Thema: Proxmox

[SiLæncer]

Die Firma Proxmox Server Solutions GmbH hat ihre sowohl als kommerzielle als auch als freie Version verfügbare Mail-Gateway-Software auf die Version 1.1 aktualisiert. Die neue Version basiert jetzt auf Debian 3.1, einem aktuellen Kernel 2.6.11, SpamAssasin 3.0.4 und ClamAV 0.85.1. Neue Regeln zur Spam-Erkennung und neue Warnfunktionen bei Verzögerungen sollen für weitere Verbesserungen sorgen.

Nutzer der kommerziellen Version können via eingebautes Web-Interface, das in der freien Variante nicht enthalten ist, das Servicepack 1 downloaden und so auf die neue Version aufrüsten. Für Verwender der kostenlosen Ausgabe sieht der Hersteller nur den Weg über das Herunterladen des ISO-Image der neuen Version und der anschließenden Neu-Installation vor.

Proxmox Mail Gateway analysiert jede einzelne E-Mail und vergibt ihr einen spam-score. Zur Optimierung der Erkennungsrate werden bei künftigen Analysen vorherige Fehlererkennungen berücksichtigt. Da die Software selbstinstallierend sei, könne sie auch von Menschen ohne tiefe Linux-Kenntnisse verwendet werden. Eine Installation soll nur wenige Minuten beanspruchen. Als Hardware kann jede i386-basierte Architektur verwendet werden. Allerdings verlangt die Software ausdrücklich ein eigenes Gerät, der Installer löscht nämlich die gesamte Festplatte und beansprucht so die Hardware für sich alleine. Weitere Informationen liefert der Proxmox Mail Gateway Adminguide (PDF-Datei) oder das Proxmox-Support-Forum.

Quelle und Links : http://www.heise.de/newsticker/meldung/61279

[SiLæncer]

Release Notes

The Mail Gateway is a complete operating system based on Debian Stretch 9.3 with a 4.13.13 kernel, and has a new RESTful API, includes support for all ZFS raid levels, comes with LDAP, IPv4 and IPv6 support, and with a new interface framework based on Sencha ExtJS. For businesses Proxmox offers a new subscription-based support model with access to a stable enterprise repository.

New Proxmox Mail Gateway is Open-Source (AGPL,v3):

With the new Mail Gateway version 5.0 the company Proxmox has changed the license of it’s email security solution and it is now completely open-source, licensed under the GNU Affero GPL, v3. The anti-spam and anti-virus filtering solution includes the full feature-set like high performance and multi-threaded anti-virus engines, countless spam filtering methods, a message tracking center, a unique object-oriented rule system, user management and LDAP, HA clustering functionality (master/slave synchronization via SSH tunnel), an interface for end-user spam quarantine, and many more features.
With the license change to the free, copy-left open-source license AGPL, the Proxmox Mail Gateway now offers the same open-source development model and ecosystem like the company’s well known Proxmox VE, an open-source platform for enterprise virtualization: The source code of the Mail Gateway is available in the public GIT, issues can be reported in the bug tracker, the channel to discuss and share knowledge is the community forum.
The change in licensing also comes with a new support model. Instead of the former annual licensing model which included technical support, the company Proxmox now offers a subscription-based support model. A commercial subscription – recommended for production use – provides access to the stable enterprise package repository and to technical email support. Various subscription levels ranging from community to premium are available starting at EUR 99 for an annual community subscription.

New Framework for web-based management Interface:

With Proxmox Mail Gateway 5.0 the web-based management interface has been completely re-worked and is now based on the Sencha ExtJS framework. With the integrated, central web interface users can access and control all configuration and management tasks such as incoming and outgoing mail traffic, the object-oriented rule system, the message tracking center including all logs and reports, the end-user quarantine web interface, user management, backup/restore, and high availability clustering. Dashboards and statistics provide a quick overview for the IT staff easing their control tasks. If desired advanced tasks can be executed on the command line too.

Integrated Reference Documentation:

Proxmox Mail Gateway brings a new documentation framework integrated into the GUI which provides a global help function. Users can access and download the technical documentation via the central help-button (available in various formats like html, pdf and epub). A main asset of the new documentation is that it’s always version specific to the current user’s software version. The new reference documentation is created from man pages which are auto-generated based on the code. The help content itself is written by the developers via comments in the code and is generated using asciiDoc. To participate in the documentation project users can send a patch to the project and propose new content.

Other Notable Changes in Proxmox Mail Gateway 5.0:

Other new features in Proxmox Mail Gateway 5.0 include support for all ZFS raid levels in the ISO installer, LDAP, IPv4 and IPv6 support, ClamAV with Google Safe Browsing database, and one click updates via GUI.

