Shanduro itsva yeExim 4.94 mail server

Mushure memwedzi gumi yekuvandudzwa zvakaitika mail server kuburitswa Exim 4.94, umo magadzirirwo akaunganidzwa akaitwa uye maitiro matsva akawedzerwa. Maererano neMay otomatiki ongororo anenge miriyoni maseva email, mugove weExim i57.59% (gore rapfuura 53.03%), Postfix inoshandiswa pa34.70% (34.51%) yemasevha etsamba, Sendmail - 3.75% (4.05%), Microsoft Exchange - 0.42% ( 0.57%).

Shanduko mukuburitswa kutsva dzinogona kukanganisa kuenderana. Kunyanya, mamwe mamodhi ekufambisa haachashande neyakasvibiswa data (makoshero anoenderana nedata rakagamuchirwa kubva kune anotumira) kana uchitarisa nzvimbo yekutumira. Semuyenzaniso, matambudziko anogona kumuka kana uchishandisa iyo $local_part musiyano mu "check_local_user" marongero paunenge uchifambisa tsamba. The new cleared variable "$ local_part_data" inofanira kushandiswa pachinzvimbo che$local_part. Pamusoro pezvo, ma operands eiyo headers_remove sarudzo ikozvino inobvumira kushandiswa kwemasiki anotsanangurwa ne "*" hunhu, izvo zvinogona kutyora zvigadziriso zvinobvisa misoro inopera neasterisk (bvisa nemask pane kubvisa chaiyo misoro).

chikuru change:

  • Yakawedzera kuyedza yakavakirwa-mukati tsigiro yeSRS (Sender Rewriting Scheme) meshini, iyo inokutendera kuti unyore kero yeanotumira kana uchiendesa mberi pasina kutyora cheki yeSPF (Sender Policy Sisitimu) uye kuve nechokwadi chekuti ruzivo rwekutumira rwakachengetwa kuitira kuti sevha itumire mameseji kana paine chikanganiso chekutumira. Chinhu cheiyo nzira ndechekuti kana chinongedzo chikasimbiswa, ruzivo rwekuzivikanwa neakatanga kutumira runofambiswa, semuenzaniso, pakunyora patsva. [email inodzivirirwa] pamusoro [email inodzivirirwa] zvicharatidzwa"[email inodzivirirwa]" SRS yakakosha, semuenzaniso, pakuronga basa rezvinyorwa zvetsamba umo meseji yepakutanga inoendeswa kune vamwe vanogamuchira.
  • Paunenge uchishandisa OpenSSL, yakawedzera rutsigiro rwekupinira chiteshi che authenticators (yaimbova yaingotsigirwa neGnuTLS).
  • Yakawedzerwa "msg:defer" chiitiko.
  • Yakamisikidzwa tsigiro yegsasl mutengi-parutivi authenticator, iyo yakaedzwa chete neine plaintext password inobata. Kushanda kweSCRAM-SHA-256 uye SCRAM-SHA-256-PLUS nzira dzinogoneka chete kuburikidza ne gsasl.
  • Tsigiro yeserver-side gsasl authenticator yemapassword akavharidzirwa yaitwa, ichishanda seimwe nzira kune yaimbove iripo plaintext mode.
  • Tsanangudzo mumazita ane mazita zvino inogona kuiswa yekutanga ne "hide" kudzvanya zvinobuda paunenge uchiita "-bP" kuraira.
  • Tsigiro yekuyedza yemasoketi eInternet yakawedzerwa kumutyairi wechokwadi kuburikidza neDovecot IMAP server (yaimbova unix-domain sockets chete dzaitsigirwa).
  • Matauriro e ACL ekuti "queue_only" anogona kutsanangurwa se "queue" uye anotsigira "first_pass_route" sarudzo, yakafanana ne "-odqs" yekuraira mutsara sarudzo.
  • Akawedzera zvinyorwa zvitsva $queue_size uye $local_part_{pre,suf}fix_v.
  • Yakawedzerwa "sqlite_dbfile" sarudzo kune iyo huru yekumisikidza bhuroka yekushandisa paunenge uchitsanangura tambo yekutsvaga prefix. Shanduko iyi inotyora kuenderana kumashure - nzira yekare yekuseta prefix haichashande kana uchitsanangura zvakasvibiswa zvakasiyana mumibvunzo yekutarisa. Nzira itsva ("sqlite_dbfile") inokubvumira kuchengetedza zita refaira rakaparadzana.
  • Yakawedzerwa sarudzo kune dsearch yekutarisa mabhuroko kudzosa iyo yakazara nzira uye mafirita emhando dzefaira kana achifananidza.
  • Sarudzo dzakawedzerwa kune pgsql uye mysql lookup blocks kutsanangura zita reseva rakaparadzana netambo yekutsvaga.
  • Pamabhuroki ekutarisa anosarudza kiyi imwe chete, sarudzo yawedzerwa kudzosera yakavharirwa vhezheni yekiyi kana paine machisi, pachinzvimbo che data rakatsvaga.
  • Kune ese akabudirira rondedzero-match sarudzo, iyo $domain_data uye $localpart_data zvinosiyana zvakaiswa (kare, rondedzero yezvinhu zvakabatanidzwa mukusarudzwa zvakaiswa). Pamusoro pezvo, zvinyorwa zvinyorwa zvinoshandiswa mukufananidza zvave kupihwa kune akasiyana $0, $1, nezvimwe.
  • Yakawedzera mushandisi wekuwedzera "${listquote { } { }}".
  • Imwe sarudzo yawedzerwa kune ${readsocket {}{}{}} mushandisi wekuwedzera kuti zvibairo zvichengetedzwe.
  • Yakawedzerwa dkim_verify_min_keysizes kuseta kunyora mashoma anobvumidzwa eruzhinji makiyi saizi.
  • Iva nechokwadi chekuti "bounce_message_file" uye "warn_message_file" maparameter akawedzerwa asati ashandiswa kekutanga.
  • Yakawedzerwa sarudzo "spf_smtp_comment_template" kugadzirisa kukosha kwekusiyana "$spf_smtp_comment".

Source: opennet.ru

Voeg