New in MDaemon 26.5
Changes and New Features
MDaemon Server
•The simple message ticketing system now has an option to use a sequential ticket number instead of a random alphanumeric ID, and can tag a new outbound message so a reply to it will be treated as a ticketing email. Both options are on the Public Folder Manager page. If a public folder already had ticketing enabled before you updated to 26.5, you'll need to re-save its settings to pick up the new outbound-tagging capability.
•Added PROXY Protocol support, allowing MDaemon to sit behind HAProxy or a similar load balancer or reverse proxy and still see the original client's IP address, instead of the proxy's own address.
•MDaemon now automatically creates Windows Firewall rules that allow inbound connections to its executables, if a rule doesn't already exist.
•Host Screen has a new option to add the IP address of a refused SMTP connection to the Dynamic Screening Block List. This option is disabled by default.
•The CSV file produced by exporting accounts now includes a Groups field listing the groups each account belongs to.
•When editing a group's members, there are now Import and Export buttons for reading and writing the group's members to a text file, one address per line.
•The "Log ID string in mail session logs" Logging setting is now enabled by default.
•Added support for the IMAP MOVE command (RFC 6851).
•The XMPP Server now logs information about clients that connect to it.
Remote Administration
•Replaced the FusionCharts charting library with Apache ECharts.
•MDRA now uses MDaemon's own HTML editor, based on TipTap, instead of CKEditor.
•Added the ability to customize the CSS for the sign-in page, from Main > Remote Admin Settings > Branding for Remote Administration, and Main > Webmail Settings > Branding for Webmail.
•Updated the text for "Enable MDaemon Instant Messenger" and "Enable instant messaging" to clarify their purpose, and moved the remaining settings that apply broadly to the Instant Messaging page.
•Added "Allow users to prevent the server from archiving messages" to the Instant Messaging page (enabled by default).
•Added Indonesian as a supported MDRA language.
Webmail
•All Webmail themes now share a single, unified sign-in screen, instead of a separately themed one for each theme.
•The WorldClient theme has a new look, with better Chat view integration.
•The Web Conference features are now available in the WorldClient theme instead of just the Pro theme.
•Pro theme - Switched from the TinyMCE HTML editor to an internal Tiptap-based editor.
•Pro and WorldClient themes - Added Spam and Not Spam quick actions to messages in the message list.
•WorldClient theme - Added a Show/Hide Details toggle to the message view header.
•The recall button is now available for deferred delivery messages when the recall delay is set to 0.
•Pro theme - Security settings now prompt for your current password in a dialog when setting up an Authenticator App, Email Verification, an App Password, or a recovery email, instead of requiring a separate password field beforehand.
•WorldClient and Pro themes - Added hyperlinks to contact web addresses and PIM notes.
•Pro theme - Added the ability to download PIM attachments directly from the item preview for Contacts, Events, Tasks, and Notes.
•Web Conferences scheduled through Webmail now include the conference link in the body of the event, in addition to the location.
Other
•LetsEncrypt - Added support for a switch to re-use certificate keys.
•The bundled web servers that run Webmail and Remote Administration now reject HTTP 1.0 requests by default; they require HTTP 1.1.
•XMLAPI - App passwords can now be used to log in. A session created using an app password does not have admin rights.
•CalDAV/CardDAV - Added support for the sync-collection REPORT (RFC 6578), allowing clients such as Apple Contacts and Calendar on macOS to synchronize using sync tokens.
•Updated ClamAV to version 1.4.6.
•Content Filter - Updated unrar64.dll to version 7.23.
MDaemon Server Release Notes
For a comprehensive list of these and all other additions, changes and fixes included in MDaemon 26.5.0, see the Release Notes.
New in MDaemon 26.0
Changes and New Features
MDaemon Server
•MDaemon sets the service recovery options for the MDaemon, Remote Administration, and XMPP Server services if no actions have already been configured for them.
•The "Filter messages which fail the DMARC test into spam folders" option on the DMARC Verification page is now enabled by default on new installs. Consider enabling it if you're updating from a previous version.
•Added "domain" to the default Host Screen entries. This only applies for new installations or if you delete the HostScreen.dat file and restart MDaemon, which would return that file to its default state.
Webmail
Sign-in
•OpenID Connect (OIDC) - Webmail now supports Single Sign On using OIDC. Instead of signing in to Webmail with their MDaemon email address and password, users can use the Sign In with SSO button to sign in to an OIDC identity provider (IdP). Webmail will then sign them in to the MDaemon account associated with their IdP account.
To set this up, you will first need to create an app using your IdP's management interface, and provide your Webmail Redirect URI when doing so. Then, you will configure Webmail's OIDC settings using the options on the OIDC page, specifying which Email claim to use to associate your users' IdP accounts with their MDaemon email addresses. If the IdP accounts do not contain their MDaemon email addresses, then it is still possible to use this option, but you will need to use the OIDC Email Claims settings in MDRA to manually map each user's IdP account to their MDaemon email address. Note: When specifying which Email claim to use in your OIDC setup, never choose a claim that your users have permission to edit. That would create a security vulnerability, making it possible for a user to sign in to someone else's email account on the server simply by editing that data.
Web Conferences
•Web Conferences can now be recorded. Only the conference creator can record them, and all attendees with be notified when recording starts. Download links for conference recordings will be available on each attendee's Conferences History page in Webmail. Conference Recording options are located on the Web Conference Server page.
•Attendees can now upload and download files during a conference. Uploaded files can also be downloaded outside of the conference from links on each attendee's Conferences History page in Webmail. Conference File Transfer options are located on the Web Conference Server page.
•External, non-Webmail users can now be invited to conferences, by entering the person's email address when creating the conference. For those outside participants, an email invitation containing a special link will be sent to the address, which the person can click to join the conference; they will be required to enter a verification code that they request after following the link. Attendees who join in this way will be shown a different user interface and will not have access to the Conferences History entries related to the conference. To support this change, the invitation feature now uses the contact picker. Note: this change also allows users of other local MDaemon domains to be invited to conferences, even when the "Include all domains in the user buddy list" option is disabled, but those attendees will treated as external users, requiring the same email link and verification process to join the conference.
•New conference invitations are now also sent to a user's MDaemon Instant Messenger (MDIM), in addition to the user's email address.
•Added the ability to resize the attendees list during a conference.
•Upgraded RTCServer.exe from node 22.21.1 to 22.22.0.
Calendars
•Added a refresh button and refresh timer to the Pro theme's Calendar view. The refresh timer is off by default and can be set at Settings > Calendar in Webmail.
•Added the ability to customize the work week hours shown in the Pro theme's Calendar view at Settings > Calendar in Webmail.
Other
•Pro theme - Added the ability to set the nickname of a favorited folder
•Added the user message quotas to the Pro theme's navigation bar.
