423ccb9ba9
[Web] Fix XSS in app password names
2021-05-07 14:49:21 +02:00
af57a5312b
[Web] Update composer libs, fixes PHPMailer security issue
2021-05-04 20:46:05 +02:00
0e307e8ffe
[Web] Add TLS 1.3 to XMPP site, should fix #4064
2021-04-18 20:55:29 +02:00
eb1d5dd134
[Web] Remove debugging points
2021-04-18 12:53:59 +02:00
995f135ff1
[Web] Fix password check typo from 19843cc ( #4056 )
2021-04-15 08:44:45 +02:00
19843cc786
[Web] Fix mailbox editing when password is unchanged, fix adding new administrator ( fixes #4054 , fixes #4053 ); [Web] Update libs, add LDAP for future admin/domain admin authentication
2021-04-13 21:34:47 +02:00
5ea649b292
[Web] Feature: Add password policy
2021-04-09 13:46:17 +02:00
616226be8a
[Web] Fix quota calculation, fixes #4036
2021-04-08 11:17:27 +02:00
c23f9437af
[Web] WIP: Add BSI CA
2021-04-07 21:29:28 +02:00
dd198747b7
[Web] Use api/v1/get/mailbox/reduced for faster loading of mailbox table
2021-03-19 16:33:50 +01:00
b82bf5073b
[Web] Feature: Expand alias over alias domains
2021-03-19 09:28:45 +01:00
a3c6c51b35
[Web] Feature: Expand alias over alias domains
2021-03-19 09:11:55 +01:00
851f575384
Merge branch 'master' of github.com:mailcow/mailcow-dockerized
2021-03-13 12:38:06 +01:00
b3e3ab2e61
[Web] Allow to specify transport test rcpt
2021-03-13 12:37:24 +01:00
4feceb08da
Refactor support for pre-hashed passwords ( #4024 )
2021-03-10 21:06:32 +01:00
0b19c77cdc
[Web] Fix textarea number width > 999
...
[Web] Do not create 2M session file when saving large Rspamd global filter maps (thanks @Drago)
[Web] Do not cache content of Rspamd global filter maps
2021-03-08 12:36:23 +01:00
6b3ea28501
[Web] Minor fixes
2021-03-01 10:21:26 +01:00
64264767d7
[Web] Fix quota-left calculations when editing a mailbox (respect max domain quota)
2021-02-23 08:42:04 +01:00
6840a1665d
[Web] Danish lang. 🇩🇰 ( #3971 )
...
Create Danish lang
2021-02-19 18:23:08 +01:00
22402a274b
[Web] Require Docker functions for xmpp config reload
2021-02-16 21:41:55 +01:00
11a858a7fd
[Web] Add Trustkey CA for WebAuthn
2021-02-16 21:33:46 +01:00
666d344322
[Web] Remove XMPP site when disabling XMPP
2021-02-14 21:33:43 +01:00
d67dc55293
[Nginx] Be more explicit with server names
2021-02-13 18:21:32 +01:00
8c6b512f05
[mailcow] Move ejabberd site to last available site
2021-02-12 19:26:49 +01:00
63160890e0
[Web] Fix XMPP site #2
2021-02-12 12:10:49 +01:00
ee87e4ab77
[Web] Fix XMPP site
2021-02-12 11:50:46 +01:00
5809e5b82e
[mailcow] Fix C22 -> C2S
2021-02-12 11:22:43 +01:00
f2453e316f
[Ejabberd] More fixes for Ejabberd integration (WIP)
2021-02-12 10:04:19 +01:00
04bd21663c
[Web] Minor fixes
2021-02-11 14:41:00 +01:00
386d6109c8
Merge branch 'master' of github.com:mailcow/mailcow-dockerized
2021-02-11 09:36:18 +01:00
06c89bac7d
[Web] Implement XMPP
...
[Web] Various small fixes and enhancements
2021-02-11 09:34:21 +01:00
31805f1656
[Web] Implement all supported dovecot password schemas ( #3974 )
...
