Cyber Security News

Stalwart – All-in-One Open-Source Secure Mail Server with JMAP, IMAP4, POP3, and SMTP

Stalwart is an innovative open-source mail server solution that supports JMAP, IMAP4, POP3, and SMTP, offering a comprehensive suite of features designed for security, performance, and scalability.

Built with Rust, Stalwart stands out for its modern architecture that emphasizes safety and speed, making it an ideal choice for both individual users and enterprises.

Features

1. JMAP, IMAP4, POP3, and ManageSieve Server

  • JMAP Server: Includes Sieve Scripts for filtering, WebSocket support for real-time updates, Blob Management for handling large attachments, and Quotas for resource management.
  • IMAP4 Support: Offers compatibility with both IMAP4rev1 and IMAP4rev2, supporting numerous extensions to enhance functionality.
  • POP3 Server: Implements several POP3 extensions, with STLS and SASL for secure connections.
  • ManageSieve Server: Allows users to manage their Sieve scripts effectively.

2. SMTP Server

  • Message Authentication: Built-in support for DMARC, DKIM, SPF, and ARC to enhance email security.
  • Transport Security: Strong security measures through DANE, MTA-STS, and SMTP TLS reporting.
  • Throttling and Filtering: Includes granular configuration rules, Sieve scripting, MTA hooks, and milter integration for robust message handling.
  • Distributed Virtual Queues: Supports delayed delivery, priority management, quotas, routing rules, and throttling.
  • Advanced Message Modification: Envelope rewriting and other message manipulations are easily configurable.

3. Built-in Spam and Phishing Filter

  • Comprehensive Filtering: A wide array of filtering rules comparable to leading solutions.
  • LLM-Driven Filtering: Utilizes large language models for spam filtering and message analysis.
  • Statistical Spam Classifier: Features automatic training to adapt to new spam techniques.
  • DNSBL Checks: Monitors IP addresses, domains, and hashes against DNS Blocklists.
  • Collaborative Filtering: Incorporates Pyzor for collaborative spam detection.
  • Phishing Protections: Guards against homographic URL attacks and sender spoofing.
  • Trusted Reply Tracking: Helps prioritize genuine email replies while managing sender reputations.
  • Greylisting and Spam Traps: Offers advanced mechanisms for managing unwanted emails.

4. Flexibility and Scalability

  • Pluggable Storage Backends: Supports various databases including RocksDB, FoundationDB, PostgreSQL, MySQL, SQLite, S3-Compatible, Azure, Redis, and Elasticsearch.
  • Clustering Support: Features node autodiscovery and partition-tolerant failure detection.
  • Full-text Search: Available in 17 languages for enhanced email querying.
  • Sieve Scripting: Fully extensible with support for all registered Sieve extensions.
  • Multi-tenancy: Domain and tenant isolation allows for seamless management of multiple accounts.
  • Automatic Configuration: Supports autoconfig and autodiscover for smooth account setup.

5. Security and Robustness

  • Encryption: Provides encryption at rest with S/MIME or OpenPGP.
  • TLS Certificate Management: Automatic provisioning through ACME using various challenge methods.
  • Automated Threat Response: Proactively blocks malicious IP addresses.
  • Rate Limiting: Helps prevent abuse and manage server loads.
  • Security Audits: Regularly audited for vulnerabilities.
  • Memory Safety: Built on Rust, ensuring robust memory management.

6. Authentication and Authorization

  • OpenID Connect: Offers flexible authentication options.
  • OAuth 2.0 Support: Includes various authorization flows for secure app integrations.
  • Multi-Factor Authentication: Implements 2FA-TOTP for added security.
  • Access Control: Features roles, permissions, and Access Control Lists (ACLs) to manage user access effectively.

7. Observability

  • Logging and Tracing: Integrates with OpenTelemetry for comprehensive logging and monitoring.
  • Metrics Collection: Supports Prometheus for metrics tracking.
  • Webhooks: Facilitates event-driven automation.
  • Alerts and Notifications: Configurable alerts via email and webhooks.

8. Web-Based Administration

  • User Dashboard: Provides real-time statistics and monitoring.
  • Administrative Management: Supports account, domain, group, and mailing list management.
  • SMTP Queue Management: Handles messages efficiently along with DMARC and TLS reports.
  • Configuration Management: Comprehensive controls for server settings.
  • Log Viewer: Advanced search and filtering capabilities for log analysis.
  • Self-service Portal: Allows users to manage password resets and encryption keys.

Getting Started

To install Stalwart Mail Server:

  • Linux / MacOS: Follow the instructions provided in the documentation.
  • Windows: Check the platform-specific guidelines in the documentation.
  • Docker: Utilize Docker for simplified deployment.

If you encounter issues while using Stalwart Mail Server, or if you have questions:

  • Join the discussions on GitHub, Reddit, or Discord.
  • Consider purchasing premium support from Stalwart Labs LLC for prioritized assistance.

As per a report by Github, Part of Stalwart’s development was funded through the NGI0 Entrust Fund, part of the European Commission’s Next Generation Internet program.

Stalwart is designed to meet the needs of modern email communication, offering unmatched security, flexibility, and a rich feature set.

Whether you’re a developer, a business owner, or an individual user, Stalwart provides a powerful email solution that can be tailored to your requirements. Start your journey with Stalwart today!

ANY.RUN Threat Intelligence Lookup - Extract Millions of IOC's for Interactive Malware Analysis: Try for Free

Divya

Divya is a Senior Journalist at GBhackers covering Cyber Attacks, Threats, Breaches, Vulnerabilities and other happenings in the cyber world.

Recent Posts

Hackers Use ConnectWise SkyKick Credentials to Access Microsoft 365, Halting Cloud Backups

Attackers abused compromised ConnectWise Cloud Backup credentials to access Microsoft 365 customer environments, prompting ConnectWise…

1 day ago

Anthropic’s Claude AI Uncovers Origins of NSA-Provided Cryptographic Keys After 25 Years

Anthropic says an internal Claude research model reconstructed how the National Security Agency generated seeds…

1 day ago

Critical WordPress Flaws Allow Attackers to Execute Remote Code Without Authentication

Two WordPress Core vulnerabilities can be chained to execute remote code without authentication, according to…

1 day ago

OpenBSD Kernel Flaw Dating Back 37 Years Enables Local Privilege Escalation to Root

A newly disclosed OpenBSD kernel exploitation chain combines a shared memory accounting flaw with a…

1 day ago

GhostAction Hackers Hide Credential-Stealing Malware in Fake Font Files Across 94 GitHub Repositories

GhostAction attackers have expanded their GitHub credential theft campaign with a second stage that disguises…

1 day ago

SideCopy Hackers Target Indian Organizations With ReverseRAT Malware to Steal Data

Indian authorities have warned that SideCopy hackers are targeting Indian organizations, including academic institutions, with…

1 day ago