•Incremented the OpenAI model from gpt-4o-mini to gpt-5.1.
•MDaemon will disable Webmail's Standard theme, if it's still installed, by moving it to \MDaemon\WorldClient\Old. It has been obsolete and unsupported for many years.
Remote Administration
•Added a Rejected Inbound page at Reports > Traffic.
•Added a Statistics Log page at Logs > Statistics Log, for sorting and searching for the Statistics Log.
•Added the domain name to all Domain Manager title bars.
•Added "Block Sender when moving mail into Junk-Email folder" to MDRA in ActiveSync Client Settings.
Other
•MDaemon GUI - Renamed the "Trusted Hosts" dialog to "Trusted Domains". The values here are compared to the domain in MAIL FROM commands, not the FQDN in HELO/EHLO commands. Use with care and do not make a domain trusted unless you know you need to do so.
•ActiveSync - The "Block Sender when moving mail into Junk-Email folder" client setting is now disabled by default. Previous versions enabled it for the "WindowsMail" and "WindowsOutlook15" client types. Disable it if it's causing problems for your Outlook users.
•ActiveSync - When the server blocks an address due to "Block Sender when moving mail into Junk-Email folder", it is noted in the AirSync log and in the newly created contact.
•Content Filter > Attachments - You can now set Restricted Attachments Exclusions for specific files and file-types based on the sender and recipient.
•MDMigrator - Added search filter to mailbox selection page to filter by name or email address
•MDMigrator - Non-ASCII characters in mailbox and full name fields are now converted using ActiveDS.dat character mappings.
•MDaemon Connector has been updated to version 8.0.3.
•Updated SpamAssassin to 4.0.2.
MDaemon Server Release Notes
For a comprehensive list of these and all other additions, changes and fixes included in MDaemon 26.0.0, see the Release Notes.
New in MDaemon 25.5
Changes and New Features
Web Conference Server
•MDaemon is now equipped with a Web Conferencing server that can provide audio and video communication between your Webmail users, along with a host of web conferencing features. To use Web Conferencing, users must be signed in to Webmail using HTTPS, and using the Pro theme. They can then access this feature from the Web Conference icon on the Pro theme toolbar. Webmail's Web Conference feature includes: video and audio conferences, screen sharing, text chat, presenter and moderator tools, conference scheduling and invites, password protected conferences, and more. The Web Conference Server is configured from a new page at: Main | Web Conference Server. Web Conferencing requires Windows 10 / Server 2016 or newer.
MDaemon Server
•A new SSL/TLS option has been added: "Automatically detect and activate newer certificates". When enabled, MDaemon will check at startup and during its daily maintenance for newer versions of each active certificate for MDaemon, Webmail, and Remote Administration. If another certificate on the system expires later, is for the same hostname, and includes all alternative hostnames, MDaemon will automatically switch to it and restart the affected servers. This option is enabled by default.
•A new "Send As Permissions" page has been added to the Sender Authentication security features. This is used for associating Send As Addresses with specific MDaemon Accounts, allowing them to send messages as if from another MDaemon account. For example, using this feature you could give a manager's assistant permission to send messages as if they are coming from the manager's account, or you could use a wildcard address, such as "*@example.com," to give all users of a specific domain permission to send from a specific address, such as "info@example.com".
•VBR (i.e. Message Certification) has been deprecated and removed.
•MDaemon logs the From header address when rejecting a message because it does not match AUTH credentials.
•The minimum length of strong passwords can now be set higher than 15 if "Store mailbox passwords using non-reversible encryption" is enabled.
•Added legend to the Location Screening dialog that explains what the symbols mean.
•Updated DMARC Public suffix file URL to the latest recommended URL.
•The Automatic Gateway Creation screen is not displayed in the GUI if it's not being used.
Remote Administration (MDRA)
•A configuration page was added for the new Web Conference Server, located at: Main | Web Conference Server.
•A page was added for the new Send As Permissions feature, located at: Security | Sender Authentication | Send As Permissions.
•Added the Active Directory Group input field to the Group Properties page at Main | Groups | Edit.
•You can now use several macros in Custom Links for Webmail.
•The Statistics Log page displays the current size of the statistics database.
•There is now a button to apply permissions to sub folders for user shared folders at: Account Manager | Edit | Shared Folders | Edit Access Control.
Webmail
•Added options in Publish Schedule to require or hide the phone, address, and notes fields on the appointment scheduling view.
•Webmail includes an account's Send As Addresses in a list of possible From addresses when composing. This is enabled by default. It can be disabled by editing \MDaemon\WorldClient\Domains.ini and setting [Default:UserDefaults] ComposeWithSendAsAddresses=No. The display name for each address can be set in the Pro theme if AllowEditAliasDisplayName is enabled.
•Pro theme - Added a search input for the Copy/Move dialog.
•Webmail now saves user session information when it is shutdown through MDaemon, and loads it on start up.
•Webmail now retains the custom colors of a calendar in published calendars.
•Pro theme - Added leading zeros to the dates that are not using the auto-formatted feature.
•Changed the Two Factor Auth email verification code email to include a text/plain part, so that it's consumable for cellphone provider SMS gateways.
Other
•In the Advanced Log Viewer, accessed from the Diagnostics screens on various MDaemon UI dialogs, the Session colors are preserved when refreshing the log data.
•All MDaemon components that make HTTP requests now use the configured proxy settings.
•The AutoDiscover service now returns the URL to the XML API, if the XML API is enabled and the requesting IP is allowed to access it. The protocol type is "MDXMLAPI".
•The MDaemon installer terminates MDStats.exe, CFilter.exe, and ASLogView.exe to avoid needing a reboot if they've been left open.
•"Block except SMTP, disable authentication" label on the Location Screening dialog has been changed to "Prevent authentication". This is only a verbiage change, to clarify its purpose.
•The LDAP port has been removed from the Ports dialog. It can still be configured on the LDAP dialog.
•The MultiPOP setting, "Don’t download messages larger than [xx] KB", now allows 5 digits.
•The account Quotas setting to "Disable accounts after this many inactive days" will now also disable accounts that were created but have never been accessed in that number of days.
•Updated SpamAssassin to 4.0.1.
•The \MDaemon\PEM\ folder is now included in the config file backup system.
•Added maximize button to the Queue/Stats Manager's Log Viewer.
MDaemon Server Release Notes
For a comprehensive list of these and all other additions, changes and fixes included in MDaemon 25.5.0, see the Release Notes.
New in MDaemon 25.0
Changes and New Features
MDaemon Server
•MDaemon Private Cloud is no longer a separate download. Your license (registration key) controls whether MDaemon acts as the Private Cloud version.
•Let's Encrypt - PFX files older than 30 days will be removed from disk.
