MDaemon Email Server | Secure On-Premise Email

Overview \| Features \| Pricing \| Purchase \| Download \| Support \| Anti-Virus\| Contact Us \| Blog Articles

MDaemon Server v19.5 Release Notes

MDaemon 19.5.5 - March 23, 2020

FIXES

[23335] fix to Webmail - XSS vulnerabilities
[22769] fix to CalDAV - Potential memory corruption and crash

MDaemon 19.5.4 - Feb 4, 2020

FIXES

[22865] fix to ActiveSync - Possible server crash
[22837] fix to ActiveSync - PIM item changes from one client are not synchronized to other clients
[22930] fix to ActiveSync - Server may shut down after several weeks of uptime
[22907] fix to ActiveSync - Slow performance loading very large SYNCMAP files
[22998] fix to ActiveSync - Calendar sync not working properly with Outlook mobile app
[22769] fix to CalDAV - Potential memory corruption and crash
[23002] fix to CalDAV - Crash when synchronizing IMAP folder with very long path on disk
[22810] fix to Mobile theme - When spell check is enabled, replies and forwarded messages are not sent
[22968] fix to Mobile theme - No login page shows up on iOS 10
[22498] fix to Mobile theme - IE/Edge compose being restricted to width of unexpanded HTML compose toolbar
[22789] fix to Mobile theme - Searching for UTF8 characters fails to show expected results
[22737] fix to MDRA - Unable to select a Default Type on the settings tab when editing a mailing list
[23005] fix to MDRA - Deadlock may occur
[22825] fix to MDRA - Existing domain signatures are not displayed
[23027] fix to MDaemon GUI - Possible crash when clicking Edit on the ActiveSync Client Settings screen

MDaemon 19.5.3 - December 12, 2019

FIXES

[22772] fix to MDaemon service may hang at startup and prevent other services from starting

MDaemon 19.5.2 - December 10, 2019

SPECIAL CONSIDERATIONS

[17138] The "Max RSET commands allowed" options at F2|Server Settings|Servers have been removed since they are essentially less flexible duplicates of the same functionality found at Ctrl+S|Screening|SMTP Screen. The SMTP Screen version is part of the Dynamic Screening system which takes into account more factors (ie..has a white list, considers authentication status, etc). Your old values from the F2|Server Settings|Servers settings have been moved to the SMTP Screen. Please check Ctrl+S|Screening|SMTP Screen to make sure the values there are as you expect. Correct defaults (and recommended) are 20 for the RSET maximum and "Close SMTP session after blocking IP" should be checked/enabled.

CHANGES AND NEW FEATURES

[22334] SMTP server will respond with "Sender Disabled" rather than "Sender Unknown" for disabled mailing lists and the reply code will be 550 if the option to respond to disabled accounts with a 550 code is enabled.
[22513] Inbound Queue count in UI will show message recall delay value if that feature is being used so that you won't sit there wondering why the Inbound Queue isn't processing messages.
[18005] The UI with throw a warning if the advanced settings option is enabled at F2|Unknown Mail and no host value is specified.
[21237] The Learn.bat file (used by the bayesian system) was slightly reworked for simplification and efficiency.
[20211] When editing a mailing list the account picker object will pre-select existing local members and will remove de-selected local members.
[22340] The mailing list editor membership page has been improved by adding a Domain column to sort on and by saving/restoring the column widths. Also the import process had its string-table localized.
[20909] Changed language on MDPGP UI to show that --pgpk command requires mail sent to self.
[20213] Public Folder Manager tree-view data is no longer automatically expanded.
[18236] The Account Editor|Settings button which shows subscribed lists now reports properly on membership to Everyone@ and MasterEveryone@ lists based on whether the account is hidden (private) or not. Also, I changed the wording of the checkbox which hides (makes private) the account so that referring to the HELP is no longer necessary. Finally, remember to click Apply if you change the hidden state of the account or pressing the button to show list membership will not be up-to-date.
[18828] Updated tooltip and warning text to indicate that freezing the Remote queue also freezes the Retry queue.
[20817] The $MAILDIR$ macro has been deprecated and removed.
[20260] The System log will be updated any time someone deletes an account using the console GUI.
[18019] Hijack Detection no longer has a hard-coded exception for the postmaster@ alias. There is a white-list feature for Hijack Detection which can be used to make anyone an exception (if necessary).
[19235] Added a Forwarding column to the Account Manager which shows a Yes or No (whether forwarding or not) along with the account's forwarding address. Since it's possible to have a forwarding address configured but not currently in use the column could show something like "No: arvel@company.test"
[22350] The Account Manager will save the widths of all its columns when you click OK.
[12477] The Sender Blacklist will now (also) be checked following each MAIL command. Since there isn't yet a RCPT domain to test the list against the MAIL value is checked only against the "All Domains" section of the Sender Blacklist.
[22371] The Spam Filter|DNS-BL|Settings option "Ignore DNS-BL result if not in 127.0.0.1 - 127.255.255.255 range" has been removed. Any response outside that range is automatically ignored (no option necessary these days).
[22332] MDRA - Updated context sensitive help links for Categories.
[22505] The "Npcap Loopback Adapter" is ignored when reading DNS servers from Windows.
[22579] Updated MDaemon Connector to version 6.5.1.
[22649] LetsEncrypt will now check the version of Powershell that is on the machine and exit the script when the required version is not present.
[22652] LetsEncrypt will now add the MDaemon\LetsEncrypt\Modules directory to the PSModulePath environment variable for the session if it is not included.
[22675] LetsEncrypt will now delete and recreate the account when changing between the staging and live LetsEncrypt systems.
[22688] LetsEncrypt will now retrieve errors from LetsEncrypt when a challenge fails and write the information to the screen and to the log file.
[22672] The ACME-PS module used for communicating with LetsEncrypt has been updated to the latest version.

