Postfix
http://www.postfix.org/
A fast, secure, and flexible mailer that aims to be an alternative to the widely-used sendmail program.
- Devel package for openSUSE:Factory
-
13
derived packages
- Links to openSUSE:Factory / postfix
- Has a link diff
- Download package
-
Checkout Package
osc -A https://api.opensuse.org checkout server:mail/postfix && cd $_
- Create Badge
Refresh
Refresh
Source Files (show unmerged sources)
Filename | Size | Changed |
---|---|---|
_multibuild | 0000000061 61 Bytes | |
check_mail_queue | 0000000477 477 Bytes | |
fix-postfix-script.patch | 0000000663 663 Bytes | |
ipv6_disabled.patch | 0000000518 518 Bytes | |
pointer_to_literals.patch | 0000002526 2.47 KB | |
postfix-3.9.0.tar.gz | 0004953133 4.72 MB | |
postfix-3.9.0.tar.gz.asc | 0000000220 220 Bytes | |
postfix-SUSE.tar.gz | 0000023874 23.3 KB | |
postfix-avoid-infinit-loop-if-no-permission.patch | 0000000600 600 Bytes | |
postfix-bdb-main.cf.patch | 0000005939 5.8 KB | |
postfix-bdb.changes | 0000251419 246 KB | |
postfix-bdb.spec | 0000022635 22.1 KB | |
postfix-linux45.patch | 0000000468 468 Bytes | |
postfix-main.cf.patch | 0000007441 7.27 KB | |
postfix-master.cf.patch | 0000006274 6.13 KB | |
postfix-mysql.tar.bz2 | 0000003274 3.2 KB | |
postfix-no-md5.patch | 0000001218 1.19 KB | |
postfix-rpmlintrc | 0000000292 292 Bytes | |
postfix-ssl-release-buffers.patch | 0000000971 971 Bytes | |
postfix-user.conf | 0000000146 146 Bytes | |
postfix-vda-v14-3.0.3.patch | 0000055082 53.8 KB | |
postfix-vmail-user.conf | 0000000072 72 Bytes | |
postfix.changes | 0000251651 246 KB | |
postfix.keyring | 0000009281 9.06 KB | |
postfix.spec | 0000024918 24.3 KB | |
pre_checkin.sh | 0000000234 234 Bytes | |
set-default-db-type.patch | 0000007911 7.73 KB |
Latest Revision
Dirk Stoecker (dstoecker)
accepted
request 1156371
from
Arjen de Korte (adkorte)
(revision 481)
- update to 3.9.0 * As described in DEPRECATION_README, the SMTP server features "permit_naked_ip_address", "check_relay_domains", and "reject_maps_rbl" have been removed, after they have been logging a warning for some 20 years. These features now log a warning and return a "server configuration error" response. * The MySQL client no longer supports MySQL versions < 4.0. MySQL version 4.0 was released in 2003. * As covered in DEPRECATION_README, the configuration parameter "disable_dns_lookup" and about a dozen TLS-related parameters are now officially obsolete. These parameters still work, but the postconf command logs warnings that they will be removed from Postfix. * As covered in DEPRECATION_README, "permit_mx_backup" logs a warning that it will be removed from Postfix. * In message headers, Postfix now formats numerical days as two-digit days, i.e. days 1-9 have a leading zero instead of a leading space. This change was made because the RFC 5322 date and time specification recommends (i.e. SHOULD) that a single space be used in each place that folding white space appears. This change avoids a breaking change in the length of a date string. * The MySQL client default characterset is now configurable with the "charset" configuration file attribute. The default is "utf8mb4", consistent with the MySQL 8.0 built-in default, but different from earlier MySQL versions where the built-in default was "latin1". * Support to query MongoDB databases, contributed by Hamid Maadani, based on earlier code by Stephan Ferraro. See MONGODB_README and mongodb_table(5) * The RFC 3461 envelope ID is now exported in the local(8) delivery agent with the ENVID environment variable, and in the pipe(8) delivery agent with the ${envid} command-line attribute. * Configurable idle and retry timer settings in the mysql: and pgsql: clients. A shorter than default retry timer can sped up the recovery after error, when Postfix is configured with only one server in the "hosts" attribute. After the code was frozen for release, we have learned that Postfix can recover faster from some errors when the single server is specified multiple times in the "hosts" attribute. * Optional Postfix TLS support to request an RFC7250 raw public key instead of an X.509 public-key certificate. The configuration settings for raw key public support will be ignored when there is no raw public key support in the local TLS implementation (i.e. Postfix with OpenSSL versions before 3.2). See RELEASE_NOTES for more information. * Preliminary support for OpenSSL configuration files, primarily OpenSSL 1.1.1b and later. This introduces two new parameters "tls_config_file" and "tls_config_name", which can be used to limit collateral damage from OS distributions that crank up security to 11, increasing the number of plaintext email deliveries. Details are in the postconf(5) manpage under "tls_config_file" and "tls_config_name". * With "smtpd_forbid_unauth_pipelining = yes" (the default), Postfix defends against multiple "blind" SMTP attacks. This feature was back-ported to older stable releases but disabled by default. * With "smtpd_forbid_bare_newline = normalize" (the default) Postfix defends against SMTP smuggling attacks. See RELEASE_NOTES for details. This feature was back-ported to older stable releases but disabled by default. * Prevent outbound SMTP smuggling, where an attacker uses Postfix to send email containing a non-standard End-of-DATA sequence, to exploit inbound SMTP smuggling at a vulnerable remote SMTP server. With "cleanup_replace_stray_cr_lf = yes" (the default), the cleanup daemon replaces each stray <CR> or <LF> character in message content with a space character. This feature was back-ported to older stable releases with identical functionality. * The Postfix DNS client now limits the total size of DNS lookup results to 100 records; it drops the excess records, and logs a warning. This limit is 20x larger than the number of server addresses that the Postfix SMTP client is willing to consider when delivering mail, and is far below the number of records that could cause a tail recursion crash in dns_rr_append() as reported by Toshifumi Sakaguchi. This also introduces a similar limit on the number of DNS requests that a check_*_*_access restriction can make. All this was back-ported to older stable releases with identical functionality. - refreshed patch: % postfix-no-md5.patch - change obsoleted "disable_dns_lookups" to "smtp_dns_support_level" % postfix-SUSE.tar.gz % postfix-main.cf.patch % postfix-master.cf.patch
Comments 8
Why do we still bundle /etc/postfix/aliases? As far as I can see, it isn't used by default anyway. Isn't it just confusing to have both /etc/aliases and /etc/postfix/aliases?
Yes it is confusing, but we do have both traditional conditioned: /etc/aliases is part of netcfg package and will be used by other MTAs too. /etc/postfix/aliases is part of the postfix package and it is there even if it should not be used IMHO :-(
So why not change that situation? After all, the
/etc/postfix/aliases
file is just a sample. If it is already provided by thenetcfg
package, why package it inpostfix
too. Even when it is technically possible to use both at the same time, it is confusing to do so.I agree with you! Need replace the /etc/postfix/aliases file with a symlink to ../aliases. That way there would be less confusion and nothing would break.
Can we please keep stable releases here. If someone prefers to test non-production release then please do so in your home project. Thank you
Looks pretty stable to me: http://www.postfix.org/announcements/postfix-3.8.0.html
sorry ... you are right. Only saw that Postfix 3.8 non-production release thing.
That's probably a bug for the Postfix website. This should probably read Postfix 3.9 non-production release instead, as the non-production releases are based on the current experimental release (which is 3.9 now).