diff options
Diffstat (limited to 'IPv6-ChangeLog')
| -rw-r--r-- | IPv6-ChangeLog | 483 |
1 files changed, 483 insertions, 0 deletions
diff --git a/IPv6-ChangeLog b/IPv6-ChangeLog new file mode 100644 index 0000000..ed55e64 --- /dev/null +++ b/IPv6-ChangeLog @@ -0,0 +1,483 @@ +ChangeLog for Dean Strik's IPv6 patch for Postfix. The patch is based on +PLD's patch, which in turn seems to be based on KAME's. For more information: + + http://www.ipnet6.org/postfix/ + +--------------------------------------------------------------------- + +Version 1.25 Postfix release 2.1.3 + Postfix release 2.0.20 + Postfix snapshot 2.2-20040616 + + Bugfix: Misplaced myfree() caused a small memory leak. Reported + by Christian von Roques. + File: util/match_ops.c + + Removed the colon (:) from the characters XFORWARD replaces by + a question mark (IPv6 addresses looked like 2001?610?1108?5010??1 + in logging). Reported by Philipp Morger. + File: smtpd/smtpd.c + +Version 1.24 Postfix release 2.1.1 + Postfix release 2.0.20 + Postfix snapshot 2.0.19-20040312 + Postfix snapshot 2.2-20040504 + + Bugfix: Prefixlen non-null host portion validation (in CIDR maps + for example) yielded incorrect results sometimes because signed + arithmetic was used instead of unsigned. + File: util/match_ops.c + + Patch correction: The TLS+IPv6 patch for Postfix 2.1.0 missed + the master.cf update (used for new installations). Added it + back. + +Version 1.23 Postfix release 2.1.0 + Postfix release 2.0.20 + Postfix snapshot 2.0.19-20040312 + + Patch fixes: Several code fixes to make the patch compile + and work correctly when compiled without IPv6 support. + + Bugfix (Solaris only?): address family length was not updated + which could cause client hostname validation errors. + File: smtpd/smtpd_peer.c + + Portability: added support for Darwin 7.3+. This may need + some further testing. + + Cleanup: Restructure and redocument interface address + retrieval functions. (This reduced the number of preprocessor + statements from 99 to 93 ;) + File: util/inet_addr_local.c + + Cleanup: make several explicit casts to have compilers shut + their pie holes about uninteresting things. + +Version 1.22 Postfix release 2.0.19 + Postfix snapshot 2.0.19-20040312 + + Feature: Support "inet_interfaces = IPv4:all" and + "inet_interfaces = IPv6:all", to restrict postfix to use + either IPv4-only or IPv6-only. A more complete implementation + will be part of a future patch. (Slightly modified) patch by + Michal Ludvig, SuSE. + Files: util/interfaces_to_af.[ch], util/inet_addr_local.c, + global/own_inet_addr.c, global/wildcard_inet_addr.[ch], + master/master_ent.ch + + Bugfix: In Postfix snapshots, a #define was misplaced with + the effect that IPv6 subnets were not included in auto- + generated $mynetworks (i.e., mynetworks not defined in main.cf, + when also mynetworks_style=subnet) on Linux 2.x systems. + File: utils/sys_defs.h + +Version 1.21a Postfix snapshots 2.0.18-2004{0122,0205,0209} + 2.0.19-20040312 + + TLS/snapshot version: Update TLS patch to 0.8.18-20040122. + Performed as a total repatch. 0.8.18 is cleaner with tls_* + variables if TLS is not actually compiled in. + +Version 1.21 Postfix releases 2.0.18 - 2.0.19 + Postfix snapshot 2.0.16-20031231 + + Bugfix: The SMTP client could fail to setup a connection, + erroring with a bogus "getaddrinfo(...): hostname nor servname + provided" warning, because the wrong address was selected. + File: smtp/smtp_connect.c + + Safety: in dynamically growing data structures, update the + length info after (instead of before) updating the data size. + File: util/inet_addr_list.c + +Version 1.20 Postfix release 2.0.16 + Postfix snapshot 2.0.16-20031207 + + Bugfix: The SMTP client would abort when binding to specific + IPv6 addresses. + File: smtp/smtp_connect.c + + Synchronisation/bugfix: LMTP source address binding is identical + to the SMTP source binding setup, avoiding the need for + lmtp_bind_address(6) if inet_interfaces is set to a single + host for an address family. + File: lmtp/lmtp_connect.c + +Version 1.19 Postfix release 2.0.16 + Postfix snapshot 2.0.16-20031207 + + Bugfix: Synchronisation of TLS patches in snapshots of 1.18[ab] + was not complete, causing a crash of smtpd if used with the new + proxy agent. + File: smtpd/smtpd.c + + Bugfix: SMTP source address binding based on a single hostname + in inet_interfaces did not work since the code counted IPv4 and + IPv6 addresses instead of only the used address family. Fixed, + thereby no longer requiring exact specification of + smtp_bind_address(6) in this case. + File: smtp/smtp_connect.c + + Bugfix: The QMQP sink server did not compile correctly. This + program, part of smtpstone tools, is not compiled or installed + by default. + File: smtpstone/qmqp-sink.c + + Bugfix: NI_WITHSCOPEID was not correctly defined everywhere, + which could result in EAI_BADFLAGS. Changed location of + definition to correct it. + Files: util/sys_defs.h, util/inet_addr_list.h + +Version 1.18b Postfix snapshot 2.0.16-20030921 + + IPv6 support: Added IPv6-enabled code to the new snapshot + check_*_{ns,mx}_access restrictions. + File: smtpd/smtpd_check.c + +Version 1.18a Postfix release 2.0.16 + + Update (TLS patches): Updated Lutz Jaenicke's TLS patch to + version 0.8.16. See pfixtls/ChangeLog for details. + Diff contributed by Tuomo Soini. + + The TLS+IPv6 patch now contains the original TLS patch + documentation from Lutz Jaenicke. + +Version 1.18 Postfix releases 2.0.14 - 2.0.15 + Postfix snapshot 2.0.14-20030812 + + Bugfix: Perform actual hostname verification in the SMTP + and QMTP servers. This was never supported in the IPv6 + patch. Reported by Wolfgang S. Rupprecht. + Files: smtpd/smtpd_peer.c, qmqpd/qmqpd_peer.c + + IPv6 address ranges using address/prefixlength (e.g. in + mynetworks and access maps) should be written as + [ipv6:addr:ess]/plen (e.g. [fec0:10:20::]/48). The old + supported syntax, [ipv6:addr:ess/plen] is deprecated and + support will be removed in a later version. + Thanks to Dr. Peter Bieringer and Pekka Savola for discussion. + Files: util/match_ops.c, global/mynetworks.c + + Explicitly prefer IPv6 over IPv4 addresses when delivering + to a host when MX lookups are disabled when SMTP address + randomization is on (default). + File: smtp/smtp_addr.c + + Compliance: write IPv6 address literals in mail headers + as [IPv6:addr] instead of [addr] as per RFC 2821:4.1.3 + tagging requirement, for example [IPv6:fec0:10:20::1]. + Pointed out by Dr. Peter Bieringer. + Files: smtpd/smtpd{,_peer,_state}.c, smtpd/smtpd.h + +Version 1.17 Postfix release 2.0.13, 2.0.14 + Postfix snapshot 2.0.13-20030706, 2.0.14-20030812 + + Bugfix: Two memory allocation/deallocation bugs were + introduced in patch 1.16. The impact of these bugs could + be 'arbitrary' memory corruption. + File: util/match_ops.c + +Version 1.16 Postfix release 2.0.13 + Postfix snapshot 2.0.13-20030706 + + Cleanup: rewrote match_ops.c. This rewrite is partly based on + patch by Takahiro Igarashi. The rewrite enables some better + handling of scoped addresses, and drops all GPL code from the + patch, easying license considerations. Also, allowed for + use of this code by the CIDR maps. + Files: util/match_ops.