![\"Kjo](\"\/wp-content\/uploads\/2025\/02\/d0a8ec5a067a9d674e2b77db68d1a4f0.gif\")
<\/center> <\/p>\nNovitetet kryesore: <\/p>\n
- \n
- \u00cbsht\u00eb shtuar mund\u00ebsia e p\u00ebrdorimit t\u00eb algoritmave kriptografik\u00eb TLS, t\u00eb shkall\u00ebzuar ndaj nj\u00eb kompjuteri kuantik. P\u00ebr t\u00eb p\u00ebrdorur k\u00ebta algoritma k\u00ebrkohet p\u00ebrdorimi i deg\u00ebs s\u00eb bibliotek\u00ebs OpenSSL 3.5, e cila ende nuk ka dal\u00eb nga faza e zhvillimit. P\u00ebr t\u00eb zgjedhur algoritmat postkuant\u00eb, n\u00eb Postfix nuk jan\u00eb futur sintaksa t\u00eb reja p\u00ebr grupet TLS, por jan\u00eb mb\u00ebshtetur n\u00eb cil\u00ebsimet e OpenSSL, t\u00eb cilat do t\u00eb p\u00ebrdoren gjat\u00eb vendosjes s\u00eb parametrave \u201etls_eecdh_auto_curves\u201c dhe \u201etls_ffdhe_auto_groups\u201c n\u00eb vlera t\u00eb zbraz\u00ebta.\n
- \u00cbsht\u00eb shtuar mb\u00ebshtetje p\u00ebr titullin e mesazheve \u201eTLS-Required: no\u201c (RFC 8689), sipas t\u00eb cilit d\u00ebrgimi do t\u00eb realizohet edhe kur nuk \u00ebsht\u00eb e mundur t\u00eb realizohet politika e siguris\u00eb TLS e caktuar n\u00eb cil\u00ebsime. Me k\u00ebt\u00eb titull, klienti SMTP punon n\u00eb modin \u201esmtp_tls_security_level = may\u201c, dmth nuk verifikon certifikat\u00ebn. server\u00eb<\/a> dhe mund t\u00eb kthehet n\u00eb lidhjen me transmetimin e t\u00eb dh\u00ebnave n\u00eb tekst t\u00eb hapur. N\u00eb deg\u00ebn e ardhshme t\u00eb r\u00ebnd\u00ebsishme t\u00eb Postfix, pritet implementimi i zgjerimit SMTP REQUIRETLS.\n
- Shtuar mb\u00ebshtetje p\u00ebr protokollin TLS-RPT (Transport Layer Security Reporting), q\u00eb lejon ndjekjen e d\u00ebshtimeve gjat\u00eb dor\u00ebzimit t\u00eb mesazheve q\u00eb ndodhin n\u00ebse nuk \u00ebsht\u00eb e mundur t\u00eb vendoset nj\u00eb lidhje e koduar, e cila parashikohet t\u00eb p\u00ebrdor\u00eb zgjerimet DANE (DNS-based Authentication of Named Entities) ose MTA-STS (MTA Strict Transport Security). Pronari i domain-it t\u00eb post\u00ebs p\u00ebrcakton n\u00eb DNS parametrat p\u00ebr TLS-RPT, pas s\u00eb cil\u00ebs server\u00ebt e post\u00ebs do t\u00eb d\u00ebrgojn\u00eb raporte me informacion rreth lidhjeve TLS t\u00eb suksesshme dhe d\u00ebshtake tek MX-server\u00ebt q\u00eb menaxhojn\u00eb domain-in. Implementimi bazuar n\u00eb bibliotek\u00ebn libtlsrpt.\n
- \u00cbsht\u00eb shtuar cil\u00ebsimi \u201esmtpd_hide_client_session = yes\u201c, q\u00eb \u00e7aktivizon futjen e informacionit mbi sesionin e klientit gjat\u00eb vendosjes nga serveri SMTP t\u00eb titullit \u201eReceived:\u201c. Shembulli i titullit t\u00eb shkurtuar: \u201eReceived: by mail.example.com (Postfix) id postfix-queue-id p\u00ebr ; Dit\u00eb, dd Mon yyyy hh:mm:ss tz-offset (zona)\u201c.\n
