symbiosis-email (2017:0818) stable; urgency=medium

  * Added systemd-based clamav monit scripts.

 -- Patrick J Cherry <patrick@bytemark.co.uk>  Fri, 18 Aug 2017 18:21:44 +0100

symbiosis-email (2017:0510) stable; urgency=medium

  * Store monit configuration in /usr/share instead of /etc. Use symlinks to
    allow users to enable/disable but discourage editing

 -- Telyn <telyn@bytemark.co.uk>  Wed, 10 May 2017 13:42:15 +0100

symbiosis-email (2017:0424) stable; urgency=medium

  * Use central dhparam generation script to generate dhparams.
  * Auto-create standard mailboxes (Trash, Drafts, Sent, Spam) on first login.
  * Rewrite monit tasks to use new systemd integrations.

 -- Patrick J Cherry <patrick@bytemark.co.uk>  Mon, 24 Apr 2017 15:20:08 +0100

symbiosis-email (2015:1218) oldstable; urgency=medium

  * Re-instate clamav tests that stop it if no domains are using anti-virus
    scanning.  Closes #49.
  * Fix path to binary in /etc/cron.d/symbiosis-email. Closes #72. 
  * Ensure manpages are built

 -- Patrick J Cherry <patrick@bytemark.co.uk>  Thu, 13 Jul 2017 15:13:30 +0100

symbiosis-email (2015:1217) stable; urgency=medium

  * If pipe-delivery fails attempt to keep the failed message in the queue.

 -- Steve Kemp <steve@bytemark.co.uk>  Fri, 28 Apr 2017 10:12:14 +0100

symbiosis-email (2015:1216) stable; urgency=medium

  * Removed further references to $HOSTNAME in tests.
  * Added ruby-cracklib as an install dependency.
  * Start services in tests with invoke-rc.d instead of service.
  * Tidy how the hostname is set during testing.

 -- Patrick J Cherry <patrick@bytemark.co.uk>  Wed, 19 Apr 2017 10:39:29 +0100

symbiosis-email (2015:1215) stable; urgency=medium

  * Allow underscores in DKIM selectors.
  * Allow wildcard whitelisting/blacklistng.
  * Added further black/whitelist tests for bad domains.
  * Fixed a bug where blacklsted hostnames were not getting checked.
  * Updated cipher lists.
  * Fix typo ensuring tagged spam does get moved to Spam folder.

 -- Patrick J Cherry <patrick@bytemark.co.uk>  Tue, 22 Nov 2016 12:16:24 +0000

symbiosis-email (2015:1214) stable; urgency=low

  * Bug fix in the Exim4 vhost-default-forward router. Should check if these
    home directories exist before setting them.

 -- Patrick J Cherry <patrick@bytemark.co.uk>  Tue, 09 Aug 2016 12:39:11 +0100

symbiosis-email (2015:1213) stable; urgency=medium

  * Fixed incompatibility with updated exim4 (#12673).

 -- James Carter <jcarter@bytemark.co.uk>  Thu, 17 Mar 2016 13:37:26 +0000

symbiosis-email (2015:1212) stable; urgency=medium

  * Fixed symbiosis-email-encrypt-passwords not to have $VERBOSE flag set
    permanently.

 -- Patrick J Cherry <patrick@bytemark.co.uk>  Wed, 03 Feb 2016 13:40:49 +0000

symbiosis-email (2015:1211) stable; urgency=medium

  * Removed useless test files from /etc/symbiosis/test.d/exim4_acl_tests.
  * Home direcotory now set for the vhost_vacation router in Exim.
  * Updated usage of get_param to match new spec in symbiosis-common.
  * Exim was using the whole hostname instead of the first component in as the
    DKIM selector, which differed from how symbiosis-dns was doing things.

