ื ื™ื™ึทืข ื•ื•ืขืจืกื™ืข ืคื•ืŸ โ€‹โ€‹โ€‹โ€‹Exim 4.93 ืคึผืึธืกื˜ ืกืขืจื•ื•ืขืจ

ื ืึธืš 10 ื—ื“ืฉื™ื ืคื•ืŸ ืึทื ื˜ื•ื•ื™ืงืœื•ื ื’ ืคืืจื’ืขืงื•ืžืขืŸ ืคึผืึธืกื˜ ืกืขืจื•ื•ืขืจ ืžืขืœื“ื•ื ื’ ืขืงืกืึทื 4.93, ืื™ ืŸ ืฐืขืœื› ืŸ ืข ื ื–ืฒื ืข ืŸ ื’ืขืžืื› ื˜ ื’ืขืฐืืจ ืŸ ื’ืขื–ืืžืœ ื˜ ืคืืจืจื™ื›ื˜ื•ื ื’ืขืŸ , ืื• ืŸ ื ืฒ ืข ืฉื˜ืจื™ื›ืŸ . ืื™ืŸ ืœื•ื™ื˜ ืžื™ื˜ ื ืื•ื•ืขืžื‘ืขืจ ืึธื˜ืึทืžื™ื™ื˜ื™ื“ ื™ื‘ืขืจื‘ืœื™ืง ื•ื•ืขื’ืŸ ืึท ืžื™ืœื™ืึธืŸ ืคึผืึธืกื˜ ืกืขืจื•ื•ืขืจืก, ืขืงืกื™ื ืก ื™ื™ึทื ื˜ื™ื™ืœืŸ ืื™ื– 56.90% (ืึท ื™ืึธืจ ืฆื•ืจื™ืง 56.56%), ืคึผืึธืกื˜ืคื™ืงืก ืื™ื– ื’ืขื ื™ืฆื˜ ืื•ื™ืฃ 34.98% (33.79%) ืคื•ืŸ ืคึผืึธืกื˜ ืกืขืจื•ื•ืขืจืก, Sendmail - 3.90% (5.59%), Microsoft Exchange - 0.51% ( 0.85%.

ื”ื•ื™ืคึผื˜ ืขื ื“ืขืจื•ื ื’ืขืŸ:

  • ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ ืคื•ื ื“ืจื•ื™ืกื ื“ื™ืง ืึธื˜ืขื ื˜ืึทืงื™ื™ื˜ืขืจื– (ืจืคืง ืงืกื ื•ืžืงืก). ื ื™ืฆืŸ ื“ื™ "SASL EXTERNAL" ื‘ืึทืคึฟืขืœ, ื“ืขืจ ืงืœื™ืขื ื˜ ืงืขื ืขืŸ ืžื™ื˜ื˜ื™ื™ืœืŸ ื“ื™ ืกืขืจื•ื•ืขืจ ืฆื• ื ื•ืฆืŸ ืงืจืึทื“ืขื ื˜ืฉืึทืœื– ื“ื•ืจื›ื’ืขื’ืื ื’ืขืŸ ื“ื•ืจืš ืคื•ื ื“ืจื•ื™ืกื ื“ื™ืง ื‘ืึทื“ื™ื ื•ื ื’ืก ืึทื–ืึท ื•ื•ื™ IP ืกืขืงื•ืจื™ื˜ื™ (RFC4301) ืื•ืŸ TLS ืคึฟืึทืจ ืึธื˜ืขื ื˜ืึทืงื™ื™ืฉืึทืŸ;
  • ืฆื•ื’ืขื’ืขื‘ืŸ ื“ื™ ืคื™ื™ื™ืงื™ื™ื˜ ืฆื• ื ื•ืฆืŸ ื“ื™ JSON ืคึฟืึธืจืžืึทื˜ ืคึฟืึทืจ ืœื•ืงืึทืคึผ ื˜ืฉืขืงืก. ืื•ื™ืš ืฆื•ื’ืขื’ืขื‘ืŸ ืึธืคึผืฆื™ืขืก ืคึฟืึทืจ ืงืึทื ื“ื™ืฉืึทื ืึทืœ ืžืึทืกืงืก "ืคืึธืจืึทืœืœ" ืื•ืŸ "ืงื™ื™ืŸ" ื ื™ืฆืŸ JSON.
  • ืฆื•ื’ืขื’ืขื‘ืŸ $tls_in_cipher_std ืื•ืŸ $tls_out_cipher_std ื•ื•ืขืจื™ืึทื‘ืึทืœื– ืžื™ื˜ ื“ื™ ื ืขืžืขืŸ ืคื•ืŸ ื“ื™ ืกื™ืคืขืจ ืกื•ื•ื™ืฅ ืงืึธืจืึทืกืคึผืึทื ื“ื™ื ื’ ืฆื• ื“ื™ ื ืึธืžืขืŸ ืคื•ืŸ ื“ื™ RFC.
  • ื ื™ื™ึท ืคืœืึทื’ืก ื”ืึธื‘ืŸ ืฉื•ื™ืŸ ืฆื•ื’ืขืœื™ื™ื’ื˜ ืฆื• ืงืึธื ื˜ืจืึธืœื™ืจืŸ ื“ื™ ืึทืจื•ื™ืกื•ื•ื™ื™ึทื–ืŸ ืคื•ืŸ ืึธื ื–ืึธื’ ื™ื“ืก ืื™ืŸ ื“ื™ ืงืœืึธืฅ (ืฉื˜ืขืœืŸ ื“ื•ืจืš ื“ื™ ืกืขื˜ื˜ื™ื ื’ืก ืœืึธื’_ืกืขืœืขืงื˜ืึธืจ): "msg_id" (ืขื ื™ื™ื‘ืึทืœื“ ื“ื•ืจืš ืคืขืœื™ืงื™ื™ึทื˜) ืžื™ื˜ ื“ื™ ืึธื ื–ืึธื’ ื™ื“ืขื ื˜ื™ืคื™ืขืจ ืื•ืŸ "msg_id_created" ืžื™ื˜ ื“ื™ ืื™ื“ืขื ื˜ื™ื˜ืขื˜ ื“ื–ืฉืขื ืขืจื™ื™ื˜ืึทื“ ืคึฟืึทืจ ื“ื™ ื ื™ื™ึทืข ืึธื ื–ืึธื’.
  • ืฆื•ื’ืขืœื™ื™ื’ื˜ ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ ื“ื™ "ืงืึทืกืข_ื™ื ืกืขื ืกื™ื˜ื™ื•ื•ืข" ืึธืคึผืฆื™ืข ืฆื• ื“ื™ "ื•ื•ืขืจื™ืคื™ = ื ื™ื˜_ื‘ืœื™ื ื“" ืžืึธื“ืข ืฆื• ืื™ื’ื ืึธืจื™ืจืŸ ื›ืึทืจืึทืงื˜ืขืจ ืคืึทืœ ื‘ืขืฉืึทืก ื•ื•ืขืจืึทืคืึทืงื™ื™ืฉืึทืŸ.
  • ืฆื•ื’ืขืœื™ื™ื’ื˜ ื™ืงืกืคึผืขืจืžืขื ืึทืœ ืึธืคึผืฆื™ืข EXPERIMENTAL_TLS_RESUME, ื•ื•ืึธืก ื’ื™ื˜ ื“ื™ ืคื™ื™ื™ืงื™ื™ื˜ ืฆื• ื ืขืžืขื  ื–ื™ื› ื•ื•ื™ื“ืขืจ ืึท ืคืจื™ืขืจ ื™ื ื˜ืขืจืึทืคึผื˜ื™ื“ TLS ืคึฟืึทืจื‘ื™ื ื“ื•ื ื’.
  • ืฆื•ื’ืขื’ืขื‘ืŸ ืึทืŸ ืขืงืกื™ืž_ื•ื•ืขืจืกื™ืึธืŸ ืึธืคึผืฆื™ืข ืฆื• ืึธื•ื•ื•ืขืจืจื™ื™ื“ ื“ื™ ืขืงืกื™ื ื•ื•ืขืจืกื™ืข ื ื•ืžืขืจ ืฉื˜ืจื™ืงืœ ืจืขื–ื•ืœื˜ืึทื˜ ืื™ืŸ ืคืึทืจืฉื™ื“ืŸ ืขืจื˜ืขืจ ืื•ืŸ ื“ื•ืจื›ื’ืขื’ืื ื’ืขืŸ ื“ื•ืจืš ื“ื™ ื•ื•ืขืจื™ืึทื‘ืึทืœื– $ ืขืงืกื™ืž_ื•ื•ืขืจืกื™ืึธืŸ ืื•ืŸ $ ื•ื•ืขืจืกื™ืข_ื ื•ืžืขืจ.
