aboutsummaryrefslogtreecommitdiff
path: root/mail/postfix
Commit message (Collapse)AuthorAgeFilesLines
* - update to 3.2.2Olli Hauer2017-06-212-5/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - adjust PORTSCOUT Changelog: 20170221 Compatibility fix (introduced: Postfix 3.1): some Milter applications do not recognize macros sent as {name} when macros have single-character names. Postfix now sends such macros without {} as it has done historically. Viktor Dukhovni. File: milter/milter.c. 20170402 Bugfix (introduced: Postfix 3.2): restore the SMTP server receive override options at the end of an SMTP session, after the options may have been modified by an smtpd_milter_maps setting of "DISABLE". Problem report by Christian R__ner, root cause analysis by Viktor Dukhovni. File: smtpd/smtpd.c. 20170430 Safety net: append a null byte to vstring buffers, so that C-style string operations won't scribble past the end. File: vstring.c. 20170531 Bugfix (introduced: Postfix 3.2): after the table lookup overhaul, the check_sender_access and check_recipient_access features ignored the parent_domain_matches_subdomains setting. Reported by Henrik Larsson. File: smtpd/smtpd_check.c. 20170610 Workaround (introduced: Postfix 3.0 20140718): prevent MIME downgrade of Postfix-generated message/delivery status. It's supposed to be 7bit, therefore quoted-printable encoding is not expected. Problem reported by Griff. File: bounce/bounce_notify_util.c. 20170611 Security: Berkeley DB 2 and later try to read settings from a file DB_CONFIG in the current directory. This undocumented feature may introduce undisclosed vulnerabilities resulting in privilege escalation with Postfix set-gid programs (postdrop, postqueue) before they chdir to the Postfix queue directory, and with the postmap and postalias commands depending on whether the user's current directory is writable by other users. This fix does not change Postfix behavior for Berkeley DB < 3, but reduces file create performance for Berkeley DB 3 .. 4.6. File: util/dict_db.c. PR: 219996 Reported by: Markus Kohlmeyer MFH: 2017Q2 Notes: svn path=/head/; revision=444073
* mail/postfix: Fix x25519 kex with LibreSSLBernard Spil2017-05-202-4/+30
| | | | | | | | | PR: 216790 Obtained from: OpenBSD ports Approved by: ohauer (maintainer) Notes: svn path=/head/; revision=441329
* Update to 3.2.0.Adam Weinberger2017-05-102-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This release ends support for legacy release Postfix 2.10. The main changes in no particular order are: * Elliptic curve negotiation with OpenSSL ≥ 1.0.2. This changes the default smtpd_tls_eecdh_grade setting to "auto", and introduces a new parameter tls_eecdh_auto_curves with the names of curves that may be negotiated. * Stored-procedure support for MySQL databases. Contributed by John Fawcett. See the mysql_table(5) manpage for details. * Cidr: table support for if/endif and negation (by prepending ! to a pattern), just like regexp: and pcre: tables. See the cidr_table(5) manpage for details. * The postmap command and the inline: and texthash: maps now support spaces in left-hand field of lookup table source text. Use double quotes (") around a left-hand field that contains spaces, and use backslash (\) to protect quotes in a left-hand field. * Support for per-client Milter configuration (smtpd_milter_maps) that overrides the main.cf smtpd_milters setting, and that has the same syntax. A lookup result of "DISABLE" turns off Milter support for that client. See MILTER_README.html for details. * The local SMTP server IP address and port are available in the policy delegation protocol (attribute names: server_address, server_port), in the Milter protocol (macro names: {daemon_addr}, {daemon_port}), and in the XCLIENT protocol (attribute names: DESTADDR, DESTPORT). * For safety reasons, the Postfix