* **test:** start memcached as part of 'npm test' r=@vladikoff ([475bf23](https://github.com/mozilla/fxa-customs-server/commit/475bf23)), closes [#228](https://github.com/mozilla/fxa-customs-server/issues/228)
* **blocklist:** Fix use of setImmediate to work with node 8 (#220) r=@vladikoff ([c33a018](https://github.com/mozilla/fxa-customs-server/commit/c33a018)), closes [(#220](https://github.com/(/issues/220) [#212](https://github.com/mozilla/fxa-customs-server/issues/212)
* **node:** use node 6.12.3 (#223) r=@vladikoff ([1f4d997](https://github.com/mozilla/fxa-customs-server/commit/1f4d997))
* **sms:** Load `allowedPhoneNumbers` from memcached! ([6cc0ceb](https://github.com/mozilla/fxa-customs-server/commit/6cc0ceb))
### chore
* **sms:** Store allowed phone numbers in a Set ([17a9459](https://github.com/mozilla/fxa-customs-server/commit/17a9459))
### Features
* **sms:** Add an allow list of non-rate limited phone numbers for testing. ([7822603](https://github.com/mozilla/fxa-customs-server/commit/7822603)), closes [#217](https://github.com/mozilla/fxa-customs-server/issues/217)
* **sms:** Added tests for `change allowedPhoneNumbers` config ([35c37d5](https://github.com/mozilla/fxa-customs-server/commit/35c37d5))
### Refactor
* **isAllowed:** Add `isAllowed` to allowedIPs. ([7951772](https://github.com/mozilla/fxa-customs-server/commit/7951772))
* **grunt:** Commit new file CHANGELOG.md, not the old file CHANGELOG ([e21820c](https://github.com/mozilla/fxa-customs-server/commit/e21820c))
* **newrelic:** Dockerpush fix newrelic must be first (#215) r=@vladikoff ([bf06c0e](https://github.com/mozilla/fxa-customs-server/commit/bf06c0e)), closes [(#215](https://github.com/(/issues/215)
* **docker:** Use official node image & update to Node.js v4.8.2 (#196) r=vladikoff ([e7dd3c1](https://github.com/mozilla/fxa-customs-server/commit/e7dd3c1))
<aname="1.84.0"></a>
# 1.84.0 (2017-04-04)
### Bug Fixes
* **tests:** Correctly rate limit sms by ip address (#191), r=@rfk ([2a70689](https://github.com/mozilla/fxa-customs-server/commit/2a70689))
<aname="1.83.0"></a>
# 1.83.0 (2017-03-21)
### Bug Fixes
* **docs:** Add notes for sms (#184), r=@shane-tomlinson ([1cd55b1](https://github.com/mozilla/fxa-customs-server/commit/1cd55b1))
* **tests:** Update config and testing for sms (#189) r=vladikoff ([8fef3d1](https://github.com/mozilla/fxa-customs-server/commit/8fef3d1))
* **changelog:** Update the changelog ([c0434db](https://github.com/mozilla/fxa-customs-server/commit/c0434db))
* **docs:** add circle ci badge to README ([63f30f6](https://github.com/mozilla/fxa-customs-server/commit/63f30f6))
* **package:** Use ip-rep service client with keepalive enabled (#181) r=vladikoff ([7c2b774](https://github.com/mozilla/fxa-customs-server/commit/7c2b774))
### Features
* **docker:** add Docker support (#176) r=vladikoff,jbuck ([b0cb1fa](https://github.com/mozilla/fxa-customs-server/commit/b0cb1fa))
* **reputation:** add more (positive) logging to reputation service requests (#179), r=@vbudhram ([a521224](https://github.com/mozilla/fxa-customs-server/commit/a521224))
### Features
* **blocklist:** Add support to specify the block level for multiple blocklists (#167), r=@rfk ([14e37c3](https://github.com/mozilla/fxa-customs-server/commit/14e37c3))
<aname="0.80.0"></a>
# 0.80.0 (2017-02-16)
### Bug Fixes
* **startup:** Exit process on any startup error. (#169), r=@rfk ([7a56e8b](https://github.com/mozilla/fxa-customs-server/commit/7a56e8b))
* **retryAfter:** Round blocking periods up instead of down. (#159), r=@vbudhram ([a9f1932](https://github.com/mozilla/fxa-customs-server/commit/a9f1932))
* **test:** increase rateLimitInterval for send_violation_tests (#157), r=@vbudhram ([262c210](https://github.com/mozilla/fxa-customs-server/commit/262c210))
