This Service Pack delivers the latest fixes and new features.
It consolidates every hotfix previously released to customers, addressing specific requirements and resolving known issues.
These fixes have been compiled and will be replaced by Service Pack 10 for Artica v4.50 released on October 12, 2026.
- 20261011-17: Fix: in Artica, The daily SMTP report e-mail no longer trips spam-filter rules on tiny fonts and white-on-white text, which sent it to the spam folder of some mailboxes.
- 20261011-17: Fix: in Artica Proxy, Enabling the proxy debug modes (ACLs, DNS, all sections) no longer floods the internal syslog receiver: debug lines are now kept in cache.log only.
- 20261011-17: Fix: in Artica Proxy, The proxy configuration is now rebuilt by a single engine everywhere, including after a license change, a package installation and the scheduled reconfiguration task.
- 20261011-17: Add: in Artica Proxy, Exporting the global blacklist and downloading a compressed access log no longer depend on legacy background scripts.
- 20261011-17: Fix: in Artica Reverse Proxy, The AI assistant no longer orders a Let's Encrypt certificate for a published site whose client certificate authority is missing, which used to spend the Let's Encrypt quota on a certificate that could not be attached.
- 20261011-17: Fix: in Artica Reverse Proxy, A published site that requires a client certificate is no longer served without that check when the AI assistant rebuilds or changes it while the site's client authority is missing or unreadable: the change is refused until the authority is fixed.
- 20261011-17: Fix: in Artica, On a freshly installed OpenLDAP directory, the first account can now be created from the API and the AI assistant instead of failing with "No Such Object".
- 20261011-17: Add: in Artica, The certificates center shows summary tiles (expired, root, Let's Encrypt), filters by state and type, the key type of each certificate and a warning when certificates have expired.
- 20261011-17: Fix: in Artica, The certificates center no longer renders the HTML contained in a certificate name or organization.
- 20261011-17: Fix: in Artica, The certificates center list loads faster: the web sites using the certificates are read once instead of once per certificate.
- 20261011-17: Fix: in Artica Proxy, Proxy logs are now rotated by a single engine, instead of two independent tasks that could process the same files at the same time.
- 20261011-17: Fix: in Artica, Rotated logs of the AD Agent and of the container load balancer are now copied to the configured NAS; this copy never happened before.
- 20261011-17: Fix: in Artica, Two copies to the NAS can no longer run at the same time, so one no longer disconnects the NAS share while the other is still copying.
- 20261011-17: Add: in Artica, The message window of the Postfix queue now uses a light theme, header and raw message included.
- 20261011-17: Fix: in Artica, A new or corrected translation now reaches the web console on its own within five minutes, instead of waiting for someone to rebuild the language files by hand and showing the untranslated label in the meantime.
- 20261011-17: Fix: in Artica, The AI assistant now shows its warnings before you approve a reversible change, such as removing a client certificate or requiring client certificates on a published site.
- 20261011-17: Fix: in Artica, Removing the PostgreSQL database is now refused to an administrator without the database privilege, and its button moved to the page header.
- 20261011-17: Add: in Artica, The AI assistant can now list the client certificates of the certificate center and, after your approval, issue one signed by a root of the center (its .p12 is downloaded from the console) or remove one; removing does not revoke a certificate already handed out.
- 20261011-17: Add: in Artica, The PostgreSQL status page shows the database storage as a donut in the main panel (database, other files and free space of the partition) instead of the chart in the left column.
- 20261011-17: Add: in Artica, The PostgreSQL settings panel shows the service parameters as a list and the memory settings as cards, and can return the memory settings to their automatic values.
- 20261011-17: Fix: in Artica, The PostgreSQL settings panel now shows the memory values the service really uses; it displayed 200 MB of work memory and 256 MB of planner cache whatever the actual configuration.
- 20261011-17: Fix: in Artica, Opening and saving the PostgreSQL memory settings no longer silently sets 200 MB of work memory per connection.
- 20261011-17: Fix: in Artica, Only a database administrator can now change the PostgreSQL settings.
- 20261011-17: Add: in Artica, The AI assistant now watches the memory of the Artica API service every minute, warns before its automatic restart, detects a steady memory growth and opens an incident with the memory report attached.
- 20261011-17: Add: in Artica, The AI assistant can release the reclaimable memory of the Artica API service on its own when the idle memory is the only cause, at most three times a day.
- 20261011-17: Fix: in Artica, The Artica Update screen of the system console no longer displays garbled characters next to the version number.
- 20261011-17: Fix: in Artica Reverse Proxy, Installing an nginx package from the console now checks the whole package before replacing anything, so an incomplete package can no longer leave a new binary next to the old modules.