sendmail -C option must specify an authorized directory: the default configuration directory, a directory that is listed in the default main.cf file with alternate_config_directories or multi_instance_directories, otherwise the command must be invoked with root privileges. This mitigates a recurring "jail break" problem with the PHP mail() function. * "PASS" and "STRIP" actions in header/body_checks. "STRIP" is similar to "IGNORE" but also logs the action, and "PASS" disables header, body, and Milter inspection for the remainder of the message content. Contributed by Hobbit. * The collate.pl script by Viktor Dukhovni for grouping Postfix logfile records into "sessions" based on queue ID and process ID information, in the auxiliary/collate directory of the Postfix source tree. Disabled or removed behavior: * SMTPUTF8 support: Postfix 3.2 disables the 'transitional' compatibility between the IDNA2003 and IDNA2008 standards for internationalized domain names (domain names beyond the limits of US-ASCII). This makes Postfix behavior consistent with contemporary web browsers. See RELEASE_NOTES for more. * Postfix 3.2 removes tentative features that were implemented before the DANE spec was finalized: support for certificate usage PKIX-EE(1), the ability to disable digest agility, and the ability to disable support for "TLSA 2 [01] [12]" records that specify the digest of a trust anchor. See RELEASE_NOTES for more. PR: 218697 Submitted by: pi Reviewed by: flo Approved by: maintainer timeout Notes: svn path=/head/; revision=440583
* - update to 3.1.4Olli Hauer2017-01-032-5/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: 20161105 Bugfix (introduced: Postfix 1.1): the postsuper command did not count a successful rename operation after error recovery. 20161204 Bugfix (introduced: Postfix 3.1): cut-and-paste error in the "postfix tls deploy-server-cert" command, causing the wrong certfile and keyfile to be used. Robustness: create a new keyfile when "postfix tls new-server-cert" is invoked and main.cf specifies a non-existent keyfile. 20161206 Bugfix (introduced: Postfix 3.0): when receiving a MAIL FROM...SMTPUTF8 command while smtpd_delay_reject=no, enable SMTPUTF8 support before processing smtpd_sender_restrictions. 20161220 Bugfix (introduced: Postfix 2.1.0): the Postfix SMTP daemon did not query sender_canonical_maps when rejecting unknown senders with "smtpd_reject_unlisted_recipient = yes" or with reject_unlisted_sender. MFH: 2017Q1 Notes: svn path=/head/; revision=430486
* Do not use post-stage. Use post-install instead.Mathieu Arnold2016-12-021-5/+4
| | | | | | | | | | | | | | | The only reason to use post-stage is because the port needs to do "things" at a later time, like some plist manipulation. While there, fold post-install in do-install targets when they are defined. PR: 214780 Submitted by: mat Exp-run by: antoine Sponsored by: Absolight Notes: svn path=/head/; revision=427552
* devel/icu: update to 58.1Jan Beich2016-11-191-0/+1
| | | | | | | | | | Changes: http://site.icu-project.org/download/58 PR: 214384 Exp-run by: antoine Approved by: office (bapt) Notes: svn path=/head/; revision=426525
* - restore svn:keywordsOlli Hauer2016-10-021-1/+1
| | | | Notes: svn path=/head/; revision=423107
* - update to 3.1.3Olli Hauer2016-10-022-5/+4
| | | | | | | | | | | | | | | | | | | | | | | | Changelog: 20160911 Bugfix (introduced: Postfix 3.0): the SMTP daemon did not reset a previous session's command counts before rejecting a client that exceeds request or concurrency rates. File: smtpd/smtpd.c. 20160917 Bugfix (introduced: Postfix 3.0): the unionmap did not propagate table lookup errors. Based on patch by Roel van Meer. Files: util/dict_union.c, util/dict_union_test.*. 20160925 Workaround (problem introduced: Postfix 2.11): to avoid false "not found" errors with MySQL map queries that contain UTF8-encoded text, specify "option_group = client" in Postfix MySQL configuration files. This will be the default setting with Postfix 3.2 and later. Notes: svn path=/head/; revision=423106