FIXES

[22266] fix to Webmail - commas in the name part of an email address are not being properly handled in some instances
[22316] fix to MDRA - Cannot save the default value of the skip rule action or the message processing priority action
[22294] fix to MDRA - unable to remove activesync profiles
[22289] fix to WorldClient theme - Importing/Exporting Contacts or Calendar Events - radio buttons hidden in some languages, e.g. Japanese
[22290] fix to LookOut theme - When forwarding some messages, cke_protected is added to the body
[22263] fix to LookOut theme - HTML encoding visible in contact comments, department, company, etc.
[22269] fix to Lite and WorldClient themes - Missing event recurrence settings
[22189] fix to MDRA - Some settings are missing under ActiveSync Client Settings
[21676] fix to Webmail - MDPGP Results language is confusing and needs to be updated
[20401] fix to sub-addressing not working with wild-card domain aliases
[22288] fix to auto-freeze of inbound queue on configured number of disk i/o errors not working
[22337] fix to MDPGP causing double the message recall delay
[22338] fix to alias editor sometimes allowing entry of alias already in use
[21125] fix to wrong data in SMTP response when over quota sender tries to send mail
[22428] fix to Mobile theme - Themes unavailable on Personalize settings page when HideLoginTheme=Yes; Languages unavailable on Personalize settings page when HideLoginLanguage=Yes
[22437] fix to Webmail - Use HTTP Compression setting not being honored
[22439] fix to Mobile theme - Cannot download attachments in folders other than Inbox
[22440] fix to Mobile theme - Missing translations
[22432] fix to Webmail - The date range in saved searches is saved, but it is not used in the search
[22347] fix to ASMC - After migrating an account twice, folders with ampersands have an extra hyphen added
[22352] fix to ASMC - Events recurring yearly are not migrated correctly
[22298] fix to Dynamic Screening - IP is not blocked after many login attempts with the same password but different accounts
[22460] fix to MDRA - When forced to change your password, you are prompted twice to change it
[22483] fix to Dynamic Screen sometimes being invoked after a single (rather than configured number) of failed RCPTs
[22412] fix to Webmail may not display the entire body of certain messages
[22488] fix to MDaemon.exe crash in AclShlFx.dll during the daily ACL cleanup
[22508] fix to Antivirus - if it takes clamd.exe longer than 5 minutes to scan a file then clamd.exe will get restarted even if it is still able to process other files
[22521] fix to Mobile theme - Events are created one day in the past depending on the time zone specified
[22519] fix to Mobile theme - Umlauts in folder names do not display correctly in Calendars list
[22495] fix to Mobile theme - when changing the theme at Settings | Personalize the new theme is not saved for the logon page
[22563] fix to Mobile theme - message bodies of draft messages composed in plain text are not displayed
[22566] fix to MDRA - Client Signatures are not deleted when the input is empty
[22567] fix to LookOut theme - External message Add Filter button not working
[20992] fix to Webmail displays a backslash in front of quotes in subjects that have non-ASCII characters
[21919] fix to Content Filter exclusion may not work when display name contains Japanese characters
[22576] fix to ActiveSync - Data wipes are triggered for accounts after upgrading to MDaemon 19.5.1
[22572] fix to MD Configuration Session hang
[22527] fix to OR clause in Active Directory Monitoring search filter causes non-matching account imports
[22560] fix to Webmail - When HTML Compose is off, the first dropped attachment in the Compose view does not show up
[22608] fix to Webmail - Wrong messages may be attached when doing Forward as Attachment from Search Results
[22629] fix to WorldClient theme - AM/PM are displayed incorrectly in the message list for some languages
[22630] fix to Dynamic Screening - TrustedIPs.dat created in \MDaemon\Data
[22518] fix to Dynamic Screening - "0x41504000 Mgmt Logon: Internal" logged repeatedly while Configuration Session is running
[22597] fix to ActiveSync - Umlauts displayed incorrectly in autoresponses when autoresponder is created via ActiveSync
[22664] fix to Webmail - PIM attachments fail to upload
[22677] fix to Antivirus - AV update log viewer shows "No sessions" for ClamAV update logs
[22676] fix to Mobile theme - When HTML Compose is disabled, messages are still sent in HTML
[22716] fix to Antivirus - Security|Antivirus|AV Updater shows incorrect ClamAV information
[22692] fix to ActiveSync - Possible crash while syncing a meeting invite with garbage text
[22718] fix to Mobile theme - Styles change in the compose view after an auto-save draft occurs
[22577] fix to ActiveSync - Random AD authentication failures
[22728] fix to MultiPOP - Previously downloaded messages are being randomly redownloaded

