diff --git a/postfix/HISTORY b/postfix/HISTORY index 4df04b0db..6f776cf34 100644 --- a/postfix/HISTORY +++ b/postfix/HISTORY @@ -6547,6 +6547,31 @@ Apologies for any names omitted. before and after the filter, with header/body checks turned off in the second cleanup server. +20020528 + + Feature: strict_7bit_headers and strict_8bitmime_body are + now separately available. To to turn on both, use + strict_8bitmime. + + Cleanup: abandon the use of isspace(3) in the parsing of + RFC822 message headers. Files: global/lex_822.h and lots + of little places. + + Documentation: replace domain.name by domain.tld in the + example config files. The domain exists. They were getting + mail from poorly configured Postfix boxes. + + Bugfix: The Postfix sendmail command did not export the + MAIL_CONFIG environment setting to the postdrop command. + File: global/mail_config.h. + + Incompatibility: by default, turn on the PCRE_DOTALL flag, + so that PCRE patterns will match multi-line message headers + without causing pain. Suggested by Michael Tokarev. Also + documented all those darned undocumented PCRE flags in the + pcre_table(5) manual page. Files: util/dict_pcre.c, + proto/pcre_table. + Open problems: Medium: old maildrop files are no longer readable by the diff --git a/postfix/INSTALL b/postfix/INSTALL index ac9334f26..b0e551e2a 100644 --- a/postfix/INSTALL +++ b/postfix/INSTALL @@ -316,7 +316,7 @@ up virtual interfaces for a variety of UNIX versions. In the /etc/postfix/main.cf file, I would specify - myhostname = virtual.host.name + myhostname = virtual.host.tld inet_interfaces = $myhostname mydestination = $myhostname @@ -402,7 +402,7 @@ configuration language uses lazy evaluation, and does not look at a parameter value until it is needed at runtime. First of all, you must specify what domain will be appended to an -unqualified address (i.e. an address without @domain.name). The +unqualified address (i.e. an address without @domain.tld). The "myorigin" parameter defaults to the local hostname, but that is probably OK only for very small sites. diff --git a/postfix/README_FILES/ETRN_README b/postfix/README_FILES/ETRN_README index c7b18d31d..0dc5d7c12 100644 --- a/postfix/README_FILES/ETRN_README +++ b/postfix/README_FILES/ETRN_README @@ -77,7 +77,7 @@ can take a while), you're ready to test the "fast ETRN" service. Telnet to the Postfix SMTP server from a client that is allowed to execute ETRN commands (by default, that's every client), and type: - helo my.client.name + helo my.client.tld etrn some.customer.domain where "some.customer.domain" is the name of a domain that has a @@ -99,7 +99,7 @@ Repeat the exercise with another domain that your server is willing to relay to (domain listed in "relay_domains"), but that has no mail queued. - helo my.client.name + helo my.client.tld etrn some.other.customer.domain This time, the "etrn" command should trigger NO mail deliveries at @@ -110,7 +110,7 @@ Finally, repeat the exercise with a destination that your mail server is not willing to relay to. It does not matter if your server has mail queued for that destination. - helo my.client.name + helo my.client.tld etrn not.a.customer.domain If your "fast ETRN" caching policy is left at its default setting, diff --git a/postfix/README_FILES/FILTER_README b/postfix/README_FILES/FILTER_README index ff062e8b7..d2c598cdc 100644 --- a/postfix/README_FILES/FILTER_README +++ b/postfix/README_FILES/FILTER_README @@ -230,7 +230,7 @@ a dedicated listener on port localhost 10026: localhost:10026 inet n - n - 10 smtpd -o content_filter= -o local_recipient_maps= - -o myhostname=localhost.domain.name + -o myhostname=localhost.domain.tld -o smtpd_helo_restrictions= -o smtpd_client_restrictions= -o smtpd_sender_restrictions= @@ -245,7 +245,7 @@ The "-o local_recipient_maps=" is a safety in case you have specified local_recipient_maps in the main.cf file. That could interfere with content filtering. -The "-o myhostname=localhost.domain.name" avoids a possible problem +The "-o myhostname=localhost.domain.tld" avoids a possible problem if the content filter is picky about the hostname that Postfix sends in SMTP server replies. @@ -343,7 +343,7 @@ cleanup unix n - n - 0 cleanup # ensures that the original envelope recipient is seen by the # content filter. # -scan unix n - n - 10 smtp +scan unix - - n - 10 smtp -o disable_dns_lookups=yes # # This is