- \u00cbsht\u00eb shtuar mund\u00ebsia e MIME-kodimit (RFC 2047) t\u00eb emrave n\u00eb titujt e gjeneruar nga Postfix \u201eFrom:\u201c, duke p\u00ebrfshir\u00eb simbole q\u00eb nuk jan\u00eb ASCII. Schemi i propozuar i kodimit lejon t\u00eb kalojm\u00eb pa p\u00ebrdorimin e zgjerimit SMTPUTF8 (RFC 6531), i cili nuk mb\u00ebshtetet nga t\u00eb gjitha aplikacionet. Rezultati i MIME-kodimit duket si \u2018\u201e=?charset?Q?gibberish?=:\u201c. P\u00ebr t\u00eb p\u00ebrcaktuar kodimin origjinal t\u00eb emrave \u00ebsht\u00eb shtuar parametri \u201efull_name_encoding_charset\u201c, i vendosur n\u00eb vler\u00ebn e parazgjedhur utf8.\n
- Logjika e trajtimit t\u00eb lidhjeve t\u00eb d\u00ebshtuara \u00ebsht\u00eb ndryshuar duke treguar n\u00eb cil\u00ebsimet 'mysql:' ose 'pgsql:' vet\u00ebm nj\u00eb server. Nj\u00eb server i till\u00eb tani perceptohet si nj\u00eb balancues ngarkese dhe n\u00eb rastin e nj\u00eb d\u00ebshtimi t\u00eb vet\u00ebm, k\u00ebrkesa e p\u00ebrs\u00ebritur d\u00ebrgohet menj\u00ebher\u00eb, pa vones\u00eb prej 60 sekondash.\n
- N\u00eb Milter \u00ebsht\u00eb implementuar pasqyrimi n\u00eb log t\u00eb informacionit me arsyen e vendosjes s\u00eb mesazhit n\u00eb karantin\u00eb.\n
- N\u00eb serverin SMTP \u00ebsht\u00eb siguruar regjistrimi n\u00eb log t\u00eb identifikuesit t\u00eb radh\u00ebs ose vler\u00ebs 'NOQUEUE' kur lidhja p\u00ebrfundon p\u00ebr shkak t\u00eb koh\u00ebs s\u00eb pritjes, nd\u00ebrprerjes ose tejkalimit t\u00eb kufirit t\u00eb gabimeve. Procesi i pastrimit n\u00eb k\u00ebt\u00eb rast regjistron n\u00eb log 'queueid: canceled' p\u00ebr mesazhet me nj\u00eb transaksion t\u00eb nisur, por jo t\u00eb p\u00ebrfunduar.\n
- N\u00eb klientin Dovecot SASL, kur regjistrohen mesazhet 'Invalid authentication mechanism' tani tregohet mekanizmi i autentikimit q\u00eb nuk arriti t\u00eb p\u00ebrdoret. Serveri SMTP, kur regjistron n\u00eb log sh\u00ebnimet 'reject', tani paraqet vlerat e cil\u00ebsimeve sasl_method, sasl_username dhe sasl_sender.\n
- P\u00ebr shkak t\u00eb ndryshimit t\u00eb protokollit t\u00eb brendsh\u00ebm q\u00eb p\u00ebrdoret n\u00eb agentin e d\u00ebrgimit, pas p\u00ebrdit\u00ebsimit t\u00eb versionit Postfix \u00ebsht\u00eb e nevojshme t\u00eb rindez\u00ebsh me komand\u00ebn 'postfix reload' ose me komandat 'postfix stop' dhe 'postfix start'. N\u00eb t\u00eb kund\u00ebrt, n\u00eb log do t\u00eb regjistrohet nj\u00eb paralajm\u00ebrim 'unexpected attribute smtputf8 from xxx socket (expecting: sendopts)'. <\/ul>\n