Ralph Slooten
6c0ef5ba33
Feature: Add TLS forwarding support and refactor forwarding function
2025-03-29 22:20:09 +13:00
San Chen
2dbc4ea601
Feature: Add TLS relay support and refactor relay function ( #471 )
...
* Feature: Add TLS relay support and refactoring the relay function
* Fix: Prevent simultaneous use of TLS and STARTTLS in relay configuration validation
2025-03-29 22:20:09 +13:00
Ralph Slooten
54b6d8f85c
Standardize error message casing in SMTP and POP3 configuration validation
2025-03-29 22:20:08 +13:00
Ralph Slooten
b827d75c3e
Feature: Add configuration to disable SQLite WAL mode for NFS compatibility
2025-03-01 22:51:42 +13:00
Ralph Slooten
876d0eb5da
Feature: Add configuration to explicitly disable HTTP compression in web UI/API ( #448 )
2025-03-01 22:51:22 +13:00
Ralph Slooten
6e9760d5d9
Feature: Add configuration to set message compression level in db (0-3) ( #447 & #448 )
2025-03-01 22:51:22 +13:00
Ralph Slooten
d7df895261
Feature: SMTP auto-forwarding option ( #414 )
2025-01-26 12:39:39 +13:00
Ralph Slooten
a95bc3d29f
Feature: Option to override the From email address in SMTP relay configuration ( #414 )
2025-01-26 00:22:57 +13:00
Ralph Slooten
4d86297169
Feature: Add Chaos functionality to test integration handling of SMTP error responses ( #402 , #110 , #144 & #268 )
...
Closes #405
2025-01-25 12:17:15 +13:00
Ralph Slooten
31ec6681a7
Feature: Experimental Unix socket support for HTTPD & SMTPD ( #373 )
2024-10-24 23:12:34 +13:00
Ralph Slooten
405babda7b
Testing: Add tenantIDs to tests
2024-10-18 17:55:46 +13:00
Ralph Slooten
7f4cd90c03
Add undocumented "demonstration mode"
2024-09-08 00:23:15 +12:00
Ralph Slooten
d48b5e8674
Feature: Add option to control message retention by age ( #338 )
2024-08-06 17:23:28 +12:00
Ralph Slooten
a078c318e8
Fix(Security): Prevent bypass of Contend Security Policy using stored XSS, and sanitize preview HTML data (DOMPurify)
...
This closes a security hole whereby a bad actor with SMTP access can bypass the CSP headers with a series of specially crafted HTML messages. A special thanks to @bmodotdev for responsibly disclosing the vulnerability and proving information and an initial fix.
2024-07-26 22:02:14 +12:00
Ralph Slooten
6947c2a621
Feature: Add optional relay recipient blocklist ( #333 )
2024-07-14 15:04:36 +12:00
Ralph Slooten
0dca8df29c
Feature: Add option to disable auto-tagging for plus-addresses & X-Tags ( #323 )
2024-06-28 22:35:07 +12:00
Ralph Slooten
a155b395db
Feature: Add optional label to identify Mailpit instance ( #316 )
2024-06-21 16:54:33 +12:00
Ralph Slooten
dddc52a668
Feature: Set tagging filters via a config file
2024-04-26 14:52:10 +12:00
Ralph Slooten
65fb188586
Do not export autoTag struct
2024-04-25 23:18:46 +12:00
Ralph Slooten
d3b048e933
Chore: Clearer error messages for read/write permission failures ( #281 )
2024-04-21 10:16:59 +12:00
Ralph Slooten
cbcf0be1a2
Feature: Option to auto relay for matching recipient expression only ( #274 )
2024-04-20 23:42:36 +12:00
Ralph Slooten
5ad76cb3a7
Fix typo
2024-04-18 19:32:09 +12:00
Ralph Slooten
7085690e3d
Only compile SMTPRelayConfig.AllowedRecipients if set
2024-04-16 22:15:09 +12:00
Ralph Slooten
31e4f84f9a
Chore: Remove deprecated --disable-html-check option
2024-04-13 00:25:48 +12:00
Ralph Slooten
48c73ae97b
Chore: Switch database flag/env to --database / MP_DATABASE
...