MDaemon 19.5.1 - November 4, 2019

[22444] The LetsEncrypt functionality has been updated to use ACME v2. This update is required because LetsEncrypt is discontinuing support for ACME v1. PowerShell 5.1 and .Net Framework 4.7.2 are now required in order to use LetsEncrypt.

FIXES

[22433] fix to ActiveSync - clients that required previous approval need to be re-approved
[22443] fix to ActiveSync - Unable to login when using domain and full email address
[22446] fix to Mobile theme - Sending plain text emails results in an empty message body
[22439] fix to Mobile theme - Cannot download attachments in folders other than Inbox
[22467] fix to Mobile theme - Cannot add inline images to a new message
[22472] fix to Webmail - Images in the default client signature may not be displayed in Webmail
[22474] fix to MDRA - When adding an image to a Default Client Signature, the image file is placed on the root of the C drive
[22486] fix to licensed features may be disabled after renewing an MDaemon registration key that had been switched to trial mode
[22372] fix to memory leak in DAV server if folder contains over 1000 events or contacts

MDaemon 19.5.0 - October 15, 2019

SPECIAL CONSIDERATIONS

[21908] Some settings, such as the registration keys, have been moved from \MDaemon\App\MDaemon.ini to \MDaemon\LocalData\LocalData.ini. If you need to revert to a previous version, they will not find the settings at their new locations, so their installers will ask you to enter a registration key. This can be avoided by copying the settings back to MDaemon.ini, or restoring a backup of MDaemon.ini, first.

MAJOR NEW FEATURES

[21228] New Webmail Mobile theme

Webmail's Mobile theme has been replaced with a more modern GUI with more features. Message list features now include personalized categories, message snooze, sort by flagged/unread/snoozed, sort columns, and message recall. Calendar features now include Import/Export events as csv or ics files, add external calendars, private access links, publish calendar, and view multiple calendars at one time. Compose features now include deferred delivery, multiple signatures, text/html messages, and email templates. Other features include drag and drop email filters, multiple signatures editor, more folder management options, notifications, drag and drop column management, drag and drop categories management, and more. If running Webmail in IIS, additional configuration steps are needed. See KB article 1236 for more information.

[7402] Client signature management

Added the ability to configure a signature that is pushed to supported mail clients (Webmail and MDaemon Connector). A default client signature can be set at Setup | Server Settings | Client Signatures or it can be set per domain on the Domain Manager's "Client Signatures" screen. Use macros such as $CONTACTFULLNAME$, $CONTACTEMAILADDRESS$, to personalize the signature with data pulled from the user's contact in the domain's Public Contacts folder. Use the $ATTACH_INLINE:filename$ macro for inline images in the HTML signature. After entering signature text, it will appear in Webmail as the "System" signature, and will become the user's default signature. It can be enabled/disabled by default at Setup | Web & IM Services | Webmail | Settings or per domain on the Domain Manager's "Webmail" screen. For MDaemon Connector, the signature's name and related settings can be configured at Setup | MDaemon Connector | MC Client Settings | Signature. Requires MDaemon Connector 6.5.0 or newer, and "Push client settings to MC users" to be enabled. The $CLIENTSIGNATURE$ macro can be used in other mail clients to have the server add the client signature to messages.

