v2.2

Billionmail/BillionMailv2.2Jun 16, 2025by dreambladeflag

AI Summary

Focuses heavily on security enhancements including fail2ban and DKIM fixes, alongside automated certificate management. The release optimizes mail routing algorithms and improves system stability for concurrent operations. Key highlights include security fixes and anti-spam verification.

Key Highlights

Fixed fail2ban rule misconfiguration
Resolved DKIM duplicated sign-headers bug
Auto-apply SSL certificates upon sender domain creation
Optimized SPF/DKIM/DMARC verification logic
Refactored Message-ID generation algorithm

New Features

Security Fixes
Mail Protocol Optimization
System Stability
Operational Tools

Full Release Notes

## BillionMail v2.2 Release Notes

### 🔒 Security Fixes
#### Protection System
- Fixed fail2ban rule misconfiguration issues
- Resolved DKIM duplicated sign-headers bug
- Patched security risk of source IP exposure in email headers
#### Data Encryption
- Fixed password encryption failure after mailbox information updates
- Enabled 2048-bit DKIM signing by default (anti-spoofing enhancement) 

### 📨 Mail Protocol Optimization
#### Certificate Automation
- Auto-apply SSL certificates upon sender domain creation
- Added certificate auto-renewal mechanism 

#### Anti-Spam Detection
- Optimized SPF/DKIM/DMARC records verification logic
#### Relay Service Adjustment
- Removed `smtp_header_checks` for SMTP relays

### ⚙️ System Stability
#### Core Services
- Fixed critical concurrent map-write crash vulnerability
- Improved timezone configuration workflow (Note: CLI-only for now)
#### Mail Routing
- Refactored Message-ID generation algorithm (collision prevention)
- Server IP now returned in common configuration interfaces

### 🛠️ Operational Tools
#### bm.sh Script Enhancements
- Added `clear` command (legacy image cleanup)
#### Localization
- Replaced **YouTube** with **Bilibili** links in README-zh_CN.md