Seva ea poso ea Postfix 3.8.0 e teng

Ka mor'a likhoeli tsa 14 tsa tsoelo-pele, lekala le lecha le tsitsitseng la seva sa poso sa Postfix - 3.8.0 - le ile la lokolloa. Ka nako e ts'oanang, e phatlalalitse pheletso ea tšehetso bakeng sa lekala la Postfix 3.4, le lokollotsoeng qalong ea 2019. Postfix ke e 'ngoe ea merero e sa tloaelehang e kopanyang ts'ireletso e phahameng, ts'epahalo le ts'ebetso ka nako e ts'oanang, e fihletsoeng ka lebaka la meralo e reriloeng hantle le leano le tiileng la moralo oa khoutu le tlhahlobo ea lipalo. Khoutu ea morero e ajoa tlasa EPL 2.0 (Eclipse Public License) le IPL 1.0 (IBM Public License).

Ho latela tlhahlobo e ikemetseng ea Pherekhong ea li-server tse ka bang likete tse 400, Postfix e sebelisoa ho 33.18% (selemong se fetileng 34.08%) ea li-server tsa mangolo, kabelo ea Exim ke 60.27% (58.95%), Sendmail - 3.62% (3.58) %), MailEnable - 1.86% ( 1.99%), MDaemon - 0.39% (0.52%), Microsoft Exchange - 0.19% (0.26%), OpenSMTPD - 0.06% (0.06%).

Litlhahiso tse ka sehloohong:

  • Moreki oa SMTP/LMTP o na le bokhoni ba ho lekola lirekoto tsa DNS SRV ho fumana moamoheli le boema-kepe ba seva ea mangolo e tla sebelisoa ho fetisa melaetsa. Mohlala, haeba o hlakisa "use_srv_lookup = submission" le "relayhost = example.com:submission" ho litlhophiso, moreki oa SMTP o tla kopa moamoheli oa SRV record _submission._tcp.example.com ho fumana hore na poso ke mang le boema-kepe. Karolo e reriloeng e ka sebelisoa litsing tsa lits'ebeletso moo lits'ebeletso tse nang le linomoro tsa marang-rang tse abetsoeng ka matla li sebelisetsoang ho fana ka melaetsa ea lengolo-tsoibila.
  • Lethathamo la mekhoa e sebelisoang ka ho sa feleng ho litlhophiso tsa TLS ha le kenyeletse SEED, IDEA, 3DES, RC2, RC4 le RC5 ciphers, MD5 hash le DH le ECDH key exchange algorithms, tse khetholloang e le tse sa sebetseng kapa tse sa sebelisoeng. Ha o hlakisa mefuta ea "export" le "low" cipher litlhophisong, mofuta oa "medium" o se o setiloe, kaha tšehetso ea mefuta ea "export" le "tlase" e khaotsoe ho OpenSSL 1.1.1.
  • E kentse tlhophiso e ncha "tls_ffdhe_auto_groups" ho nolofalletsa protocol ea puisano ea sehlopha ea FFDHE (Finite-Field Diffie-Hellman Ephemeral) ho TLS 1.3 ha e hahiloe ka OpenSSL 3.0.
  • Ho itšireletsa khahlanong le litlhaselo tse reretsoeng ho khathatsa mohopolo o teng, ho kopanngoa ha lipalo-palo "smtpd_client_*_rate" le "smtpd_client_*_count" ho fanoe ka moelelo oa li-blocks tsa marang-rang, boholo ba tsona bo boletsoeng ke litaelo "smtpd_client_ipv4_prefix_lengthpxx_length_client_lengpxd_x_xxxxxxxxxx_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxpd" ka ho sa feleng /6 le /32)
  • Tšireletso e ekelitsoeng khahlanong le litlhaselo tse sebelisang kopo ea puisano ea khokahano ea TLS ka har'a khokahanyo e seng e ntse e thehiloe ho SMTP ho theha mojaro o sa hlokahaleng oa CPU.
  • Taelo ea postconf e fana ka temoso bakeng sa litlhaloso tse boletsoeng hang-hang ka mor'a litekanyetso tsa parameter ho faele ea tlhophiso ea Postfix.
  • Hoa khonahala ho hlophisa khouto ea moreki bakeng sa PostgreSQL ka ho hlakisa tšobotsi ea "encoding" faeleng ea tlhophiso (ka boiketsetso, boleng bo se bo behiloe ho "UTF8", mme pele ho ne ho sebelisoa encoding ea "LATIN1".
  • Litaelong tsa postfix le postlog, log output to stderr e se e hlahisoa ho sa tsotelehe khokahano ea stderr stream ho terminal.
  • Sefateng sa mohloli, lifaele "global/mkmap*.[hc]" li isitsoe bukeng ea "util", ke lifaele feela "global/mkmap_proxy.*" tse neng li siiloe bukeng e kholo.

Source: opennet.ru

Eketsa ka tlhaloso