the SMTP listener that receives filtered messages from @@ -368,7 +368,7 @@ scan unix n - n - 10 smtp # localhost:10026 inet n - n - - smtpd -o content_filter= - -o myhostname=localhost.domain.name + -o myhostname=localhost.domain.tld -o local_recipient_maps= -o virtual_maps= -o virtual_mailbox_maps= @@ -395,7 +395,7 @@ cleanup2 unix n - n - 0 cleanup # Definitely do not set "disable_dns_lookups = yes" here if you # send mail to the Internet. # -smtp unix n - n - - smtp +smtp unix - - n - - smtp This causes Postfix to add one extra content filtering record to each incoming mail message, with content scan:localhost:10025. diff --git a/postfix/README_FILES/INSTALL b/postfix/README_FILES/INSTALL index b3e3b246f..b0e551e2a 100644 --- a/postfix/README_FILES/INSTALL +++ b/postfix/README_FILES/INSTALL @@ -135,10 +135,20 @@ and so on. In some cases, optimization is turned off automatically. In order to build with non-default settings, for example, with a configuration directory other than /etc/postfix, use: - % make makefiles CCARGS=-DDEF_CONFIG_DIR=\\\\\\\"/some/where\\\\\\\" + % make makefiles CCARGS='-DDEF_CONFIG_DIR=\"/some/where\"' % make -That's seven backslashes :-) But at least this works with sh and csh. +Be sure to get the quotes right. These details matter a lot. + +Other parameters whose defaults can be specified in this way are: + + Macro name default value for + ------------------------------------- + DEF_COMMAND_DIR command_directory + DEF_DAEMON_DIR daemon_directory + DEF_SENDMAIL_PATH sendmail_path + DEF_MAILQ_PATH mailq_path + DEF_NEWALIAS_PATH newaliases_path In order to build Postfix for very large applications, where you expect to run more than 1000 delivery processes, you may need to @@ -209,16 +219,22 @@ In order to install or upgrade Postfix: postfix:*:12345:12345:postfix:/no/where:/no/shell + Note: there should be no whitespace before "postfix:". + - Make sure there is a corresponding alias in /etc/aliases: postfix: root + Note: there should be no whitespace before "postfix:". + - Create a group "postdrop" with a group id that is not used by any other user account. Not even by the postfix user account. My group file entry looks like: postdrop:*:54321: + Note: there should be no whitespace before "postdrop:". + NB: this group was optional with older Postfix releases; it is now required. @@ -285,7 +301,7 @@ In order to inspect the mail queue, use % sendmail -bp -See also the "Care and feeding" section 13 below. +See also the "Care and feeding" section 12 below. 8 - Configuring Postfix to send and receive mail (virtual interface) ==================================================================== @@ -300,7 +316,7 @@ up virtual interfaces for a variety of UNIX versions. In the /etc/postfix/main.cf file, I would specify - myhostname = virtual.host.name + myhostname = virtual.host.tld inet_interfaces = $myhostname mydestination = $myhostname @@ -327,7 +343,7 @@ In order to inspect the mail queue, use % sendmail -bp -See also the "Care and feeding" section 13 below. +See also the "Care and feeding" section 12 below. 9 - Turning off sendmail forever ================================ @@ -357,7 +373,7 @@ and watch the syslog file for any complaints from the mail system. Typical logfile names are: /var/log/maillog or /var/log/syslog. See /etc/syslog.conf for actual logfile names. -See also the "Care and feeding" section 13 below. +See also the "Care and feeding" section 12 below. 10 - Mandatory configuration file edits ======================================= @@ -386,7 +402,7 @@ configuration language uses lazy evaluation, and does not look at a parameter value until it is needed at runtime. First of all, you must specify what domain will be appended to an -unqualified address (i.e. an address without @domain.name). The +unqualified address (i.e. an address without @domain.tld). The "myorigin" parameter defaults to the local hostname, but that is probably OK only for very small sites. diff --git a/postfix/README_FILES/LMTP_README b/postfix/README_FILES/LMTP_README index ca051466b..06a6878ea 100644 --- a/postfix/README_FILES/LMTP_README +++ b/postfix/README_FILES/LMTP_README @@ -265,8 +265,8 @@ to route mail for multiple domains to their respective mail retrieval /etc/postfix/transport: - domain1.name lmtp1:unix:/path/name - domain2.name lmtp2:lmtp2host + domain1.tld lmtp1:unix:/path/name + domain2.tld lmtp2:lmtp2host /etc/postfix/master.cf: @@ -466,8 +466,8 @@ Cyrus 1.6.24 LMTP server: /etc/postfix/transport: - domain1.name lmtp1:lmtp1host - domain2.name lmtp2:lmtp2host + domain1.tld lmtp1:lmtp1host + domain2.tld lmtp2:lmtp2host /etc/postfix/master.cf: diff --git a/postfix/README_FILES/SASL_README b/postfix/README_FILES/SASL_README index ccc22a2fb..de06bb28b 100644 --- a/postfix/README_FILES/SASL_README +++ b/postfix/README_FILES/SASL_README @@ -190,9 +190,9 @@ Testing SASL authentication in the Postfix SMTP server To test the whole mess, connect to the SMTP server, and you should be able to have a conversation like this: - 220 server.host.name ESMTP Postfix - EHLO client.host.name - 250-server.host.name + 220 server.host.tld ESMTP Postfix + EHLO client.host.tld + 250-server.host.tld 250-PIPELINING 250-SIZE 10240000 250-ETRN diff --git a/postfix/README_FILES/VIRTUAL_README b/postfix/README_FILES/VIRTUAL_README index 0a648ab08..821919026 100644 --- a/postfix/README_FILES/VIRTUAL_README +++ b/postfix/README_FILES/VIRTUAL_README @@ -270,11 +270,11 @@ domains): virtual_maps = hash:/etc/postfix/virtual /etc/postfix/virtual: - user@domain.name user@domain.name, user@autoreply.domain.name + user@domain.tld user@domain.tld, user@autoreply.domain.tld This delivers mail to the recipient, and sends a copy of the mail to the address that produces automatic replies. The address can be serviced on a different machine, or it can be serviced locally by setting up a transport map entry that pipes all mail for the -autoreply.domain.name into some script that sends an automatic +autoreply.domain.tld into some script that sends an automatic reply back to the sender. diff --git a/postfix/RELEASE_NOTES b/postfix/RELEASE_NOTES index 8c226a12d..4610c389d 100644 --- a/postfix/RELEASE_NOTES +++ b/postfix/RELEASE_NOTES @@ -12,6 +12,36 @@ snapshot release). Patches change the patchlevel and the release date. Snapshots change only the release date, unless they include the same bugfixes as a patch release. +Incompatible changes with Postfix snapshot 1.1.11-20020528 +========================================================== + +With PCRE pattern matching, the `.' metacharacter now matches all +characters including newline characters. This makes PCRE pattern +matching more convenient to use with multi-line message headers, +and also makes PCRE more compatible with regexp pattern matching. +The pcre_table(5) manual page has been greatly revised. + +Major changes with Postfix snapshot 1.1.11-20020528 +=================================================== + +Postfix can enforce specific aspects of the MIME standards while +receiving mail. + +* Specify "strict_7bit_headers = yes" to disallow 8-bit characters + in message headers. These are always illegal. + +* Specify "strict_8bitmime_body = yes" to block mail with 8-bit + content that is not properly labeled as 8-bit MIME. This blocks + mail from poorly written mail software, including (bounces from + qmail, bounces from Postfix before snapshot 20020514, and Majordomo + approval requests) that contain valid 8BITMIME mail. + +* Specify "strict_8bitmime = yes" to turn on both strict_7bit_headers + and strict_8bitmime_body. + +* Specify "strict_mime_encoding_domain = yes" to block mail from + poorly written mail software. More details in conf/sample-mime.cf. + Incompatible changes with Postfix snapshot 1.1.11-20020527 ========================================================== @@ -71,13 +101,6 @@ delivering to an SMTP server that does not announce 8BITMIME support. To disable, specify "disable_mime_output_conversion = yes". However, this conversion is required by RFC standards. -Postfix can enforce some aspects of the MIME standards while -receiving mail. Specify "strict_8bitmime = yes" to disallow 8-bit -characters except where allowed by the MIME standard, and specify -"strict_mime_encoding_domain = yes" to block mail from poorly -written mail software, including majordomo approval requests that -contain valid 8BITMIME mail. More details in conf/sample-mime.cf. - Incompatible changes with Postfix snapshot 1.1.10-20020514 ========================================================== diff --git a/postfix/conf/access b/postfix/conf/access index 4bc39ca06..0b1148ed0 100644 --- a/postfix/conf/access +++ b/postfix/conf/access @@ -53,16 +53,16 @@ # user@domain # Matches the specified mail address. # -# domain.name -# Matches domain.name as the domain part of an email +# domain.tld +# Matches domain.tld as the domain part of an email # address. # -# The pattern domain.name also matches subdomains, -# but only when the string smtpd_access_maps is -# listed in the Postfix parent_domain_matches_subdo- -# mains configuration setting. Otherwise, specify -# .domain.name (note the initial dot) in order to -# match subdomains. +# The pattern domain.tld also matches subdomains, but +# only when the string smtpd_access_maps is listed in +# the Postfix parent_domain_matches_subdomains con- +# figuration setting. Otherwise, specify .domain.tld +# (note the initial dot) in order to match subdo- +# mains. # # user@ Matches all mail addresses with the specified user # part. @@ -85,15 +85,15 @@ # networked tables such as NIS, LDAP or SQL, the following # lookup patterns are examined in the order as listed: # -# domain.name -# Matches domain.name. +# domain.tld +# Matches domain.tld. # -# The pattern domain.name also matches subdomains, -# but only when the string smtpd_access_maps is -# listed in the Postfix parent_domain_matches_subdo- -# mains configuration setting. Otherwise, specify -# .domain.name (note the initial dot) in order to -# match subdomains. +# The pattern domain.tld also matches subdomains, but +# only when the string smtpd_access_maps is listed in +# the Postfix parent_domain_matches_subdomains con- +# figuration setting. Otherwise, specify .domain.tld +# (note the initial dot) in order to match subdo- +# mains. # # net.work.addr.ess # diff --git a/postfix/conf/main.cf b/postfix/conf/main.cf index de4d7fcf2..76c79866a 100644 --- a/postfix/conf/main.cf +++ b/postfix/conf/main.cf @@ -65,15 +65,15 @@ mail_owner = postfix # from gethostname(). $myhostname is used as a default value for many # other configuration parameters. # -#myhostname = host.domain.name -#myhostname = virtual.domain.name +#myhostname = host.domain.tld +#myhostname = virtual.domain.tld # The mydomain parameter specifies the local internet domain name. # The default is to use $myhostname minus the first component. # $mydomain is used as a default value for many other configuration # parameters. # -#mydomain = domain.name +#mydomain = domain.tld # SENDING MAIL # @@ -436,14 +436,14 @@ mail_owner = postfix # # Postfix maintains per-destination logfiles with information about # deferred mail, so that mail can be flushed quickly with the SMTP -# "ETRN domain.name" command, or by executing "sendmail -qRdomain.name". +# "ETRN domain.tld" command, or by executing "sendmail -qRdomain.tld". # # By default, Postfix maintains deferred mail logfile information # only for destinations that Postfix is willing to relay to (as # specified in the relay_domains parameter). For other destinations, # Postfix attempts to deliver ALL queued mail after receiving the -# SMTP "ETRN domain.name" command, or after execution of "sendmail -# -qRdomain.name". This can be slow when a lot of mail is queued. +# SMTP "ETRN domain.tld" command, or after execution of "sendmail +# -qRdomain.tld". This can be slow when a lot of mail is queued. # # The fast_flush_domains parameter controls what destinations are # eligible for this "fast ETRN/sendmail -qR" service. diff --git a/postfix/conf/pcre_table b/postfix/conf/pcre_table index 423a31768..fd020255f 100644 --- a/postfix/conf/pcre_table +++ b/postfix/conf/pcre_table @@ -37,28 +37,87 @@ # ally the forward slash is used). The regular expression # can contain whitespace. # -# By default, matching is case-insensitive, although follow- -# ing the second slash with an `i' flag will reverse this. -# Other flags are supported, but the only other useful one -# is `U', which makes matching ungreedy (see PCRE documenta- -# tion and source for more info). +# By default, matching is case-insensitive, and newlines are +# not treated as special characters. The behavior is con- +# trolled by flags, which are toggled by appending one or +# more of the following characters after the pattern: # -# Each pattern is applied to the entire lookup key string. -# Depending on the application, that string is an entire +# i (default: on) +# Toggles the case sensitivity flag. By default, +# matching is case insensitive. +# +# m (default: off) +# Toggles the PCRE_MULTILINE flag. When the flag is +# on, the ^ and $ metacharacters match immediately +# after and immediately before