head	1.1;
branch	1.1.1;
access;
symbols
	netbsd-11-0-RC6:1.1.1.3
	netbsd-11-0-RC5:1.1.1.3
	netbsd-11-0-RC4:1.1.1.3
	PFIX-3-11-2:1.1.1.3
	netbsd-11-0-RC3:1.1.1.3
	netbsd-11-0-RC2:1.1.1.3
	netbsd-11-0-RC1:1.1.1.3
	perseant-exfatfs-base-20250801:1.1.1.3
	netbsd-11:1.1.1.3.0.2
	netbsd-11-base:1.1.1.3
	PFIX-3-10-1:1.1.1.3
	netbsd-10-1-RELEASE:1.1.1.1.2.1
	perseant-exfatfs-base-20240630:1.1.1.2
	perseant-exfatfs:1.1.1.2.0.4
	perseant-exfatfs-base:1.1.1.2
	netbsd-9-4-RELEASE:1.1.1.2.2.2
	netbsd-10-0-RELEASE:1.1.1.1.2.1
	netbsd-10-0-RC6:1.1.1.1.2.1
	netbsd-10-0-RC5:1.1.1.1.2.1
	netbsd-10-0-RC4:1.1.1.1.2.1
	netbsd-10-0-RC3:1.1.1.1.2.1
	netbsd-10-0-RC2:1.1.1.1.2.1
	netbsd-9:1.1.1.2.0.2
	PFIX-3-8-4:1.1.1.2
	netbsd-10-0-RC1:1.1.1.1
	netbsd-10:1.1.1.1.0.2
	netbsd-10-base:1.1.1.1
	PFIX-3-7-3:1.1.1.1
	VENEMA:1.1.1;
locks; strict;
comment	@# @;


1.1
date	2022.10.08.16.09.00;	author christos;	state Exp;
branches
	1.1.1.1;
next	;
commitid	kRUbAM0nqDWDQVWD;

1.1.1.1
date	2022.10.08.16.09.00;	author christos;	state Exp;
branches
	1.1.1.1.2.1;
next	1.1.1.2;
commitid	kRUbAM0nqDWDQVWD;

1.1.1.2
date	2023.12.23.20.24.47;	author christos;	state Exp;
branches
	1.1.1.2.2.1
	1.1.1.2.4.1;
next	1.1.1.3;
commitid	b1hV92WYdEWo2DRE;

1.1.1.3
date	2025.02.25.19.11.34;	author christos;	state Exp;
branches;
next	;
commitid	cLFKwpXD6DqXOSKF;

1.1.1.1.2.1
date	2023.12.25.12.43.20;	author martin;	state Exp;
branches;
next	;
commitid	UCTK9IHygwOntQRE;

1.1.1.2.2.1
date	2023.12.23.20.24.47;	author martin;	state dead;
branches;
next	1.1.1.2.2.2;
commitid	yzNdlh5ioUjfxQRE;

1.1.1.2.2.2
date	2023.12.25.12.54.30;	author martin;	state Exp;
branches;
next	;
commitid	yzNdlh5ioUjfxQRE;

1.1.1.2.4.1
date	2025.08.02.05.49.47;	author perseant;	state Exp;
branches;
next	;
commitid	23j6GFaDws3O875G;


desc
@@


1.1
log
@Initial revision
@
text
@Wish list:

	Things to do before the stable release:

	make pre-release-check, HTML validator check.

	Disable -DSNAPSHOT and -DNONPROD in makedefs.

	Alias htable(3) calls to equivalent binhash(3) calls,
	and obsolete the htable(3) module.

	FILTER_README needs some text on multi-instance implementations,
	and existing multi-instance references need to be updated.

	Fix code that still uses "long" for data_size and data_offset,
	and that uses "%ld" in sscanf().

	A smart query service for live Postfix tables that outputs JSON?

	Add a pointer to
	http://mmogilvi.users.sourceforge.net/software/oauthbearer.html
	in documentation or on-line howtos.

	Read http://mmogilvi.users.sourceforge.net/software/oauthbearer.html
	and see how we can improve on the Postfix side.

	Add verp=+= to the qmgr "from=" logging. This is already
	implemented but not yet integrated.

	Need canonical Dovecot example that has virtual_mailbox_domains,
	(virtual_mailbox_maps or reject unverified_recipient), and
	virtual_transport.

	Make smtpd_relay_before_recipient_restrictions settable
	in smtpd_checks tests.

	Make the DNS resolver library pluggable, so that we can a)
	plug in a fake resolver library for DNS-related regression
	tests and make DNS tests hermetic (no external dependency;
	b) add support for non-libbind resolvers. Gracefully handle
	requests for unsupported functionality; return an error status,
	instead of terminating.

	Add a robust dnssec_probe regression test (success and fail)
	that does not break existing regression tests.

	smtp_sasl_tls_security_options = noanonymous, and make
	smtp_sasl_security_options the default dependent on the
	smtp_sasl_tls_security_options default (i.e. reverse the
	dependency). Or make them independent.

	Try to make the master throttle more distrusting. Currently,
	the master throttles a service after a child process cannot be
	created (fork() fails), or if a child process fails upon its
	first use. The master always unthrottles the service if a process
	handles a client successfully. This is sufficient to mitigate
	local errors that break all attempts to use a service. It also
	slows down stupid remote attacks as long as malicious traffic
	dominates benign traffic. Perhaps monitor a crashing percentage?
	If 50% of all connections to a service result in abnormal
	termination, that would be bad even under a non-attack scenario.

	More accurate address verification: do a quota check before
	reporting that a local(8) or virtual(8) recipient is deliverable.

	Eliminate duplicate mail submission permission checks from
	sendmail, so that they happen in postdrop only. Then, pass the
	result through the postdrop-to-sendmail protocol. This requires
	that postdrop reads all inputs before responding (the
	local_login_sender_maps check depends on the envelope
	sender). Then sendmail can save input to dead.letter (no setgid
	privilege, but it would still have to use safe_open() to avoid
	clobbering files).

	Consider removing compat_level_from_numbers() and aliases,
	because they are no longer used anywhere.

	Allow '}' at the beginning of a line. This would make multi-line
	configuration settings easier to enter. This may be true
	for main.cf, master.cf and similar files (such as database
	configuration files, but not necessarily elsewhere). So it
	may have to be a readlline flag.

	Understand what happens with DNSSEC related status fields 
	in posttls-finger when resolv.conf points to a host that
	runs no DNS server.

	Hardening the half-dane behavior: some sites may rely on
	current behavior which allows original MX domain name for
	certificate matches. Requires a new (compatibility) parameter
	setting?

	Code deduplication: migrate multi_server applications to
	event_server, because the multi_server and event_server
	skeletons are much more similar than other skeletons. In
	addition to the default event_server accept() handler, also
	register a read event callback for handling post_accept
	events. But the currrent multi_server API fits typical usage
	better.

	When a secondary instance has no multi_instance_name set,
	postmulti -i won't be able to find it.

	nbbio: exercise the sanity checks with fake msg(3) functions.

	optreset (bsd-ism) how badly do we need it?

	transport policy protocol (clone of check_policy).

	See also postscreen event-driven client for policy delegation
	below.

	smtp_line_length_limit can insert a line break in the middle
	of a multi-byte character (which is not necessarily UTF-8,
	so we can't simply look at the 8th bit). Also, note that a
	multi-byte character may span queue file record boundaries,
	for example if line_length_limit == smtp_line_length_limit.
	The only way to fix this is to make the smtp_text_out()
	routine aware of every possible multi-byte encoding.

	Replace ad-hoc code for pipe(8) flags handling, with
	infrastructure that was built for smtp(8).

	Move map descriptions from postconf(1) to DATABASE_README
	and point there. The text in DATABASE_README is less complete
	than that in postconf(1).

	make tls_pre_jail_init() safe by design for use in programs
	that implement both clients and servers.

	In smtpd(8) and postscreen(8), set the ehlo_discard_mask
	to ~0 so that STARTTLS, BDAT, DSN, etc. work only for clients
	that send EHLO.

	Wordsmithing: "replace by X" -> "replace with X" unless X
	is "responsible" for making the substitution.

	In postscreen, don't fork after 'postfix reload' when
	psc_check_queue_length (and psc_post_queue_length?) is zero.

	After I/O error, store errno in VSTREAM object before errno
	may be overwritten.

	Add some tips for logging from container:
	https://www.projectatomic.io/blog/2016/10/playing-with-docker-logging/;
	syslog_name = $myhostname/postfix; mkdir queue and data
	dir; postfix check to create queue subdirectories.

	Add postwhite as a postscreen-related project.
	https://github.com/stevejenkins/postwhite/blob/master/README.md

	XFORWARD attributes in policy protocol?

	Document postsrsd and postforward for srs-ifying. Would
	more fine-grained smtp_generic_maps support help?

	Decide whether to deprecate database configuration pathnames
	that start with ".", for example, ldap:./file/name. These forms
	are documented for ldap:, memcache:, mysql:, pgsql:, and sqlite:
	maps. Postfix daemon processes will look up files relative to the
	queue directory, but with postmap command-line processes it would
	be more natural to interpret relative pathnames relative to the
	current directory of the calling process (it would be a surprise
	if "postmap hash:./foo" would access "/var/spool/postfix/foo",
	or if "postmap hash:foo" and or "postmap hash:./foo" would access
	different files).

	Convert postalias(1) to store external-form keys, and convert
	aliases(5) to perform external-first lookup with fallback to
	internal form, to make it consistent with the rest of Postfix.
	In several years we may remove the internal-form fallbacks
	with a compatibility_level safety net.

	In the bounce daemon, set util_utf8_enable if returning an
	SMTPUTF8 message. This is wrong; if SMTPUTF8 is disabled,
	then Postfix must not turn it on.

	Add a header_body_checks extension callback in smtp_proto.c
	that implements the PASS action.

	Propagate SMTPD_PEER_CODE_XXX from smtpd(8) to cleanup(8),
	so that {client_resolve} and {_} produce consistent results.

	NO_IP_CYRUS_SASL_AUTH should be a main.cf parameter.

	Modeline support in config files to enable/disable trailing
	#comment, and to give hints about how to handle an LHS or
	RHS. This will not preserve trailing comments in lines that
	are modified with "postconf -e" and the like.

	Maintainability: replace lengthy libmilter-API argument lists
	with named parameters, as with the libtls API.
	
	Fix buflen integer overflow detection in dict*sql.c.

	Fix "make test" bitrot.

	Move DNS-based tests from porcupine.org to postfix.org, or use
	a mock DNS library (a library that presents the same API as the
	real library, but that produces canned responses).

	Document dns_ncache_ttl_fix_enable use case in POSTSCREEN_README
	and RELEASE_NOTES.

	Remove this file from the stable release.

	Things to do after the stable release:

	Specify WARN_UNUSED_RESULT for all library functions that
	pass, deliver, bounce or defer a delivery request.

	Invent some kind of type-checking wrappers for htable(3),
	ctable(3) and other modules that take and return a void*
	pointer. We already did that for variadic functions.

	TLS certificate provenance: indicate whether a subject
	name/issuer are verified or not (for example, change the
	attribute name to unverified_ccert_subject etc.).  This is
	relevant only for fingerprint-based authentication including
	DANE, and affects logging, SMTPD policy, and Milters.

	Generalize the daemon '-S' stand-alone mode, so that it can
	be used with custom configuration settings for request/reply
	regression testing. This would use the existing "-o name=value"
	support to override parameters. For example, queue_directory
	would point to a directory with sockets for fake versions of
	Postfix-internal services.

	Update the list of Sendmail macros that Postfix can send
	to Milters (auth_ssf and TLS-related).

	Update smtpd command count when rejecting or skipping input
	before command-table lookup. But then we need to count
	commands that are rejected (malformed UTF-8, tokenizer
	error, forbidden command), or skipped (noop).

	What is the best place to detect spaces in pathnames during
	installation/upgrade/packaging? postfix-install for early
	warning, and post-install as a safety net?

	When the service basename differs from the program file
	basename, either prepend the service name to the syslogname (as
	if syslog_name=postfix/service/program), or prepend the service
	name to the process name (perhaps too confusing).  The service
	indication is desirable for mail delivery transports (smtp
	versus relay) as it identifies what scheduler parameters are
	in effect, but it is also desirable for mail receiving services
	(smtp versus submission verus smtps as configured in the stock
	master.cf file). This requires exceptions for some program names
	(exclude smtpd to avoid logging postfix/smtp/smtpd which could
	result in more confusion, and maybe other program names).

	UTF8 DNS[BW]L domain name.

	Consolidate maps flags in mail_params.h instead of having
	multiple copies scattered across programs.

	Try to allow UTF-8 myhostname/mydomain, at least in bounce
	template expansion.

	In the SMTP server, do not issue an enhanced status code when
	rejecting a connection before the HELO handshake is completed.

	Maybe don't whitelist a client that has maxed out its
	per-MTA connection count limit.

	Inline support for pcre:{/pattern/=action, ...} and ditto
	support for regexp: and cidr: tables. Factor out and reuse
	code that already exists in inline: and other tables.

	Log command=good/bad statistics in postscreen?

	smtpd_checks tests either must use a DNS dummy resolver
	(override the res_search API) or all names must be under
	test.postfix.org (but that does not work for address->name
	lookups, and cannot simulate some errors).

	Reporting the original Message-ID in a bounce message
	In-Reply-To: or References: header.  In the cleanup daemon,
	grab a copy of the Message-ID and export it along with other
	header-extracted information at the top of the "extracted"
	queue file segment.  In the queue manager, extract this
	along with other header-extracted information, and forward
	the Message-ID in the bounce server notification request.

	Clobber ORCPT when sender is owner-mumble?

	Add milter_mumble_macros to the list of per-macro features.

	The pickup daemon logs warnings only when the cleanup daemon
	dit not provide a "reason" attribute. Is this logic right?

	up-convert myhostname to UTF-8 in MIME boundary strings?

	Eliminate code duplication between pcf_print_master_field()
	and pcf_print_master_entry().

	Error reporting: see if pcf_check_master_entry() and children
	can return error descriptions instead of terminating with
	a fatal error.