 -- Patrick J Cherry <patrick@bytemark.co.uk>  Thu, 14 Jan 2016 16:46:05 +0000

symbiosis-email (2015:1118) stable; urgency=medium

  * Updated the interface expansion in the remote_smtp transports to work.  It
    turns out $value gets reset outside the ${extract } expansion.

 -- Patrick J Cherry <patrick@bytemark.co.uk>  Wed, 18 Nov 2015 14:30:10 +0000

symbiosis-email (2015:1104) stable; urgency=medium

  * Changed SSL certificate and key paths in Exim4 and Dovecot to use
    /etc/ssl/ssl.combined, which should include the certificate, bundle (where
    appropriate) and key.
  * Add Debian-exim user to ssl-cert group so it can read the keys in
    /etc/ssl.

 -- Patrick J Cherry <patrick@bytemark.co.uk>  Thu, 05 Nov 2015 14:21:09 +0000

symbiosis-email (2015:1029) stable; urgency=medium

  * Local users no longer have to append the hostname to their logins for them
    to work.
  * Added tests for the dict proxy server.
  * Added dependency for latest common package to get Symbiosis::Host#fqdn.
  * The poppassd and dict-proxy daemons are now managed by start-stop-daemon
    when sysvinit is used.
  * Users will shell accounts can login now with just their username, as the
    hostname is now added automatically.
  * The automatic password hashing program (symbiosis-email-encrypt-passwords)
    now skips empty passwords, and has a "verbose" flag to say what is going
    on.
  * Mail passwords are now automatically hashed on a daily basis.

 -- Patrick J Cherry <patrick@bytemark.co.uk>  Thu, 29 Oct 2015 16:13:32 +0000

symbiosis-email (2015:1021) stable; urgency=medium

  * Added poppassd to provide an interface to change mailbox passwords.
  * Fixed SMTP outgoing interface selection (closes #12298).
  * Added manpage for symbiosis-email-encrypt-passwords.

 -- Patrick J Cherry <patrick@bytemark.co.uk>  Wed, 21 Oct 2015 22:32:46 +0100

symbiosis-email (2015:1009) stable; urgency=medium

  * Comment out PidFile settings in clamav/freshclam config to aid upgrades.
  * Removed clamav monitoring as this is now run under systemd.
  * Corrected spamassassin pid and process name for monitoring.
  * Move d-push support into own meta-package, so as not to pull in unwanted
    gubbins.
  * Removed reference to non-existent variable in the dict_handler
  * Removed unused password_daemon code.
  * Added specific versions for various dependencies.
  * Remove tc_checkpassword.rb as this is no longer used.
  * Updated SSL ciphers for Dovecot.

 -- Patrick J Cherry <patrick@bytemark.co.uk>  Fri, 09 Oct 2015 17:24:41 +0100

symbiosis-email (2015:0825) stable; urgency=medium

  * Updated GnuTLS ciphers in Exim.
  * Updated OpenSSL ciphers in Dovecot.
  * Added cronjob to regenerate DH params for exim weekly.
  * Added manpage for symbiosis-email-dict-proxy.
  * Removed symbiosis-email-check-password as it is no longer used.
  * This package now cleans up after itself more effectively on remove/purge.
  * Added supplementary groups to clamav
  * Fixed up vhost_no_local_mail router to work with messages received
    externally that are to be forwarded on to somewhere external.
  * Updated exim4 host lists.
  * Removed bytemark-antispam references.
  * Added per domain or per mailbox ratelimiting via config/mailbox-ratelimit
    or mailboxes/user/ratelimit.
  * Added d-push (z-push) for ActiveSync support.
  * Added automatic email password encryption support which can be disabled by
    the conf/mailbox-dont-encrypt-passwords flag.
  * Tidied maintscripts to use Debian supplied routines for moving/removing
    conf files in /etc.

