkim-2.11.0-r3
- opendmarc: opendmarc-1.4.2-r1
- caddy: caddy-2.7.6-r5
- dovecot: dovecot-2.3.21-r17
- fail2ban: fail2ban-1.1.0-r0
- supervisor: supervisor-4.2.5-r5
- Postfix prometheus exporter: 0.3.0
- Fail2Ban prometheus exporter: 0.10.1
mailserver-v1.2.0
- BREAKING CHANGE: Start-up files restructured. We now use individual systemd service files for each monitoring service.
Migration is straightforward and only takes a few minutes.
See https://github.com/t-lo/mailserver/wiki#migrating-from-mailserver-113-or-lower-to-to-mailserver-120-or-higher for migrating existing installations (mailserver-1.1.2 or lower) to the new release. - Alpine upgraded to 3.19.1
- Core packages updated to latest available versions.
- Releases now include core package versions.
- Release package versions:
- alpine: 3.19.1
- postfix: postfix-3.8.6-r0
- certbot: certbot-2.7.4-r0
- opendkim: opendkim-2.11.0-r3
- opendmarc: opendmarc-1.4.2-r0
- caddy: caddy-2.7.6-r1
- dovecot: dovecot-2.3.21-r17
- fail2ban: fail2ban-1.0.2-r3
- supervisor: supervisor-4.2.5-r4
- Postfix prometheus exporter: 0.3.0
- Fail2Ban prometheus exporter: 0.10.1
mailserver-1.1.3
mailserver-1.1.2
Bugfix release to address an issue with certificate renewal on restart (d30b5b3).
mailserver-1.1.1
Maintenance release which bumps fail2ban-exporter to the latest version (0.9.0).