SMTP-serveren chasquid 1.13 er tilgjengelig.

Chasquid 1.13 SMTP-server is now released, focusing on ease of configuration and security. Chasquid is primarily designed for typical projects where the flexibility and functionality of Postfix and Exim are excessive. The project code is written in Go and is distributed under the Apache 2.0 license.

Hovedfunksjoner:

• Simplified configuration system. The configuration of the SMTP server consists of the chasquid.conf file with basic parameters and a set of directories named for the services. domener, within which are related domain files for mapping email addresses to users, database settings for storing user databases, TLS certificates, and so on. The chasquid-util utility is used to create and edit the user database for each domain.
• A hook system is used for email filtering and spam elimination, allowing for binding a handler that is invoked at the final stage of email receipt. The following ready-made handlers are provided: greylist for maintaining 'grey lists' (issuing a temporary error on the first request from unknown servers) using greylistd, spamc and rspamc for spam blocking using Spamassassin and rspamd, clamdscan for virus filtering via ClamAV, and dkimsign for DKIM verification using driusan/dkim or dkimpy.
• Protection against configuration errors that lead to security issues such as open relays and plaintext authentication.
• Availability of a specialized HTTP server for monitoring and debugging the SMTP server's operation.
• Availability of pre-packaged distributions for Debian, Ubuntu, and Arch Linux.
• Support for integration with the Dovecot IMAP server for user authentication.
• Ability to use virtual mail domains with their own user databases and redirects.
• Support for discarding parts of addresses, for example, treating 'user+something@domain' as 'user@domain'.
• Support for the SMTPUTF8 extension (RFC 6531), allowing the use of national alphabet characters in email addresses, hostnames, mailbox names, and SMTP headers.
• Support for using multiple TLS certificates. Handling TLS parameters bound to domains and protection against falling back to less secure TLS settings.
• Simplified certificate acquisition system through the Let’s Encrypt service.
• Støtte for SPF (Sender Policy Framework) og MTA-STS (MTA Strict Transport Security).

I den nye utgaven:

• Beskyttelse mot SMTP smuggling-angrep er lagt til, som gjør det mulig å dele ett meldinger til flere forskjellige meldinger ved bruk av en unormal sekvens for å splitte e-poster.
• Implementert brukerklasse som bare kan motta e-poster, uten mulighet for å sende.
• Angivelse av tomme felt i konfigurasjonen er forbudt. IP-adresser for mottak av forbindelser (adresseparametere må være eksplisitt angitt; i enkleste tilfelle er det nok å fjerne kommentaren fra den aktuelle innstillingen i konfigurasjonsfilen).
• Støtte for å hente e-post og passord fra miljøvariabler er lagt til i skriptet docker/add-user.sh.

Kilde: opennet.ru