SecurityGateway 12.0.3 has been released!
-
SecurityGateway 12.0.3 is now available! It can be downloaded from https://mdaemon.com/pages/downloads-security-gateway-free-trial.
SecurityGateway 12.0.3 2026-06-09
CHANGES AND NEW FEATURES
- [26248] Administrative quarantine report settings can now be customized for each domain. The new Administrative Quarantine Configuration page supports independent domain overrides.
FIXES
- [29430] Fixed SMTP EmergencyCutoff leaving partial message and lock files in the inbound queue when a DATA transfer is aborted, which could cause those files to be moved to Crashdumps\InboundQueue on service restart.
- [29475] Fixed a race condition that caused outbound delivery to stall permanently after extended uptime. When a send thread exited before its handle was registered, the handle leaked into the tracked count. Once the count reached the SendThreadPool limit (default 30), no new outbound threads could be started and mail queued until the service was restarted.
- [29472] Fixed the "Forgot Password" link on the login screen throwing an exception and failing to send the password reset email.
- [29489] Fixed a crash caused by a data race when multiple threads write global settings concurrently on a system using an external Firebird database. The Firebird event callback and the global settings update paths now acquire dedicated pool connections instead of sharing the engine's database connection across threads.
- [29458] Fixed long-lived pooled database connections not recovering automatically when SecurityGateway is temporarily unable to communicate with an external Firebird database.
- [29522] Fixed a race condition that could crash the engine when two admin sessions simultaneously saved settings. The server-scoped settings cache incorrectly held a shared lock while performing exclusive write operations, allowing concurrent threads to corrupt the map and cause an access violation. Also fixed: Firebird event registration is now skipped at startup when not using an external Firebird database.
- [29507] Fixed the # (number) wildcard not working on the IP blocklist and allowlist. Patterns like #.#.#.# now correctly match IP addresses with multi-digit octets.
- [29529] Fixed SMTP Call Forward Verification transcripts not appearing in the inbound session log. The SMTP conversation between SecurityGateway and the remote mail server during recipient verification is now included in the log transcript.
- [29533] Fixed domain-specific DKIM Signing configuration changes saving to the global settings instead of the selected domain, which could enable global DKIM Signing and leave the domain set to use the global configuration after reload.
- [29536] Fixed RMail suffix appending corrupting email headers and dropping recipients when display names contain Japanese or other non-ASCII characters encoded with RFC 2047. Also improved handling of malformed headers with unquoted display names containing commas.
Please login to reply to this topic!