masqmail-0.2
view NEWS @ 184:b3835b6b834b
Security fix! Correct handling of seteuid() return value
See Debian bug #638002, reported by John Lightsey.
When possible the (already available) set_euidgid() function is used.
Additionally, it is unnecessary to change the identity when writing
into an already open file descriptor.
This should fix the problem.
| author | markus schnalke <meillo@marmaro.de> |
|---|---|
| date | Sat, 27 Aug 2011 18:00:40 +0200 |
| parents | 3dc9bf11858c |
| children | 1210d3f1af2b |
line source
1 This NEWS file lists changes which may be important for you, especially
2 in regard to compatiblity in upgrades.
4 See ChangeLog file for more details and technical changes that don't
5 affect users directly.
7 The manual pages describe newly added options. Take them for reference.
10 0.2.29
12 - Fixed a problem with folded headers. In earlier versions mail to
13 many recipients may, in unpredictable cases, only have been delivered
14 to the ones on the first line. This is fixed now. Sorry for the
15 inconvenience.
18 0.2.28
20 - Added STARTTLS support with external wrappers like OpenSSL. See
21 `wrapper' and `instant_helo' in masqmail.route(5) for examples how to
22 use it. `instant_helo' is a new route config option.
25 0.2.27
27 - Replaced contributed code with possible licensing problems with
28 alternatives. The MD5 implementation changed from the reference
29 implementation of RFC 1321 to the Public Domain implementation of
30 Solar Designer. The HMAC-MD5 implementation changed from the reference
31 implementation of RFC 2104 to an own implementation (ISC License).
33 - Added the authors of contributed parts to the AUTHORS file.
36 0.2.26
38 - Write a log message when the daemon starts up. Thanks to Juergen
39 Daubert.
41 - Fix handling of --with-liblockfile=no or --without-liblockfile for
42 configure script. Thanks to Nico Roeser.
44 - Improved the INSTALL file and some man pages. Thanks to Nico Roeser
45 Improved the documentation of the wrapper option of route files.
48 0.2.25
50 - Added server-side SMTP SIZE support. Thanks to Paolo.
52 - Masqmail will from now on:
53 o always remove Bcc: headers
54 o never create headers from envelope recipients
55 o add ``To: undisclosed-recipients:;'' if no recipient header (To:
56 or Cc:) is present in the mail
58 - Colons (`:') don't need to be quoted in the config file anymore.
59 Thanks to Paolo.
61 - Added checks for too long addresses in SMTP dialog. Thanks to Paolo.
63 - Moved rmail to sbin and added a man page for it.
65 - Added warnmsg.tpl.it. Thanks to Paolo.
67 - The tests do not get installed any longer. All on install created
68 dirs are removed on uninstall, except they contain generated data like
69 logs, spooled files, or configuration.
71 - Documented some, yet undocumented, config options. Several typo
72 fixes in man pages and code comments.
75 0.2.24
77 - This version keeps on logging after an restart of the deamon, for
78 instance when sending SIGHUP to the daemon process for rereading its
79 config.
81 - Now the daemon keeps the same process id when it receives SIGHUP to
82 reread the config.
84 - Mail messages with lines longer than 4096 characters do not get
85 truncated anymore.
87 - Fixed checking of the trusted group. Primary groups are now
88 detected too.
90 - Mservdetect's man page is now in section 1.
92 - An `rmail' command is now included and gets installed with
93 masqmail. See docs/uucp-setup for more information.
95 - Docs and thelike, that masqmail installs, is removed on uninstall
96 now.
99 0.2.23
101 - This release fixes a major bug in 0.2.22 which made online detection
102 by file unusable. Thanks to Juergen Daubert for reporting and providing
103 a patch.
105 - Masqmail installs to /usr/local by default now. Previously it
106 installed to /usr. To regain the old behavior, add
107 --prefix=/usr
108 to the configure call.
110 - Man pages get installed again; in 0.2.22 they were not. Again thanks
111 to Juergen Daubert. Docs and examples do get installed now too.
113 - Updated the docs. Moved the man pages from docs/ to man/. Added the
114 old manual from the old website to the distribution. Added a bug
115 reporting howto.
118 0.2.22
120 - Hello, I'm meillo, the new maintainer and developer of masqmail. Oku
121 handed masqmail over to me, because he wasn't active anymore.
123 - This release includes various fixes for problems in 0.2.21, mainly
124 based on bugs from Debian.
126 - Distribution specific data has been excluded from the distribution,
127 but is separately available on the project's website.
129 - Man pages will not be generated from xml sources in future, but the
130 nroff sources will be maintained directly.
132 - The default online status file is now
133 /var/run/masqmail/masqmail-route, as it already was in the Debian
134 package.
137 0.2.21
139 - Retrospective: Probably, this version was not published in the usual
140 way by oku. I (meillo) grabbed it from Debian's package archive. It does
141 not introduce new functions but fixes security problems, such as writing
142 log files as user `mail'. It also changes the location for pid files;
143 they are stored in /var/run/masqmail/ now.
