Starstruk Logo MarkStarstruk

v0.10.4

stalwartlabs/stalwartv0.10.4Oct 8, 2024by mdecimus

AI Summary

This release focuses on security enhancements and ACME support, including the detection of port scanners and abuse, along with improvements to OAuth and SPF handling.

Key Highlights

  • Detect and ban port scanners and other forms of abuse
  • ACME External Account Binding support
  • Settings reorganization: `server.fail2ban.*` moved to `server.auto-ban.*`
  • Fixed SPF failures reports and OAuth nonce handling

Breaking Changes

  • Renamed settings from `server.fail2ban.*` to `server.auto-ban.*`
  • Renamed event from `security.brute-force-ban` to `security.abuse-ban`

New Features

  • Abuse detection and banning mechanisms
  • ACME External Account Binding support

Full Release Notes

## [0.10.4] - 2024-10-08

To upgrade replace the `stalwart-mail` binary and then upgrade to the latest web-admin. 

### Added
- Detect and ban port scanners as well as other forms of abuse (#820).
- ACME External Account Binding support (#379).

### Changed
- The settings `server.fail2ban.*` have been moved to `server.auto-ban.*`.
- The event `security.brute-force-ban` is now `security.abuse-ban`.

### Fixed
- Do not send SPF failures reports to local domains.
- Allow `nonce` in OAuth code requests.
- Warn when there are errors migrating domains rather than aborting migration.