  • ืฆื•ื’ืขื’ืขื‘ืŸ ${sha2_N:} ืึธืคึผืขืจืึทื˜ืึธืจ ืึธืคึผืฆื™ืขืก ืคึฟืึทืจ N=256, 384, 512.
  • ื™ืžืคึผืœืึทืžืขื ื˜ืึทื“ "$ืจ_..." ื•ื•ืขืจื™ืึทื‘ืึทืœื–, ืฉื˜ืขืœืŸ ืคึฟื•ืŸ ืจื•ื˜ื™ื ื’ ืึธืคึผืฆื™ืขืก ืื•ืŸ ื‘ื ื™ืžืฆื ืคึฟืึทืจ ื ื•ืฆืŸ ื•ื•ืขืŸ ืื™ืจ ืžืึทื›ืŸ ื“ื™ืกื™ื–ืฉืึทื ื– ื•ื•ืขื’ืŸ ืจื•ื˜ื™ื ื’ ืื•ืŸ ืึทืจื™ื‘ืขืจืคื™ืจืŸ ืกืขืœืขืงืฆื™ืข.
  • IPv6 ืฉื˜ื™ืฆืŸ ืื™ื– ืฆื•ื’ืขืœื™ื™ื’ื˜ ืฆื• SPF ืœื•ืงืึทืคึผ ืจื™ืงื•ื•ืขืก.
  • ื•ื•ืขืŸ ืื™ืจ ื“ื•ืจื›ืคื™ืจืŸ ื˜ืฉืขืงืก ื“ื•ืจืš DKIM, ื“ื™ ืคื™ื™ื™ืงื™ื™ื˜ ืฆื• ืคื™ืœื˜ืขืจ ืœื•ื™ื˜ ื˜ื™ื™ืคึผืก ืคื•ืŸ ืฉืœื™ืกืœืขืŸ ืื•ืŸ ื”ืึทืฉืขืก ืื™ื– ืฆื•ื’ืขื’ืขื‘ืŸ.
  • ื•ื•ืขืŸ ืื™ืจ ื ื•ืฆืŸ TLS 1.3, ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ ื“ื™ OCSP (ืึธื ืœื™ื™ืŸ ืกืขืจื˜ื™ืคื™ืงืึทื˜ ืกื˜ืึทื˜ื•ืก ืคึผืจืึธื˜ืึธืงืึธืœ) ืคืึทืจืœืขื ื’ืขืจื•ื ื’ ืื™ื– ืฆื•ื’ืขืฉื˜ืขืœื˜ ืคึฟืึทืจ checks ื‘ืึทื•ื•ื™ื™ึทื–ืŸ ืจืขื•ื•ืึธืงืึทื˜ื™ืึธืŸ ืกื˜ืึทื˜ื•ืก.
  • ืฆื•ื’ืขื’ืขื‘ืŸ "smtp:ehlo" ื’ืขืฉืขืขื ื™ืฉ ืฆื• ืžืึธื ื™ื˜ืึธืจ ื“ื™ ืจืฉื™ืžื” ืคื•ืŸ ืคืึทื ื’ืงืฉืึทื ืึทืœื™ื˜ื™ ืฆื•ื’ืขืฉื˜ืขืœื˜ ื“ื•ืจืš ื“ื™ ื•ื•ื™ื™ึทื˜ ืคึผืึทืจื˜ื™ื™.
  • ืฆื•ื’ืขื’ืขื‘ืŸ ืึท ื‘ืึทืคึฟืขืœ ืฉื•ืจื” ืึธืคึผืฆื™ืข ืฆื• ืึทืจื™ื‘ืขืจืคื™ืจืŸ ืึทืจื˜ื™ืงืœืขืŸ ืคื•ืŸ ืื™ื™ืŸ ื ืึธืžืขืŸ ืจื™ื™ ืฆื• ืื ื“ืขืจืŸ.
  • ืฆื•ื’ืขื’ืขื‘ืŸ ื•ื•ืขืจื™ืึทื‘ืึทืœื– ืžื™ื˜ TLS ื•ื•ืขืจืกื™ืขืก ืคึฟืึทืจ ื™ื ืงืึทืžื™ื ื’ ืื•ืŸ ืึทื•ื˜ื’ืึธื•ื™ื ื’ ืจื™ืงื•ื•ืขืก - $tls_in_ver ืื•ืŸ $tls_out_ver.
  • ื•ื•ืขืŸ ื ื™ืฆืŸ OpenSSL, ืึท ืคึฟื•ื ืงืฆื™ืข ืื™ื– ืฆื•ื’ืขืœื™ื™ื’ื˜ ืฆื• ืฉืจื™ื™ึทื‘ืŸ ื˜ืขืงืขืก ืžื™ื˜ ืฉืœื™ืกืœืขืŸ ืื™ืŸ NSS ืคึฟืึธืจืžืึทื˜ ืฆื• ื“ืขืงืึธื“ืข ื™ื ื˜ืขืจืกืขืคึผื˜ืึทื“ ื ืขืฅ ืคึผืึทืงื™ืฅ. ื“ืขืจ ื˜ืขืงืข ื ืึธืžืขืŸ ืื™ื– ื‘ืึทืฉื˜ื™ืžื˜ ื“ื•ืจืš ื“ื™ SSLKEYLOGFILE ืกื•ื•ื™ื•ื•ืข ื‘ื™ื™ึทื˜ืขื•ื•ื“ื™ืง. ื•ื•ืขืŸ ื‘ื ื™ืŸ ืžื™ื˜ GnuTLS, ืขื ืœืขืš ืคืึทื ื’ืงืฉืึทื ืึทืœื™ื˜ื™ ืื™ื– ืฆื•ื’ืขืฉื˜ืขืœื˜ ื“ื•ืจืš GnuTLS ืžื›ืฉื™ืจื™ื, ืึธื‘ืขืจ ืจื™ืงื•ื•ื™ื™ืขืจื– ืคืœื™ืกื ื“ื™ืง ื•ื•ื™ ื•ื•ืึธืจืฆืœ.

ืžืงื•ืจ: opennet.ru

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’