146 0.2.18
148 - delivery warnings and failures are now also implemented if the
149 connection to a server fails. Because masqmail is designed for dialup
150 networks, a connection failure will merely generate a warning by default.
151 If you deliver in a local network and use the default local_net route,
152 this would generte a failure. You can change this behaviour by setting
153 'connect_error_fail' to either true or false in the route configurations.
155 0.2.17
157 - delivery warnings have been finally implemented: if delivery of a mail
158 fails temporarily, warning mail will be generated, informing the sender
159 of the problem. After some time, the mail will be handled as failing
160 permanently, and be bounced. New options: 'warn_intervals',
161 'max_defer_time' and 'warnmsg_file'.
163 - the message templates for failures and warnings will now be installed
164 into /usr/share/masqmail/tpl/, and no longer to /etc/masqmail/tpl/. The
165 default for the search path (options 'errmsg_file' and 'warnmsg_file'
166 has been changed accordingly.
168 - new option 'last_route'. See man 5 masqmail.route.
170 0.2.12
171 two new options have been added:
172 - do_pipelining will be used only in broken mail setups. Actually, I
173 implemented it only to test such a setup.
175 - helo_name for routes sets the helo_name. This may be useful for
176 eg. ssh tunneling, or if do_correcthelo does not work, because you are
177 behind a firewall.
179 - the old 'remote_port' option should not be used any more. Set the
180 port with mail_host="foo.bar.com:1234" in the route file instead.
182 0.2.11
184 - two new options have been added: do_save_envelope_to for the main
185 configuration and map_h_mail_followup_to_addresses for the route
186 files. See the man pages on purpose and usage.
188 - the route files can now be mode 0400, owned by root. Previous
189 versions had problems when sendmail was called directly by a
190 non-priviledged user, because the route files could not be read.
192 0.2.10
194 - this version should work on FreeBSD. At least I care now if it does not.
196 - masqmail now writes pid files to /var/run/, one for the smtp/queue
197 daemon and one for the get daemon. So you now know whom to kill ;-)
199 - much effort has been put into the Debian package, which now uses debconf.
201 0.2.7
203 - sorry for my reluctany in the last months...
204 - my email address is oku@masqmail.cx. I hope that I keep this for the rest
205 of my life...
207 0.2.6
209 - you can configure the prefered local delivery mechanism for each user. See
210 man page masqmail.conf (5), options mbox_default, mbox_users, mda_users and
211 maildir_users. BIT FAT NOTE: if you used an mda, set mbox_default = "mda"
212 (or use the mda_users option). Just setting mda is not enough any more.
214 - there are the allowed_return_paths and not_allowed_return_paths for the
215 route configurations, this enables better checking for return path addresses
216 than allowed_mail_locals. You can also use this to enable or disable messages
217 from null sender addresses (<>) using "<>".
218 note: this option has been there for quite a time... I just forgot to document it.
220 0.2.5
222 - simple relay checking: if you set do_relay=false in masqmail.conf, users
223 with a return path that is not local will get a 550 reply if they try to
224 deliver to a not local address. This is for users to force them to have a
225 proper configuration. It is _not_ to prevent spammers from using your MTA
226 as a relay, it can be easily forged! masqmail is not designed to be an always
227 accessible MTA for an internet site.
229 - added Maildir support. To use it, add --enable-maildir as ./configure
230 optiom. Currently, if enabled, all local deliveries are to Maildir
231 (in ~user/Maildir), and none to mailbox. This is preliminary, future versions
232 will be configurable (probably together with mda delivery).
234 0.2.4
236 - added -v option, this logs to stdout, so you see what happens when
237 calling masqmail from command line. This is not yet finished, and only
238 for fetching mails completed.
240 0.2.3
242 - new option lock_dir where locks will be put to. Defaults to the spool
243 dir with '/lock/' appended (if spool_dir is /var/spool/masqmail/, lock_dir
244 is /var/spool/masqmail/lock/).
246 - You can use the 'do_uidl_dele' option more reliably. The uidl list
247 will be written immediately after a message was fetched, so if you use the
248 do_uidl and do_uidl_dele option you can safely interrupt masqmail when it is
249 getting mail via pop3, and do not get the message again next time.
251 - there are a lot of new options for ./configure to customize masqmail
252 to your needs. See INSTALL.
254 - Uli Funcke sent a patch with the new options 'local_addresses' and
255 'not_local_addresses' for masqmail.conf. With these, you can declare single
256 email addresses as local, though they normally are not, and vice versa,
257 declare addresses as not local though normally they are (determined with
258 local_hosts). These options are not yet documented.
260 0.2.2
261 - with -go5m you can now run a get daemon, the command 'masqmail -go5m' will fetch
262 mail every five minutes, using the detected online configuration.
264 0.2.1
266 - there is a new option for the main conf: online_gets. Using this option,
267 you can retrieve mail with just calling masqmail -go, masqmail will detect
268 whether it is online (similar to connect_routes (which is now called
269 online_routes)).
271 0.2.0
273 This is the first release of he development branch of masqmail
275 - the default configuration is now /etc/masqmail/masqmail.conf
276 (as it already was for the debian package). The --with-conffile
277 option for configure has been replaced by the --with-confdir option.
