Issues

New issue

mailcows update script not ready for docker compose version 5.0.0
#6939 · ckruijntjens opened on Dec 3, 2025
17
Community Forum / Community Support
#3694 · patschi opened on Aug 4, 2020
Outlook/Office365/Microsoft365 and junk mails
#2851 · patschi opened on Aug 11, 2019
121

mailcow_password attribute from Keycloak is Base64-encoded and cannot be used for IMAP/SMTP authentication
mailcow/mailcow-dockerized#7503 · opened on Oct 3, 2026
Wrong IPv6 format when resolving Forwarding Hosts, WHITELISTED_FWD_HOST not applied
mailcow/mailcow-dockerized#7501 · opened on Oct 2, 2026
Quarantine, add "ban ip"
mailcow/mailcow-dockerized#7499 · opened on Oct 2, 2026
netfilter: a single non-UTF-8 log line crashes netfilter-mailcow, and the restart wipes all active and permanent bans
mailcow/mailcow-dockerized#7498 · opened on Oct 2, 2026
Feature request: per-mailbox webhook for inbound mail (next to Pushover)
mailcow/mailcow-dockerized#7497 · opened on Oct 1, 2026
Dovecot: include dovecot-gssapi to allow Kerberos (GSSAPI) authentication
mailcow/mailcow-dockerized#7496 · opened on Oct 1, 2026
[Feature Request] ntfy or Gotify additionally to pushover for push notifications
mailcow/mailcow-dockerized#7493 · opened on Sep 30, 2026
Nginx: web is open doors, high potential for vulnerabilities
mailcow/mailcow-dockerized#7491 · opened on Sep 28, 2026
2
netfilter restarts and clears all bans when F2B regex captures an IPv4 address with trailing colon
mailcow/mailcow-dockerized#7490 · opened on Sep 28, 2026
1
Quarantine silently stores nothing when Q_EXCLUDE_DOMAINS is missing (in_array TypeError in pipe.php)
mailcow/mailcow-dockerized#7489 · opened on Sep 27, 2026
Allow LDAP Authentication using samAccountName
mailcow/mailcow-dockerized#7486 · opened on Sep 26, 2026
[Rspamd] SPAMHAUS_DQS_KEY: generated "DBL" block replaces stock DBL rule — DBL URL/email checks lost, client IPs queried against DBL
mailcow/mailcow-dockerized#7485 · opened on Sep 25, 2026
2
autodiscover-json.php ignores $autodiscover_config['autodiscoverType'], so new Outlook fails even when admins chose IMAP
mailcow/mailcow-dockerized#7482 · opened on Sep 24, 2026
postfix-tlspol 1.11.0: DANE policy lookup fails when one MX target has no A/AAAA, causing client TLS configuration problem
mailcow/mailcow-dockerized#7481 · opened on Sep 24, 2026
4
Domain wide footer (MOO_FOOTER): hardcoded quoted-printable CTE and incomplete "--" prefix removal break messages
mailcow/mailcow-dockerized#7480 · opened on Sep 22, 2026
Automatically save SMTP-authenticated outgoing emails to the Sent folder
mailcow/mailcow-dockerized#7479 · opened on Sep 22, 2026
4
Option to Disable Password Changes for Email Users
mailcow/mailcow-dockerized#7478 · opened on Sep 21, 2026
force_tfa does not prevent users from removing 2FA: JSON_EXTRACT returns "1" (quoted), comparison with '1' fails
mailcow/mailcow-dockerized#7476 · opened on Sep 21, 2026
regression(2026-07b): DAV/EAS logins missing from SASL log
mailcow/mailcow-dockerized#7470 · opened on Sep 18, 2026
POSTMASTER_HANDLER prefilter unconditionally bypasses spam scoring for postmaster@ mail — no safe way to customize via local.d
mailcow/mailcow-dockerized#7469 · opened on Sep 18, 2026
5
Feature Request: Prometheus Metrics for Authenticated SMTP Activity per Mailbox
mailcow/mailcow-dockerized#7465 · opened on Sep 14, 2026
Exclude Mailcow-managed domains from newly registered domain URI checks
mailcow/mailcow-dockerized#7464 · opened on Sep 13, 2026
405 Method Not Allowed on "Download all attachments" in Bulgarian
mailcow/mailcow-dockerized#7462 · opened on Sep 11, 2026
netfilter-mailcow infinite restart loop / endlose Neustart-Schleife
mailcow/mailcow-dockerized#7461 · opened on Sep 10, 2026
1
ActiveSync: credential-less EAS request returns 403 instead of a 401 challenge, silently breaking push
mailcow/mailcow-dockerized#7458 · opened on Sep 8, 2026

Navigation Menu

Issues

Issues

mailcow_password attribute from Keycloak is Base64-encoded and cannot be used for IMAP/SMTP authentication

Wrong IPv6 format when resolving Forwarding Hosts, WHITELISTED_FWD_HOST not applied

Quarantine, add "ban ip"

netfilter: a single non-UTF-8 log line crashes netfilter-mailcow, and the restart wipes all active and permanent bans

Feature request: per-mailbox webhook for inbound mail (next to Pushover)

Dovecot: include dovecot-gssapi to allow Kerberos (GSSAPI) authentication

[Feature Request] ntfy or Gotify additionally to pushover for push notifications

Nginx: `web` is open doors, high potential for vulnerabilities

netfilter restarts and clears all bans when F2B regex captures an IPv4 address with trailing colon

Quarantine silently stores nothing when Q_EXCLUDE_DOMAINS is missing (in_array TypeError in pipe.php)

Allow LDAP Authentication using samAccountName

[Rspamd] SPAMHAUS_DQS_KEY: generated "DBL" block replaces stock DBL rule — DBL URL/email checks lost, client IPs queried against DBL

autodiscover-json.php ignores $autodiscover_config['autodiscoverType'], so new Outlook fails even when admins chose IMAP

postfix-tlspol 1.11.0: DANE policy lookup fails when one MX target has no A/AAAA, causing client TLS configuration problem

Domain wide footer (MOO_FOOTER): hardcoded quoted-printable CTE and incomplete "--" prefix removal break messages

Automatically save SMTP-authenticated outgoing emails to the Sent folder

Option to Disable Password Changes for Email Users

force_tfa does not prevent users from removing 2FA: JSON_EXTRACT returns "1" (quoted), comparison with '1' fails

regression(2026-07b): DAV/EAS logins missing from SASL log

POSTMASTER_HANDLER prefilter unconditionally bypasses spam scoring for postmaster@ mail — no safe way to customize via local.d

Feature Request: Prometheus Metrics for Authenticated SMTP Activity per Mailbox

Exclude Mailcow-managed domains from newly registered domain URI checks

405 Method Not Allowed on "Download all attachments" in Bulgarian

netfilter-mailcow infinite restart loop / endlose Neustart-Schleife

ActiveSync: credential-less EAS request returns 403 instead of a 401 challenge, silently breaking push