1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
|
$Cambridge: exim/doc/doc-txt/NewStuff,v 1.154 2007/06/27 11:01:51 ph10 Exp $
New Features in Exim
--------------------
This file contains descriptions of new features that have been added to Exim.
Before a formal release, there may be quite a lot of detail so that people can
test from the snapshots or the CVS before the documentation is updated. Once
the documentation is updated, this file is reduced to a short list.
Version 4.68
------------
1. The body_linecount and body_zerocount C variables are now exported in the
local_scan API.
2. When a dnslists lookup succeeds, the key that was looked up is now placed
in $dnslist_matched. When the key is an IP address, it is not reversed in
this variable (though it is, of course, in the actual lookup). In simple
cases, for example:
deny dnslists = spamhaus.example
the key is also available in another variable (in this case,
$sender_host_address). In more complicated cases, however, this is not
true. For example, using a data lookup might generate a dnslists lookup
like this:
deny dnslists = spamhaus.example/<|192.168.1.2|192.168.6.7|...
If this condition succeeds, the value in $dnslist_matched might be
192.168.6.7 (for example).
3. Authenticators now have a client_condition option. When Exim is running as
a client, it skips an authenticator whose client_condition expansion yields
"0", "no", or "false". This can be used, for example, to skip plain text
authenticators when the connection is not encrypted by a setting such as:
client_condition = ${if !eq{$tls_cipher}{}}
Note that the 4.67 documentation states that $tls_cipher contains the
cipher used for incoming messages. In fact, during SMTP delivery, it
contains the cipher used for the delivery. The same is true for
$tls_peerdn.
4. There is now a -Mvc <message-id> option, which outputs a copy of the
message to the standard output, in RFC 2822 format. The option can be used
only by an admin user.
5. There is now a /noupdate option for the ratelimit ACL condition. It
computes the rate and checks the limit as normal, but it does not update
the saved data. This means that, in relevant ACLs, it is possible to lookup
the existence of a specified (or auto-generated) ratelimit key without
incrementing the ratelimit counter for that key.
In order for this to be useful, another ACL entry must set the rate
for the same key somewhere (otherwise it will always be zero).
Example:
acl_check_connect:
# Read the rate; if it doesn't exist or is below the maximum
# we update it below
deny ratelimit = 100 / 5m / strict / noupdate
log_message = RATE: $sender_rate / $sender_rate_period \
(max $sender_rate_limit)
[... some other logic and tests...]
warn ratelimit = 100 / 5m / strict / per_cmd
log_message = RATE UPDATE: $sender_rate / $sender_rate_period \
(max $sender_rate_limit)
condition = ${if le{$sender_rate}{$sender_rate_limit}}
accept
6. The variable $max_received_linelength contains the number of bytes in the
longest line that was received as part of the message, not counting the
line termination character(s).
7. Host lists can now include +ignore_defer and +include_defer, analagous to
+ignore_unknown and +include_unknown. These options should be used with
care, probably only in non-critical host lists such as whitelists.
8. There's a new option called queue_only_load_latch, which defaults true.
If set false when queue_only_load is greater than zero, Exim re-evaluates
the load for each incoming message in an SMTP session. Otherwise, once one
message is queued, the remainder are also.
Version 4.67
------------
1. There is a new log selector called smtp_no_mail, which is not included in
the default setting. When it is set, a line is written to the main log
whenever an accepted SMTP connection terminates without having issued a
MAIL command.
2. When an item in a dnslists list is followed by = and & and a list of IP
addresses, the behaviour was not clear when the lookup returned more than
one IP address. This has been solved by the addition of == and =& for "all"
rather than the default "any" matching.
3. Up till now, the only control over which cipher suites GnuTLS uses has been
for the cipher algorithms. New options have been added to allow some of the
other parameters to be varied.
4. There is a new compile-time option called ENABLE_DISABLE_FSYNC. When it is
set, Exim compiles a runtime option called disable_fsync.
5. There is a new variable called $smtp_count_at_connection_start.
6. There's a new control called no_pipelining.
7. There are two new variables called $sending_ip_address and $sending_port.
These are set whenever an SMTP connection to another host has been set up.
8. The expansion of the helo_data option in the smtp transport now happens
after the connection to the server has been made.
9. There is a new expansion operator ${rfc2047d: that decodes strings that
are encoded as per RFC 2047.
10. There is a new log selector called "pid", which causes the current process
id to be added to every log line, in square brackets, immediately after the
time and date.
11. Exim has been modified so that it flushes SMTP output before implementing
a delay in an ACL. It also flushes the output before performing a callout,
as this can take a substantial time. These behaviours can be disabled by
obeying control = no_delay_flush or control = no_callout_flush,
respectively, at some earlier stage of the connection.
12. There are two new expansion conditions that iterate over a list. They are
called forany and forall.
13. There's a new global option called dsn_from that can be used to vary the
contents of From: lines in bounces and other automatically generated
messages ("delivery status notifications" - hence the name of the option).
14. The smtp transport has a new option called hosts_avoid_pipelining.
15. By default, exigrep does case-insensitive matches. There is now a -I option
that makes it case-sensitive.
16. A number of new features ("addresses", "map", "filter", and "reduce") have
been added to string expansions to make it easier to process lists of
items, typically addresses.
17. There's a new ACL modifier called "continue". It does nothing of itself,
and processing of the ACL always continues with the next condition or
modifier. It is provided so that the side effects of expanding its argument
can be used.