•Updated Acme-PS PowerShell module used by the Let's Encrypt PowerShell script to version 1.5.9
•The SMTP server now looks up the sender's DMARC policy when needed for the DMARC-related mailing list options, even if the connection is exempt from DMARC processing.
•Added a new condition to the Content Filter that allows actions to be performed on messages that contain a QR code.
•MDaemon Connector has been updated to version 8.0.2.
Remote Administration (MDRA)
•Added the ability to sort accounts by the Last Access column at Main | Account Manager and Main | Domain Manager | Edit | Accounts.
•Added Message Indexing settings at: Messages and Queues | Message Indexing | Settings and ...Diagnostics. The Message Search options are now also under Message Indexing.
•Added XML API Management settings at: Setup | XML API Management | System / Address Restrictions / Diagnostics
Webmail
Pro Theme
•The Pro theme is now the default Webmail theme for new installs. When updating, the installer will ask if you want to change your default to the Pro theme.
•Added long press context menus to folders and list items for mobile devices.
•Added a thicker border on the left edge of events in the Calendar view.
•Added a Select All checkbox for the contact picker.
Other
•MDaemon Webmail's Lite theme has been removed from new installations of MDaemon, and it will no longer be updated in existing installations.
•Added LAN IP session expiration timers. There are separate expiration timers for when users are composing message or not composing messages. The options are located in Remote Administration under Main | Webmail Settings | Web Server.
•Created a GitHub page that explains how to integrate MDaemon Webmail with an intranet site: https://github.com/mdaemon-technologies/intranet-integration
•Added contact pictures in the message list. If a contact is from the user's contact list and it has a picture, then messages from that contact will display the contact picture instead of the first letter of the contact's name. This feature does not use Brand Indicators for Message Identification (BIMI).
•The Webmail sign-in process has been updated to provide a meaningful error message when the sign-in credentials are correct but access is denied due to the account being frozen, disabled, not allowed to use remote access, or when do not disturb is enabled.
MDaemon Server Release Notes
For a comprehensive list of these and all other additions, changes and fixes included in MDaemon 25.0.0, see the Release Notes.
New in MDaemon Private Cloud 12.5.0
•MDaemon Private Cloud 12.5.0 includes MDaemon 24.5.2 with MDaemon Connector 8.0.1.
For a list of all MDaemon changes, see the MDaemon 24.5.2 Release Notes.
For a list of all MDaemon Connector changes, see the MDaemon Connector 8.0.1 Release Notes.
New in MDaemon 24.5
Changes and New Features
Remote Administration (MDRA)
•(New in 24.5.1) eM Client licenses can now be managed through MDaemon Remote Administration by going to Setup | eM Client. From this dialog, MDaemon Global administrators can request 3 FREE eM Client activations for each of your domains, purchase additional licenses, and manage activations.
•There is now a "Search Settings" link on the title toolbar at the top of the page. This feature is useful for more easily locating any of the many settings and pages within MDaemon. Simply start typing words contained in the setting or page that you are looking for, and links to pages containing those words will be listed below. (New in 24.5.1) When you follow a link to a setting, the name of that setting will blink several times with alternating colors to help you locate it on the page.
•There are several new image blocking options in Webmail Settings and Domain Webmail Settings that can be used to block HTML remote images in some or all messages. You have the option to allow the recipient to view the images if desired, or to "always" block those images with no option to view them. Finally, you can also apply the image blocking options to inline/embedded images.
•MDaemon now includes OneDrive integration support for your Webmail users. Similar to the Google Drive and Dropbox integration features, MDaemon Webmail can present users with options to save message attachments directly to their Microsoft OneDrive Work or School account, and to edit and work with documents stored there. In order to enable this, a Client ID and Client Secret are required, which are obtained directly from Microsoft by creating an App using Microsoft's Azure Active Directory. An OAuth 2.0 authentication component is part of this app, which allows your Webmail users to sign-in to OneDrive and then authorize access to their OneDrive Work or School account through MDaemon. Once authorized, users can view their folders and files that are in OneDrive. Further, they can upload, download, move, copy, rename, and delete files, as well as copy/move files to and from the local document folders. The OneDrive setup process is similar to MDaemon's MultiPOP OAuth Integration feature.
•WebAuthn management tools were added to the Account Details page in the Account Editor and under My Account, displaying any passwordless sign-in or 2FA credentials that have been set up in MDRA or Webmail.
•The Account Details page, in the Account Editor and under My Account, now includes the Password Recovery Email option.
•Added a Select All toggle button for the group membership editor.
•Added a confirmation dialog for the Delete and Delete All buttons at Messages and Queues | Deferred Queue
Webmail
Pro Theme
•(New in 24.5.1) The AI Message Features were updated to use the gpt-4o-mini model
•Added options to underline the from header and italicize the to header in the message list at View Options | Message List Layout
•Added a "Recall" icon in the message list for messages in the Sent Items folder. Hovering over the icon for a deferred message will display the deferred until date. Click on the icon to recall the message.
•Added the ability to sort email templates using drag and drop Settings | Email Templates
•Added a skeleton "modified.css" at MDaemon/WorldClient/HTML/All/StyleSheets for any admin to modify the css in the Pro theme. The file is not overwritten on install.
•Added an option to "Display attachments in the message list" at Settings | Personalize. Some attachments, such as public key signatures, are excluded. Attachments are only displayed in the multiline view.
•Added an option to "Always display messages in multi-line format" in the message list at View Options | Message List Layout
•Added a settings search feature. Users can click the "Search Settings" option in the settings view and type a phrase to search for a setting. Users can then click on a result to be taken to the correct settings page.
•Added support for Microsoft OneDrive integration. To connect, go to Settings | Cloud Apps and click "Setup OneDrive". Microsoft does not allow personal accounts to be connected; only business and student accounts are permitted. Users can view their drives, folders, and files. They can also upload, download, copy, move, delete and even view files (using Microsoft's view link).
•When using "New Event", "New Task", or "New Note" features, attachments from the message are now added to the new item.
•Added a button to use AI to translate the body of a message next to the "Summarize" button
Other
•Added an option to toggle AM/PM time format for published calendars. Uses the user's UseAMPM setting by default.
•WorldClient and LookOut themes - Changed the default advanced search start date to one year ago
•Enabled per user AI setting by default (for new installs).
•Added HideDeleteAttachmentButton option. Must be set in the MDaemon\WorldClient\Domains.ini [Default:UserDefaults] section or per user in the User.ini [User] section
MDaemon Server
•On the Mailing List Editor's Settings page, the option to "Remove undeliverable email addresses from list membership" now lets you configure how many consecutive permanent delivery failures must occur before the member is removed. To prevent members from being removed after a single failure, the default value is 3.
•MDaemon always uses "relaxed" header canonicalization when generating ARC signatures.
