Release Notes for Synology MailPlus Server

Important Note

1. The update is expected to be available in all regions within the next few days. The actual time of release may vary slightly depending on the region.
2. Updated to be compatible with DSM 6.2.

Fixed Issues

1. Prevents cross-site scripting (XSS) attacks during image preview.
2. Fixed a security vulnerability (CVE-2022-48554).
3. Minor bug fixes.

Fixed Issues

1. Fixed security vulnerabilities (CVE-2023-20032 and CVE-2023-20052).

Important Note

1. The update is expected to be available in all regions within the next few days. The actual time of release may vary slightly depending on the region.

Fixed Issues

1. Fixed an issue where emails might be mistaken for spam after an update of the antispam rules.
2. Fixed an issue where SMTP authentication could not be performed after initialization.
3. Fixed an issue where mail search results would be incorrect if the search rule was set to "Any" and keywords contained blank spaces.
4. Updated the ClamAV engine to version 0.103.6 to fix the following security vulnerabilities: CVE-2022-20770, CVE-2022-20785, and CVE-2022-20792.
5. Minor bug fixes.

Important Note

1. The update is expected to be available in all regions within the next few days. The actual time of release may vary slightly depending on the region.

Fixed Issues

1. Fixed an issue where Korean emails in certain encodings could not be found through search.
2. Fixed an issue where the antispam engine might not be enabled after an automatic update.
3. Fixed an issue where the status might not be displayed properly when the antispam engine was enabled or updated.
4. Fixed an issue where the antispam engine version might be wrongly displayed as "Outdated".
5. Fixed an issue where the information on the auto BCC list (at "Domain" > "Edit" > "Auto BCC") was incorrect.
6. Fixed an issue where users could not configure the antivirus engine right after enabling the antispam engine.
7. Fixed an issue where notification emails would be identified as bounced emails after users enabled the notification delivery.
8. Fixed an issue where the antivirus engine would show an incorrect status when McAfee was enabled.
9. Fixed an issue where the Threat Monitor would treat email addresses as case-sensitive when determining the threat sources.
10. Fixed an issue where emails that failed the DMARC check would not be marked as spam, even if the DMARC policy was set to "quarantine".
11. Fixed an issue where DKIM keys would not be synchronized in the MailPlus HA environment.
12. Shortened the time required to recover mail synchronization in the MailPlus HA environment when the network connection is abnormal or unstable.
13. Improved the situation where users could not receive emails when the account system was unstable.
14. Improved the automatic repair mechanism to minimize the damage to the internal files caused by an abnormal situation, such as an unexpected shutdown.
15. Minor bug fixes.

Important Note

1. The update is expected to be available in all regions within the next few days. The actual time of release may vary slightly depending on the region.

Compatibility and Installation

1. Supports using DDNS for MailPlus Server setup.

Fixed Issues

1. Fixed an issue where memory usage would increase when a malicious client was auto-blocked.
2. Fixed an issue where domain users might be temporarily deactivated when the user account system was abnormal.
3. Fixed an issue where mailbox usage would not be displayed properly when exceeding 1 TB.
4. Fixed an issue where the time field would show the date instead of the time when the logs were exported into HTML files.

Important Note

1. The update is expected to be available in all regions within the next few days. The actual time of release may vary slightly depending on the region.
2. For easier management, the package logs that were previously stored in the package installation directory are now moved to the same directory as the mail logs. For details, refer to the Administrator's Guide for Synology MailPlus Server.

Fixed Issues

1. Fixed an issue where licenses were not synchronized in the MailPlus High Availability environment.
2. Fixed an issue where emails might not be saved into the "Sent" folder when sent via a third-party mail client.
3. Fixed an issue where the attachment filter didn't work when the package was freshly installed and the account system was set to local.

Important Note

1. The update is expected to be available in all regions within the next few days. The actual time of release may vary slightly depending on the region.
2. To ensure proper sending and receiving of emails from a domain, it is no longer supported to set up MailPlus Server using Synology DDNS, because Synology DDNS does not support MX records.

What's New

1. Supports configuring mailbox quota and the corresponding notification settings.
2. Provides mailbox details and supports batch deletion of deactivated users' mailboxes to free up storage space.
3. Supports migrating emails from Google Workspace (Gmail) per label.
4. Supports installing MailPlus Server and MailPlus on Virtual DSM.
5. Supports purchasing licenses with Synology Account on MailPlus Server.
6. Supports sending daily reports to multiple recipients.
7. Supports disclaimers for each account system.
8. Supports the login with UPN (User Principal Name).
9. Supports logging content scan's failure reasons.
10. Updated the ClamAV engine version to 0.103.1.
11. Supports displaying the original recipient of a rejected email in Auditing.
12. Supports auto-forwarding to multiple recipients.