	Add a switch to consider postscreen deep protocol tests as
	"completed" when receiving "RSET" after "RCPT TO" and the
	session has passed all tests up to that point. RSET becomes
	like QUIT except perhaps that it does not hang up.

	apipe: map, splits results into address lists and performs
	lookups for the invidual addresses, converting back and
	forth between external and internal forms.

	Clarify that receive_override_options have no effect with
	smtpd_proxy_filter.

	Document the relative order of header_checks, address
	rewriting, milters.

	NOT: Table-driven case folding and case-insensitive string
	comparison specifically for UTF-8. Use libicu functions
	instead.

	When downgrading message/global to 7bit, is quoted-printable
	the appropriate encoding? Should it be base64?

	Should we encode headers with RFC 2047, when that is the
	only reason that Postfix cannot deliver to a non-UTF8SMTP
	server? Probably not in the general case. What about 
	Postfix as a gateway server that converts UTF8SMTP
	for delivery to non-UTF8SMTP environments?

	Document and test restriction_classes example for 
	smtpd_policy_service_default_action.

	Don't accept AUTH or other features that are not announced
	in the EHLO response.

	Suggested at Mailserver conference: Postscreen RDNS-based
	reputation (but this makes postscreen performance highly
	unpredicable because it introduces a dependency on random
	DNS servers).

	Suggested at Mailserver conference: a way to select a
	specific field in a table, presumably as the result value.
	This may be done with a filtermap{i,j,...}: table that propagates
	only the specified field(s).

	Discourage the use of "after 220" tests in POSTSCREEN_README
	and the documentation of individual parameter settings.

	To un-break "make tests" under src/smtpd, make tests
	independent from the DNS and native routines for host
	name/address lookup.

	Make been_here flag BH_FLAG_FOLD configurable for masochists.

	Replace some redundant TLS_README sections with pointers
	to FORWARD_SECRECY_README.

	Move html/index.html source to proto/.

	How hard is it to follow canonical or virtual mapping
	for the purpose of address validation? We must never
	reject a valid address.

	Preserve case in smtpd_resolve_addr() and add a structure
	member for the case-folded address. IIRC some Milter macro
	needs to show the unfolded address.

	Per SASL account rate limits. This requires new infrastructure
	that maintains stats by SASL account instead of client IP
	address.

	Watchdog timer in postmap/postalias.

	Begin code revision, after DANE support stabilizes.  This
	should be one pass that changes only names and no code.

	recipient_delimiters = $recipient_delimiter for BC

	All source code must specify its original author and
	license statement. Some code modules specify Lutz Jaenicke
	as the original author and fall under his liberal license.
	Code that is added to such a module has the same license
	(or at least something that is not more restrictive). Code
	modules without input from Lutz Jaenicke must state its
	original author and license (preferably no more restrictive
	than Postfix's own license). Currently, too many files list
	Wietse as the original author, and Lutz Jaenicke's license,
	which is wrong.

	We have smtp_host_lookup, smtp_dns_resolver_options, and
	now smtp_dns_support_level.  Of these, smtp_dns_resolver_options
	is orthogonal but the rest has overlap.

	There needs to be support for automatic migration from the
	deprecated disable_dns_lookups feature to the preferred
	smtp_dns_support_level feature. This support needs to exist
	for several releases before the deprecated feature can be
	removed.

	End code revision, after DANE support stabilizes.

	It would be nice if "bare username" lookup is not hard-coded
	for domains in the local address class.

	Don't forget Apple's code donation for fetching mail from
	IMAP server.

	Should postconf -o refuse to work without the -x option?

	Make 30s caching (feature 20070414) configurable, such that
	0 means no caching.

	Make errno white/blacklist for getpwnam_r etc. and mailbox
	write errors.

	smtpd_muble_restrictions rule names are case-insensitive.
	restriction_classes values are case-sensitive but should
	be case-insensitive for consistency with smtpd_muble_restrictions.

	Make "rename" the default when postmapping a DB file
	(later: use copy+rename for postmap -i, postmap -d).

	Service-name parameters aren't documented in daemon manpages.

	When faking up the DSN ORCPT, don't send bare usernames
	from local command-line submission.

	lmtp_assume_final is broken. A 2XX response does not imply
	final delivery. The Sieve language implements accept-then-bounce.

	postscreen event-driven plug-in interface to send out a
	query in parallel with the Pregreet and DNSBL tests, using
	a simplified version of the policy delegation protocol.

	Parallelized queue preprocessing: rip out the queue manager
	code to read queue files and resolve recipients, and run
	it in parallel processes. The queue manager then processes
	their results as they become available.  This would eliminate
	the qmgr<->trivial-rewrite bottleneck. This can also eliminate
	much of the scheduling disadvantage of a single queue manager
	compared to hundreds of mail receiving or sending processes
	(especially if there is a way to scan the queue in parallel).

	Memory pools for same-type memory objects.  This can be
	used to either increase memory locality for frequently-allocated
	objects (MRU allocation) or to make use-after-free bugs
	more detectable (use LRU allocation and wipe the object
	immediately after free().  Finally, same-type memory pools
	prevent object type errors with use-after-free bugs.

	"no-cache" option for selected postscreen tests?

	Need a new DICT flag to indicate that a map handle supports
	locking.  If it doesn't (as with memcache or proxymap
	handles), then postscreen etc. don't need to close a cache
	file after "postfix reload".  After a fork() it is OK to
	keep using a memcache or proxymap handle, because the parent
	exits immediately.  For this to work, the memcache client
	needs to propagate the flag from a persistent backup map,
	but the proxymap protocol should not propagate this to the
	client.

	Different TTL values for different DNSBL sources?

	Replace master(8) SIGHUP by very simple socket protocol to
	allow reload of a specific service.

	postscreen: in the dummy SMTP engine, log the protocol state
	at time of violation (like smtpd, set state->where initially
	to CONNECT, then update it with the name of the last "known"
	command, or set it to "unimplemented").

	The discussion of postscreen cache configuration is in the
	wrong place (how whitelisting works). Move it to the section
	about configuring postscreen.

	Before proxymap can be exposed to the network (primarily
	to share postscreen or verify caches), need to enforce
	limits on attribute string name and value length in IPC
	protocols.  10-20KB seems OK. We need to enforce content
	sanity checks (for example, no control characters; Postfix
	does not pass around multi-line data in table lookups). The
	VSTREAM library already supports read/write deadlines.  We
	need to use attack-resistant code for numeric conversion.

	move flush_init() etc. from defer service clients to the
	bounce daemon? Postfix works best when work can be spread
	out over many clients, instead of over a few servers.

	multi_connect() function that takes a list of inet:host:port
	and/or unix:pathname specs, with an explicit "inet" prefix
	argument to handle applications that use host:port only.
	This will simplify multi-host implementation for memcache
	client, dovecot client, and other.

	dict_memcache: treat "bad" key as cache miss, i.e.  read/write
	the backup database as if the cache did not exist. This
	does not help because most Postfix maps (virtual, canonical,
	access, transport, ...) also don't support spaces in keys.

	postscreen: keep the cache open after "postfix reload" when
	it is remote (type memcache: or proxy:). This does not work
	because memcache can use a non-proxied file as backup).

	What is the feasibility of adding an mta_name (personality)
	attribute that is propagated via queue files and delivery
	agent requests? It would default to myhostname.

	Major performance improvement opportunity (that is until
	everyone runs Postfix queues on SSDs).  Investigate the
	viability of a daemon that produces incoming and postdrop
	queue files on request (in reality it would maintain a
	limited queue of "spare" files). Central queue file allocation
	reduces the I/O performance disadvantage that qmgr has when
	100 smtpd processes are receiving mail, or when lots of
	mail is submitted with the sendmail command line.  When an
	smtpd process accepts MAIL FROM, a cleanup daemon requests
	a queue file and receives a queue ID + file handle from the
	queue file daemon.  If the queue file daemon is down, the
	cleanup daemon creates the file itself like it does now;
	this can be hidden in the mail_stream library module.  If
	the mail transaction is aborted, then the cleanup daemon
	gives the queue file back to the queue file daemon's "spare"
	file pool, saving most of the overhead of creating and
	deleting a queue file (the file would still need to be
	renamed at the start of the next mail transaction).  If the
	cleanup daemon is unable to give a file back, then it can
	delete the file like it does now; this can be hidden in the
	mail_stream library module.  The whole thing can be
	transparently added to Postfix by adding calls to a
	queue-file-service client to the mail_queue_enter() and
	mail_queue_remove() library routines.  Other advantages:
	1) negligible performance hit when queue file allocation
	happens earlier, so that logging and milters have a queue
	ID for the whole transaction not just the first valid
	recipient; 2) by not removing every queue files we get most
	of the performance gain of a queue based on append/truncate
	instead of the much more expensive create/delete.

	Investigate viability of Sendmail dns maps.

	Make the rules for how to use close-on-exec more explicit.

	Provide separate timeout control for dict_proxy client,
	rewrite client, resolve client, cleanup client, and so on.
	Perhaps a timeout argument to the mail_connect() routines.

	Trick from amavisd: save listen socket/fifo/etc state, clear
	their close-on-exec flags, exec the same program file to
	re-initialize (with saved socket state on command line or
	in environment), then restore the listen socket/fifo/etc
	close-on-exec flags.  This could be a way to mitigate the
	impact of memory/file leaks, and to implement "postfix
	reload" support for master(8) features that currently don't
	support this. 

	Sub-second time resolution. The first benefit is to make
	per-destination rate delays more usable. Other applications
	will come up once the support exists. The straightforward
	approach is to represent all time intervals in milliseconds,
	and to update all code that makes system calls with a time
	argument (as well as the compiled-in upper and lower time
	parameter bounds, which are currently in seconds).
	Unfortunately, that limits he maximum time interval to less
	than 25 days on 32-bit systems, and is likely to break
	compatibility (for starters, it cannot even deal with the
	compiled-in 100d upper bound on the queue file lifetime).
	A second option is to have a "compatibility" time base
	switch between milliseconds and seconds; this means extra
	changes to all code that makes system calls with a time
	argument, and the way that the compiled-in upper and lower
	bounds are specified.  Some of this can be encapsulated in
	macros like time_to_sec(t), time_to_msec(t) and sec_to_time(t).
	Finally, it is relatively easy to replace the events(3)
	interface to use "double" for the time delay arguments, but
	it is a major pain to convert all main.cf time parameters
	into doubles (converting only some leads to a documentation
	nightmare).

	Address verify cache: allow a negative cache "refresh"
	result to purge a "positive" cache entry in some safe manner.
	Currently, the negative cache "refresh" result is discarded,
	address verify cache lookup returns OK, and each lookup
	forces a "refresh" probe until the entry expires.

	Some Sendmail configurations trigger sub-optimal behavior
	when the postscreen_whitelist_interfaces parameter lists
	primary MX addresses only.  When postscreen's "deep protocol
	tests" are successful on the primary MX address (i.e. they
	result in 4XX responses to RCPT TO), some Sendmail
	configurations keep the primary MX connection open until
	AFTER they finish talking to the backup MX address.  The
	problem is that the backup connection runs into a WHITELIST
	VETO condition because the whitelisting database has not
	yet been updated with the PASS NEW result for the primary
	MX connection.  Unfortunately postscreen can't update the
	whitelisting database before the primary MX connection is
	closed, because a client may still make a mistake.

	In the SMTP server, check if the connection is closed before
	replying to ".", and discard the message if the reply can't
	be sent. This reduces the time window for RFC 1047 message
	duplication, and may even prevent the delivery of some spam.
	http://www.exim.org/lurker/message/20070416.103159.9d5ff0ce.en.html
	This requires splitting the SMTP server's commit operation
	into two operations: first, a tentative commit operation
	that performs most of the I/O and processing in milters and
	in the cleanup server; second, a final commit operation
	that is executed only if the remote SMTP client hasn't hung
	up in the mean time. Unfortunately, SMTP-based before-queue
	content filters don't support a tentative commit operation.

	Find out how to reproduce Berkeley DB bogus ENOENT errors.
	postscreen does not log this with Berkeley DB 1 (FreeBSD
	4..8), 4.7.25 (Ubuntu 9.04) and 4.8.24 (Ubuntu 10.04).

	postconf command-line option to show the compile-time
	settings (CCARGS, AUXLIBS) in case binary packages
	don't install the makedefs.out file.

	events.c: cache the side effects of file descriptor event
	enable/disable operations in user space, and do bulk kernel
	updates at event_loop() time.  This can eliminate costly
	system calls with successive event disable/enable operations
	on the same file descriptor. This can also eliminate the
	need for tricky code that tries to avoid the expense of
	successive disable/enable operations. Such code is likely
	to introduce bugs.

	When does it pay off to send domains in the active queue
	to a DNS prefetch daemon? Could this generalize to a dynamic
	transport map that piggy-backs domains with the same MX
	host into the same mail delivery transaction?

	tlsproxy(8) should receive TLS preferences from postscreen(8)
	and smtpd(8), instead of reading them from main.cf. This
	means that many tlsproxy_ parameters become postscreen_
	parameters, and that tls_server_init() parameters move to
	to tls_server_start(). That is a significant API change.
	It also means tlsproxy can't open all files before chroot().

	anvil rate limit for sasl_username.

	Encapsulate nbbio buffer access and update by tlsproxy.

	Full-duplex support for tlsproxy(8). This requires updating
	events(3) and nbbio(3).

	Register automagic destructor for object attached to VSTREAM.

	Use different ipc time limits for email message transactions
	(smtpd, pickup)->cleanup and for quick query/reply transactions
	such as address rewriting/resolution. Beware of large time
	limits for local or virtual alias expansion.

	permit_tempfail_action (default: defer_if_reject) to be
	used as the default value for dnswl_tempfail_action and
	rhswl_tempfail_action. Steal liberally from the code that
	implements unverified_recipient_tempfail_action etc.

	Support filtering of messages that are generated by Postfix:
	This would apply to postmaster notices and bounce messages
	(DKIM), and address verification (BATV).

	Consistency: in postconf.proto make <dt>..</dt> tags bold.

	Would it help if there were different cleanup_service
	parameter names for different message paths? smtpd(8) uses
	the same cleanup_service value for receiving remote mail
	and for submitting postmaster problem reports. Do we need
	separate mumble_cleanup_service_name parameters for "inject",
	"notify" and "forward" (with backwards compatible defaults)?

