Sabuwar sigar uwar garken imel Exim 4.93

Bayan watanni 10 na ci gaba ya faru saki uwar garken mail Fitowa 4.93, wanda aka tara gyare-gyare kuma an ƙara sababbin abubuwa. Daidai da Nuwamba bincike ta atomatik kusan sabar sabar imel miliyan ɗaya, Rabon Exim shine 56.90% (shekara ɗaya da ta gabata 56.56%), Ana amfani da Postfix akan 34.98% (33.79%) na sabar saƙo, Sendmail - 3.90% (5.59%), Microsoft Exchange - 0.51% ( 0.85%).

Main canji:

• Taimako ga masu tabbatarwa na waje (RFC 4422). Yin amfani da umarnin "SASL EXTERNAL", abokin ciniki zai iya sanar da uwar garke don amfani da takaddun shaida da aka wuce ta ayyukan waje kamar IP Tsaro (RFC4301) da TLS don tabbatarwa;
• An ƙara ikon yin amfani da tsarin JSON don dubawa. Hakanan an ƙara zaɓuɓɓuka don abin rufe fuska "forall" da "kowa" ta amfani da JSON.
• An ƙara $tls_in_cipher_std da $tls_out_cipher_std masu canji waɗanda ke ɗauke da sunayen manyan suites ɗin da suka dace da sunan daga RFC.
• An ƙara sabbin tutoci don sarrafa nunin ID ɗin saƙo a cikin log ɗin (wanda aka saita ta saitunan mai zaɓin zaɓi): "msg_id" (an kunna ta tsohuwa) tare da mai gano saƙo da "msg_id_created" tare da mai ganowa da aka samar don sabon saƙo.
• Ƙara goyon baya don zaɓin "case_insensitive" zuwa yanayin "tabbata=not_makaho" don yin watsi da harafin hali yayin tabbatarwa.
• Ƙara wani zaɓi na gwaji EXPERIMENTAL_TLS_RESUME, wanda ke ba da damar ci gaba da haɗin TLS da aka katse a baya.
• Ƙara wani zaɓi na exim_version don soke fitar da sigar lambar Exim a wurare daban-daban kuma a wuce ta cikin $exim_version da $version_number variables.
• An ƙara ${sha2_N:} zaɓuɓɓukan aiki don N=256, 384, 512.
• Aiwatar da "$r_..." masu canji, saita daga zaɓuɓɓukan kewayawa kuma akwai don amfani yayin yanke shawara game da zaɓen tuƙi da sufuri.
• An ƙara tallafin IPV6 zuwa buƙatun neman SPF.
• Lokacin yin cak ta DKIM, an ƙara ikon tacewa ta nau'ikan maɓalli da hashes.
• Lokacin amfani da TLS 1.3, ana ba da ƙarin tallafi ga OCSP (Ka'idar Matsayin Takaddun Shaida ta Kan layi) cak matsayin soke takardar shaidar.
• An ƙara taron "smtp:ehlo" don saka idanu akan jerin ayyukan da ƙungiyar nesa ta samar.
• Ƙara zaɓin layin umarni don matsar da saƙonni daga layi mai suna zuwa wani.
• Ƙara masu canji tare da nau'ikan TLS don buƙatun masu shigowa da masu fita - $tls_in_ver da $tls_out_ver.
• Lokacin amfani da OpenSSL, an ƙara aiki don rubuta fayiloli tare da maɓallai a tsarin NSS don yanke fakitin cibiyar sadarwa da aka katse. An saita sunan fayil ta hanyar canjin yanayi na SSLKEYLOGFILE. Lokacin ginawa tare da GnuTLS, ana samar da irin wannan aiki ta kayan aikin GnuTLS, amma yana buƙatar gudana azaman tushen.

source: budenet.ru