When migrating from other Dovecot based installations it can be very
convenient to just copy over existing hashed passwords.
However, mailcow currently only supports a limited number of password
schemes.
This commit implements all password schemes that do not require
challenge/response or OTP mechanisms.
A convenient way to generate the regex with all supported schemas is
`docker-compose exec dovecot-mailcow doveadm pw -l | awk -F' ' '{printf
"/^{("; for(i=1;i<=NF-1;i++){printf "%s%s", sep, $i; sep="|"}; printf
")}/i\n"}'`
Note that this will also include unsupported challenge/response and OTP
schemas.
Furthermore this increases the vsz_limit for the dovecot auth service to
2G for the use of ARGON2I and ARGON2ID schemas.
Signed-off-by: Felix Kaechele <felix@kaechele.ca>
2021-02-11 09:31:53 +01:00
6f14955b69
[Web] Fix U2F file
2021-01-04 16:48:07 +01:00
ee6989bd1d
[Web] Update libs
2021-01-04 11:11:04 +01:00
e676617f00
[Web] Fix duplicate file extension on shortened filenames
2020-12-29 15:20:46 +01:00
75da1c6f20
[Web] Fix attachment download, thanks to Drago
2020-12-09 13:21:29 +01:00
a76d5628bc
[Web] Accept prehashes password on both edit and add mailbox
2020-12-07 08:13:26 +01:00
3b1a87f9a7
[Web] Accept raw SSHA hashes as passwords
2020-12-07 08:07:41 +01:00
02b10b0ed4
[Web] Add SSHA
2020-12-07 07:58:50 +01:00
ed0cd876f4
[Web] Korean translation ( #3885 )
...
* Template
* ACL translation almost done
* Update lang.ko.json
* Update lang.ko.json
* Update lang.ko.json
* Update lang.ko.json
* Update lang.ko.json
* Update lang.ko.json
* Update lang.ko.json
* Update lang.ko.json
* Update lang.ko.json
* Update lang.ko.json
* Update lang.ko.json
* Update lang.ko.json
* Update lang.ko.json
* Update lang.ko.json
* Update lang.ko.json
* Update lang.ko.json
* Update lang.ko.json
* Update lang.ko.json
* Update lang.ko.json
* Update lang.ko.json
* Update vars.inc.php
2020-12-03 22:35:28 +01:00
fa979456a7
Merge branch 'master' of https://github.com/mailcow/mailcow-dockerized
2020-12-03 16:43:15 +01:00
da3fc31500
[Web] Fix Rspamd symbols in quarantine overview
2020-12-03 16:43:09 +01:00
bcffebaabe
support pre-hashed passwords ( #3884 )
2020-12-02 20:32:39 +01:00
dd1b25fa61
[Web] Optional HTML in system mails ( #3879 )
...
* HTML in system mails
* Update functions.inc.php
* Update functions.inc.php
Co-authored-by: André Peters <andre.peters@debinux.de>
2020-11-30 07:43:48 +01:00
ba20db2e08
[Web] Allow a user to choose notification categories (junk folder, rejected mail, both/all) + user ACL
2020-11-28 17:41:48 +01:00
752efa2188
[Web] Fix container ctrl session
2020-11-27 21:20:46 +01:00
8d05d4a51d
[Web] Cleanup Rspamd, other fixes
2020-11-25 16:10:33 +01:00
4a355f242f
[Web] Some fido2 fixes, table view for fido2 keys, fix renaming keys with the same subject
2020-11-17 13:38:28 +01:00
2aee906704
[Web] FIDO2: Add Face ID via Apple
2020-11-16 20:32:34 +01:00
46643af00c
[Web] FIDO2: Add Face ID via Apple
2020-11-16 20:32:13 +01:00
ff071e5120
[Web] Different UV flag for auth and register, remove unique key from fido2, delete tfa/fido2 when removing user object
2020-11-16 15:01:02 +01:00
21a75c1fd1
[Web] FIDO2: Print thrown error in verification failure, if any
2020-11-16 08:55:48 +01:00
9dec340434
Merge branch 'master' of https://github.com/mailcow/mailcow-dockerized
2020-11-15 20:22:46 +01:00
d96bf91a0d
Support of different default pass schemes + support of BLF-CRYPT ( #3832 )
...
