Seva ea mangolo ea Exim 4.95 e lokollotsoe, e eketsa litokiso tse bokelletsoeng le ho eketsa likarolo tse ncha. Ho latela tlhahlobo e ikemetseng ea Loetse ea li-server tse fetang milione, kabelo ea Exim ke 58% (selemong se fetileng 57.59%), Postfix e sebelisoa ho 34.92% (34.70%) ea li-server tsa mangolo, Sendmail - 3.52% (3.75% ), MailEnable - 2% (2.07) %), MDaemon - 0.57% (0.73%), Microsoft Exchange - 0.32% (0.42%). Liphetoho tse kholo:
- Ts'ehetso e tsitsitseng bakeng sa mokhoa oa ho sebetsana le mela ea melaetsa e potlakileng e phatlalalitsoe, e leng se u lumellang ho potlakisa ho qala ha molaetsa oa molaetsa ha boholo ba mohala oa ho romela o le moholo 'me ho na le palo e tsotehang ea melaetsa e romelloang ho batho ba tloaelehileng, mohlala, ha o romella palo e kholo ea mangolo ho bafani ba mangolo a maholo kapa o romela ka moemeli oa phetisetso ea melaetsa (smarthost). Haeba mokhoa o nolofalitsoe ho sebelisoa "queue_fast_ramp" khetho le mekhahlelo e 'meli ea queue processing ("-qq") e lemoha boteng ba karolo e kholo ea melaetsa e lebisitsoeng ho seva se itseng sa poso, joale ho tsamaisoa ho moamoheli eo ho tla qala hang-hang.
- Ts'ebetsong e 'ngoe ea SRS (Sender Rewriting Scheme) e tsitsitse - "SRS_NATIVE", e sa hlokeng litšepeho tsa kantle (ts'ebetso ea khale ea liteko e hlokahalang ho kenya laeborari ea libsrs_alt). SRS e u lumella hore u ngole aterese ea motho ea u romelang bocha nakong ea ho romella ntle le ho tlōla licheke tsa SPF (Sender Policy Framework) le ho netefatsa hore data ea motho ea romelang e bolokiloe e le hore seva se romele melaetsa ha ho ka ba le phoso ea ho fana. Ntho ea bohlokoa ea mokhoa ona ke hore ha ho thehoa khokahanyo, tlhahisoleseding e mabapi le boitsebiso le motho ea romelang pele e fetisoa, mohlala, ha ho ngoloa bocha. [imeile e sirelelitsoe] mabapi le [imeile e sirelelitsoe] e tla bontšoa"[imeile e sirelelitsoe]" SRS e bohlokoa, ho etsa mohlala, ha ho hlophisoa mosebetsi oa manane a poso moo molaetsa oa mantlha o fetisetsoang ho baamoheli ba bang.
- Khetho ea TLS_RESUME e tsitsitse, e fana ka bokhoni ba ho qala khokahano ea TLS e neng e sitisitsoe pele.
- Ts'ehetso bakeng sa LMDB DBMS e kenyellelitsoeng e sebetsang hantle haholo, e bolokang data ka sebopeho sa boleng ba bohlokoa, e tsitsitse. Ke mehlala ea ho batla feela ho tsoa litsing tsa polokelo tse seng li entsoe ka senotlolo se le seng (ho ngola ho tloha ho Exim ho ea ho LMDB ha ho kengoe). Ka mohlala, ho hlahloba sebaka sa motho ea romelang melaong, u ka sebelisa potso e kang "${lookup{$sender_address_domain}lmdb{/var/lib/spamdb/stopdomains.mdb}}".
- Khetho e ekelitsoeng "message_linelength_limit" ho beha moeli ho palo ea litlhaku ka mola.
- Hoa khoneha ho hlokomoloha cache ha u etsa lipotso tsa ho batla.
- Bakeng sa sepalangoang sa appendfile, tlhahlobo ea quota e kentsoe ts'ebetsong ha ho ntse ho amoheloa molaetsa (seshene sa SMTP).
- Ts'ehetso e ekelitsoeng bakeng sa khetho ea "file="" lipotsong tsa ho batla SQLite ", e u lumellang hore u hlalose faele ea database bakeng sa ts'ebetso e itseng ntle le ho hlakisa li-prefixes moleng le taelo ea SQL.
- Lipotso tsa ho batla li ts'ehetsa khetho ea "ret=full" ho khutlisa "data block" eohle e tsamaellanang le senotlolo, eseng mola oa pele feela.
- Ho theha likhokahano tsa TLS ho potlakisoa ka ho lata le ho boloka tlhahisoleseling (joalo ka setifikeiti) sebakeng sa ho e khoasolla pele o sebetsana le khokahano ka 'ngoe.
- E kentse paramethara "proxy_protocol_timeout" ho lokisa nako ea ho tsoa ha Proxy protocol.
- E kentse paramethara "smtp_backlog_monitor" ho nolofalletsa ho rekota tlhahisoleseling mabapi le boholo ba letoto la likhokahano tse emetseng (backlog) ho log.
- E kentse "hosts_require_helo" parameter, e thibelang ho romela taelo ea MAIL haeba taelo ea HELO kapa EHLO e so rometsoe pele.
- E kentse "allow_insecure_tainted_data" parameter, ha e hlalositsoe, ho phonyoha ho sa sireletsehang ha litlhaku tse khethehileng ho data ho tla fella ka temoso ho e-na le phoso.
- Ts'ehetso ea sethala sa macOS e khaotsoe (lifaele tsa kopano li fetiselitsoe sehlopheng se sa tšehetsoeng).
Source: opennet.ru