Fixed Issues

1. Fixed security vulnerabilities (CVE-2020-11100, CVE-2020-15953 and CVE-2021-32765 ).
2. Fixed security vulnerabilities regarding Dovecot (CVE-2016-4983, CVE-2020-10957, CVE-2020-10958, CVE-2020-10967, CVE-2020-12100, CVE-2020-12673, CVE-2020-12674, CVE-2019-19722 and CVE-2020-25275).
3. Fixed security vulnerabilities regarding Redis (CVE-2021-21309, CVE-2021-29477, CVE-2021-32625, CVE-2021-32626, CVE-2021-32627, CVE-2021-32628, CVE-2021-32672, CVE-2021-32675, CVE-2021-32687, CVE-2021-32762, and CVE-2021-41099).
4. Fixed security vulnerabilities regarding ClamAV (CVE-2020-3350 and CVE-2020-3481).
5. Fixed security vulnerabilities regarding OpenDMARC (CVE-2020-12460 and CVE-2021-34555).
6. Fixed an issue where the greylist might not be synchronized under a MailPlus high-availability cluster.
7. Fixed an issue where the start or end date for auto-reply might be incorrect when the date format was set to DD/MM/YYYY.
8. Fixed an issue where a shared mailbox might not function properly when a member was renamed.
9. Fixed an issue where a daily report would be considered spam when its domain name ended with ".com".
10. Fixed an issue where authentication would fail when users signed in to MailPlus via a macOS mail client.
11. Fixed an issue where mail migration would fail when the account had a mailbox shared by another user.
12. Fixed an issue where IMAP authentication might fail when the domain data was being updated.
13. Fixed an issue where Rspamd might not work properly when the security settings were adjusted.
14. Fixed an issue where the activation information and the alias settings were not updated accordingly when the account was renamed.
15. Fixed an issue where the domain settings and the blacklist and whitelist would not be restored when MailPlus was restored to another NAS via Hyper Backup.
16. Fixed an issue where exporting logs could cause high memory usage.
17. Fixed an issue where passwords were shown in the Postfix logs when emails were sent via PowerShell Send-MailMessage.
18. Fixed an issue where an attachment would not be blocked by the attachment filter when it contained an umlaut in the file name and was sent from Thunderbird.
19. Fixed an issue where the recipient of auto-forward or auto-reply might be incorrect if the account name contained mixed case letters.
20. Fixed an issue where an SMTP sender's email address might not be updated accordingly when the address was changed.
21. Minor bug fixes.

Important Note

1. The update is expected to be available in all regions within the next few days. The actual time of release may vary slightly depending on the region.

What's New

1. Administrators can now choose whether to delete the related data when uninstalling the package.

Fixed Issues

1. Fixed an issue where the antivirus engine was not enabled after the package update.
2. Minor bug fixes.

Important Note

1. The update is expected to be available in all regions within the next few days. The actual time of release may vary slightly depending on the region.

What's New

1. Added support for administrators to disable mailbox sharing.

Fixed Issues

1. Fixed an issue where MailPlus might not be able to send and receive emails when the user account system was abnormal.
2. Fixed an issue where updating MailPlus Server might take a long time when the user account system was abnormal.
3. Fixed an issue where emails could not be sent when the DKIM key length is 512 bits.
4. Fixed an issue where writing Rspamd data to the root partition resulted in insufficient root partition space.
5. Fixed an issue where logs might not be sent when other packages sent logs to the same syslog server.

Important Note

1. The update is expected to be available in all regions within the next few days. The actual time of release may vary slightly depending on the region.

What's New

1. Added support for administrators to disable mailbox sharing.

Fixed Issues

1. Fixed an issue where MailPlus might not be able to send and receive emails when the user account system was abnormal.
2. Fixed an issue where updating MailPlus Server might take a long time when the user account system was abnormal.
3. Fixed an issue where emails could not be sent when the DKIM key length is 512 bits.
4. Fixed an issue where writing Rspamd data to the root partition resulted in insufficient root partition space.
5. Fixed an issue where logs might not be sent when other packages sent logs to the same syslog server.

Important Note

1. The update is expected to be available in all regions within the next few days. The actual time of release may vary slightly depending on the region.
2. To ensure license consistency, starting from this release, Hyper Backup no longer backs up and restores Synology MailPlus licenses. If needed, you can migrate licenses to another Synology NAS by manually entering the license keys.
3. To enhance product experience, Synology MailPlus enables SPF by default during the first-time installation.

