Feature release - one admin panel now manages the rules of several Zimbra MTA servers, with message-count limits and message history shared between them.

New features

Multi-server installations: a new msh-zr-node service runs next to the milter on every MTA server and receives the rules from the web app over HTTPS. 🔗
Servers page: lists every server with its state, version, milter status and last contact. Servers are added with their token, and their certificate is pinned. 🔗
Shared message-count limits: Message count based on sender, Message count based on recipient and the autoreply loop protection count the messages of all servers together. 🔗
Message History of every server: shows the processed messages of all servers, merged newest first. 🔗

Improvements

Rules Tester: External script conditions always use the simulated results from the Scripts tab, scripts are never run on the server. 🔗
Templates and attachments in use: cannot be removed while a rule uses them, and the rules using them are listed. 🔗
Faster directory sync: a sync writes only the users and groups that changed, and sends nothing to the servers when the directory is unchanged. 🔗

Fixes

Exact message-count limits: two messages checked at the same moment could let one message too many through.
Settings read as a whole: the milter never sees a half-updated rule, and keeps its current settings when reading fails.

Feature release - look inside archives and catch password protected ones, run your own scripts as conditions, convert the message format, switch rules processing off and on, and back up and restore the whole installation.

New features

Archive content condition: looks inside ZIP, 7z, RAR and TAR attachments, nested archives included, and matches on the names or types of the files they hold - for example executables hidden in an archive. 🔗
Attachment encrypted condition: matches messages carrying a password protected ZIP, 7z or RAR archive, the usual way to get malware past antivirus scanning. 🔗
External script condition: runs your own script from the scripts directory and matches on its exit code or output. The result is available to the actions of the same message as {script_output:name} and {script_exit_code:name}. 🔗
Encrypted and Signed message types: the Message type condition can now match S/MIME and PGP/MIME signed or encrypted messages, to block, quarantine or report them. 🔗
Change message format action: converts the message body between plain text and Html - styled Html from text mail, or clean text from Html mail - with attachments kept. 🔗
Rules Processing page: switches all rules, or the rules of one type, off and on without touching the rules themselves, optionally until a set time, with the reason shown to every administrator. 🔗
Backup & Restore page: exports the installation into a zip and imports it back, into the same installation or another one, section by section. 🔗

Improvements

Rules Tester: sends signed and encrypted test messages without any keys, carries the real attachment content up to 10 MB, sends Text messages as plain text, simulates External script results, and follows the Rules Processing switches. Address fields accept "Last, First" names and lists pasted from Outlook. 🔗
Safer Run executable: the action runs only programs from the scripts directory, without a shell and with a cleaned environment, stops them after 60 seconds and caps how many run at once. Message details are passed in MSH_* environment variables. 🔗
Duplicates protection ignores variables: a reply that quotes the disclaimer is recognised even when the template holds variables such as {company}. 🔗

Maintenance release - reply separator settings now reach the milter, license problems are visible from every page, and signatures handle user photos better.

Improvements

Signature Position settings now take effect: reply separators edited on the Signature Position page were saved but never used. They are now picked up within about a minute, with no restart. An installation that edited them on an earlier 1.0 version will see those edits applied for the first time after upgrading. 🔗
Signatures placed correctly in Outlook replies: a signature now lands above the quoted message in replies sent from Outlook. 🔗
License status shown in the navigation: the License entry carries a badge when the key does not validate, expires within two weeks, or covers fewer mailboxes than are synced, with the reason in its tooltip - so a licensing problem is visible from every page. 🔗
Messages passed without a license are logged: a message let through untouched because of a licensing problem now appears in Events History with the reason, instead of leaving no trace. Memory used for those messages is also released properly. 🔗
Domains page counts corrected: users and groups of a domain nested inside another domain are no longer counted against the parent as well. 🔗
Photos found for more users: an account whose photo is stored in the directory as thumbnailPhoto, rather than jpegPhoto, now shows it in signatures. 🔗
Cleaner signatures for users without a photo: a signature built in the wizard no longer leaves an empty image behind when the user has no photo. 🔗

Maintenance release - the Zimbra directory sync imports only real mailboxes and per-mailbox licenses are checked against that count.

Improvements

Directory sync imports only real mailboxes: active and locked accounts are synced; closed, maintenance, pending and locked-out accounts are left out. 🔗
Internal Zimbra accounts excluded: admin, galsync, spam, ham and virus quarantine accounts no longer appear in the user list.
Calendar resources excluded: meeting rooms and equipment no longer appear in the user list.
Per-mailbox license check: the License page shows how many mailboxes are synced and how many the key covers; the key is re-checked automatically when the count changes. 🔗
Directory Service bind account: the sync now requires Zimbra's own LDAP account instead of the read-only zmpostfix account - update the connection settings after upgrading. 🔗

First release of the new MSH Zimbra Rules generation - user signatures, disclaimers, autoresponders and policy rules for Zimbra Collaboration Suite, managed from a web administrator panel.

New features

Web administrator panel: browser-based administration running on the Zimbra server - no desktop application to install.
Policy rules engine: block, modify, or reroute messages with around 19 actions, including attachment stripping and compression, header manipulation, and forwarding. 🔗
Signature rules: personalized user signatures with LDAP variables taken from the Zimbra directory, such as {firstName}, {jobTitle}, and {mail}. 🔗
Disclaimer rules: top or bottom disclaimers with duplicate protection, so the text is not stacked repeatedly through reply threads. 🔗
Autoresponder rules: automatic replies with loop protection and scheduling. 🔗
Message events history: review a log of all processed messages and applied rules. 🔗
Rules tester: simulate mail flow and verify rule behaviour without sending real emails. 🔗
Multi-domain administration: manage rules and settings for multiple Zimbra domains from one panel. 🔗
Access control: restrict administrator panel access with authentication. 🔗
Zimbra directory integration: load users, groups, and domains from the Zimbra LDAP directory for use in rules and templates. 🔗

MSH Zimbra Rules Release History

v1.2.0 - Multiple Mail Servers from One Admin Panel

New features

Improvements

Fixes

v1.1.0 - Archive Inspection, External Scripts and Backup & Restore

New features

Improvements

v1.0.2 - Signature Placement and License Visibility

Improvements

v1.0.1 - Mailbox Sync and Licensing Improvements

Improvements

v1.0.0 - First Release of the New Generation

New features