 -- Patrick J Cherry <patrick@bytemark.co.uk>  Tue, 25 Aug 2015 12:12:21 +0100

symbiosis-email (2015:0618) stable; urgency=medium

  * Updated maintainers/uploaders
  * Avoid advertising PLAIN and LOGIN over unencrypted connections.
  * Replace ye olde checkpassword auth with dict proxy lookup.
  * Set default quota grace to 0%.
  * Renamed File#exists? to File#exist? everywhere.
  * Exim4 now uses the IP in config/ip as the outgoing interface IP.
  * Emails tagged with spam get delivered to Maildir/.Spam/
  * Fixed acceptance of multi-word email passwords.

 -- Patrick J Cherry <patrick@bytemark.co.uk>  Wed, 17 Jun 2015 10:47:19 +0100

symbiosis-email (2015:0128) stable; urgency=low

  * Updated Debian standards version.

 -- Steve Kemp <steve@bytemark.co.uk>  Wed, 28 Jan 2015 10:00:01 +0000

symbiosis-email (2014:1021) stable; urgency=medium

  * Fixed forwarding mail from one domain to another with non-local mail does
    not work when the message originated remotely (#12128).

 -- Patrick J Cherry <patrick@bytemark.co.uk>  Fri, 07 Aug 2015 21:32:04 +0100

symbiosis-email (2014:1020) stable; urgency=medium

  * Fixed exim configuraion to allow mail being forwarded to
    locally-hosted domains with mail hosted elsewhere to work if the mail
    originates remotely.

 -- Patrick J Cherry <patrick@bytemark.co.uk>  Wed, 05 Aug 2015 08:33:39 +0100

symbiosis-email (2014:1019) stable; urgency=medium

  * Passwords with spaces in now work.

 -- Patrick J Cherry <patrick@bytemark.co.uk>  Mon, 22 Jun 2015 09:06:19 +0100

symbiosis-email (2014:1018) stable; urgency=medium

  [ James Carter ]
  * Fix exim4 config for vacation messages (closes #8448).

  [ Patrick J Cherry ]
  * Accept mail from authenticated users for locally configured hosts that
    have their mail elsewhere.
  * Updated maintainer/uploaders.
  * Avoid advertising PLAIN and LOGIN over unencrypted connections.  Fixes
    #8473

 -- Patrick J Cherry <patrick@bytemark.co.uk>  Tue, 31 Mar 2015 13:10:01 +0100

symbiosis-email (2014:1017) stable; urgency=medium

  * Disable SSLv3 in Exim4 and Dovecot (CVE-2014-3566).

 -- Patrick J Cherry <patrick@bytemark.co.uk>  Fri, 17 Oct 2014 10:31:03 +0100

symbiosis-email (2014:0627) stable; urgency=medium

  * Added further tests to exim4 delivery
  * Fixed firewall patterns (CVE-2014-3979)

 -- Patrick J Cherry <patrick@bytemark.co.uk>  Fri, 27 Jun 2014 19:17:21 +0100

symbiosis-email (2014:0214) stable; urgency=low

  * Updated dovecot tests to work.
  * Added bug control.
  * renamed symbiosis-check-mailbox-password symbiosis-email-check-password.
  * removed DH_VERBOSE flag in rules.

 -- Patrick J Cherry <patrick@bytemark.co.uk>  Fri, 14 Feb 2014 13:05:19 +0000

symbiosis-email (2014:0115) stable; urgency=low

  * Fixed up helo check for authorized connections.
  * Fixed up vacaction messages to use sensible reply_to/from headers.

 -- Patrick J Cherry <patrick@bytemark.co.uk>  Wed, 15 Jan 2014 16:19:42 +0000

symbiosis-email (2014:0113) stable; urgency=low

  * Updated maintainer and uploaders.

 -- Patrick J Cherry <patrick@bytemark.co.uk>  Mon, 13 Jan 2014 17:04:46 +0000

symbiosis-email (2014:0108) stable; urgency=low

  * Added support for local mailboxes in exim4.
  * Added tests for local mailboxes in exim4.
  * Updated preinst to remove obsolete files.
  * Updated preinst to blitz exim4.conf before upgrades to prevent upgrade
    failure.
  * Fixed failure when validating vhost aliases with an optional suffix.
  * New exim4 log patterns for firewall.
  * Updated resource control limits to allow more simulataneous connections.