* - Update devel/icu to 57.1.Tijl Coosemans2016-09-241-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | - Clean up the Makefile. - Follow some upstream recommendations (--with-data-packaging=archive, --disable-renaming, -DICU_NO_USER_DATA_OVERRIDE). - Patch makefiles to install static libraries with INSTALL_DATA so they aren't stripped. - Patch config/mh-bsd-gcc to sync with config/mh-linux-gcc. - Fix endianness detection in ICU. The code wanted to use BYTE_ORDER defined in machine/endian.h, but this isn't visible because ICU is compiled with _XOPEN_SOURCE. Patch the code to use _BYTE_ORDER instead. - Compile ICU with C++11 compiler to enable move constructors. - Patch ICU to fix a problem with atomics in the case of a C++11 compiler without C++11 header <atomic> (like Clang on FreeBSD 9). - Bump all ports that depend on it due to library version change. - Add USES=compiler:c++0x to some ports that pick up -std=c++0x from ICU pkgconfig files. - Add USES=compiler:c++11-lib to graphics/libcdr01 because it also needs a C++11 runtime library now. Add this to all ports that depend on it so their executables load the right libstdc++.so on FreeBSD 9. PR: 205120 Exp-run by: antoine Approved by: portmgr (antoine) Notes: svn path=/head/; revision=422711
* mail/postfix: Fix typo in LibreSSL patchBernard Spil2016-08-302-2/+2
| | | | | | | | | | - Fix DANE support with LibreSSL PR: 212223 Reported by: Markus Kohlmeyer <rootservice@gmail.com> Notes: svn path=/head/; revision=421102
* mail/postfix: Fix runtime issues with LibreSSLBernard Spil2016-08-296-0/+103
| | | | | | | | | | | | | | - Add LibreSSL checks to <> 1.1.0 OpenSSL checks - Bump portrevision PR: 212223 Submitted by: Markus Kohlmeier <rootservice@gmail.com> Reported by: Markus Kohlmeier <rootservice@gmail.com> Approved by: ohauer (via PR) MFH: 2016Q3 Notes: svn path=/head/; revision=421091
* - update to 3.1.2Olli Hauer2016-08-282-5/+4
| | | | | | | | | | | | | | | | | | | | | | 20160819 Bugfix (introduced: Postfix 3.0): the makedefs script ignored readme_directory=pathname overrides. Fix by Todd C. Olson. File: makedefs. 20160821 Bugfix (introduced: Postfix 3.0): the tls_session_ticket_cipher documentation says aes-256-cbc, but the implementation was using aes-128-cbc (note that Postfix SMTP server and client processes have a limited life time). 20160828 Bitrot: fixes for incompatible OpenSSL 1.1.0 API changes. Viktor Dukhovni. Files: posttls-finger/posttls-finger.c, tls/tls.h, tls/tls_dane.c, tls/tls_verify.c, tls/tls_server.c, tls/tls_client.c. Notes: svn path=/head/; revision=421013
* USE_BDB cleanup.Mathieu Arnold2016-08-081-1/+1
| | | | | | | | | | | | | | - USE_BDB=4x+ -> USES=bdb. - USE_BDB=yes -> USES=bdb. - USE_BDB=xx -> USES=bdb:xx. Other modernisations when I see them. PR: 209183 Sponsored by: Absolight Notes: svn path=/head/; revision=419843
* - fix build with libressl-develOlli Hauer2016-08-021-0/+14
| | | | | | | | | PR: 211502 Reported by: Helmut Ritter Obtained from: http://cvsweb.openbsd.org/cgi-bin/cvsweb/ports/mail/postfix/stable/patches/ Notes: svn path=/head/; revision=419488
* - fix build on FreeBSD 12Olli Hauer2016-07-093-6/+15
| | | | | | | - s/USE_OPENSSL=yes/USES=ssl/ Notes: svn path=/head/; revision=418293
* Bump PORTREVISION for the icu revert.Mathieu Arnold2016-07-061-1/+1
| | | | | | | | | | | | This time not bumping lang/php70, but devel/php70-intl which is the one really depending on icu. PR: 205120 With hat: portmgr Sponsored by: Absolight Notes: svn path=/head/; revision=418153
* devel/icu: bump PORTREVISION on dependent portsPietro Cerutti2016-07-061-0/+1
| | | | Notes: svn path=/head/; revision=418119
