From: Wietse Venema Date: Thu, 13 Jan 2011 05:00:00 +0000 (-0500) Subject: postfix-2.8-20110113 X-Git-Tag: v2.8.0-RC1~2 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=7d04ab6f85abc22f437c620eb3f430c5747b7f41;p=thirdparty%2Fpostfix.git postfix-2.8-20110113 --- diff --git a/postfix/README_FILES/POSTSCREEN_README b/postfix/README_FILES/POSTSCREEN_README index 6badf305a..6e93ddff4 100644 --- a/postfix/README_FILES/POSTSCREEN_README +++ b/postfix/README_FILES/POSTSCREEN_README @@ -120,7 +120,7 @@ Example: /etc/postfix/main.cf: postscreen_access_list = permit_mynetworks, - /etc/postfix/postscreen_access.cidr + cidr:/etc/postfix/postscreen_access.cidr /etc/postfix/postscreen_access.cidr: # Rules are evaluated in the order as specified. @@ -469,8 +469,8 @@ impact of this limitation by giving deep protocol tests a long expiration time. CCoonnffiigguurriinngg tthhee ppoossttssccrreeeenn((88)) sseerrvviiccee -postscreen(8) has been tested on FreeBSD [4-8] and Linux 2.[4-6] systems. It -probably needs additional work before it can be used on Solaris. +postscreen(8) has been tested on FreeBSD [4-8], Linux 2.[4-6] and Solaris 9 +systems. * Turning on postscreen(8) without blocking mail * Blocking mail with postscreen(8) @@ -651,3 +651,8 @@ stress-adaptive behavior in September. Ralf Hildebrandt ran this code on several servers to collect real-world statistics. This version still used the embarrassing dnsblog(8) ad-hoc DNS client program. +Wietse added STARTTLS support in December 2010. This makes postscreen(8) usable +for sites that require TLS support. The implementation introduces the tlsproxy +(8) event-driven TLS proxy that decrypts/encrypts the sessions for multiple +SMTP clients. + diff --git a/postfix/WISHLIST b/postfix/WISHLIST index b6ef68996..b11bcc083 100644 --- a/postfix/WISHLIST +++ b/postfix/WISHLIST @@ -4,8 +4,15 @@ Wish list: Remove this file from the stable release. + Make tlsproxy_service and dnsblog_service configurable. + Things to do after the stable release: + When does it pay off to send domains in the active queue + to a DNS prefetch daemon? Could this generalize to a dynamic + transport map that piggy-backs domains with the same MX + host into the same mail delivery transaction? + inline table where the "whitespace replacement" character is specified in-line. Ex: inline:XYname1Xvalue1Yname2Xvalue2 would instantiate a table with (name1, value1) and (name2, diff --git a/postfix/html/POSTSCREEN_README.html b/postfix/html/POSTSCREEN_README.html index 784d12b56..11259a64a 100644 --- a/postfix/html/POSTSCREEN_README.html +++ b/postfix/html/POSTSCREEN_README.html @@ -164,7 +164,7 @@ by a CIDR table for selective white- and blacklisting. 

 /etc/postfix/main.cf:
     postscreen_access_list = permit_mynetworks,
-        /etc/postfix/postscreen_access.cidr
+        cidr:/etc/postfix/postscreen_access.cidr
 
 /etc/postfix/postscreen_access.cidr:
    # Rules are evaluated in the order as specified.
@@ -649,9 +649,8 @@ time. 

 
  Configuring the postscreen(8) service
 

 
-
 postscreen(8) has been tested on FreeBSD [4-8] and Linux 2.[4-6]
-systems.  It probably needs additional work before it can be used
-on Solaris. 

+
 postscreen(8) has been tested on FreeBSD [4-8], Linux 2.[4-6]
+and Solaris 9 systems.