Kuburitswa kwePostfix 3.5.0 mail server

Mushure megore rebudiriro zvakaitika kuburitswa kwebazi idzva rakagadzikana revhavha yetsamba Postfix - 3.5.0. Panguva imwe cheteyo, bazi rakamiswa Postfix 3.1, yakaburitswa kutanga kwa2016. Postfix ndeimwe yemapurojekiti asingawanzo anobatanidza kuchengetedzwa kwepamusoro, kuvimbika uye kuita panguva imwe chete, iyo yakawanikwa nekuda kwekufunga. zvivakwa uye mutemo wakasimba wekodhi dhizaini uye chigamba chekuongorora. Iyo kodhi yeprojekiti yakagoverwa pasi peEPL 2.0 (Eclipse Public License) uye IPL 1.0 (IBM Public License).

Maererano neKurume otomatiki ongororo anenge miriyoni maseva eemail, Postfix inoshandiswa pa 34.29% (34.42%) yemasevha etsamba,
Exim's share is 57.77% (gore rapfuura 56.91%), Sendmail - 3.83% (4.16%), MailEnable - 2.12% (2.18%), MDaemon - 0.77% (0.91%), Microsoft Exchange - 0.47% (0.61%).

chikuru zvitsva:

• Yakawedzerwa mutoro balancer protocol rutsigiro HA Proxy 2.0 ine proxying zvikumbiro kuburikidza neTCP pamusoro peIPv4 uye IPv6 kana pasina proxying yekubatanidza (kutumira zvikumbiro zvekurova kwemoyo zvinotsigira zvakajairika kushanda).
• Yakawedzera kugona kumanikidza meseji kuti igadziriswe kune stale (isina kutumirwa) chimiro kuti idzoserwe kune iye anotumira. Mamiriro acho anochengetwa mumutsara wekutumira faira sechinhu chakakosha, muhupo hwacho chero kuedza kwekutumira kunozoita kuti meseji idzoserwe kune anotumira, pasina kuiswa mumutsara wekubata. Kuseta hunhu hwemeseji, iyo "-e" uye "-f" mireza yakawedzerwa kune postsuper command; musiyano ne "-f" mureza ndewekuti meseji inodzoserwa pakarepo kune anotumira kana iri mukati. mutsara wakamirira kusvotwa. Kubuda kweiyo mailq uye postqueue mirairo inomanikidza mameseji ekare kuti amakwe ne "#" mushure mezita refaira.
• Yakawedzera tsigiro yekunyora mazita akawanda kune SMTP uye LMTP vatengi kuendesa meseji kune imwe sevha (inotevera-hop). Iwo akanyorwa anotambira anozoyedzwa kuendesa meseji nenzira yaanoratidzika (kana yekutanga isipo, kutumira kunoedzwa kune yechipiri, nezvimwewo). Rondedzero yerondedzero inoshandiswa kune relayhost, transport_maps, default_transport uye sender_dependent_default_transport_maps mirairo.

  /etc/postfix/main.cf:
  relayhost = foo.example, bar.example
  default_transport = smtp:foo.example, bar.example

• Yakachinja maitiro ekutema miti. Kero dziri mu “kubva =” uye “kusvika =” dzave kuchengetwa pachishandiswa quotation - kana chikamu chenzvimbo yekero iine nzvimbo kana mavara akasarudzika, chikamu chakatsanangurwa chekero chinovharirwa mumakotesheni mulog. Kudzosa maitiro ekare, wedzera "info_log_address_format = yemukati" kune zvigadziriso.

  Waive: kubva = [email inodzivirirwa]>
  Iye zvino: kubva =<"zita rine nzvimbo"@example.com>.

• Inova nechokwadi chekumisikidzwa kwemakero eIP anowanikwa kubva kuXCLIENT uye XFORWARD misoro kana kuburikidza neHaProxy protocol. Shanduko inogona kutyora kuenderana padanho relogi uye IPv6 subnet mappings mune cheki_client_access rairo.
• Kuvandudza iko kureruka kwekudyidzana neDovecot, iyo SMTP + LMTP yekutumira mumiriri inopa chinongedzo cheDelivered-To, X-Original-To uye Return-Path misoro uchishandisa "mureza = DORX" mireza mu master.cf, yakafanana nepombi. uye vamiririri vemunharaunda vanotakura zvinhu.
• Maitiro ekutarisa zvitupa anotsanangurwa mucheki_ccert_access matafura anotsanangurwa. Chekutanga, mufananidzo wechitupa chemutengi unotariswa, uyezve kiyi yeruzhinji yemutengi (maitiro sekureva "search_order = cert_fingerprint, pubkey_fingerprint").

Source: opennet.ru