- 20261011-17: Fix: in Artica Reverse Proxy, The "Analyze your cache" button, which reported a success without analyzing anything, has been removed.
- 20261011-17: Fix: in Artica, The AI assistant's session history no longer shows OpenLDAP accounts, network interfaces or support tickets to an administrator who is not allowed to read them.
- 20261011-17: Fix: in Artica, A password typed in the AI chat with "will be", "should be" or "sera" is now masked before it reaches the model.
- 20261011-17: Fix: in Artica, The Windows LDAP console now refuses certificates that carry the LDAP right together with another right, and its refusal messages name every right the certificate carries.
- 20261011-17: Fix: in Artica Proxy, A web category whose name contains a slash can be compiled again, and new names can no longer contain a slash or a backslash.
- 20261011-17: Add: in Artica Proxy, A new Windows console (Artica Categories Windows) manages your web categories: create, rename, delete, add or remove sites, search by pattern, move sites, import and export lists, test domains and compile; it only opens with a certificate carrying the new Web categories right, issued from the Your categories page, and official categories stay read-only.
- 20261011-17: Fix: in Artica Proxy, A Windows console certificate limited to the LDAP directory can no longer reach other parts of the API through an encoded path.
- 20261011-17: Fix: in Artica Proxy, Deleting a web category is now refused while time rules, quotas, notifications, error page rules, DNS filtering or other settings still use it, instead of leaving them pointing to a missing category.
- 20261011-17: Add: in Artica Reverse Proxy, The AI assistant can now show the client certificate (mTLS) settings of a published site and, after your approval, require a client certificate, make it optional, stop asking for it, or ban and unban a client certificate by its name; it checks the configuration really served each time and never issues client certificates, which stay in the site's client certificate window.
- 20261011-17: Fix: in Artica Reverse Proxy, Sites that trust different certificate-center authorities for their client certificates no longer share one authority file, which could make a site accept the clients of another site's authority.
- 20261011-17: Add: in Artica Proxy, The Active Directory status page shows its state as a list grouped by theme (status, NTLM processes, Kerberos) with the action buttons on each line, instead of a stack of large tiles.
- 20261011-17: Fix: in Artica Proxy, The order column of the web filtering policies no longer shows the text " " on the filter bypass line.
- 20261011-17: Add: in Artica Proxy, The error page rules list of the web filter uses the new table design: each rule shows its name and what it does, a grayed name when it is disabled, and a pager.
- 20261011-17: Add: in Artica, The AI assistant can search, create, edit and delete OpenLDAP accounts and their group memberships, always after approval; the password is typed in the approval window and never reaches the model.
- 20261011-17: Add: in Artica, A deleted OpenLDAP account can be restored within 24 hours with its password, user number and groups.
- 20261011-17: Add: in Artica, The message window of the Postfix queue was redesigned: delivery diagnostic with the reason for each recipient, size, arrival, encoding and origin, sender and recipient, MIME headers, raw queue content and delivery history, with buttons to retry, hold, release, delete or download the message as an .eml file.
- 20261011-17: Fix: in Artica, Viewing a queued message no longer runs the message content as code in the console when the message contains HTML, and the queue actions now check the administrator rights of the session.
- 20261011-17: Fix: in Artica, Changing the Postfix host name on a secondary instance now applies it to that instance instead of the main one.
- 20261011-17: Fix: in Artica Proxy, Revoked Windows console client certificates are no longer accepted again after the listener or the Artica service restarts.
- 20261011-17: Add: in Artica, The AI assistant can now report the memory and the goroutines of the Artica API service, explain what consumes its memory and how far it is from an automatic restart.
- 20261011-17: Add: in Artica, The AI assistant can release the reclaimable memory of the Artica API service after approval, at most once every five minutes.
- 20261011-17: Add: in Artica LDAP Windows console, On a read-only directory, an account can still be opened to view its details and its groups.
- 20261011-17: Add: in Artica, The AI assistant can now list the Windows console client certificates and, after your approval, revoke one, lift a revocation, remove a revoked or expired certificate or restart the Windows console listener; it checks each result and never issues certificates or handles their .p12 files, which stay on the LDAP Windows console page.
- 20261011-17: Add: in Artica, The status tiles of the Active Directory, Kea DHCP, PowerDNS, Memcached, ModSecurity, Nginx firewall, Siege and web-filtering categories pages now use the same tile design as the rest of the console.
- 20261011-17: Add: in Artica LDAP Windows console, The -help option (also -h, -? and /?) shows a full help on the options, in the language chosen with -lang.
- 20261011-17: Add: in Artica LDAP Windows console, The program and its windows now carry the Artica Web Console icon.
- 20261011-17: Fix: in Artica LDAP Windows console, A search typed with stars, such as *dupont*, now finds the same accounts as the plain text.