	IF/ENDIF support for CIDR tables.

	Need a regular expression table to translate address
	verification responses into hard/soft/accept reply codes.

	Is there a way to make sendmail -V work after local alias
	expansion? Majordomo-like mailing lists would benefit from
	this; the example in VERP_README does not work in the general
	case.

	When an alias is a member of an :include: list with owner-
	alias, local(8) needs an option to deliver alias or alias->user
	indirectly. What happens when an :include: list with owner-
	alias includes another list?

	Don't allow empty result values in pcre and regexp maps.
	Postfix doesn't allow them anywhere else (check this).

	Make PCRE_MAX_CAPTURE configurable.

	Add some checks for tokens starting with #. A challenge
	is to report sensible context from the guts of some low-level
	parser, without introducing a great deal of clumsiness.

	Add sendmail macros for {verify} and maybe other TLS info.

	Find out if we are doing the correct thing by looking at
	state->milter_reject_text when expanding {rcpt_addr} or
	{rcpt_host}.

	Find out why post_mail() etc. block when the qmgr fifo is
	full (answer: trigger_timeout). How can this cause delays
	in the queue manager?  When a recipient bounces during
	(transport, nexthop, address) resolution, it is redirected
	to the error or retry mailer; and bounce-after-delivery is
	asynchrounous so it can't block the queue manager, either.

	How to ensure that proxy_read_maps is processed after all
	its dependencies are initialized, or just bite the bullet
	and rewrite the parameter initialization code.

	The cleanup virtual alias expansion limit does not really
	deliver on its promises. 1) It promises to truncate the
	result without aborting delivery, which would be undesirable
	anyway, but that is not what it does, so that is good.  2)
	It keeps all the recipients from multi-recipient database
	lookup, then terminates further recursion when the result
	exceeds the expansion limit. This behavior achieves the
	original goal that all things shall have a finite size (even
	though but we don'really care how large they are) but may
	result in surprises when recipients are listed in virtual
	alias domains or need expansion for other reasons.  In a
	phone call with Victor, a reasonable way out is to set the
	limit to some large number (100000) and abort delivery when
	the result exceeds the limit.

	Should the postscreen save permanent white/black list lookup
	results to the temporary cache, and query the temporary
	cache first? Skipping white/black list lookups will speed
	up the handling of "good" clients without a permanent
	whitelist entry.  Of course, this means that updates to the
	white/black lists do not immediately take effect. Workarounds:
	1) use a shorter temporary cache TTL for clients on the
	permanent black/white lists; 2) ignore cached white/black
	list lookup results after "postfix reload"; 2) adjust the
	logging, for example "WHITELISTED address (cached)" and
	"BLACKLISTED address (cached)" to eliminate surprises.
	Comparing the cache entry time with the white/blacklist
	file modification time is not foolproof: for example, pcre
	or CIDR tables are read only once.

	It would be nice if the generic dict_cache(3) cache manager
	could postpone process suicide until cache cleanup is
	completed (but that is not possible when postscreen forks
	into the background to finish already-accepted connections,
	and it is not desirable when a host is being shut down).

	When postscreen drops a connection, a 521 "greeting" should
	be of the form "521 servername..." and not have an enhanced
	status code. The "521 5.7.1" form can be used after EHLO.
	Of course no spammer is going to complain about Postfix
	SMTP compliance.

	Find a place to document all the mail routing mechanisms
	in one place so people can figure out how Postfix works.

	The access map BCC action is marked "not stable", perhaps
	because people would also expect BCC actions in header/body_checks.
	How much would it take to make the queue file editing code
	generally usable?

	Move smtpd_command_filter into smtpd_chat_query() and update
	the session transcript (see smtp_chat_reply() for an example).

	SMTP connection caching without storing connections, to
	improve TLS mail delivery performance.

	Should not milter8_mail_event() unset the "hold" default
	reply? Better, the default reply should not be used for
	this purpose.

	Don't send MASTER_STAT_TAKEN/MASTER_STAT_AVAIL when a server
	runs with process limit of 1. But this means the master
	never learns that the process is successful and will always
	pause $service_throttle_time before restarting a failed service.

	Don't bother maintaining a per-service lockfile when a
	server runs with process limit of 1. The purpose of the
	lockfile is to avoid thundering herd problems when the kernel
	wakes up multiple processes for each new client connection.

	Implement PREPEND action for milter_header_checks. Save the
	to-be-prepended text to buffer, then emit it along with the
	new header.

	Fix the header_body_checks API, so that the name of the map
	class (e.g. milter_header_checks) is available for logging.

	Fix the mime_state and header_body_checks APIs, so that
	they use VSTRINGs. This simplifies REPLACE actions.

	Update FILTER_README for multi-instance support, and rename
	the old document to FILTER_LEGACY_README.

	Need to sign delivery status notifications, to avoid surprises
	when eventually people start enforcing DKIM etc. signatures.

	Either document or remove the internal_mail_filter_classes
	feature (it's disabled by default).

	Make the "unknown recipient" test configurable as
	first|last|never, with "yes"=="last" for backwards
	compatibility. The "first" setting is good for performance
	(stress=yes) when all users are defined in local files; but
	it may perform worse when users are in networked tables.

	Cleanup: make DNSBL query format configurable beyond the
	client's reversed IP address.

	With 'final delivery' in the LMTP client, need an option
	to also add delivered-to and other pipe(8) features.  This
	requires making mail_copy() functionality available in
	non-mailbox context.

	Cleanup: modernize the "add missing From: header" code, to
	``phrase <addr>'' form. Most likely, quote the entire phrase
	if it contains any text that is special, then rfc822_externalize
	the whole thing.

	SMTP server: make the server_addr and server_port available
	to policy server, Dovecot, and perhaps Milters.

	Med: local and remote source port and IP address for smtpd
	policy hook.

	Maybe change maps_rbl_reject_code default to 521, and
	update wording in STRESS_README.

	Encapsulate time_t comparisons so that they can be made
	system dependent (use difftime() where available).

	Encapsulate time_t conversions (e.g. REC_TYPE_TIME) so that
	they can be made system dependent.

	Plan for time_t larger than long, or wait for LP64 to
	dominate the world?

	Make "AUTH=<>" appendage to MAIL FROM configurable, enabled
	by default.

	To support ternary operator without a huge parsing effort,
	consider ${value?{xxx}:{yyy}} where ${name} is existing
	syntax, and where ?{text} and :{text} are new syntax that
	is unlikely to break existing configurations. Or perhaps
	it's just too ugly.

	Write delivery rate delay example (which _README?) and auth
	failure cache example (SASL_README). Then include them in
	SOHO_README.

	Look for alternatives for the use of non_smtpd_milters.
	This involves some way to force local submissions to go
	through a local SMTP client and server, without triggering
	"mail loops back to myself" false alarms. The advantage is
	that it makes smtpd_mumble_restrictions available for local
	and remote mail; the disadvantage is that it makes local
	submissions more dependent on networking.  One possibility
	is to use "pickup -o content_filter=smtp:127.0.0.1:10025",
	or a dedicated SMTP client/server on UNIX-domain sockets;
	we could also decide to always suppress "mail loop" detection
	for loopback connections.  Another option is to have the
	pickup or cleanup server drive an SMTP client directly;
	this would require extension of the mail_stream() interface,
	plus a way to handle bounced/deferred recipients intelligently,
	but it would be at odds with Postfix design where delivery
	agents access queue files directly; exposing delivery agents
	to raw queue files violates another Postfix design principle.

	Consolidate duplicated code in *_server_accept_{pass,inet}().

	Consolidate duplicated code in {inet,unix,upass}_trigger.c.

	In the SMTP client, handle 421 replies in smtp_loop() by
	having the input function raise a flag after detecting 421
	(kill connection caching and be sure to do the right thing
	with RSET probes), leave the smtp_loop() per-command reply
	handlers unchanged, and have the smtp_loop() reader loop
	bail out with smtp_site_fail("server disconnected after
	%s", where), but only in the case that it isn't already in
	the final state. But first we need to clean up the handling
	of do/don't cache, expired, bad and dead sessions.

	Combine smtpd_peer.c and qmqpd_peer.c into a single function
	that produces a client context object, and provide attribute
	print/scan routines that pass these client context objects
	around. With this, we no longer have to update multiple
	pieces of code when a client attribute is added. Ditto for
	SASL and TLS context.

	Don't log "warning: XXXXX: undeliverable postmaster
	notification discarded" for spam from outside.

	Really need a cleanup driver that allows testing against
	Milter applications instead of synthetic events. This would
	have to provide stubs for clients that talk to Postfix
	daemon processes. See if this approach can also be used for
	other daemons.

	smtpd(8) exempts $address_verify_sender from access controls,
	but it doesn't know whether cleanup(8) or delivery agents
	modify the sender. Would it be possible to "calibrate" this
	exemption, perhaps by having delivery agents pass the probe
	sender to the verify server, keeping in mind that the probe
	sender may differ per delivery agent due to output rewriting.

	Update attr_print/scan() so they can send/receive file
	descriptors. This simplifies kludgy code in many daemons.

	Would there be a problem adding $smtpd_mumble_restrictions
	and $smtpd_sender_login_maps to the default proxy_read_maps
	settings?

	Remove defer(8) and trace(8) references and man pages. These
	are services not program names. On the other hand we have
	man pages for lmtp(8) and smtp(8), but not for relay(8).
	Likewise, retry(8) does not have a man page.

	Bind all deliveries to the same local delivery process,
	making Postfix perform as poorly as monolithic mailers, but
	giving a possibility to eliminate duplicate deliveries.

	Maybe declare loop when resolve_local(mxhost) is true?

	Update message content length when adding/removing headers.

	Need scache size limit.

	REDIRECT should override original recipient info, and
	probably override DSN as well.

	Update FILTER_README with mailing list suggestions to tag
	with a badness indicator and then filter down-stream.

	Make null local-part handling configurable: either expand
	into mailer-daemon (current behavior) or disallow (strict
	behavior, currently implemented only in the SMTP server).

	Add M flag (enable multi-recipient delivery) to pipe daemon.

	The usage of TLScontext->cache_type is unclear. It specifies
	a TLS session cache type (smtpd, smtp, or lmtp), but it is
	sometimes used as an indicator that TLS session caching is
	unavailable.  In reality, that decision is made by not
	registering call-back functions for cache maintenance.

	Postfix TLS library code should copy any strings that it
	receives from the application, instead of passing them
	around as pointers. TLScontext->cache_type is a case in
	point.

	Are transport:nexthop null fields the same as in the case
	of default_transport etc. parameters?

	Don't lose bits when converting st_dev into maildir file
	name. It's 64 bits on Linux. Found with the BEAM source
	code analyzer. Is this really a problem, or are they just
	using 64 bits for upwards compatibility with LP64 systems?

	Do or don't introduce unknown_reverse_client_reject_code.

	Check that "UINT32 == unsigned int" choice is ok (i.e. LP64
	UNIX).

	Tempfail when a Milter application tries to negotiate content
	access, while it is configured in an SMTP server that runs
	before the smtpd_proxy filter.

	Log DSN original recipient when rejecting mail.

	Keep whitespace between label and ":"?

	Make the map case folding/locking options configurable, if
	not at run-time then at least at compile time so we get
	consistent behavior across applications.

	Investigate what it would take to eliminate oqmgr, and to
	make the old behavior configurable in a unified queue
	manager.  This would shave another 2.7 KLOC from the source
	footprint.

	Document the case folding strategy for match_list like
	features.

	Eliminate the (incoming,deferred)->active rename operation.
	This requires an in-memory hash of queue file names to avoid 
	duplicate open() operations.

	Softbounce fallback-to-ISP for SOHO users. This heuristic
	assumes that when direct-to-MX delivery fails with 5XX,
	delivery via the ISP may still succeed.  This could be
	implemented by enabling soft bounces for destinations other
	than the smtp_fallback_relay. So the only benefit of this
	over the existing soft_bounce feature is that it has no
	effect on smtp_fallback_relay deliveries.

	Centralize main.cf parameter input so that defaults work
	consistently. What about parameter names that are prefixed
	with mail delivery transport names?

	Fix default time unit handling so that we can have a default
	bounce lifetime of $maximal_queue_lifetime, without causing
	panics when a non-default maximal_queue_lifetime setting
	includes no time unit.

	After the 20051222 ISASCII paranoia, lowercase() lowercases
	ASCII text only.

	Privacy: remove local command/pathname details from remote
	delivery status reports, and log them via local msg_warn().

	Is it safe to cache a connection after it has been used for
	more than some number of address verification probes?

	Try to recognize that Resent- headers appear in blocks,
	newest block first. But don't break on incorrect header
	block organization.

	Hard limits on cache sizes (anvil, specifically).

	Laptop friendliness: make the qmgr remember when the next
	deferred queue scan needs to be done, and have the pickup
	server stat() the maildrop directory before searching it.

	Low: replace_sender/replace_recipient actions in access
	maps, so they can be used in policy servers?

	Low: configurable order of local(8) delivery methods.

	Med: smtp_connect_timeout_budget (default: 3x smtp_connect_timeout)
	to limit the total time spent trying to connect.

	Med: transform IPv4-in-IPv6 address literals to IPv4 form
	when comparing against local IP addresses?

	Med: transform IPv4-in-IPv6 address literals to IPv4 form
	when eliminating MX mailer loops?

	Med: Postfix requires [] around IPv6 address information
	in match lists such as mynetworks, debug_peer_list etc.,
	but the [] must not be specified in access(5) maps. Other
	places don't care.  For now, this gotcha is documented in
	IPV6_README and in postconf(5) with each feature that may
	use IPv6 address information. The general recommendation
	is not to use [] unless absolutely necessary.

	Med: the partial address matching of IPv6 addresses in
	access(5) maps is a bit lame: it repeatedly truncates the
	last ":octetpair" from the printable address representation
	until a match is found or until truncation is no longer
	possible.  Since one or more ":" are usually omitted from
	the printable IPv6 address representation, this does not
	really try all the possibilities that one might expect to
	be tried. For now, this gotcha is documented in access(5).