CHANGES AND NEW FEATURES

[21474] MDPGP: The Content Filter's "encrypt message with user's public key" action now works with the following limitations (it was broken in previous versions): It must be the last action in a multi-action rule. It must be the last rule in a multi-rule set. Basically, all content filter processing on a message stops when the first encryption action takes place (so make this action/rule the last in the processing chain). You want the encryption action to be last anyway so that other actions which might modify the message can take place first. At present, encryption via content filter will prevent user signatures and domain signatures from being appended to the encrypted message. This will take more work to change later. Lastly, the Content Filter's "decrypt message with user's private key" action was not working properly. When using this action make it the first thing done so that other rules which come after will have a decrypted version of the message to work on.
[21646] MDPGP: Decryption routine will now decrypt PGP blocks in-line. Previously, PGPMime message format was required. Messages may contain multiple encrypted blocks and the inline decryption routine will decrypt those it can and skip over those it can't. Remember that MDPGP decrypts messages as it places them into the user's folder so decrypted content exists on MDaemon's mail volume(s). Be sure and use OS tools to secure critical folders from unauthorized access.
[21884] LetsEncrypt now includes an option to delete certificates that were issued by LetsEncrypt, have a subject the same as the FQDN in MDaemon and with an expiration date over 30 days ago. A checkbox to control this was added to Ctrl+S|SSL & TLS|Let's Encrypt. This option is enabled by default.
[21205] Quota reports no longer include disabled or frozen accounts by default. You can change this with a new checkbox at Ctrl+U|Other|Quotas.
[21968] LetsEncrypt: By default PowerShell only supports SSLv3 and TLS1.0. Code was added to enable TLS1.0, 1.1, and 1.2 for the active session. PowerShell also honors the operating system settings for client SSL/TLS protocol support, so if you disable support for TLS 1.0 as a client protocol in the operating sytem, PowerShell will not attempt to use it.
[21993] The QUEUERUN SEM file has been deprecated and removed.
[19812] Added option to enable macro detection in documents and adjust heuristic level for Cyren AV.
[21649] MDRA - Added Let's Encrypt settings.
[16961] MDRA - Added more DKIM Signing settings.
[16945] MDRA - Added the Archive Now option under Logs -> Log Settings -> Maintenance.
[16944] MDRA - Added the "Compact database now" button under Logs -> Log Settings -> Statistics Log.
[16943] MDRA - Added the EDNS settings and an MXCache.dat editor under Setup -> Server Settings -> DNS.
[21362] MDRA - Added ways to request trial keys for AntiVirus, ActiveSync, and MDaemon Connector.
[16864] MDRA - Added "Remove contact which are missing name or phone data" button to the User Editor.
[16942] MDRA - Added "Bind to new port values now" button at Setup -> Server Settings -> Ports.
[16860] MDRA - Added "Edit Attachment Linking settings" to User Editor -> Attachments.
[16503] MDRA - Added warning for admins that are attempting to freeze or disable their own accounts.
[21363] MDRA - Added an alert to inform Trial users how many days are remaining in their trial.
[20963] MDRA - Added feature to prevent admins from deleting their own accounts.
[20785] MDRA - Added the mailing list subscription type below the mailing list address on the Main -> My Mailing Lists page.
[21952] MDRA - Added a categories editor at Main -> Webmail Settings -> Categories to allow admins to manage Domain categories and default User personal categories.
[11500] MDRA - Added buttons to view the file being edited for Security -> Screening -> (Sender Blacklist, Recipient Blacklist, IP Screen, and Host Screen). Added an import file option to the file view.
[20802] MD GUI will throw a warning when disabling SPF or DKIM while DMARC is enabled.
[21462] SMTP server will respond with "disabled" rather than "unknown" if account exists but is disabled or frozen.
[21446] MD GUI will throw warnings and offer fixes on config conflicts between non-reversible encryption and APOP/CRAM-MD5 use.
[21674] DMARC fo=1 option no longer generates protocol specific failure reports when DMARC itself passes.
[21414] F2|Server Settings|Pruning has several new options for deleting items based on age.
[22066] Webmail - Improved autocomplete performance for large address books.
[22071] Updated MDaemon Connector to version 6.5.0.
[11615] MDRA - Changed "Viruses Blocked" report title to "Viruses Detected" since the log entries include blocked, quarantined, and accepted viruses.
[22032] ASMC - Passwords are no longer logged in the ASMC log file.
[22029] ASMC - When SSL is not being used and a 501.1 error is returned a warning will be logged to indicate that you should retry using SSL.
[21421] Ctrl+W|Webmail and Remote Administration|Web Server tabs have new options added to enable use of the X-Forwarded-For header which is sometimes added by proxy servers. This option is disabled by default. Enable it only if your proxy server inserts this header.
[5141] Added a Webmail option for whether users are allowed to create email signatures. Set the default at Setup | Web & IM Services | Webmail | Settings or per domain on the Domain Manager's "Webmail" screen.
[22195] SMTP server will reply with "550 5.7.0 Authentication rejected" when otherwise valid credentials are unacceptable for policy reasons.
[22234] Updated Cyren AV engine to version 6.2.2-rc2.
[22241] Webmail - Stopped using Webmail HTTP.log to log server to server HTTP requests and now logging to Webmail.log.
[22118] Account editor will throw a warning and disallow switching to other tabs until full name/mailbox data entered.

