Seva yamakalata ya Postfix 3.8.0 ilipo

Pambuyo pa miyezi 14 ya chitukuko, nthambi yatsopano yokhazikika ya seva ya postfix - 3.8.0 - inatulutsidwa. Nthawi yomweyo, idalengeza kutha kwa thandizo la nthambi ya Postfix 3.4, yomwe idatulutsidwa kumayambiriro kwa 2019. Postfix ndi imodzi mwama projekiti osowa omwe amaphatikiza chitetezo chambiri, kudalirika komanso magwiridwe antchito nthawi yomweyo, zomwe zidatheka chifukwa cha zomangamanga zomwe zidaganiziridwa bwino komanso ndondomeko yokhwima yopangira ma code ndi kuwunika kwa zigamba. Khodi ya polojekitiyi imagawidwa pansi pa EPL 2.0 (Eclipse Public License) ndi IPL 1.0 (IBM Public License).

Malinga ndi kafukufuku wodziwikiratu wa Januware wa ma seva pafupifupi 400, Postfix imagwiritsidwa ntchito pa 33.18% (chaka chapitacho 34.08%) ya ma seva amakalata, gawo la Exim ndi 60.27% (58.95%), Sendmail - 3.62% (3.58) %), MailEnable - 1.86% ( 1.99%), MDaemon - 0.39% (0.52%), Microsoft Exchange - 0.19% (0.26%), OpenSMTPD - 0.06% (0.06%).

Zatsopano zazikulu:

  • Makasitomala a SMTP/LMTP ali ndi kuthekera koyang'ana zolemba za DNS SRV kuti adziwe yemwe ali ndi tsamba la seva yomwe idzagwiritsidwe ntchito kutumiza mauthenga. Mwachitsanzo, ngati mutchula "use_srv_lookup = submission" ndi "relayhost = example.com:submission" pazokonda, kasitomala wa SMTP adzapempha rekodi yolandira ya SRV _submission._tcp.example.com kuti adziwe yemwe ali ndi imelo. pachipata. Zomwe akufunazo zitha kugwiritsidwa ntchito m'magawo momwe mautumiki omwe ali ndi manambala amadoko a netiweki amagwiritsidwa ntchito potumiza maimelo.
  • Mndandanda wa ma aligorivimu ogwiritsidwa ntchito mosasintha pa zochunira za TLS sikuphatikiza SEED, IDEA, 3DES, RC2, RC4 ndi RC5 ciphers, MD5 hashi ndi DH ndi ECDH key exchange algorithms, zomwe zimayikidwa ngati zachikale kapena zosagwiritsidwa ntchito. Mukatchula mitundu ya "export" ndi "low" cipher muzokonda, mtundu wa "medium" tsopano wakhazikitsidwa, popeza kuthandizira kwa mitundu ya "export" ndi "otsika" kwatha mu OpenSSL 1.1.1.
  • Onjezani zoikamo zatsopano "tls_ffdhe_auto_groups" kuti athe kukambirana ndi gulu la FFDHE (Finite-Field Diffie-Hellman Ephemeral) mu TLS 1.3 ikamangidwa ndi OpenSSL 3.0.
  • Kuti muteteze ku ziwonongeko zomwe zikufuna kuwononga kukumbukira komwe kulipo, kuphatikizika kwa ziwerengero "smtpd_client_*_rate" ndi "smtpd_client_*_count" kumaperekedwa malinga ndi midadada ya netiweki, kukula kwake komwe kumatchulidwa ndi malangizo "smtpd_client_ipv4_prefix_lengthfix" ndi "smtpd_length_length" mwachisawawa / 6 ndi / 32)
  • Chitetezo chowonjezera ku ziwopsezo zomwe zimagwiritsa ntchito pempho loyankhulirananso ndi TLS mkati mwa kulumikizana komwe kwakhazikitsidwa kale kwa SMTP kuti mupange kuchuluka kwa CPU kosafunikira.
  • Lamulo la postconf limapereka chenjezo kwa ndemanga zomwe zafotokozedwa potsatira ma parameter mu fayilo yosintha ya Postfix.
  • Ndizotheka kukonza makina a kasitomala a PostgreSQL pofotokoza za "encoding" mufayilo yosinthira (mwachisawawa, mtengowo wayikidwa ku "UTF8", ndipo m'mbuyomu "LATIN1" encoding idagwiritsidwa ntchito).
  • M'malamulo a postfix ndi postlog, log output to stderr tsopano imapangidwa mosasamala kanthu za kulumikizidwa kwa stderr stream ku terminal.
  • Mumtengo wamagwero, mafayilo "global/mkmap*.[hc]" adasunthidwa ku chikwatu cha "util", mafayilo okha "global/mkmap_proxy.*" adasiyidwa mu bukhu lalikulu.

Source: opennet.ru

Kuwonjezera ndemanga