The Exim 4.96 mail server has been released, which includes the accumulated fixes and added new features. According to the May automated survey of about 800 thousand mail servers, the share of Exim is 59.59% (59.15% a year ago), Postfix is used on 33.64% (33.76%) of mail servers, Sendmail - 3.55% (3.55%), MailEnable - 1.93% ( 2.02%), MDaemon - 0.45% (0.56%), Microsoft Exchange - 0.23% (0.30%).
Major changes:
- The ACL has a new "seen" condition that can be used to check for previously occurring user and host related events. The new condition simplifies working with greylists, for example, when creating a simple greylist, you can use the ACL "seen = -5m / key=${sender_host_address}_$local_part@$domain" to allow connection retry.
- Added "mask_n", a variant of the "mask" operator that manipulates normalized IPv6 addresses (using colons and no wrapping).
- The '-z' option has been added to the exim_dumpdb and exim_fixdb utilities to return the time without considering the time zone (UTC);
- Implemented an event in the background process that is emitted when the TLS connection fails.
- Added "stop", "pretrigger" and "trigger" options to ACL debug mode ("control = debug") to control output to debug log.
- Added check for escaping special characters in lookup requests if the query string uses data received from outside ("tainted"). If the characters are not escaped, the information about the problem is only reflected in the log for now, but in future releases it will lead to an error.
- Removed the "allow_insecure_tainted_data" option, which allowed to disable the error output when insecurely escaping special characters in the data. Also deprecated is log_selector "taint", which allowed to disable warnings about escaping problems in the log.
Source: opennet.ru