18. It is now possible to use newline and other control characters (those with
values less than 32, plus DEL) as separators in lists.
19. The exigrep utility now has a -v option, which inverts the matching
condition.
20. The host_find_failed option in the manualroute router can now be set to
"ignore".
Version 4.66
------------
No new features were added to 4.66.
Version 4.65
------------
No new features were added to 4.65.
Version 4.64
------------
1. ACL variables can now be given arbitrary names, as long as they start with
"acl_c" or "acl_m" (for connection variables and message variables), are at
least six characters long, with the sixth character being either a digit or
an underscore.
2. There is a new ACL modifier called log_reject_target. It makes it possible
to specify which logs are used for messages about ACL rejections.
3. There is a new authenticator called "dovecot". This is an interface to the
authentication facility of the Dovecot POP/IMAP server, which can support a
number of authentication methods.
4. The variable $message_headers_raw provides a concatenation of all the
messages's headers without any decoding. This is in contrast to
$message_headers, which does RFC2047 decoding on the header contents.
5. In a DNS black list, if two domain names, comma-separated, are given, the
second is used first to do an initial check, making use of any IP value
restrictions that are set. If there is a match, the first domain is used,
without any IP value restrictions, to get the TXT record.
6. All authenticators now have a server_condition option.
7. There is a new command-line option called -Mset. It is useful only in
conjunction with -be (that is, when testing string expansions). It must be
followed by a message id; Exim loads the given message from its spool
before doing the expansions.
8. Another similar new command-line option is called -bem. It operates like
-be except that it must be followed by the name of a file that contains a
message.
9. When an address is delayed because of a 4xx response to a RCPT command, it
is now the combination of sender and recipient that is delayed in
subsequent queue runs until its retry time is reached.
10. Unary negation and the bitwise logical operators and, or, xor, not, and
shift, have been added to the eval: and eval10: expansion items.
11. The variables $interface_address and $interface_port have been renamed
as $received_ip_address and $received_port, to make it clear that they
relate to message reception rather than delivery. (The old names remain
available for compatibility.)
12. The "message" modifier can now be used on "accept" and "discard" acl verbs
to vary the message that is sent when an SMTP command is accepted.
Version 4.63
------------
1. There is a new Boolean option called filter_prepend_home for the redirect
router.
2. There is a new acl, set by acl_not_smtp_start, which is run right at the
start of receiving a non-SMTP message, before any of the message has been
read.
3. When an SMTP error message is specified in a "message" modifier in an ACL,
or in a :fail: or :defer: message in a redirect router, Exim now checks the
start of the message for an SMTP error code.
4. There is a new parameter for LDAP lookups called "referrals", which takes
one of the settings "follow" (the default) or "nofollow".
5. Version 20070721.2 of exipick now included, offering these new options:
--reverse
After all other sorting options have bee processed, reverse order
before displaying messages (-R is synonym).
--random
Randomize order of matching messages before displaying.
--size
Instead of displaying the matching messages, display the sum
of their sizes.
--sort <variable>[,<variable>...]
Before displaying matching messages, sort the messages according to
each messages value for each variable.
--not
Negate the value for every test (returns inverse output from the
same criteria without --not).
Version 4.62
------------
1. The ${readsocket expansion item now supports Internet domain sockets as well
as Unix domain sockets. If the first argument begins "inet:", it must be of
the form "inet:host:port". The port is mandatory; it may be a number or the
name of a TCP port in /etc/services. The host may be a name, or it may be an
IP address. An ip address may optionally be enclosed in square brackets.
This is best for IPv6 addresses. For example:
${readsocket{inet:[::1]:1234}{<request data>}...
Only a single host name may be given, but if looking it up yield more than
one IP address, they are each tried in turn until a connection is made. Once
a connection has been made, the behaviour is as for ${readsocket with a Unix
domain socket.
2. If a redirect router sets up file or pipe deliveries for more than one
incoming address, and the relevant transport has batch_max set greater than
one, a batch delivery now occurs.
3. The appendfile transport has a new option called maildirfolder_create_regex.
Its value is a regular expression. For a maildir delivery, this is matched
against the maildir directory; if it matches, Exim ensures that a
maildirfolder file is created alongside the new, cur, and tmp directories.
Version 4.61
------------
The documentation is up-to-date for the 4.61 release. Major new features since
the 4.60 release are:
. An option called disable_ipv6, to disable the use of IPv6 completely.
. An increase in the number of ACL variables to 20 of each type.
. A change to use $auth1, $auth2, and $auth3 in authenticators instead of $1,
$2, $3, (though those are still set) because the numeric variables get used
for other things in complicated expansions.
. The default for rfc1413_query_timeout has been changed from 30s to 5s.
. It is possible to use setclassresources() on some BSD OS to control the
resources used in pipe deliveries.
. A new ACL modifier called add_header, which can be used with any verb.
. More errors are detectable in retry rules.
There are a number of other additions too.
Version 4.60
------------
The documentation is up-to-date for the 4.60 release. Major new features since
the 4.50 release are:
. Support for SQLite.
. Support for IGNOREQUOTA in LMTP.
. Extensions to the "submission mode" features.
. Support for Client SMTP Authorization (CSA).
. Support for ratelimiting hosts and users.
. New expansion items to help with the BATV "prvs" scheme.
. A "match_ip" condition, that matches an IP address against a list.
There are many more minor changes.
****
|