Today we are tagging our fall release, version 2023-11-28. You can Read The Changelog to get all the details, including various tweaks and fixes, but I wanted to share a few highlights:
- MTA-STS and DANE: We have added preliminary support for both MTA-STS and DANE, enabling domains to publish their TLS requirements, and with DANE, secure DNS makes it much more difficult for an attacker to force a bypass of that TLS policy.
- Helper Improvements: We have introduced additional helpers to make configuration simpler for those who prefer storing configuration in text files. New helpers include the Queues Helper to help with tenants, campaigns, and queue-based throttles and the LogHooks Helper which helps simplify the configuration of Webhooks. We've also simplified the implementation of the Shaping Helper and Traffic Shaping Automation.
- Force Conformance: You can now enforce and fix certain conformance issues such as invalid line endings and lines that are too long in messages passing through KumoMTA.
- Enhanced Logging: We've added additional information to the logs regarding TLS deliveries, and also made it easier to apply templating to log formats using minijinja, including filters for dealing with dates and times and pluralization..
With this release, we've removed RHEL 7 support from our pre-built package repos due to the lack of modern TLS/SSL support needed for MTA-STS and DANE. We continue to provide pre-built repos for Rocky, Ubuntu 20, and Ubuntu 22, as well as our Docker image.
We look forward to hearing from you about your testing of this new release and what you'd like to see in our next release!