The automated check is passing again. The component is reachable.

Fixed: the internal service is running again and remains unreachable from outside – webmail and the mail administration stay locked until the security update. Mail logins and sending work again (verified). Emails deferred in the meantime are retried automatically. We are monitoring the situation.

Cause identified: while protecting against the PHP vulnerability we had switched off the mail server's web interface. Password checks for mail logins run internally through the same service; after a cache expired, logins failed from about 16:38 UTC, so confirmation and notification emails among others were not sent.

An automated availability check failed. We are investigating the incident.