Mtundu watsopano wa seva yamakalata ya Exim 4.94

Pambuyo 6 miyezi chitukuko chinachitika kutulutsidwa kwa seva yamakalata Chithunzi 4.94, momwe zowongolera zosonkhanitsidwa zapangidwa ndikuwonjezera zatsopano. Malingana ndi May kafukufuku wamagetsi pafupifupi ma seva miliyoni miliyoni, gawo la Exim ndi 57.59% (chaka chapitacho 53.03%), Postfix imagwiritsidwa ntchito pa 34.70% (34.51%) ya ma seva amakalata, Sendmail - 3.75% (4.05%), Microsoft Exchange - 0.42% ( 0.57 peresenti.

Kusintha kwatsopano kungathe kusokoneza kugwirizana kwa m'mbuyo. Makamaka, njira zina zoyendera sizigwiranso ntchito ndi data yodetsedwa (mitengo yotengera zomwe walandira kuchokera kwa wotumiza) pozindikira komwe akutumizira. Mwachitsanzo, mavuto angabwere mukamagwiritsa ntchito $local_part variable mu "check_local_user" poyendetsa kalata. Kusintha kwatsopano kochotsedwa "$ local_part_data" kuyenera kugwiritsidwa ntchito m'malo mwa $local_part. Kuphatikiza apo, ma operands a headers_remove njira tsopano amalola kugwiritsa ntchito masks ofotokozedwa ndi "*" mawonekedwe, omwe amatha kuswa masinthidwe omwe amachotsa mitu yomaliza ndi asterisk (chotsani ndi chigoba m'malo mochotsa mitu yeniyeni).

waukulu kusintha:

  • Thandizo lowonjezera loyeserera la makina a SRS (Sender Rewriting Scheme), omwe amakulolani kuti mulembenso adilesi ya wotumizayo mukatumiza popanda kuphwanya macheke a SPF (Ndondomeko Yotumiza Sender) ndikuwonetsetsa kuti chidziwitso cha wotumiza chimasungidwa kuti seva ikhoza kutumiza mauthenga pakachitika cholakwika chobweretsa. Chofunikira cha njirayi ndikuti pamene kugwirizana kwakhazikitsidwa, chidziwitso chodziwika ndi wotumiza woyambirira chimaperekedwa, mwachitsanzo, polembanso. [imelo ndiotetezedwa] pa [imelo ndiotetezedwa] zidzawonetsedwa "[imelo ndiotetezedwa]" SRS ndiyofunikira, mwachitsanzo, pokonza ntchito ya mndandanda wamakalata momwe uthenga woyambirira umatumizidwa kwa ena olandila.
  • Mukamagwiritsa ntchito OpenSSL, chowonjezera chothandizira pakusindikiza tchanelo cha otsimikizira (poyamba idangothandizidwa ndi GnuTLS).
  • Chochitika chowonjezera cha "msg:defer".
  • Thandizo lokhazikitsidwa la gsl-client-side authenticator, lomwe langoyesedwa ndi cholembera mawu achinsinsi. Kugwiritsa ntchito njira za SCRAM-SHA-256 ndi SCRAM-SHA-256-PLUS ndizotheka pokhapokha gsasl.
  • Thandizo la seva-mbali ya gsasl yotsimikizira mawu achinsinsi obisika yakhazikitsidwa, yomwe imagwira ntchito ngati njira ina yosinthira mawu osavuta omwe analipo kale.
  • Tanthauzo m'mindandanda yotchulidwa tsopano ikhoza kuyikidwa patsogolo ndi "kubisa" kuti titseke zomwe zili mkati mukuchita lamulo la "-bP".
  • Thandizo loyesera la sockets pa intaneti lawonjezedwa kwa dalaivala wotsimikizira kudzera pa seva ya Dovecot IMAP (poyambapo soketi za unix-domain zokha zidathandizidwa).
  • Mawu a ACL akuti "queue_only" tsopano atha kufotokozedwa ngati "mzere" ndipo amathandizira njira ya "first_pass_route", yofanana ndi "-odqs" mzere wamalamulo.
  • Onjezani zosintha zatsopano $queue_size ndi $local_part_{pre,suf}fix_v.
  • Onjezani njira ya "sqlite_dbfile" pachida chachikulu chosinthira kuti mugwiritse ntchito pofotokozera zingwe zoyambira. Kusinthaku kumasokoneza kuyanjana kwa m'mbuyo - njira yakale yokhazikitsira chikhazikitso sichigwiranso ntchito pofotokoza zosintha zoyipa pamafunso ofufuza. Njira yatsopano ("sqlite_dbfile") imakupatsani mwayi wopatula dzina la fayilo.
  • Zosankha zowonjezeredwa pazotchinga za dsearch kuti mubweze njira yonse ndi mitundu ya mafayilo akamafanana.
  • Zosankha zawonjezeredwa ku pgsql ndi mysql lookup blocks kuti mutchule dzina la seva mosiyana ndi chingwe chofufuzira.
  • Kwa midadada yoyang'ana yomwe imasankha kiyi imodzi, njira yawonjezeredwa kuti mubwezere makiyi osatsekeredwa ngati pali machesi, m'malo mwa data yomwe yafufuzidwa.
  • Pazosankha zonse zopambana pamndandanda, zosintha za $domain_data ndi $localpart_data zimayikidwa (m'mbuyomu, mndandanda wazinthu zomwe zasankhidwa zidayikidwa). Kuphatikiza apo, mndandanda wazinthu zomwe zimagwiritsidwa ntchito pofananiza tsopano zaperekedwa kumitundu $0, $1, ndi zina.
  • Wowonjezera wowonjezera "${listquote { } { }}".
  • Njira ina yawonjezedwa ku ${readsocket {}{}}} kuti zotsatira zisungidwe.
  • Adawonjezedwa ma dkim_verify_min_keysizes kuti atchule makiyi omwe amaloledwa ndi anthu onse.
  • Kuonetsetsa kuti magawo a "bounce_message_file" ndi "warn_message_file" akukulitsidwa asanagwiritsidwe ntchito koyamba.
  • Njira yowonjezera "spf_smtp_comment_template" kuti musinthe mtengo wa "$spf_smtp_comment".

Source: opennet.ru

Kuwonjezera ndemanga