v0.10.4

CHANGELOG.md

@@ -2,6 +2,23 @@
 
 All notable changes to this project will be documented in this file. This project adheres to [Semantic Versioning](http://semver.org/).
 
+## [0.10.4] - 2024-10-08
+
+To upgrade replace the `stalwart-mail` binary and then upgrade to the latest web-admin. 
+
+### Added
+- Detect and ban port scanners as well as other forms of abuse (#820).
+- ACME External Account Binding support (#379).
+
+### Changed
+- The settings `server.fail2ban.*` have been moved to `server.auto-ban.*`.
+- The event `security.brute-force-ban` is now `security.scan-ban`.
+
+### Fixed
+- Do not send SPF failures reports to local domains.
+- Allow `nonce` in OAuth code requests.
+- Warn when there are errors migrating domains rather than aborting migration.
+
 ## [0.10.3] - 2024-10-07
 
 To upgrade replace the `stalwart-mail` binary and then upgrade to the latest web-admin. Enterprise users wishing to use the new LLM-powered spam filter should also upgrade the spam filter rules.

README.md

@@ -69,7 +69,7 @@ Key features:
 - **Secure and robust**:
   - Encryption at rest with **S/MIME** or **OpenPGP**.
   - Automatic TLS certificate provisioning with [ACME](https://datatracker.ietf.org/doc/html/rfc8555) using `TLS-ALPN-01`, `DNS-01` or `HTTP-01` challenges.
-  - Automated blocking of hosts that perform brute-force attacks or scans (aka **fail2ban**).
+  - Automated blocking of IP addresses that attack, abuse or scan the server for exploits.
   - Rate limiting.
   - Security audited (read the [report](https://stalw.art/blog/security-audit)).
   - Memory safe (thanks to Rust).

crates/cli/Cargo.toml

@@ -5,7 +5,7 @@ authors = ["Stalwart Labs Ltd. <[email protected]>"]
 license = "AGPL-3.0-only OR LicenseRef-SEL"
 repository = "https://github.com/stalwartlabs/cli"
 homepage = "https://github.com/stalwartlabs/cli"
-version = "0.10.3"
+version = "0.10.4"
 edition = "2021"
 readme = "README.md"
 resolver = "2"

crates/common/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "common"
-version = "0.10.3"
+version = "0.10.4"
 edition = "2021"
 resolver = "2"
 

crates/common/src/listener/blocked.rs

@@ -79,7 +79,7 @@ impl Security {
 
         // Parse blocked HTTP paths
         let mut http_banned_paths = config
-            .values("server.fail2ban.http-banned-paths")
+            .values("server.auto-ban.scan.paths")
             .filter_map(|(_, v)| {
                 let v = v.trim();
                 if !v.is_empty() {
@@ -117,17 +117,17 @@ impl Security {
             allowed_ip_addresses,
             allowed_ip_networks,
             auth_fail_rate: config
-                .property_or_default::<Option<Rate>>("server.fail2ban.authentication", "100/1d")
+                .property_or_default::<Option<Rate>>("server.auto-ban.auth.rate", "100/1d")
                 .unwrap_or_default(),
             rcpt_fail_rate: config
-                .property_or_default::<Option<Rate>>("server.fail2ban.invalid-rcpt", "35/1d")
+                .property_or_default::<Option<Rate>>("server.auto-ban.abuse.rate", "35/1d")
                 .unwrap_or_default(),
             loiter_fail_rate: config
-                .property_or_default::<Option<Rate>>("server.fail2ban.loitering", "150/1d")
+                .property_or_default::<Option<Rate>>("server.auto-ban.loiter.rate", "150/1d")
                 .unwrap_or_default(),
             http_banned_paths,
             scanner_fail_rate: config
-                .property_or_default::<Option<Rate>>("server.fail2ban.scanner", "30/1d")
+                .property_or_default::<Option<Rate>>("server.auto-ban.scan.rate", "30/1d")
                 .unwrap_or_default(),
         }
     }

crates/directory/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "directory"
-version = "0.10.3"
+version = "0.10.4"
 edition = "2021"
 resolver = "2"
 

crates/imap/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "imap"
-version = "0.10.3"
+version = "0.10.4"
 edition = "2021"
 resolver = "2"
 

crates/jmap-proto/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "jmap_proto"
-version = "0.10.3"
+version = "0.10.4"
 edition = "2021"
 resolver = "2"
 

crates/jmap/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "jmap"
-version = "0.10.3"
+version = "0.10.4"
 edition = "2021"
 resolver = "2"
 

crates/main/Cargo.toml

@@ -7,7 +7,7 @@ homepage = "https://stalw.art"
 keywords = ["imap", "jmap", "smtp", "email", "mail", "server"]
 categories = ["email"]
 license = "AGPL-3.0-only OR LicenseRef-SEL"
-version = "0.10.3"
+version = "0.10.4"
 edition = "2021"
 resolver = "2"
 

crates/managesieve/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "managesieve"
-version = "0.10.3"
+version = "0.10.4"
 edition = "2021"
 resolver = "2"
 

crates/nlp/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "nlp"
-version = "0.10.3"
+version = "0.10.4"
 edition = "2021"
 resolver = "2"
 

crates/pop3/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "pop3"
-version = "0.10.3"
+version = "0.10.4"
 edition = "2021"
 resolver = "2"
 

crates/smtp/Cargo.toml

@@ -7,7 +7,7 @@ homepage = "https://stalw.art/smtp"
 keywords = ["smtp", "email", "mail", "server"]
 categories = ["email"]
 license = "AGPL-3.0-only OR LicenseRef-SEL"
-version = "0.10.3"
+version = "0.10.4"
 edition = "2021"
 resolver = "2"
 

crates/store/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "store"
-version = "0.10.3"
+version = "0.10.4"
 edition = "2021"
 resolver = "2"
 

crates/trc/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "trc"
-version = "0.10.3"
+version = "0.10.4"
 edition = "2021"
 resolver = "2"
 

crates/utils/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "utils"
-version = "0.10.3"
+version = "0.10.4"
 edition = "2021"
 resolver = "2"