- Fix maildrop writing bug. snowbox would not insert a blank line after each mail, making the maildrop unparsable. All remaining mails would be interpreted as one single mail. This bug only occured if a partial maildrop was written and never if all mails were deleted immediately by the client.
- Added systemd unit file (Installed by default)
- Added apparmor profile (not installed by default, provided as usr.sbin.snowbox in the archive)
Rebuilding the binary packages because of a security issue in go, https://groups.google.com/forum/#!msg/golang-announce/MEATuOi_ei4/JsndUuZwEAAJ. You should rebuild the source package, if you're using that.
- Binary package rebuilt with go 1.5.3
- Debian package rebuilt with go 1.5.3 and for Jessie
- Support passwords with spaces. The previous argument parser would not allow this.
- Loglevel for failed login is now 1 (default loglevel).
- An authenticated user could make Go confuzzled and crash the server via the TOP command. Requesting a message higher the the max number of messages would lead to an out-of-bound array access.
- Use fcntl() in addition to flock() for MTAs that do not support the later.
- Use go's ConstantTimeCompare() in the login code.
Rewrite in Go. Initial release. Adds support for
- Stand-alone daemon without need for inetd
Snowbox Perl: 1.0.1 (2010-05-20)
Snowbox and local mail clients on the server didn't always play together very well. If you for example used mutt on the server directly it would change the message headers writing it's status information directly into the maildrop. This in turn changed the UID of the message which confuzzled mail clients and they downloaded the message as new. This little fix computes the message's UID based on the message ID with the first message line as a fallback. Both should be unique under all circumstances I can think of.
The automatic connection close timeout has been lowered from 5 minutes to 1 minute.
The login code now delays its answer randomly to avoid “timing attacks” which could be used to find out if a given user account exists on the server. Useful or not? I don't know, but hey it's just 6 lines of code so why not.
Snowbox Perl: 1.0 (2008-07-25)
Whoa, wait a minute! One point zero?!
The following things have been changed:
- A disconnect timer has been added. Snowbox now exits automatically after it hasn't been sent any data within 5 minutes. Normally I thought a client that got disconnect by losing the connection would automatically cause inetd to terminate the process, but it seems I was wrong.
- The CAPA command from POP3 optional commands RFC, advertising TOP, USER, UIDL and EXPIRE NEVER has been added. Not a big deal, but, well… it does increase the feature list!
Snowbox Perl: 0.9.4 (2005-02-11)
- fixed a typo in a syslog debug output. (Thanks Wolfram Riedel)
- Added the TOP command. (Patch by Nikita V. Borodikhin)
Snowbox Perl: 0.9.3 (2004-11-01)
Fixed a problem where snowbox attempted load a wrong maildrop when using the custom maildrop configuration option. Example:
user0 passwd /custom/path real_user user1 passwd /path/to/maildrop user2 passwd
In this case snowbox would have attempted to load "/path/to/maildrop" when user2 logs in, but not "/custom/path" when user1 logs in.
Please note that user2 still didn't get user1's mails in this case, because the process already switched the user ID and therefore couldn't read the foreign maildrop. Also fixed needless writing of the maildrop so biff doesn't claim that you have new while if there is not.
Snowbox Perl: 0.9.2 (2004-09-13)
- Logins are a bit faster. Leave a while() loop as soon as we have a valid login and don't cycle through all available users.
- You can now define a custom maildrop for each user to read the mails from. For detailed descriptions on how to do it see the manpage.
- I've reorganized the docs a bit. The install web page was removed and the manpage greatly improved. All authoritive documentation is now bundled with the program.
- Slight problem with mailbox locking was fixed. If a mailbox is already locked snowbox now exits immediately instead of waiting for the lock to be released.
Snowbox Perl: 0.9.1 (2004-05-29)
Fixed an RFC compliance bug. Snowbox would not pad multiple lines that only contained a dot correctly. Example: A mail containing this sequence
would end up being sent as:
Snowbox Perl: 0.9 (2004-05-14)
Probably not much to say as this is the first release. But if you insist on a list of changes from the previous non-existent version:
- Wrote a POP3 server.