Update instructions

Follow these instructions if you are updating an existing installation.

Mox now starts as root to bind to network sockets, then starts a less privileged process to run mox. Update the mox systemd service file and restart, as root:

# update mox binary to v0.0.2
./mox config printservice >mox.service
systemctl daemon-reload
journalctl -f -u mox &
systemctl restart mox
# If you configured backups, keep in mind files are now owned by
# mox:root, your backup tools need access to the files.

Changes

• Start up as root, bind network sockets, then drop privileges to a process as user mox to do the actual work. Makes it easier to run mox on BSDs, and paves the way for future privilege separation work.

• Add a webserver, with support for reverse proxying, serving static files, configurable redirects. With ACME of course. Takes away need to configure mox behind an existing webserver/reverse proxy, greatly simplifying configuration/operation.

• Add docker images and script to build images.

• Make it possible to run mox behind an existing webserver/reverse proxy too. Also add quickstart flag to make it easier to generate a config file for this case.

• Quickstart improvements: Add flag to generate a config for a specified host name (instead of guessing). If we found public IPs, check them with popular DNS blocklists and warn user if they are listed.

• Add encrypted cid to SMTP error response lines, for easier debugging.

• Fix importing of junk messages that the junk filter cannot parse.

• Fix bug verifying SPF. For IP lookups (e.g. for mechanism "a"), we would only look up with the same address family as the incoming connection. If there was no record, we counted a void lookup. This could lead to incorrect SPF failures, we reached the void lookup limit when we shouldn't. If the record exists for another address family (a vs aaaa), we shouldn't count a void lookup.

• Fix reputation learning of messages that were initially delivered to the Rejects mailbox and then moved out. If you marked them as junk or nonjunk (e.g. by moving to Archive or Junk), we should use the message for reputation calculation of new incoming messages, but we weren't.

• Lots of smaller improvements, bug fixes.

Thanks for reporting issues: mteege, hismailbulut, belst, idnovic, Jens, the-solipsist, pexarkh, sherief, gedw99, agucova, lormayna, and everyone I forgot. Thanks for all your feedback, discussions, suggestions! It shaped these changes, and changes to come.

Download

See https://github.com/mjl-/mox#download