Postfix 2.3 patch01 available

Postfix 2.3 patch 01 fixes minor problems with TLS and Milter
support that were found in the first weeks of Postfix 2.3 deployment.

Up to this point Postfix 2.3 and 2.4 were identical.  From now on,
the stable Postfix 2.3 will be frozen except for bugfixes, workarounds,
or emergencies.

Main changes in TLS support:

- The Postfix SMTP client enforced mandatory TLS only when talking
  to an ESMTP server; enforcement did not happen if Postfix could
  somehow be forced to send HELO instead of EHLO. This problem also
  exists in Postfix 2.2, where it is is fixed with Postfix 2.2
  patch 11.  This is minor compared to the DNS spoofing issues that
  were fixed with Postfix 2.2.10.

- Workaround for an interoperability problem introduced with Postfix
  2.3.  Some buggy TLS client implementations were unable to deliver
  mail because the Postfix SMTP server didn't send a TLS session
  ID. To disable the workaround specify "smtpd_tls_always_issue_session_ids
  = no"; this allows non-buggy TLS clients to save some space.

Main changes in Milter support:

- Safety measure. After "postsuper -r", mail is no longer inspected
  by the Milters specified with the non_smtpd_milters parameter.
  This measure prevents a bad interaction with external content
  filters: Milters would receive incorrect SMTP client information,
  and could be tricked into signing or allowing untrusted messages.
  This change does not affect Milter applications that run behind
  an after-queue content filter. The behavior is detailed in the
  postsuper(1) manual page.

Available from ftp://ftp.porcupine.org/mirrors/postfix-release/official:

    29500 Jul 24 15:52 postfix-2.3-patch01.gz 
   438483 Jul 24 15:29 postfix-2.3.1.HISTORY
    34806 Jul 11 20:08 postfix-2.3.1.RELEASE_NOTES
  2774017 Jul 24 15:48 postfix-2.3.1.tar.gz
      280 Jul 24 15:48 postfix-2.3.1.tar.gz.sig

Soon on the mirror sites listed at http://www.postfix.org/

The same source code is released as postfix-2.4-20060724 (except
for a one-line difference in the makedefs file that enables snapshot
features not in Postfix.2.3).

	Wietse

HISTORY change log:
===================

20060716

	Bugfix: "sendmail -bs" panic caused by a missing
	SMTPD_STATE_ALONE() guard before a milter_abort() call.
	File: smtpd/smtpd.c.

	Bugfix (bug introduced with Postfix 2.2): the Postfix SMTP
	client enforced Mandatory TLS only when talking to an ESMTP
	server; enforcement did not happen if Postfix could somehow
	be forced to send HELO instead of EHLO.  Victor Duchovni.
	File: src/smtp/smtp_proto.c.

20060718

	Bugfix (bug introduced 20060711): null pointer bug when
	rejecting SMTP mail with Milter application.  File:
	cleanup/cleanup_milter.c.

	Workaround (problem introduced in 200605/200606 TLS update):
	the Postfix SMTP server now issues TLS session IDs even
	when TLS session caching is turned off, otherwise MS Outlook
	fails to deliver mail. There may also be interoperability
	issues with other MTAs that we haven't discovered yet.
	Specify "smtpd_tls_always_issue_session_ids = no" to disable
	the workaround. Victor Duchovni. Files: smtpd/smtpd.c,
	tls/tls_server.c.

20060719

	Cleanup: the smtp_sasl_auth_enforce feature is gone. It
	was meant to work around a problem that was introduced with
	plaintext fallback after a failed TLS handshake.  Unfortunately,
	it created more problems than it solved. We now address
	the underlying problem more directly as described next.
	File:  smtp/smtp_proto.c.

	Safety: don't fall back to plaintext delivery after failed
	TLS handshake, when the Postfix SMTP client would have
	attempted to log in with SASL after successful TLS handshake.
	This avoids undesirable behavior regardless of whether the
	server does support SASL over plaintext (unexpected password
	disclosure) and whether the server doesn't support SASL
	over plaintext (insufficient mail relay permission).  Files:
	smtp/smtp_connect.c, smtp/smtp_session.c, smtp/smtp_proto.c.

20060720

	Compatibility: replace %% in milter replies by %, and strip
	single (i.e. invalid) % characters. File: milter/milter8.c.

	Compatibility: $_ macro support for Milter applications.
	Files: smtpd/smtpd.c, smtpd/smtpd_milter.c,
	cleanup/cleanup_state.c, cleanup/cleanup_milter.c.

20060721

	Safety: disable Milter processing after "postsuper -r".
	If the mail has been filtered there is no need to do it
	again.  Moreover, when mail has passed through an external
	content filter, we don't have sufficient information to
	reproduce the exact same SMTP events and Sendmail macros
	that Milters received when the mail originally arrived in
	Postfix.  This change does not affect Milter applications
	that run behind an after-queue content filter. File:
	pickup/pickup.c.

	Bugfix: Milters received a truncated ORCPT=xxx parameter
	due to destructive parsing of something that didn't have
	to be preserved before Milter support was added to Postfix.
	File: smtpd/smtpd.c.

20060724

	Bugfix: when updating the same header multiple times, the
	Postfix Milter client created a queue file that caused
	delivery agents to loop.  File: cleanup/cleanup_milter.c.