mirror of
git://slackware.nl/current.git
synced 2024-12-26 09:58:59 +01:00
2b78642fcc
a/glibc-zoneinfo-2023d-noarch-1.txz: Upgraded.
This package provides the latest timezone updates.
l/libsass-3.6.6-x86_64-1.txz: Upgraded.
n/postfix-3.8.4-x86_64-1.txz: Upgraded.
Security: this release adds support to defend against an email spoofing
attack (SMTP smuggling) on recipients at a Postfix server. Sites
concerned about SMTP smuggling attacks should enable this feature on
Internet-facing Postfix servers. For compatibility with non-standard
clients, Postfix by default excludes clients in mynetworks from this
countermeasure.
The recommended settings are:
# Optionally disconnect remote SMTP clients that send bare newlines,
# but allow local clients with non-standard SMTP implementations
# such as netcat, fax machines, or load balancer health checks.
#
smtpd_forbid_bare_newline = yes
smtpd_forbid_bare_newline_exclusions = $mynetworks
The smtpd_forbid_bare_newline feature is disabled by default.
For more information, see:
https://www.postfix.org/smtp-smuggling.html
(* Security fix *)
|
||
|---|---|---|
| .. | ||
| 0001-openssl-micro-mismatch-nowarn.patch | ||
| doinst.sh | ||
| postfix.only.warn.regular.files.diff | ||
| postfix.script.starting.message.diff | ||
| postfix.SlackBuild | ||
| postfix.url | ||
| rc.postfix | ||
| README | ||
| slack-desc | ||
Postfix is Wietse Venema's mailer that started life as an alternative to the widely-used Sendmail program. It attempts to be fast, easy to administer, and secure, while at the same time, being sendmail compatible enough to not upset existing users. Thus, the outside has a sendmail-ish flavor, but the inside is completely different. This script builds postfix with support for Dovecot SASL, Cyrus SASL, and TLS (using OpenSSL.) Support for Berkeley DB hash and btree maps, being a Postfix requirement, is also detected and built. In addition database plugins are built for LDAP, MySQL, PCRE and sqlite3. To add support for additional database plugins which are not provided in Slackware, such as CDB or PostgreSQL, it is necessary to recompile this package. See the comments in the SlackBuild script to get started. Postfix manual sections follow the BSD standard, where section 8 is only for daemons, and all user commands, even root-user-only administrative commands such as postfix(1), are in section 1. Postfix is exceptionally well documented. If you put a link to your html_directory (/usr/doc/postfix/html) somewhere you can find it in your favorite browser, all of this will be readily available to you. The place to start is not with man pages, but with the various READMEs, all HTMLified and with convenient hyperlinks to the relevant anchors in the HTML versions of the manuals.