	Low: reject HELO with any domain name or IP address that
	this MTA is the final destination for.

	Low: should the Delivered-To: test in local(8) be configurable?

	Low: make mail_addr_find() lookup configurable.

	Low: update events.c so that 1-second timer requests do not
	suffer from rounding errors. This is needed for 1-second
	SMTP session caching time limits. A 1-second interval would
	become arbitrarily short when an event is scheduled just
	before the current second rolls over.

	Low: configurable internal/system locking method.

	Low: add INSTALL section for pre-existing Postfix systems.

	Low: add INSTALL section for pre-existing RPM Postfixes.

	Low: disallow smtpd_recipient_limit < 100 (the RFC minimum).

	Low: noise filter: allow smtp(8) to retry immediately if
	all MXes return a quick ECONNRESET or 4xx reply during the
	initial handshake. Retry once? How many times?

	Low: make post-install a "postfix-only script" so it can
	take data from the environment instead of main.cf.

	Low: randomize deferred mail backoff.

	Med: separate ulimit for delivery to command?

	Med: postsuper -r should do something with recipients in
	bounce logfiles, to make sure the sender will be notified.
	To be perfectly safe, no process other than the queue manager
	should move a queue file away from the active queue.

	This could involve tagging a queue file, and use up another
	permission bit (postsuper tags a "hot" file, qmgr requeues it).

	Low: postsuper re-run after renaming files, but only a
	limited number of times.

	Low: smtp-source may block when sending large test messages.

	Med: find a way to log the sender address when MAIL FROM
	is rejected due to lack of disk space.

	Low: revise other local delivery agent duplicate filters.

	Low: all table lookups should consistently use internalized
	(unquoted) or externalized (quoted) forms as lookup keys.
	smtpd, qmgr, local, etc. use unquoted address forms as keys.
	cleanup uses quoted forms.

	Low: have a configurable list of errno values for mailbox
	or maildir delivery that result in deferral rather than
	bouncing mail. What about "killed by signal" exits?

	Low: after reorganizing configuration parameters, add flags
	to all parameters whose value can be read from file.

	Medium: need in-process caching for map lookups. LDAP servers
	seem to need this in particular. Need a way to expire cached
	results that are too old.

	Low: generic showq protocol, to allow for more intelligent
	processing than just mailq. Maybe marry this with postsuper.

	Low: default domain for appending to unqualified recipients,
	so that unqualified names can be delivered locally.

	Low: The $process_id_directory setting is not used anywhere
	in Postfix. Problem reported by Michael Smith, texas.net.
	This should be documented, or better, the code should warn
	about attempts to set read-only parameters.

	Low: while converting 8bit text to quoted-printable, perhaps
	use =46rom to avoid having to produce >From when delivering
	to mailbox.

	virtual_mailbox_path expression like forward_path, so that
	people can specify prefix and suffix.
@


1.1.1.1
log
@Import Postfix-3.7.3 (previous version was 3.5.2)

This is the Postfix 3.7 (stable) release.

The stable Postfix release is called postfix-3.7.x where 3=major
release number, 7=minor release number, x=patchlevel.  The stable
release never changes except for patches that address bugs or
emergencies. Patches change the patchlevel and the release date.

New features are developed in snapshot releases. These are called
postfix-3.8-yyyymmdd where yyyymmdd is the release date (yyyy=year,
mm=month, dd=day).  Patches are never issued for snapshot releases;
instead, a new snapshot is released.

The mail_release_date configuration parameter (format: yyyymmdd)
specifies the release date of a stable release or snapshot release.

If you upgrade from Postfix 3.5 or earlier, read RELEASE_NOTES-3.6
before proceeding.

License change
---------------

This software is distributed with a dual license: in addition to the
historical IBM Public License 1.0, it is now also distributed with the
more recent Eclipse Public License 2.0. Recipients can choose to take
the software under the license of their choice. Those who are more
comfortable with the IPL can continue with that license.

Bugfix for messages not delivered after "warning: Unexpected record type 'X'
============================================================================

Due to a bug introduced in Postfix 3.7.0, a message could falsely
be flagged as corrupt with "warning: Unexpected record type 'X'".

Such messages were moved to the "corrupt" queue directory, where
they may still be found. See below for instructions to deal with
these falsely flagged messages.

This could happen for messages with 5000 or more recipients, or
with fewer recipients on a busy mail server. The problem was first
reported by Frank Brendel, reproduced by John Alex.

A file in the "corrupt" queue directory may be inspected with the
command "postcat /var/spool/postfix/corrupt/<filename>. If delivery
of the file is still desired, the file can be moved back to
/var/spool/postfix/incoming after updating Postfix and executing
"postfix reload".

Major changes - configuration
-----------------------------

[Feature 20210605] Support to inline the content of small cidr:,
pcre:, and regexp: tables in Postfix parameter values.

Example:

    smtpd_forbidden_commands =
	CONNECT GET POST regexp:{{/^[^A-Z]/ Thrash}}

This is the new smtpd_forbidden_commands default value. It will
immediately disconnect a remote SMTP client when a command does not
start with a letter (a-z or A-Z).

The basic syntax is:

/etc/postfix/main.cf:
    parameter = .. map-type:{ { rule-1 }, { rule-2 } .. } ..

/etc/postfix/master.cf:
    .. -o { parameter = .. map-type:{ { rule-1 }, { rule-2 } .. } .. } ..

where map-type is one of cidr, pcre, or regexp.

Postfix ignores whitespace after '{' and before '}', and writes each
rule as one text line to a nameless in-memory file:

in-memory file:
    rule-1
    rule-2
    ..

Postfix parses the result as if it is a file in /etc/postfix.

Note: if a rule contains $, specify $$ to keep Postfix from trying
to do $name expansion as it evaluates the parameter value.

Major changes - lmdb support
----------------------------

[Feature 20210605] Overhauled the LMDB client's error handling, and
added integration tests for future-proofing. There are no visible
changes in documented behavior.

Major changes - logging
-----------------------

[Feature 20210815] To make the maillog_file feature more useful,
the postlog(1) command is now set-gid postdrop, so that unprivileged
programs can use it to write logging through the postlogd(8) daemon.
This required hardening the postlog(1) command against privilege
escalation attacks. DO NOT turn on the set-gid bit with older
postlog(1) implementations.

Major changes - pcre2 support
-----------------------------

[Feature 20211127] Support for the pcre2 library (the legacy pcre
library is no longer maintained). The Postfix build procedure
automatically detects if the pcre2 library is installed, and if it
is unavailable, the Postfix build procedure will detect if the
legacy pcre library is installed. See PCRE_README if you need to
build Postfix with a specific library.

Visible differences: some error messages may have a different text,
and the 'X' pattern flag is no longer supported with pcre2.

Major changes - security
------------------------

[Feature 20220102] Postfix programs now randomize the initial state
of in-memory hash tables, to defend against hash collision attacks
involving a large number of attacker-chosen lookup keys. Presently,
the only known opportunity for such attacks involves remote SMTP
client IPv6 addresses in the anvil(8) service. The attack would
require making hundreds of short-lived connections per second from
thousands of different IP addresses, because the anvil(8) service
drops inactive counters after 100s. Other in-memory hash tables
with attacker-chosen lookup keys are by design limited in size. The
fix is cheap, and therefore implemented for all Postfix in-memory
hash tables. Problem reported by Pascal Junod.

[Feature 20211030] The postqueue command now sanitizes non-printable
characters (such as newlines) in strings before they are formatted
as json or as legacy output. These outputs are piped into other
programs that are run by administrative users. This closes a
hypothetical opportunity for privilege escalation.

[Feature 20210815] Updated defense against remote clients or servers
that 'trickle' SMTP or LMTP traffic, based on per-request deadlines
and minimum data rates.

Per-request deadlines:

The new {smtpd,smtp,lmtp}_per_request_deadline parameters replace
{smtpd,smtp,lmtp}_per_record_deadline, with backwards compatible
default settings. This defense is enabled by default in the Postfix
SMTP server in case of overload.

The new smtpd_per_record_deadline parameter limits the combined
time for the Postfix SMTP server to receive a request and to send
a response, while the new {smtp,lmtp}_per_record_deadline parameters
limit the combined time for the Postfix SMTP or LMTP client to send
a request and to receive a response.

Minimum data rates:

The new smtpd_min_data_rate parameter enforces a minimum plaintext
data transfer rate for DATA and BDAT requests, but only when
smtpd_per_record_deadline is enabled. After a read operation transfers
N plaintext bytes (possibly after TLS decryption), and after the
DATA or BDAT request deadline is decreased by the elapsed time of
that read operation, the DATA or BDAT request deadline is increased
by N/smtpd_min_data_rate seconds. However, the deadline is never
increased beyond the smtpd_timeout value. The default minimum data
rate is 500 (bytes/second) but is still subject to change.

The new {smtp,lmtp}_min_data_rate parameters enforce the corresponding
minimum DATA transfer rates for the Postfix SMTP and LMTP client.

Major changes - tls support
---------------------------

[Cleanup 20220121] The new tlsproxy_client_security_level parameter
replaces tlsproxy_client_level, and the new tlsproxy_client_policy_maps
parameter replaces tlsproxy_client_policy. This is for consistent
parameter naming (tlsproxy_client_xxx corresponds to smtp_tls_xxx).
This change was made with backwards-compatible default settings.

[Feature 20210926] Postfix was updated to support OpenSSL 3.0.0 API
features, and to work around OpenSSL 3.0.0 bit-rot (avoid using
deprecated API features).

Other code health
-----------------

[typos] Typo fixes by raf.

[pre-release checks] Added pre-release checks to detect a) new typos
in documentation and source-code comments, b) missing entries in
the postfix-files file (some documentation would not be installed),
c) missing rules in the postlink script (some text would not have
a hyperlink in documentation), and d) missing map-based $parameter
names in the proxy_read_maps default value (the proxymap daemon
would not automatically authorize some proxied maps).

[memory stream] Improved support for memory-based streams made it
possible to inline small cidr:, pcre:, and regexp: maps in Postfix
parameter values, and to eliminate some ad-hoc code that converted
tlsproxy(8) protocol data to or from serialized form.

*************************************************************************

This is the Postfix 3.6 (stable) release.

The stable Postfix release is called postfix-3.6.x where 3=major
release number, 6=minor release number, x=patchlevel. The stable
release never changes except for patches that address bugs or
emergencies. Patches change the patchlevel and the release date.

New features are developed in snapshot releases. These are called
postfix-3.7-yyyymmdd where yyyymmdd is the release date (yyyy=year,
mm=month, dd=day). Patches are never issued for snapshot releases;
instead, a new snapshot is released.

The mail_release_date configuration parameter (format: yyyymmdd)
specifies the release date of a stable release or snapshot release.

If you upgrade from Postfix 3.4 or earlier, read RELEASE_NOTES-3.5
before proceeding.

License change
---------------

This software is distributed with a dual license: in addition to the
historical IBM Public License 1.0, it is now also distributed with the
more recent Eclipse Public License 2.0. Recipients can choose to take
the software under the license of their choice. Those who are more
comfortable with the IPL can continue with that license.

Major changes - internal protocol identification
------------------------------------------------

[Incompat 20200920] Internal protocols have changed. You need to
"postfix stop" before updating, or before backing out to an earlier
release, otherwise long-running daemons (pickup, qmgr, verify, tlsproxy,
postscreen) may fail to communicate with the rest of Postfix, causing
mail delivery delays until Postfix is restarted.

This change does not affect message files in Postfix queue directories,
only the communication between running Postfix programs.

With this change, every Postfix internal service, including the postdrop
command, announces the name of its protocol before doing any other I/O.
Every Postfix client program, including the Postfix sendmail command,
will verify that the protocol name matches what it is supposed to be.

The purpose of this change is to produce better error messages, for
example, when someone configures the discard daemon as a bounce
service in master.cf, or vice versa.

This change may break third-party programs that implement a
Postfix-internal protocol such as qpsmtpd. Such programs have never
been supported. Fortunately, this will be an easy fix: look at the
first data from the cleanup daemon: if it is a protocol announcement,
you're talking to Postfix 3.6 or later. That's the only real change.

Major changes - tls
-------------------

[Incompat 20200705] The minimum supported OpenSSL version is 1.1.1,
which will reach the end of life by 2023-09-11. Postfix 3.6 is
expected to reach the end of support in 2025. Until then, Postfix
will be updated as needed for compatibility with OpenSSL.

The default fingerprint digest has changed from md5 to sha256 (Postfix
3.6 with compatibility_level >= 3.6). With a lower compatibility_level
setting, Postfix defaults to using md5, and logs a warning when a Postfix
configuration specifies no explicit digest type.

Export-grade Diffie-Hellman key exchange is no longer supported,
and the tlsproxy_tls_dh512_param_file parameter is ignored,

[Feature 20200906] The tlstype.pl helper script by Viktor Dukhovni
reports TLS information per message delivery. This processes output
from the collate.pl script. See auxiliary/collate/README.tlstype and
auxiliary/collate/tlstype.pl.

Major changes - compatibility level
-----------------------------------

[Feature 20210109] Starting with Postfix version 3.6, the compatibility
level is "3.6". In future Postfix releases, the compatibility level will
be the Postfix version that introduced the last incompatible change. The
level is formatted as 'major.minor.patch', where 'patch' is usually
omitted and defaults to zero. Earlier compatibility levels are 0, 1 and 2.

This also introduces main.cf and master.cf support for the <=level,
<level, and other operators to compare compatibility levels. With the
standard <=, <, etc. operators, compatibility level 3.10 would be less
than 3.9, which is undesirable.

Major changes - services(5) override
------------------------------------

[Feature 20210418] Postfix no longer uses the services(5) database
to look up the TCP ports for SMTP and LMTP services. Instead, this
information is configured with the new known_tcp_ports configuration
parameter (default: lmtp=24, smtp=25, smtps=submissions=465,
submission=587). When a service is not specified in known_tcp_ports,
Postfix will still query the services(5) database.

Major changes - local_login_sender_maps
---------------------------------------

[Feature 20201025] Fine-grained control over the envelope sender address
for submission with the Postfix sendmail (or postdrop) commands.

