forked from pool/postfix
dcdcda0a8e
* tls support:
Support to turn off the TLSv1.1 and TLSv1.2 protocols:
To temporarily turn off problematic protocols globally:
/etc/postfix/main.cf:
smtp_tls_protocols = !SSLv2, !TLSv1.1, !TLSv1.2
smtp_tls_mandatory_protocols = !SSLv2, !TLSv1.1, !TLSv1.2
However, it may be better to temporarily turn off problematic
protocols for broken sites only:
/etc/postfix/main.cf:
smtp_tls_policy_maps = hash:/etc/postfix/tls_policy
/etc/postfix/tls_policy:
example.com may protocols=!SSLv2:!TLSv1.1:!TLSv1.2
* 20111012 To simplify integration with third-party
applications, the Postfix sendmail command now always transforms
all input lines ending in <CR><LF> into UNIX format (lines ending
in <LF>). Specify "sendmail_fix_line_endings = strict" to restore
historical Postfix behavior (i.e. convert all input lines ending
in <CR><LF> only if the first line ends in <CR><LF>).
* 20120114 Logfile-based alerting systems may need to be
updated to look for "error" messages in addition to "fatal" messages.
Specify "daemon_table_open_error_is_fatal = yes" to get the historical
behavior (immediate termination with "fatal" message).
* enable_long_queue_ids Postfix 2.9 introduces support for non-repeating queue IDs (also
used as queue file names). These names are encoded in a mix of upper
case, lower case and decimal digit characters. Long queue IDs are
disabled by default to avoid breaking tools that parse logfiles and
that expect queue IDs with the smaller [A-F0-9] character set.
* 20111209 memcache lookup and update support. This provides
a way to share postscreen(8) or verify(8) caches between Postfix
OBS-URL: https://build.opensuse.org/package/show/server:mail/postfix?expand=0&rev=154
11 lines
493 B
Diff
11 lines
493 B
Diff
--- src/util/inet_proto.c.orig 2012-01-03 01:57:59.000000000 +0100
|
|
+++ src/util/inet_proto.c 2012-11-15 13:39:22.000000000 +0100
|
|
@@ -195,7 +195,6 @@ INET_PROTO_INFO *inet_proto_init(const c
|
|
if ((sock = socket(PF_INET6, SOCK_STREAM, 0)) >= 0) {
|
|
close(sock);
|
|
} else if (errno == EAFNOSUPPORT || errno == EPROTONOSUPPORT) {
|
|
- msg_warn("%s: disabling IPv6 name/address support: %m", context);
|
|
inet_proto_mask &= ~INET_PROTO_MASK_IPV6;
|
|
} else {
|
|
msg_fatal("socket: %m");
|