v2.5.118 – v2.5.122 — 2026-07-17

• fix(firewall): accept ICMPv6 so IPv6 is not killed on install
• fix(setup): default panel URL to port 3443 when omitted
• feat(dns): hidden-primary zone transfer (AXFR/NOTIFY, external NS, SOA) in the GUI
• fix(ui,mail): chunk-reload after update, don't spam-tag own mail, wire whitelist
• docs(dns): document hidden-primary / zone-transfer setup
• feat(dashboard): warn admins when the sender e-mail is not configured