### Features
* **config:** Merge with existing config when writing to memcache. (#151) r=vladikoff ([a8f4d68](https://github.com/mozilla/fxa-customs-server/commit/a8f4d68))
* **ipreputation:** Use IP reputation service from /check (#152), r=@vbudhram ([4f5d781](https://github.com/mozilla/fxa-customs-server/commit/4f5d781))
* **ip_record:** Correctly total bad logins by unique email address. ([4f20fad](https://github.com/mozilla/fxa-customs-server/commit/4f20fad))
<aname="0.72.0"></a>
# 0.72.0 (2016-10-19)
### Bug Fixes
* **blocklist:** Convert date to milliseconds for file comparison (#143); r=rfk ([dfc173e](https://github.com/mozilla/fxa-customs-server/commit/dfc173e))
* **logging:** Don't attempt to log a 'msg' field. ([01d8e3d](https://github.com/mozilla/fxa-customs-server/commit/01d8e3d))
* **unblock:** Return `unblock` value for IPs on a blocklist ([fa2c306](https://github.com/mozilla/fxa-customs-server/commit/fa2c306))
### chore
* **config:** Don't set allow ALLOWED_IPS by default. (#138); r=jrgm ([9545e7d](https://github.com/mozilla/fxa-customs-server/commit/9545e7d))
* **lint:** Fix up some linty issues noticed in PR review. ([623de15](https://github.com/mozilla/fxa-customs-server/commit/623de15))
### Features
* **blocklist:** Add latest firehol sample list (#144); r=rfk ([9f23903](https://github.com/mozilla/fxa-customs-server/commit/9f23903))
* **requestChecks:** Backport "requestChecks" framework from private repo. ([5ddfcf1](https://github.com/mozilla/fxa-customs-server/commit/5ddfcf1))
<aname="0.71.0"></a>
# 0.71.0 (2016-10-05)
### Bug Fixes
* **dependencies:** update restify to 4.1.1 (#135); r=rfk ([9a7b93a](https://github.com/mozilla/fxa-customs-server/commit/9a7b93a))
* **settings:** Fix reloading of nested settings from mecmached (#133); r=vbudhram ([101062c](https://github.com/mozilla/fxa-customs-server/commit/101062c)), closes [(#133](https://github.com/(/issues/133)
* **ip:** Rate-limit all status-checking actions per IP. ([9a4eaf5](https://github.com/mozilla/fxa-customs-server/commit/9a4eaf5))
### chore
* **release:** Add changelog for v0.66.0 ([ca57b82](https://github.com/mozilla/fxa-customs-server/commit/ca57b82))
* **server:** Remove some left-over references to account lockout. (#124) r=vladikoff ([383412c](https://github.com/mozilla/fxa-customs-server/commit/383412c))
### Features
* **block:** ip record blocks trump all other conditions ([112277f](https://github.com/mozilla/fxa-customs-server/commit/112277f))
* **server:** Add uid_record and checkAuthenticated endpoint (#121) r=vladikoff,rfk ([3a254c4](https://github.com/mozilla/fxa-customs-server/commit/3a254c4))
### Refactor
* **test:** Modify test cases to use promises instead of callbacks (#123) r=vladikoff ([6fadc52](https://github.com/mozilla/fxa-customs-server/commit/6fadc52)), closes [#97](https://github.com/mozilla/fxa-customs-server/issues/97)
<aname="0.66.0"></a>
# 0.66.0 (2016-07-27)
### Bug Fixes
* **tests:** add coveralls and enforce coverage ([c236800](https://github.com/mozilla/fxa-customs-server/commit/c236800)), closes [#12](https://github.com/mozilla/fxa-customs-server/issues/12)
### Features
* **server:** Remove `badLoginLockout` config and EmailRecord.lf (loginFailure) related code. ([28343cb](https://github.com/mozilla/fxa-customs-server/commit/28343cb))
* **travis:** drop node 0.12 ([5bb758c](https://github.com/mozilla/fxa-customs-server/commit/5bb758c))
<aname="0.61.0"></a>
# 0.61.0 (2016-05-04)
### Features
* **email:** Add config option to avoid blocking certain email domains ([e578c26](https://github.com/mozilla/fxa-customs-server/commit/e578c26))
* **scripts:** added admin scripts: block-ip and customs-info ([5405ac5](https://github.com/mozilla/fxa-customs-server/commit/5405ac5))
<aname="0.60.1"></a>
## 0.60.1 (2016-04-20)
<aname="0.60.0"></a>