- 20261011-17: Fix: in Artica, The OpenLDAP member search treats a star in the searched text as a wildcard instead of looking for a literal star.
- 20261011-17: Fix: in Artica, After an update installs a new version of the REST API service, the Web Console configuration is now rebuilt automatically so new console pages work immediately.
- 20261011-17: Add: in Artica LDAP Windows console, The account list shows each account's groups instead of its job title.
- 20261011-17: Add: in Artica, The OpenLDAP member search returns the groups of each member found, in a single directory query per page.
- 20261011-17: Fix: in Artica LDAP Windows console, Clicking the red cross in the account list now asks to delete the account instead of doing nothing.
- 20261011-17: Add: in Artica, The AI assistant can attach a certificate of the certificate center to a service (web console, proxy SSL decryption ports, OpenVPN, OpenLDAP, DNSDist, RDP proxy, FTP, HotSpot, Proxy PAC, DoH proxy, web filtering error page, Nagios, repository mirror) after your approval: it reloads only that service, checks that the new certificate is really served, and puts the previous web console certificate back automatically if you do not confirm the change in time.
- 20261011-17: Fix: in Artica, The Previous and Next buttons of the LDAP Windows console now refresh every line of the account list instead of only the last one.
- 20261011-17: Add: in Artica, The LDAP Windows console can log out and forget its certificate, then import another one without being restarted.
- 20261011-17: Add: in Artica, The LDAP Windows console edits group membership in a list with a Browse button that searches the groups of the organization, instead of a text field.
- 20261011-17: Add: in Artica, The display name of a directory account can now be changed after creation, from the LDAP Windows console and the REST API.
- 20261011-17: Add: in Artica, The account list of the LDAP Windows console ends with a red cross that deletes the account after confirmation.
- 20261011-17: Add: in Artica, Every change made to the LDAP directory through the REST API, including from the LDAP Windows console, is now recorded in the administrators audit log with the certificate holder and the workstation address.
- 20261011-17: Add: in Artica Proxy, The Negotiate authenticator statistics page now shows its period selector and a refresh button in the page header instead of above the charts.
- 20261011-17: Fix: in Artica, The Enable button of the LDAP Windows console page and its revoke, restore and remove actions now work instead of doing nothing.
- 20261011-17: Fix: in Artica Proxy, Revoking, restoring or removing a certificate on the Windows console page now works instead of doing nothing.
- 20261011-17: Fix: in Artica, The LDAP Windows console page now shows certificate dates in a readable format and labels the issue date.
- 20261011-17: Fix: in Artica, A shared folder that refuses some groups on a file-sharing instance using the local LDAP server now keeps refusing the root account.
- 20261011-17: Add: in Artica, The translation server now builds the compiled language files itself, so installing a language pack no longer depends on the contents of a directory on the build machine.
- 20261011-17: Fix: in Artica, A label defined on several pages now takes its value from one explicit rule instead of the order the filesystem happened to return, and a page where the label is still in English can no longer override a page where it is translated.
- 20261011-17: Add: in Artica, The OpenLDAP cluster tab now lists the replication settings by theme (replication, server mode, client mode), each edited in its own dialog, and the saved password is no longer shown.
- 20261011-17: Add: in Artica, Parameter lists across the console now use the new tile design: each setting is its own card with a tinted icon, its value in a tag and a discreet edit button.
- 20261011-17: Add: in Artica, The OpenLDAP server parameters are now grouped by theme: network, directory, security and service.
- 20261011-17: Add: in Artica, A new LDAP Windows console page under OpenLDAP issues, downloads, revokes and removes the certificates of the LDAP Windows console, can enable its mutual TLS listener, and links to the console download.
- 20261011-17: Add: in Artica, The daily SMTP report e-mail has a clearer layout, and its list of top refused clients now shows each address with its host name, flagging addresses whose reverse DNS is missing or not confirmed.
- 20261011-17: Add: in Artica, The LDAP Windows console now follows the Windows display language (French or English, English for any other language) and accepts a -lang switch to force it.
- 20261011-17: Fix: in Artica, The French texts of the LDAP Windows console are now written with their accents.
- 20261011-17: Fix: in Artica, The DKIM private keys generated for the Artica milter signing rules are now readable by the system administrator only; keys created by earlier versions are restricted the next time the milter loads them.
- 20261010-17: Fix: in Artica, The sender challenge and its answer are now signed with the DKIM key of the Artica milter rule for the quarantine release domain (or its parent domain), so they are no longer sent unsigned on appliances that sign mail with the Artica milter.
- 20261010-17: Add: in Artica, A wizard creates a file-sharing instance and a shared folder that use the local LDAP server, and enables that server if needed.