•Saving the IP addresses of SMTP/IMAP/POP login attempts so new and previously-failed IPs can be reported is now optional. It is enabled by default, and the IP addresses can now also be pruned after they are a number of days old (365 by default). See the "IP History" settings on the SMTP Screening page.
•The Header text and HTML filename used in Attachment Linking messages can now be specified on the Attachment Linking page.
•The About dialog displays the registration keys for AntiVirus, MDaemon Connector, and ActiveSync if they are using different registration keys than MDaemon.
•The Webmail RelayFax screen is not displayed in the GUI unless RelayFax is installed or Webmail is using RelayFax.
•The low disk space warning emails now say which drive the warning is about.
•The weak passwords report now mentions how many accounts could not be checked because they're using AD authentication or non-reversible password encryption.
•After installing a new version, the entire MDaemon release notes will be emailed to admins instead of only the special considerations.
•Added domain names to the warnings logged at startup when a postmaster or abuse alias is missing.
•Location Screening has a new option to add the IP of an SMTP connection to the Dynamic Screening Block List if they attempt to authenticate when authentication is disabled. This option is enabled by default.
ActiveSync
•ActiveSync has long supported Folder Exclusions, to prevent an individual client from Syncing a selected folder. As of this version, it now supports Folder Exclusions at the Global, Domain, ClientType and Account level also. The XML API has been updated to allow for managing these within the ActiveSync operation.
Other
•Dynamic Screening - Instead of freezing an account when it has failed authentication too many times, it is added to the new Blocked Account List. Blocked accounts can still log in from Trusted IPs and IPs on the Dynamic Allow List. Accounts on the new Exempt Account List will not be added to the Blocked Account List.
•XMPP - There is now an Enable buddy list syncing option to automatically populate a users' buddy lists for the domain. This setting is also available per domain, and it is disabled by default.
•XMLAPI - Ability to download log files via FileTransfer Operation.
•XMLAPI - Manage and report Published Schedules URL for an account. One can now retrieve Published Schedule information for an account using GetUserInfo. It will be in the Publishing Element under the WorldClient Element for an account. To publish or retract a Calendar Folder via the API, see the FolderOperation 'publish' and 'retract' actions.
•ActiveSync Migration Client now supports OAUTH for migrations from Office 365.
•Improved Antivirus scanning exclusions.
•LetsEncrypt will change the FQDN and AlternateHostNames to use lower case characters.
MDaemon Server Release Notes
For a comprehensive list of these and all other additions, changes and fixes included in MDaemon 24.5.2, see the Release Notes.
New in MDaemon Private Cloud 12.0.0
•MDaemon Private Cloud 12.0.0 includes MDaemon 24.0.1 with MDaemon Connector 8.0.1.
For a list of all MDaemon changes, see the MDaemon 24.0.1 Release Notes.
For a list of all MDaemon Connector changes, see the MDaemon Connector 8.0.1 Release Notes.
New in MDaemon 24.0
Changes and New Features
MDaemon Server
•MDaemon can collect and send anonymous usage data to MDaemon Technologies. We will use this information to improve the product and its features to better meet the needs of our customers. This can be disabled by unchecking the "Send anonymous usage data" checkbox at Setup | Preferences | Miscellaneous. See our privacy policy for more information.
•The DKIM option to sign mailing list messages no longer requires content filter processing on each individual list message.
•The Bad Queue Summary email now has a link to delete all messages. As with the other links in the queue summary emails, this requires the "Include action link in summary email" option to be enabled and the Remote Administration URL to be set.
•Authenticated Received Chain (ARC) protocol - ARC is an email authentication protocol that lets intermediate mail servers digitally sign a message's authentication results. It provides an authenticated "chain of custody" for a message, allowing each server that handles the message to see what previous servers handled it and whether or not it was authenticated at each step. When a downstream mail server does DMARC verification and finds that SPF or DKIM have failed (due to forwarding or mailing list modifications, for example), it can look for ARC results from a trusted server and use them to decide whether to accept the message. ARC verification and signing can be enabled on the new ARC Settings dialog under Sender Authentication. For more information on the ARC protocol, see: RFC 8617: The Authenticated Received Chain (ARC) Protocol.
•Added support for SEM files without "blacklist" and "whitelist" in their names: BLOCKLIST.SEM, SENDERBLOCKLIST.SEM, RCPTBLOCKLIST.SEM, CREDSMATCHEXEMPTLIST.SEM, DMARCEXEMPTLIST.SEM.
•Changed the Hijack Detection account frozen notification email to say the exact reason the account was frozen.
•MDaemon disables the MDaemon Connector client auto-updater in versions before 7.0.6, to work around an auto-updater bug in those versions.
Remote Administration (MDRA)
•Document Links - This feature allows Webmail users to create temporary links to specific files contained in their personal documents folder. These links can be shared with anyone and will be active for 30 days and then automatically removed. The global default setting for this option is located on the Webmail Settings page. It can also be set per domain in the Domain Manager or per user in the Account Manager. Global Administrators can use the Document Links page to see what links are being shared, when they were created, how many times the linked file has been downloaded, and the last download. They can also use this page to revoke any link.
•The Status page now displays the license status and number of accounts used for MDaemon, MDaemon Connector, AntiVirus, and ActiveSync. This info is also displayed on the Registration page (click About and then Registration on the toolbar).
•There is now a Webmail Setting to "Disable hyperlinks in spam and messages that fail DMARC, DNSBL, or SPF authentication", which is enabled by default. You can optionally exempt messages from this when the From header matches a contact in the domain's or user's Allowed Senders contact lists. An exemption option for Allowed Senders was also added to the "Block HTML images" option on the same page.
•Added a Webmail Branding option to upload a custom background image for the Webmail sign-in page.
•You can now set MDaemon to "Allow WebAuthn Sign-In to bypass the Two Factor Authentication page" on the main Webmail Settings page, and on the corresponding Domain Manager Webmail page. Because WebAuthn is already a multi-factor form of authentication, using another form of Two Factor Authentication (2FA) after someone has already used WebAuthn to sign-in could be viewed as redundant or excessive by some users or administrators.
•Changed the list of registered credentials on the user settings page to only display Passwordless Sign-In credentials and added the same type of list to the Two Factor Auth Device Authentication portion of the page for the related registered credentials. You can access your user settings page by clicking your account name in the top-right corner of the navigation menu.
•Moved the proxy settings from the AV Config updater to Setup | Server Settings | Proxy Settings.
•A Delete button was added to the Message Search page under the Messages and Queues menu. Administrators can use this to delete messages from a user's mailbox. Global administrators can also now choose to search All Mailboxes for a given domain.
