Ngemva kwezinyanga ezingu-10 zokuthuthukiswa, igatsha elisha elizinzile le-Postfix mail server likhishwe - 3.7.0. Ngesikhathi esifanayo, yamemezela ukuphela kokusekelwa kwegatsha le-Postfix 3.3, elikhishwe ekuqaleni kuka-2018. I-Postfix ingenye yamaphrojekthi ayivelakancane ahlanganisa ukuphepha okuphezulu, ukwethembeka nokusebenza ngasikhathi sinye, okuzuzwe ngenxa yesakhiwo esicatshangelwe kahle kanye nenqubomgomo eqinile eqinile yokuklama ikhodi nokuhlolwa kwe-patch audit. Ikhodi yephrojekthi isatshalaliswa ngaphansi kwe-EPL 2.0 (Eclipse Public License) kanye ne-IPL 1.0 (IBM Public License).
Ngokocwaningo oluzenzakalelayo lwangoJanuwari lwamaseva e-imeyili angaba yizinkulungwane ezingama-500, iPostfix isetshenziswa ku-34.08% (onyakeni owedlule 33.66%) wamaseva e-imeyili, isabelo se-Exim singama-58.95% (59.14%), i-Sendmail - 3.58% (3.6) %), MailEnable - 1.99% ( 2.02%), MDaemon - 0.52% (0.60%), Microsoft Exchange - 0.26% (0.32%), OpenSMTPD - 0.06% (0.05%).
Okuqanjiwe okuyinhloko:
- Kungenzeka ukufaka okuqukethwe kwamathebula amancane "cidr:", "pcre:" kanye "regexp:" ngaphakathi kwamanani epharamitha yokumisa ye-Postfix, ngaphandle kokuxhuma amafayela angaphandle noma imininingwane yolwazi. Ukushintsha endaweni kuchazwa kusetshenziswa izikaki ezigoqekile, isibonelo inani elimisiwe lepharamitha ye-smtpd_forbidden_commands manje liqukethe uchungechunge oluthi "XHUMANA THOLA POST regexp:{{/^[^A-Z]/ Thrash}}" ukuze kuqinisekiswe ukuthi ukuxhumana okuvela kumakhasimende athumela udoti. esikhundleni imiyalo ziyalahlwa. I-syntax evamile: /etc/postfix/main.cf: ipharamitha = .. uhlobo lwemephu:{{ rule-1 }, {rule-2 } .. } .. /etc/postfix/master.cf: .. -o { ipharamitha = .. uhlobo lwemephu:{ { umthetho-1 }, { umthetho-2 } .. } .. } ..
- Umphathi we-postlog manje usefakwe ifulegi le-set-gid futhi, lapho yethulwa, yenza imisebenzi ngamalungelo eqembu le-postdrop, elivumela ukuthi lisetshenziswe izinhlelo ezingafaneleki ukubhala izingodo ngenqubo ye-postlogd yangemuva, evumela ukuguquguquka okukhulu. ekulungiseleleni i-maillog_file futhi kufaka phakathi ukungena kwe-stdout kusuka esitsheni.
- Usekelo lwe-API olungeziwe lwemitapo yolwazi ye-OpenSSL 3.0.0, PCRE2 kanye ne-Berkeley DB 18.
- Ukuvikela okungeziwe ekuhlaselweni ukuze kunqunywe ukungqubuzana kwama-hashi kusetshenziswa amandla ayisihluku. Ukuvikelwa kusetshenziswa ngokungahleliwe kwesimo sokuqala samatafula e-hashi agcinwe ku-RAM. Njengamanje, iyodwa kuphela indlela yokwenza lokho kuhlasela ekhonjiwe, okubandakanya ukubala amakheli e-IPv6 amaklayenti e-SMTP kusevisi ye-anvil futhi edinga ukusungulwa kwamakhulu okuxhumana kwesikhathi esifushane ngomzuzwana kuyilapho kuseshwa ngomjikelezo ezinkulungwaneni zamakheli e-IP amaklayenti ahlukene. . Amanye amathebula e-hashi, okhiye abangahlolwa ngokusekelwe kudatha yomhlaseli, awathinteki ekuhlaselweni okunjalo, ngoba anomkhawulo wesayizi (i-anvil isetshenziselwa ukuhlanza kanye njalo ngemizuzwana eyi-100).
- Ukuvikela okuqinisiwe kumaklayenti angaphandle namaseva adlulisela kancane kancane idatha kancane kancane ukuze kugcinwe ukuxhumana kwe-SMTP ne-LMTP kusebenza (isibonelo, ukuvimba umsebenzi ngokudala izimo zokuqeda umkhawulo enanini loxhumo olumisiwe). Esikhundleni semikhawulo yesikhathi ehlobene namarekhodi, umkhawulo ohlobene nezicelo manje ususetshenziswa, futhi umkhawulo wesilinganiso esincane esingaba khona sokudlulisa idatha kumabhulokhi e-DATA kanye ne-BDAT seyengeziwe. Ngokufanelekile, izilungiselelo ze-{smtpd,smtp,lmtp}_per_record_deadline zithathelwe indawo {smtpd,smtp,lmtp}_per_request_deadline kanye ne-{smtpd, smtp,lmtp}_min_data_rate.
- Umyalo womugqa wokuthunyelwe uqinisekisa ukuthi izinhlamvu ezingaphrinteki, njengemigqa emisha, ziyahlanzwa ngaphambi kokuphrinta ukuze zibe okukhiphayo okuvamile noma ukufometha iyunithi yezinhlamvu ibe yi-JSON.
- Ku-tlsproxy, amapharamitha we-tlsproxy_client_level kanye ne-tlsproxy_client_policy athathelwe indawo yizilungiselelo ezintsha ezithi tlsproxy_client_security_level kanye ne-tlsproxy_client_policy_maps ukuze kuhlanganiswe amagama amapharamitha ku-Postfix (amagama wezilungiselelo ze-tlsproxyxsmxx izilungiselelo_xxtxxxxxxxxxxxxx
- Iphutha lokuphatha elivela kumakhasimende esebenzisa i-LMDB selisetshenziswe kabusha.
Source: opennet.ru