# 0.60.0 (2016-04-19)
### Bug Fixes
* **blocking:** Merge and now blocks all request on server-side error ([484ff0c](https://github.com/mozilla/fxa-customs-server/commit/484ff0c))
* **blocking:** Send block for all requests if memcache is down ([721dffe](https://github.com/mozilla/fxa-customs-server/commit/721dffe))
* **blocking:** Send block for all requests if memcache is down ([6955b6a](https://github.com/mozilla/fxa-customs-server/commit/6955b6a))
* **check:** Include more action names in various checks. ([a8f5892](https://github.com/mozilla/fxa-customs-server/commit/a8f5892))
* **config:** add more config to ip rate limits ([f52d913](https://github.com/mozilla/fxa-customs-server/commit/f52d913))
* **config:** update name values for ip ban ([92a0008](https://github.com/mozilla/fxa-customs-server/commit/92a0008))
* **handler:** add new config values to handler.js ([5ca3052](https://github.com/mozilla/fxa-customs-server/commit/5ca3052))
* **ip:** Be less aggressive about extending IP rate-limit duration. ([b8469d4](https://github.com/mozilla/fxa-customs-server/commit/b8469d4))
* **ip:** Don't rate-limit email sending based on IP address alone. ([6c2f892](https://github.com/mozilla/fxa-customs-server/commit/6c2f892))
* **ip:** Pass updated config params to ip_record in the ban-handling script. ([09dd129](https://github.com/mozilla/fxa-customs-server/commit/09dd129))
* **iprecord:** Fix calls to IpRecord.addBadLogin ([13c339a](https://github.com/mozilla/fxa-customs-server/commit/13c339a))
* **ips:** Add ALLOWED_IPS environment variable for config. ([4456e35](https://github.com/mozilla/fxa-customs-server/commit/4456e35))
* **lifetime:** ensure memcache lifetime is set in more places ([3c3c722](https://github.com/mozilla/fxa-customs-server/commit/3c3c722))
* **lifetime:** Ensure records are written with sufficient ttls in memcache. ([5aff49c](https://github.com/mozilla/fxa-customs-server/commit/5aff49c))
* **lock:** add ip lock test ([30f8a5d](https://github.com/mozilla/fxa-customs-server/commit/30f8a5d))
* **logins:** add docs and simplify test ([ed6790f](https://github.com/mozilla/fxa-customs-server/commit/ed6790f))
* **logins:** add test and adjust rate limit ([8d94c1c](https://github.com/mozilla/fxa-customs-server/commit/8d94c1c))
* **logins:** combine limiting for bad logins and rate ([2f0aa17](https://github.com/mozilla/fxa-customs-server/commit/2f0aa17))
* **style:** Fix some typos ([cafe245](https://github.com/mozilla/fxa-customs-server/commit/cafe245))
* **tests:** adjust config values for status check ([746e9d5](https://github.com/mozilla/fxa-customs-server/commit/746e9d5))
* **config:** fix units typo in default config ([6befc10](https://github.com/mozilla/fxa-customs-server/commit/6befc10))
### Features
* **config:** Add a badLoginLockoutIntervalSeconds configuration option. ([429eec1](https://github.com/mozilla/fxa-customs-server/commit/429eec1)), closes [#75](https://github.com/mozilla/fxa-customs-server/issues/75)
* **docs:** Include a snipped about the memcached requirement. ([2446f1a](https://github.com/mozilla/fxa-customs-server/commit/2446f1a)), closes [#77](https://github.com/mozilla/fxa-customs-server/issues/77)
# Older Versions
0.6.0
* Add more logging when handling sqs ban events - #73
0.5.0
* Block all actions for emails that are explicitly banned - #70
0.4.0
* Validation errors should return 400 errors, not 500 - #68
* Document the current blocking and rate-limiting policies - #63
0.3.0
* Add support for account lockout on excessive login attempts - #58, #60
* normalize email addresses (compare the lower case values) - #59, #62
0.2.0
* update request and restify for new qs module
* update ass version
* use npm shrinkwrap
0.1.1
* Remove redundant memcache.host and memcache.port settings
* expose all configuration settings to the environment; add option memcache.address to work with previous puppet settings