Webmail
Pro Theme
•The Pro theme now has an option to allow users to create temporary links to individual files in their Documents folder, which can then be shared with anyone. In the document list, the user creates the link by clicking a Link icon to the right of any listed file. Using that same icon, the user can delete a previously created link or replace the link with a new one, since links will be deleted automatically after 30 days. If a link exists for a file, an icon will appear before the file's name in the document list. In MDRA, the "Allow users to create temporary links to personal documents" option governing this feature is located on the Webmail Settings page (corresponding options are also in the Domain and Account Managers), and there is a Document Links page for viewing and managing the links your users have created.
•When viewing a message that you have previously replied to or forwarded, a note appears below the headers stating the date and time you replied to or forwarded it.
•There is now a notification bell icon in the top-right corner of the navigation bar, to review and "mark as seen" your past event and task Reminders. If you wish to remove the bell icon from the navigation bar, you can turn off that feature by disabling the "Display event and task reminders in the navigation bar" option on the Settings | Notifications page in Webmail.
•There is now a "Show Header Details" option at Settings | Personalize to always show the header details in the message views.
•Added instructions on how to use the availability UI on the Publish Schedule dialog.
•Upgraded the HTML editor, TinyMCE, from version 6.0 to version 6.8.
•Updated the translations for the in-browser instant messenger.
•Added a font option to the Settings | Personalize page.
•Added the ability to drag and drop attachments and documents download links to the desktop. Only works with Chrome-based browsers.
•Added a toggle arrow for the CC and BCC fields in the compose view.
•Reduced the list and menu padding for desktop browser sizes.
•After you copy or move a message to another folder, the next time you open the copy/move menu it will contain a new link to Copy or Move to the same folder used before. For example, if you copy a message to Inbox, the next time you open the shortcut menu there will be a new "* Copy to Inbox" option below the normal Copy option.
•Updated the text on the Publish Schedule page to use "Duplicate" instead of "Copy" for adding existing availability to other days.
•Updated the Folder Actions page.
Other Improvements
•Improved performance by reducing the amount of disk I/O.
•Empty hrefs in HTML anchors in emails will now be removed to prevent invalid behavior.
•Created an Allowed Senders public folder that is checked for the "Do Not Block Images for Allowed Senders" and "Do Not Disable Hyperlinks for Allowed Senders" Webmail options. This folder is currently only used by Webmail, not by the MDaemon server or Spam Filter.
•Added the user options "Request Delivery Confirmation" and "Request Read Confirmation" at Settings | Compose. When these are set to Yes, the corresponding checkboxes are activated in the Compose view.
•Added an option to "Do Not Disable Hyperlinks for Allowed Senders" at Settings | Personalize. When hyperlinks are disabled in a message, "Hyperlinks are disabled. Click here to enable them" will be displayed at the top of the message window.
•Added the ability to set the color of a calendar in the Pro theme. The setting is available by right clicking a calendar in the Calendars View, going to Settings | Folders and clicking on a calendar from the folder list, and while creating a new calendar in the New Folder dialog. The color setting is honored in LookOut and WorldClient themes.
•Changed the list of registered credentials on the Settings | Security page to only display Passwordless Sign-In credentials and added the same type of list to the Two Factor Auth Device Authentication portion of the page for the related registered credentials.
•Changed the "Import Messages" icon to a down arrow instead of an up arrow.
•Added more contrast between the read and unread status of messages in the message list.
ActiveSync
•Improved SmartForward/SmartReply Operation when <ReplaceMime/> is NOT specified.
Previous versions contained code that was compliant with the EAS 2.5 Spec for SmartForward. Furthermore, SmartReply did not support inline images in the replied to message. This new code supports this. The style css fragment that controls the div within which the replied to / forwarded message is placed, continues to be customizable. See the ActiveSync operation Samples ActiveSync_DomainSettings_*.xml and ActiveSync_GlobalSettings.xml. Unless explicitly specified, domain settings will use the global formatting settings.
•ActiveSync Management changes are logged to the AirSync-Mgmt log file.
•The ActiveSync server honors the Webmail option to use the X-Forwarded-For header.
Other
•XMLAPI - Added App Passwords management.
•Content Filter - Added support for foreign characters for rules editing and searches. Content filter configuration files (CFilter.ini and CF*.dat) have been converted to UTF-8. If you need to revert to a previous version and have non-ASCII characters in these files, convert them to ANSI or restore them from backup.
•Updated DQS SpamAssassin files for HBL content and fixes.
•Dynamic Screening - If you encounter "The network path was not found" errors, edit the registry at HKLM\SOFTWARE\Alt-N Technologies\MDaemon\DynamicScreening\Configuration and set Server to "." and UseCustomServer (DWORD) to 1.
•Updated ClamAV to version 1.0.6 LTS.
•MDaemon Connector has been updated to version 8.0.1.
•ActiveSync Management changes are logged to the AirSync-Mgmt log file.
•The ActiveSync server honors the Webmail option to use the X-Forwarded-For header.
MDaemon Server Release Notes
For a comprehensive list of these and all other additions, changes and fixes included in MDaemon 24.0.0, see the Release Notes.
New in MDaemon Private Cloud 11.5.0
•MDaemon Private Cloud 11.5.0 includes MDaemon 23.5.2 with MDaemon Connector 7.0.7.
•Fix to MDRA - Cloud features such as Managed Servers missing from the menu.
For a list of all MDaemon changes, see the MDaemon 23.5.2 Release Notes.
For a list of all MDaemon Connector changes, see the MDaemon Connector 7.0.7 Release Notes.
New in MDaemon 23.5
Changes and New Features
Webmail
MDaemon supports the Web Authentication API (also known as WebAuthn), which Webmail users can utilize to have a secure, passwordless sign-in experience, by allowing them to use biometrics, USB security keys, Bluetooth, and more for authentication. WebAuthn can also be used for Two-factor Authentication (2FA), although if you are using both passwordless authentication and two-factor authentication then you can't use the same authentication method for both. You can find the WebAuthn settings on the Webmail Settings page of the MDaemon Remote Administration (MDRA) web-interface.
Visit: webauthn.guide, for more information on WebAuthn and how it works.
As of MDaemon 23.5.0, the Pro theme in MDaemon's Webmail client includes various Artificial Intelligence (AI) features to help assist your users in managing their email and increasing productivity. With these features, in MDaemon Webmail you can use AI (specifically ChatGPT by OpenAI) to get a summary of the contents of an email message, suggest a reply to a message based on criteria you choose, and help you compose a new message based on some of your own text and other criteria.
Webmail's AI message features are disabled by default for all domains. They can be enabled by using the "Enable AI message features" option on the Webmail Settings page or the Domain Manager's Webmail page. Webmail's AI message features are also disabled per user by default. You can enable them per user on the Account Editor's Web Services page, or as part of a Group controlled by an Account Templates. When the Domain setting is disabled, that takes precedence over the user setting. Therefore, none of that domain's users will be able to use the AI message features regardless of their user setting.
