IPostfix 3.6.0 iza nemigomo ebandakanya wonke umuntu, ukuthuthuka nokuningi

Ngemuva konyaka wentuthuko, igatsha elisha elizinzile leseva yeposi lePostfix 3.6.0 likhishwe futhi ngasikhathi sinye, kwamenyezelwa ukwesekwa kwegatsha lePostfix 3.2 elikhishwe ekuqaleni kuka-2017.

I-Postfix enye yamaphrojekthi ambalwa ahlanganisa ukuphepha okuphezulu, ukuthembeka nokusebenza ngasikhathi sinye, esatholwa sibonga ukwakheka okucatshangwe kahle nenqubomgomo yokuhlola amakhodi nokuhlola ngokuqinile.

Izindaba eziphambili Postfix 3.6.0

Kule nguqulo entsha kususwe izinkomba zamagama athi "mhlophe" nokuthi "mnyama", kuthathwa ngamanye amalungu omphakathi njengokubandlululwa ngokohlanga. Esikhundleni sokuthi "uhlu olumhlophe" kanye "nohlu olumnyama", manje kufanele basebenzise amagama alandelayo "vumela uhlu" futhi "balule uhlu" (ngokwesibonelo, amapharamitha postscreen_allowlist_interfaces, postscreen_denylist_action y postscreen_dnsbl_allowlist_threshold). Izinguquko zithinta imibhalo, ukumiswa kwesikrini ngemuva (i-firewall eyakhelwe ngaphakathi), kanye nokukhonjiswa kolwazi kuzingodo.

Ukugcina amagama amadala kumarekhodi, ipharamitha «respectful_logging=no', Okufanele kucaciswe ku- main.cf  nokuhambisana emuva nezilungiselelo ezindala nakho kugcinwe ngezizathu zokuhambisana emuva. Ifayela lokumisa elithi "master.cf" alikashintshi okwamanje.

Ngakolunye uhlangothi, olunye ushintsho olugqamile yale nguqulo entsha yimodi compatibility_level=3.6, ushintsho oluzenzakalelayo lwenziwe ukusebenzisa umsebenzi we-SHA256 hash esikhundleni se-MD5.

Lapho kulungiswa uhlobo oludala, i-MD5 iyaqhubeka nokusebenzisa ipharamitha yezinga lokuhambisana, kepha kuzilungiselelo ezihlobene ne-hashing, lapho i-algorithm ingachaziwe ngokusobala, isexwayiso sizoboniswa ku-log.

Ukusekelwa kwenguqulo yokuthekelisa yephrothokholi yokushintshana yokhiye we-Diffie-Hellman kususiwe (manje inani lepharamitha alinakwa tlsproxy_tls_dh512_param_file) yenziwe lula kusuka ezinkingeni ezihlobene nokucacisa uhlelo lokushayela olungalungile ku- master.cf.

Ukuthola amaphutha anjalo, insizakalo ngayinye yangaphakathi, kufaka phakathi i-postdrop, manje imemezela igama leprotocol ngaphambi kokuqala ukushintshaniswa kwedatha, futhi inqubo ngayinye yeklayenti, kufaka phakathi i-sendmail, iqinisekisa ukuthi igama leprotocol ekhangisiwe lifana nokuhluka okusekelwayo.

Futhi kuyaziwa ukuthi kufakwe uhlobo olusha lwezabelo «local_login_sender_maps« ukulawula okuguquguqukayo ekunikezelweni kwekheli lemvilophu lomthumeli (kudluliswe kumyalo we- "MAIL FROM" ngesikhathi sesikhathi se-SMTP) kuzinqubo ze-sendmail kanye ne-postdrop. Isibonelo, ukuvumela abasebenzisi bendawo, ngaphandle kwempande ne-postfix, ukuthi bacacise ukungena kwabo kuphela ku-sendmail besebenzisa ukubopha kusuka ku-UID kuya egameni.

Okuzenzakalelayo kwe-DNS kusebenzisa i-API entsha esekela imicu eminingi (intambo iphephile) ngokuzenzakalela. Ukuhlanganisa ne-API engenhla, kufanele ucacise lapho uhlanganisa i- «make makefiles CCARGS="-DNO_RES_NCALLS... ".

Imodi engeziwe «enable_threaded_bounces=yes»Ukufaka esikhundleni sezaziso zezinkinga zokulethwa, ukulethwa kokubambezeleka noma ukulethwa kokulethwa nge-ID yengxoxo efanayo (iklayenti le-imeyili lizobonisa isaziso kumucu ofanayo, kanye neminye imilayezo yezincwadi).

Ngokuzenzakalelayo, i-database / system / services database ayisasetshenziswa ukuthola izinombolo ze-TCP port ze-SMTP ne-LMTP. Esikhundleni salokho, izinombolo zetheku zilungiselelwe ngepharamitha eyaziwayo_tcp_ports (okuzenzakalelayo lmtp=24, smtp=25, smtps=submissions=465, submit=587). Uma kwenzeka kuba nenkonzo elahlekile kuma-known_tcp_ports, / etc / services azoqhubeka nokusetshenziswa.

Izinga lokuhambisana ("ukuhambisana_level") liphakanyiselwe kunani "3.6" (ipharamitha yashintshwa kabili esikhathini esedlule, ngaphandle kuka-3.6, amanani 0 (okuzenzakalelayo), 1 no-2 ayahambisana).

Kusukela manje kuqhubeke, i- "compatible_level" izoshintshela kunombolo yenguqulo lapho kwenziwa khona izinguquko ezehlukanisa ukuhambisana. Ukuhlola amazinga wokuhambisana, opharetha abahlukile bokuqhathanisa bangezwe ku- main.cf naku- master.cf, okufana ne- "<= level" ne-

Ekugcineni kushiwo lokho ngenxa yezinguquko kumaphrothokholi angaphakathi esetshenziselwa ukuxhumana phakathi kwezingxenye zePostfix, kuyadingeka ukumisa iseva yeposi ngomyalo «postfix stop» ngaphambi kokubuyekeza.

Ukwehluleka ukwenza lokho kungaholela ekuphahlazekeni ngenqubo yokuthatha, i-qmgr, ukuqinisekisa, i-tlsproxy, nezinqubo zesikrini, ezingabambezela ukuthumela ama-imeyili kuze kuqale iPostfix.

Uma ufuna ukwazi kabanzi ngayo, unga hlola isixhumanisi esilandelayo.


Shiya umbono wakho

Ikheli lakho le ngeke ishicilelwe. Ezidingekayo ibhalwe nge *

*

*

  1. Ubhekele imininingwane: Miguel Ángel Gatón
  2. Inhloso yedatha: Lawula Ugaxekile, ukuphathwa kwamazwana.
  3. Ukusemthethweni: Imvume yakho
  4. Ukuxhumana kwemininingwane: Imininingwane ngeke idluliselwe kubantu besithathu ngaphandle kwesibopho esisemthethweni.
  5. Isitoreji sedatha: Idatabase ebanjwe yi-Occentus Networks (EU)
  6. Amalungelo: Nganoma yisiphi isikhathi ungakhawulela, uthole futhi ususe imininingwane yakho.