FIXES

[21030] fix to SPF record may not be found if the DNS response is truncated
[21945] fix to MDRA - Using Apply and then Save and Close results in duplicate entry in Minger list
[21861] fix to LookOut and WorldClient themes - Changing Special Folders in Non-English Webmail profiles causes Webmail to change folder values
[21933] fix to LookOut and WorldClient themes - New folders are created with non-English names when saving Options | Folders page
[21946] fix to MDRA - If the setting ExpireTime is missing from WebAdmin.ini, MDRA does not show a default value
[21677] fix to RAW CC header data possibly truncated in final generated message(s)
[21564] fix to MultiPOP UI getting confused when password starts with hypen character
[21976] fix to Minger server does not return "disabled" response for disabled mailing lists
[21621] fix to MD GUI accepting foreign addresses for public folder submission
[21994] fix to MD GUI crash when sharing a folder that contains hundreds of subfolders
[22001] fix to WorldClient theme - When selecting a different calendar in new event, the event is not added to that calendar
[22017] fix to MDRA - Cannot disconnect Webmail sessions
[22019] fix to Webmail - Private access links for Shared and Public calendars produce an xml error
[21882] fix to MDRA - Non-admins can add and edit an alias in their account, but they cannot delete it
[21648] fix to account signature file not deleted when account is deleted
[22028] fix to corrupt email address when the MDaemon system account mailbox alias is less than 7 characters long
[22035] fix to all links to contacts in Outlook are broken when a distribution list is edited in Webmail
[22037] fix to possible Webmail crash when searching messages
[22050] fix to MDRA - Attachment Linking "White List" editor does not save changes
[22060] fix to possible Webmail crash when using message list threading
[21816] fix to Webmail - When HideBlacklistFolder=Yes exists, the BlackList Sender option is still available
[21889] fix to SPF policies are truncated after 1024 characters
[22059] fix to MDRA - admins can remove their own access without a warning
[22063] fix to users not being able to change passwords when using non-reversible encryption and the ODBC account backend
[22072] fix to some MSA-specific processing not being done for SSL SMTP connections when SSLSMTPIsMSA=Yes
[22078] fix to unable to upload/post specifc recurring calendar event via CalDAV
[22081] fix to MDRA - Registration info screen does not show any values in the Country dropdown
[22020] fix to messages with improperly formatted categories causing the iOS mail client to crash
[21553] fix to Outlook using ActiveSync not recognizing changes to Calendar permissions
[15529] fix to unable to upload calendar using Outlook's "Publish to WebDAV Server" feature
[22115] fix to MDRA - Crash when accessing account ActiveSync Clients page
[22119] fix to MDRA - Access denied error when domain admin clicks on ActiveSync Clients or ActiveSync Assigned Policy
[22123] fix to SPF code returning permerror when it shouldn't
[21580] fix to mailing list message not being released from quarantine queue properly
[21901] fix to smart route code sometimes using wrong smart host
[20883] fix to IP address editbox accepting non-IP address data
[21188] fix to signed messages not getting attachments stripped out at times
[22183] fix to Webmail - Remember Me skips the Two Factor Auth validation page when restoring an existing session
[22122] fix to LookOut and WorldClient themes - Slow loading folders could result in unending loading
[22188] fix to MDaemon.exe crash when checking recipient blacklist with an invalid entry
[22193] fix to using CONTACTS:domain in a mailing list causes certain messages to go into the wrong queue
[22126] fix to MDRA - Form field [loglevel] not found error on Global ActiveSync Client Settings page
[22143] fix to MDRA - ActiveSync - When AS is disabled on domain level, a domain admin still sees the AS Client Settings tab on a user
[22194] fix to AutoDiscover does not tell clients to use SSL when the redirect to HTTPS option is enabled
[22202] fix to incorrect IMAP server handling of the % wildcard for LIST and LSUB commands
[21929] fix to a possible hang in Cyren AV processing
[21698] fix to Webmail - When renaming a folder, capitalization is not saved
[22199] fix to several errors converting and handling bad RAW message files
[22221] fix to changed occurrences of a meeting created using ActiveSync may be lost when an attendee sends a meeting response
[22252] fix to Dynamic Screening gateway UI not allowing certain IP addresses to be added
[22222] fix to AutoDiscover not honoring the MDaemon.ini [Special] FullEmailLogin setting
[22254] fix to orphaned multi-line message-id header data possibly being included in list mail
[22250] fix to LookOut and WorldClient themes - Calendar Import from URL broken in IE
[21186] fix to incorrect info about use of "spf" tag in SPFXcpt.dat file help text
[21115] fix to releasing a message that isn't spam getting the spam stripping treatment anyway
[22265] fix to MDRA - ActiveSync - Domains disabled by default still display ActiveSync links in Domain Manager
[22313] XMLAPI: Deleting or modifying PIM items doesn't account for ensuring updates are sent to MC Clients.
[22305] ActiveSync: PIM Validation does not correctly fix identical/duplicate iCalUid values.
[21904] fix to Antivirus - sometimes AV engine does not wait long enough for ClamD to finish loading so it will repeatedly shut down ClamD and restart it
[22372] fix to memory leak in DAV server if folder contains over 1000 events or contacts
[22365] fix to DNSBL "Open Resolver" and "Excessive Queries" response codes are not correctly parsed