The local_login_sender_maps parameter (default: static:*) specifies
a list of lookup tables that are searched by the UNIX login name, and
that return a list of allowed envelope sender patterns separated by
space or comma. The default is backwards-compatible: every user may
specify any sender envelope address.

This feature is enforced by the postdrop command. When no UNIX login
name is available, the postdrop command will prepend "uid:" to the
numerical UID and use that instead.

This feature ignores address extensions in the user-specified
envelope sender address.

Besides the special pattern "*" which allows any sender address,
there are "<>" which matches an empty sender address, and the
"@@domain" wildcard pattern. More information about those can be found
in the postconf(5) manpage.

Example:

/etc/postfix/main.cf:
    # Allow root and postfix full control, anyone else can only
    # send mail as themselves. Use "uid:" followed by the numerical
    # UID when the UID has no entry in the UNIX password file.
    local_login_sender_maps =
        inline:{ { root = *}, { postfix = * } },
        pcre:/etc/postfix/login_senders

/etc/postfix/login_senders:
   # Allow both the bare username and the user@@domain forms.
    /(.+)/ $1 $1@@example.com

Major changes - order of relay and recipient restrictions
---------------------------------------------------------

[Incompat 20210131] With smtpd_relay_before_recipient_restrictions=yes,
the Postfix SMTP server will evaluate smtpd_relay_restrictions before
smtpd_recipient_restrictions. This is the default behavior with
compatibility_level >= 3.6.

This change makes the implemented behavior consistent with existing
documentation. There is a backwards-compatibility warning that allows
users to freeze historical behavior. See COMPATIBILITY_README for
details.

Major changes - respectful logging
----------------------------------

[Feature 20210220] Postfix version 3.6 deprecates terminology
that implies white is better than black. Instead, Postfix prefers
'allowlist', 'denylist', and variations on those words. This change
affects Postfix documentation, and postscreen parameters and logging.

To keep the old postscreen logging set "respectful_logging = no"
in main.cf.

Noel Jones assisted with the initial transition.

Changes in documentation
------------------------

Postfix documentation was updated to use 'allowlist', 'denylist', etc.
These documentation changes do not affect Postfix behavior.

Changes in parameter names
--------------------------

The following postscreen parameters replace names that contain 'blacklist'
or 'whitelist':

    postscreen_allowlist_interfaces
    postscreen_denylist_action
    postscreen_dnsbl_allowlist_threshold

These new parameters have backwards-compatible default settings
that support the old parameter names, so that the name change should
not affect Postfix behavior. This means that existing management tools
that use the old parameter names should keep working as before.

This compatibility safety net may break when some management tools
use the new parameter names, and some use the old names, such that
different tools will disagree on how Postfix works.

Changes in logging
------------------

The following logging replaces forms that contain 'blacklist' or
'whitelist':

    postfix/postscreen[pid]: ALLOWLIST VETO [address]:port
    postfix/postscreen[pid]: ALLOWLISTED [address]:port
    postfix/postscreen[pid]: DENYLISTED [address]:port

To avoid breaking logfile analysis tools, Postfix keeps logging the old
forms by default, as long as the compatibility_level parameter setting
is less than 3.6, and the respectful_logging parameter is not explicitly
configured. As a reminder, Postfix will log the following:

    postfix/postscreen[pid]: Using backwards-compatible default setting
        respectful_logging=no for client [address]:port

To keep logging the old form, make the setting "respectful_logging =
no" permanent in main.cf, for example:

    # postconf "respectful_logging = no"
    # postfix reload

To stop the reminder, configure the respectful_logging parameter to
"yes" or "no", or configure "compatibility_level = 3.6".

Major changes - threaded bounces
--------------------------------

[Feature 20201205] Support for threaded bounces. This allows mail
readers to present a non-delivery, delayed delivery, or successful
delivery notification in the same email thread as the original
message.

Unfortunately, this also makes it easy for users to mistakenly delete
the whole email thread (all related messages), instead of deleting
only the delivery status notification.

To enable, specify "enable_threaded_bounces = yes".

Other changes - smtpd_sasl_mechanism_list
-----------------------------------------

[Feature 20200906] The smtpd_sasl_mechanism_list parameter (default:
!external, static:rest) prevents confusing errors when a SASL backend
announces EXTERNAL support which Postfix does not support.

Other changes - delivery logging
--------------------------------

[Incompat 20200531] Postfix delivery agents now log an explicit record
when delegating delivery to a different Postfix delivery agent.

For example, with "best_mx_transport = local", an SMTP delivery
agent will now log when a recipient will be delivered locally. This
makes the delegating delivery agent visible, where it would otherwise
have remained invisible, which would complicate troubleshooting.

  postfix/smtp[pid]: queueid: passing <recipient> to transport=local

This will usually be followed by logging for an actual delivery:

  postfix/local[pid]: queueid: to=<recipient>, relay=local, ...

Other examples: the local delivery agent will log a record that it
defers mailbox delivery through mailbox_transport or through
fallback_transport.

Other changes - error logging
-----------------------------

[Incompat 20200531] Postfix programs will now log "Application error"
instead of "Success" or "Unknown error: 0" when an operation fails with
errno == 0, i.e., the error originates from non-kernel code.

Other changes - dns lookups
---------------------------

[Feature 20200509] The threadsafe resolver API (res_nxxx() calls)
is now the default, not because the API is threadsafe, but because
this is the API where new features are being added.

To build old style, build with:

    make makefiles CCARGS="-DNO_RES_NCALLS..."

This is the default for systems that are known not to support the
threadsafe resolver API.
@
text
@@


1.1.1.1.2.1
log
@Pullup the following, requested by kim in ticket #518:

	external/ibm-public/postfix/dist/html/postfix-doc.css up to 1.1.1.1
	external/ibm-public/postfix/dist/mantools/check-double-history up to 1.1.1.1
	external/ibm-public/postfix/dist/mantools/check-spell-history up to 1.1.1.1
	external/ibm-public/postfix/dist/mantools/check-table-proto up to 1.1.1.1
	external/ibm-public/postfix/dist/proto/stop.double-history up to 1.1.1.1
	external/ibm-public/postfix/dist/proto/stop.spell-history up to 1.1.1.1
	external/ibm-public/postfix/dist/src/postconf/test71.ref up to 1.1.1.1
	external/ibm-public/postfix/dist/src/util/mkmap_db.c up to 1.2
	external/ibm-public/postfix/dist/src/util/mkmap.h up to 1.2
	external/ibm-public/postfix/dist/src/util/inet_addr_sizes.c up to 1.2
	external/ibm-public/postfix/dist/src/util/inet_addr_sizes.h up to 1.2
	external/ibm-public/postfix/dist/src/util/inet_prefix_top.c up to 1.2
	external/ibm-public/postfix/dist/src/util/inet_prefix_top.h up to 1.2
	external/ibm-public/postfix/dist/src/util/mkmap_cdb.c up to 1.2
	external/ibm-public/postfix/dist/src/util/mkmap_dbm.c up to 1.2
	external/ibm-public/postfix/dist/src/util/mkmap_fail.c up to 1.2
	external/ibm-public/postfix/dist/src/util/mkmap_lmdb.c up to 1.2
	external/ibm-public/postfix/dist/src/util/mkmap_open.c up to 1.2
	external/ibm-public/postfix/dist/src/util/mkmap_sdbm.c up to 1.2
	external/ibm-public/postfix/dist/RELEASE_NOTES-3.7 up to 1.1.1.1
	external/ibm-public/postfix/dist/src/global/mkmap.h delete
	external/ibm-public/postfix/dist/src/global/mkmap_cdb.c delete
	external/ibm-public/postfix/dist/src/global/mkmap_db.c delete
	external/ibm-public/postfix/dist/src/global/mkmap_dbm.c delete
	external/ibm-public/postfix/dist/src/global/mkmap_fail.c delete
	external/ibm-public/postfix/dist/src/global/mkmap_lmdb.c delete
	external/ibm-public/postfix/dist/src/global/mkmap_open.c delete
	external/ibm-public/postfix/dist/src/global/mkmap_sdbm.c delete
	external/ibm-public/postfix/dist/HISTORY        up to 1.1.1.29
	external/ibm-public/postfix/dist/INSTALL        up to 1.1.1.9
	external/ibm-public/postfix/dist/Makefile.in    up to 1.1.1.10
	external/ibm-public/postfix/dist/RELEASE_NOTES  up to 1.1.1.17
	external/ibm-public/postfix/dist/WISHLIST       up to 1.1.1.2
	external/ibm-public/postfix/dist/makedefs       up to 1.16
	external/ibm-public/postfix/dist/postfix-env.sh up to 1.1.1.2
	external/ibm-public/postfix/dist/README_FILES/ADDRESS_CLASS_README up to 1.1.1.2
	external/ibm-public/postfix/dist/README_FILES/BASIC_CONFIGURATION_README up to 1.1.1.6
	external/ibm-public/postfix/dist/README_FILES/DEBUG_README up to 1.1.1.5
	external/ibm-public/postfix/dist/README_FILES/FORWARD_SECRECY_README up to 1.1.1.5
	external/ibm-public/postfix/dist/README_FILES/INSTALL up to 1.10
	external/ibm-public/postfix/dist/README_FILES/IPV6_README up to 1.1.1.4
	external/ibm-public/postfix/dist/README_FILES/MAILLOG_README up to 1.1.1.4
	external/ibm-public/postfix/dist/README_FILES/MILTER_README up to 1.1.1.9
	external/ibm-public/postfix/dist/README_FILES/MYSQL_README up to 1.1.1.5
	external/ibm-public/postfix/dist/README_FILES/PGSQL_README up to 1.1.1.4
	external/ibm-public/postfix/dist/README_FILES/QSHAPE_README up to 1.1.1.4
	external/ibm-public/postfix/dist/README_FILES/RELEASE_NOTES up to 1.1.1.17
	external/ibm-public/postfix/dist/README_FILES/SASL_README up to 1.1.1.11
	external/ibm-public/postfix/dist/README_FILES/SMTPD_POLICY_README up to 1.1.1.7
	external/ibm-public/postfix/dist/README_FILES/SMTPD_PROXY_README up to 1.1.1.6
	external/ibm-public/postfix/dist/README_FILES/SQLITE_README up to 1.1.1.4
	external/ibm-public/postfix/dist/README_FILES/STANDARD_CONFIGURATION_README up to 1.1.1.6
	external/ibm-public/postfix/dist/README_FILES/TLS_README up to 1.14
	external/ibm-public/postfix/dist/conf/aliases   up to 1.1.1.5
	external/ibm-public/postfix/dist/conf/main.cf   up to 1.10
	external/ibm-public/postfix/dist/conf/master.cf up to 1.11
	external/ibm-public/postfix/dist/conf/postfix-files up to 1.9
	external/ibm-public/postfix/dist/conf/postfix-script up to 1.4
	external/ibm-public/postfix/dist/conf/postfix-tls-script up to 1.5
	external/ibm-public/postfix/dist/conf/virtual   up to 1.1.1.6
	external/ibm-public/postfix/dist/html/ADDRESS_CLASS_README.html up to 1.1.1.3
	external/ibm-public/postfix/dist/html/ADDRESS_REWRITING_README.html up to 1.1.1.6
	external/ibm-public/postfix/dist/html/ADDRESS_VERIFICATION_README.html up to 1.11
	external/ibm-public/postfix/dist/html/BACKSCATTER_README.html up to 1.1.1.6
	external/ibm-public/postfix/dist/html/BASIC_CONFIGURATION_README.html up to 1.1.1.7
	external/ibm-public/postfix/dist/html/BDAT_README.html up to 1.1.1.3
	external/ibm-public/postfix/dist/html/BUILTIN_FILTER_README.html up to 1.1.1.5
	external/ibm-public/postfix/dist/html/CDB_README.html up to 1.1.1.4
	external/ibm-public/postfix/dist/html/COMPATIBILITY_README.html up to 1.1.1.4
	external/ibm-public/postfix/dist/html/CONNECTION_CACHE_README.html up to 1.1.1.6
	external/ibm-public/postfix/dist/html/CONTENT_INSPECTION_README.html up to 1.1.1.3
	external/ibm-public/postfix/dist/html/DATABASE_README.html up to 1.1.1.10
	external/ibm-public/postfix/dist/html/DB_README.html up to 1.1.1.4
	external/ibm-public/postfix/dist/html/DEBUG_README.html up to 1.1.1.6
	external/ibm-public/postfix/dist/html/DSN_README.html up to 1.1.1.3
	external/ibm-public/postfix/dist/html/ETRN_README.html up to 1.1.1.4
	external/ibm-public/postfix/dist/html/FILTER_README.html up to 1.1.1.5
	external/ibm-public/postfix/dist/html/FORWARD_SECRECY_README.html up to 1.1.1.5
	external/ibm-public/postfix/dist/html/INSTALL.html up to 1.10
	external/ibm-public/postfix/dist/html/IPV6_README.html up to 1.1.1.4
	external/ibm-public/postfix/dist/html/LDAP_README.html up to 1.1.1.6
	external/ibm-public/postfix/dist/html/LINUX_README.html up to 1.1.1.4
	external/ibm-public/postfix/dist/html/LMDB_README.html up to 1.1.1.4
	external/ibm-public/postfix/dist/html/LOCAL_RECIPIENT_README.html up to 1.1.1.3
	external/ibm-public/postfix/dist/html/MAILDROP_README.html up to 1.1.1.5
	external/ibm-public/postfix/dist/html/MAILLOG_README.html up to 1.1.1.4
	external/ibm-public/postfix/dist/html/MEMCACHE_README.html up to 1.1.1.3
	external/ibm-public/postfix/dist/html/MILTER_README.html up to 1.1.1.9
	external/ibm-public/postfix/dist/html/MULTI_INSTANCE_README.html up to 1.1.1.9
	external/ibm-public/postfix/dist/html/MYSQL_README.html up to 1.1.1.5
	external/ibm-public/postfix/dist/html/NFS_README.html up to 1.1.1.3
	external/ibm-public/postfix/dist/html/OVERVIEW.html up to 1.1.1.6
	external/ibm-public/postfix/dist/html/PACKAGE_README.html up to 1.1.1.5
	external/ibm-public/postfix/dist/html/PCRE_README.html up to 1.1.1.4
	external/ibm-public/postfix/dist/html/PGSQL_README.html up to 1.1.1.4
	external/ibm-public/postfix/dist/html/POSTSCREEN_3_5_README.html up to 1.1.1.2
	external/ibm-public/postfix/dist/html/POSTSCREEN_README.html up to 1.1.1.8
	external/ibm-public/postfix/dist/html/QSHAPE_README.html up to 1.1.1.5
	external/ibm-public/postfix/dist/html/RESTRICTION_CLASS_README.html up to 1.1.1.5
	external/ibm-public/postfix/dist/html/SASL_README.html up to 1.1.1.11
	external/ibm-public/postfix/dist/html/SCHEDULER_README.html up to 1.1.1.5
	external/ibm-public/postfix/dist/html/SMTPD_ACCESS_README.html up to 1.1.1.7
	external/ibm-public/postfix/dist/html/SMTPD_POLICY_README.html up to 1.1.1.8
	external/ibm-public/postfix/dist/html/SMTPD_PROXY_README.html up to 1.1.1.6
	external/ibm-public/postfix/dist/html/SMTPUTF8_README.html up to 1.1.1.4
	external/ibm-public/postfix/dist/html/SOHO_README.html up to 1.1.1.6
	external/ibm-public/postfix/dist/html/SQLITE_README.html up to 1.1.1.4
	external/ibm-public/postfix/dist/html/STANDARD_CONFIGURATION_README.html up to 1.1.1.7
	external/ibm-public/postfix/dist/html/STRESS_README.html up to 1.1.1.7
	external/ibm-public/postfix/dist/html/TLS_LEGACY_README.html up to 1.1.1.5
	external/ibm-public/postfix/dist/html/TLS_README.html up to 1.15
	external/ibm-public/postfix/dist/html/TUNING_README.html up to 1.1.1.6
	external/ibm-public/postfix/dist/html/UUCP_README.html up to 1.1.1.4
	external/ibm-public/postfix/dist/html/VERP_README.html up to 1.1.1.5
	external/ibm-public/postfix/dist/html/VIRTUAL_README.html up to 1.1.1.6
	external/ibm-public/postfix/dist/html/XCLIENT_README.html up to 1.1.1.6
	external/ibm-public/postfix/dist/html/XFORWARD_README.html up to 1.1.1.4
	external/ibm-public/postfix/dist/html/access.5.html up to 1.1.1.9
	external/ibm-public/postfix/dist/html/aliases.5.html up to 1.1.1.7
	external/ibm-public/postfix/dist/html/anvil.8.html up to 1.1.1.6
	external/ibm-public/postfix/dist/html/bounce.5.html up to 1.1.1.5
	external/ibm-public/postfix/dist/html/bounce.8.html up to 1.1.1.7
	external/ibm-public/postfix/dist/html/canonical.5.html up to 1.1.1.6
	external/ibm-public/postfix/dist/html/cidr_table.5.html up to 1.1.1.6
	external/ibm-public/postfix/dist/html/cleanup.8.html up to 1.1.1.9
	external/ibm-public/postfix/dist/html/defer.8.html up to 1.1.1.7
	external/ibm-public/postfix/dist/html/discard.8.html up to 1.1.1.6
	external/ibm-public/postfix/dist/html/dnsblog.8.html up to 1.1.1.7
	external/ibm-public/postfix/dist/html/error.8.html up to 1.1.1.6
	external/ibm-public/postfix/dist/html/flush.8.html up to 1.1.1.6
	external/ibm-public/postfix/dist/html/generic.5.html up to 1.1.1.6
	external/ibm-public/postfix/dist/html/header_checks.5.html up to 1.1.1.9
	external/ibm-public/postfix/dist/html/index.html up to 1.1.1.8
	external/ibm-public/postfix/dist/html/ldap_table.5.html up to 1.1.1.7
	external/ibm-public/postfix/dist/html/lmdb_table.5.html up to 1.1.1.4
	external/ibm-public/postfix/dist/html/lmtp.8.html up to 1.1.1.12
	external/ibm-public/postfix/dist/html/local.8.html up to 1.1.1.7
	external/ibm-public/postfix/dist/html/mailq.1.html up to 1.1.1.8
	external/ibm-public/postfix/dist/html/makedefs.1.html up to 1.1.1.3
	external/ibm-public/postfix/dist/html/master.5.html up to 1.1.1.9
	external/ibm-public/postfix/dist/html/master.8.html up to 1.1.1.8
	external/ibm-public/postfix/dist/html/memcache_table.5.html up to 1.1.1.6
	external/ibm-public/postfix/dist/html/mysql_table.5.html up to 1.1.1.8
	external/ibm-public/postfix/dist/html/newaliases.1.html up to 1.1.1.8
	external/ibm-public/postfix/dist/html/nisplus_table.5.html up to 1.1.1.5
	external/ibm-public/postfix/dist/html/oqmgr.8.html up to 1.1.1.9
	external/ibm-public/postfix/dist/html/pcre_table.5.html up to 1.1.1.6
	external/ibm-public/postfix/dist/html/pgsql_table.5.html up to 1.1.1.8
	external/ibm-public/postfix/dist/html/pickup.8.html up to 1.1.1.7
	external/ibm-public/postfix/dist/html/pipe.8.html up to 1.1.1.7
	external/ibm-public/postfix/dist/html/postalias.1.html up to 1.1.1.7
	external/ibm-public/postfix/dist/html/postcat.1.html up to 1.1.1.7
	external/ibm-public/postfix/dist/html/postconf.1.html up to 1.1.1.11
	external/ibm-public/postfix/dist/html/postconf.5.html up to 1.19
	external/ibm-public/postfix/dist/html/postdrop.1.html up to 1.1.1.7
	external/ibm-public/postfix/dist/html/postfix-manuals.html up to 1.1.1.8
	external/ibm-public/postfix/dist/html/postfix-tls.1.html up to 1.1.1.3
	external/ibm-public/postfix/dist/html/postfix-wrapper.5.html up to 1.1.1.6
	external/ibm-public/postfix/dist/html/postfix.1.html up to 1.1.1.9
	external/ibm-public/postfix/dist/html/postkick.1.html up to 1.1.1.7
	external/ibm-public/postfix/dist/html/postlock.1.html up to 1.1.1.6
	external/ibm-public/postfix/dist/html/postlog.1.html up to 1.1.1.6
	external/ibm-public/postfix/dist/html/postlogd.8.html up to 1.1.1.3
	external/ibm-public/postfix/dist/html/postmap.1.html up to 1.1.1.7
	external/ibm-public/postfix/dist/html/postmulti.1.html up to 1.1.1.7
	external/ibm-public/postfix/dist/html/postqueue.1.html up to 1.1.1.9
	external/ibm-public/postfix/dist/html/postscreen.8.html up to 1.1.1.8
	external/ibm-public/postfix/dist/html/postsuper.1.html up to 1.1.1.7
	external/ibm-public/postfix/dist/html/posttls-finger.1.html up to 1.1.1.5
	external/ibm-public/postfix/dist/html/proxymap.8.html up to 1.1.1.8
	external/ibm-public/postfix/dist/html/qmgr.8.html up to 1.1.1.9
	external/ibm-public/postfix/dist/html/qmqp-sink.1.html up to 1.1.1.5
	external/ibm-public/postfix/dist/html/qmqp-source.1.html up to 1.1.1.5
	external/ibm-public/postfix/dist/html/qmqpd.8.html up to 1.1.1.8
	external/ibm-public/postfix/dist/html/qshape.1.html up to 1.1.1.4
	external/ibm-public/postfix/dist/html/regexp_table.5.html up to 1.1.1.6
	external/ibm-public/postfix/dist/html/relocated.5.html up to 1.1.1.5
	external/ibm-public/postfix/dist/html/scache.8.html up to 1.1.1.6
	external/ibm-public/postfix/dist/html/sendmail.1.html up to 1.1.1.8
	external/ibm-public/postfix/dist/html/showq.8.html up to 1.1.1.7
	external/ibm-public/postfix/dist/html/smtp-sink.1.html up to 1.1.1.6
	external/ibm-public/postfix/dist/html/smtp-source.1.html up to 1.1.1.5
	external/ibm-public/postfix/dist/html/smtp.8.html up to 1.1.1.12
	external/ibm-public/postfix/dist/html/smtpd.8.html up to 1.1.1.13
	external/ibm-public/postfix/dist/html/socketmap_table.5.html up to 1.1.1.5
	external/ibm-public/postfix/dist/html/spawn.8.html up to 1.1.1.6
	external/ibm-public/postfix/dist/html/sqlite_table.5.html up to 1.1.1.6
	external/ibm-public/postfix/dist/html/tcp_table.5.html up to 1.1.1.6
	external/ibm-public/postfix/dist/html/tlsmgr.8.html up to 1.1.1.6
	external/ibm-public/postfix/dist/html/tlsproxy.8.html up to 1.1.1.8
	external/ibm-public/postfix/dist/html/trace.8.html up to 1.1.1.7
	external/ibm-public/postfix/dist/html/transport.5.html up to 1.1.1.7
	external/ibm-public/postfix/dist/html/trivial-rewrite.8.html up to 1.1.1.7
	external/ibm-public/postfix/dist/html/verify.8.html up to 1.1.1.8
	external/ibm-public/postfix/dist/html/virtual.5.html up to 1.1.1.7
	external/ibm-public/postfix/dist/html/virtual.8.html up to 1.1.1.7
	external/ibm-public/postfix/dist/man/man1/postfix-tls.1 up to 1.3
	external/ibm-public/postfix/dist/man/man1/postfix.1 up to 1.6
	external/ibm-public/postfix/dist/man/man1/postlog.1 up to 1.5
	external/ibm-public/postfix/dist/man/man1/postqueue.1 up to 1.5
	external/ibm-public/postfix/dist/man/man1/posttls-finger.1 up to 1.5
	external/ibm-public/postfix/dist/man/man5/aliases.5 up to 1.5
	external/ibm-public/postfix/dist/man/man5/cidr_table.5 up to 1.5
	external/ibm-public/postfix/dist/man/man5/ldap_table.5 up to 1.5
	external/ibm-public/postfix/dist/man/man5/mysql_table.5 up to 1.5
	external/ibm-public/postfix/dist/man/man5/pcre_table.5 up to 1.4
	external/ibm-public/postfix/dist/man/man5/pgsql_table.5 up to 1.5
	external/ibm-public/postfix/dist/man/man5/postconf.5 up to 1.19
	external/ibm-public/postfix/dist/man/man5/regexp_table.5 up to 1.4
	external/ibm-public/postfix/dist/man/man5/virtual.5 up to 1.5
	external/ibm-public/postfix/dist/man/man8/postscreen.8 up to 1.5
	external/ibm-public/postfix/dist/man/man8/smtp.8 up to 1.5
	external/ibm-public/postfix/dist/man/man8/smtpd.8 up to 1.5
	external/ibm-public/postfix/dist/man/man8/tlsproxy.8 up to 1.5
	external/ibm-public/postfix/dist/mantools/check-double-cc up to 1.1.1.2
