Inguqulo entsha ye-Exim 4.95 mail server

Iseva ye-imeyili ye-Exim 4.95 ikhululiwe, yengeza ukulungiswa okunqwabelene futhi kwengeza izici ezintsha. Ngokocwaningo oluzenzakalelayo lwangoSepthemba lwamaseva e-imeyili angaphezu kwesigidi, isabelo sika-Exim singama-58% (onyakeni odlule 57.59%), i-Postfix isetshenziswa ku-34.92% (34.70%) wamaseva e-imeyili, i-Sendmail - 3.52% (3.75% ), I-MailEnable - 2% (2.07) %), MDaemon - 0.57% (0.73%), Microsoft Exchange - 0.32% (0.42%). Izinguquko eziyinhloko:

  • Ukusekelwa okuzinzile kwemodi yokucubungula umugqa womlayezo osheshayo kumenyezelwe, okukuvumela ukuthi usheshise ukuqala kokulethwa komlayezo lapho ulayini wokuthumela mkhulu futhi kunenani elimangalisayo lemilayezo ethunyelwa kubasingathi abajwayelekile, isibonelo, uma ukuthumela inqwaba yezinhlamvu kubahlinzeki bemeyili abakhulu noma ukuthumela nge-ejenti yokudlulisa imiyalezo ephakathi (smarthost). Uma imodi inikwe amandla kusetshenziswa inketho ethi "queue_fast_ramp" kanye nokucubungula komugqa wezigaba ezimbili ("-qq") kuthola ukuba khona kwengxenye enkulu yemilayezo eqondiswe kuseva ethile yemeyili, khona-ke ukulethwa kulowo msingathi kuzoqala ngokushesha.
  • Okunye ukuqaliswa kwendlela ye-SRS (I-Sender Rewriting Scheme) izinzile - “SRS_NATIVE”, engadingi ukuncika kwangaphandle (ukusetshenziswa kokuhlola okudala kudinga ukufaka umtapo wezincwadi we-libsrs_alt). I-SRS ikuvumela ukuthi ubhale kabusha ikheli lomthumeli phakathi nokudlulisa ngaphandle kokwephula ukuhlolwa kwe-SPF (Uhlaka Lwenqubomgomo Yomthumeli) futhi uqinisekise ukuthi idatha yomthumeli iyagcinwa ukuze iseva ithumele imilayezo uma kwenzeka yehluleka ukuletha. Ingqikithi yendlela iwukuthi lapho uxhumano lusungulwa, ulwazi mayelana nobunikazi nomthumeli wangempela ludluliselwa, isibonelo, lapho kubhalwa kabusha. [i-imeyili ivikelwe] on [i-imeyili ivikelwe] kuzoboniswa "[i-imeyili ivikelwe]" I-SRS ibalulekile, isibonelo, lapho uhlela umsebenzi wohlu lwamakheli lapho umlayezo wangempela uqondiswa kabusha kwabanye abamukeli.
  • Inketho ye-TLS_RESUME izinzile, inikezela ngamandla okuqalisa kabusha uxhumo lwe-TLS obeluphazamiseke ngaphambilini.
  • Ukusekelwa kwe-DMDB DBMS eshumekiwe esebenza kahle kakhulu, egcina idatha ngefomethi yenani elingukhiye, kuzinzile. Amasampula okubheka kuphela asuka kusizindalwazi esenziwe ngomumo kusetshenziswa ukhiye owodwa asekelwayo (ukubhala kusuka ku-Exim kuya ku-LMDB akwenziwa). Isibonelo, ukuze uhlole isizinda somthumeli emithethweni, ungasebenzisa umbuzo njengokuthi "${lookup{$sender_address_domain}lmdb{/var/lib/spamdb/stopdomains.mdb}}".
  • Inketho eyengeziwe ethi “message_linelength_limit” ukuze ubeke umkhawulo enanini lezinhlamvu emugqeni ngamunye.
  • Ikhono lokuziba inqolobane uma kwenziwa izicelo zokubheka linikeziwe.
  • Ekuthuthweni kwefayela le-appendfile, ukuhlolwa kwesabelo kuqalisiwe ngenkathi kuthola umlayezo (isikhathi se-SMTP).
  • Emibuzweni yokubheka ku-SQLite, ukwesekwa kwenketho ethi “file=” yengeziwe, okukuvumela ukuba ucacise ifayela lesizindalwazi ukuze usebenze okuthile ngaphandle kokucacisa iziqalo kulayini nomyalo we-SQL.
  • Imibuzo yokusesha i-search manje isekela inketho ethi "ret=full" ukuze ubuyisele yonke ibhulokhi yedatha ehambisana nokhiye, hhayi nje umugqa wokuqala.
  • Ukusungula ukuxhumana kwe-TLS kuyasheshiswa ngokulanda kusengaphambili kanye nolwazi lwesikhashana (njengezitifiketi) esikhundleni sokululanda ngaphambi kokucubungula uxhumano ngalunye.
  • Kwengezwe ipharamitha ethi "proxy_protocol_timeout" ukuze kulungiselelwe ukuphela kwesikhathi kwephrothokholi yommeleli.
  • Kwengezwe ipharamitha ethi “smtp_backlog_monitor” ukuze unike amandla ukuqoshwa kolwazi mayelana nosayizi womugqa woxhumo olusalindile (backlog) kulogi.
  • Kwengezwe ipharamitha ethi "hosts_require_helo", evimbela ukuthumela umyalo we-MAIL uma umyalo we-HELO noma we-EHLO ungazange uthunyelwe ngaphambilini.
  • Kwengezwe ipharamitha ethi “allow_insecure_tainted_data”, uma icacisiwe, ukuphunyuka okungaphephile kwezinhlamvu ezikhethekile kudatha kuzophumela kusexwayiso esikhundleni sephutha.
  • Ukusekelwa kwenkundla ye-macOS kunqanyuliwe (amafayela omhlangano ahanjiswe esigabeni esingasekelwe).

    Source: opennet.ru

Engeza amazwana