Ana samun sabar saƙo na Postfix 3.8.0

Bayan watanni 14 na ci gaba, an fito da sabon reshe mai tsayayye na sabar saƙon Postfix - 3.8.0 -. A lokaci guda, ta sanar da ƙarshen tallafi ga reshen Postfix 3.4, wanda aka saki a farkon 2019. Postfix shine ɗayan ayyukan da ba kasafai ba wanda ya haɗu da babban tsaro, amintacce da aiki a lokaci guda, wanda aka samu godiya ga kyakkyawan tsarin gine-gine da ingantaccen tsari don ƙirar ƙira da faci. An rarraba lambar aikin a ƙarƙashin EPL 2.0 (Lasisi na Jama'a) da IPL 1.0 (Lasisin Jama'a IBM).

Dangane da binciken da aka yi ta atomatik na Janairu game da sabar mail dubu 400, ana amfani da Postfix akan 33.18% (shekara ɗaya da ta gabata 34.08%) na sabar saƙon, rabon Exim shine 60.27% (58.95%), Sendmail - 3.62% (3.58) %), MailEnable - 1.86% (1.99%), MDaemon - 0.39% (0.52%), Microsoft Exchange - 0.19% (0.26%), OpenSMTPD - 0.06% (0.06%).

Manyan sabbin abubuwa:

  • Abokin ciniki na SMTP/LMTP yana da ikon duba bayanan SRV na DNS don ƙayyade mai watsa shiri da tashar jiragen ruwa na sabar saƙon da za a yi amfani da su don canja wurin saƙonni. Misali, idan ka saka "use_srv_lookup = ƙaddamarwa" da "relayhost = example.com: ƙaddamarwa" a cikin saitunan, abokin ciniki na SMTP zai buƙaci rikodin rundunar SRV _submission._tcp.example.com don ƙayyade mai watsa shiri da tashar jiragen ruwa na mail. kofar shiga. Za a iya amfani da fasalin da aka tsara a cikin abubuwan more rayuwa waɗanda ake amfani da sabis tare da keɓaɓɓun lambobin tashar tashar sadarwa don isar da saƙon imel.
  • Lissafin algorithms da aka yi amfani da su ta tsohuwa a cikin saitunan TLS sun keɓanta SEED, IDEA, 3DES, RC2, RC4 da RC5 ciphers, MD5 hash da DH da ECDH maɓallan musayar maɓalli, waɗanda aka ƙirƙira a matsayin waɗanda ba su da amfani ko ba a yi amfani da su ba. Lokacin zayyana nau'ikan sifofi na "fitarwa" da "ƙananan" a cikin saitunan, nau'in "matsakaici" yanzu an saita shi, tunda an daina tallafawa nau'ikan "fitarwa" da "ƙananan" a cikin OpenSSL 1.1.1.
  • An ƙara sabon saiti "tls_ffdhe_auto_groups" don ba da damar yarjejeniyar shawarwarin ƙungiyar FFDHE (Finite-Field Diffie-Hellman Ephemeral) a cikin TLS 1.3 lokacin da aka gina shi tare da OpenSSL 3.0.
  • Don kare kai daga hare-haren da ke da nufin gajiyar ƙwaƙwalwar ajiyar da ke akwai, ana ba da tara ƙididdiga "smtpd_client_*_rate" da "smtpd_client_*_count" a cikin mahallin tubalan cibiyar sadarwa, girman wanda aka ƙayyade ta umarnin "smtpd_client_ipv4_prefix_pd_pd" da "smtpd. ta tsohuwa /6 da /32)
  • Ƙara kariya daga hare-haren da ke amfani da buƙatun sake shawarwarin haɗin TLS a cikin haɗin SMTP da aka riga aka kafa don ƙirƙirar nauyin CPU mara amfani.
  • Umurnin postconf yana ba da gargaɗi don sharhi da aka kayyade kai tsaye bin ƙimar sigina a cikin fayil ɗin sanyi na Postfix.
  • Yana yiwuwa a daidaita rikodin abokin ciniki don PostgreSQL ta hanyar tantance sifa "encoding" a cikin fayil ɗin sanyi (ta tsohuwa, ƙimar yanzu an saita zuwa "UTF8", kuma a baya an yi amfani da ɓoyayyen "LATIN1").
  • A cikin umarnin postfix da postlog, ana samar da fitarwa zuwa stderr yanzu ba tare da la'akari da haɗin rafin stderr zuwa tashar ba.
  • A cikin bishiyar tushen, fayilolin "global / mkmap * . [hc]" an motsa su zuwa kundin adireshin "util", kawai fayilolin "global/mkmap_proxy.*" an bar su a cikin babban kundin adireshi.

source: budenet.ru

Add a comment