- 20261010-17: Fix: in Artica, Members of the local LDAP directory can now sign in to file-sharing instances that use this directory.
- 20261010-17: Fix: in Artica, The LDAP Windows console now opens its windows instead of failing at startup with "a dialog box could not be displayed".
- 20261010-17: Fix: in Artica, The mail quarantine and the sender challenge no longer show as active while the Rspamd quarantine score does not let Rspamd hold any message; the console now says which setting to change.
- 20261010-17: Fix: in Artica, Installing a Service Pack no longer leaves its extracted files behind, which used about 800 MB of disk space after each update.
- 20261010-17: Fix: in Artica, A Service Pack is no longer installed when the disk does not have room for it; the update stops with a message naming the partition instead of filling the disk.
- 20261010-17: Fix: in Artica, The statistics database no longer receives two simultaneous start attempts from the monitor and the watchdog.
- 20261010-17: Fix: in Artica, When the statistics database cannot start because the disk is full, the event now says so instead of only reporting that the service did not come back.
- 20261010-17: Add: in Artica, A database whose first bytes were overwritten by another program's traffic is now detected and restored exactly, on its own, at startup and every five minutes; the web filtering rules are then rebuilt so they apply again.
- 20261010-17: Fix: in Artica, The database recovery tool can now salvage a database whose header was damaged, which it previously reported as not being a database.
- 20261010-17: Fix: in Artica, A database restored by the recovery tool is no longer left readable by every local user.
- 20261010-17: Add: in Artica, The AI assistant can now renew a Let's Encrypt certificate on its own before it expires, at most once a day per certificate, reload the web console and the reverse-proxy sites that use it, and check that the new certificate is really served.
- 20261010-17: Add: in Artica, The appliance now exposes a paginated directory search over every searchable attribute, so a remote console can find an account by e-mail address, telephone number or UID without downloading the directory.
- 20261010-17: Add: in Artica, The mutual-TLS gateway now limits a certificate to the part of the API its rights name: a directory certificate reaches the LDAP routes only, and a proxy certificate everything else.
- 20261010-17: Add: in Artica, The appliance now tells a directory client when it is a replication consumer, so a remote console refuses changes that the master would silently overwrite instead of letting them disappear.
- 20261010-17: Fix: in Artica Proxy, Issuing a Windows console certificate with no right selected is now refused, because such a certificate was granted the whole administration API.
- 20261010-17: Add: in Artica Proxy, The Windows console certificate page can now grant the LDAP directory right, which opens the Artica LDAP Windows console and cannot be combined with a proxy right.
- 20261009-17: Fix: in Artica, The sender challenge e-mail is now signed with the appliance's DKIM key, so the sender's mail provider no longer files it as spam or rejects it.
- 20261009-17: Add: in Artica, The AI assistant can now create a root authority, a server certificate signed by it or a signing request, complete that request with the signed certificate and delete an unused certificate, each change being verified and undoable, while private keys never leave the appliance.
- 20261009-17: Fix: in Artica, Settings written to an additional Postfix instance outside a full reconfiguration are now applied to that instance instead of failing silently.
- 20261009-17: Fix: in Artica, The queue count shown for an additional Postfix instance in the OAuth status is now read from the right instance.
- 20261009-17: Fix: in Artica, Deleting a Postfix instance now also removes its trusted networks and milter rules created from the console.
- 20261009-17: Fix: in Artica, The regular-expression rewriting preview now rejects an invalid pattern on recent Postfix versions instead of accepting a rule that Postfix ignores.
- 20261009-17: Fix: in Artica, A file-sharing instance that uses the local LDAP server as its members database now starts and serves files instead of restarting in a loop.
- 20261009-17: Fix: in Artica, Learned-correspondent bypasses no longer reveal the other recipients of a message in its headers.
- 20261009-17: Add: in Artica, The mail quarantine can challenge unknown senders: the sender of a clean, authenticated message receives an image code and their message is delivered as soon as they reply with it.
- 20261009-17: Add: in Artica, A sender who answers the challenge correctly becomes a legitimate correspondent of the recipient and is never challenged again.
- 20261009-17: Add: in Artica, Messages whose sender does not answer the challenge in time, or types wrong codes, move to the ordinary quarantine report instead of being lost.
- 20261009-17: Add: in Artica, A new Challenges tab in the quarantine shows open challenges and lets administrators release the messages or close a challenge.
- 20261009-17: Add: in Artica, Every sender challenge event is sent to Artica SIEM in the mail filtering stream.
- 20261009-17: Add: in Artica, The AI assistant now reads the real certificate center: inventory, expiry dates, private key consistency and which services use each certificate, without ever seeing a private key.