	external/ibm-public/postfix/dist/mantools/check-double-install-proto-text up to 1.1.1.2
	external/ibm-public/postfix/dist/mantools/check-double-proto-html up to 1.1.1.2
	external/ibm-public/postfix/dist/mantools/check-postfix-files up to 1.1.1.2
	external/ibm-public/postfix/dist/mantools/check-postlink up to 1.1.1.3
	external/ibm-public/postfix/dist/mantools/check-spell-cc up to 1.1.1.2
	external/ibm-public/postfix/dist/mantools/check-spell-install-proto-text up to 1.1.1.2
	external/ibm-public/postfix/dist/mantools/check-spell-proto-html up to 1.1.1.2
	external/ibm-public/postfix/dist/mantools/make_soho_readme up to 1.1.1.4
	external/ibm-public/postfix/dist/mantools/makemanidx up to 1.1.1.4
	external/ibm-public/postfix/dist/mantools/man2html up to 1.1.1.5
	external/ibm-public/postfix/dist/mantools/manlint up to 1.1.1.2
	external/ibm-public/postfix/dist/mantools/manspell up to 1.1.1.2
	external/ibm-public/postfix/dist/mantools/missing-proxy-read-maps up to 1.1.1.3
	external/ibm-public/postfix/dist/mantools/postlink up to 1.1.1.13
	external/ibm-public/postfix/dist/mantools/spell up to 1.1.1.3
	external/ibm-public/postfix/dist/proto/ADDRESS_CLASS_README.html up to 1.1.1.3
	external/ibm-public/postfix/dist/proto/ADDRESS_REWRITING_README.html up to 1.1.1.5
	external/ibm-public/postfix/dist/proto/ADDRESS_VERIFICATION_README.html up to 1.11
	external/ibm-public/postfix/dist/proto/BACKSCATTER_README.html up to 1.1.1.5
	external/ibm-public/postfix/dist/proto/BASIC_CONFIGURATION_README.html up to 1.1.1.6
	external/ibm-public/postfix/dist/proto/BDAT_README.html up to 1.1.1.3
	external/ibm-public/postfix/dist/proto/BUILTIN_FILTER_README.html up to 1.1.1.4
	external/ibm-public/postfix/dist/proto/CDB_README.html up to 1.1.1.4
	external/ibm-public/postfix/dist/proto/COMPATIBILITY_README.html up to 1.1.1.4
	external/ibm-public/postfix/dist/proto/CONNECTION_CACHE_README.html up to 1.1.1.6
	external/ibm-public/postfix/dist/proto/CONTENT_INSPECTION_README.html up to 1.1.1.3
	external/ibm-public/postfix/dist/proto/DATABASE_README.html up to 1.1.1.10
	external/ibm-public/postfix/dist/proto/DB_README.html up to 1.1.1.4
	external/ibm-public/postfix/dist/proto/DEBUG_README.html up to 1.1.1.6
	external/ibm-public/postfix/dist/proto/DSN_README.html up to 1.1.1.3
	external/ibm-public/postfix/dist/proto/ETRN_README.html up to 1.1.1.3
	external/ibm-public/postfix/dist/proto/FILTER_README.html up to 1.1.1.5
	external/ibm-public/postfix/dist/proto/FORWARD_SECRECY_README.html up to 1.1.1.5
	external/ibm-public/postfix/dist/proto/INSTALL.html up to 1.10
	external/ibm-public/postfix/dist/proto/IPV6_README.html up to 1.1.1.4
	external/ibm-public/postfix/dist/proto/LDAP_README.html up to 1.1.1.5
	external/ibm-public/postfix/dist/proto/LINUX_README.html up to 1.1.1.4
	external/ibm-public/postfix/dist/proto/LMDB_README.html up to 1.1.1.4
	external/ibm-public/postfix/dist/proto/LOCAL_RECIPIENT_README.html up to 1.1.1.3
	external/ibm-public/postfix/dist/proto/MAILDROP_README.html up to 1.1.1.4
	external/ibm-public/postfix/dist/proto/MAILLOG_README.html up to 1.1.1.4
	external/ibm-public/postfix/dist/proto/MEMCACHE_README.html up to 1.1.1.3
	external/ibm-public/postfix/dist/proto/MILTER_README.html up to 1.1.1.9
	external/ibm-public/postfix/dist/proto/MULTI_INSTANCE_README.html up to 1.1.1.8
	external/ibm-public/postfix/dist/proto/MYSQL_README.html up to 1.1.1.5
	external/ibm-public/postfix/dist/proto/NFS_README.html up to 1.1.1.3
	external/ibm-public/postfix/dist/proto/OVERVIEW.html up to 1.1.1.6
	external/ibm-public/postfix/dist/proto/PACKAGE_README.html up to 1.1.1.5
	external/ibm-public/postfix/dist/proto/PCRE_README.html up to 1.1.1.4
	external/ibm-public/postfix/dist/proto/PGSQL_README.html up to 1.1.1.4
	external/ibm-public/postfix/dist/proto/POSTSCREEN_3_5_README.html up to 1.1.1.2
	external/ibm-public/postfix/dist/proto/POSTSCREEN_README.html up to 1.1.1.8
	external/ibm-public/postfix/dist/proto/QSHAPE_README.html up to 1.1.1.4
	external/ibm-public/postfix/dist/proto/RESTRICTION_CLASS_README.html up to 1.1.1.4
	external/ibm-public/postfix/dist/proto/SASL_README.html up to 1.1.1.11
	external/ibm-public/postfix/dist/proto/SCHEDULER_README.html up to 1.1.1.5
	external/ibm-public/postfix/dist/proto/SMTPD_ACCESS_README.html up to 1.1.1.6
	external/ibm-public/postfix/dist/proto/SMTPD_POLICY_README.html up to 1.1.1.7
	external/ibm-public/postfix/dist/proto/SMTPD_PROXY_README.html up to 1.1.1.6
	external/ibm-public/postfix/dist/proto/SMTPUTF8_README.html up to 1.1.1.4
	external/ibm-public/postfix/dist/proto/SQLITE_README.html up to 1.1.1.4
	external/ibm-public/postfix/dist/proto/STANDARD_CONFIGURATION_README.html up to 1.1.1.6
	external/ibm-public/postfix/dist/proto/STRESS_README.html up to 1.1.1.7
	external/ibm-public/postfix/dist/proto/TLS_LEGACY_README.html up to 1.1.1.4
	external/ibm-public/postfix/dist/proto/TLS_README.html up to 1.14
	external/ibm-public/postfix/dist/proto/TUNING_README.html up to 1.1.1.6
	external/ibm-public/postfix/dist/proto/UUCP_README.html up to 1.1.1.3
	external/ibm-public/postfix/dist/proto/VERP_README.html up to 1.1.1.5
	external/ibm-public/postfix/dist/proto/VIRTUAL_README.html up to 1.1.1.4
	external/ibm-public/postfix/dist/proto/XCLIENT_README.html up to 1.1.1.6
	external/ibm-public/postfix/dist/proto/XFORWARD_README.html up to 1.1.1.4
	external/ibm-public/postfix/dist/proto/aliases  up to 1.1.1.6
	external/ibm-public/postfix/dist/proto/cidr_table up to 1.1.1.6
	external/ibm-public/postfix/dist/proto/ldap_table up to 1.1.1.7
	external/ibm-public/postfix/dist/proto/mysql_table up to 1.1.1.8
	external/ibm-public/postfix/dist/proto/pcre_table up to 1.1.1.6
	external/ibm-public/postfix/dist/proto/pgsql_table up to 1.1.1.8
	external/ibm-public/postfix/dist/proto/postconf.html.prolog up to 1.1.1.5
	external/ibm-public/postfix/dist/proto/postconf.proto up to 1.19
	external/ibm-public/postfix/dist/proto/regexp_table up to 1.1.1.6
	external/ibm-public/postfix/dist/proto/stop     up to 1.1.1.7
	external/ibm-public/postfix/dist/proto/stop.double-cc up to 1.1.1.2
	external/ibm-public/postfix/dist/proto/stop.double-proto-html up to 1.1.1.2
	external/ibm-public/postfix/dist/proto/stop.spell-cc up to 1.1.1.2
	external/ibm-public/postfix/dist/proto/stop.spell-proto-html up to 1.1.1.2
	external/ibm-public/postfix/dist/proto/virtual  up to 1.1.1.6
	external/ibm-public/postfix/dist/src/cleanup/cleanup_map1n.c up to 1.4
	external/ibm-public/postfix/dist/src/cleanup/cleanup_milter.c up to 1.5
	external/ibm-public/postfix/dist/src/dns/Makefile.in up to 1.1.1.5
	external/ibm-public/postfix/dist/src/dns/dns.h  up to 1.6
	external/ibm-public/postfix/dist/src/dns/dns_lookup.c up to 1.8
	external/ibm-public/postfix/dist/src/dns/dns_rr.c up to 1.3
	external/ibm-public/postfix/dist/src/dns/dns_rr_eq_sa.c up to 1.3
	external/ibm-public/postfix/dist/src/dns/dns_sa_to_rr.c up to 1.3
	external/ibm-public/postfix/dist/src/dns/dns_str_resflags.c up to 1.3
	external/ibm-public/postfix/dist/src/dns/dns_strrecord.c up to 1.3
	external/ibm-public/postfix/dist/src/dns/dns_strtype.c up to 1.2
	external/ibm-public/postfix/dist/src/global/Makefile.in up to 1.1.1.10
	external/ibm-public/postfix/dist/src/global/compat_level.c up to 1.3
	external/ibm-public/postfix/dist/src/global/compat_level.h up to 1.3
	external/ibm-public/postfix/dist/src/global/dict_ldap.c up to 1.5
	external/ibm-public/postfix/dist/src/global/dict_memcache.c up to 1.3
	external/ibm-public/postfix/dist/src/global/dict_mysql.c up to 1.4
	external/ibm-public/postfix/dist/src/global/dict_pgsql.c up to 1.4
	external/ibm-public/postfix/dist/src/global/dict_proxy.h up to 1.3
	external/ibm-public/postfix/dist/src/global/dict_sqlite.c up to 1.4
	external/ibm-public/postfix/dist/src/global/dynamicmaps.c up to 1.4
	external/ibm-public/postfix/dist/src/global/header_body_checks.h up to 1.3
	external/ibm-public/postfix/dist/src/global/mail_dict.c up to 1.3
	external/ibm-public/postfix/dist/src/global/mail_params.h up to 1.19
	external/ibm-public/postfix/dist/src/global/mail_proto.h up to 1.5
	external/ibm-public/postfix/dist/src/global/mail_version.h up to 1.6
	external/ibm-public/postfix/dist/src/global/map_search.c up to 1.4
	external/ibm-public/postfix/dist/src/global/map_search.ref up to 1.1.1.2
	external/ibm-public/postfix/dist/src/global/maps.c up to 1.4
	external/ibm-public/postfix/dist/src/global/maps.ref up to 1.1.1.2
	external/ibm-public/postfix/dist/src/global/mkmap_proxy.c up to 1.2
	external/ibm-public/postfix/dist/src/global/namadr_list.in up to 1.1.1.4
	external/ibm-public/postfix/dist/src/global/namadr_list.ref up to 1.1.1.5
	external/ibm-public/postfix/dist/src/global/smtp_stream.c up to 1.5
	external/ibm-public/postfix/dist/src/global/smtp_stream.h up to 1.4
	external/ibm-public/postfix/dist/src/local/local_expand.c up to 1.3
	external/ibm-public/postfix/dist/src/milter/milter8.c up to 1.5
	external/ibm-public/postfix/dist/src/postalias/Makefile.in up to 1.1.1.6
	external/ibm-public/postfix/dist/src/postalias/postalias.c up to 1.5
	external/ibm-public/postfix/dist/src/postconf/Makefile.in up to 1.1.1.11
	external/ibm-public/postfix/dist/src/postconf/postconf.h up to 1.4
	external/ibm-public/postfix/dist/src/postconf/postconf_dbms.c up to 1.5
	external/ibm-public/postfix/dist/src/postconf/postconf_edit.c up to 1.3
	external/ibm-public/postfix/dist/src/postconf/postconf_main.c up to 1.4
	external/ibm-public/postfix/dist/src/postconf/postconf_master.c up to 1.8
	external/ibm-public/postfix/dist/src/postconf/postconf_misc.c up to 1.3
	external/ibm-public/postfix/dist/src/postconf/test58.ref up to 1.1.1.3
	external/ibm-public/postfix/dist/src/postfix/postfix.c up to 1.6
	external/ibm-public/postfix/dist/src/postlog/postlog.c up to 1.5
	external/ibm-public/postfix/dist/src/postlogd/Makefile.in up to 1.1.1.3
	external/ibm-public/postfix/dist/src/postmap/Makefile.in up to 1.1.1.7
	external/ibm-public/postfix/dist/src/postmap/postmap.c up to 1.5
	external/ibm-public/postfix/dist/src/postqueue/postqueue.c up to 1.5
	external/ibm-public/postfix/dist/src/postscreen/postscreen.c up to 1.5
	external/ibm-public/postfix/dist/src/postscreen/postscreen_smtpd.c up to 1.5
	external/ibm-public/postfix/dist/src/posttls-finger/posttls-finger.c up to 1.5
	external/ibm-public/postfix/dist/src/proxymap/Makefile.in up to 1.1.1.6
	external/ibm-public/postfix/dist/src/showq/showq.c up to 1.5
	external/ibm-public/postfix/dist/src/smtp/Makefile.in up to 1.1.1.10
	external/ibm-public/postfix/dist/src/smtp/lmtp_params.c up to 1.5
	external/ibm-public/postfix/dist/src/smtp/smtp.c up to 1.13
	external/ibm-public/postfix/dist/src/smtp/smtp.h up to 1.5
	external/ibm-public/postfix/dist/src/smtp/smtp_addr.c up to 1.5
	external/ibm-public/postfix/dist/src/smtp/smtp_addr.h up to 1.3
	external/ibm-public/postfix/dist/src/smtp/smtp_connect.c up to 1.5
	external/ibm-public/postfix/dist/src/smtp/smtp_params.c up to 1.5
	external/ibm-public/postfix/dist/src/smtp/smtp_proto.c up to 1.5
	external/ibm-public/postfix/dist/src/smtp/smtp_reuse.c up to 1.4
	external/ibm-public/postfix/dist/src/smtp/smtp_session.c up to 1.5
	external/ibm-public/postfix/dist/src/smtpd/Makefile.in up to 1.1.1.11
	external/ibm-public/postfix/dist/src/smtpd/smtpd.c up to 1.20
	external/ibm-public/postfix/dist/src/smtpd/smtpd.h up to 1.5
	external/ibm-public/postfix/dist/src/smtpd/smtpd_check.c up to 1.6
	external/ibm-public/postfix/dist/src/smtpd/smtpd_peer.c up to 1.5
	external/ibm-public/postfix/dist/src/smtpd/smtpd_proxy.c up to 1.3
	external/ibm-public/postfix/dist/src/smtpd/smtpd_sasl_glue.c up to 1.5
	external/ibm-public/postfix/dist/src/smtpd/smtpd_server.in up to 1.1.1.4
	external/ibm-public/postfix/dist/src/smtpd/smtpd_server.ref up to 1.1.1.4
	external/ibm-public/postfix/dist/src/tls/Makefile.in up to 1.1.1.10
	external/ibm-public/postfix/dist/src/tls/tls.h  up to 1.5
	external/ibm-public/postfix/dist/src/tls/tls_client.c up to 1.13
	external/ibm-public/postfix/dist/src/tls/tls_dane.c up to 1.5
	external/ibm-public/postfix/dist/src/tls/tls_dh.c up to 1.5
	external/ibm-public/postfix/dist/src/tls/tls_fprint.c up to 1.4
	external/ibm-public/postfix/dist/src/tls/tls_misc.c up to 1.5
	external/ibm-public/postfix/dist/src/tls/tls_proxy.h up to 1.4
	external/ibm-public/postfix/dist/src/tls/tls_proxy_client_misc.c up to 1.4
	external/ibm-public/postfix/dist/src/tls/tls_proxy_client_print.c up to 1.4
	external/ibm-public/postfix/dist/src/tls/tls_proxy_client_scan.c up to 1.4
	external/ibm-public/postfix/dist/src/tls/tls_server.c up to 1.12
	external/ibm-public/postfix/dist/src/tlsproxy/tlsproxy.c up to 1.6
	external/ibm-public/postfix/dist/src/util/Makefile.in up to 1.1.1.11
	external/ibm-public/postfix/dist/src/util/argv.c up to 1.4
	external/ibm-public/postfix/dist/src/util/argv.h up to 1.4
	external/ibm-public/postfix/dist/src/util/attr.h up to 1.5
	external/ibm-public/postfix/dist/src/util/clean_env.c up to 1.3
	external/ibm-public/postfix/dist/src/util/dict.c up to 1.4
	external/ibm-public/postfix/dist/src/util/dict.h up to 1.5
	external/ibm-public/postfix/dist/src/util/dict_cache.c up to 1.4
	external/ibm-public/postfix/dist/src/util/dict_cdb.h up to 1.2
	external/ibm-public/postfix/dist/src/util/dict_cidr.c up to 1.5
	external/ibm-public/postfix/dist/src/util/dict_db.h up to 1.4
	external/ibm-public/postfix/dist/src/util/dict_dbm.h up to 1.2
	external/ibm-public/postfix/dist/src/util/dict_fail.h up to 1.2
	external/ibm-public/postfix/dist/src/util/dict_lmdb.h up to 1.3
	external/ibm-public/postfix/dist/src/util/dict_open.c up to 1.4
	external/ibm-public/postfix/dist/src/util/dict_pcre.c up to 1.5
	external/ibm-public/postfix/dist/src/util/dict_regexp.c up to 1.5
	external/ibm-public/postfix/dist/src/util/dict_sdbm.h up to 1.2
	external/ibm-public/postfix/dist/src/util/hash_fnv.c up to 1.3
	external/ibm-public/postfix/dist/src/util/hash_fnv.h up to 1.3
	external/ibm-public/postfix/dist/src/util/htable.c up to 1.4
	external/ibm-public/postfix/dist/src/util/inet_connect.c up to 1.3
	external/ibm-public/postfix/dist/src/util/make_dirs.c up to 1.2
	external/ibm-public/postfix/dist/src/util/match_list.c up to 1.3
	external/ibm-public/postfix/dist/src/util/mystrtok.c up to 1.4
	external/ibm-public/postfix/dist/src/util/mystrtok.ref up to 1.1.1.2
	external/ibm-public/postfix/dist/src/util/sock_addr.c up to 1.3
	external/ibm-public/postfix/dist/src/util/sock_addr.h up to 1.2
	external/ibm-public/postfix/dist/src/util/split_nameval.c up to 1.2
	external/ibm-public/postfix/dist/src/util/stringops.h up to 1.5
	external/ibm-public/postfix/dist/src/util/sys_defs.h up to 1.14
	external/ibm-public/postfix/dist/src/util/unix_send_fd.c up to 1.8
	external/ibm-public/postfix/dist/src/util/valid_hostname.c up to 1.3
	external/ibm-public/postfix/dist/src/util/valid_hostname.h up to 1.2
	external/ibm-public/postfix/dist/src/xsasl/xsasl_cyrus_server.c up to 1.4
	external/ibm-public/postfix/lib/global/Makefile up to 1.10
	external/ibm-public/postfix/lib/util/Makefile   up to 1.11
	doc/3RDPARTY					(apply patch)