See: Webmail's AI Message Features, for more information and cautions about using these features. Further, you can find MDaemon Technologies' AI Usage Policy at our Artifical Intelligence (AI) Information Page. On that same page there is also a link to OpenAI's Terms of Use.
Theme Improvements
23.5.2
•Pro: Users can now click on the current folder, and it will reload the list view. All contacts, and all documents views will be turned off.
•Pro: Added the Advanced Compose setting at: Settings | Compose. When enabled, the CC and BCC fields will always be visible in the Compose view.
23.5.1
•Pro: Publish Schedule - Added optional location and comment fields that will be included in any event created through the schedule page.
•Pro: Improved the organization of the Folder Actions page.
23.5.0
•Pro and WorldClient: There is now an option to delete all attachments from a given message.
•Pro and WorldClient: Added a Description column to the Documents view.
•Pro: The Compose view contact picker now has a dialog for adding a contact with three fields (Name, Email, Mobile Phone).
•Pro: There are new Style options at: Settings | Personalize.
•Pro: Multiple event reminders are now supported.
Other Webmail Improvements
•Added a Public Schedule option, so that users can allow others to schedule a meeting.
•Separated the setup process for Two Factor Authentication email verification from the setup process for authenticator app verification.
•The Password Recovery feature now sends an email without revealing to the user where the email was sent. Two Factor Auth occurs after clicking the recovery link in the email.
•Changed how Webmail authenticates to MDaemon's SMTP server so the user's password is not needed.
•Added an option to "Mark deleted messages as read" at: Settings | Personalize.
•There is now an All Documents toggle button in the Documents view.
Remote Administration (MDRA)
There is now a Health Check page in MDRA at: Security | Health Check. This page provides a convenient list of important security settings consolidated onto a single page, and it displays each setting's current value and its default value. Where those values differ, the setting is highlighted so that Global Administrators can quickly review those particular settings and then restore any of them to their default values if desired. Each group of settings also has a shortcut icon next to it, so that you can jump to the page on which those settings are located. In addition, you can also view a list of all Health Check changes made during the current browser session, and undo any of those listed changes if necessary.
Other MDRA Improvements
•Added editor GUIs for all direct edit files.
•There is now an "X" icon that you can click to hide any given chart in the Traffic and Mailboxes summary report pages. To restore a hidden report, click your account name in the upper right corner of the page and then click the box next to the report you wish to restore.
•Added a Delete All button to the Mailing List Members page.
•As with Webmail, support for WebAuthn was added to MDRA, which gives users a secure, passwordless authentication method, and it can also be used as a Two Factor Authentication method. The WebAuthn options in MDRA are located on the Remote Admin Settings page. See: WebAuthn Support in the Webmail section above.
•The Public Folder Editor and Shared Folder Editor now has a Nest under option to choose the parent folder under which the selected public or shared folder will nest.
•Added some text to the Account Editor's Mailing Lists page to explain that a user might show up as a member of a mailing list due to membership in a Group.
•In the Message Search and Queues, added the ability to view the email message, in addition to being able to view its source. RAW messages are still only in text/plain.
•Added links to the Queues on the Status page.
•Added the ability to include multiple addresses (separated by commas) when adding new Access Rights to a Public Folder's Access Control page. You cannot add addresses when editing existing rights.
Security
•Updated ClamAV to 1.0.3.
•LetsEncrypt - Added support for TLS 1.3
•Updated SpamAssassin to 4.0.0.
XMLAPI
MDaemon 23.5.0 includes many additions and improvements to the XMLAPI. See the Release Notes for a complete list of these improvements.
Other
•Added an App Passwords option to delete an account's app passwords when the account's password is changed. The new option is on by default.
•Added a Restrictions page to the Account Templates. When an account is removed from a group with an account template that controls restrictions, the account's restrictions revert to their previous values, or possibly to another group's account template if the account is a member of multiple groups.
•The Location Screening option "SMTP connections are accepted but authentication is blocked" is now per country instead of global. Blocking SMTP connections prevents your server from receiving mail from a country. Allowing SMTP connections with authentication disabled lets your server receive mail from a country while blocking brute force / dictionary attacks from them. Protocols other than SMTP are not affected.
•Removed obsolete "Compose in new browser window" Webmail option from the UI.
•LetsEncrypt - Added support for TLS 1.3.
MDaemon Server Release Notes
For a comprehensive list of these and all other additions, changes and fixes included in MDaemon 23.5.2, see the Release Notes.
New in MDaemon Private Cloud 11.0.0
•MDaemon Private Cloud 11.0.0 includes MDaemon 23.0.2 with MDaemon Connector 7.0.7.
•MDaemon disables the MDaemon Connector client auto-updater in versions before 7.0.6, to work around an auto-updater bug in those versions.
For a list of all MDaemon changes, see the MDaemon 23.0.2 Release Notes.
For a list of all MDaemon Connector changes, see the MDaemon Connector 7.0.7 Release Notes.
New in MDaemon 23.0
Changes and New Features
MDaemon Server
•(23.0.2) Added a MultiPOP option to send a notification email after multiple failures when checking a MultiPOP account. Since temporary failures are not uncommon, there is an option for how many consecutive failures it takes to trigger the notification. There is also an option for how many days to wait between notifications, to avoid sending too many of them. The content and recipients of the notification emails can be customized by editing \MDaemon\App\MPOPFailureNotice.dat. By default the notifications are sent after 5 failures, no more than once every 7 days, to the MultiPOP account owner.
•There is a new MultiPOP page under Server Settings. From this page you can enable/disable MDaemon's MultiPOP server, and use the "MultiPOP always deletes mail..." option (formerly located on the MultiPOP Collection page) to override the Leave a copy of message on POP server option for all users. This new page also contains OAuth 2.0 support options for MultiPOP mail collection from Gmail and Office 365.
MultiPOP OAuth 2.0 support for collecting mail from Gmail and Office 365 — OAuth 2.0 is modern authentication, which these services are now requiring as they disable support for legacy/basic authentication. In order for MDaemon's MultiPOP feature to use OAuth 2.0 to collect mail from Gmail or Office365 on behalf of your users, you must register your MDaemon server with Google or Microsoft, respectively, creating an OAuth 2.0 application using the Google API Console or Microsoft's Azure Active Directory. This is similar to the procedure required for using MDaemon's Dropbox Integration for your Webmail users. See the MultiPOP help topic for more information on configuring OAuth 2.0 support.
•MDaemon's IMAP server now supports keyword flags. This allows email clients such as Mozilla Thunderbird to store Message Tags on the server, which lets you see tags in one instance of a client that were set in another instance of the client.
| • | Improved the IMAP server's performance when opening large mail folders. |
Security
•(23.0.2) Added support for Spamhaus Data Query Service (DQS) to the Spam Filter. For more information on Spamhaus DQS, visit: https://info.spamhaus.com/getting-started-with-dqs
•There is a new Block Logon Policy Violations option on Dynamic Screening, that you can use if you wish to block any IP address that attempts to logon without using the full email address. This option is off by default. See the Systems page for more information on the corresponding option, "Servers require full email address for authentication".
