[oxhe-announce] Open-Xchange releases OX Abuse Shield v2.6.1

[Open-Xchange Hosting Edition Maintenance Announcements]

Dear Open-Xchange Customers and Partners,

Open-Xchange is pleased to announce the release of OX Abuse Shield v2.6.1.

OX Abuse Shield provides abuse-prevention for Web Applications (including Webmail), POP, and IMAP. It is integrated with both OX App Suite and OX Dovecot Pro to prevent login and authentication abuse as well as protecting against brute-force attacks.

The goal of OX Abuse Shield is to detect brute forcing of passwords across many servers, services and instances, as well as enforce policy for authentication and authorization. In order to support the real world, brute force detection policy can be tailored to deal with "bulk, but legitimate" users of your service, as well as botnet-wide slow-scans of passwords.

The new OX Abuse Shield v2.6.1 provides the following fix:

- The drogon HTTP framework we now use for the REST API also allows file uploads, which we don't use. Unfortunately, by default it tries to create a bunch of directories in the working directory, which is usually not writable (e.g. /etc/wforce). This fix modifies the drogon upload directory so that the warnings do not occur.
- Fix issue where webserver was not started before syncDB was kicked off, leading to syncDone failures

General Information – Please Note

- Open-Xchange encourages administrators to regularly update to the latest available release. To ensure a stable and up to date environment please note the different versions supported. An overview of the latest supported Major, Minor and Public Patch Releases can be found in the OXpedia at: https://oxpedia.org/wiki/index.php?title=OXAbuseShield:Version_Support_Commitment

Shipped packages and versions
- OX Abuse Shield v2.6.1-rev1

Complete Release Notes 

- OX Abuse Shield:
https://software.open-xchange.com/products/abuseshield/doc/OX_Abuse_Shield_Release_Notes_for_Release_2.6.1_2021-12-22.pdf

Download and Installation

For further details about OX Abuse Shield installation and configuration, mandatory and optional packages, policies, please refer to the documentation provided: https://oxpedia.org/wiki/index.php?title=AppSuite:OX_Abuse_Shield

Best regards,
Your Open-Xchange Team

-------------------------------------------------------------------------------------
Open-Xchange AG, Hohenzollernring 72, 50672 Cologne, District Court Cologne HRB 95366
Managing Board: Andreas Gauger, Carsten Dirks, Dirk Valbert, Frank Hoberg, Stephan Martin
Chairman of the Board: Bernhard Wöbker

European Office:
Open-Xchange GmbH, Olper Huette 5f, D-57462 Olpe, Germany, District Court Siegen, HRB 8718
Managing Director: Manuel Engel

US Office:
Open-Xchange. Inc., 530 Lytton Avenue, Palo Alto, CA 94301, USA
-------------------------------------------------------------------------------------