v5.1.6
Changelog
- Added the option to verify sender address syntax during SPF checks. There is also a whitelist for certain domains that regularly violate RFC 5321.
- Moved RBL evaluation from the standard Postfix method to a policy service. This allows logging RBL rejections to the to the database.
- Updated mb-read to read "mailborder_version" strings behind comment (#) lines.
- Updated rejection text in SPF from RFC 3696 to RFC 5321.
- Updated SPF domain whitelists to properly trim whitespace from a list of domains.
- Updated build process to convert generated configuration files to Unix removing the BOM.
- Updated mb-os-check to check for /var/lib/mailborder
- Updated mb-os-check to check for more file, directories, and permissions
- Reorganized mb-rebuild structure and build order to make more effective use of Postfix hash, pcre, and regex.
- Updated all Nginx configurations to remove TLSV1 from new installations and add TLSV1.3 support to new installations.
- /etc/mailborder/conf.d/rbls.conf has been moved to /etc/mailborder/conf.d/rbl.cf with more options. Enter any custom RBLs on the custom_rbl_list line. The old /etc/mailborder/conf.d/rbls.cf is safe to delete.
- Added fail2ban to package requirements and added an SASL monitor to automatically ban remote hosts probing SASL with random logins.
- Corrected an index name on the log_spf_reason database table.
Upgrade Notes
This update may require a special switch as fail2ban was added as an additional package. To upgrade:
apt-get update
apt-get --with-new-pkgs upgrade
Optional Updates
If you wish to manually update your Nginx TLS support to the new model, edit the Mailborder files in /etc/nginx/site-available and change the ssl_protocols parameter to this: ssl_protocols TLSv1.2 TLSv1.3;
Ubuntu 20.04 LTS
This upgrade is supported, but is not required. You may continue to run Ubuntu 18.04 LTS.
This upgrade can easily take an hour on a fast connection. Plan accordingly.
To upgrade from Ubuntu 18.04 to 20.04:
- First, upgrade to the latest version of Mailborder as shown above.
- Take a snapshot or full backup of some kind.
- Edit /etc/apt/sources.list and change the bionic reference to focal for the Mailborder repository. (deb.mailborder.com) Do this after upgrading to the latest version of Mailborder and before running the next step.
- Run as root: do-release-upgrade --allow-third-party
- If you need or want help, contact Mailborder support.
15 March 2022