4 new check types & deeper protocol checks
2026.10.3October 16, 2026
- NewFTP / FTPS checks — connection, real login and PWD probe. Plain, AUTH TLS or implicit TLS (port 990).
- NewSFTP checks — SSH auth via password or private key, including a real directory listing.
- NewSSH Login checks — real authentication instead of a port probe. Catches fail2ban lockouts, broken PAM configs and expired keys.
- NewDNSBL checks — your mail-server IPs against Spamhaus ZEN, SpamCop, Barracuda and UCEPROTECT, with custom zone support.
- ImprovedSSL/TLS now verifies the full trust chain including intermediate certificates, with a configurable warn_days threshold (default 30).
- ImprovedDomain Expiry parses the real WHOIS expiry date and reports days remaining.
- ImprovedDNS supports record types A, AAAA, CNAME, MX, NS, TXT and SRV with expected-value matching and a custom resolver.
- ImprovedSMTP / IMAP / POP3 perform real login tests when credentials are set — without them the classic greeting/port check is kept, so existing monitors keep working.
- ImprovedHTTP body matching gained json_path mode (e.g. data.status==ok).