KeyHelp® 24.1 - Sender Rewriting Scheme, security improvements & new Pro feature

• Sender Rewriting Scheme (SRS)
  The Sender Rewriting Scheme (SRS) provides a new feature on KeyHelp servers that allows the sender of an email to be rewritten so that the Sender Policy Framework (SPF) check also works for email forwarding.
  If you have had difficulties with the delivery of forwarded emails in the past, this feature could provide a solution.
  
  This feature is now activated by default for new installations. When updating KeyHelp instances, it can be activated or deactivated at any time under the following menu item:
  
  ‘Configuration’ → ‘Email Server’ → ‘Sender Rewriting Scheme (SRS)’

• AdminerEvo
  In addition to phpMyAdmin, KeyHelp has also been offering the Adminer tool as an alternative for database administration for some time. Unfortunately, the development of the Adminer tool seems to have been discontinued. However, a new project has been created by volunteers who want to continue the idea of Adminer. This project is called AdminerEvo. With version 24.1, KeyHelp now offers this project as a further option for database administration.
  If no further development of Adminer is carried out, Adminer in KeyHelp will be completely replaced by AdminerEvo in the future.
  
  To change the database administration software used on your server, navigate to the settings under ‘Configuration’ → ‘Database administration’.

• Easier PHP script execution via the CLI (Pro feature)
  As part of the update to KeyHelp 24.1, a new tool has been developed that enables PHP scripts to be executed via the console without first having to determine the required PHP version.
  
  An example will be used to illustrate how it works.
  A domain is created on a server that is operated with PHP 8.3. In the following, a PHP script, which is located in the directory of this domain, should be executed via the console. The tool is called using the command ‘keyhelp-php-domain /path/to/file.php’. The tool then automatically determines which PHP version should be used to run the domain belonging to the specified file path. The tool then executes the script accordingly with the PHP 8.3 interpreter.
  
  You operate the tool via the CLI in the same way as the ‘php’ or ‘keyhelp-php[VERSION]’ executables.
  
  Examples:
  ‘keyhelp-php-domain /path/to/file.php’
  ‘keyhelp-php-domain -v’
  
  This feature is part of the KeyHelp Pro version and can only be executed on systems that are equipped with a KeyHelp Pro licence.

• Security improvements
  Various measures have been implemented to ensure the continued security of your server and its users. These include pre-selecting and presetting the preferred security-relevant settings at various points within the KeyHelp user interface. This includes increasing the length of automatically generated passwords and the minimum password length. As part of these measures, the default settings of the Fail2Ban configuration have also been tightened, and are now active by default for new installations.
  Existing KeyHelp instances can adjust their current Fail2Ban settings accordingly in the file ‘/etc/fail2ban/jail.d/keyhelp.local’ using the template files under ‘/home/keyhelp/www/keyhelp/install/templates/fail2ban/’.
  

You can find an overview of all changes in the change log at https://changelog.keyhelp.de.