• The postscreen daemon, which is not enabled by default, sent non-compliant SMTP responses (220- followed by 421) when it could not give a connection to a real smtpd process. These responses caused some remote SMTP clients to return mail as undeliverable.

  The workaround is to hang up after sending 220- without sending the 421 “sorry” reply; this is harmless.

  The complete fix involves too much change for a stable release: send the 220 greeting, wait for the EHLO command, then send the 421 “sorry” reply and hang up.

Howto upgrade postfix.

• The Postfix SMTP daemon sent “bare” newline characters instead of when a header_checks REJECT pattern matched multi-line header. This bug was introduced with Postfix 1.1.
• The Postfix SMTP daemon sent “bare” newline characters instead of when an smtpd_proxy_filter returned a multi-line response. This bug was introduced with Postfix 2.1.
• For compatibility with future EAI (email address internationalization) implementations, the Postfix MIME processor no longer enforces the strict_mime_encoding_domain check on unknown message subtypes such as message/global*. This check is disabled by default.
• The Postfix master daemon could report a panic error (“master_spawn: at process limit”) after the process limit for some service was reduced with “postfix reload”. This bug existed in all Postfix versions.

Howto upgrade postfix.

• The Postfix Milter client logged a “milter miltername: malformed reply” error when a Milter sent an SMTP response without enhanced status code (i.e. “XXX Text” instead of “XXX X.X.X Text”).
• The Postfix Milter client sent a random {client_connections} macro value when the remote SMTP client was not subject to any smtpd_client_* limit. As a workaround, it now sends a zero value instead.

Howto upgrade postfix.

http://diymacserver.com/mail/lion/

So enjoy your new installation of Lion with these instructions.

In the coming week I will move all my stuff to the new Mini, hopefully without too much interruptions in our service.

• Performance: a high load of DSN success notification requests could slow down the queue manager. Solution: make the trace client asynchronous, just like the bounce and defer clients.
• The local(8) delivery agent ignored table lookup errors in mailbox_command_maps, mailbox_transport_maps, fallback_transport_maps and (while bouncing mail to alias) alias owner lookup.
• Workaround: dbl.spamhaus.org rejects lookups with “No IP queries” even if the name has an alphanumerical prefix. We play safe, and skip both RHSBL and RHSWL queries for names ending in a numerical suffix.
• The “sendmail -t” command reported “protocol error” instead of “file too large”, “no space left on device” etc.
• The Postfix Milter client reported a temporary error instead of “file too large” in three cases.
• Linux kernel version 3 support. Linus Torvalds has reset the counters for reasons not related to changes in code.

Howto upgrade postfix.

The Security Update 2011-004 however does change Leopard. I’ve noticed that it replace the postfix binaries and adds Apple’s idea of a security feature to the configuration file. To correct the binaries, go to your latest postfix source directory from which you installed it last and run

sudo make install

For the changed configuration please comment out or delete the following line from ‘/etc/postfix/main.cf‘:

inet_interfaces = localhost

Restart postfix (reloading config does not work) with:

sudo postfix stop

Postfix should restart automatically (if not run “sudo postfix start”).

This is expected to be the last update before Lion and I’ve got everything lined up to test the upgrade to Lion and a new install on that same platform. I hope to be able to tell you what the results will be as soon as possible.

inet_interfaces = localhost

Restart postfix (reloading config does not work) with:

sudo postfix stop

Postfix should restart automatically (if not run “sudo postfix start”).

By the way the postfix binary could also have been updated on Leopard, you can check that by running:

sudo postconf -m

If it has been updated you won’t see MySQL being named in the list. Re-install postfix by going into your latest source directory you’ve used the last time and run

sudo make install
sudo postfix stop

• Bugfix: postscreen DNSBL scoring error. When a client disconnected and then reconnected before all DNSBL results for the earlier session arrived, DNSBL results for the earlier session would be added to the score for the later session. This is very unlikely to have affected any legitimate mail.
• Workaround: the SMTP client did not support mail to [ipv6:ipv6addr].
• Portability: FreeBSD closefrom() was back-ported to FreeBSD 7, breaking FreeBSD 7.x support retroactively.
• Portability: the SUN compiler had trouble with a pointer expression of the form “(“text1″ “text2″) + constant” so we don’t try to be so clever.

Note:
Some people have reported problems with updating from an older version (before 2.8.x) that the TLS is no longer working. If you upgrade please add this line to your main.cf configuration file:

smtpd_tls_exclude_ciphers = SSLv2, aNULL, ADH, eNULL

and restart postfix. Everything should work as expected.

As usual you can read the instructions on how to upgrade Postfix at Upgrading Postfix.

The Security Update 2011-001 however does change something on Leopard. I’ve noticed that it adds apple’s idea of a security feature to the configuration file. To correct it please comment out or delete the following line from ‘/etc/postfix/main.cf‘:

inet_interfaces = localhost

Restart postfix (reloading config does not work) with:

sudo postfix stop

Postfix should restart automatically (if not run “sudo postfix start”).

• Fixed a “signal 11″ bug with Postfix SMTP server debug logging at smtpd_tls_loglevel ≥ 3.
• The Postfix SMTP and QMQP servers no longer look up IPv6 address information while looking up the FCRDNS (forward-confirmed reverse DNS) hostname for an IPv4 remote client (and vice versa).
• The postscreen(8) daemon no longer logs a “connection reset by peer” warning when a remote SMTP client hangs up prematurely.
• Removed spurious configuration parameters from “postconf” output, by deleting the #ifdef MIGRATION_WARNING transitional code from postscreen(8).
• Assorted minor documentation fixes.

Note:
Some people have reported problems with updating from an older version that the TLS is no longer working. If you upgrade please add this line to your main.cf configuration file:

smtpd_tls_exclude_ciphers = SSLv2, aNULL, ADH, eNULL

and restart postfix. Everything should work as expected.

As usual you can read the instructions on how to upgrade Postfix at Upgrading Postfix.