[close]

http://www.proxmox.com/

[SiLæncer]

Changelog

The new command `pmg-system-report` provides an overview of the key characteristics of the setup and performance in Proxmox Mail Gateway, and improves the initial diagnosis for the Enterprise support.
With the .eml download from the quarantine interface (non-mobile) users can download the complete source of a quarantined message in .eml format for further analysis.
Improved handling of Blacklist/Whitelist in the Quarantine interface: a ‘multiselect’ option for removing multiple entries at once has been added.
Added support for custom checks: This functionality enables users to integrate their own custom check logic by providing a defined interface which can be enabled optionally, and runs a custom check before the email gets handed to the virus scanner and the rule system.
Proxmox Mail Gateway cluster now works with IPv6.
proxmox-spamassassin: Update the shipped rule sets.

[close]

http://www.proxmox.com/

[SiLæncer]

Changelog

We have updated the Mail Gateway to Debian 10.2 (Buster) and a 5.3 kernel with ZFS included. The new version 6.1 brings support for DomainKeys Identified Mail signatures (DKIM), a new attachement quarantine, adjustable SpamAssassin scores via GUI, and improved handling of Configuration and Rule changes in a cluster. As an experimental feature, the support for “Before Queue” filtering can be enabled.

[close]

http://www.proxmox.com/

[SiLæncer]

Changelog

    Based on Debian Buster (10.3)
        Proxmox Mail Gateway is based on the latest stable release of Debian 10.3 (Buster).
    SpamAssassin 3.4.4
        Proxmox ships the latest upstream release of Apache SpamAssassin with a updated and enhance ruleset (KAM rules added)
    Kernel 5.4
        Proxmox Mail Gateway shares the kernel with Proxmox VE and is based on the 5.4 series from Ubuntu 20.04
    pmg-log-tracker in Rust
        pmg-log-tracker has been extended and reimplemented in the Rust programming language. pmg-log-tracker is the binary at the core of the Message Tracking Center, providing live searchable and grouped logs in the GUI.
        The new pmg-log-tracker has support for parsing and grouping logs in before-queue filtering mode.
        The refresh of the code base of pmg-log-tracker provides an optimized performance and more stability.

    Support for before-queue filtering in the GUI
        With the added support for displaying before-queue filtering logs in the GUI and fixing some minor glitches in that area, the before-queue filtering can now be comfortably enabled in the GUI.

    Improved IPv6 support
        The Mail Proxy's SPF checker also verifies SPF records for those remote mail servers connecting via IPv6.
        Greylisting support for IPv6 addresses (with variable netmask, defaulting to '/64') - needs to be explicitly enabled.
        Who-objects containing IPv6 literal address work now.

    Customizable netmask length for greylist matching
        Instead of fixing a greylist network to a '/24' the administrator can now configure which hosts should be considered as belonging to the same network by setting a larger (or smaller) prefix.
        This can help with receiving mail from some cloud-providers, who send out one mail from different ip addresses within a large network, which usually leads to a rather long delay and sometimes even to a legitimate mail being rejected.
        Due to the changed database layout partial upgrades of clusters will prevent nodes running the older version from syncing the greylist database until they are upgraded.

    Better UX for the User Spam Quarantine interface
        If selected in the Quarantine view, the From header and the Subject are now displayed on top of the mail body.
        It is now possible to delete mail addresses containing certain special characters (for example '/') from a users' black- or whitelist.
        Users can set their preferred language directly in the quarantine interface instead of having to log out to change the setting.
        Fixed a bug in the selection of multiple e-mails.

    Handling of changes to overridden templates with ucf
        Starting with this release all service configuration templates, copied and modified in /etc/pmg/templates get registered with ucf. Should a overridden template change with a new package version the administrator is asked and can accept or reject the changes.
        All users who have templates in /etc/pmg/templates will be asked about the current changes for the initial registration.

    New What Object: 'Match Archive Filename'
        In addition to match files in archives (zip, tar.gz, rar,...) based on the file's content-type, it is also possible to look for particular filename patterns inside of archives.
        This completes the feature matrix of matching files based on content-type or filename, as plain attachments, or inside archives.

    Support for downstream LMTP servers
        In certain setups there is no advantage in having a dedicated SMTP server for receiving e-mails from Proxmox Mail Gateway, since all used functionality is provided by a MTA, which speaks IMAP and LMTP (e.g., Dovecot).
        It is now possible to configure Proxmox Mail Gateway to send e-mails directly to a LMTP relay, both as default transport and only as transport for certain domains.

    Improvements to recently added features
        Before-queue filtering and DKIM signing, both implemented with Proxmox Mail Gateway 6.1, have a better user experience and are considered stable now.
        Some remaining glitches and bugs fixed for both.
        DKIM selector handling can handle the existence of multiple selectors and in the GUI, users can comfortably switch between the active selector.

    TLS policy selection for internal downstream servers
        It is now possible to specify a desired level of encryption and authentication for the opportunistic TLS-encryption (STARTTLS) for downstream servers entered in your transports.
        This can help to ensure that your internal communication is not sent in the clear over the network. It can also be used to work around broken TLS implementations in legacy downstream servers.

    Improvements to general usability
        The unbounded growth of the Quarantine disk usage for non-master nodes in clustered setups is fixed.
        It's now possible to switch to incremental updates of the AV signatures for ClamAV via GUI, alleviating the problem that both methods fail in certain cases for some users.

[close]

http://www.proxmox.com/