SecurityGateway 12.5.1 has been released! | MDaemon Technologies Community Forum
  1. Forum
  2. Security Gateway
  3. SecurityGateway 12.5.1 has been released!

SecurityGateway 12.5.1 has been released!

  • A

    SecurityGateway 12.5.1 is now available! It can be downloaded from https://mdaemon.com/pages/downloads-security-gateway-free-trial.

    SecurityGateway 12.5.1 - 2026-09-01

    SPECIAL CONSIDERATIONS

    • [29961] Some features are now specific to the Service Provider Edition.

      Service Provider Edition features are available with SecurityGateway for MSPs licensing (https://mdaemon.com/pages/security-gateway-msp). Release note entries for these features are prefixed with "(Service Provider Edition)".

    CHANGES AND NEW FEATURES

    • [29863] Added support for OpenAI GPT-5.6 models with configurable thinking levels.
    • [29920] Updated ClamAV to version 1.4.6.
    • [29931] Added the SG-On-Behalf-Of request header to the API. A global administrator API key can run a request as another user, identified by email address or user ID, so an integration acting for a customer is subject to that customer's permissions and provisioning limits instead of the key's full administrative access.
    • [29945] Global administrators are now emailed, and a warning is shown on the dashboard, when a server using an external Firebird database is not receiving database notification events. Previously this was recorded only in the system log, so a server could stop receiving configuration changes made elsewhere in the cluster without anyone noticing. The alert names the affected server and the database error, and states that mail flow is not affected. A new setting, FirebirdEventAlertIntervalHours, sets the minimum hours between these emails (default 24); 0 disables the email while leaving the dashboard warning in place.
    • [29950] Updated the UnRAR library used for RAR archive extraction to version 7.23.
    • [29821] Custom interface themes are now picked up automatically. A CSS file placed in Templates\StyleSheets\themes is added to the theme list without restarting SecurityGateway.
    • [29822] The global header and navigation bar now follow the selected theme. Themes can set the header background, text, and hover colors, and can apply a filter to the logo.
    • [29853] (Service Provider Edition) Global administrators can now mark a domain administrator as protected, from Setup / Users > Accounts > Administrators. A protected domain administrator can only be managed, or removed from a domain, by a global administrator.
    • [29854] (Service Provider Edition) New domains created by a domain administrator with the Can Create Domains permission inherit the protected administrators and customer ID (API only) from the creator's home domain.
    • [29855] (Service Provider Edition) Global administrators can now suspend or reactivate a domain from the domain edit dialog or REST API. Suspended domains reject inbound mail and block users and domain administrators from signing in, authenticating via SMTP, and using their API keys, while retaining the domain's data and settings.

    FIXES

    • [29978] Fixed configuration backup may fail with duplicate value in "UNQ_USERS_UUID" on servers with a large number of user accounts. The unique account and domain identifiers were being truncated as they were written into the backup, which could make two accounts collide and abort the backup. The identifiers are now copied intact.
    • [29954] Fixed connections from an address listed under Logging > Configure Logging > "Do not log SMTP or HTTP connections from these IP addresses" still creating an All Messages record when the session completed a normal SMTP handshake without sending mail. Load balancer SMTP health checks from a listed address no longer appear in the message log.
    • [29895] Fixed outbound messages being bounced with "Domain does not exist" when a DNS server returned a temporary failure. Temporary DNS failures are now retried and logged as such, while a domain that definitively does not resolve now fails immediately.
    • [29932] Fixed outbound delivery attempting to use the recipient domain's address records after a temporary MX lookup failure. These messages now remain queued for retry instead of potentially bypassing the domain's published mail exchangers.
    • [29893] Improved reliability when SecurityGateway uses an external Firebird database. An isolated connection error no longer forces all database connections to reconnect, and routine connection rotation is staggered to avoid simultaneous reconnects.
    • [29944] Fixed recurring "Error writing data to the connection" database errors on servers using an external Firebird database. Registering with the database server for notification events could leave the connection it was issued on unusable, and because that registration failure was never reported, SecurityGateway could stop receiving those notifications with no indication that anything was wrong. In a cluster this meant configuration changes made on one server might not take effect on the others until they were restarted. Notification events now use a dedicated database connection, so a failure can no longer affect any other database work, and the failure is now reported in the system log.
    • [29949] Fixed excessive CPU usage and system log growth while an external Firebird database was temporarily unavailable. Threads waiting for a database connection now wait quietly for recovery or their normal timeout instead of retrying continuously.
    • [29912] Fixed the "Manage Preferences" link in the user quarantine report sending users to an administrator-only configuration page, which resulted in an "Access Denied" error after logging in. The link now opens the user's own My Account > Settings page, where quarantine report preferences are managed.
    • [29925] Fixed the language chosen on the My Account > Settings page having no effect.
    • [29946] Fixed alert emails to global administrators stopping at the first administrator the message could not be delivered to, so no administrator listed after that one was notified. Every global administrator with an email address is now sent the alert, and an address that cannot be reached is reported in the system log. This affected all administrator alerts, including low disk space, failed database backups, expiring SSL certificates, and archive queue warnings.
    • [29860] Fixed failed Active Directory or LDAP credential checks retaining network ports, which could eventually stop mail processing.
    • [29850] Added complete domain details, including Max Users, to administrator API responses.
    • [29815] Fixed a database cleanup issue that could cause SecurityGateway to stop responding.
    • [29823][29824] Fixed cluster nodes displaying an incorrect HTTPS redirect setting or starting with a default instead of the primary node's configured HTTP settings.
    • [29864] Fixed Location Screening rejecting mail from a country set to "Block except SMTP, disable authentication" when every country in that continent was blocked. The connection is now also recorded in the log with the country or continent that matched, so a rejection can be traced to the rule that caused it.
    • [29873] Fixed database update conflicts that could delay outbound message delivery when multiple delivery threads or cluster nodes processed messages for the same destination.

    --
    Arron Caruth
Please login to reply to this topic!

Participants