Home avatar

The mailserver suite with the 'moo' โ€“ ๐Ÿฎ + ๐Ÿ‹ = ๐Ÿ’•

News and Infos

๐Ÿ’ฎ๐Ÿฎ Moorch 2025 Update | the Update Which Changed the Cow

๐Ÿฅ๐Ÿ„ Febmooary 2025 Update | Rspamd and MariaDB Update

Moohoo everyone

It’s time for another update.

This time, we’ve updated Rspamd to 3.11-2, upgraded MariaDB to 10.11, and moved our Docker images from Docker Hub to GitHub.
Nothing too wild.

Important Fix: Dovecot & Netfilter

Previously, Dovecot allowed multiple failed login attempts within a single session without being properly detected by Netfilter. This has now been fixed.

๐ŸŒ™๐Ÿ„ LDAP/OIDC Status Update - We Didnโ€™t Forget. We Were Just... Testing!

Moohoo everyone

In this blog post, I’ll walk you through the current state of the nightly branch of mailcow. The biggest highlight is of course the support for external authentication sources.

To make this new feature as seamless and user-friendly as possible, we had to introduce some adjustments โ€” you’ll see what I mean.

But first, a huge thank you to everyone in the community who tested the nightly branch and provided valuable feedback. ๐Ÿ™Œ At this point, most of the work is done, and we’re only expecting small bug fixes if needed. Some users have already adopted the nightly branch in production and are happy with it โ€” which is fantastic!

๐Ÿ•ถ๏ธ๐Ÿ„ Moogust Update 2024 | Forgot Password?, SOGo 5.11, Rspamd 3.9.1 and More | Revision A

2024-08a (Released on 20th August 2024)

Dovecot updated to 2.3.21.1

Warning

This release includes patches for Dovecot (version 2.3.21.1) that address two security vulnerabilities within Dovecot.

Installation is strongly recommended!

See Dovecot Release Notes: https://github.com/dovecot/core/blob/release-2.3.21/NEWS

Other Changes

  • Fixed issues with parsing the Docker version number in the generate-config.sh and update.sh scripts.
  • Some Dockerfiles were refactored (this has no impact on operations, it only serves for future development).
  • An exit condition was added to Dovecot concerning the download of sa-rules. Previously, the download had to be successful; otherwise, Dovecot would not start. Now, if the download fails after several attempts, Dovecot will still start.
  • In Docker containers that used the mysqladmin tool, the tool has been replaced with the newer mariadb-admin with the same functionality to prevent future compatibility issues.
  • Several Bash variables in the scripts are now handled correctly (quoting), and some strange non-UTF-8 characters have been replaced.
  • Due to the Rspamd update to 3.9.1, UTF-8 decoding in the Pushover and quarantine systems was broken, which could have led to unexpected results when emojis were in the header. This has been fixed.

2024-08 (Released on 15th August 2024)

Moohoo everyone!

August is here, and mailcow brings you a major update for this (hopefully not too hot) month.

This time, we have some significant changes on board that we would like to introduce to you:

๐ŸŒ™๐Ÿ„ Moone Update 2024 | Flatcurve Update Phase 1 - Revision C

2024-06c (Release on 12th July 2024)

  • After some back and forth (sorry about that…), we have decided to keep the affected PHP container on a working version (yes, there was one :D) until we can confirm through deeper tests that it finally works with a patched Alpine… until then, the container will remain “frozen.” The new container caused Roundcube users to experience issues, mainly due to permissions. Since we cannot rule out that this might break more third-party apps, we have reverted the version.
  • We fixed an error in the UI where the version modal was not opening correctly. Although it did open, it redirected you to the release page directly, making the modal unnecessary…

2024-06b (Release on 12th July 2024)

  • Improved regular expression in the backup/restore script, it should now support numbers like 10, 20, etc.
  • The PHP container has been built based on Debian 12. This should (please… the bug is really annoying…) finally fix the issues some of you had regarding blank mailcow UI or incorrect container values within the UI (etc.). We are still working on identifying the problem in the Alpine container so that we can use the Alpine base again in the long term (due to the smaller container size).
  • The WIP warning for ARM64 versions has been removed from the web UI. It is now (actually from the beginning…) stable! Thanks to everyone using it!
  • Postfix’s Postscreen access list has been updated as of July 1, 2024.

2024-06a (Release on 27th June 2024)

  • Rolledback broken Translation links
  • Fixed broken Curl Request at some Hosts inside PHP-FPM Container due to c-ares change

2024-06 (Release on 27th June 2024)

Moohoo everyone!

After our statement, it’s time to bring you an update again.

This time with some additional information:

โš ๏ธ Critical Changes

Postfix TLS 1.1, TLS 1.0 Discontinuation

As part of the 2024-06 update, Postfix was updated to 3.7.10 and Debian 12. At the same time, this update requires communication between SMTP servers to use at least TLS version 1.2. This means we are discontinuing support for the older TLS versions 1.0 and 1.1.

0%