* Introduce MAILCOW_PASS_SCHEME in order to support blowfish (cf. mailcow/mailcow-dockerized#1019 )
* Furthermore added dovecot to support new environment varible for MAILCOW_PASS_SCHEME defaulted to SSHA256
* Revert changes regarding gitignore.
* Added fallback to SSHA256 if environment is not proper prepared.
* No fallback within management frontend, as it must match to other components.
* Unified and corrected alignment; implemented support of SSHA512
* Currently, password_hash of PHP is using by default bcrypt (BLF). As this might change later, we must ensure, that BLF is still used after PHP changes its default.
* Switched to BLF-CRYPT by default (even on update)
* Switched to BLF-CRYPT by default (even on update)
* Adding information in config generation / update with link to supported hash algorithm
* Bump sogo version to 1.92
* Fallback to BLF-CRYPT in case password scheme is not proper defined for Mailcow administration.
2020-11-15 20:22:35 +01:00
c150ac7b37
[Web] Feature (beta): Add WebAuthn support for administrators and domain administrators
2020-11-15 19:32:37 +01:00
477e1ff464
[Web] Fix initial static view update
2020-11-13 15:20:30 +01:00
f18b677c8c
[Web] Fix invalid encodings with json_encode, fixes #3847
2020-11-09 14:43:15 +01:00
6d56ef6435
[Web] Fix invalid encodings with json_encode, fixes #3847
2020-11-09 14:42:26 +01:00
b7956d8a7a
[Web] Fix order of fuzzy del and fuzzy add when learning from quarantine, fixes #3844
2020-11-07 21:46:39 +01:00
a73944076c
[Web] Hungarian translation ( #3842 )
2020-11-06 14:47:11 +01:00
b9a8b8a3e7
[Web] More custom_params
2020-11-06 14:26:48 +01:00
46491e4e30
[Web] Add type/action to quarantine table
2020-11-03 11:13:16 +01:00
6c697f3f3f
[Web, Quarantine] Allow to set the max score of a message up to which a quarantine notification will be sent
2020-10-27 21:34:02 +01:00
7bcb9414ab
[Rspamd] Handle Postmaster in and outbound as trusted
2020-10-25 10:34:13 +01:00
0165c9d26b
[Web] Show fuzzy hash of rejected mail, if any
2020-10-24 16:27:31 +02:00
7ca7b3b598
[Web] Drop obsolete sieve filter preset
2020-10-11 10:35:14 +02:00
ce77d87c8d
[Dovecot] New global post-filter: drop duplicates as received within 60 minutes
2020-10-11 10:34:15 +02:00
ffbc5ec961
[Web] Do not expand IPv6 as found by SPF lookup
2020-10-10 10:57:06 +02:00
02677a9788
[Web] Higher timeout for long delays in transport checks
2020-10-08 16:51:04 +02:00
b5ee399fa2
Add simplified Chinese language translations ( #3784 )
2020-10-01 20:50:49 +02:00
27a4cead66
[Web] DB update
2020-09-26 22:12:29 +02:00
29104ddf4c
[Web] Compatibility: Re-add _int vars
2020-09-26 22:04:55 +02:00
d5c22de9b3
[Web] Compatibility: Re-add _int vars
2020-09-26 22:02:34 +02:00
23f118a152
[Web] Allow to overwrite DKIM keys while importing a new key
2020-09-26 22:01:15 +02:00
dc1732cc51
[Web] Replace JSON_EXTRACT by JSON_VALUE in init script
2020-09-20 22:33:09 +02:00
3a9efc86cf
[SOGo, Dovecot] Remove unnecessary likes from sql queries
...
[Web] Filter transport destinations to prevent empty destinations
2020-09-20 22:21:00 +02:00
d9b91fc04f
[Web] Important: Removed unnecessary *_int attributes from GET elements, _only_ returning int values now (same for all attributes which were provided as html char and int)
...