MDaemon 19.0.3 - July 16, 2019

FIXES

[21794] fix to AutoDiscover does not return the SMTP port when the dedicated SSL ports are enabled
[21810] fix to ActiveSync server may crash when sending a read receipt
[21856] fix to CALDAV - saving a calendar with a reminder set in eM Client returns an error and the event is not displayed in the calendar
[21862] fix to ActiveSync - Work around WP8/WP10 <MoreAvailable /> client bug
[21859] fix to ActiveSync - Creating ActiveSync profiles using alias counts against ActiveSync license
[21865] fix to XMPPServer - possible crashing problem with BOSH server
[21881] fix to possible crash in mdautodiscover.dll
[21889] fix to SPF policies are truncated after 512 characters
[21904] fix to Antivirus - sometimes AV engine does not wait long enough for ClamD to finish loading so it will repeatedly shut down ClamD and restart it

MDaemon 19.0.2 - June 13, 2019

CHANGES AND NEW FEATURES

[21694] Updated MDaemon Connector to version 6.0.2.

FIXES

[21668] fix to CALDAV - Tentative meeting shows as busy in eM Client
[21679] fix to Webmail - Public Calendar - calendar may not be displayed
[21657] fix to LookOut and WorldClient themes - Cannot save draft when sending message fails
[21680] fix to crash in MDASMgmt.dll
[21683] fix to the ActiveSync Migration Client incorrectly parsing timezone data
[21662] fix to AutoDiscover not fully supporting Encryption options
[21692] fix to CARDDAV - A new contact folder created on the client is created as a calendar folder on the server
[21701] fix to CALDAV/CARDDAV - if rich text formatting is used in item's description field it is not saved by the server and the item's description is lost
[21693] fix to CalDAV - Propfind response missing a trailing slash for task folders
[21716] fix to Webmail - Cannot log in using Lite theme when Send Anonymous Usage Data is disabled
[21775] fix to AntiVirus - A file detected as non-scannable by Cyren AV but clean by ClamAV is not considered non-scannable

MDaemon 19.0.1 - May 14, 2019

[21641] To simplify IIS configuration, the ISAPI DLLs MDMgmtWS.dll and MDDP.dll have been moved out of the \MDaemon\App directory and into \MDaemon\ISAPI\MDMgmtWS and \MDaemon\ISAPI\MDDP. If you had already set up IIS to reference these DLLs you will need to reconfigure IIS to access them from their new locations.

CHANGES AND NEW FEATURES

[21460] Updated ClamAV to version 0.101.2.
[20850] Added support for setting folder ACLs via DAV server using eMClient.
[19150] MDIM - Added "Send" button when "Set IM 'Enter' key to send message" is turned off.
[21660] Updated MDaemon Connector to version 6.0.1.