a newline character, +# respectively, in addition to matching at the start +# and end of the subject string. +# +# s (default: on) +# Toggle the PCRE_DOTALL flag. When the flag is on, +# the . metacharacter matches the newline character. +# With Postfix versions prior to 20020528, The flag +# is off by default, which is inconvenient for multi- +# line message header matching. +# +# x (default: off) +# Toggles the pcre extended flag. When the flag is +# on, whitespace in the pattern (other than in a +# character class) and characters between a # outside +# a character class and the next newline character +# are ignored. An escaping backslash can be used to +# include a whitespace or # character as part of the +# pattern. +# +# A (default: off) +# Toggles the PCRE_ANCHORED flag. When this flag is +# set, the pattern is forced to be "anchored", that +# is, it is constrained to match only at the start of +# the string which is being searched (the "subject +# string"). This effect can also be achieved by +# appropriate constructs in the pattern itself. +# +# E (default: off) +# Toggles the PCRE_DOLLAR_ENDONLY flag. When this +# flag is set, a $ metacharacter in the pattern +# matches only at the end of the subject string. +# Without this flag, a dollar also matches immedi- +# ately before the final character if it is a newline +# character (but not before any other newline charac- +# ters). This flag is ignored if PCRE_MULTILINE flag +# is set. +# +# U (default: off) +# Toggles the ungreedy matching flag. When this flag +# is set, the pattern matching engine inverts the +# "greediness" of the quantifiers so that they are +# not greedy by default, but become greedy if fol- +# lowed by "?". This flag can also set by a (?U) +# modifier within the pattern. +# +# X (default: off) +# Toggles the PCRE_EXTRA flag. When this flag is +# set, any backslash in a pattern that is followed by +# a letter that has no special meaning causes an +# error, thus reserving these combinations for future +# expansion. +# +# Each pattern is applied to the entire lookup key string. +# Depending on the application, that string is an entire # client hostname, an entire client IP address, or an entire -# mail address. Thus, no parent domain or parent network -# search is done, and user@domain mail addresses are not -# broken up into their user and domain constituent parts, +# mail address. Thus, no parent domain or parent network +# search is done, and user@domain mail addresses are not +# broken up into their user and domain constituent parts, # nor is user+foo broken up into user and foo. # -# Patterns are applied in the order as specified in the -# table, until a pattern is found that matches the search +# Patterns are applied in the order as specified in the +# table, until a pattern is found that matches the search # string. # -# Substitution of substrings from the matched expression -# into the result string is possible using the conventional -# perl syntax ($1, $2, etc.). The macros in the result -# string may need to be written as ${n} or $(n) if they +# Substitution of substrings from the matched expression +# into the result string is possible using the conventional +# perl syntax ($1, $2, etc.). The macros in the result +# string may need to be written as ${n} or $(n) if they # aren't followed by whitespace. # # EXAMPLE SMTPD ACCESS MAP diff --git a/postfix/conf/regexp_table b/postfix/conf/regexp_table index 162ad09f6..eed807ab7 100644 --- a/postfix/conf/regexp_table +++ b/postfix/conf/regexp_table @@ -44,21 +44,22 @@ # By default, matching is case-insensitive, although follow- # ing the second slash with an `i' flag will reverse this. # Other flags are `x' (disable extended expression syntax), -# and `m' (enable multi-line mode). +# and `m' (enable multi-line mode, that is, treat newline +# characters as special). # -# Each pattern is applied to the entire lookup key string. -# Depending on the application, that string is an entire +# Each pattern is applied to the entire lookup key string. +# Depending on the application, that string is an entire # client hostname, an entire client IP address, or an entire -# mail address. Thus, no parent domain or parent network -# search is done, and user@domain mail addresses are not -# broken up into their user and domain constituent parts, +# mail address. Thus, no parent domain or parent