* - update to 3.1.1Olli Hauer2016-05-152-3/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changelog: 20160228 Documentation: typos in postfix-tls-script(1) manpage. 20160327 Documentation: line wrapping in postconf(1) manpage. 20160310 Bugfix (introduced: Postfix 2.6): the Milter SMFIR_CHGFROM (replace sender) request lost the sender_bcc_maps address. Fixed by moving some record keeping to the sender output function. Files: cleanup/cleanup_envelope.c, cleanup/cleanup_addr.c, cleanup/cleanup_milter.c, cleanup/cleanup.h, regression tests. 20160410 Bugfix (introduced: Postfix 2.6): the "bad filetype" header_checks pattern falsely rejected Content-Mumble headers with ``name="example"; x-apple-part-url="example.com"''. Fixed by respecting the ";" separator between content attribute values. Reported by Cedric Knight. File: proto/header_checks. 20160515 Portability: OpenBSD 6.0. Files: makedefs, util/sys_defs.h. MFH: 2016Q2 Notes: svn path=/head/; revision=415286
* - remove ${PORTSDIR} from dependencyOlli Hauer2016-03-301-7/+7
| | | | Notes: svn path=/head/; revision=412164
* - update to postfix 3.1Olli Hauer2016-02-286-73/+113
| | | | | | | | | Users updating from postfix 2.11 should read: ftp://ftp.porcupine.org/mirrors/postfix-release/official/postfix-3.0.0.RELEASE_NOTES ftp://ftp.porcupine.org/mirrors/postfix-release/official/postfix-3.1.0.RELEASE_NOTES Notes: svn path=/head/; revision=409727
* - s/always build in/always built in/Olli Hauer2016-02-251-1/+1
| | | | Notes: svn path=/head/; revision=409559
* - add missing reload part into pkg-installOlli Hauer2016-02-251-0/+16
| | | | Notes: svn path=/head/; revision=409553
* - rework SASL OPTIONSOlli Hauer2016-02-255-56/+144
| | | | | | | | | | | | | | | | | | | Dovecot SASL does not need any dependency, from now it will be always build into postfix and the default SASL unless Cyrus is also added (there is no conflict between them) - add support for FreeBSD 10.3 mailwrapper (install mailer.conf into LOCALBASE/mail instead /etc/mail) - add better reload support to rc script - display correct path in pkg-message - add support for postfix-sasl slave port - bump PORTREVISION Many Thanks to all testers! PR: 195662 PR: 205162 Notes: svn path=/head/; revision=409551
* - s/SQLITE_USE/SQLITE_USES/Olli Hauer2016-01-101-1/+1
| | | | Notes: svn path=/head/; revision=405738
* - fix misplaced strip flagOlli Hauer2016-01-051-2/+2
| | | | | | | MFH: 2016Q1 Notes: svn path=/head/; revision=405272
* - rework pkg-install and pkg-message [1]Olli Hauer2016-01-045-43/+71
| | | | | | | | | | | | | | | | | | | | - install postfix specific mailer.conf.postfix into DATADIR [2] - use new notation instead PATCH_DIST_STRIP - bump PORTREVISION 1) detect if the port is installed without TERM, in this case do not ask the to make postfix the default mailer and respect the env POSTFIX_DEFAULT_MTA. This helps tools like salt, ansible, cfengine and puppet during the first package installation. 2) $DATADIR/mailer.conf.postfix can be used by the tools in 1) MFH: 2016Q1 Notes: svn path=/head/; revision=405234
* Improve shebangfix frameworkDmitry Marakasov2015-10-191-1/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | - Support multiple values in *_OLD_CMD, i.e. we can now fix both "/usr/bin/python" and "/usr/bin/env python" at the same time - Default *_OLD_CMD values are now always appended, so you don't need to specify them in individual ports - Add lua support (depends on USES=lua) - Add more default values, such as "/usr/bin/env foo" for python, perl, bash, ruby and lua - Shebangfix now matches whole words, e.g. we will no longer (erroneously) replace "/usr/bin/perl5.005" with "${perl_CMD}5.005" (but "/usr/bin/perl -tt" is still (correctly) replaced with "${perl_CMD} -tt") Note that *_OLD_CMD items containing spaces must now be quoted (e.g. perl_OLD_CMD=/bin/perl /usr/bin/perl "/usr/bin/env perl") Update shebangfix usage according to new rules in many ports: - Remove *_OLD_CMD for patterns now replaced by default - Quote custom *_OLD_CMD which contain spaces Fix shebangfix usage in many ports (irrelevant to infrastructure change): - Remove redundant SHEBANG_LANG (no need to duplicate default langs) - Remove redundant *_CMD (such as python_CMD=${LOCALBASE}/bin/python${PYTHON_VER} when USES=python is present) - Never use *_OLD_CMD in REINPLACE_CMD matchers, these should always look for exact string Approved by: portmgr (bapt) Differential Revision: D3756 Notes: svn path=/head/; revision=399684
* - update to 2.11.7Olli Hauer2015-10-112-16/+14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - use target helpers ChangeLog: 20150903 Workaround: disable DNSSEC support for AIX 7x and earlier. The AIX 6/7 resolver(5) API defines RES_USE_DNSSEC without defining the "ad" bit. Viktor Dukhovni. Files: makedefs, proto/INSTALL.html, dns/dns.h. 20150923 Bugfix (introduced: 20120531-617): the Postfix SMTP server used a larger-than-1 VSTREAM buffer to read the HAProxy connection hand-off information. This broke TLS wrappermode, as the TLS helo packet would end up in the plaintext VSTREAM buffer. Reported by Lukas Erlacher. File: smtpd/smtpd_haproxy.c. 20150924 Bugfix (introduced: 20090216-24): incorrect postmulti error message. Reported by Patrik Koetter. Fix by Viktor Dukhovni. File: postmulti/postmulti.c. Workaround: don't create a new instance when the template main.cf and master.cf files are missing, as happens on Debian-like systems. Viktor Dukhovni. File: conf/postmulti-script. 20150925 Bugfix (introduced: 19970309, fixed 20150421 in development release): reset errno before calling readdir(), in order to distinguish between an end-of-directory and an error condition. File: scandir.c. 20150930 Bugfix (introduced: 20040124): Milter client panic while adding a header, because the PREPEND action used the same output function for header_checks and body_checks. Viktor Dukhovni and Wietse. File: cleanup/cleanup_message.c. Bugfix (introduced: 20031128): xtext_unquote() did not propagate error reports from xtext_unquote_append(), causing the decoder to return partial ouput, instead of rejecting malformed input. Fix by Krzysztof Wojta. File: global/xtext.c. Notes: svn path=/head/; revision=399090
* - update to 2.11.6Olli Hauer2015-08-022-5/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 20150501 Support for Linux 4.*, and some simplification for future makedefs files. Files: makedefs, util/sys_defs.h. 20150718 Security: opportunistic TLS by default uses "medium" or stronger ciphers instead of "export" or stronger. See the RELEASE_NOTES file for how to get the old settings back. Files: global/mail_params.h, proto/TLS_README.html, proto/postconf.proto, and files derived from those. 20150719 Security: Postfix TLS support by default no longer uses SSLv2 or SSLv3. See the RELEASE_NOTES file for how to get the old settings back. Files: global/mail_params.h, proto/postconf.proto, and files derived from those. Incompatible change with Postfix 2.11.6 / 3.0.2 ------------------------------------------------- As of the middle of 2015, all supported Postfix releases no longer enable "export" grade ciphers for opportunistic TLS, and no longer use the deprecated SSLv2 and SSLv3 protocols for mandatory or opportunistic TLS. These changes are very unlikely to cause problems with server-to-server communication over the Internet, but they may result in interoperability problems with ancient client or server implementations on internal networks. To address this problem, you can revert the changes with: Postfix SMTP client settings: lmtp_tls_ciphers = export smtp_tls_ciphers = export lmtp_tls_protocols = !SSLv2 smtp_tls_protocols = !SSLv2 lmtp_tls_mandatory_protocols = !SSLv2 smtp_tls_mandatory_protocols = !SSLv2 Postfix SMTP server settings: smtpd_tls_ciphers = export smtpd_tls_protocols = smtpd_tls_mandatory_protocols = !SSLv2 These settings, if put in main.cf, affect all Postfix SMTP client or server communication, which may be undesirable. To be more selective, use "-o name=value" parameter overrides on specific services in master.cf. Execute the command "postfix reload" to make the changes effective. Notes: svn path=/head/; revision=393442
