v2.4.110 – v2.4.125 — 2026-06-30
- fix: ProFTPD AuthUserFile — authenticate virtual FTP accounts
- fix: mail setup self-heal on agent start + submission enable bug
- fix: set Dovecot LMTP auth_username_format correctly (incoming mail)
- fix: set LMTP username format in provisioning too (fresh install)
- fix: audit findings — panel vhost socket, Dovecot listen, unbound package
- fix: startup self-heal for PowerDNS + Apache backend
- fix: greylisting via rspamd instead of the dead postgrey toggle
- fix: remaining audit items — packages + comment-safe scans
- feat: mail storage counts towards webspace disk usage
- feat: mail distribution — forwarding to multiple recipients (open)
- feat: forwarder/distribution — full CRUD (edit) + description in the UI
- fix: WP toolkit detail reads with timeout (wpCLIShort)
- fix: enforce perm_manage_dns on ALL customer DNS endpoints
- feat: distribution lists — closed lists (only authorized senders, spam protection)
- fix: webmail link doesn't open + SSO auto-login (Roundcube under /webmail)
- fix: webmail SSO hangs (CSP blocks inline script) + mobile auto-login
- fix: SSL issuance reports errors clearly instead of a silent "OK" + domain labels