v2.4.140 – v2.4.145 — 2026-07-01

• fix: DNS check uses the same target values as mail security + verifies the DKIM key for real
• fix: nginx http2 deprecation warnings (version-safe Debian 12 + 13)
• feat: SRS (Sender Rewriting Scheme) — generic, opt-in feature per server
• feat: SRS bounce acceptance — decoded return mails reach the sender
• fix: catch-all no longer shadows mailboxes + SRS in mail settings
• fix: SRS bounce acceptance in smtpd_relay_restrictions too