 -- Patrick J Cherry <patrick@bytemark.co.uk>  Wed, 08 Jan 2014 12:36:19 +0000

symbiosis-email (2013:0731) stable; urgency=low

  * Removed dovecot-managesieved and dovecot-sieve as dependencies, added
    dovecot-sieve in their place.

 -- John Hackett <jhackett@bytemark.co.uk>  Wed, 31 Jul 2013 13:47:00 +0100

symbiosis-email (2013:0729) stable; urgency=low

  * Added dovecot-managesieved and dovecot-sieve as dependencies.

 -- John Hackett <jhackett@bytemark.co.uk>  Mon, 29 Jul 2013 14:58:00 +0100

symbiosis-email (2012:1031) oldstable; urgency=low

  * Dovecot LDA now returns a temporary failure when a mailbox is overquota,
    ensuring it behaves like Exim4 in this situation.
  * Corrected default mailbox quota parameter filename to be mailbox-quota
    everywhere, rather than default_mailbox_quota or default-mailbox-quota.
  * Exim4 quotas now support the documented suffixes of k, M, G, ki, Mi, Gi.
  * Exim4 quotas are now based on the size of just one Maildir, rather than
    any sub-folders, ensuring enforcement for deliveries made during an Exim
    filter.
  * Re-strengthened dependencies such that spamassassin & clamav scanners are
    required and not merely recommended, since the post-install script assumes
    both are instralled.
  * When users log in over IMAP/POP3/SMTP the maildirsize quota file, which
    the Dovecot LDA relies on, is now rebuilt.
  * Exim4 now tags maildir-delivered messages with their size, which it later
    uses for quota calculations.
  * Dovecot will now automatically create the maildir during delivery if not
    already there.
  * Added more tests for both Exim4 and Dovecot.
  * The IMAP quota is now named, so it shouldn't break apple mail, according
    to the Dovecot documentation.

 -- Patrick J Cherry <patrick@bytemark.co.uk>  Wed, 31 Oct 2012 17:16:45 +0000

symbiosis-email (2012:0815) stable; urgency=low

  [ Steve Kemp ]
  * Weaken dependencies such that spamassassin & clamav scanners are
    merely recommended and not required.

  [ Patrick J Cherry ]
  * Updated monitoring scripts to be sensible about when they run
    clamd/spamassassin tests in light of the fact they are no longer hard
    dependencies.

 -- Patrick J Cherry <patrick@bytemark.co.uk>  Wed, 15 Aug 2012 17:28:02 +0100

symbiosis-email (2012:0509) stable; urgency=high

  * Fixed bug whereby mailboxes can be accessed using any old password.
  * Added tests to make sure that this never happens again.

 -- Patrick J Cherry <patrick@bytemark.co.uk>  Wed, 09 May 2012 12:35:01 +0100

symbiosis-email (2012:0418) stable; urgency=low

  * clamav-daemon now has its temporary directory specified in
    /etc/defaults/clamav-daemon.
  * exim4 tests now makes sure that the exim4 process is closed at the end of
    each ACL test.

 -- Patrick J Cherry <patrick@bytemark.co.uk>  Wed, 18 Apr 2012 10:57:43 +0100

symbiosis-email (2012:0301) stable; urgency=low

  * Tweaked exim4 config to create mailboxes + subscribe when using Dovecot
    LDA.
  * Tweaked exim4 config to preserve the domain when delivering using the
    vhost_alias router.

 -- Patrick J Cherry <patrick@bytemark.co.uk>  Thu, 01 Mar 2012 13:50:06 +0000

symbiosis-email (2012:0222) stable; urgency=low

  * Updated copyright and documentation links.

