* New upstream release: 20121107 - SECURITY BUGFIX: A restricted user could upload a file to a non-existent recipient in an allowed domain and afterwards redirect this file to another recipient in a forbidden domain ==> sender can bypass domain restrictions.
If you do not have restricted users you are not affected by this bug (subusers do not count as restricted users).
- fac: the admin can restrict up or download for certain users to certain IP addresses.