* Always use USE_RC_SUBR now that it handles properly PREFIX=/usrBaptiste Daroussin2015-06-221-2/+2
| | | | Notes: svn path=/head/; revision=390323
* VDA: Remove misleading '32bit' in description.Bryan Drewery2015-05-251-1/+1
| | | | | | | | | | | | | | | This stemmed from older VDA patches which provided a default patch which only used 'long' for its data types and a '64bit' patch which used 'long long'. On 32bit systems 'long' is limited to a 2GB quota while on 64bit systems it will not be. They later renamed the '64bit' patch to be 'bigquota'. They no longer provide a 'bigquota' patch due to less demand as most systems are 64bit today and do not have the small 2GB quota limitation with the 'long' type. The description of '32bit' was not accurate or useful anymore. Upstream discussion: http://sourceforge.net/p/vda/mailman/message/24713171/ Notes: svn path=/head/; revision=387393
* MASTER_SITES cleanup.Mathieu Arnold2015-05-141-2/+1
| | | | | | | | | | | | | | | | | | | | | | - Replace ${MASTER_SITE_FOO} with FOO. - Merge MASTER_SITE_SUBDIR into MASTER_SITES when possible. (This means 99.9% of the time.) - Remove occurrences of MASTER_SITE_LOCAL when no subdirectory was present and no hint of what it should be was present. - Fix some logic. - And generally, make things more simple and easy to understand. While there, add magic values to the FESTIVAL, GENTOO, GIMP, GNUPG, QT and SAMBA macros. Also, replace some EXTRACT_SUFX occurences with USES=tar:*. Checked by: make fetch-urlall-list With hat: portmgr Sponsored by: Absolight Notes: svn path=/head/; revision=386312
* - update to version 2.11.5Olli Hauer2015-05-106-82/+63
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - rename OPTIONS to match default name of most ports - SASL2 -> SASL - OPENLDAP -> LDAP - install main.cf and master.cf with the @sample macro - rework pkg-install - fix wrong permission for /var/db/postfix [1] - sets WANT_OPENLDAP_SASL option for openldap port when postfix LDAP_SASL option is set [2] - make usage of new ${opt}_DEPENDS notation Changelog: 20150324 Bugfix (introduced: Postfix 2.6): sender_dependent_relayhost_maps ignored the relayhost setting in the case of a DUNNO lookup result. It would use the recipient domain instead. Viktor Dukhovni. Wietse took the pieces of code that enforce the precedence of a sender-dependent relayhost, the global relayhost, and the recipient domain, and put that code together in once place so that it is easier to maintain. File: trivial-rewrite/resolve.c. 20150330 Bitrot: prepare for future changes in OpenSSL API. Viktor Dukhovni. File: tls_dane.c. 20150408 Portability: FreeBSD10 support. Files: makedefs, util/sys_defs.h. Incompatibility: specifying "make makefiles" with "CC=command" will no longer override the default WARN setting. PR: 198215 [1] 198857 [2] Notes: svn path=/head/; revision=385965
* - grap mail/postfix portsOlli Hauer2015-05-081-1/+1
| | | | | | | (I have some rewrites for them) Notes: svn path=/head/; revision=385798
* - Reassign to the heap after sahil@'s bit was taken in for safekeepingFrederic Culot2015-05-081-1/+1
| | | | Notes: svn path=/head/; revision=385780
