Postfix 2.0.16 and snapshot 20030915 available

Postfix stable release 2.0.16 fixes connection management problems
in the LMTP client, and has further workarounds for Solaris socket
bugs.

Postfix snapshot release 20030915 has a much updated LDAP client,
a new reject_rhsbl_helo feature to blacklist domain names in HELO
or EHLO commands, and smtpd_sasl_exceptions_networks to turn off
SASL authentication for client from specific networks, plus of
course all the above bugfixes.

Available from download sites at http://www.postfix.org/

Stable release:

    15530 Sep 13 21:44 postfix-2.0-patch16.gz
   273293 Sep 13 21:29 postfix-2.0.16.HISTORY
    42530 Apr 15 13:41 postfix-2.0.16.RELEASE_NOTES
  1353520 Sep 13 21:45 postfix-2.0.16.tar.gz
      152 Sep 13 21:45 postfix-2.0.16.tar.gz.sig

Snapshot release:

   296788 Sep 15 20:53 postfix-2.0.16-20030915.HISTORY
    16842 Sep 14 20:20 postfix-2.0.16-20030915.RELEASE_NOTES
  1481698 Sep 15 20:54 postfix-2.0.16-20030915.tar.gz
      152 Sep 15 20:54 postfix-2.0.16-20030915.tar.gz.sig

These releases do not include specific code to work around the
recent Verisign initiative to reply to DNS queries for non-existent
.com and .net domain names.

	Wietse

HISTORY file:

20030822 (snapshot 20030915 only)

	Feature: the export_environment and import_environment
	parameters now accept name=value information that will be
	entered into the new environment. File: util/clean_env.c.

20030823 (snapshot 20030915 only)

	Feature: smtpd_sasl_exceptions_networks parameter to prevent
	Postfix from offering AUTH  to clients that match the listed
	networks. Based on code by Ben Rosengart, Panix. Files:
	conf/sample-auth.cf, smtpd/smtpd.c.

20030902 (snapshot 20030915 only)
	Portability: the Postfix master resets the file size to
	the largest possible off_t value when the actual limit
	appears to overflow the off_t range. Files: util/sys_defs.h,
	util/file_limit.c. A fine sample of bit banging.

20030905

	Workaround: Solaris 8 select() claims that a non-blocking
	socket is readable and then read() fails with EAGAIN. Files:
	util/timed_read.c and as precautionary measure,
	util/timed_write.c.

(snapshot 20030915 only)

	Bugfix: dict_register() should not be called from dict_open()
	in dict_mysql and dict_pgsql.  Liviu Daia.  Files:
	util/dict_mysql.c, util/dict_pgsql.c.

	Feature: LDAP parameters can now be specified in external
	files.  This makes it possible to securely store bind
	passwords for plain auth outside of main.cf (which is world
	readable).  By Liviu Daia, based on a suggestion by Victor
	Duchovni and Lamont Jones.  File: util/dict_ldap.c.

	Feature: STARTTLS option for LDAP, if Postfix is linked
	against OpenLDAP.  By Liviu Daia, amended by Victor Duchovni.
	File:  util/dict_ldap.c.

	Cleanup: connections to LDAP sources are now postponed
	until they are actually needed.  By Liviu Daia.  File:
	util/dict_ldap.c.

20030908

	The 20030905 Solaris workaround triggers too many warnings.
	TCP sockets are back to blocking, and keepalives are turned
	on to kill off dead sockets, as suggested by Leandro Santi.
	Files: master/{single,multi}_server.c, smtpd/smtpd.c,
	util/sys_defs.h.

20030909

	Bugfix: the LMTP session caching code had problems with
	SASL authentication after the first connection, and pipelining
	was working poorly.  Fix by Victor Duchovni, Morgan Stanley.
	Files: lmtp/lmtp.c, lmtp/lmtp_proto.c.

20030912

	Workaround: besides SMTP server sockets, SMTP client sockets
	can also hang on Solaris, as reported by Leandro Santi. In
	order to deal with this at the root, all connection management
	is now done by sane_accept() and sane_connect().  Both turn
	on keepalives on Solaris.

20030913

	Safety: set-gid commands don't trust TZ.  File: msg_syslog.c.

20030914 (snapshot 20030915 only)

	Address extension propagation wasn't documented enough when
	it was added to Postfix. Based on patches by Roman Neuhauser.

	Added clarifying notes to main.cf, master.cf and access by
	Dean Gibson.

	In header/body_checks, DUNNO is now the preferred action
	instead of the now deprecated OK. This may confuse fewer
	people.

	In header/body_checks, allow text after IGNORE and DUNNO,
	suggested by Victor Duchovni, Morgan Stanley.  File:
	src/cleanup/cleanup_message.c.

	Feature: reject_rhsbl_helo. File: smtpd/smtpd_check.c.

	Bugfix? The LMTP and SMTP clients now send "MAIL FROM:<sender>
	AUTH=<>" when SASL authenticated. Suggested by by Victor
	Duchovni, Morgan Stanley. Files: smtp/smtp_proto.c,
	lmtp/lmtp_proto.c.

20030915 (snapshot 20030915 only)

	Bugfix: mail rejected by the before-queue content filter
	was mis-labeled as a software error; it should be labeled
	as a policy error instead. File: smtpd/smtpd.c.

	Cleanup: postcat is now null-byte transparent. File:
	postcat/postcat.c.