[ch] + + Bugfix: correctly relay for scoped unicast addresses when + applicable. Until now, while Postfix was able to recognize + scoped addresses, it was not able to see e.g. fe80::10%fxp0 + as local in mynetworks validation. KAME-only code. + (I've never heard of people using scoped addresses (think + link-local addresses) for mail relaying though...) + Files: util/inet_addr_list.[ch] + + Feature (snapshot only): rewrote CIDR maps code to support + IPv6 addresses, using new match_ops code. Allow the use + of [::/0] since it allows one to easily disable further + checks for IPv6 addresses. + File: util/dict_cidr.c + + Consistency: require IPv6 addresses in inet_interfaces to + be enclosed in square brackets. + File: util/inet_addr_host.c + + Bugfix: (Linux2-only) A #define was misspelled. This could + lead to Postfix being unable to read the system's local IPv6 + addresses (e.g. when using inet_interfaces). + Spotted by Jochen Friedrich. + File: util/sys_defs.h + + Cleanup: require non-null host portion in CIDR / + prefixlength notations for IPv6 (was IPv4-only). + +Version 1.15a Postfix release 2.0.13 + + Update (TLS patches): Updated Lutz Jaenicke's TLS patch + to version 0.8.15. This version introduces new options + for managing SASL mechanisms. More information at: + http://www.aet.tu-cottbus.de/personen/jaenicke/pfixtls/ + Diff contributed by Tuomo Soini. + +Version 1.15 Postfix release 2.0.12, 2.0.13 + Postfix snapshot 2.0.12-20030621 + + Bugfix (TLS-snapshots only): a change in Postfix snapshot + 2.0.11-20030609 broke initialisation of TLS in smtpd, + causing TLS to both be unadvertised and unaccepted. + This was fixed again by reordering initialisation. + File: smtpd/smtpd.c + + Update (TLS patches): Updated Lutz Jaenicke's TLS patch + to version 0.8.14. This version introduces a few fixes and + uses USE_SSL instead of HAS_SSL. More information at: + http://www.aet.tu-cottbus.de/personen/jaenicke/pfixtls/ + Diff contributed by Tuomo Soini. + + Bugfix (Postfix releases only - this was already added to + the snapshots in patch 1.14). KAME derived systems only. + Correctly decode scoped addresses, including network + interface specifiers. + File: util/inet_addr_local.c + +Version 1.14 Postfix releases 2.0.9, 2.0.10, 2.0.11, 2.0.12 + Postfix snapshots 2.0.9-20030424, 2.0.10-20030521, + 2.0.11-20030609, 2.0.12-20030611 + + Patch change: made the patch available as an IPv6-only + patch (i.e., without the TLS code). This on popular + request by users and packagers. + A TLS+IPv6 version is still available of course. + + Bugfix: correctly decode scoped addresses from now on + (KAME derived systems only). I think the original code + was written by Itojun, so I'm rather puzzled that it + didn't work... + File: util/inet_addr_local.c + + Bugfix/portability: Recent KAME snapshots return both + TCP and SCTP address information on getaddrinfo() if + no protocol was specified. This causes the socket counts + to be wrong, confusing child processes. + Merged patch by JINMEI Tatuya of KAME to fix this. + Files: master/master.h, master/master_{ent,conf}.[ch], + util/inet_listen.c + + Documentation: added an IPV6_README file to the patch. + This file contains the primary documentation. Also, + added a sample-ipv6.cf to describe the (currently few) + IPv6 related main.cf parameters. + + Bugfix: the netmask structures for the *unsupported* + platforms (boldly assume /64) were added to the wrong + list (addresses instead of masks). This bug did not affect + any supported platform though. + File: util/inet_addr_local.c + + Portability: added support for HP/Compaq Tru64Unix V5.1 + and later. (compiled with CompaqCC only). + Thanks to Sten Spans for providing root access to an + IPv6-connected Tru64 testing machine. + +Version 1.13 Postfix releases 2.0.4 - 2.0.9 + Postfix snapshots 2.0.3-20030126 - 2.0.7-20030319 + + Bugfix: Due to a missing storage pointer, DNS lookup + results in the permit_mx_backups code were not processed, + and smtpd would likely crash. + Thanks to Wouter de Jong for reporting the crashes. + File: smtpd/smtpd_check.c + + Incompatible change: The addresses given to the parameters + smtp_bind_address6 and lmtp_bind_address6 now need to be + enclosed in square brackets for consistency. + Files: [ls]mtp/[ls]mtp_connect.c + +Version 1.12 Postfix releases 2.0.2, 2.0.3 + Postfix snapshots 2.0.2-20030115, 2.0.3-20030126 + + Bugfix/workaround (Solaris): A simplified comparison + function for Solaris' qsort() function, would result + in corruption of network addresses in the SMTP client. + Fixed. Reported with possible fix by Edvard Tuinder. + File: smtp/smtp_addr.c + +Version 1.11 Postfix releases 2.0.0.x, 2.0.1, 2.0.2 + Postfix snapshots 2.0.0-20030105, 2.0.1-20030112 + 2.0.2-20030115 + + Bugfix (Solaris): Properly initialize lifconf structure + when requesting host interface addresses. If you get + warnings about SIOCGLIFCONF with earlier versions, + please upgrade. + File: util/inet_addr_local.c + + Patch fix: fixed compilation errors in case the patch is + applied but built without IPv6 support (i.e., on unsupported + platforms). + +Version 1.10 Postfix snapshots 1.1.12-200212{19,21} + Postfix releases 2.0.0, 2.0.0.{1,2} + Postfix snapshots 2.0.0-20021223 - 2.0.0-20030101 + + 'Bugfix': don't show spurious warnings on Linux systems + about missing /proc/net/if_inet6 unless verbose mode + is enabled. + File: util/inet_addr_local.c + + Bugfix: If unable to create a socket for a specific adress + in the SMTP client (e.g., when trying to create an IPv6 + connection while the local host has no configured IPv6 + addresses), then stop the attempt. + File: smtp/smtp_connect.c + + Small bugfix: never query DNS for <localpart@[domain.tld]>. + This syntax now correctly generates an error immediately. + File: global/resolve_local.c + + Updated TLS patch to 0.8.12-1.1.12-20021219-0.9.6h, fixing + a bug with "sendmail -bs". + +Version 1.9 Postfix version 1.1.11-20021115 + Postfix version 1.1.12-2002{1124,1209-1213} + + Bugfix: with getifaddrs() code (*BSD, linux-USAGI), IPv4 + netmasks were set to /32 effectively. Work around broken + netmask data structures (*BSD only perhaps). + + Bugfix: same data corruption in another place created + entirely wrong IPv4 netmasks. Work around broken + SIOCGIFNETMASK structure. + + New code was added for correct IPv6 netmasks. The original + code did not contain IPv6 netmask support at all! + For Solaris, use SIOCGLIF*; Linux: /proc/net/if_inet6. + Getifaddrs() support is used otherwise. This should cover + all supported systems. Other systems also work, prefix + length is always set to /64 then. + + Since there are no classes (context: Class A, class B etc + networks) with IPv6, default to IPv6 subnet style if the + mynetworks style is 'class'. I recommend against this style + anyway. + + Added support to display IPv6 nets mynetworks output. + +Version 1.8 Postfix version 1.1.11-200211{01,15} + + An earlier author of the patch made a typo in the GAI_STRERROR() + macro, resulting in bogus error messages when checking for + PTR records. Fixed. + + IPv4-mapped addresses in the smtpd are converted to true IPv4 + addresses just after the connection has been made. This means + that all IPv4-mapped addresses are now logged as true IPv4 + addresses. Hence beside RBL checks, also access maps now treat + IPv4-mapped addresses as native IPv4. Note that ::ffff:... + entries in your access tables will no longer work. + + You can now specify IPv6 'parent' networks in your access maps, + e.g. to reject all mail from 3ffe:200:... nodes, add