* - update to 2.11.4Olli Hauer2015-02-142-4/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Changes: 20141025 Bugfix (introduced: Postfix 2.11): core dump when smtp_policy_maps specifies an invalid TLS level. Viktor Dukhovni. File: smtp/smtp_tls_policy.c. 20150106 Robustness: don't segfault due to excessive recursion after a faulty configuration runs into the virtual_alias_recursion_limit. File: global/tok822_tree.c. 20150115 Safety: stop aliasing loops that exponentially increase the address length with each iteration. Back-ported from Postfix 3.0. File: cleanup/cleanup_map1n.c. 20150117 Cleanup: missing " in \%s\" in postconf(1) fatal error messages. Iain Hibbert. File: postconf/postconf_master.c. Approved by: sahil (implicit) MFH: 2015Q1 Notes: svn path=/head/; revision=378980
* - remove dead mirrors from MASTER_SITESOlli Hauer2015-02-141-6/+7
| | | | | | | | | (a good overview can be taken by viewving the source of http://www.postfix.org/download.html) - remove MASTER_SITE_SUBDIR, it should be used only for sites defined in bsd.site.mk Notes: svn path=/head/; revision=378967
* - update conflicts for new postfix-currentOlli Hauer2015-01-312-37/+29
| | | | | | | | | | | | | | | | | | | - use OPTIONS_SUB - enable TLS as default [1] - use USE_OPENSSL instead including Mk/openssl.mk - use new install instruction - use new notation for @mode in pkg-plist - bump PORTREVISON [1] Users using packages should have the ability to use TLS from the default package, (this makes the the postfix-tls port obsolete) Approved by: sahil (implicit) MFH: 2015Q1 Notes: svn path=/head/; revision=378221
* - install posttls-finger and posttls-finger.manOlli Hauer2014-11-302-1/+7
| | | | | | | | | | | posttls-finger is handy for many tls related checks PR: 195293 Submitted by: Darren Pilgrim Approved by: sahil (implicit) Notes: svn path=/head/; revision=373695
* Finally retire USE_PGSQLChris Rees2014-11-221-1/+1
| | | | Notes: svn path=/head/; revision=373100
* - fix wrong /var/spool/postfix permissionsOlli Hauer2014-11-102-2/+2
| | | | | | | | | (broken by commit 372368 ,372370) - bump PORTREVISION Notes: svn path=/head/; revision=372388
* - sort OPTIONS_DEFINEOlli Hauer2014-11-092-19/+24
| | | | | | | | | | | | | - fix build and install for non root users, (sgid and group for sbin/postdrop and sbin/postqueue was lost if build as non root and installed with sudo) - install /var/spool/postfix directories with correct owner/mode - use $WRKDIR instead of /tmp Approved by: sahil (implicit) Notes: svn path=/head/; revision=372370
* - update to 2.11.3Olli Hauer2014-11-024-216/+27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - add CPE support - use PORTDOCS macro - remove check for OSVERSION >= 800037 - fix OPENLDAP_VER usage - set PORTSCOUD - always call set-permissions in post-install to set correct spool/postfix/* permissions this is required with pkg to support non interrupted upgrade Changes: ======== 20140619 Bugfix (introduced: 2001): qmqpd null pointer bug when it logs a lost connection while not in a mail transaction. Reported by Michal Adamek. File: qmqpd/qmqpd.c. 20140920 Bugfix (introduced: 20080212): incorrect client name in reject messages from check_reverse_client_hostname_access and check_reverse_client_hostname_{mx,ns}_access. They replied with the verified client name, instead of the name that was rejected. Problem reported by Reindl Harald. File: smtpd/smtpd_check.c. 20141012 Bugfix (introduced: Postfix 2.3): the PREPEND access/policy action added headers ABOVE Postfix's own Received: header, exposing Postfix's own Received: header to Milters (protocol violation) and hiding the PREPENDed header from Milters. The latter caused problems for DMARC implementations with SPF policy plus DKIM Milter. PREPENDed headers are now added BELOW Postfix's own Received: header and remain visible to Milters. File: smtpd/smtpd.c. 20141018 Bugfix (introduced: Postfix 2.3): when a Milter inserted a header ABOVE Postfix's own Received: header, Postfix would expose its own Received: header to Milters (violating protocol) and hide the Milter-inserted header from Milters (wtf). Files: cleanup/cleanup.h, cleanup/cleanup_message.c, cleanup/cleanup_state.c, milter/milter.[hc], milter/milter8.c. Cleanup: revert the workaround that places headers inserted with PREPEND actions or policy requests BELOW Postfix's own Received: message header. File: smtpd/smtpd.c. PR: 194396 Submitted by: Yasuhiro KIMURA Approved by: sahil (explicit per PM) Notes: svn path=/head/; revision=372087
