Changelog February 2019

Build 20190226

What’s new this week

Increased minimum recommended server RAM size from 4GB to 8GB

As result of new and growing real-time datasets used to block spam and viruses, we recommend to upgrade the available memory on any SpamExperts server to at least 8GB.

Filtering (services):

Resolved: if an archive download of messages that are not archived was requested, this would potentially include empty folders in the downloaded zip; this is no longer the case (MMA-849)
Resolved: improved archive mirror handling to increase download speed (MMA-845)

Front-end / GUI:

Resolved: fixed a problem that could prevent an admin from editing outgoing users of their sub-admins (MMA-960)
Resolved: fixed an issue where the archive download would give an error when downloading large numbers of messages (MMA-843)
Resolved: fixed an issue where domain users were unable to edit outgoing users (MMA-958)
Improved: alert messages in the LDAP Sync preview page are aligned more appropriately (MMA-791)
Improved: the default column selection on the delivery queue pages has been changed to match the quarantine pages (MMA-957)

Build 20190219

Filtering (services):

Resolved: Email Scout Report welcome emails and lock notifications would use incorrect links on cluster with multiple API servers (MMA-856)
Resolved: adding a domain no longer adds postmaster and abuse mailboxes by default (84695793ec)

Front-end / GUI:

Resolved: removing a mailbox level Protection Report would add the mailbox to the mailboxes overview list (MMA-895)
Resolved: automatic Email Scout Reports now properly use the time zone setting (MMA-234)
Resolved: transferring domains containing non-ASCII characters between admins would sometimes fail (MMA-841)
Resolved: sometimes the domain level dashboard would show products that were not enabled for the domain (MMA-799)

Build 20190212

Filtering (services):

Resolved: If archive expiry was not set, fallback to global settings (MMA-730)
Resolved: TLS enforcement adjustment to skip hostname validation (MMA-742)
Improved: Include connection status directly when storing logs (MMA-798)
Improved: Reduced logging in case of high load quarantine servers (MMA-821)

Front-end / GUI:

Resolved: Show correct product assignments at super-admin level (MMA-829)
Resolved: Allow sub-admin transfer to same level as parent-admin (MMA-813)
Resolved: Allow to enter “_” underscores on the network tools page (MMA-736)

Build 20190205

What’s new this week:

Improved OAuth2/OpenID Connect (SSO) support for email users

In this update, the ability to use OAuth2/OpenID Connect to provide a single-sign-on service for email users has been significantly improved, and now works with common identity providers such as Office365. The feature is currently only available for admin accounts with a Private Label hostname.

To use this functionality, OAuth2/OpenID Connect must first be configured on the domain. To do this, go to the “Domains overview” page, and use the “Configure” action for the domain that you wish to use OAuth2/OpenID Connect with. Next, go to the “Users & Permissions” section in the menu, and choose “OAuth Settings”. You’ll need to enter the OAuth2/OpenID Connect settings from the identity provider here (our knowledge base has examples for common providers).

Once you’ve configured OAuth2/OpenID Connect for all the domains you wish to have this functionality, go to your brand settings, and enable the “SSO/OAuth login for email users”. You’ll get the option to label the new “log in” button that appears on the main login page on your custom hostname, e.g. “Log in with Office365”.

Filtering (services):

Resolved: fixed an issue that could cause delivery attempts over IPv6 when IPv6 was disabled (#617)
Improved: sender addresses could fail to match a wildcard blacklist entry when the sender address was badly formatted (#528)
Improved: when a TLS connection is required, the certificate passed from the sender to the filtering server no longer needs to be in a specific trust chain (#742)

Front-end / GUI:

Resolved: fixed issue that could occur when setting a TLS certificate for a brand that is used by a very large number of domains (#699)
Resolved: fixed an issue with charts on the bandwidth overview and cloud status pages loading (144710)
Resolved: fixed an issue caused by an update to Office365’s OAuth2/OpenID connect implementation (144767)
Resolved: the underscore character can be used in the network tools pages, to allow lookup of special domains (#736)
Improved: the (preview) API log search page suggest admin/domain names as you type (#710)
Improved: the results of any “username” mapping are displayed in the LDAP sync preview results (#421)
Improved: when a message is not found in the queue, the message displayed to the user now notes that the message may have already been delivered (510acc3126)
Improved: the OAuth2/OpenID Connect functionality for email users has been improved (#474)
Improved: the “BCC sender” checkbox is now located more consistently on the compose and reply email dialogs (#709)