FIXES

[21030] fix to SPF record may not be found if the DNS response is truncated
[21604] fix to possible MDaemon.exe crash when AV is enabled
[21611] fix to LookOut and WorldClient themes - All Unread and All Flagged searches not translated
[21612] fix to LookOut theme - "Search Results" not being translated
[19933] fix to AV - Attaching a file in winmail.dat with special characters will cause AV scanner to hang
[20824] fix to Content Filter - The regex tester in the GUI does case-sensitive search but the rules processing engine does case-insensitive search
[21617] fix to when synchronizing a contact from the CardBook plugin from Thunderbird, the second work phone number is lost
[21603] fix to MDRA - Japanese - some translations are not encoded correctly
[21598] fix to MDRA - In certain circumstances, accounts show a negative value in the Mailbox Size chart
[21569] fix to LookOut and WorldClient themes - With HTML Compose disabled, clicking Save button does not save a draft of a message
[21620] fix to MDRA - Creating new public folder removes the first character
[21545] fix to MDRA - UI not consistent between GUI and MDRA for adding wildcards to sender blacklist
[21558] fix to MDRA - some text is not translated
[21542] fix to LookOut theme - HTML markup visible in window title
[21465] fix to MDRA - Users are not warned about unsupported browsers
[21455] fix to LookOut theme - Folder share "No Access" string is not being translated
[20594] fix to LookOut and WorldClient themes - After creating a new folder, the corresponding folder type is blank under Default Folders
[19940] fix to MDRA - buttons are too large on a 4k monitor
[21616] fix to AV - fix to the handling of error when scanning RAR files with Cyren AV
[21626] fix to WorldClient.exe crash at startup when using a particular SSL certificate
[21637] fix to AutoDiscover sometimes failing because it cannot access MDDP
[21640] fix to ActiveSync: When renaming a domain, the corresponding accounts in the AirSyncUser.dat are not changed
[21647] fix to iOS IMAP account does not automatically configure itself to use the server's Sent Items and Deleted Items folders
[21650] fix to unexpected error while virus scanning TNEF attachments if the ClamAV engine is disabled
[21638] fix to CalCalDAVErrorDomain; Error: 14 when adding CalDAV account on Mac OS X Calendar application

MDaemon 19.0.0 - April 16, 2019

SPECIAL CONSIDERATIONS

[8811] MDaemon's disk space calculations were being made inconsistently in several places (for example, sometimes using 1000, sometimes using 1024 bytes for a kilobyte computation). This has been fixed to use 1024 consistently. As a result your users' disk space quota values may be slightly different than in previous versions. Please check and make whatever adjustments (if any) you feel are required.

[20595] The "Start MDaemon" Start Menu shortcut on new installs now defaults to opening a browser to MDaemon Remote Administration rather than opening an MDaemon Configuration Session. To change this, edit \MDaemon\App\MDaemon.ini and set [MDLaunch] OpenConfigSession=Yes/No and OpenRemoteAdmin=Yes/No, or use the "Open MDaemon Configuration Session" or "Open MDaemon Remote Administration" shortcuts instead of "Start MDaemon". Set the "Remote Administration URL" at Setup | Web & IM Services | Remote Administration | Web Server if the auto-generated URL does not work or if Remote Administration runs in an external web server. If a working URL cannot be determined, a Configuration Session will be opened instead.

[21263] The option "Only send antivirus update notification on failure" is now enabled by default, and when updating to MDaemon 19, it will be enabled the first time MDaemon starts up.

[19471] SyncML has been deprecated and removed.

MAJOR NEW FEATURES

[21118] TLS Server Name Indication (SNI) support

SNI allows a different certificate to be used for each of your server's hostnames. MDaemon will look at the active certificates and choose the one that has the requested hostname in its Subject Alternative Names field. If the client does not request a hostname, or no matching certificate is found, then the default certificate is used.

[19427] XML-API for Folder and Item Management

The XML-API has been expanded to include the ability to manage mailbox folders and items in the folders. Folders can be created, deleted, renamed, and moved using the API. Item operations support email, calendar, contacts, tasks, and notes. Items can be created, deleted and moved using the API. Full documentation can be found in the MDaemon\Docs\API\XML-API\ directory.