•An Only for valid accounts option was added to expand the Ignore authentication attempts using identical passwords option on the Auth Failure Tracking page. Activate this option if you only wish to ignore the duplicate password authentication attempts when they are attempting to sign in to a valid account. This means that if, for example, a user updates his password in one client but another client is still running with the old password, that old client's sign-in attempts will still be ignored, since it will have the correct sign-in name. A bot trying random sign-in names with a similar password will not have that same benefit, and will be blocked as soon as it surpasses the auth failure threshold. This will help to defeat bots much quicker. The XML API DynamicScreen operation has also been updated to reflect these new features.
•A Content Filter » Attachments option was added to: "Add warning to top of message body if attachment removed". When MDaemon removes an attachment from a message, for example because a virus was detected, it will add a warning message to the top of the message body. There is also a Warning button to use if you wish to review or modify that message's template. This option is enabled by default.
•Added the option to Exclude Trusted IPs from AntiVirus scanning.
•MDaemon sends a warning email to admins when SSL certificates configured for use by MDaemon, Webmail, or Remote Administration are about to expire.
| • | MTA-STS now has an exempt list, so problem domains can be made exempt instead of MTA-STS needing to be turned off when failures affect deliverability. |
•The ClamAV AntiVirus component was updated to version 0.105.2 (in MDaemon 23.0.1).
Webmail
•Google Drive Integration — Webmail can now be linked to your users' Google accounts to allow them to save message attachments directly to their Google Drive, and to edit and work with documents stored there. In order to enable this, an API Key, Client ID, and Client Secret are required. All are obtained directly from Google by creating an App using the Google API Console and registering your MDaemon with their service. An OAuth 2.0 authentication component is part of this app, which allows your Webmail users to sign-in to Webmail and then authorize access to their Google Drive account through MDaemon. Once authorized, users can view their folders and files that are in Google Drive. Further, they can upload, download, move, copy, rename, and delete files, as well as copy/move files to and from the local document folders. If the user wants to edit a document, clicking the option to view the file in Google Drive will allow the user to make edits to it in accordance with their permissions set in Google Drive. The Google Drive setup process is similar to MDaemon's Dropbox Integration and MultiPOP OAuth Integration features. See Google Drive Integration for more information.
•Added an option in all themes except Lite to "Enable Drag and Drop to move folders". The new option is located in Webmail on the Folders page under the Options menu, and it is enabled by default.
•Made the session cookie secure over HTTPS.
•Category changes notification now sent to MDaemon
•WorldClient no longer modifies the robots.txt file on startup.
•The built-in web server prevents the download of .dll files from the HTML directory.
•Added one to the maxlength of the new password input, so that the "Maximum of 15 characters" unmet requirement will show.
•Added reporting for sign-in attempts without a full email address, to support the new Dynamic Screening option to Block Logon Policy Violations.
•(23.0.2) Made the unsnooze option more visible with an orange highlight.
Pro Theme
•Added read receipts support.
•Added an option to disable the HTML editor context menu.
•Added the ability to resize the folder list.
Remote Administration (MDRA)
23.0.2
•Added AntiVirus option to "Exclude trusted IPs from AntiVirus scanning".
•Added the "Do not allow authentication on the SMTP port" option to SMTP Authentication.
•Added a Public Folder Manager option to specify an ActiveSync Display Name.
•Added four more filter options to the Account Manager: Admins Only, Non-Admins Only, Global Admins Only, and Domain Admins Only
•Added a page for the Spamhaus Data Query Service (DQS) to the Spam Filter. For more information on Spamhaus DQS, visit: https://info.spamhaus.com/getting-started-with-dqs
23.0.0
•In the Domain Manager, there is now a Webmail Setting to "Allow users to receive Two Factor Authentication verification codes over email", so that users can receive their verification code via an alternate email address rather than using the Google Authenticator app. This setting is enabled by default.
•Changed the default permissions when adding a new ACL entry to Lookup and Read.
•The Test buttons at: Spam Filter » DNS-BL » Hosts and Setup » Active Directory » Authentication are now disabled while the process is ongoing.
•The built-in web server prevents the execution and download of .dll files in the Templates directory.
•Users can now customize the appearance of the Remote Administration web-interface by clicking their user name (e.g. frank.thomas) in the top right corner of the window. There are options to switch the interface to Dark Mode, set the Font Size, and choose the preferred Language.
•Changed the account delete confirmation to use the custom confirmation feature.
•Added Dynamic Screening reporting for sign-in attempts without a full email address.
ActiveSync
•Added a Client Settings option to Block Sender when moving mail into Junk-Email folder. When enabled, upon a client moving an email to the account's Junk Email folder, the service will add the Sender or From address of that email to the Blocked Senders Contacts folder.
•You can now disable the Full Wipe button for ActiveSync clients if you choose, so that you can't do a remote Full Wipe on an ActiveSync device without first disabling the new Disallow Factory Reset Wipes option.
•Made BodyPreferences data human readable to make troubleshooting sync issues easier.
•Improve shutdown performance when clients are syncing huge mailboxes.
•Added the ability to define a custom display name for mailbox and public folders.
•Improved shutdown performance.
•ActiveSync clients can now send to Personal Distribution Lists in Contact folders.
•Changed layout of Client Settings Dialog in the GUI to add room for new settings.
Other
•(23.0.2) Content Filter - $LIST_ATTACHMENTS_REMOVED$ can be used in rule actions (e.g. "send note", "add warning...")
•In the MDaemon GUI, changed the default permissions when adding a new ACL entry to Lookup and Read.
•in the MDaemon GUI, added a warning pop-up if you attempt to set the Webmail, Remote Administration, or XMPP BOSH Server ports to have conflicting values.
•XMLAPI - Added Editor operation which can be used to edit MDaemon's various INI files
•Changed several plug-ins to allow newer versions to run so customers can test possible hotfix/patch versions.
•LetsEncrypt - Updated script to check orders that are ready or valid.
MDaemon Server Release Notes
For a comprehensive list of additions, changes and fixes included in MDaemon 23.0.2, see the Release Notes.
New in MDaemon Private Cloud 10.0.2
•MDaemon Private Cloud 10.0.2 includes MDaemon 22.0.5 with MDaemon Connector 7.0.7.
Special Considerations
•Outbreak Protection has been restored. Please review your Outbreak Protection settings, as they may have been reset to their default values.
For a list of all MDaemon changes, see the MDaemon 22.0.5 Release Notes.