What's New

1. Synology MailPlus Server can be installed on a Synology High Availability cluster.
2. Provides more detailed admin logs in the Auditing page.
3. Moved Admin Settings from Synology MailPlus client to Service > MailPlus Client in Synology MailPlus Server.
4. Updated the ClamAV engine version to 102.3.
5. Supports configuring relay exception to set up rules for specific email addresses or domains.

Fixed issues

1. Fixed a security vulnerability regarding OpenDMARC.
2. Fixed an issue where a DKIM signature became invalid because the disclaimer was too long.
3. Fixed an issue where emails might be blocked when a valid DKIM signature failed to validate.
4. Fixed an issue where subject lines of the original emails were garbled in the MCP notifications.
5. Fixed the issue where a whitelist could not skip scanning when its domain was encoded in non-ASCII.
6. Fixed the issue where email images might not display properly in the Mail Search tab.
7. Minor bug fixes.

Important Note

1. The update is expected to be available in all regions within the next few days. The actual time of release may vary slightly depending on the region.

Fixed issues

1. Fixed the issue where auto-reply and auto-forward might fail when the account name changes.
2. Fixed the issue where connections to rspamd.com might fail.
3. Fixed the issue where Synology MailPlus Server could not be uninstalled when the volume is abnormal or non-existent.
4. Fixed the issue where Microsoft Outlook logins might fail when the domain of the email address has additional domains.
5. Removed unmaintained SpamCannibal from DNSBL.
6. Fixed the issue where IP settings might be deleted when the network interface of Synology MailPlus Server is modified.
7. Fixed the issue where emails might be blocked owing to abnormal attachment filter behavior.
8. Minor bug fixes.

Fixed Issues

1. Fixed a security vulnerability regarding Dovecot. (CVE-2019-11500)

1. Fixed an issue where the IP address of MailPlus Server might not be able to change correctly after the system is upgraded to DSM 6.2.2.
2. Fixed an issue where the DKIM signing might not be enabled successfully after a system restart.
3. Minor bug fixes.

1. Supports universal mail search over all email accounts for finding, viewing, exporting, or deleting emails according to GDPR requests.
2. Supports recording the operations of mail searches and protocol settings in the administration logs of Auditing.
3. Supports migrating emails from Google G Suite with a single service key to save the effort of collecting the passwords of all users.
4. Supports signing in to MailPlus Server with email addresses on Microsoft Outlook desktop clients.
5. Enhanced the stability of McAfee antivirus engine.
6. Enhanced the performance of email migration.
7. Added Email as a default email address format option for domain user accounts.
8. Added the checking mechanism that “.” must be included when adding/editing domains to ensure that mails can be correctly sent and received.
9. Added the mechanism of automatically setting the priority of imported anti-spam rules as high.
10. Supports searching multiple keywords in Usage Analysis.
11. Added support for modifying the minimum key length for DKIM verification to allow emails with shorter signing keys to pass the verification.
12. Increased the maximum number of aliases in a domain to 10,000 rules.
13. Fixed an issue where mails that fail to pass the DMARC verification would be jammed in the mail queue.
14. Minor bug fixes.

1. Improved the stability when MailPlus Server is using McAfee antivirus engine.
2. Enhanced the accuracy of spam detection.
3. Fixed an issue where adding users in AD domain to mail domains might fail.
4. Minor bug fixes.

1. Fixed a security vulnerability (Synology-SA-18:43).
2. Fixed an issue where restoring MailPlus Server might fail via Hyper Backup.
3. Fixed an issue where sending emails with large files might fail.
4. Minor bug fixes.

1. Supports Thai user interface.
2. Fixed multiple security vulnerabilities regarding Redis (CVE-2018-11218 and CVE-2018-11219).
3. Fixed an issue where license verification on the secondary server might fail in a high-availability cluster.
4. Fixed an issue where all email disclaimers might disappear when removing certain users.
5. Fixed an issue where all group members in a mail domain might be automatically removed when removing a user from the group in Control Panel.
6. Minor bug fixes.

1. Fixed an issue where creating disclaimers might fail when the number of existing disclaimers is too high.
2. Fixed an issue where users might be removed from a domain after updating the user list of the domain.
3. Fixed an issue where adding new users automatically to the domain might fail after editing the domain.
4. Fixed an issue where log rotation might fail in certain conditions.
5. Minor bug fixes.

