Postfix snapshot 20031022 available

[email protected] (Wietse Venema) Wed, 22 Oct 2003 21:15:44 -0400 (EDT)
Newsgroups gmane.mail.postfix.announce
Message-ID <20031023011545.0B502BC255__2977.17580474473$1066872000@spike.porcupine.org>
Snapshot 20031022 adds few features and mostly safety, and all this
in preparation for the transition from post-2.0 snapshot release
into Postfix official release 2.1.

- Easier debugging of SMTPD access restrictions. The SMTP command
"XADDR client-address client-hostname" changes Postfix's idea of
the remote client name and address, so that you can pretend to
connect from anywhere on the Internet.

- More useful logging by Postfix daemons behind a real-time SMTP
proxy filter (the logging now shows the remote client name and
address, instead of localhost[127.0.0.1]).  This uses the new SMTP
command "XLOGINFO client-address client-hostname", which specifies
the client name and address for logging purposes without changing
the name/address that are used for SMTPD access control.

- Postfix no longer retries delivery when no MX host has a valid A
record, for compatibility with most other MTAs. This change is made
in anticipation of a possible Verisign "wild-card MX record without
A record" for unregistered domains. To get the old behavior, specify
"smtp_defer_if_no_mx_address_found = yes".

See below the signature for a full list of all changes and
compatibility issues.

Available from ftp://ftp.porcupine.org/mirrors/postfix-release/experimental/

   301736 Oct 22 20:28 postfix-2.0.16-20031022.HISTORY
    21182 Oct 22 19:21 postfix-2.0.16-20031022.RELEASE_NOTES
  1492026 Oct 22 20:47 postfix-2.0.16-20031022.tar.gz
      152 Oct 22 20:47 postfix-2.0.16-20031022.tar.gz.sig

and soon on the mirror sites listed at http://www.postfix.org/

	Wietse

RELEASE_NOTES information:
==========================

    Incompatible changes with Postfix snapshot 2.0.16-20031022
    ==========================================================

    Postfix no longer retries delivery when no MX host has a valid A
    record, for compatibility with most other MTAs. This change is made
    in anticipation of a possible Verisign "wild-card MX record without
    A record" for unregistered domains. To get the old behavior, specify
    "smtp_defer_if_no_mx_address_found = yes".

    The Postfix SMTP client no longer looks in /etc/hosts by default.
    To get the old behavior, specify "smtp_host_lookup = dns, native".

    The authorized_verp_clients configuration parameter has been renamed
    to smtpd_authorized_verp_clients. This is for consistency with the
    new smtpd_authorized_xaddr_clients and smtpd_authorized_xloginfo_clients
    configuration parameters that control the use of the new XADDR and
    XLOGINFO commands.

    The smtpd_authorized_verp_clients parameter now defaults to nothing
    (no XVERP command is accepted).

    The Postfix SMTP server no longer allows queue_minfree values that
    are less than twice the message_size_limit value.

    The Postfix SMTP server no longer accepts mail when the amount of
    free queue space is less than twice the message_size_limit value.

    Major changes with Postfix snapshot 2.0.16-20031022
    ===================================================

    Easier debugging of SMTPD access restrictions. The SMTP command
    "XADDR client-address client-hostname" changes Postfix's idea of
    the remote client name and address, so that you can pretend to
    connect from anywhere on the Internet.  Use of this command is
    restricted to clients that match the list of names or addresses
    specified with the smtpd_authorized_xaddr_clients parameter. By
    default, XADDR is not accepted from anywhere.

    More useful logging by Postfix daemons behind a real-time SMTP
    proxy filter (the logging now shows the remote client name and
    address, instead of localhost[127.0.0.1]).  This uses the new SMTP
    command "XLOGINFO client-address client-hostname", which specifies
    the client name and address for logging purposes without changing
    the name/address that are used for SMTPD access control.  Use of
    this command is restricted to clients that match the list of names
    or addresses specified with the smtpd_authorized_xloginfo_clients
    parameter. By default, XLOGINFO is not accepted from anywhere.
    For an example, see the updated SMTPD_PROXY_README file.

HISTORY file information:
=========================

20030922

	Feature: "XADDR address hostname" SMTP command, for SMTPD
	restriction debugging, and for sites with fetchmail-like
	software that extracts client information from the first
	Received:  header. The smtpd_authorized_xaddr_clients
	parameter specifies what clients are allowed to use XADDR
	(default: none).  Files:  smtpd/smtpd.c.

20031015

	Workaround: smtpd access maps should not apply subdomain
	name magic to numerical hostnames. File: smtpd/smtpd_check.c.

	Safety: the local delivery agent now defers delivery when
	alias lookup produces an empty result. File: local/alias.c.

20031019

	Workaround: disable request/reply size limit in attr_scan*.c
	to prevent mail from getting stuck when rewriting a malformed
	message header.  This limit was turned on with snapshot
	20030715 to harden the protocol that is used by SMTPD policy
	delegation. A "no code change" workaround is to specify
	"header_size_limit = $line_length_limit".  The proper fix
	is to enforce request/reply size limits only for data from
	outside of Postfix. Problem reported by Brandon Mullenberg,
	Dialup USA. Files:  util/attr_scan*.c.

	Feature: "XLOGINFO address hostname" SMTP command, so that
	Postfix daemons behind SMTPD pass-through proxies log useful
	client name/address information instead of localhost[127.0.0.1].
	The smtpd_authorized_xloginfo_clients parameter specifies
	what clients are allowed to use XLOGINFO (default: none).
	Files:  smtpd/smtpd.c.

	Cleanup: renamed the authorized_verp_clients parameter to
	smtpd_authorized_verp_clients for consistency.

20031021

	Workaround: the demo greylist script now uses BTREE instead
	of HASH files for hopefully better stability. The real fix
	is to use a single updater process that serves multiple
	clients. That approach seems to work well with the verify
	daemon. File: examples/smtpd-policy/smtpd-policy.pl.

20031022

	Safety: the SMTP server now warns when the queue_minfree
	value is less than twice the message size limit. File:
	smtpd/smtpd.c.

	Safety:  the SMTP server no longer accepts mail when the
	amount of free space is less than twice the message size
	limit.  File: smtpd/smtpd_check.c.

	Safety: log a warning and defer mail when canonical or
	virtual lookups return a non-address result (like a string
	that contains no address). File: global/mail_addr_map.c.

	Safety: log a warning and defer mail when any map lookup
	returns an empty string result, and explain that "no result"
	is expected in case of a "not found" condition. This happens
	with incorrectly implemented SQL or LDAP tables. File:
	global/maps_find.c.