🚀 EFA-NG 5.0.0-12 is now available!

Release Date: 2026-08-17
Platform: CentOS Stream 10 / EL10 / EL9 (PHP 8.3+, Postfix, MailScanner 5, MailWatch-NG)

CentOS Stream 10 / EL10 Support: Full support for building and running on Enterprise Linux 10 with GCC 14, modern RPM 4.20, and Linux kernel 6.12+.
MailScanner 5.5.3-2: Upgraded MailScanner to the latest upstream release (5.5.3-2) with updated antivirus definitions autoupdaters (f-prot-6-autoupdate, kse-autoupdate).
MailWatch-NG Fork (1.2.27-efa1): Created dedicated fork repository kit400/MailWatch-NG natively incorporating all eFa branding, relay services (postfix_relay, milter_relay), Greylisting navigation, and Perl integration modules (MailWatchConf.pm), replacing brittle spec-level sed patches.
SELinux Module (eFa10.te): Created EL10 SELinux module tailored for modern distributions (removed obsolete ntpd_t, granted proper runtime directory permissions for greylist_milter_t and httpd_sys_script_t).

Postfix LMDB Migration: Switched all Postfix lookup tables (transport, virtual, helo_access, sender_access, recipient_access, sender_canonical, recipient_canonical, aliases) and TLS session caches from deprecated Berkeley DB (hash:, btree:) to high-performance lmdb:.
MailWatch & PHP Session Timeout: Configured global SESSION_TIMEOUT in MailWatch and PHP session parameters (session.gc_maxlifetime, session.cookie_lifetime) to 3 days (259,200 seconds) and removed the legacy 99,999-second upper bound.
Group & Spool Permissions: Added user postfix to mtagroup and set 0775 permissions on MailScanner queue spools (milterin, milterout, quarantine, incoming) to ensure reliable end-of-data milter transactions.
Systemd Unit Modernization:
- sqlgrey.service: Configured User=sqlgrey, Group=sqlgrey, and RuntimeDirectory=sqlgrey so runtime PID files are managed and cleaned up without permission issues.
- msmilter.service: Updated startup dependencies and permissions.

eFaInit Web Wizard:
- Netmask Validator: Added support for dotted-decimal netmasks (e.g. 255.255.255.224) alongside CIDR prefix lengths.
- CLI Username Validator: Replaced brittle sudo cat /etc/passwd process spawning with native PHP user lookups and system account collision guards.
- MariaDB Initialization (configuredo1): Made database creation, table migrations, and SQL user grants fully idempotent for MariaDB 10.11+.
- Razor Registration (configuredo7): Added error handling and timeouts around razor-admin Cloudmark registration.
- Cyrus SASL Configuration (configuredo12): Unified /etc/sasldb2 and /etc/sasl2/sasldb2 paths.
- SSH Hostkey Generation: Removed obsolete DSA key generation for modern OpenSSH.

To install or update to this release on your CentOS Stream 10 / EL10 server, execute:

curl -sSL https://raw.githubusercontent.com/kit400/EFA-NG/main/build/build.bash | bash