1. Fixed multiple security vulnerabilities regarding ClamAV. (CVE-2017-6419, CVE-2017-11423, CVE-2018-1000085, CVE-2018-0202)
2. Minor bug fixes.

1. Fixed an issue where sending or receiving mails might fail after upgrading to MailPlus Server 2.0.0.
2. Fixed an issue where many normal mails might be marked as spams after upgrading to MailPlus Server 2.0.0.
3. Supports hosting multiple domains on the same MailPlus Server.
4. Supports delegating management privileges by function to other users.
5. Supports comprehensive mail delivery and relay policies for flexible server deployment.
6. Added Catch-all function to receive mails that are sent to email addresses that do not exist or are not enabled in the domains.
7. Switched to anti-spam engine Rspamd for a faster mail scanning speed. 
8. Fixed a security vulnerability regarding ClamAV. (CVE-2017-12376)
9. Fixed a security vulnerability regarding Memcached. (Synology-SA-18:07)
10. Fixed multiple security vulnerabilities regarding Dovecot. (CVE-2017-14461, CVE-2017-15132)
11. Fixed an issue where the forwarding function of filter might not work on MailPlus web client when Content Scan and DKIM verification are enabled.  
12. Fixed an issue where usernames with illegal characters can be selected in User Policy.
13. Minor bug fixes. 

1. Fixed multiple security vulnerabilities regarding ClamAV (CVE-2017-12374, CVE-2017-12375, CVE-2017-12377, CVE-2017-12378, CVE-2017-12379, CVE-2017-12380).

1. Fixed an issue where MailPlus Server upgrade might fail on DSM 6.2 Beta 1.
2. Fixed an issue where sender information of auto-reply mails might be incorrect when the account system belongs to a Windows domain. 

1. Supports internationalized domain name and email address to customize domain names in local languages (e.g. Chinese and Russian).
2. Improved the stability of shared mailboxes under high-availability cluster.
3. Enhanced system stability.
4. Fixed a security vulnerability (Synology-SA-17:75 MailPlus Server).
5. Minor bug fixes.

1. Added an option for setting the maximum IMAP connections per user from the same IP address.
2. Improved compatibility with CSV files to import user lists during mail migration.
3. Enhanced the stability of license system.
4. Fixed an issue where setting rules for black and white lists might fail if the domain name is too long.

1. Fixed an issue where mails in shared mailboxes might unexpectedly duplicate if the mail system is in high-availability cluster.
2. Fixed an issue where the permission settings of shared mailboxes might not be synced between servers in high-availability cluster.

1. Added a rule where asterisks (*) entered in the domain name field in Greylist Settings will be blocked in order to receive emails successfully.
2. Fixed an issue where the hyperlink of the instructions might be broken in Configuration Import Wizard.
3. Minor bug fixes.

What’s New

1. Added User Policy to set up user-specific and group-specific rules on mail delivery and mail protocols.
2. Supports using McAfee antivirus engine (purchasable in Package Center).
3. Added global black and white lists to allow through or reject messages according to customized criteria.
4. Added spam reporting and automatic learning mechanism. 
5. Added advanced SMTP security options.
6. Supports appending disclaimers to emails by group and by user.
7. Supports importing Microsoft Exchange server configurations to MailPlus Server.
8. Added information of email titles in mail logs and security logs.
9. Supports switching server network interface.
10. Updated default DNSBL list to reduce false alarms.
11. Supports Chinese characters as valid MCP rule names.

Improvements

1. Improved spam detection rate.
2. Enhanced system stability.

Fixed Issues

1. Fixed an issue where email migration via non-SSL protected connection might fail.
2. Fixed an issue where auto-replies might be sent out in incorrect time range.
3. Fixed an issue where account information might not be synced between MailPlus Server and DSM.
4. Fixed an issue where daily reports might not be delivered when the SMTP port was changed.
5. Fixed an issue where some search results of auto BCC rules might be missing.
6. Minor bug fixes.

1. Fixed a security vulnerability of ClamAV (CVE-2012-6706).

1. Supports integration with Synology Active Directory Server as an account source.
2. Fixed an issue where memory leak might happen.
3. Minor bug fixes.

1. Fixed an issue where licenses might be lost under certain circumstances. If you have encountered this issue, please troubleshoot by re-activating MailPlus license keys after upgrading MailPlus Server to the latest version.
2. Fixed an issue where accessing MailPlus Server via SMTP/IMAP might fail when the number of licenses was insufficient.
3. Minor bug fixes.