the line + 3ffe:200 REJECT + Use of trailing colons is discouraged because postmap will + warn about it possibly being an alias... + NOTE: I'll soon obsolete this again in favor of the more + common address/len notation. This was just so trivial to add + that it didn't hurt and I needed it :) + + For easy reference, the version of the TLS/IPv6 patch can be + dynamically queried using the tls_ipv6_version variable. + This gives the short version (like, "1.8"). + + The service bind address for 'inet' sockets in master.cf (e.g., + smtpd), must be enclosed in square brackets '[..]' for IPv6 + addresses. The old style (without brackets) still works but is + unsupported and may be removed in the future. Example + [::1]:smtp inet n - n - - smtpd + +Version 1.7 Postfix version 1.1.11-20021029 - 1.1.11-20021101 + + Postfix' SMTP client performs randomization of MX addresses + when sending mail. This however could result in A records + being used before AAAA records. This has been corrected. + + Note that from Postfix version 1.1.11-20021029 on, there is + a proxy_interfaces parameter. This has of course not been + ported to IPv6 addresses... + +Version 1.6 Postfix version 1.1.11-20020928 + + Added IPv6 support for backup_mx_networks feature; also the + behaviour when DNS lookups fail when checking whether the + local host is an MX for a domain conforms to the IPv4 case: + defer rather than allow. + +Version 1.5 Postfix version 1.1.11-20020917 + + I introduced two bugs when I rewrote my older LMTP IPv6 patch. + These bugs effectively rendered LMTP useless. Now fixed. + Bugs spotted by Kaj Niemi. + + Now supports Solaris 8 and 9. Due to lack of testing equipment, + this has been only tested in production on Solaris 9, both + with gcc and the Sun Workshop Compiler. + +Version 1.4 Postfix version 1.1.11-20020822 - 1.1.11-20020917 + + OpenBSD (>=200003) and FreeBSD release 4 and up now use + getifaddrs(). This makes for cleaner code. The old code + seems to be bug-ridden anyway. + + Got rid of some compiler warnings. Should be cleaner on + Alpha as well now. Thanks to Sten Spans for providing me + access to an Alpha running FreeBSD4. + + Fixed an old bug in smtpd memory alloation if you compiled + without IPv6 support (the wrong buffer size was used. This + was harmless for IPv6-enabled compiles since the sizes were + equal then). + + Added ChangeLog to the patch (as IPv6-ChangeLog) (this + was absent in 1.3 contrary to docs). + +Version 1.3 Postfix version 1.1.11-20020613 - 1.1.11-20020718 + + FYI: In postfix version 1.1.11-20020718, DNS lookups for + AAAA can be done natively. The code matches the code in + the patch (though the #ifdef changed from INET6 to T_AAAA). + This change causes the patch for 1.1.11-20020718 to be a + bit smaller. + +Version 1.2 Postfix version 1.1.11-20020613 + + Added IPv6 support for the LMTP client. + + Added lmtp_bind_address and lmtp_bind_address6 parameters, + similar to those for smtp. + + Added IPv6 support for the QMQP server. + +Version 1.1 Postfix version 1.1.11-20020602 - 1.1.11-20020613 + + Added parameter smtp_bind_address6. By using this parameter, + it is possible to bind to an IPv6 address, independently of + IPv4 address binding. + + Lutz fixed a bug in his TLS patch regarding SASL. Incorporated. + +Version 1.0.x Postfix version 1.1.8-20020505 - 1.1.11-20020602 + + Patch derived from PLD's IPv6 patch for Postfix, revision 1.10 + which applied to early Postfix snapshots 1.1.x. Updated this + patch to apply to 1.1.8-20020505. + + Added compile-time checks for SS_LEN. Some Linux installations, + and maybe other systems, do define SA_LEN, but not SS_LEN. + + Several updates of postfix snapshots. + |