Mail-in-a-Box v0.45 Release Notes

Release Date: 2020-05-16 // 9 days ago
  • 🔒 Security fixes:

    • 🛠 Fix missing brute force login protection for Roundcube logins.

    ⚡️ Software updates:

    • ⬆️ Upgraded Roundcube from 1.4.2 to 1.4.4.
    • ⬆️ Upgraded Nextcloud from 17.0.2 to 17.0.6 (with Contacts from 3.1.6 to 3.3.0 and Calendar from 1.7.1 to v2.0.3)
    • ⬆️ Upgraded Z-Push to 2.5.2.


    • ⬆️ Nightly backups now occur on a random minute in the 3am hour (in the system time zone). The minute is chosen during Mail-in-a-Box installation/upgrade and remains the same until the next upgrade.
    • 🛠 Fix for mail log statistics report on leap days.
    • 🛠 Fix Mozilla autoconfig useGlobalPreferredServer setting.

    🌐 Web:

    • ➕ Add a new hidden feature to set nginx alias in www/custom.yaml.


    • 👌 Improved error handling.

Previous changes from v0.44

  • System:

    • ⬆️ TLS settings have been upgraded following Mozilla's recommendations for servers. TLS1.2 and 1.3 are now the only supported protocols for web, IMAP, and SMTP (submission).
    • 🛠 Fixed an issue starting services when Mail-in-a-Box isn't on the root filesystem.
    • 🐎 Changed some performance options affecting Roundcube and Nextcloud.

    ⚡️ Software updates:

    • ⬆️ Upgraded Nextcloud from 15.0.8 to 17.0.2 (with Contacts from 3.1.1 to 3.1.6 and Calendar from 1.6.5 to 1.7.1)
    • ⬆️ Upgraded Z-Push to 2.5.1.
    • ⬆️ Upgraded Roundcube from 1.3.10 to 1.4.2 and changed the default skin (theme) to Elastic.

    Control panel:

    • The Custom DNS list of records is now sorted.
    • The emails that report TLS provisioning results now has a less scary subject line.


    • ⚡️ Fetching of updated whitelist for greylisting was fetching each day instead of every month.
    • OpenDKIM signing has been changed to 'relaxed' mode so that some old mail lists that forward mail can do so.


    • Automatic autoconfig.* subdomains can now be suppressed with custom DNS records.
    • DNS zone transfer now works with IPv6 addresses.


    • 📦 An Ubuntu package source was missing on systems where it defaults off.