What’s New

1. Threat Monitor provides threat statistics of inbound and outbound mail, along with clear graphs for quick overview.
2. Added post-auditing and action policies for virus-infected mails.
3. Supports migrating emails from external mail servers:
   1. Microsoft Exchange
   2. Gmail
   3. Outlook.com
   4. Yahoo mail
   5. General IMAP servers
4. Enhanced spam detection on Chinese spam mail.

Fixed Issues

1. Fixed various security vulnerabilities of ClamAV (CVE-2015-2170, CVE-2015-2221, CVE-2015-2222, CVE-2015-2668, CVE-2016-1371, CVE-2016-1372, CVE-2016-1405).

What’s New

1. After both MailPlus and MailPlus Server are updated, all the annual licenses will automatically turn into perpetual licenses with non-expired validity, and will be regulated under the new licensing plan. For more information, please visit here.
2. Supports per-user management of daily delivery quota.
3. Supports DHCP and PPPoE network interface settings.
4. Upgraded the ClamAV anti-virus engine to 0.98.7 (CVE-2015-2170, CVE-2015-2221, CVE-2015-2222, CVE-2015-2668).

1. Fixed an issue where MCP rules might be invalid if their names began with numeric characters.
2. Fixed an issue where filters in previous configurations might not be successfully restored with the Hyper Backup package.
3. Fixed an issue where deactivated email accounts would be incorrectly activated when the option “Activate all users by default” was enabled.
4. Fixed an issue where the license number might appear incorrect after repeated logins to the Synology Account.

1. Added supported models: DS216+, DS216+II, DS713+, DS412+.
2. One high-availability cluster has 10 free default email accounts after update.
3. Removed unmaintained Burnt-Tech Blacklist from the DNSBL checklist.
4. Fixed an issue where suspended functions might not be restored even after enough valid licenses were added.
5. Fixed an issue where certain email accounts might be deactivated in case of unstable connection with the LDAP server.
6. Minor bug fixes.

1. Supports STARTTLS in the high-availability cluster.
2. Enhanced server performance.
3. Optimized setup procedure for creating the high-availability cluster.
4. Fixed an issue where LDAP user accounts might be disabled under certain circumstances.
5. Minor bug fixes.

1. Optimized the resource utilization according to the system memory of the Synology NAS.
2. Fixed an issue where the added certificate for MailPlus Server might be reset to default certificate after the upgrade of MailPlus Server.
3. Adjusted the license mechanism by centrally managing all licenses on the primary server in the high-availability cluster.
4. Minor bug fixes.

1. Fixed an issue where MailPlus Server might fail to be authorized when Internet connection is unstable.
2. Enhanced system stability.
3. Minor bug fixes.

1. Fixed an issue where users might fail to send/receive emails after the user account list is changed.
2. Minor bug fixes.

What's new

1. Since the license mechanism and account management for MailPlus has started, please make sure you have enough valid licenses installed in MailPlus Server for the activated user accounts. Otherwise, the functions of MailPlus/MailPlus Server will be limited. For more information on MailPlus license mechanism, please check here.
2. MailPlus Server comes with 5 free mail accounts by default. Administrators can add more licenses for extra mail accounts.
3. MailPlus Server provides enterprise-level mail server features and advanced high-availability architecture, which maximize the uptime for the mail system with single server fault-tolerance.
4. The migration from the existing Mail Server to MailPlus Server is made seamless to let you continue using the previously hosted mail service.
5. The specially designed algorithm allows you to search email content with a given keyword for an even more accurate result.
6. The spam-filter has a much enhanced anti-spam ability, especially for Chinese spams, by using implemented algorithm to analyze the meaning of the statement.
7. Customize spam filters by keywords for precise spam blocking.
8. Supports application backup in the Hyper Backup package.
9. Enhanced anti-malware and anti-virus protection by integrating Google Safe Browsing and third-party database.
10. Message Content Protection (MCP) allows you to filter or block the mails that match MCP rules.
11. Penpal auto whitelisting mechanism ensures that the mails from the contacted senders will not be marked as spam.
12. You can forward mail logs to both the server used as Secondary Server in the mail cluster for log backup and the syslog server for centralized log management.
13. You can now disable full-text search for selected accounts to utilize the server resources.
14. Usage analysis provides an efficient way to calculate email quantity of the selected users, allowing the administrators to easily monitor the mail traffic by accounts.
15. Daily Report is sent via emails with summary in the email content and complete log report in the attachment.

Limitation & Known Issues

1. MailPlus Server is required to be configured before running MailPlus.