OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Kurt Seifried (listuserseifried.org)
Date: Sun Jan 28 2001 - 22:34:46 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Speaking of email... I've been using Postfix exclusively now for just over 2
    years. From Wietse Venema:

    Postfix snapshot 20010128 will become the first non-beta release,
    modulo bugfixes. As always, whatever code I release runs on my own
    systems.

    This version ships with a new virtual mailbox-only delivery agent,
    an updated nqmgr (new queue manager) and with an updated LMTP client
    that supports SASL authentication.

    Primary site: ftp.porcupine.org/mirrors/postfix-release/experimental

         164701 Jan 28 21:22 snapshot-20010128.HISTORY
          40910 Jan 28 21:22 snapshot-20010128.RELEASE_NOTES
        1033120 Jan 28 21:22 snapshot-20010128.tar.gz
            152 Jan 28 21:22 snapshot-20010128.tar.gz.sig

    Or point your browser at:

        ftp://ftp.porcupine.org/mirrors/postfix-release/index.html

        Wietse

    Extract from RELEASE_NOTES
    ==========================

        Incompatible changes with snapshot-20010128
        ===========================================

        REJECT in header/body_checks is now flagged as policy violation
        rather than bounce, for consistency in postmaster notifications.

        The mailbox size limit for local delivery is no longer controlled
        by the message_size_limit paramater, but by a separate parameter
        called mailbox_size_limit (default: 20MBytes).

        The default RBL (real-time blackhole lists) domain examples have
        been updated from *.vix.com to *.mail-abuse.org.

        Major changes with snapshot-20010128
        ====================================

        Updated nqmgr (experimental queue manager with clever queueing
        strategy) by Patrik Rak. This code is still new. Once it stops
        changing (for a long time!) it will become part of the non-beta
        release.

        Virtual mailbox delivery agent by Andrew McNamara. This delivery
        agent can deliver mail for any number of domains. See the file
        VIRTUAL_README for detailed examples. This code is still new. Once
        it stops changing it will become part of the non-beta release.

        Many "valid_hostname" warnings were either eliminated, and the rest
        was replaced by something more informative.

        SASL support (RFC 2554) for the LMTP delivery agent. This is required
        by recent Cyrus implementations when delivering mail over TCP
        sockets. The LMTP_README file has been updated but still contains
        some obsolete information.

        Workarounds for non-standard RFC 2554 (AUTH command) implementations.
        Specify "broken_sasl_auth_clients = yes" to enable SMTP server
        support for old Microsoft client applications. The Postfix SMTP
        client supports non-standard RFC 2554 servers by default.

    Change log since the 20001217 snapshot release
    ==============================================

    20001218

    Bugfix: the MYSQL client did not provide function pointers
    for unimplemented operations, causing "postmap -d" to dump
    core instead if issuing an error message. This is what I
    get for accepting code that I cannot test myself.

    20001221

    Code cleanup: configuration parameters that are $name
    expanded at run-time now have their own data type hierarchy
    instead of being piggy-backed on top of strings that are
    $name expanded at program initialization time. Files:
    global/mail_conf.h, global/mail_conf_raw.c, and code that
    calls it.

    20001230

    Update: replaced the default rbl.maps.vix.com setting by
    the current blackholes.mail-abuse.org.

    20010102

    Code cleanup: the queue manager is a bit greedier with
    allocating a delivery agent. Problem pointed out by Patrik
    Rak. All bugs in the solution are mine. Files:
    *qmgr/qmgr_active.c.

    20010105

    Bugfix: the FILTER_README shell script example did not
    correctly pass exit status to the parent.

    Bugfix: soft errors in client hostname lookups would be
    treated as hard errors. Fix by Michael Herrmann
    (informatik.tu-muenchen.de). File: smtpd/smtpd_peer.c.

    20010110

    Bugfix: the mkdir() EEXIST race condition workaround was
    not complete. Matthias Andree, Daniel Roesen. Files:
    global/mail_queue.c, util/make_dirs.c.

    20010111

    Portability: IRIX 6.5.10 defines sa_len as a macro, causing
    a name collision with a variable used by Postfix. Roberto
    Totaro, enigma.ethz.ch. File: smtpstone/smtp-source.c.

    20010116

    Bugfix: REJECT by header/body_checks was flagged in smtpd
    as a bounce, should be policy, in order to make postmaster
    notifications more consistent. File: smtpd/smtpd.c.

    Merged updated chroot setup procedure by Matthias Andree.
    Files: examples/chroot-setup/LINUX2.

    20010117

    Formatting: changed the seconds and days formats in the
    "your mail is delayed" text so that it does not switch to
    scientific notation. File: bounce/bounce_notify_util.c.

    20010119

    Feature: SASL support for the LMTP client. Recent CYRUS
    software requires this for Postfix over TCP sockets.

    20010120

    Bugfix: the 20001005 revised fallback_relay support caused
    Postfix to send mail to the fallback even when the local
    machine was an MX host for the final destination. Result:
    mailer loop. Found by Laurent Wacrenier (teaser.fr). Files:
    smtp/smtp_connect.c, smtp/smtp_addr.c.

    20010121

    Workaround: specify "broken_sasl_auth_clients = yes" in
    order to support old Microsoft clients that implement
    a non-standard version of RFC 2554 (AUTH command).

    Workaround: Lotus Domino 5.0.4 violates RFC 2554 and replies
    to EHLO with AUTH=LOGIN. File: smtp/smtp_proto.c.

    20010125

    Code cleanup: wrote creator/destructor for dictionary
    objects that provides default methods that trap all attempts
    to perform an unimplemented operation. Based on an ansatz
    by Laurent Wacrenier (teaser.fr). Files: util/dict*.[hc].

    Code cleanup: INSTALL.sh does not ask questions when stdin
    is not connected to a tty (as in: make install</dev/null).
    To automate a customized install, the script imports
    environment variables for install_root etc.

    20010127

    Workaround: randomize the delay between attempts to lock
    a file, so that multiple bounce or defer servers are less
    likely to retry all at the same time. likely. File:
    util/rand_sleep.c, global/deliver_flock.c, global/dot_lockfile.c.

    20010128

    Code cleanup: complaints about invalid or numeric hostnames
    either provide specific context or are removed as redundant.
    Files: util/valid_hostname.c dns/dns_lookup.c.

    Code cleanup: new mailbox_size_limit parameter (default:
    20MB). Until now, the mailbox size limit was the same as
    the message size limit, due to artefact of implementation.
    Files: global/mail_params.h, local/local.c.

    Bugfix: fix for the ldap_domains parameter, both semantics
    and documentation by LaMont Jones. Files: LDAP_README,
    conf/sample-ldap.cf, util/dict_ldap.c.

    Update: merged in the virtual delivery agent by Andrew
    McNamara. See VIRTUAL_README for detailed examples.

    Update: merged a re-vamped nqmgr by Patrik Rak.

    Kurt Seifried, seifriedsecurityportal.com
    Securityportal - your focal point for security on the 'net

    ---------------------------------------------------------------------
    To unsubscribe, e-mail: suse-security-unsubscribesuse.com
    For additional commands, e-mail: suse-security-helpsuse.com