network +# search is done, and user@domain mail addresses are not +# broken up into their user and domain constituent parts, # nor is user+foo broken up into user and foo. # -# Patterns are applied in the order as specified in the -# table, until a pattern is found that matches the search +# Patterns are applied in the order as specified in the +# table, until a pattern is found that matches the search # string. # -# Substitution of substrings from the matched expression +# Substitution of substrings from the matched expression # into the result string is possible using $1, $2, etc.. The # macros in the result string may need to be written as ${n} # or $(n) if they aren't followed by whitespace. diff --git a/postfix/conf/sample-mime.cf b/postfix/conf/sample-mime.cf index 9cba90f95..687a24ac4 100644 --- a/postfix/conf/sample-mime.cf +++ b/postfix/conf/sample-mime.cf @@ -34,16 +34,28 @@ mime_boundary_length_limit = 2048 # mime_nesting_limit = 20 -# Specify "yes" to reject mail with 8-bit text in message headers, -# and with 8-bit text in message bodies that either claim to be 7-bit -# format or that default to 7-bit format. This optional restriction +# Specify "yes" to reject mail with 8-bit text in message headers. +# This optional restriction is enforced while receiving mail. +# +# This blocks mail from poorly written mail software. +# +strict_7bit_headers = no + +# Specify "yes" to reject mail with 8-bit text in message bodies that +# are not sent as valid 8-bit MIME mail. This optional restriction # is enforced while receiving mail. # # This blocks mail from poorly written mail software. Unfortunately, -# this also blocks approval requests from Majordomo when the included -# request contains valid 8-bit MIME mail, and it may block 8-bit mail +# this also blocks (bounces from qmail, bounces from older Postfix +# versions, and approval requests from Majordomo) when the included +# message contains valid 8-bit MIME mail, and it may block 8-bit mail # that is piped into /bin/mail or other MIME challenged software. # +strict_8bitmime_body = no + +# Specify "yes" to turn on both strict_7bit_headers and +# strict_8bitmime_body. +# strict_8bitmime = no # Specify "yes" to reject mail with invalid Content-Transfer-Encoding: diff --git a/postfix/conf/sample-misc.cf b/postfix/conf/sample-misc.cf index 4f790f0ca..8f7e2ed45 100644 --- a/postfix/conf/sample-misc.cf +++ b/postfix/conf/sample-misc.cf @@ -209,14 +209,14 @@ mydestination = $myhostname, localhost.$mydomain # $mydomain is used as a default value for many other configuration # parameters. # -#mydomain = domain.name +#mydomain = domain.tld # The myhostname parameter specifies the internet hostname of this # mail system. The default is to use the fully-qualified domain name # from gethostname(). $myhostname is used as a default value for many # other configuration parameters. # -#myhostname = host.domain.name +#myhostname = host.domain.tld # The myorigin parameter specifies the domain that locally-posted # mail appears to come from. The default is to append $myhostname, @@ -300,10 +300,10 @@ delay_notice_recipient = postmaster error_notice_recipient = postmaster # The parent_domain_matches_subdomains parameter specifies what -# Postfix features use "domain.name matches sub.domain.name" style -# pattern matching instead of requiring ".domain.name". This is +# Postfix features use "domain.tld matches sub.domain.tld" style +# pattern matching instead of requiring ".domain.tld". This is # planned backwards compatibility: eventually, all Postfix features -# are expected to require ".domain.name" style patterns. +# are expected to require ".domain.tld" style patterns. # parent_domain_matches_subdomains = debug_peer_list,fast_flush_domains, mynetworks,permit_mx_backup_networks,qmqpd_authorized_clients, diff --git a/postfix/conf/transport b/postfix/conf/transport index 273fee08b..3e5aece89 100644 --- a/postfix/conf/transport +++ b/postfix/conf/transport @@ -161,9 +161,9 @@ # command after a configuration change. # # parent_domain_matches_subdomains -# List of Postfix features that use domain.name pat- -# terns to match sub.domain.name (as opposed to -# requiring .domain.name patterns). +# List of Postfix features that use domain.tld pat- +# terns to match sub.domain.tld (as opposed to +# requiring .domain.tld patterns). # # transport_maps # List of transport lookup tables. diff --git a/postfix/html/access.5.html b/postfix/html/access.5.html index d75975ae2..2e1400596 100644 --- a/postfix/html/access.5.html +++ b/postfix/html/access.5.html @@ -54,16 +54,16 @@ ACCESS(5) ACCESS(5) user@domain Matches the specified mail address. - domain.name - Matches domain.name as the domain part of an email + domain.tld + Matches domain.tld as the domain part of an email address. - The pattern domain.name also matches subdomains, - but only when the string smtpd_access_maps is - listed in the Postfix parent_domain_matches_subdo- - mains configuration setting. Otherwise, specify - .domain.name (note the initial dot) in order to - match subdomains. + The pattern domain.tld also matches subdomains, but + only when the string smtpd_access_maps is listed in + the Postfix parent_domain_matches_subdomains con- + figuration setting. Otherwise, specify .domain.tld + (note the initial dot) in order to match subdo- + mains. user@ Matches all mail addresses with the specified user part. @@ -86,15 +86,15 @@ ACCESS(5) ACCESS(5) networked tables such as NIS, LDAP or SQL, the following lookup patterns are examined in the order as listed: - domain.name - Matches domain.name. + domain.tld + Matches domain.tld. - The pattern domain.name also matches subdomains, - but only when the string smtpd_access_maps is - listed in the Postfix parent_domain_matches_subdo- - mains configuration setting. Otherwise, specify - .domain.name (note the initial dot) in order to - match subdomains. + The pattern domain.tld also matches subdomains, but + only when the string smtpd_access_maps is listed in + the Postfix parent_domain_matches_subdomains con- + figuration setting. Otherwise, specify .domain.tld + (note the initial dot) in order to match subdo- + mains. net.work.addr.ess diff --git a/postfix/html/basic.html b/postfix/html/basic.html index 7e38a8d6c..26db800a8 100644 --- a/postfix/html/basic.html +++ b/postfix/html/basic.html @@ -410,7 +410,7 @@ or you would have a mailer loop.
Host running virtual mailers: -
inet_interfaces = virtual.host.name (virtual domain) +
inet_interfaces = virtual.host.tld (virtual domain)
inet_interfaces = $myhostname localhost.$mydomain (non-virtual mailer) diff --git a/postfix/html/cleanup.8.html b/postfix/html/cleanup.8.html index ba7f6eb63..028b0e22a 100644 --- a/postfix/html/cleanup.8.html +++ b/postfix/html/cleanup.8.html @@ -110,13 +110,24 @@ CLEANUP(8) CLEANUP(8) nested deeper. strict_8bitmime - Reject mail with 8-bit text in message headers, and - with 8-bit text in content that claims to be 7-bit, - or that has no explicit content encoding informa- - tion. This blocks mail mail poorly written mail - software. Unfortunately, this also breaks majordomo - approval requests when the included request con- - tains valid 8-bit MIME mail. + Turn on both strict_7bit_headers and strict_8bit- + mime_body. + + strict_7bit_headers + Reject mail with 8-bit text in message headers. + This blocks mail from poorly written applications. + + strict_8bitmime_body + Reject mail with 8-bit text in content that claims + to be 7-bit, or in content that has no explicit + content encoding information. This blocks mail + mail poorly written mail software. Unfortunately, + this also breaks majordomo approval requests when + the included request contains valid 8-bit MIME + mail, and it breaks bounces from mailers that do + not properly encapsulate 8-bit content (for exam- + ple, bounces from qmail or from old versions of + Postfix). strict_mime_domain_encoding Reject mail with invalid Content-Transfer-Encoding: diff --git a/postfix/html/faq.html b/postfix/html/faq.html index 52520d1f8..30a57128f 100644 --- a/postfix/html/faq.html +++ b/postfix/html/faq.html @@ -1747,10 +1747,10 @@ all you need:
     DNS:
-        the.backed-up.domain.name        IN      MX 100 your.machine.name
+        the.backed-up.domain.tld        IN      MX 100 your.machine.tld
 
     /etc/postfix/main.cf:
-        relay_domains = $mydestination the.backed-up.domain.name
+        relay_domains = $mydestination the.backed-up.domain.tld
 	smtpd_recipient_restrictions = permit_mynetworks check_relay_domains
 
@@ -1766,7 +1766,7 @@ need: transport_maps = hash:/etc/postfix/transport /etc/postfix/transport: - the.backed-up.domain.name smtp:[their.mail.host.name] + the.backed-up.domain.tld smtp:[their.mail.host.tld]

@@ -2207,14 +2207,14 @@ mail as user@domain