279 - added delivery failure notices:
280 o you can customize your own delivery failure report, its
281 default location is /etc/masqmail/tpl/failmsg.tpl
282 o if a delivery via a route fails permanently (the server replied with a 5xx status)
283 the message will be bounced, if it is bounced, no further delivery will be attempted.
284 This is different to previous versions, where failed messages were kept in the queue until
285 it was finally delivered, deleted or forever.
287 - there is a new online detection method: pipe. This allows you more
288 flexibility to detect the current online status, eg. the DHCP status on notebooks.
290 This method will once replace the 'mserver' option,
291 you can already use the program mservdetect to use it:
293 online_method=pipe
294 online_pipe="/usr/bin/mservdetect localhost 222"
296 instead of
298 online_detect=mserver
299 mserver_iface="localhost:222"
301 0.1.9
303 - you can use pipes in routes to implement gateways to uucp, fax, sms etc.
304 The setup is similar to mda transport. See man pages.
306 - for each connection (connect_routes), you can now give a list of
307 route files, which will be used in the order given. You can use the
308 filter rules (allowed_* and not_allowed_* rules) within each route.
310 0.1.8
312 - for pop retrieval and smtp sending you can use a wrapper for eg. ssl
313 tunneling. See man pages.
315 - a user can delete his mail from the spool with -Mrm if received
316 locally, and if you configure with --enable-ident and set
317 ident_trusted_nets also if received via smtp.
319 - a backslash now works to escape characters in the configuration, so
320 you can now use quotes inside quotes. All other characters with a
321 leading backslash will be converted to itself (\a becomes a, \\
322 becomes \).
324 - you can now use an mda for local mails. The mda will be called
325 *after* alias expansion. See documentation for more.
327 0.1.0
328 - masqmail can now retrieve mail with pop3. See the manual on how to do that.
329 - supports now ESMTP AUTH as a client.
330 - when called with -qo (without a connection name), the online status
331 will be checked with the configured method.
333 0.0.10
334 - there is now alias support. Give the location of the alias file (usually /etc/aliases) with eg.
335 alias_file = "/etc/aliases"
336 - delivery to pipes is now possible, but only if it appears in an alias file. Example:
337 pipe: |/usr/bin/command
338 will expand the address pipe to "|/usr/bin/command" which invokes '/usr/bin/command'
339 as the user and group masqmail is running as.
340 - entries starting with '\' in alias files will not be exanded further
342 - changed permissions for queue runs again: got to be root, mail or in group trusted.
344 - some configuration parameters can be read from files, these are
345 allowed_mail_locals, not_allowed_mail_locals, allowed_rcpt_domains, not_allowed_rcpt_domains,
346 map_return_path_addresses, map_h_from_addresses, map_h_reply_to_addresses
347 any entry in these list beginning with a '/' are regarded as
348 filenames, the content of these will be put at that location. Entries
349 in these files are separated by new lines. Example:
350 in the route file you have:
351 map_h_from_addresses = "/etc/masqmail/hfrom.map"
352 and hfrom.map contains:
354 john: John Smith <jsmith@mail.academic.edu>
355 cmiller: "Charlie Miller" <cmiller@foo.com>
357 UPDATE (Jan 2000): The new home location of MasqMail is
358 http://www.innominate.org/~oku/masqmail/, the new email adress of the
359 author is Oliver Kurth <kurth@innominate.de>.
361 0.0.9
362 - see ChangeLog.
364 NOTE: The home location of MasqMail at
365 http://merlin.uni-sw.gwdg.de/~okurth/masqmail/ is uncertain from the
366 beginning of Nov. 1999! See http://www.freshmeat.net for new
367 announcements. I leave the university and begin a new job on Nov. 1st 1999
368 in Berlin :-).
370 0.0.8:
371 - there is now a FAQ page. See docs/faq.html.
372 - added allowed_rcpt_domains option for routes.
373 - added allowed_mail_locals and not_allowed_mail_locals options for routes.
374 - mailq now gives information about the time mails spent in the queue,
375 the message size and the received host.
377 0.0.7:
378 -bug fix release: for statements in two adjacent lines, the second was not recognized.
380 0.0.6:
381 - bug fix release: some MUAs (cucipop) saw the locally delivered mails
382 concatenated. (cucipop is not a MUA but a pop server, but it has to read the
383 mails).
385 0.0.5:
386 - fixed a bug that caused the headers to be lost under some circumstances.
387 - added expand_h_sender_domain option for routes.
388 - rewrote the libresolv part in configure. Should work better now.
390 0.0.4:
391 - MM should now recognize whether libresolv should be linked.
392 - added --with-logdir=LOGDIR and --with-spooldir=SPOOLDIR to set directories.
393 These will be created if not already existent.
394 - added --with-user=USER, --with-group=GROUP options to set user and group id
395 for MasqMail.
397 0.0.3:
398 - MasqMail can now deliver mails that are received at online
399 time immediately to the internet. See the options detect_online,
400 mserver_iface and online_file.
401 - You can define a route configuration for the local net. See option
402 local_net_route.