From 3274c3cea9d739f86e84b65664aabb692e37e83f Mon Sep 17 00:00:00 2001 From: Wietse Venema Date: Sat, 18 May 2019 00:00:00 -0500 Subject: [PATCH] postfix-3.5-20190518 --- postfix/HISTORY | 16 ++++++++++++++++ postfix/README_FILES/BASIC_CONFIGURATION_README | 11 ++++++----- postfix/README_FILES/MAILLOG_README | 4 ++-- postfix/README_FILES/SMTPD_POLICY_README | 4 ++-- postfix/RELEASE_NOTES | 2 +- postfix/html/BASIC_CONFIGURATION_README.html | 9 +++++---- postfix/html/MAILLOG_README.html | 6 +++--- postfix/html/SMTPD_POLICY_README.html | 2 +- postfix/html/postconf.5.html | 15 ++++++++++++++- postfix/man/man5/postconf.5 | 14 +++++++++++++- postfix/proto/BASIC_CONFIGURATION_README.html | 9 +++++---- postfix/proto/MAILLOG_README.html | 6 +++--- postfix/proto/SMTPD_POLICY_README.html | 2 +- postfix/proto/postconf.proto | 15 ++++++++++++++- postfix/src/dns/dns_lookup.c | 11 +++++++++++ postfix/src/dns/dns_str_resflags.c | 10 ++++++++++ postfix/src/global/mail_version.h | 2 +- postfix/src/smtpd/smtpd.c | 16 +++++++++++----- postfix/src/util/sys_defs.h | 6 ++++++ 19 files changed, 125 insertions(+), 35 deletions(-) diff --git a/postfix/HISTORY b/postfix/HISTORY index 3824c0c04..90995d74a 100644 --- a/postfix/HISTORY +++ b/postfix/HISTORY @@ -24257,6 +24257,22 @@ Apologies for any names omitted. and the way that check_client_access will match subnets of an IPv6 address. +20190428 + + Cleanup: replace "(whatever *) 0" with meaningfully-named + constants. Sheesh. File: smtpd/smtpd.c. + + Documentation: BASIC_CONFIGURATION_README example default + setting was not updated after Postfix 3.0 change. File: + proto/BASIC_CONFIGURATION_README.html + +20190505 + + Workaround: uClibc has no res_send. Log a warning if this + code path would be used, and ignore dns_ncache_ttl_fix_enable. + Files: util/sys_defs.h, dns/dns_lookup.c, TODO: makedefs + and INSTALL documentation. + 20190516 Initial search order support for check_ccert_access. The diff --git a/postfix/README_FILES/BASIC_CONFIGURATION_README b/postfix/README_FILES/BASIC_CONFIGURATION_README index e8624ec92..cfd885110 100644 --- a/postfix/README_FILES/BASIC_CONFIGURATION_README +++ b/postfix/README_FILES/BASIC_CONFIGURATION_README @@ -172,16 +172,17 @@ Postfix can also be configured to relay mail from "mobile" clients that send mail from outside an authorized network block. This is explained in the SASL_README and TLS_README documents. -IMPORTANT: If your machine is connected to a wide area network then your -default mynetworks setting may be too friendly. +IMPORTANT: If your machine is connected to a wide area network then the +"mynetworks_style = host" setting may be too friendly. Examples (specify only one of the following): /etc/postfix/main.cf: - mynetworks_style = subnet (default: authorize subnetworks) - mynetworks_style = host (safe: authorize local machine only) - mynetworks = 127.0.0.0/8 (safe: authorize local machine only) + mynetworks_style = subnet (not safe on a wide area network) + mynetworks_style = host (authorize local machine only) + mynetworks = 127.0.0.0/8 (authorize local machine only) mynetworks = 127.0.0.0/8 168.100.189.2/32 (authorize local machine) + mynetworks = 127.0.0.0/8 168.100.189.2/28 (authorize local networks) You can specify the trusted networks in the main.cf file, or you can let Postfix do the work for you. The default is to let Postfix do the work. The diff --git a/postfix/README_FILES/MAILLOG_README b/postfix/README_FILES/MAILLOG_README index 518442535..114075984 100644 --- a/postfix/README_FILES/MAILLOG_README +++ b/postfix/README_FILES/MAILLOG_README @@ -82,8 +82,8 @@ LLiimmiittaattiioonnss Background: - * Postfix consists of a number of daemon programs, and non-daemon programs - some of which are used for local mail submission, and some for Postfix + * Postfix consists of a number of daemon programs that run in the background, + as well as non-daemon programs for local mail submission or Postfix management. * Logging to Postfix logfile or stdout requires the Postfix postlogd(8) diff --git a/postfix/README_FILES/SMTPD_POLICY_README b/postfix/README_FILES/SMTPD_POLICY_README index 26a06a153..0c96c760a 100644 --- a/postfix/README_FILES/SMTPD_POLICY_README +++ b/postfix/README_FILES/SMTPD_POLICY_README @@ -13,8 +13,8 @@ implemented with only a dozen lines of Perl, as is shown at the end of this document. A complete example can be found in the Postfix source code, in the directory examples/smtpd-policy. -Another example of policy delegation is the SPF policy server at http:// -www.openspf.org/Software. +Another example of policy delegation is the SPF policy server at https:// +web.archive.org/web/20190221142057/http://www.openspf.org/Software. Policy delegation is now the preferred method for adding policies to Postfix. It's much easier to develop a new feature in few lines of Perl, Python, Ruby, diff --git a/postfix/RELEASE_NOTES b/postfix/RELEASE_NOTES index 7bbae50dd..8dded9175 100644 --- a/postfix/RELEASE_NOTES +++ b/postfix/RELEASE_NOTES @@ -25,7 +25,7 @@ more recent Eclipse Public License 2.0. Recipients can choose to take the software under the license of their choice. Those who are more comfortable with the IPL can continue with that license. -Major changes with snapshot 20190516 +Major changes with snapshot 20190517 ==================================== Search order support for check_ccert_access. Search order support diff --git a/postfix/html/BASIC_CONFIGURATION_README.html b/postfix/html/BASIC_CONFIGURATION_README.html index 79525d1bb..8d760c097 100644 --- a/postfix/html/BASIC_CONFIGURATION_README.html +++ b/postfix/html/BASIC_CONFIGURATION_README.html @@ -264,17 +264,18 @@ clients that send mail from outside an authorized network block. This is explained in the SASL_README and TLS_README documents.

IMPORTANT: If your machine is connected to a wide area network -then your default mynetworks setting may be too friendly.

+then the "mynetworks_style = host" setting may be too friendly.

Examples (specify only one of the following): 

 /etc/postfix/main.cf:
-    mynetworks_style = subnet  (default: authorize subnetworks)
-    mynetworks_style = host    (safe: authorize local machine only)
-    mynetworks = 127.0.0.0/8   (safe: authorize local machine only)
+    mynetworks_style = subnet  (not safe on a wide area network)
+    mynetworks_style = host    (authorize local machine only)
+    mynetworks = 127.0.0.0/8   (authorize local machine only)
     mynetworks = 127.0.0.0/8 168.100.189.2/32 (authorize local machine) 
+    mynetworks = 127.0.0.0/8 168.100.189.2/28 (authorize local networks)
diff --git a/postfix/html/MAILLOG_README.html b/postfix/html/MAILLOG_README.html index b1f97022d..0b9f250b3 100644 --- a/postfix/html/MAILLOG_README.html +++ b/postfix/html/MAILLOG_README.html @@ -142,9 +142,9 @@ the /dev directory, such as /dev/stdout.