VersionRelease Date

v2.6.3, 2024-01-30

v2.6.2, 2024-01-12

  • Revert dependent smtp package (the SMTP Smuggling fix causes failing to read message from SMTP server).
  • Improvements:
    • Log possible detailed error when asks mail server to retry delivery.

v2.6.1, 2024-01-09

  • Improvements:
    • Simplify the content in daily archiving report email.
    • spider-import:
      • New argument to explicitly specify IMAP secure connection type: --ssl and --tls.
      • Dropped argument --insecure. It uses insecure connection if neither --ssl nor --tls is given.

v2.6.0, 2023-12-08

  • RESTful API (New in v2.6.0):

    • Able to query global, per-domain and per-mailbox archiving statistics. API Document.
  • New features:

  • Improvements:

    • Support parsing email messages forwarded as Microsoft Exchange Journal Report.

      Note: Currently you have to configure Exchange to forward Journal Report to Spider directly, we will improve Spider to support periodly fetching messages from a Journal mailbox for archiving in future release.

    • Removed SQL database /opt/spider/db/participants.db. FTS document contains required info, so this database is not necessary at all.

    • Batch action support on mailbox list page (Settings -> Email Domains -> Mailboxes): Stop Archiving, Start Archiving, Delete (delete mail addresses, not archived messages).

    • Able to import emails in given time range.

      Two arguments are introduced to specify time range, it's ok to use either or both at the same time:

      • --since-time: Import messages since given datetime (in yyyy-mm-dd HH:MM:SS format).
      • --before-time: Import messages before given datetime (in yyyy-mm-dd HH:MM:SS format).
    • Able to exclude IMAP folders while importing with argument --exclude-folder. Multiple folders can be specified with multiple arguments, for example, --exclude-folder AAA --exclude-folder BBB.

  • Fixed issues:

    • Stop Archiving doesn't work if email address contains invalid char. Thanks Victor for the feedback.
    • Not auto vacuum database to reduce size. This issue was introduced in v2.5.1.
    • No notifications on web UI after clicked Reindex All button.
    • Can not view body of email messages in thread. Thanks Marcin Wisniowski for the feedback.
    • Changing the number of results per page triggers error. Thanks Marcin Wisniowski for the feedback.
    • If message was failed to parse, click Reindex or Reindex All button on web UI doesn't trigger the reindex immediately (need to restart spiderd service).

v2.5.2, 2023-10-19

  • Fixed issues:
    • Can not stop archiving for mailbox with non-ascii character in address. Thanks Victor (victorsina@) for the report.
    • Not automatically vacuum database to reduce size. This issue was introduced in v2.5.1. Thanks Victor (victorsina@) for the report.

v2.5.1, 2023-09-13

  • Fixed issues:
    • Incorrectly enable TLS for http and smtp services without ssl cert.

v2.5.0, 2023-09-06

  • New features:

  • Improvements:

    • "License" page now always shows an input field to activate license key.
    • "SMTP Events" page:
      • Drop "Subject" field (it didn't display subject in earlier versions).
      • Add links to settings pages for events:
        • "Not contain any hosted domain"
        • "Not an authorized mail server"
        • "Not secure SMTP connection"
        • "Wrong archiving address"
  • Fixed issues:

    • Can not render charts if server OS doesn't have package tzdata installed.

v2.4.2, 2023-07-17

  • Improvements:
    • Add small icons to easily clear input texts and dates in search form.
  • Fixed issues:
    • Not correctly wildcard search keyword with upper cases. Thanks Harvey (hw234 at for the report.

v2.4.1, 2023-07-15

  • Improved tooltip of search form.
  • Fixed issues:
    • Not correctly handle wildcard search keyword. Thanks Harvey (hw234 at for the report.
    • Not correctly display admin emails on page footer (Contact Webmaster).

v2.4.0, 2023-06-25

  • WARNING: A license key is now always required. Sign up to our website to get a trial license or purchase one:
  • Improvements:
    • Simplified event filters on SMTP Events page.
    • Refactored SMTP queue info on Dashboard page.
    • Add filters on Activities page.
    • Display account display name and login username while editing account profile.
    • Log more info of SMTP events.
    • spider-import:
      • It now supports importing from specified IMAP folders instead of all folders (argument --imap-folder). Multiple folders can be specified with multiple --imap-folder arguments. For example, to import emails from INBOX and Sent folders: --imap-folder INBOX --imap-folder Sent.
      • Simplified console output.
  • Fixed issues:
    • Not set strict file permission on log files (it's now 0700).
    • Not rotate web log file.
    • Not start and stop components in proper order. This may cause database access error after closed databases.
    • Several minor web UI display issues.

v2.3.0, 2023-05-22

  • NEW: Export all emails match the search pattern.
  • Disable animation while updating charts on Dashboard page.
  • Fixed issues:
    • Not elegantly shut down fts doc queue.
    • Not recheck max mailboxes after starting or stopping archiving for user.
    • Cannot export emails in some cases if attachment is an inline MIME part in plain text or html.
    • Incorrect timezone in statistic charts on Dashboard page.
    • Few other minor issues.

v2.2.0, 2023-04-28

  • Improvements:
    • Precisely search sender and recipient with full email address.
    • Display mail subject and header "Message-ID:" on "SMTP Events" page for discarded message only.
  • Fixed issues:
    • Another smtp server "Cannot start TLS: handshake failure" error.

v2.1.0, 2023-04-24

  • Improvements:
    • New "SMTP Events" page to show smtp action/reply of each smtp session.
    • Only one domain name is allowed in ssl cert.
    • New command line argument: "-debug-smtp", useful to get detailed smtp session data for troubleshooting if necessary.
    • Add few more strong secure SSL ciphers for smtp service.
    • Some other minor improvements.
  • Fixed issues:
    • spider-import panic while importing messages from IMAP server.
    • smtp server raised "Cannot start TLS: handshake failure" error.

v2.0.0, 2023-03-17

  • Improvements
    • Not collect email addresses in Delivered-To: header(s).
    • Log sender/recipients for troubleshooting when rejecting email. #904
    • Handle multiple email addresses in one X-Envelope-To: header. #936
    • Log detailed error message if failed to request ssl cert. #906
    • Use TLSv1.3 by default when requesting ssl cert.
    • Enable SQLite WAL mode by default.
  • Fixed issues
    • Can not parse email with invalid character in header field.
    • Can not parse email with incomplete attachment.
    • Invalid renewal time for newly submitted domain name used to request ssl cert.
    • Still count "Stop Archiving" mailboxes as valid one.
    • Initialize API routers before csrf middleware to avoid CSRF verification.

v1.1.0, 2022-08-09

  • Improvements
    • List all email addresses under (hosted) email domain, including mailbox stats: numbers of sent / received messages, size of sent / received messages.
    • Display latest messages when auditor selects a mailbox.
    • Auditor can now search keyword for selected mailbox.
    • Display mail subjects of messages which are stayed in smtp queue but failed to parse. This should be easier for sysadmin to decide whether or not to delete them.
    • Automate SQL structure upgrade for smtp queue.
    • Simplify JavaScript code, improve unittests, web UI.

v1.0.0, 2022-07-27

  • First stable release.