A custom SabreDAV integration built into the panel itself, for the same reasons as building KNJ Webmail: full control and no second credential store. It was the most…
Read more →A real WAF, not a lightweight pattern-matching substitute: ModSecurity v3 as an nginx dynamic module, running the OWASP Core Rule Set. The target distribution ships no prebuilt package…
Read more →The panel needed a built-in subscriber and marketing email feature, built, tested and proven live, so that account owners can run their own lists without a separate hosted…
Read more →The ninth item off the “genuinely zero” list. The archiving feature itself was the easy part; the story here is two mail-routing bugs caught during live testing on…
Read more →The eighth item off the “genuinely zero” list, a near mirror of Spam Filtering with a different scanner, and a chance to fix a real bug the spam…
Read more →The sixth item off the “genuinely zero” list. The backup service had always written backups to local disk only, deliberately, with an off-site destination documented as a later…
Read more →The fourth item off the “genuinely zero” list. A per-mailbox quota value had existed since mail first shipped, but only as a stored number: set once at creation,…
Read more →The third item off the “genuinely zero” list. Mailbox Storage already showed per-mailbox usage but was purely a display page. A comparable panel’s Email Disk Usage tool goes…
Read more →The second item off the “genuinely zero” list. Comparable panels let a mailbox owner point Thunderbird, Outlook or a phone mail app at their account with just an…
Read more →The first item off the “genuinely zero” list, smallest first. A zone editor in a comparable panel lets an admin download a zone as a standard BIND file…
Read more →A follow-up to the previous day’s webmail DNS-shortcut work, picked up from the DNS-only comparison audit: ftp.<domain> and account and controller panel shortcuts were the next candidates, and…
Read more →The last item picked up that day: closing a gap deferred back on 2026-07-25. The roadmap and the zone service’s own notes listed webmail.<domain> as a service-discovery record…
Read more →Last item on the day’s list: a page-by-page comparison of a standard DNS-only nameserver product against our own DNS-only role, to catch anything a genuine nameserver operator would…
Read more →The last piece of the day’s plan, and deliberately a different lens from the audits that ran earlier: those covered auth, injection and authorization; this pass hunted for…
Read more →A second role-scoped audit, reviewing the whole Mail Only satellite role on its own terms: role gating, the mail-dispatch channel, every Mail Only action in the privileged install…
Read more →Every audit so far had scoped itself to “everything changed since the last one.” This one reviews the DNS Only role end to end regardless of when each…
Read more →A large window since Audit #11, covering the DNS-only role’s remaining buildout, the first-run setup wizard, two-key server linking, and the full Mail Only work. It was reviewed…
Read more →Three loose ends left from Stages 3 and 4, all the same shape: a feature that worked correctly on Main but was never wired through the provisioning runner,…
Read more →An admin on Main had no way to reach a linked satellite’s own admin area without a second login. Every satellite, DNS Only or Mail Only, is a…
Read more →Closed out the last piece of Stage 3: Service Status, both the admin page and the dashboard widget, did not know mail might be running on a linked…
Read more →