Please refer to the CHANGELOG to get the complete and comprehensive overview of this release.
Summary
Internal Changes
This release saw significant changes to the CI: we are now capable of running tests in parallel, which will cut down test time significantly in the future. Future pull requests will improve this further.
External Changes
The Postfix / Postscreen configuration was adjusted to better work with DNSBL return codes (throwing away invalid or useless return codes or codes that indicate using an open resolver). The user-patches.sh
is now run exactly at the time the documentation says it will run. Fetchmal data was made persistent. Some scripts was minor bug fixes.
Deprecation Notice
-
Removing TLS 1.0 and TLS 1.1 ciphersuites from
TLS_LEVEL=intermediate
You should not realistically need support for TLS 1.0 or TLS 1.1, except in niche scenarios such as an old printer/scanner device that refuses to negotiate a compatible non-vulnerable cipher. More details covered here. -
SASL_PASSWD
ENV
An old ENVSASL_PASSWD
has been around for supporting relay-host authentication, but since superceded by thepostfix-sasl-password.cf
config file. It will be removed in a future major release as detailed here. -
Platform Support - ARMv7
This is a very old platform, superceded by ARMv8 and newer with broad product availability around 2016 onwards.
Support was introduced primarily for users of the older generations of Raspberry Pi. ARM64 is the modern target for ARM devices.If you require ARMv7 support, please let us know.
What's Changed
- ci: misc test enhancements by @georglauterbach in #2815
- Fix typo by @casperklein in #2830
- Run user-patches.sh right before starting daemons by @casperklein in #2817
- fail2ban: enable network bans by @casperklein in #2818
- Fix: Run Amavis cron job only when Amavis is enabled by @casperklein in #2831
- build: cleaned up Makefile by @georglauterbach in #2833
- Remove unusual space from shebang line by @casperklein in #2834
- setup: fix unbound variable error by @casperklein in #2849
- Fix: Make fetchmail data persistant by @casperklein in #2851
- Follow up for #2849 by @casperklein in #2853
- Run fetchmail not in verbose mode by @casperklein in #2859
- scripts: Improve error handling, when parameters are missing by @casperklein in #2854
- Add OS version to issue template by @casperklein in #2870
- setup.sh: Remove __err function by @casperklein in #2876
- Bugfix: './setup.sh email list' does not display aliases correctly by @casperklein in #2881
- improvement: issue form by @georglauterbach in #2891
- fix: adjust DNSBL return code interpretation by @georglauterbach in #2890
- ci: update to new output format on GH actions by @georglauterbach in #2892
- ci: run tests in parallel (part 1) by @georglauterbach in #2857
- docs: Improve
setup
CLI password example by @pravynandas in #2926 - fix(
opendmarc.conf
): Change the default OpenDMARC policy to reject by @k3it in #2933
New Contributors
- @pravynandas made their first contribution in #2926
Full Changelog: v11.2.0...v11.3.0