Sqlite: new main option sqlite_dbfile
[exim.git] / doc / doc-txt / NewStuff
CommitLineData
495ae4b0
PH
1New Features in Exim
2--------------------
3
38a0a95f
PH
4This file contains descriptions of new features that have been added to Exim.
5Before a formal release, there may be quite a lot of detail so that people can
33f316f2 6test from the snapshots or the Git before the documentation is updated. Once
38a0a95f
PH
7the documentation is updated, this file is reduced to a short list.
8
1d717e1c
JH
9Version 4.94
10------------
7ef88aa0
JH
11
12 1. EXPERIMENTAL_SRS_NATIVE optional build feature. See the experimental.spec
13 file.
14
1d717e1c 15 2. Channel-binding for authenticators is now supported under OpenSSL.
b1a32a3c
JH
16 Previously it was GnuTLS-only.
17
78598e6a
JH
18 3. A msg:defer event.
19
8c2a478b
JH
20 4. Client-side support in the gsasl authenticator. Tested against the
21 plaintext driver for PLAIN; only against itself for SCRAM-SHA-1 and
22 SCRAM-SHA-1-PLUS methods.
14a806d6 23
8c2a478b
JH
24 5. Server-side support in the gsasl authenticator for encrypted passwords, as
25 an alternate for the existing plaintext.
49d47806
JH
26
27 6. Variable $local_part_verified, set by the router check_local_part condition
163144aa
JH
28 with untainted data.
29
8c2a478b
JH
30 7. Named-list definitions can now be prefixed "hide" so that "-bP" commands do
31 not output the content. Previously this could only be done on options.
32
7d2f2d36
JH
33 8. As an exerimental feature, the dovecot authenticatino driver supports inet
34 sockets. Previously it was unix-domain sockets only.
35
9438970c
JH
36 9. The ACL control "queue_only" can also be spelled "queue", and now takes an
37 option "first_pass_route" to do the same as a "-odqs" on the command line.
04403ab0 38
6656a75a
JH
39 9. Items specified for the router and transport headers_remove option can use
40 a trailing asterisk to specify globbing.
41
759502e5
JH
4210. New $queue_size variable.
43
4411. New variables $local_part_{pre,suf}fix_v.
6656a75a 45
298849d8
JH
4612. New main option "sqlite_dbfile", for use in preference to prefixing the
47 lookup string. The older method fails when tainted variables are used
48 in the lookup, as the filename becomes tainted. The new method keeps the
49 filename separate.
50
9438970c 51
5b195d6b 52
40ed89b3
JH
53Version 4.93
54------------
55
b53c265b 56 1. An "external" authenticator, per RFC 4422 Appendix A.
40ed89b3 57
7f69e814 58 2. A JSON lookup type, and JSON variants of the forall/any expansion conditions.
40ed89b3 59
f1be21cf
JH
60 3. Variables $tls_in_cipher_std, $tls_out_cipher_std giving the RFC names
61 for ciphersuites.
62
049782c0
JH
63 4. Log_selectors "msg_id" (on by default) and "msg_id_created".
64
7c498df1
SA
65 5. A case_insensitive option for verify=not_blind.
66
b10c87b3
JH
67 6. EXPERIMENTAL_TLS_RESUME optional build feature. See the experimental.spec
68 file.
69
4202f121
HSHR
70 7. A main option exim_version to override the version Exim
71 reports in verious places ($exim_version, $version_number).
72
12e9bb25
JH
73 8. Expansion operator ${sha2_N:} for N=256, 384, 512.
74
fa7b17bd
JH
75 9. Router variables, $r_... settable from router options and usable in routers
76 and transports.
77
de2e5b3d
JH
7810. The spf lookup now supports IPv6.
79
042e558f
JH
8011. Main options for DKIM verify to filter hash and key types.
81
86ede124 8212. With TLS1.3, support for full-chain OCSP stapling.
e326959e 83
5b2fd993
JH
8413. Dual-certificate stacks on servers now support OCSP stapling, under OpenSSL.
85
8e78571a
JH
8614: An smtp:ehlo transport event, for observability of the remote offered features.
87
2e5d9e71
JH
8815: Support under OpenSSL for writing NSS-style key files for packet-capture
89 decode. The environment variable SSLKEYLOGFILE is used; if an absolute path
90 it must indicate a file under the spool directory; if relative the the spool
91 directory is prepended. Works on the server side only. Support under
92 GnuTLS was already there, being done purely by the library (server side
93 only, and exim must be run as root).
94
fc7bae7f
JH
9516: Command-line option to move messages from one named queue to another.
96
da40b1ec
JH
9717. Variables $tls_in_ver, $tls_out_ver.
98
049782c0 99
d99f54e4
JH
100Version 4.92
101--------------
102
bce15b62
JH
103 1. ${l_header:<name>} and ${l_h:<name>} expansion items, giving a colon-sep
104 list when there are multiple headers having a given name. This matters
105 when individual headers are wrapped onto multiple lines; with previous
106 facilities hard to parse.
107
afdb5e9c
JH
108 2. The ${readsocket } expansion item now takes a "tls" option, doing the
109 obvious thing.
110
ee8b8090
JH
111 3. EXPERIMENTAL_REQUIRETLS and EXPERIMENTAL_PIPE_CONNECT optional build
112 features. See the experimental.spec file.
8ac90765 113
71c15846
JH
114 4. If built with SUPPORT_I18N a "utf8_downconvert" option on the smtp transport.
115
7c576fca
JH
116 5. A "pipelining" log_selector.
117
8442641e 118 6. Builtin macros for supported log_selector and openssl_options values.
12263aa8 119
8fdf20fd
JH
120 7. JSON variants of the ${extract } expansion item.
121
ae8f9024
JH
122 8. A "noutf8" debug option, for disabling the UTF-8 characters in debug output.
123
b536a578
JH
124 9. TCP Fast Open support on MacOS.
125
d4fd1b83 126Version 4.91
47195144
JH
127--------------
128
129 1. Dual-certificate stacks on servers now support OCSP stapling, under GnuTLS
130 version 3.5.6 or later.
131
c0635b6d
JH
132 2. DANE is now supported under GnuTLS version 3.0.0 or later. Both GnuTLS and
133 OpenSSL versions are moved to mainline support from Experimental.
405074ad 134 New SMTP transport option "dane_require_tls_ciphers".
899b8bbc 135
c11d665d
JH
136 3. Feature macros for the compiled-in set of malware scanner interfaces.
137
7952eef9
JH
138 4. SPF support is promoted from Experimental to mainline status. The template
139 src/EDITME makefile does not enable its inclusion.
140
306c6c77 141 5. Logging control for DKIM verification. The existing DKIM log line is
2c47372f
JH
142 controlled by a "dkim_verbose" selector which is _not_ enabled by default.
143 A new tag "DKIM=<domain>" is added to <= lines by default, controlled by
144 a "dkim" log_selector.
145
306c6c77
JH
146 6. Receive duration on <= lines, under a new log_selector "receive_time".
147
66387a73
JH
148 7. Options "ipv4_only" and "ipv4_prefer" on the dnslookup router and on
149 routing rules in the manualroute router.
150
9c29c48f
JH
151 8. Expansion item ${sha3:<string>} / ${sha3_<N>:<string>} now also supported
152 under OpenSSL version 1.1.1 or later.
153
286b9d5f 154 9. DKIM operations can now use the Ed25519 algorithm in addition to RSA, under
cb78c1a8 155 GnuTLS 3.6.0 or OpenSSL 1.1.1 or later.
286b9d5f 156
260958d6
JH
15710. Builtin feature-macros _CRYPTO_HASH_SHA3 and _CRYPTO_SIGN_ED25519, library
158 version dependent.
159
2be324ee
JH
16011. "exim -bP macro <name>" returns caller-usable status.
161
dfbcb5ac
JH
16212. Expansion item ${authresults {<machine>}} for creating an
163 Authentication-Results: header.
164
617d3932 16513. EXPERIMENTAL_ARC. See the experimental.spec file.
ddd16464 166 See also new util/renew-opendmarc-tlds.sh script for use with DMARC/ARC.
617d3932 167
c4b57fdd
JH
16814: A dane:fail event, intended to facilitate reporting.
169
07e347ab
GF
17015. "Lightweight" support for Redis Cluster. Requires redis_servers list to
171 contain all the servers in the cluster, all of which must be reachable from
172 the running exim instance. If the cluster has master/slave replication, the
173 list must contain all the master and slave servers.
