diff --git a/.claude/HISTORY.md b/.claude/HISTORY.md
index 15759476..1602bd01 100644
--- a/.claude/HISTORY.md
+++ b/.claude/HISTORY.md
@@ -2103,3 +2103,23 @@ git checkout HEAD -- index.html
 
 **Files Modified:**
 - `secubox-app-mailserver/files/usr/sbin/mailserverctl` (create_startup_script function)
+
+### 2026-02-16: Mail Reception Fix
+
+**nftables Rules Missing:**
+- Port 25 missing from `input_wan` accept rules
+- Mail ports missing from `forward_wan` chain (blocked by `drop_to_wan`)
+- Fix: Added accept rules for ports 25, 143, 465, 587, 993 in both chains
+
+**Postfix LMDB Fix:**
+- Alpine Linux uses LMDB, not Berkeley DB hash
+- `virtual_mailbox_maps = hash:` caused "unsupported dictionary type" error
+- Fix: Changed to `lmdb:/etc/postfix/vmailbox`
+
+**vmailbox Sync:**
+- gk2@secubox.in was missing from vmailbox file
+- Added user and rebuilt postmap
+
+**Files Modified:**
+- `secubox-app-mailserver/files/usr/sbin/mailserverctl`
+- UCI firewall rules persisted for mail port forwarding
diff --git a/.claude/WIP.md b/.claude/WIP.md
index 579cfbc7..98999401 100644
--- a/.claude/WIP.md
+++ b/.claude/WIP.md
@@ -542,7 +542,7 @@ _Last updated: 2026-02-16 (DNS Master app, Mailserver KISS)_
   - Fix in `users.sh`: Create `$domain/$user/Maildir/{cur,new,tmp}` structure
   - Updated vmailbox format to include `Maildir/` suffix
 
-- **Inbound Port 25 Blocked by Free ISP** — KNOWN ISSUE
+- **Inbound Port 25 Blocked by Free ISP** — RESOLVED (2026-02-16)
   - Free ISP blocks inbound port 25 on residential lines
   - Outbound mail works, inbound from external fails
   - Workaround options: VPS relay, Mailgun/SendGrid, or contact Free support
diff --git a/.claude/settings.local.json b/.claude/settings.local.json
index c84949e2..0d485b22 100644
--- a/.claude/settings.local.json
+++ b/.claude/settings.local.json
@@ -346,7 +346,9 @@
       "WebFetch(domain:bazi.gk2.secubox.in)",
       "WebFetch(domain:webmail.gk2.secubox.in)",
       "WebFetch(domain:documentation.wazuh.com)",
-      "WebFetch(domain:syswarden.io)"
+      "WebFetch(domain:syswarden.io)",
+      "Bash({)",
+      "Bash(})"
     ]
   }
 }