[Web] Feature: Allow to toggle protocols (imap, pop3, smtp) per user (defaults can be configured using vars.local.inc.php, see vars.inc.php)
Signed-off-by: andryyy <andre.peters@debinux.de>
2020-09-17 19:49:15 +02:00
1f36ae28d4
[Postfix, Web] Feature: Show last SMTP login
2020-09-15 11:02:53 +02:00
8a296e90c3
[Web] Return json array when mailq empty, fixes #3738
2020-09-06 11:59:36 +02:00
f3c72832f2
[Web] Add rspamd-stats route to API
2020-09-06 08:54:09 +02:00
bf62f31b9e
[Web] Fail2ban: Only write regex filters if not empty
2020-08-27 21:13:20 +02:00
877b9b7054
[Web] Sync jobs: Use STARTTLS instead of TLS; Feature: Allow to edit fail2ban-like regex filters in UI
2020-08-27 20:43:33 +02:00
9274b7b8e1
[Web] Allow to set force_pw_update, tls_enforce_in, tls_enforce_out, sogo_access and quarantine_notification when adding a domain (via API)
2020-08-22 22:59:13 +02:00
155dfc66ee
[Web] Create ACL to toggle permission of a domain administrator to change a domain desc
2020-08-19 15:31:54 +02:00
f8af5cae88
[Web] Fix da_acl when adding DA without domain
2020-08-19 09:05:04 +02:00
d3d929222f
[Web] Rot announcements
2020-08-16 11:54:06 +02:00
107e619893
Update dns_diagnostics.php
2020-08-13 14:09:13 +02:00
1c8cca8187
[Web] MAILCOW_HOSTNAME should not be a CNAME
2020-08-13 10:45:44 +02:00
4a8edd5b88
[Web] Fix download link for dns zone file
2020-08-07 22:13:03 +02:00
11d003c985
[Web] Change c_o to varchar 500
2020-07-14 16:11:36 +02:00
bae250cc81
DNS: add link for downloading zonefile ( #3633 )
...
* DNS: add link for downloading zonefile
* DNS zonefile: add placeholders for optional entries
2020-07-12 09:39:39 +02:00
e1aadb0268
[Web] More secure compose project name check
2020-07-11 13:32:40 +02:00
6bff958ab4
[Web] Clean PHP code by removing unused variables ( #3646 )
...
* [WEB] $lang is not used in this context
* [Web] $stmt variable is not used
2020-07-11 13:20:38 +02:00
00f5f744d0
[Web] Allow underscore and hyphen in DKIM selector ( #3643 )
...
This change allows to have cleaner DNS zones as mail security related entries usually begin with _.
Co-authored-by: Václav Silber <vaclav.silber@poski.com>
2020-07-09 15:40:44 +02:00
2d049f37da
[Web] Allow mins_interval of max 1 month for sync jobs, fixes #3642
2020-07-08 19:36:05 +02:00
6c92688ff6
[Quarantine] Allow to redirect all quarantine messages to a specific address
...
[Web] Minor changes to quarantine UI
2020-07-04 19:31:44 +02:00
1d8f08ef15
[Web] Add sieve template, thanks to @Programmierus
2020-06-19 22:06:20 +02:00
2aa11ba37d
[Web] Add PHPMailer to quarantine file
2020-06-16 14:17:09 +02:00
92df42999e
[Web] Delete log lines containing ratelimit hash key when removing rate limit hashes from db
2020-06-11 12:10:52 +02:00
48b74d77a0
[Web] Fix PHPMailer, minor style change for quarantine rcpts
2020-06-07 10:45:40 +02:00
andryyy
Loïc Beurlet
Shea Ramage
Frederick Nicklas Ambo Eggert Eggertsen
Felix Kaechele
MangoCubes
Joerg Lehmann
Balázs Dura-Kovács
Lukas Schreiner
Bao H.H
Michael Kuron
Miro Rauhala
Ashus