RE: Postfix 2.9.2, 2.8.11, 2.7.10, 2.6.16 available
> On Mon, 2012-05-21 at 08:55:13 -0400, Wietse Venema wrote: > > ... > > To avoid repeated warnings from postscreen(8) with "connect to > > private/dnsblog service: Connection refused" on FreeBSD, the > > dnsblog(8) daemon now uses the single_server program driver instead of > > the multi_server driver. This one-line code change has no performance > > impact for other systems, and eliminates a high-frequency accept() > > race on a shared socket that appears to cause trouble on FreeBSD. The > > same single_server program driver has proven itself for many years in > > smtpd(8). Problem reported by Sahil Tandon. > > I've been running 2.10-20120520 for the past 48 hours with no sign of > the 'Connection refused' problem. Thanks very much for the time you > spent implementing this workaround, Wietse. > Amen! ~Doug
Re: Postfix 2.9.2, 2.8.11, 2.7.10, 2.6.16 available
On Mon, 2012-05-21 at 08:55:13 -0400, Wietse Venema wrote: > ... > To avoid repeated warnings from postscreen(8) with "connect to > private/dnsblog service: Connection refused" on FreeBSD, the > dnsblog(8) daemon now uses the single_server program driver instead of > the multi_server driver. This one-line code change has no performance > impact for other systems, and eliminates a high-frequency accept() > race on a shared socket that appears to cause trouble on FreeBSD. The > same single_server program driver has proven itself for many years in > smtpd(8). Problem reported by Sahil Tandon. I've been running 2.10-20120520 for the past 48 hours with no sign of the 'Connection refused' problem. Thanks very much for the time you spent implementing this workaround, Wietse. -- Sahil Tandon
Re: Postfix 2.9.2, 2.8.11, 2.7.10, 2.6.16 available
ml: > after having realized a full build of postfix. > I noticed a small difference between the patch > > ftp://ftp.its.cz/MIRRORS/ftp.porcupine.org/mirrors/postfix-release/experimental/feature-patches/20120407-nobreak-reply-footer-patch > > that made me start the arguments of the option smtpd_reject_footer by \c > > this seems to have changed I removed \ c > how to properly use smtpd_reject_footer The STABLE release does not change except for bugfixes. NEW FEATURES appear in the experimental release only. Wietse
Re: Postfix 2.9.2, 2.8.11, 2.7.10, 2.6.16 available
Le lundi 21 mai 2012 à 08:55 -0400, Wietse Venema a écrit : > [An on-line version of this announcement will be available at > http://www.postfix.org/announcements/postfix-2.9.3.html] > > Postfix stable release 2.9.3, and legacy releases 2.8.11, 2.7.10, > 2.6.16 are available. They contains workarounds that are already > part of Postfix 2.10. > > * OpenSSL related (all supported Postfix versions). > > o Some people have reported program crashes when the OpenSSL > library was updated while Postfix was accessing the Postfix > TLS session cache. To avoid this, the Postfix TLS session > cache ID now includes the OpenSSL library version number. > This cache ID is not shared via the network. > > o The OpenSSL workaround introduced with the previous stable > and legacy releases did not compile with older gcc compilers. > These compilers can't handle #ifdef inside a macro invocation > (NOT: definition). > > * Postfix 2.9 only. > > o The postconf command flagged parameter "-o name=value" > settings in master.cf as "unused" when those settings were > used only in main.cf. Problem reported by Michael Tokarev. > > * postscreen(8) related (Postfix 2.9, Postfix 2.8). > > o To avoid repeated warnings from postscreen(8) with "connect > to private/dnsblog service: Connection refused" on FreeBSD, > the dnsblog(8) daemon now uses the single_server program > driver instead of the multi_server driver. This one-line > code change has no performance impact for other systems, > and eliminates a high-frequency accept() race on a shared > socket that appears to cause trouble on FreeBSD. The same > single_server program driver has proven itself for many > years in smtpd(8). Problem reported by Sahil Tandon. > > * Laptop-friendly support (all supported Postfix versions). A > little-known secret is that Postfix has always had support to > avoid unnecessary disk spin-up for MTIME updates, by doing > s/fifo/unix/ in master.cf (this is currently not supported on > Solaris systems). However, two minor fixes are needed to make > this bullet-proof. > > o In laptop-friendly mode, the "postqueue -f" and "sendmail > -q" commands did not wait until their requests had reached > the pickup and qmgr servers before closing their UNIX-domain > request sockets. > > o In laptop-friendly mode, the unused postkick command waited > for more than a minute because the event_drain() function > was comparing bitmasks incorrectly on systems with kqueue(2), > epoll(2) or /dev/poll support. > > You can find the updated Postfix source code at the mirrors listed > at http://www.postfix.org/. > > Wietse after having realized a full build of postfix. I noticed a small difference between the patch ftp://ftp.its.cz/MIRRORS/ftp.porcupine.org/mirrors/postfix-release/experimental/feature-patches/20120407-nobreak-reply-footer-patch that made me start the arguments of the option smtpd_reject_footer by \c this seems to have changed I removed \ c how to properly use smtpd_reject_footer -- http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC2626742 gpg --keyserver pgp.mit.edu --recv-key C2626742 http://urlshort.eu fakessh @ http://gplus.to/sshfake http://gplus.to/sshswilting http://gplus.to/john.swilting https://lists.fakessh.eu/mailman/ This list is moderated by me, but all applications will be accepted provided they receive a note of presentation signature.asc Description: Ceci est une partie de message numériquement signée
Postfix 2.9.2, 2.8.11, 2.7.10, 2.6.16 available
[An on-line version of this announcement will be available at http://www.postfix.org/announcements/postfix-2.9.3.html] Postfix stable release 2.9.3, and legacy releases 2.8.11, 2.7.10, 2.6.16 are available. They contains workarounds that are already part of Postfix 2.10. * OpenSSL related (all supported Postfix versions). o Some people have reported program crashes when the OpenSSL library was updated while Postfix was accessing the Postfix TLS session cache. To avoid this, the Postfix TLS session cache ID now includes the OpenSSL library version number. This cache ID is not shared via the network. o The OpenSSL workaround introduced with the previous stable and legacy releases did not compile with older gcc compilers. These compilers can't handle #ifdef inside a macro invocation (NOT: definition). * Postfix 2.9 only. o The postconf command flagged parameter "-o name=value" settings in master.cf as "unused" when those settings were used only in main.cf. Problem reported by Michael Tokarev. * postscreen(8) related (Postfix 2.9, Postfix 2.8). o To avoid repeated warnings from postscreen(8) with "connect to private/dnsblog service: Connection refused" on FreeBSD, the dnsblog(8) daemon now uses the single_server program driver instead of the multi_server driver. This one-line code change has no performance impact for other systems, and eliminates a high-frequency accept() race on a shared socket that appears to cause trouble on FreeBSD. The same single_server program driver has proven itself for many years in smtpd(8). Problem reported by Sahil Tandon. * Laptop-friendly support (all supported Postfix versions). A little-known secret is that Postfix has always had support to avoid unnecessary disk spin-up for MTIME updates, by doing s/fifo/unix/ in master.cf (this is currently not supported on Solaris systems). However, two minor fixes are needed to make this bullet-proof. o In laptop-friendly mode, the "postqueue -f" and "sendmail -q" commands did not wait until their requests had reached the pickup and qmgr servers before closing their UNIX-domain request sockets. o In laptop-friendly mode, the unused postkick command waited for more than a minute because the event_drain() function was comparing bitmasks incorrectly on systems with kqueue(2), epoll(2) or /dev/poll support. You can find the updated Postfix source code at the mirrors listed at http://www.postfix.org/. Wietse