The original `--db-file` / `MP_DATA_FILE`, although deprecated, won't be removed any time soon to ensure backwards compatibility with existing integrations
2024-04-12 14:47:47 +12:00
Ralph Slooten
6a410a28b6
Feature: Add optional tenant ID to isolate data in shared databases ( #254 )
2024-04-09 21:30:56 +12:00
Ralph Slooten
73446ed6f7
Fix: Enforce SMTP STARTTLS by default if authentication is set
2024-03-17 14:59:14 +13:00
Ralph Slooten
528c35eec6
Feature: Add SMTP TLS option ( #265 )
2024-03-17 14:57:41 +13:00
Ralph Slooten
a324d817b3
Feature: Allow setting SMTP relay configuration values via environment variables ( #262 )
2024-03-12 17:10:13 +13:00
Ralph Slooten
23b1261cf9
Chore: Tag names now allow . and must be a minimum of 1 character
2024-03-02 22:51:30 +13:00
Ralph Slooten
f548bbb874
Feature: Optional POP3 server ( #249 )
...
Originally requested in #72
2024-02-24 23:10:48 +13:00
Ralph Slooten
26a2095674
Chore: Security improvements (gosec)
2024-02-17 12:38:30 +13:00
Ralph Slooten
dda0b0c8a6
Feature: Add TLSRequired option for smtpd ( #241 )
2024-01-27 23:00:07 +13:00
Ralph Slooten
9cda71f21a
Feature: Add optional SpamAssassin integration to display scores ( #233 )
2024-01-20 12:07:49 +13:00
Ralph Slooten
cdab59b295
Feature: Add option to only allow SMTP recipients matching a regular expression (disable open-relay behaviour #219 )
2024-01-03 12:06:36 +13:00
Ralph Slooten
085e76f33e
Feature: Add configuration option to set maximum SMTP recipients ( #205 )
2023-12-14 16:26:12 +13:00
Imanuel Ulbricht
4a12f2cd62
Feature: Add @ as valid character for webroot ( #215 )
...
Added `@` as valid character for `--webroot`. This allows the usage in Coder without a subdomain.
2023-12-07 16:26:14 +13:00
Ralph Slooten
2e9d5008c2
Feature: Allow port binding using hostname
...
See #213
2023-12-01 14:50:03 +13:00
Ralph Slooten
4c5b024eca
Feature: Option to allow untrusted HTTPS certificates for screenshots & link checking ( #204 )
2023-11-11 23:10:43 +13:00
Ralph Slooten
140bdd6c20
Feature: Set optional webhook for received messages ( #195 )
2023-10-20 23:16:56 +13:00
Ralph Slooten
0ab4210640
Feature: Set auth credentials directly from environment variables
...
Credentials for the UI and SMTP can now be exported via the `MP_UI_AUTH` and `MP_SMTP_AUTH` environment variables. See #173
2023-09-29 16:40:23 +13:00
Ralph Slooten
b6d5a8c182
Chore: Update internal import paths
2023-09-25 19:29:30 +13:00
Ralph Slooten
95e346f8af
Improved search parser
2023-09-22 06:55:51 +12:00
Ralph Slooten
7875160aa7
Feature: Workaround for non-RFC-compliant message headers containing <CR><CR><LF>
...
Due to a bug in some common sendmail implementations and PHP >=8.0, message headers sometimes contain `\r\r\n` which is not RFC compliant.
Mailpit will now fix these non-compliant headers. This can be disabled via `--smtp-strict-rfc-headers`
See #87 / #153
2023-08-15 17:13:25 +12:00
Ralph Slooten
1922651d41
Feature: HTML check to test & score mail client compatibility with HTML emails
2023-07-30 17:04:06 +12:00
Ralph Slooten
7d2716ee17
UI: Add flag to block all access to remote CSS and fonts (CSP)
...
This is now set to allow by default.
@see #140
2023-07-29 22:25:37 +12:00
Ralph Slooten
d4268b8ae1
Feature: Set tags via X-Tags message header
...
@see #119
2023-06-02 14:47:36 +12:00
Ralph Slooten
52120abefd
Feature: Add SMTP LOGIN authentication method for message relay
...
See #118
2023-05-30 15:54:26 +12:00
Matthias Gliwka
fdc1b05545
Feature: Add allowlist to filter recipients before relaying messages ( #109 )
...
* Bugfix: Don't panic on mails without from line
* Feature: Add allowlist to filter recipients before relaying messages
2023-05-05 15:28:00 +12:00
Ralph Slooten
5f919cc9dd
Feature: Option to ignore duplicate Message-IDs
...
This option (default off) silently ignores any new messages with duplicate Message-IDs. This update includes a new database structure and automatic rebuild of existing data.
2023-05-04 21:48:09 +12:00