 -- Patrick J Cherry <patrick@bytemark.co.uk>  Wed, 22 Feb 2012 14:08:32 +0000

symbiosis-email (2012:0221) stable; urgency=low

  * Updated firewall patterns to check mail.log, rather than mail.err.
  * Password file permissions are now updated on read to 0600, if possible.
  * Updated depends to require latest symbiosis-common packages.

 -- Patrick J Cherry <patrick@bytemark.co.uk>  Tue, 21 Feb 2012 10:14:16 +0000

symbiosis-email (2012:0215) stable; urgency=low

  * Remove old cron-jobs in postinst.
  * Added Domain::Mailbox#password_file method.

 -- Patrick J Cherry <patrick@bytemark.co.uk>  Mon, 20 Feb 2012 21:15:40 +0000

symbiosis-email (2012:0208) stable; urgency=low

  * Updated test scripts not to have executable bit set, or a shebang line.
  * Updated debian control files to use relationships properly, as per section
    7.6 of the Debian Policy Manual.
  * Updated postinst to remove old dovecot test.

 -- Patrick J Cherry <patrick@bytemark.co.uk>  Tue, 07 Feb 2012 17:22:13 +0000

symbiosis-email (2012:0201) stable; urgency=low

  * Removed host rdns lookups for trusted IPs (i.e. ones permitted to relay /
    local ones) to avoid monit errors during times of DNS flakiness.
  * Dovecot ManageSieve now on IPv6.
  * ManageSieve port now added to the firewall patterns list.
  * Removed spurious crontab.

 -- Patrick J Cherry <patrick@bytemark.co.uk>  Wed, 01 Feb 2012 20:44:49 +0000

symbiosis-email (2012:0124) stable; urgency=low

  * Enabled TLSv1 for outlook compatibility with exim4.
  * Tightened dependencies to fix conflicts in lenny upgrades
  * Fixed exim4 and dovecot tests to work betterly.
  * Fixed bug introduced earlier that prevented mail passwords being
    authenticated. Also improved mailbox tests to work
  * Moved tc_checkpassword to email package, where it belongs and fixed it up.

 -- Patrick J Cherry <patrick@bytemark.co.uk>  Tue, 24 Jan 2012 13:29:08 +0000

symbiosis-email (2012:0117) stable; urgency=low

  * /usr/sbin/symbiosis_checkpassword now called
    symbiosis-check-mailbox-password.
  * symbiosis-check-mailbox-password now written in ruby
  * Tests improved
  * Ruby domain/mailbox library written
  * Mailbox quotas added
  * Sieve support added

 -- Patrick J Cherry <patrick@bytemark.co.uk>  Tue, 17 Jan 2012 17:14:13 +0000

symbiosis-email (2011:1209) stable; urgency=low

  * Updated standards version (no change).

 -- Steve Kemp <steve@bytemark.co.uk>  Fri, 09 Dec 2011 15:46:31 +0000

symbiosis-email (2011:1201) stable; urgency=low

  * Added dependency on symbiosis-common for SSL certificate generation
  * Fixed TLS cipher params for exim4.

 -- Patrick J Cherry <patrick@bytemark.co.uk>  Thu, 01 Dec 2011 11:49:28 +0000

symbiosis-email (2010:1130) stable; urgency=low

  * Updated exim4 config to route via DNS for local domains only when those
    domains have MX or SRV records pointing elsewhere (i.e. not A records).
    Closes #1306.

