Postfix 3.5.0 mail server release

After a year of development took place release of a new stable branch of the mail server Postfix - 3.5.0. At the same time, the deprecation of the branch was announced Postfix 3.1released in early 2016. Postfix is ​​one of the rare projects that combines high security, reliability and performance at the same time, which was achieved thanks to a well-thought-out architecture and a fairly strict policy of coding and patch auditing. The project code is distributed under EPL 2.0 (Eclipse Public license) and IPL 1.0 (IBM Public License).

According to the March automated survey about a million mail servers, Postfix is ​​used on 34.29% (34.42%) of mail servers,
the share of Exim is 57.77% (56.91% a year ago), Sendmail - 3.83% (4.16%), MailEnable - 2.12% (2.18%), MDaemon - 0.77% (0.91%), Microsoft Exchange - 0.47% (0.61%).

All innovations:

  • Added support for load balancer protocol HA Proxy 2.0 with request proxying via TCP over IPv4 and IPv6 or without connection proxying (for sending test heartbeat requests confirming normal operation).
  • Added the ability to force messages to be stale (not delivered) in order to be returned to the sender. The status is stored in the delivery queue file as a special attribute, in the presence of which any delivery attempt will result in the message being returned to the sender, without being placed in the hold queue. To set the stale message attribute, the "-e" and "-f" flags have been added to the postsuper command, the difference with the "-f" flag is that the message is immediately returned to the sender when it is in the resubmission pending queue. In the output of the mailq and postqueue commands, forced stale messages are marked with a "#" after the file name.
  • SMTP and LMTP clients have added support for listing multiple hosts to redirect a message to another server (next-hop). The listed hosts will be tried to send the message in the order in which they appear (if the first one is not available, delivery to the second one will be attempted, etc.). List specification is implemented for relayhost, transport_maps, default_transport and sender_dependent_default_transport_maps directives.

    /etc/postfix/main.cf:
    relayhost = foo.example, bar.example
    default_transport = smtp:foo.example, bar.example

  • Changed logging behavior. Addresses in "from=" and "to=" are now stored using quoting - if the local part of the address contains a space or special characters, the specified part of the address will be enclosed in quotes in the log. To return the old behavior, add "info_log_address_format = internal" to the settings.

    Was: from= [email protected]>
    Became: from=<"name with spaces"@example.com>.

  • Normalization of IP addresses obtained from the XCLIENT and XFORWARD headers or via the HaProxy protocol is provided. The change may break compatibility at the level of logs and IPv6 subnet mappings in the check_client_access directive.
  • To improve the convenience of interacting with Dovecot, the SMTP + LMTP delivery agent provides the attachment of the Delivered-To, X-Original-To and Return-Path headers using the "flags=DORX" flags in master.cf, similar to the pipe and local delivery agents.
  • The order of verification of certificates defined in the check_ccert_access tables is defined. First, a fingerprint of the client's certificate is checked, and then the client's public key (behavior as when specifying "search_order = cert_fingerprint, pubkey_fingerprint").

Source: opennet.ru

Add a comment