* Berkeley DB cleanup, remove versions 4.0 ... 4.7.Matthias Andree2014-08-211-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | - Mk/bsd.database.mk rewrite, new default to db5. - db6 is eligible by default only if installed on the system. - Bump PORTREVISION of all ports that directly depend on BerkeleyDB or where USE_BDB is found in the port's directory - Patch a few ports such that they will pick up or work with newer versions. - Add UPDATING entry - Drive-by format fix for pks - Drop BerkeleyDB option from mail/popular for now, requires more work. - Exp-run logs linked from the PR below. - Ports that do not build (IGNORE, BROKEN, etc.) have pro-forma changes for new Berkeley DB, but are untested. NOTE: please read UPDATING and the Wiki page before proceeding! Announcement: http://lists.freebsd.org/pipermail/freebsd-ports-announce/2014-August/000090.html Wiki reference: https://wiki.freebsd.org/Ports/BerkeleyDBCleanup PR: 192690 Approved by: portmgr (implicit, PORTREVISION bump on unstaged ports) Notes: svn path=/head/; revision=365599
* - Move RESETPREFIX to default PLIST_SUBBryan Drewery2014-08-181-1/+1
| | | | | | | With hat: portmgr Notes: svn path=/head/; revision=365325
* mail/libspf2:Tijl Coosemans2014-08-171-1/+1
| | | | | | | | | | | | - Convert to USES=libtool and bump dependent ports - Add INSTALL_TARGET=install-strip (Also some white space fixes in dependent ports) Approved by: portmgr (implicit, bump unstaged port) Notes: svn path=/head/; revision=365196
* Rename all patches that contain '::' as a path separator, and useAdam Weinberger2014-07-291-0/+0
| | | | | | | '__' instead. Notes: svn path=/head/; revision=363362
* net/openldap24-*:Tijl Coosemans2014-07-241-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - Convert to USES=libtool and bump dependent ports - Avoid USE_AUTOTOOLS - Don't use PTHREAD_LIBS - Use MAKE_CMD databases/glom: - Drop :keepla - Add INSTALL_TARGET=install-strip databases/libgda4* databases/libgda5*: - Convert to USES=libtool and bump dependent ports - USES=tar:xz - Use INSTALL_TARGET=install-strip - Use @sample databases/libgdamm: - Drop :keepla - USES=tar:bzip2 - Use INSTALL_TARGET=install-strip databases/libgdamm5: - Add INSTALL_TARGET=install-strip - Drop --enable-static (inherited from old repocopy) devel/anjuta x11-toolkits/py-gnome-extras: - Drop :keepla dns/powerdns dns/powerdns-devel: - Convert to USES=libtool - Add INSTALL_TARGET=install-strip - Disable static modules - Stop creating library symlinks with .0 suffix, not needed for dynamically opened modules mail/dovecot2: - Add USES=libtool mail/dovecot2-pigeonhole: - Drop CONFIGURE_TARGET (incorrect for Dragonfly) - Add USES=libtool and INSTALL_TARGET=install-strip math/gnumeric: - USES=libtool tar:xz Approved by: portmgr (implicit, bump unstaged ports) Notes: svn path=/head/; revision=362835
* Bump PORTREVISION on all ports with USE_SQLITE=yes or USE_SQLITE=3 thatTijl Coosemans2014-07-041-0/+1
| | | | | | | | | | have not been bumped yet after the latest libsqlite3.so library version change. Approved by: portmgr (implicit) Notes: svn path=/head/; revision=360588
* - Update to 2.11.1Sahil Tandon2014-05-083-99/+182
| | | | | | | | | | | - Refactor to support staging [1] - Support "developer mode" [2] Submitted by: [1]: ohauer [2]: mandree Notes: svn path=/head/; revision=353235
generated by cgit v1.2.3 (git 2.25.1) at 2025-05-01 01:39:51 +0000