174
eb445b04
HSHR
17516. Add an option to the Avast scanner interface: "pass_unscanned". This
176 allows to treat unscanned files as clean. Files may be unscanned for
177 several reasons: decompression bombs, broken archives.
178
47195144 179
856d1e16
PP
180Version 4.90
181------------
182
183 1. PKG_CONFIG_PATH can now be set in Local/Makefile;
184 wildcards will be expanded, values are collapsed.
185
8de9db65
JH
186 2. The ${readsocket } expansion now takes an option to not shutdown the
187 connection after sending the query string. The default remains to do so.
188
875512a3
JH
189 3. An smtp transport option "hosts_noproxy_tls" to control whether multiple
190 deliveries on a single TCP connection can maintain a TLS connection
191 open. By default disabled for all hosts, doing so saves the cost of
192 making new TLS sessions, at the cost of having to proxy the data via
193 another process. Logging is also affected.
194
71b32d41
ACK
195 4. A malware connection type for the FPSCAND protocol.
196
57cc2785
JH
197 5. An option for recipient verify callouts to hold the connection open for
198 further recipients and for delivery.
199
6e411084
PP
200 6. The reproducible build $SOURCE_DATE_EPOCH environment variable is now
201 supported.
202
328c5688
JH
203 7. Optionally, an alternate format for spool data-files which matches the
204 wire format - meaning more efficient reception and transmission (at the
205 cost of difficulty with standard Unix tools). Only used for messages
206 received using the ESMTP CHUNKING option, and when a new main-section
207 option "spool_wireformat" (false by default) is set.
208
f33875c3
PP
209 8. New main configuration option "commandline_checks_require_admin" to
210 restrict who can use various introspection options.
211
d291c767
HSHR
212 9. New option modifier "no_check" for quota and quota_filecount
213 appendfile transport.
214
a09f2942
JH
21510. Variable $smtp_command_history returning a comma-sep list of recent
216 SMTP commands.
217
0f1a8658
JH
21811. Millisecond timetamps in logs, on log_selector "millisec". Also affects
219 log elements QT, DT and D, and timstamps in debug output.
571b2715 220
a2673768
JH
22112. TCP Fast Open logging. As a server, logs when the SMTP banner was sent
222 while still in SYN_RECV state; as a client logs when the connection
4a5cbaff 223 is opened with a TFO cookie.
a2673768 224
9e70917d 22513. DKIM support for multiple signing, by domain and/or key-selector.
7c6ec81b 226 DKIM support for multiple hashes, and for alternate-identity tags.
970424a5 227 Builtin macro with default list of signed headers.
484cc1a9 228 Better syntax for specifying oversigning.
cc55f420
JH
229 The DKIM ACL can override verification status, and status is visible in
230 the data ACL.
d73e45df 231
c4d5e329
HSHR
23214. Exipick understands -C|--config for an alternative Exim
233 configuration file.
234
4a5cbaff
JH
23515. TCP Fast Open used, with data-on-SYN, for client SMTP via SOCKS5 proxy,
236 for ${readsocket } expansions, and for ClamAV.
237
9650d98a
JH
23816. The "-be" expansion test mode now supports macros. Macros are expanded
239 in test lines, and new macros can be defined.
240
ba86e143
JH
24117. Support for server-side dual-certificate-stacks (eg. RSA + ECDSA).
242
856d1e16 243
fd047340
JH
244Version 4.89
245------------
246
33f316f2
HSHR
247 1. Allow relative config file names for ".include"
248
64073d9c
JH
249 2. A main-section config option "debug_store" to control the checks on
250 variable locations during store-reset. Normally false but can be enabled
12e9bb25 251 when a memory corruption issue is suspected on a production system.
64073d9c 252
fd047340 253
8d042305
JH
254Version 4.88
255------------
256
fc16abb4 257 1. The new perl_taintmode option allows to run the embedded perl
2f680c0c
HSHR
258 interpreter in taint mode.
259
fc16abb4
JH
260 2. New log_selector: dnssec, adds a "DS" tag to acceptance and delivery lines.
261
b0d68adc
JH
262 3. Speculative debugging, via a "kill" option to the "control=debug" ACL
263 modifier.
264
6e773413
JH
265 4. New expansion item ${sha3:<string>} / ${sha3_<N>:<string>}.
266 N can be 224, 256 (default), 384, 512.
267 With GnuTLS 3.5.0 or later, only.
268
f59aaaaa 269 5. Facility for named queues: A command-line argument can specify
55e70e76 270 the queue name for a queue operation, and an ACL modifier can set
0cd5fd23
JH
271 the queue to be used for a message. A $queue_name variable gives
272 visibility.
28b3821f 273
03ca21f8
JH
274 6. New expansion operators base32/base32d.
275
44bc8f0c 276 7. The CHUNKING ESMTP extension from RFC 3030. May give some slight
7e3ce68e 277 performance increase and network load decrease. Main config option
15021e11
JH
278 chunking_advertise_hosts, and smtp transport option hosts_try_chunking
279 for control.
7e3ce68e 280
5bde3efa
ACK
281 8. LMDB lookup support, as Experimental. Patch supplied by Andrew Colin Kissa.
282
3367f8c2
JH
283 9. Expansion operator escape8bit, like escape but not touching newline etc..
284
fbbd45ff 28510. Feature macros, generated from compile options. All start with "_HAVE_"
4945f557 286 and go on with some roughly recognisable name. Driver macros, for
383832ef 287 router, transport and authentication drivers; names starting with "_DRIVER_".
4945f557
JH
288 Option macros, for each configuration-file option; all start with "_OPT_".
289 Use the "-bP macros" command-line option to see what is present.
fbbd45ff 290
dcb72db9
JH
29111. Integer values for options can take a "G" multiplier.
292
ff5929e3
JH
29312. defer=pass option for the ACL control cutthrough_delivery, to reflect 4xx
294 returns from the target back to the initiator, rather than spooling the
295 message.
296
317e40ac
PP
29713. New built-in constants available for tls_dhparam and default changed.
298
3369a853
ACK
29914. If built with EXPERIMENTAL_QUEUEFILE, a queuefile transport, for writing
300 out copies of the message spool files for use by 3rd-party scanners.
301
fb05276a
JH
30215. A new option on the smtp transport, hosts_try_fastopen. If the system
303 supports it (on Linux it must be enabled in the kernel by the sysadmin)
304 try to use RFC 7413 "TCP Fast Open". No data is sent on the SYN segment
305 but it permits a peer that also supports the facility to send its SMTP
306 banner immediately after the SYN,ACK segment rather then waiting for
307 another ACK - so saving up to one roundtrip time. Because it requires
308 previous communication with the peer (we save a cookie from it) this
f59aaaaa 309 will only become active on frequently-contacted destinations.
fb05276a 310
446415f5
HSHR
31116. A new syslog_pid option to suppress PID duplication in syslog lines.
312
8d042305 313
0d9b78be
JH
314Version 4.87
315------------
316
f38917cc
JH
317 1. The ACL conditions regex and mime_regex now capture substrings
318 into numeric variables $regex1 to 9, like the "match" expansion condition.
319
055e2cb4
JH
320 2. New $callout_address variable records the address used for a spam=,
321 malware= or verify= callout.
322
fa41615d
JH
323 3. Transports now take a "max_parallel" option, to limit concurrency.
324
fc4a7f70
JH
325 4. Expansion operators ${ipv6norm:<string>} and ${ipv6denorm:<string>}.
326 The latter expands to a 8-element colon-sep set of hex digits including
327 leading zeroes. A trailing ipv4-style dotted-decimal set is converted
328 to hex. Pure ipv4 addresses are converted to IPv4-mapped IPv6.
329 The former operator strips leading zeroes and collapses the longest
330 set of 0-groups to a double-colon.
331
240c288f
JH
332 5. New "-bP config" support, to dump the effective configuration.
333
abe1010c
JH
334 6. New $dkim_key_length variable.
335
9aa35e9c 336 7. New base64d and base64 expansion items (the existing str2b64 being a
59b87190 337 synonym of the latter). Add support in base64 for certificates.
9aa35e9c 338
62b7cd08 339 8. New main configuration option "bounce_return_linesize_limit" to
f59aaaaa 340 avoid oversize bodies in bounces. The default value matches RFC
62b7cd08
JH
341 limits.
342
3615fa9a
HSHR
343 9. New $initial_cwd expansion variable.
344
0d9b78be 345
71224040
JH
346Version 4.86
347------------
348
349 1. Support for using the system standard CA bundle.
350
351 2. New expansion items $config_file, $config_dir, containing the file
352 and directory name of the main configuration file. Also $exim_version.
353
b6fbf22d
JH
354 3. New "malware=" support for Avast.
355
cc00f4af
JH
356 4. New "spam=" variant option for Rspamd.
357
358 5. Assorted options on malware= and spam= scanners.
359
f59aaaaa 360 6. A command-line option to write a comment into the logfile.
cc00f4af 361
7eb6c37c 362 7. If built with EXPERIMENTAL_SOCKS feature enabled, the smtp transport can
3c8b3577
JH
363 be configured to make connections via socks5 proxies.
364
365 8. If built with EXPERIMENTAL_INTERNATIONAL, support is included for
366 the transmission of UTF-8 envelope addresses.
7eb6c37c 367
ed0512a1
JH
368 9. If built with EXPERIMENTAL_INTERNATIONAL, an expansion item for a commonly
369 used encoding of Maildir folder names.
370
b3ef41c9 37110. A logging option for slow DNS lookups.
846430d9 372
089fc87a
JH
37311. New ${env {<variable>}} expansion.
374
b3ef41c9
JH
37512. A non-SMTP authenticator using information from TLS client certificates.
376
10ca4f1c 37713. Main option "tls_eccurve" for selecting an Elliptic Curve for TLS.
65463bc9 378 Patch originally by Wolfgang Breyha.
10ca4f1c 379
09b80b4e
JH
38014. Main option "dns_trust_aa" for trusting your local nameserver at the
381 same level as DNSSEC.
382
533fe9b8
TL
383Version 4.85
384------------
385
386 1. If built with EXPERIMENTAL_DANE feature enabled, Exim will follow the
f59aaaaa 387 DANE SMTP draft to assess a secure chain of trust of the certificate
533fe9b8
TL
388 used to establish the TLS connection based on a TLSA record in the
389 domain of the sender.
390
391 2. The EXPERIMENTAL_TPDA feature has been renamed to EXPERIMENTAL_EVENT
392 and several new events have been created. The reason is because it has
393 been expanded beyond just firing events during the transport phase. Any
394 existing TPDA transport options will have to be rewritten to use a new
395 $event_name expansion variable in a condition. Refer to the
396 experimental-spec.txt for details and examples.
397
398 3. The EXPERIMENTAL_CERTNAMES features is an enhancement to verify that
399 server certs used for TLS match the result of the MX lookup. It does
400 not use the same mechanism as DANE.
401
402
1f0ebb98
TL
403Version 4.84
404------------
405
406
6ece2e77
TL
407Version 4.83
408------------
409
a3c86431
TL
410 1. If built with the EXPERIMENTAL_PROXY feature enabled, Exim can be
411 configured to expect an initial header from a proxy that will make the
412 actual external source IP:host be used in exim instead of the IP of the
413 proxy that is connecting to it.
414
770747fd
MFM
415 2. New verify option header_names_ascii, which will check to make sure
416 there are no non-ASCII characters in header names. Exim itself handles
417 those non-ASCII characters, but downstream apps may not, so Exim can
418 detect and reject if those characters are present.
419
b9c2e32f
AR
420 3. New expansion operator ${utf8clean:string} to replace malformed UTF8
421 codepoints with valid ones.
422
b1f8e4f8
JH
423 4. New malware type "sock". Talks over a Unix or TCP socket, sending one
424 command line and matching a regex against the return data for trigger
007a2dee 425 and a second regex to extract malware_name. The mail spoolfile name can
b1f8e4f8
JH
426 be included in the command line.
427
dc4dc04e
JH
428 5. The smtp transport now supports options "tls_verify_hosts" and
429 "tls_try_verify_hosts". If either is set the certificate verification
430 is split from the encryption operation. The default remains that a failed
431 verification cancels the encryption.
214042d2 432
deae092e
HS
433 6. New SERVERS override of default ldap server list. In the ACLs, an ldap
434 lookup can now set a list of servers to use that is different from the
435 default list.
436
8d91c6dc
LT
437 7. New command-line option -C for exiqgrep to specify alternate exim.conf
438 file when searching the queue.
439
f2de3a33 440 8. OCSP now supports GnuTLS also, if you have version 3.1.3 or later of that.
2b4a568d 441
578897ea
JH
442 9. Support for DNSSEC on outbound connections.
443
9d1c15ef 44410. New variables "tls_(in,out)_(our,peer)cert" and expansion item
6a8a60e0 445 "certextract" to extract fields from them. Hash operators md5 and sha1
9ef9101c
JH
446 work over them for generating fingerprints, and a new sha256 operator
447 for them added.
9d1c15ef 448
8ccd00b1
JH
44911. PRDR is now supported dy default.
450
f2de3a33
JH
45112. OCSP stapling is now supported by default.
452
45313. If built with the EXPERIMENTAL_DSN feature enabled, Exim will output
4c04137d 454 Delivery Status Notification messages in MIME format, and negotiate
f2de3a33
JH
455 DSN features per RFC 3461.
456
6ece2e77 457
2c422e6f 458Version 4.82
98a90c36
PP
459------------
460
461 1. New command-line option -bI:sieve will list all supported sieve extensions
462 of this Exim build on standard output, one per line.
463 ManageSieve (RFC 5804) providers managing scripts for use by Exim should
464 query this to establish the correct list to include in the protocol's
465 SIEVE capability line.
466
12f69989
PP
467 2. If the -n option is combined with the -bP option, then the name of an
468 emitted option is not output, only the value (if visible to you).
469 For instance, "exim -n -bP pid_file_path" should just emit a pathname
470 followed by a newline, and no other text.
471
54c90be1
PP
472 3. When built with SUPPORT_TLS and USE_GNUTLS, the SMTP transport driver now
473 has a "tls_dh_min_bits" option, to set the minimum acceptable number of
474 bits in the Diffie-Hellman prime offered by a server (in DH ciphersuites)
475 acceptable for security. (Option accepted but ignored if using OpenSSL).
476 Defaults to 1024, the old value. May be lowered only to 512, or raised as
477 far as you like. Raising this may hinder TLS interoperability with other
478 sites and is not currently recommended. Lowering this will permit you to
479 establish a TLS session which is not as secure as you might like.
480
481 Unless you really know what you are doing, leave it alone.
482
1f4a55da 483 4. If not built with DISABLE_DNSSEC, Exim now has the main option
0fbd9bff 484 dns_dnssec_ok; if set to 1 then Exim will initialise the resolver library
1f4a55da
PP
485 to send the DO flag to your recursive resolver. If you have a recursive
486 resolver, which can set the Authenticated Data (AD) flag in results, Exim
0fbd9bff
PP
487 can now detect this. Exim does not perform validation itself, instead
488 relying upon a trusted path to the resolver.
1f4a55da
PP
489
490 Current status: work-in-progress; $sender_host_dnssec variable added.
491
36a3ae5f
PP
492 5. DSCP support for outbound connections: on a transport using the smtp driver,
493 set "dscp = ef", for instance, to cause the connections to have the relevant
13363eba
PP
494 DSCP (IPv4 TOS or IPv6 TCLASS) value in the header.
495
496 Similarly for inbound connections, there is a new control modifier, dscp,
497 so "warn control = dscp/ef" in the connect ACL, or after authentication.
498
499 Supported values depend upon system libraries. "exim -bI:dscp" to list the
500 ones Exim knows of. You can also set a raw number 0..0x3F.
36a3ae5f 501
f4ee74ac
PP
502 6. The -G command-line flag is no longer ignored; it is now equivalent to an
503 ACL setting "control = suppress_local_fixups". The -L command-line flag
504 is now accepted and forces use of syslog, with the provided tag as the
505 process name. A few other flags used by Sendmail are now accepted and
506 ignored.
507
976b7e9f 508 7. New cutthrough routing feature. Requested by a "control = cutthrough_delivery"
4c04137d 509 ACL modifier; works for single-recipient mails which are received on and
976b7e9f
JH
510 deliverable via SMTP. Using the connection made for a recipient verify,
511 if requested before the verify, or a new one made for the purpose while
512 the inbound connection is still active. The bulk of the mail item is copied
513 direct from the inbound socket to the outbound (as well as the spool file).
514 When the source notifies the end of data, the data acceptance by the destination
4c04137d 515 is negotiated before the acceptance is sent to the source. If the destination
976b7e9f
JH
516 does not accept the mail item, for example due to content-scanning, the item
517 is not accepted from the source and therefore there is no need to generate
518 a bounce mail. This is of benefit when providing a secondary-MX service.
519 The downside is that delays are under the control of the ultimate destination
520 system not your own.
521
4c04137d 522 The Received-by: header on items delivered by cutthrough is generated
042eb971 523 early in reception rather than at the end; this will affect any timestamp
976b7e9f
JH
524 included. The log line showing delivery is recorded before that showing
525 reception; it uses a new ">>" tag instead of "=>".
06a6f4ed 526
976b7e9f
JH
527 To support the feature, verify-callout connections can now use ESMTP and TLS.
528 The usual smtp transport options are honoured, plus a (new, default everything)
529 hosts_verify_avoid_tls.
530
531 New variable families named tls_in_cipher, tls_out_cipher etc. are introduced
532 for specific access to the information for each connection. The old names
533 are present for now but deprecated.
534
fcc8e047 535 Not yet supported: IGNOREQUOTA, SIZE, PIPELINING.
976b7e9f 536
a64a3dfa
JH
537 8. New expansion operators ${listnamed:name} to get the content of a named list
538 and ${listcount:string} to count the items in a list.
98a90c36 539
2519e60d 540 9. New global option "gnutls_allow_auto_pkcs11", defaults false. The GnuTLS
a5f239e4
PP
541 rewrite in 4.80 combines with GnuTLS 2.12.0 or later, to autoload PKCS11
542 modules. For some situations this is desirable, but we expect admin in
543 those situations to know they want the feature. More commonly, it means
544 that GUI user modules get loaded and are broken by the setuid Exim being
545 unable to access files specified in environment variables and passed
546 through, thus breakage. So we explicitly inhibit the PKCS11 initialisation
547 unless this new option is set.
548
2519e60d
TL
549 Some older OS's with earlier versions of GnuTLS might not have pkcs11 ability,
550 so have also added a build option which can be used to build Exim with GnuTLS
551 but without trying to use any kind of PKCS11 support. Uncomment this in the
552 Local/Makefile:
553
554 AVOID_GNUTLS_PKCS11=yes
555
3e8abda0 55610. The "acl = name" condition on an ACL now supports optional arguments.
bef3ea7f
JH
557 New expansion item "${acl {name}{arg}...}" and expansion condition
558 "acl {{name}{arg}...}" are added. In all cases up to nine arguments
559 can be used, appearing in $acl_arg1 to $acl_arg9 for the called ACL.
560 Variable $acl_narg contains the number of arguments. If the ACL sets
561 a "message =" value this becomes the result of the expansion item,
562 or the value of $value for the expansion condition. If the ACL returns
563 accept the expansion condition is true; if reject, false. A defer
564 return results in a forced fail.
a5f239e4 565
846726c5
JH
56611. Routers and transports can now have multiple headers_add and headers_remove
567 option lines. The concatenated list is used.
568
e7568d51
TL
56912. New ACL modifier "remove_header" can remove headers before message gets
570 handled by routers/transports.
571
3a796370
JH
57213. New dnsdb lookup pseudo-type "a+". A sequence of "a6" (if configured),
573 "aaaa" and "a" lookups is done and the full set of results returned.
574
362145b5 57514. New expansion variable $headers_added with content from ACL add_header
85ffcba6 576 modifier (but not yet added to message).
362145b5 577
bd0fff00 57815. New 8bitmime status logging option for received messages. Log field "M8S".
3c0a92dc 579
c8e2fc1e
JH
58016. New authenticated_sender logging option, adding to log field "A".
581
181d9bf8 58217. New expansion variables $router_name and $transport_name. Useful
f59aaaaa 583 particularly for debug_print as -bt command-line option does not
2a47f028 584 require privilege whereas -d does.
181d9bf8 585
fd98a5c6
JH
58618. If built with EXPERIMENTAL_PRDR, per-recipient data responses per a
587 proposed extension to SMTP from Eric Hall.
588
700d22f3
PP
58919. The pipe transport has gained the force_command option, to allow
590 decorating commands from user .forward pipe aliases with prefix
591 wrappers, for instance.
592
fcc8e047
JH
59320. Callout connections can now AUTH; the same controls as normal delivery
594 connections apply.
595
b1f37849
TL
59621. Support for DMARC, using opendmarc libs, can be enabled. It adds new
597 options: dmarc_forensic_sender, dmarc_history_file, and dmarc_tld_file.
598 It adds new expansion variables $dmarc_ar_header, $dmarc_status,
599 $dmarc_status_text, and $dmarc_used_domain. It adds a new acl modifier
600 dmarc_status. It adds new control flags dmarc_disable_verify and
687cac44
HSHR
601 dmarc_enable_forensic. The default for the dmarc_tld_file option is
602 "/etc/exim/opendmarc.tlds" and can be changed via EDITME.
b1f37849
TL
603
60422. Add expansion variable $authenticated_fail_id, which is the username
605 provided to the authentication method which failed. It is available
606 for use in subsequent ACL processing (typically quit or notquit ACLs).
607
4c04137d 60823. New ACL modifier "udpsend" can construct a UDP packet to send to a given
7142daca
PP
609 UDP host and port.
610
61124. New ${hexquote:..string..} expansion operator converts non-printable
612 characters in the string to \xNN form.
613
1a7b746d
TL
61425. Experimental TPDA (Transport Post Delivery Action) function added.
615 Patch provided by Axel Rau.
616
4dd78911
TL
61726. Experimental Redis lookup added. Patch provided by Warren Baker.
618
181d9bf8 619
b1770b6e 620Version 4.80
c1e794ba
PP
621------------
622
623 1. New authenticator driver, "gsasl". Server-only (at present).
624 This is a SASL interface, licensed under GPL, which can be found at
625 http://www.gnu.org/software/gsasl/.
626 This system does not provide sources of data for authentication, so
3b4f55a3 627 careful use needs to be made of the conditions in Exim.
c1e794ba 628
97753960
PP
629 2. New authenticator driver, "heimdal_gssapi". Server-only.
630 A replacement for using cyrus_sasl with Heimdal, now that $KRB5_KTNAME
631 is no longer honoured for setuid programs by Heimdal. Use the
632 "server_keytab" option to point to the keytab.
633
252e0c7b
PP
634 3. The "pkg-config" system can now be used when building Exim to reference
635 cflags and library information for lookups and authenticators, rather
636 than having to update "CFLAGS", "AUTH_LIBS", "LOOKUP_INCLUDE" and
7e6a8985
PP
637 "LOOKUP_LIBS" directly. Similarly for handling the TLS library support
638 without adjusting "TLS_INCLUDE" and "TLS_LIBS".
252e0c7b 639
6a6084f8
PP
640 In addition, setting PCRE_CONFIG=yes will query the pcre-config tool to
641 find the headers and libraries for PCRE.
642
f1e05cc7 643 4. New expansion variable $tls_bits.
20aa9dbd 644
4a6a987a
PP
645 5. New lookup type, "dbmjz". Key is an Exim list, the elements of which will
646 be joined together with ASCII NUL characters to construct the key to pass
3b4f55a3
PP
647 into the DBM library. Can be used with gsasl to access sasldb2 files as
648 used by Cyrus SASL.
4a6a987a 649
da3ad30d
PP
650 6. OpenSSL now supports TLS1.1 and TLS1.2 with OpenSSL 1.0.1.
651
652 Avoid release 1.0.1a if you can. Note that the default value of
653 "openssl_options" is no longer "+dont_insert_empty_fragments", as that
654 increased susceptibility to attack. This may still have interoperability
655 implications for very old clients (see version 4.31 change 37) but
656 administrators can choose to make the trade-off themselves and restore
657 compatibility at the cost of session security.
658
7be682ca
PP
659 7. Use of the new expansion variable $tls_sni in the main configuration option
660 tls_certificate will cause Exim to re-expand the option, if the client
661 sends the TLS Server Name Indication extension, to permit choosing a
662 different certificate; tls_privatekey will also be re-expanded. You must
663 still set these options to expand to valid files when $tls_sni is not set.
3f0945ff
PP
664
665 The SMTP Transport has gained the option tls_sni, which will set a hostname
666 for outbound TLS sessions, and set $tls_sni too.
667
668 A new log_selector, +tls_sni, has been added, to log received SNI values
669 for Exim as a server.
670
9cbad13b
PP
671 8. The existing "accept_8bitmime" option now defaults to true. This means
672 that Exim is deliberately not strictly RFC compliant. We're following
673 Dan Bernstein's advice in http://cr.yp.to/smtp/8bitmime.html by default.
674 Those who disagree, or know that they are talking to mail servers that,
675 even today, are not 8-bit clean, need to turn off this option.
676
9ee44efb
PP
677 9. Exim can now be started with -bw (with an optional timeout, given as
678 -bw<timespec>). With this, stdin at startup is a socket that is
679 already listening for connections. This has a more modern name of
680 "socket activation", but forcing the activated socket to fd 0. We're
681 interested in adding more support for modern variants.
682
eae0036b 68310. ${eval } now uses 64-bit values on supporting platforms. A new "G" suffix
97d17305
JH
684 for numbers indicates multiplication by 1024^3.
685
17c76198
PP
68611. The GnuTLS support has been revamped; the three options gnutls_require_kx,
687 gnutls_require_mac & gnutls_require_protocols are no longer supported.
688 tls_require_ciphers is now parsed by gnutls_priority_init(3) as a priority
689 string, documentation for which is at:
42bfef1e 690 http://www.gnutls.org/manual/html_node/Priority-Strings.html
17c76198
PP
691
692 SNI support has been added to Exim's GnuTLS integration too.
693
af3498d6
PP
694 For sufficiently recent GnuTLS libraries, ${randint:..} will now use
695 gnutls_rnd(), asking for GNUTLS_RND_NONCE level randomness.
696
53947857 69712. With OpenSSL, if built with EXPERIMENTAL_OCSP, a new option tls_ocsp_file
3f7eeb86
PP
698 is now available. If the contents of the file are valid, then Exim will
699 send that back in response to a TLS status request; this is OCSP Stapling.
700 Exim will not maintain the contents of the file in any way: administrators
701 are responsible for ensuring that it is up-to-date.
702
703 See "experimental-spec.txt" for more details.
704
eae0036b
PP
70513. ${lookup dnsdb{ }} supports now SPF record types. They are handled
706 identically to TXT record lookups.
707
2605c55b 70814. New expansion variable $tod_epoch_l for higher-precision time.
c1e794ba 709
3375e053
PP
71015. New global option tls_dh_max_bits, defaulting to current value of NSS
711 hard-coded limit of DH ephemeral bits, to fix interop problems caused by
712 GnuTLS 2.12 library recommending a bit count higher than NSS supports.
713
a799883d
PP
71416. tls_dhparam now used by both OpenSSL and GnuTLS, can be path or identifier.
715 Option can now be a path or an identifier for a standard prime.
716 If unset, we use the DH prime from section 2.2 of RFC 5114, "ike23".
717 Set to "historic" to get the old GnuTLS behaviour of auto-generated DH
718 primes.
719
3ecab157 72017. SSLv2 now disabled by default in OpenSSL. (Never supported by GnuTLS).
f0f5a555
PP
721 Use "openssl_options -no_sslv2" to re-enable support, if your OpenSSL
722 install was not built with OPENSSL_NO_SSL2 ("no-ssl2").
723
9e45c72b 724
3ce96ada
TF
725Version 4.77
726------------
727
728 1. New options for the ratelimit ACL condition: /count= and /unique=.
729 The /noupdate option has been replaced by a /readonly option.
730
061b7ebd
PP
731 2. The SMTP transport's protocol option may now be set to "smtps", to
732 use SSL-on-connect outbound.
733
9e949f00
PP
734 3. New variable $av_failed, set true if the AV scanner deferred; ie, when
735 there is a problem talking to the AV scanner, or the AV scanner running.
736
39257585
PP
737 4. New expansion conditions, "inlist" and "inlisti", which take simple lists
738 and check if the search item is a member of the list. This does not
739 support named lists, but does subject the list part to string expansion.
740
741 5. Unless the new EXPAND_LISTMATCH_RHS build option is set when Exim was
742 built, Exim no longer performs string expansion on the second string of
743 the match_* expansion conditions: "match_address", "match_domain",
744 "match_ip" & "match_local_part". Named lists can still be used.
745
7c6d71af 746
e97d1f08
PP
747Version 4.76
748------------
749
750 1. The global option "dns_use_edns0" may be set to coerce EDNS0 usage on
751 or off in the resolver library.
752
753
bc19a55b
PP
754Version 4.75
755------------
756
757 1. In addition to the existing LDAP and LDAP/SSL ("ldaps") support, there
758 is now LDAP/TLS support, given sufficiently modern OpenLDAP client
759 libraries. The following global options have been added in support of
760 this: ldap_ca_cert_dir, ldap_ca_cert_file, ldap_cert_file, ldap_cert_key,
761 ldap_cipher_suite, ldap_require_cert, ldap_start_tls.
762
2fe76745
PP
763 2. The pipe transport now takes a boolean option, "freeze_signal", default
764 false. When true, if the external delivery command exits on a signal then
765 Exim will freeze the message in the queue, instead of generating a bounce.
766
f1e5fef5
PP
767 3. Log filenames may now use %M as an escape, instead of %D (still available).
768 The %M pattern expands to yyyymm, providing month-level resolution.
769
332f5cf3
PP
770 4. The $message_linecount variable is now updated for the maildir_tag option,
771 in the same way as $message_size, to reflect the real number of lines,
772 including any header additions or removals from transport.
773
29cfeb94
PP
774 5. When contacting a pool of SpamAssassin servers configured in spamd_address,
775 Exim now selects entries randomly, to better scale in a cluster setup.
776
bc19a55b 777
a01ba081
PP
778Version 4.74
779------------
780
1670ef10
PP
781 1. SECURITY FIX: privilege escalation flaw fixed. On Linux (and only Linux)
782 the flaw permitted the Exim run-time user to cause root to append to
783 arbitrary files of the attacker's choosing, with the content based
784 on content supplied by the attacker.
785
786 2. Exim now supports loading some lookup types at run-time, using your
a01ba081
PP
787 platform's dlopen() functionality. This has limited platform support
788 and the intention is not to support every variant, it's limited to
789 dlopen(). This permits the main Exim binary to not be linked against
790 all the libraries needed for all the lookup types.
791
792
77bb000f
PP
793Version 4.73
794------------
795
2cfd3221
PP
796 NOTE: this version is not guaranteed backwards-compatible, please read the
797 items below carefully
798
77bb000f
PP
799 1. A new main configuration option, "openssl_options", is available if Exim
800 is built with SSL support provided by OpenSSL. The option allows
801 administrators to specify OpenSSL options to be used on connections;
802 typically this is to set bug compatibility features which the OpenSSL
803 developers have not enabled by default. There may be security
804 consequences for certain options, so these should not be changed
805 frivolously.
806
a29e5231
PP
807 2. A new pipe transport option, "permit_coredumps", may help with problem
808 diagnosis in some scenarios. Note that Exim is typically installed as
809 a setuid binary, which on most OSes will inhibit coredumps by default,
43236f35 810 so that safety mechanism would have to be overridden for this option to
a29e5231
PP
811 be able to take effect.
812
8544e77a
PP
813 3. ClamAV 0.95 is now required for ClamAV support in Exim, unless
814 Local/Makefile sets: WITH_OLD_CLAMAV_STREAM=yes
815 Note that this switches Exim to use a new API ("INSTREAM") and a future
816 release of ClamAV will remove support for the old API ("STREAM").
817
818 The av_scanner option, when set to "clamd", now takes an optional third
819 part, "local", which causes Exim to pass a filename to ClamAV instead of
820 the file content. This is the same behaviour as when clamd is pointed at
821 a Unix-domain socket. For example:
822
823 av_scanner = clamd:192.0.2.3 1234:local
824
491fab4c
PP
825 ClamAV's ExtendedDetectionInfo response format is now handled.
826
8544e77a
PP
827 4. There is now a -bmalware option, restricted to admin users. This option
828 takes one parameter, a filename, and scans that file with Exim's
829 malware-scanning framework. This is intended purely as a debugging aid
830 to ensure that Exim's scanning is working, not to replace other tools.
a9622bc6
PP
831 Note that the ACL framework is not invoked, so if av_scanner references
832 ACL variables without a fallback then this will fail.
8544e77a 833
83e029d5
PP
834 5. There is a new expansion operator, "reverse_ip", which will reverse IP
835 addresses; IPv4 into dotted quad, IPv6 into dotted nibble. Examples:
836
837 ${reverse_ip:192.0.2.4}
838 -> 4.2.0.192
839 ${reverse_ip:2001:0db8:c42:9:1:abcd:192.0.2.3}
840 -> 3.0.2.0.0.0.0.c.d.c.b.a.1.0.0.0.9.0.0.0.2.4.c.0.8.b.d.0.1.0.0.2
841
ed7f7860
PP
842 6. There is a new ACL control called "debug", to enable debug logging.
843 This allows selective logging of certain incoming transactions within
844 production environments, with some care. It takes two options, "tag"
845 and "opts"; "tag" is included in the filename of the log and "opts"
846 is used as per the -d<options> command-line option. Examples, which
847 don't all make sense in all contexts:
848
849 control = debug
850 control = debug/tag=.$sender_host_address
851 control = debug/opts=+expand+acl
852 control = debug/tag=.$message_exim_id/opts=+expand
853
10385c15
PP
854 7. It has always been implicit in the design and the documentation that
855 "the Exim user" is not root. src/EDITME said that using root was
856 "very strongly discouraged". This is not enough to keep people from
857 shooting themselves in the foot in days when many don't configure Exim
858 themselves but via package build managers. The security consequences of
859 running various bits of network code are severe if there should be bugs in
860 them. As such, the Exim user may no longer be root. If configured
861 statically, Exim will refuse to build. If configured as ref:user then Exim
862 will exit shortly after start-up. If you must shoot yourself in the foot,
863 then henceforth you will have to maintain your own local patches to strip
864 the safeties off.
865
06a6f4ed 866 8. There is a new expansion condition, bool_lax{}. Where bool{} uses the ACL
6a8de854
PP
867 condition logic to determine truth/failure and will fail to expand many
868 strings, bool_lax{} uses the router condition logic, where most strings
869 do evaluate true.
870 Note: bool{00} is false, bool_lax{00} is true.
871
06a6f4ed 872 9. Routers now support multiple "condition" tests.
532be449 873
5dc43717
JJ
87410. There is now a runtime configuration option "tcp_wrappers_daemon_name".
875 Setting this allows an admin to define which entry in the tcpwrappers
876 config file will be used to control access to the daemon. This option
877 is only available when Exim is built with USE_TCP_WRAPPERS. The
878 default value is set at build time using the TCP_WRAPPERS_DAEMON_NAME
879 build option.
880
79d4bc3d
PP
88111. [POSSIBLE CONFIG BREAKAGE] The default value for system_filter_user is now
882 the Exim run-time user, instead of root.
883
2cfd3221
PP
88412. [POSSIBLE CONFIG BREAKAGE] ALT_CONFIG_ROOT_ONLY is no longer optional and
885 is forced on. This is mitigated by the new build option
90b6341f 886 TRUSTED_CONFIG_LIST which defines a list of configuration files which
7f7f0545
DW
887 are trusted; one per line. If a config file is owned by root and matches
888 a pathname in the list, then it may be invoked by the Exim build-time
889 user without Exim relinquishing root privileges.
2cfd3221
PP
890
89113. [POSSIBLE CONFIG BREAKAGE] The Exim user is no longer automatically
892 trusted to supply -D<Macro[=Value]> overrides on the command-line. Going
90b6341f
DW
893 forward, we recommend using TRUSTED_CONFIG_LIST with shim configs that
894 include the main config. As a transition mechanism, we are temporarily
895 providing a work-around: the new build option WHITELIST_D_MACROS provides
43236f35 896 a colon-separated list of macro names which may be overridden by the Exim
90b6341f
DW
897 run-time user. The values of these macros are constrained to the regex
898 ^[A-Za-z0-9_/.-]*$ (which explicitly does allow for empty values).
2cfd3221 899
77bb000f 900
3fc596e4
NM
901Version 4.72
902------------
903
b26eacf1
PP
904 1. TWO SECURITY FIXES: one relating to mail-spools which are globally
905 writable, the other to locking of MBX folders (not mbox).
906
907 2. MySQL stored procedures are now supported.
908
909 3. The dkim_domain transport option is now a list, not a single string, and
910 messages will be signed for each element in the list (discarding
911 duplicates).
912
913 4. The 4.70 release unexpectedly changed the behaviour of dnsdb TXT lookups
914 in the presence of multiple character strings within the RR. Prior to 4.70,
915 only the first string would be returned. The dnsdb lookup now, by default,
916 preserves the pre-4.70 semantics, but also now takes an extended output
8f425947
PP
917 separator specification. The separator can be followed by a semicolon, to
918 concatenate the individual text strings together with no join character,
919 or by a comma and a second separator character, in which case the text
920 strings within a TXT record are joined on that second character.
921 Administrators are reminded that DNS provides no ordering guarantees
922 between multiple records in an RRset. For example:
b26eacf1
PP
923
924 foo.example. IN TXT "a" "b" "c"
925 foo.example. IN TXT "d" "e" "f"
926
927 ${lookup dnsdb{>/ txt=foo.example}} -> "a/d"
928 ${lookup dnsdb{>/; txt=foo.example}} -> "def/abc"
8f425947 929 ${lookup dnsdb{>/,+ txt=foo.example}} -> "a+b+c/d+e+f"
b26eacf1 930
3fc596e4 931
f33253cc
NM
932Version 4.70 / 4.71
933-------------------
65a7d8c3 934
7c6d71af 935 1. Native DKIM support without an external library.
a8c8d6b5
JJ
936 (Note that if no action to prevent it is taken, a straight upgrade will
937 result in DKIM verification of all signed incoming emails. See spec
938 for details on conditionally disabling)
7c6d71af
NM
939
940 2. Experimental DCC support via dccifd (contributed by Wolfgang Breyha).
65a7d8c3 941
f33253cc 942 3. There is now a bool{} expansion condition which maps certain strings to
7d9f747b 943 true/false condition values (most likely of use in conjunction with the
f33253cc
NM
944 and{} expansion operator).
945
946 4. The $spam_score, $spam_bar and $spam_report variables are now available
947 at delivery time.
948
949 5. exim -bP now supports "macros", "macro_list" or "macro MACRO_NAME" as
950 options, provided that Exim is invoked by an admin_user.
951
952 6. There is a new option gnutls_compat_mode, when linked against GnuTLS,
953 which increases compatibility with older clients at the cost of decreased
954 security. Don't set this unless you need to support such clients.
955
956 7. There is a new expansion operator, ${randint:...} which will produce a
957 "random" number less than the supplied integer. This randomness is
958 not guaranteed to be cryptographically strong, but depending upon how
959 Exim was built may be better than the most naive schemes.
960
961 8. Exim now explicitly ensures that SHA256 is available when linked against
962 OpenSSL.
963
964 9. The transport_filter_timeout option now applies to SMTP transports too.
965
65a7d8c3 966
7d9f747b
PP
967Version 4.69
968------------
969
970 1. Preliminary DKIM support in Experimental.
971
972
2b85bce7
PH
973Version 4.68
974------------
975
976 1. The body_linecount and body_zerocount C variables are now exported in the
977 local_scan API.
978
93655c46
PH
979 2. When a dnslists lookup succeeds, the key that was looked up is now placed
980 in $dnslist_matched. When the key is an IP address, it is not reversed in
981 this variable (though it is, of course, in the actual lookup). In simple
982 cases, for example:
983
984 deny dnslists = spamhaus.example
985
986 the key is also available in another variable (in this case,
987 $sender_host_address). In more complicated cases, however, this is not
988 true. For example, using a data lookup might generate a dnslists lookup
989 like this:
990
991 deny dnslists = spamhaus.example/<|192.168.1.2|192.168.6.7|...
992
993 If this condition succeeds, the value in $dnslist_matched might be
994 192.168.6.7 (for example).
995
6c512171
PH
996 3. Authenticators now have a client_condition option. When Exim is running as
997 a client, it skips an authenticator whose client_condition expansion yields
998 "0", "no", or "false". This can be used, for example, to skip plain text
999 authenticators when the connection is not encrypted by a setting such as:
1000
1001 client_condition = ${if !eq{$tls_cipher}{}}
1002
1003 Note that the 4.67 documentation states that $tls_cipher contains the
1004 cipher used for incoming messages. In fact, during SMTP delivery, it
1005 contains the cipher used for the delivery. The same is true for
1006 $tls_peerdn.
1007
a96603a0
PH
1008 4. There is now a -Mvc <message-id> option, which outputs a copy of the
1009 message to the standard output, in RFC 2822 format. The option can be used
1010 only by an admin user.
1011
8f240103
PH
1012 5. There is now a /noupdate option for the ratelimit ACL condition. It
1013 computes the rate and checks the limit as normal, but it does not update
1014 the saved data. This means that, in relevant ACLs, it is possible to lookup
1015 the existence of a specified (or auto-generated) ratelimit key without
1016 incrementing the ratelimit counter for that key.
1017
1018 In order for this to be useful, another ACL entry must set the rate
1019 for the same key somewhere (otherwise it will always be zero).
1020
1021 Example:
1022
1023 acl_check_connect:
1024 # Read the rate; if it doesn't exist or is below the maximum
1025 # we update it below
1026 deny ratelimit = 100 / 5m / strict / noupdate
1027 log_message = RATE: $sender_rate / $sender_rate_period \
1028 (max $sender_rate_limit)
1029
1030 [... some other logic and tests...]
1031
1032 warn ratelimit = 100 / 5m / strict / per_cmd
1033 log_message = RATE UPDATE: $sender_rate / $sender_rate_period \
1034 (max $sender_rate_limit)
1035 condition = ${if le{$sender_rate}{$sender_rate_limit}}
1036
1037 accept
1038
d677b2f2
PH
1039 6. The variable $max_received_linelength contains the number of bytes in the
1040 longest line that was received as part of the message, not counting the
1041 line termination character(s).
1042
aded2255 1043 7. Host lists can now include +ignore_defer and +include_defer, analogous to
d52120f2
PH
1044 +ignore_unknown and +include_unknown. These options should be used with
1045 care, probably only in non-critical host lists such as whitelists.
1046
8669f003
PH
1047 8. There's a new option called queue_only_load_latch, which defaults true.
1048 If set false when queue_only_load is greater than zero, Exim re-evaluates
1049 the load for each incoming message in an SMTP session. Otherwise, once one
1050 message is queued, the remainder are also.
1051
4f054c63 1052 9. There is a new ACL, specified by acl_smtp_notquit, which is run in most
8f128379
PH
1053 cases when an SMTP session ends without sending QUIT. However, when Exim
1054 itself is is bad trouble, such as being unable to write to its log files,
1055 this ACL is not run, because it might try to do things (such as write to
1056 log files) that make the situation even worse.
1057
1058 Like the QUIT ACL, this new ACL is provided to make it possible to gather
1059 statistics. Whatever it returns (accept or deny) is immaterial. The "delay"
1060 modifier is forbidden in this ACL.
1061
1062 When the NOTQUIT ACL is running, the variable $smtp_notquit_reason is set
1063 to a string that indicates the reason for the termination of the SMTP
1064 connection. The possible values are:
1065
1066 acl-drop Another ACL issued a "drop" command
1067 bad-commands Too many unknown or non-mail commands
1068 command-timeout Timeout while reading SMTP commands
1069 connection-lost The SMTP connection has been lost
1070 data-timeout Timeout while reading message data
1071 local-scan-error The local_scan() function crashed
1072 local-scan-timeout The local_scan() function timed out
1073 signal-exit SIGTERM or SIGINT
1074 synchronization-error SMTP synchronization error
1075 tls-failed TLS failed to start
1076
1077 In most cases when an SMTP connection is closed without having received
1078 QUIT, Exim sends an SMTP response message before actually closing the
1079 connection. With the exception of acl-drop, the default message can be
1080 overridden by the "message" modifier in the NOTQUIT ACL. In the case of a
1081 "drop" verb in another ACL, it is the message from the other ACL that is
1082 used.
1083
b7670459
PH
108410. For MySQL and PostgreSQL lookups, it is now possible to specify a list of
1085 servers with individual queries. This is done by starting the query with
1086 "servers=x:y:z;", where each item in the list may take one of two forms:
1087
1088 (1) If it is just a host name, the appropriate global option (mysql_servers
1089 or pgsql_servers) is searched for a host of the same name, and the
1090 remaining parameters (database, user, password) are taken from there.
1091
1092 (2) If it contains any slashes, it is taken as a complete parameter set.
1093
1094 The list of servers is used in exactly the same was as the global list.
1095 Once a connection to a server has happened and a query has been
1096 successfully executed, processing of the lookup ceases.
1097
1098 This feature is intended for use in master/slave situations where updates
1099 are occurring, and one wants to update a master rather than a slave. If the
1100 masters are in the list for reading, you might have:
1101
1102 mysql_servers = slave1/db/name/pw:slave2/db/name/pw:master/db/name/pw
1103
1104 In an updating lookup, you could then write
1105
1106 ${lookup mysql{servers=master; UPDATE ...}
1107
1108 If, on the other hand, the master is not to be used for reading lookups:
1109
1110 pgsql_servers = slave1/db/name/pw:slave2/db/name/pw
1111
1112 you can still update the master by
1113
1114 ${lookup pgsql{servers=master/db/name/pw; UPDATE ...}
1115
ddea74fa
PH
111611. The message_body_newlines option (default FALSE, for backwards
1117 compatibility) can be used to control whether newlines are present in
1118 $message_body and $message_body_end. If it is FALSE, they are replaced by
1119 spaces.
1120
2b85bce7 1121
b4ed4da0
PH
1122Version 4.67
1123------------
1124
1125 1. There is a new log selector called smtp_no_mail, which is not included in
1126 the default setting. When it is set, a line is written to the main log
1127 whenever an accepted SMTP connection terminates without having issued a
4aa45c31 1128 MAIL command.
b4ed4da0 1129
431b7361 1130 2. When an item in a dnslists list is followed by = and & and a list of IP
4aa45c31
PH
1131 addresses, the behaviour was not clear when the lookup returned more than
1132 one IP address. This has been solved by the addition of == and =& for "all"
93655c46 1133 rather than the default "any" matching.
431b7361 1134
4aa45c31
PH
1135 3. Up till now, the only control over which cipher suites GnuTLS uses has been
1136 for the cipher algorithms. New options have been added to allow some of the
1137 other parameters to be varied.
431b7361 1138
4aa45c31
PH
1139 4. There is a new compile-time option called ENABLE_DISABLE_FSYNC. When it is
1140 set, Exim compiles a runtime option called disable_fsync.
431b7361 1141
4aa45c31 1142 5. There is a new variable called $smtp_count_at_connection_start.
431b7361 1143
4aa45c31 1144 6. There's a new control called no_pipelining.
cf8b11a5 1145
41c7c167 1146 7. There are two new variables called $sending_ip_address and $sending_port.
4aa45c31 1147 These are set whenever an SMTP connection to another host has been set up.
41c7c167
PH
1148
1149 8. The expansion of the helo_data option in the smtp transport now happens
4aa45c31 1150 after the connection to the server has been made.
41c7c167 1151
9c57cbc0 1152 9. There is a new expansion operator ${rfc2047d: that decodes strings that
4aa45c31 1153 are encoded as per RFC 2047.
9c57cbc0 1154
f3f065bb
PH
115510. There is a new log selector called "pid", which causes the current process
1156 id to be added to every log line, in square brackets, immediately after the
1157 time and date.
1158
047bdd8c 115911. Exim has been modified so that it flushes SMTP output before implementing
4c590bd1
PH
1160 a delay in an ACL. It also flushes the output before performing a callout,
1161 as this can take a substantial time. These behaviours can be disabled by
1162 obeying control = no_delay_flush or control = no_callout_flush,
4aa45c31 1163 respectively, at some earlier stage of the connection.
047bdd8c 1164
0ce9abe6 116512. There are two new expansion conditions that iterate over a list. They are
4aa45c31 1166 called forany and forall.
0ce9abe6 1167
0e22dfd1
PH
116813. There's a new global option called dsn_from that can be used to vary the
1169 contents of From: lines in bounces and other automatically generated
1170 messages ("delivery status notifications" - hence the name of the option).
0e22dfd1 1171
4aa45c31 117214. The smtp transport has a new option called hosts_avoid_pipelining.
c51b8e75 1173
75b1493f 117415. By default, exigrep does case-insensitive matches. There is now a -I option
4aa45c31 1175 that makes it case-sensitive.
29f89cad 1176
4aa45c31
PH
117716. A number of new features ("addresses", "map", "filter", and "reduce") have
1178 been added to string expansions to make it easier to process lists of
1179 items, typically addresses.
29f89cad 1180
c3611384
PH
118117. There's a new ACL modifier called "continue". It does nothing of itself,
1182 and processing of the ACL always continues with the next condition or
1183 modifier. It is provided so that the side effects of expanding its argument
4aa45c31 1184 can be used.
c3611384 1185
ec95d1a6 118618. It is now possible to use newline and other control characters (those with
4aa45c31 1187 values less than 32, plus DEL) as separators in lists.
ec95d1a6 1188
b2d5182b
PH
118919. The exigrep utility now has a -v option, which inverts the matching
1190 condition.
1191
c456d9bb 119220. The host_find_failed option in the manualroute router can now be set to
4aa45c31 1193 "ignore".
c456d9bb 1194
b4ed4da0
PH
1195
1196Version 4.66
1197------------
1198
1199No new features were added to 4.66.
1200
1201
1202Version 4.65
1203------------
1204
1205No new features were added to 4.65.
1206
38a0a95f
PH
1207
1208Version 4.64
1209------------
1210
af561417
PH
1211 1. ACL variables can now be given arbitrary names, as long as they start with
1212 "acl_c" or "acl_m" (for connection variables and message variables), are at
1213 least six characters long, with the sixth character being either a digit or
883335dc 1214 an underscore.
af561417
PH
1215
1216 2. There is a new ACL modifier called log_reject_target. It makes it possible
883335dc 1217 to specify which logs are used for messages about ACL rejections.
af561417
PH
1218
1219 3. There is a new authenticator called "dovecot". This is an interface to the
1220 authentication facility of the Dovecot POP/IMAP server, which can support a
883335dc 1221 number of authentication methods.
af561417
PH
1222
1223 4. The variable $message_headers_raw provides a concatenation of all the
1224 messages's headers without any decoding. This is in contrast to
1225 $message_headers, which does RFC2047 decoding on the header contents.
1226
883335dc
PH
1227 5. In a DNS black list, if two domain names, comma-separated, are given, the
1228 second is used first to do an initial check, making use of any IP value
1229 restrictions that are set. If there is a match, the first domain is used,
1230 without any IP value restrictions, to get the TXT record.
af561417 1231
883335dc 1232 6. All authenticators now have a server_condition option.
af561417
PH
1233
1234 7. There is a new command-line option called -Mset. It is useful only in
1235 conjunction with -be (that is, when testing string expansions). It must be
1236 followed by a message id; Exim loads the given message from its spool
883335dc 1237 before doing the expansions.
af561417
PH
1238
1239 8. Another similar new command-line option is called -bem. It operates like
883335dc
PH
1240 -be except that it must be followed by the name of a file that contains a
1241 message.
af561417
PH
1242
1243 9. When an address is delayed because of a 4xx response to a RCPT command, it
1244 is now the combination of sender and recipient that is delayed in
883335dc 1245 subsequent queue runs until its retry time is reached.
af561417
PH
1246
124710. Unary negation and the bitwise logical operators and, or, xor, not, and
883335dc 1248 shift, have been added to the eval: and eval10: expansion items.
48c7f9e2 1249
194cc0e4
PH
125011. The variables $interface_address and $interface_port have been renamed
1251 as $received_ip_address and $received_port, to make it clear that they
1252 relate to message reception rather than delivery. (The old names remain
1253 available for compatibility.)
1254
883335dc
PH
125512. The "message" modifier can now be used on "accept" and "discard" acl verbs
1256 to vary the message that is sent when an SMTP command is accepted.
4e88a19f 1257
495ae4b0 1258
4608d683
PH
1259Version 4.63
1260------------
1261
12621. There is a new Boolean option called filter_prepend_home for the redirect
38a0a95f 1263 router.
4608d683 1264
45b91596
PH
12652. There is a new acl, set by acl_not_smtp_start, which is run right at the
1266 start of receiving a non-SMTP message, before any of the message has been
38a0a95f 1267 read.
45b91596 1268
a5bd321b
PH
12693. When an SMTP error message is specified in a "message" modifier in an ACL,
1270 or in a :fail: or :defer: message in a redirect router, Exim now checks the
38a0a95f 1271 start of the message for an SMTP error code.
a5bd321b 1272
6ec97b1b 12734. There is a new parameter for LDAP lookups called "referrals", which takes
38a0a95f 1274 one of the settings "follow" (the default) or "nofollow".
6ec97b1b 1275
e22ca4ac
JJ
12765. Version 20070721.2 of exipick now included, offering these new options:
1277 --reverse
1278 After all other sorting options have bee processed, reverse order
1279 before displaying messages (-R is synonym).
1280 --random
1281 Randomize order of matching messages before displaying.
1282 --size
1283 Instead of displaying the matching messages, display the sum
1284 of their sizes.
1285 --sort <variable>[,<variable>...]
1286 Before displaying matching messages, sort the messages according to
1287 each messages value for each variable.
1288 --not
1289 Negate the value for every test (returns inverse output from the
1290 same criteria without --not).
1291
4608d683 1292
1cce3af8
PH
1293Version 4.62
1294------------
1295
12961. The ${readsocket expansion item now supports Internet domain sockets as well
1297 as Unix domain sockets. If the first argument begins "inet:", it must be of
1298 the form "inet:host:port". The port is mandatory; it may be a number or the
1299 name of a TCP port in /etc/services. The host may be a name, or it may be an
1300 IP address. An ip address may optionally be enclosed in square brackets.
1301 This is best for IPv6 addresses. For example:
1302
1303 ${readsocket{inet:[::1]:1234}{<request data>}...
1304
1305 Only a single host name may be given, but if looking it up yield more than
1306 one IP address, they are each tried in turn until a connection is made. Once
1307 a connection has been made, the behaviour is as for ${readsocket with a Unix
1308 domain socket.
1309
f7fd3850
PH
13102. If a redirect router sets up file or pipe deliveries for more than one
1311 incoming address, and the relevant transport has batch_max set greater than
1312 one, a batch delivery now occurs.
1313
d6629cdc
PH
13143. The appendfile transport has a new option called maildirfolder_create_regex.
1315 Its value is a regular expression. For a maildir delivery, this is matched
1316 against the maildir directory; if it matches, Exim ensures that a
1317 maildirfolder file is created alongside the new, cur, and tmp directories.
1318
1cce3af8 1319
7e66e54d
PH
1320Version 4.61
1321------------
1322
4f578862
PH
1323The documentation is up-to-date for the 4.61 release. Major new features since
1324the 4.60 release are:
1325
1326. An option called disable_ipv6, to disable the use of IPv6 completely.
1327
1328. An increase in the number of ACL variables to 20 of each type.
1329
1330. A change to use $auth1, $auth2, and $auth3 in authenticators instead of $1,
1331 $2, $3, (though those are still set) because the numeric variables get used
1332 for other things in complicated expansions.
1333
843a41e8 1334. The default for rfc1413_query_timeout has been changed from 30s to 5s.
4f578862
PH
1335
1336. It is possible to use setclassresources() on some BSD OS to control the
1337 resources used in pipe deliveries.
1338
1339. A new ACL modifier called add_header, which can be used with any verb.
1340
1341. More errors are detectable in retry rules.
1342
1343There are a number of other additions too.
71fafd95 1344
7e66e54d 1345
425ae40f 1346Version 4.60
b5aea5e1
PH
1347------------
1348
425ae40f
PH
1349The documentation is up-to-date for the 4.60 release. Major new features since
1350the 4.50 release are:
1a46a8c5 1351
425ae40f 1352. Support for SQLite.
1a46a8c5 1353
425ae40f 1354. Support for IGNOREQUOTA in LMTP.
1a46a8c5 1355
425ae40f 1356. Extensions to the "submission mode" features.
1a46a8c5 1357
425ae40f 1358. Support for Client SMTP Authorization (CSA).
1a46a8c5 1359
425ae40f 1360. Support for ratelimiting hosts and users.
b5aea5e1 1361
425ae40f 1362. New expansion items to help with the BATV "prvs" scheme.
b5aea5e1 1363
425ae40f 1364. A "match_ip" condition, that matches an IP address against a list.
35edf2ff 1365
425ae40f 1366There are many more minor changes.
495ae4b0
PH
1367
1368****