 -- Patrick Cherry <patick@bytemark.co.uk>  Tue, 30 Nov 2010 10:45:14 +0000

symbiosis-email (2010:1111) stable; urgency=low

  * Tightened up SSL cipher versions in Dovecot
  * Removed Exim4 version number from SMTP banner

 -- Patrick Cherry <patick@bytemark.co.uk>  Thu, 11 Nov 2010 14:40:47 +0000

symbiosis-email (2010:0914) stable; urgency=low

  * Moved config from bytemark-vhost.d to symbiosis.d
  * Moved checkpassword script to dovecot_checkpassword
  * Added manpages
  * Tidied packaging
  * Updated Makefiles to check for 00-header before rebuilding the
    configuration files for exim4 and dovecot.
  * Added tests to the symbiosis-test directory

 -- Patrick J Cherry <patrick@bytemark.co.uk>  Tue, 14 Sep 2010 21:53:23 +0100

symbiosis-email (2010:0909) stable; urgency=low

  * Added in localhost rewriting
  * Fixed tests
  * Fixed vhost_aliases router to behave like vhost_forward
  * Only run our rewriter cronjob if the script is available.

 -- Steve Kemp <steve@bytemark.co.uk>  Wed, 09 Sep 2010 12:05:12 +0100

symbiosis-email (2010:0603) stable; urgency=low

  * Split dovecot config into a multiple file layout (like exim4)
  * Unified exim4 and dovecot makefiles
  * Exim4 now uses dovecot sasl for authentication.
  * Exim4 no longer delays mail following errors in forward files
  * Regex in /usr/sbin/checkpassword sanitised
  * Bytemark antispam config removed.
  * Renamed packages
  * Switched to dpkg-source 3.0 (native) format

 -- Steve Kemp <steve@bytemark.co.uk>  Thu, 03 Jun 2010 13:51:30 +0100

bytemark-vhost-email (20090707183051) stable; urgency=low

  * Fixed exim4 config to defer mail from non-bytemark antispam hosts if
    bytemark-antispam is present.

 -- Patrick J. Cherry <patrick@bytemark.co.uk>  Tue, 07 Jul 2009 18:30:52 +0100

bytemark-vhost-email (20090707175243) stable; urgency=low

  * Updated checkpassword to have a better regex

 -- Patrick J. Cherry <patrick@bytemark.co.uk>  Tue, 07 Jul 2009 17:52:44 +0100

bytemark-vhost-email (20090707161820) stable; urgency=low

  * Removed mention of the Bytemark antispam servers

 -- Steve Kemp <steve@bytemark.co.uk>  Tue, 7 Jul 2009 16:18:20 +0000

bytemark-vhost-email (20090707153244) stable; urgency=low

  * Per-Lenny vhost repository, rather than branches

 -- Steve Kemp <steve@bytemark.co.uk>  Tue, 7 Jul 2009 15:32:44 +0000

bytemark-vhost-email (20090707125946) stable; urgency=low

  * Fix login

 -- Steve Kemp <steve@bytemark.co.uk>  Tue, 7 Jul 2009 12:59:42 +0000

bytemark-vhost-email (20090522105210) stable; urgency=low

  * New release for Lenny.

 -- Steve Kemp <steve@bytemark.co.uk>  Fri, 22 May 2009 10:52:10 +0000

bytemark-vhost-email (20081117170844) stable; urgency=low

  * Install firewall blacklist patterns.

 -- Steve Kemp <steve@bytemark.co.uk>  Mon, 17 Nov 2008 17:09:08 +0000

bytemark-vhost-email (20081110153347) stable; urgency=low

  * Install a dependency upon rdoc

 -- Steve Kemp <steve@bytemark.co.uk>  Wed, 12 Nov 2008 15:22:51 +0000

bytemark-vhost-email (20081110153346) stable; urgency=low

  * Install a non-corrupt cron-job

 -- Steve Kemp <steve@bytemark.co.uk>  Tue, 11 Nov 2008 13:13:13 +0000

bytemark-vhost-email (20081110153344) stable; urgency=low

  * The Bytemark Virtual Hosting Package bytemark-vhost-email
    - Support may be found at http://vhost.bytemark.co.uk/

 -- Steve Kemp <steve@bytemark.co.uk>  Mon, 10 Nov 2008 15:33:44 +0000