CHANGES AND NEW FEATURES

[21008] MD AntiVirus - Added ClamAV to Content Filter's virus scanning instead of it being a separate plugin. When a message or attachment is being scanned it is first scanned by Cyren AV engine and then scanned by ClamAV engine. Either can be enabled/disabled at Security | AntiVirus | Virus Scanning.
[21303] ActiveSync Migration Client - Changed the Default User Path used by ASMC when migrating data. If ASMC is running on an MDaemon installation, and if the output path is not specified, it will build the output path based on the "New Accounts" template.
[20848] Autodiscover Service - Support has been added for eM Client, Thunderbird, Outlook, and other clients utilizing the same specification.
[21222] Webmail - Added a delete icon for removing common contacts from the autocomplete list.
[20948] MDRA - Added license management options to the Registration page.
[17057] MDRA - Added AntiVirus Updater and Scheduler dialogs.
[21214] Webmail - Added a reference to the XMPP BOSH KBA 1210 in the Webmail IM client error message.
[14277] MDRA - Changed the popout windows save options to Apply, Save and Close, and Cancel.
[11443] MDRA - Added queue counts, process message counts, other process counts, session statistics, and more process states to the Status page. Added tabs for window sizes over 480px to view information without scrolling.
[21301] Webmail - Compose, Signatures, and Email Templates - Removed the Paste, Paste Plain Text, and Paste From Word buttons from the HTML editor (since they do not work), and removed the HTML editor context menu, so that users can right click copy/cut/paste.
[21307] MDRA - Domain Signatures, Signatures, and CFilter append signature - Removed the Paste, Paste Plain Text, and Paste From Word buttons from the HTML editor (since they do not work), and removed the HTML editor context menu, so that users can right click copy/cut/paste.
[21314] MDRA - Improved data collection system for more accurate analytics.
[21311] Webmail - Improved data collection system for more accurate analytics.
[21302] Webmail - Added an option for users to allow Webmail to automatically create an "All Unread" and/or an "All Flagged" saved search. Users are prompted on login only one time, and only if they have Saved Search Folders enabled. If a user chooses "No", the option is still available under Options | Folders. Admins may suppress these prompts by adding DefaultSavedSearchesCheck=Yes to the MDaemon\WorldClient\Domains.ini file under [Default:UserDefaults].
[21343] Updated MDaemon Connector to version 6.0.0.
[20819] The options to send authentication failure reports and frozen account reports to end users have been made available in the on-premise version of MDaemon.
[21354] Webmail - WorldClient theme - attachment list action icons (download, import, delete, etc.) have been darkened and the size increased to make them easier to see.
[21359] Updated Outbreak Protection engine to version 8.2.0.1.
[20917] Added an option to revoke user access to ActiveSync when ActiveSync is disabled for the domain.
[21328] Webmail - Added "(EXPIRED)" to the browser tab title when the session expires, so that if a user is not in the Webmail tab the user will still know that the session expired.
[21357] Spam Filter - Updated spam filter engine with SpamAssassin 3.4.2.
[21376] MDRA - Further improved data collection system for more accurate analytics.
[20962] Added a new "External message warning" rule in the Content Filter that adds a warning to the top of messages from external senders. The rule is disabled by default. Customize and enable it if you wish. It uses a new condition that compares the domains in the Return-Path, Sender, and From headers to the recipient's domain, and a new action that adds warning text to the top of a message.
[19791] Added options to Security | Spam Filter | Spam Honeypots and Security | Security Settings | Screening | SMTP Screen to enable/disable the Dynamic Screening notification when an IP is blocked.
[21286] The STARTTLS White List now takes precendence over the STARTTLS Required List and the "SMTP server requires STARTTLS on MSA port" option.
[13663] LOGIN is preferred over CRAM-MD5 when authenticating to a remote SMTP server over a TLS connection.

FIXES

[21018] fix to MDRA - Domain Settings - New Clients Must Be Authorized and Log Level options are visible
[21204] fix to Webmail - Voice Recorder broken in the latest FF and latest Chrome
[21213] fix to Webmail - Compose - pasting an image into the HTML editor fails in Chrome 49
[21137] fix to Location Screening Statistics missing from the MD Statistics Report
[21342] fix to MDRA - Cannot change Webmail Settings option for "Send read confirmations"
[21365] fix to Webmail - LookOut and WorldClient themes - Users cannot right click on the download link in the attachment list
[21346] fix to CalDAV - Unable to delete an occurrence of a recurring event using the DAVDroid client
[21341] fix to MDRA - When setting a mailing list to be moderated, a warning pops up
[21451] fix to MDRA - Changing the Remote Admin Log File Directory results in WebAdmin-HTTP and WebAdmin-WDaemon log files being inaccessible via Remote Admin
[21467] fix to incorrect default AV paths to warning files
[21283] fix to Restricted Attachments - When an ALLOW entry exists, quarantined files overwrite existing files
[21136] fix to mailing list non-delivery reports not being delivered to bounce address
[21494] fix to Webmail - the Subject of a particular message is truncated

MDaemon is a registered trademark of MDaemon Technologies, Ltd.