New postfix

From finninday
Jump to navigation Jump to search
Date: Tue, 11 Jul 2006 21:16:18 -0400 (EDT)
From: Wietse Venema <wietse@porcupine.org>

A few months later than usual, Postfix stable release 2.3 is now available.
The release was postponed until Postfix was complete enough for today's
email environment. Hopefully I can now spend more time doing new projects.

You can find the Postfix 2.3.0 source code via the mirror sites listed at
http://www.postfix.org/. If it's not there today, then it should show up in
the course of the next 24 hours.

Here's a juicy bit from the change log:


- Major updates to the TLS (SMTP encryption and authentication) support. 
Postfix 2.3 introduces a configuration user interface that is based on the
concept of TLS security levels (none, may, encrypt, verify, secure) and that
can more effectively deal with DNS spoofing. The old configuration user
interface, with multiple boolean parameters to enable or enforce TLS, is
still supported but will be removed after a few releases. See TLS_README
for details.
- Plug-in support for SASL authentication in the Postfix SMTP server and
client. With this, Postfix can support multiple SASL implementations without
conflicting source code patches. Postfix 2.3 has Dovecot SASL support built
into the SMTP server. As before, support for Cyrus SASL is available as
add-on feature for the Postfix SMTP server and client. See SASL_README for
more information.
- After TLS handshake failure, the SMTP client will now reconnect to the
same server to try plaintext delivery (if TLS policy permits). Earlier
Postfix versions would skip the server and defer delivery if no alternate MX
host was available.

Looks like my next step in getting smtpauth to work again will be building a fresh package of postfix to make sure that it supports my flavor of SASL.