New in MDaemon Private Cloud 10.0.1
•MDaemon Private Cloud 10.0.1 includes MDaemon 22.0.4 with MDaemon Connector 7.0.7.
Special Considerations
•Cyren Anti-Virus has been replaced with IKARUS Anti-Virus. Cyren recently announced its plans to discontinue operations with little warning. This necessitated the need for us to find a new anti-virus partner. After a thorough evaluation, IKARUS Anti-Virus stood out for its excellent detection rate and speed. It offers reliable protection from malicious and potentially hostile programs, and it combines traditional anti-virus defense methods with the latest proactive technologies. IKARUS Anti-Virus automatically updates its definitions every 10 minutes. Scanning with IKARUS is disabled if your AntiVirus license is expired.
•Cyren Outbreak Protection been removed. Cyren recently announced its plans to discontinue operations with little warning. We are actively researching and considering viable anti-spam technologies as suitable additions to the existing anti-spam mechanisms found in our software products.
For a list of all MDaemon changes, see the MDaemon 22.0.4 Release Notes.
New in MDaemon Private Cloud 10.0.0
•MDaemon Private Cloud 9.5 includes MDaemon 22.0.3 with MDaemon Connector 7.0.7.
For a list of all MDaemon changes, see the MDaemon 22.0.3 Release Notes.
For a list of all MDaemon Connector changes, see the MDaemon Connector 7.0.7 Release Notes.
New in MDaemon 22.0
Changes and New Features
Webmail
Pro Theme
•While viewing a message, you can hover over the sender's name to open a pop-up, which contains options for adding the sender to your Contacts and Allowed or Blocked Senders folders.
•Compose, Message, Event, Contact, Task, and Note views can now open in a new window.
•You can now open the next unread message from the message preview pane and message view.
•Added message snippets to the message list when in multi-line mode.
•You can now make available an Edit Alias Display Names option for Pro theme users, located under Settings » Compose. This allows users to edit the display name of any alias associated with their account. Use the new "Allow users to edit their alias display names" Webmail Settings if you wish to allow this. Note: This option is only available in the MDaemon Remote Administration (MDRA) web-interface.
•Options and links that used to say "whitelist" or "blacklist" sender, now say "allow" or "block" sender. Additionally, the White List and Black List folders are now called "Allowed Senders" and "Blocked Senders".
•The Message List can be sorted by the Flag column.
•In the Tasks list, overdue tasks will now appear in red.
•Upgraded the XMPP client to version 4.4.0.
Other
•When strong passwords are required, there is now a list of password requirements that displays green and checked off as the user meets the requirements. Also added more descriptive error messages for what is wrong with an invalid password on submission.
•Compose Options now contains options for selecting the default "From:" address that will be used when composing, replying to, or forwarding a message.
•A "1 minute" setting was added to the List Refresh Time option, located on the Options » Personalize page.
•Added support for CSRFTokens on the Webmail Sign-in page. This is enabled when the "Use Cross-Site-Request-Forgery tokens" option is enabled on the Webmail Settings » Web Server page. If you are using custom templates for Webmail, add a hidden input to the Login form as follows: <input type="hidden" name="LOGINTOKEN" value=<$LOGINTOKEN$> />
•Public Calendar - Modified the List view to start on the current day and show the next 30 days.
•Added automatic conversion of URLs to hyperlinks in the message view.
•The names of default folders (Drafts, Sent Items, etc.) are translated into the Webmail user's language no matter which language of MDaemon is installed (previously only the English MDaemon did this).
•There is now an option to send Two Factor Authentication verification codes to a secondary email address.
•LookOut and WorldClient themes - Changed all list category display behavior to match.
•The Allowed Senders and Blocked Senders folders now have different icons to indicate that they are special folders.
Remote Administration (MDRA)
•Added a Two Factor Auth Exception IPs page in MDRA, located under the Main menu. This allows users to sign in to Remote Admin or Webmail without requiring 2FA, when connecting from one of the specified IP addresses.
•There is a new "Allow users to edit their alias display names" Webmail Settings option in MDRA. Activate this option if you wish to allow users to edit the display name of any alias associated with their account. They can do this by using the Edit Alias Display Names option, located in Webmail's Pro Theme.
•Changed autocomplete="off" to autocomplete="new-password" on password fields to stop Firefox from auto-completing passwords outside of the login page.
•Added the Notification Message Editor to the Content Filter's Notifications page.
•Added support for CSRFTokens on the Sign-in page. This is enabled when the "Use Cross-Site-Request-Forgery tokens" option is enabled on the Remote Administration Settings page in MDRA.
•Any remote or local Custom Queues you have created can be managed under the Messages and Queues section in MDRA.
Security
•MDaemon now supports TLS 1.3 on newer versions of Windows. Windows Server 2022 and Windows 11 have TLS 1.3 enabled by default. Windows 10 versions 2004 (OS Build 19041) and newer have experimental TLS 1.3 support that can be enabled for inbound connections by setting the following in the registry:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.3\Server
DisabledByDefault (DWORD) = 0
Enabled (DWORD) = 1
•MDaemon logs the cipher suite (e.g., TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) used by SSL/TLS connections.
•Added a Passwords option for strong passwords to require a special character. It is enabled by default for new installs and disabled by default for existing installs.
•AV Mailbox Scanner - When an infected message is found during mailbox scan MDaemon's infected counter will be incremented.
•AntiVirus - Updated ClamAV to version 0.104.3.
ActiveSync
•Improved FolderSync performance.
•The ActiveSync Connection Monitoring Dialog has a new right-click menu command to terminate a session and block a client.
•Added an option to the Client Settings dialog to allow Outlook to send mail using an alias. If Reply-To is set to a valid alias for the sending account, the message will be sent via that alias.
•Added support for EAS 16.1 Find command. Removed the protocol restriction preventing iOS from using EAS 16.1
Other
•Content Filter - Added support for $CONTACT...$ macros in the "Append a corporate signature" action. These macros can be used to personalize the signature with information from the sender's contact in their public contacts folder. See: Signature Macros for a full list of supported macros.
•Content Filter - Added an action to extract attachment and add attachment linking into the message.
•Summary Emails for the holding, quarantine, and bad queue may now have links to release, re-queue, or delete each message. This new "Include action link" option is enabled by default. Note: The Remote Administration URL must be set for the links to be generated.
•LetsEncrypt - Updated the script to work with PS 7.
•Added a Deferred Delivery Message Recall option to replace the 'Date:' header with the current date and time when a message is released from the Deferred Queue. It is disabled by default.
•MDaemon Connector has been updated to version 7.0.7.
•XMLAPI - Added support for forwarding scheduling.
MDaemon Server Release Notes
For a comprehensive list of additions, changes and fixes included in MDaemon 22.0, see the Release Notes.
See:
