Sun Sep 19 18:56:50 EDT 1999 - (Greg A. Woods) woods@planix.com This BETA release of Smail fixes a bug in the last attempt to fix Smail's ability to reject un-wanted third-party relay. In particular the problem with the "percent-hack" exploit recently being tested by the ORBS (and IMRSS?) system(s) is now properly blocked, along with the use of IP literal addresses. Thanks very much to Richard Todd for catching the problem with relaying through local IP literals and for providing a fix! Eugene Crosser supplied a patch to allow disabling sender verification for those sites that really don't want their systems to dial up just to check the DNS. I really don't like this whole idea of trying to support Smail on periodic dial-up sites, but I guess it doesn't hurt too much to hand out a bunch of rope and see how well people use it! ;-) The botch with ESMTP BODY= parsing has been corrected, also thanks to Eugene Crosser for discovering it. It is now possible to log non-compliant SMTP commands that include comments or other illegal garbage. Postfix was until recently rejecting such things out-right, so I thought it best if Smail could at least detect them. I'm going to keep an eye on how this fares over the next few weeks at one of my client ISP sites and see just how prevalent the problem might be. The problem of mixed up bounce messages when using ESMTP pipelining is hopefully really finally fixed! There's still some stuff that's less than ideal in the generation of bounce messages, but for now it's trying to err on the side of verbosity instead of omitting what might be crucial information. The parsing of ESMTP keywords in the EHLO reply has been made much more complete. The ancient backwards-compatability feature for an "smtp" transport driver (now called "tcpsmtp") has been finally removed. I almost integrated the ETRN patch that's in the contrib directory, but I don't have any way to test it easily, and it could still use a bit more work to add a '-R' command-line hook as well as be slightly smarter at not locking the retry file for hosts it won't be delivering to. Just how many people do use ETRN, and how many of you that do would find it inconvenient to just use the supplied patch? There's one major performance improvment needed yet that's hinted to in the ToDo list.... As always the ToDo and PROJECTS files list a growing number of things that various people think should be worked on. Patches that eliminate items from these files are always welcome! If you'd like to work on any of the bigger projects just send a note to and let us know so we can help co-ordinate and possibly give you access to the CVS repository. See the README and the file Smail3-devel for more information. Remember to use the smailbug utility to submit patches, change requests, bug reports and other stuff that needs to be recorded so it won't get lost or forgotten! (There's now a symlink installed in the smail_bin_dir to make it easier to access this script, and there's a new manual page for it too.)