Update Postfix to 3.8.4.
@
text
@d9 2
a10 73
	Scan Postfix code with github.com/googleprojectzero/weggli
	(depends on "rust").

	Investigate clang-format compatibility as a possible migration
	away from indent. This requires that the output is stable.

	Check out https://github.com/milter-manager/milter-manager/

	Check out https://cutter.osdn.jp/ (C/C++ unit tests).

	Follow https://github.com/vdukhovni/postfix/commits/rpk

	Multi-recipient support in sender/recipient_bcc_maps and
	always_bcc.

	Test for dns_rr_copy() + dns_rr_free().


	mail_conf_xxx supprt for non-negative numbers (i.e. 
	numbers with a lower bound of zero).

	Log anvil transgressions with their address range (in
	addition to the offending IP address. We should not disclose
	to random clients how we aggregate anvil event counters.

	Should "postconf -f" pretty-print text inside {}?

	Is there any code that calls attr_scan*() and that works
	when the number of attributes received < the expected number?
	If there is no such code, then we can simplify a few things.

	Update TLS_README diagram, tlsmgr no longer manages cert
	info.

	Consider renaming local_header_rewrite_clients to
	local_header_canonicalize_clients, as a more accurate name.
	Optionally support "local_header_canonicalize_classes =
	rewrite_addresses, add_missing_headers" (default setting).

	And ditto for remote_header_rewrite_domain, whether it
	should rewrite address, add missing headers, or both.

	Add weight factors to randmap, for example randmap:{{result1}*99,
	{result2}*1}. To parse out weights, see postscreen.

	randmap already allows randmap:{{result}, ...}, to support
	whitespace and comma in result values, but it should also
	extract the value from {}.

	Migrate masquerade_domains from ARGV to STRING_LIST, or
	deprecate this feature because it breaks table-driven address
	validation.

	Enforce var_line_limit in util/attr_scan*c. This is needed if
	we want to expose Postfix RPC protocols externally.

	Can tests use LD_PRELOAD to inject fake modules such as
	fake_dns(3), fake_msg(3), fake_myaddrinfo(3) and so on?
	One limitation is that functions etc. in a preloaded object
	always take precedence, even in code that is not being
	tested.

	'%l' support, similar to %D in the Dovecot LDAP driver.
	Subject: Feature request: '%l' expansion for ldap_table,
	Date: Tue, 5 Apr 2022.  Message-ID:
	<ef7c661c-d86a-2366-6a73-ec8d51d75012@@dev.snart.me>

	WARN_IF_REJECT like prefix that disables the error counter increment.

	Consider migrating Postfix server sockets from directory
	$queue_directory/public to $queue_directory/protected. The
	directory $queue_directory/public can then be used for
	non-Postfix listeners (one subdirectory per application).
d16 1
a16 4
	and sscanf("%ld or strtou?l()). This seems relevant for 32-bit
	systems. This would use a new REC_TYPE_OFFS with a corresponding
	data type of off_t, using off_cvt() for conversion from string,
	and new code to convert off_t to string.
a18 8
	If the idea is to introspect on a running Postfix system, this
	involves adding an RPC endpoint to specific Postfix services.
	That could work for single-instance services like qmgr, verify,
	postscreen.

	JSON logging?

	default_transport_maps? This would simplify configuration.
a20 5
	https://fabianlee.org/2019/10/23/docker-running-a-postfix-container-for-testing-mail-during-development/
	and https://github.com/docker-mailserver/docker-mailserver

	Add a pointer to
	https://github.com/tarickb/sasl-xoauth2 and/or
d24 2
a25 2
	Read the above links and see how we can improve usability on
	the Postfix side.
d267 4
d813 16
d841 9
@


1.1.1.2
log
@Import Postfix 3.8.4 (last was 3.7.3)

December 22, 2023: 3.8.4/3.7.9
==============================

Security: this release adds support to defend against an email
spoofing attack (SMTP smuggling) on recipients at a Postfix server.
For background, see https://www.postfix.org/smtp-smuggling.html.

Sites concerned about SMTP smuggling attacks should enable this
feature on Internet-facing Postfix servers. For compatibility with
non-standard clients, Postfix by default excludes clients in
mynetworks from this countermeasure.

The recommended settings are:

# Optionally disconnect remote SMTP clients that send bare newlines,
# but allow local clients with non-standard SMTP implementations
# such as netcat, fax machines, or load balancer health checks.
#
smtpd_forbid_bare_newline = yes
smtpd_forbid_bare_newline_exclusions = $mynetworks
The smtpd_forbid_bare_newline feature is disabled by default.

November 1, 2023: 3.8.3/3.7.8
=============================

Bugfix (defect introduced Postfix 2.5, date 20080104): the Postfix
SMTP server was waiting for a client command instead of replying
immediately, after a client certificate verification error in TLS
wrappermode. Reported by Andreas Kinzler.

Usability: the Postfix SMTP server (finally) attempts to log the
SASL username after authentication failure. In Postfix logging,
this appends ", sasl_username=xxx" after the reason for SASL
authentication failure. The logging replaces an unavailable reason
with "(reason unavailable)", and replaces an unavailable sasl_username
with "(unavailable)". Based on code by Jozsef Kadlecsik.

Compatibility bugfix (defect introduced: Postfix 2.11, date 20130405):
in forward_path, the expression ${recipient_delimiter} would expand
to an empty string when a recipient address had no recipient
delimiter. The compatibility fix is to use a configured recipient
delimiter value instead. Reported by Tod A. Sandman.

September 1, 2023: 3.8.2/3.7.7
==============================

Bugfix (defect introduced: Postfix alpha, 19980207): the valid_hostname()
check in the Postfix DNS client library was blocking unusual but
legitimate wildcard names (*.name) in some DNS lookup results and
lookup requests. Examples:

name          class/type result
*.one.example   IN CNAME *.other.example
*.other.example IN A     10.0.0.1
*.other.example IN TLSA  ..certificate info...
Such syntax is blesed in RFC 1034 section 4.3.3.

Bugfix (defect introduced: Postfix 3.0, 20140218): when an address
verification probe fails during or after an opportunistic TLS
handshake, don't enforce a minimum time-in-queue before falling
back to plaintext. Problem reported by Serg.

June 5, 2023: 3.8.1/3.7.6
=========================

Optional: harden a Postfix SMTP server against remote SMTP clients
that violate RFC 2920 (or 5321) command pipelining constraints.
With "smtpd_forbid_unauth_pipelining = yes", the server disconnects
a client immediately, after responding with "554 5.5.0 Error: SMTP
protocol synchronization" and after logging "improper command
pipelining" with the unexpected remote SMTP client input. This
feature is disabled by default in Postfix 3.5-3.8 to avoid breaking
home-grown utilities, but it is enabled by default in Postfix 3.9.
A similar feature is enabled by default in the Exim SMTP server.

Optional: some OS distributions crank up TLS security to 11, and
in doing so increase the number of plaintext email deliveries. This
introduces basic OpenSSL configuration file support that may be
used to override OS-level settings. Details are in the postconf(5)
manpage under tls_config_file and tls_config_name.

Bugfix (defect introduced: Postfix 1.0): the command "postconf ..
name=v1 .. name=v2 .." (multiple instances of the same parameter
name) created multiple main.cf name=value entries with the same
parameter name. It now logs a warning and skips the earlier name(s)
and value(s). Found during code maintenance.

Bugfix (defect introduced: Postfix 3.3): the command "postconf -M
name1/type1='name2 type2 ...'" died with a segmentation violation
when the request matched multiple master.cf entries. The master.cf
file was not damaged. Problem reported by SATOH Fumiyasu.

Bugfix (defect introduced: Postfix 2.11): the command "postconf -M
name1/type1='name2 type2 ...'" could add a service definition to
master.cf that conflicted with an already existing service definition.
It now replaces all existing service definitions that match the
service pattern 'name1/type1' or the service name and type in 'name2
type2 ...' with a single service definition 'name2 type2 ...'.
Problem reported by SATOH Fumiyasu.

Bugfix (defect introduced: Postfix 3.8) the posttls-finger command
could access uninitialized memory when reconnecting. This also
fixes a malformed warning message when a destination contains
":service" information. Reported by Thomas Korbar.

Bugfix (defect introduced: Postfix 3.2): the MySQL client could
return "not found" instead of "error" (for example, resulting in
a 5XX SMTP status instead of 4XX) during the time that all MySQL
server connections were turned down after error. Found during code
maintenance. File: global/dict_mysql.c. This was already fixed in
Postfix 3.4-3.7.

April 18, 2023: 3.7.5
=====================

Bugfix (problem introduced in Postfix 3.5): check_ccert_access did
not handle inline map specifications. Report and fix by Sean
Gallagher.

Bugfix (problem introduced in Postfix 3.4): the posttls-finger
command failed to detect that a connection was resumed in the case
that a server did not return a certificate. Fix by Viktor Dukhovni.

Workaround: OpenSSL 3.x EVP_get_cipherbyname() can return lazily-bound
handles. Postfix now checks that the expected functionality will
be available instead of failing later. Fix by Viktor Dukhovni.

Safety: the long form "{ name = value }" in import_environment or
export_environment is not documented (with spaces around the '='),
but it was silently accepted, and it was stored in the process
environment as the invalid form "name = value", thus not setting
or overriding an entry for "name". This form is now stored as the
expected "name=value". Found during code maintenance.

Bugfix (problem introduced in Postfix 3.2): the MySQL client could
return "not found" instead of "error" (for example, resulting in
a 5XX SMTP status instead of 4XX) during the time that all MySQL
server connections were turned down after error. Found during code
maintenance.

April 17, 2023: 3.8.0
=====================

Support to look up DNS SRV records in the Postfix SMTP/LMTP client,
Based on code by Tomas Korbar (Red Hat). For example, with
"use_srv_lookup = submission" and "relayhost = example.com:submission",
the Postfix SMTP client will look up DNS SRV records for
_submission._tcp.example.com, and will relay email through the
hosts and ports that are specified with those records.

TLS obsolescence: Postfix now treats the "export" and "low" cipher
grade settings as "medium". The "export" and "low" grades are no
longer supported in OpenSSL 1.1.1, the minimum version required in
Postfix 3.6.0 and later. Also, Postfix default settings now exclude
deprecated or unused ciphers (SEED, IDEA, 3DES, RC2, RC4, RC5),
digest (MD5), key exchange algorithms (DH, ECDH), and public key
algorithm (DSS).

Attack resistance: the Postfix SMTP server can now aggregate
smtpd_client_*_rate and smtpd_client_*_count statistics by network
block instead of by IP address, to raise the bar against a memory
exhaustion attack in the anvil(8) server; Postfix TLS support
unconditionally disables TLS renegotiation in the middle of an SMTP
connection, to avoid a CPU exhaustion attack.

The PostgreSQL client encoding is now configurable with the "encoding"
Postfix configuration file attribute. The default is "UTF8".
Previously the encoding was hard-coded as "LATIN1", which is not
useful in the context of SMTP.

The postconf command now warns for #comment in or after a Postfix
parameter value. Postfix programs do not support #comment after
other text, and treat that as input.


January 12, 2023: 3.7.4
=======================

Workaround: with OpenSSL 3 and later always turn on
SSL_OP_IGNORE_UNEXPECTED_EOF, to avoid warning messages and missed
opportunities for TLS session reuse. This is safe because the SMTP
protocol implements application-level framing, and is therefore
not affected by TLS truncation attacks. Fix by Viktor Dukhovni.

Workaround: OpenSSL 3.x EVP_get_digestbyname() can return lazily-bound
handles for digest implementations. In sufficiently hostile
configurations, Postfix could mistakenly believe that a digest
algorithm is available, and fail when it is not. A similar workaround
may be needed for EVP_get_cipherbyname(). Fix by Viktor Dukhovni.

Bugfix (bug introduced in Postfix 2.11): the checkok() macro in
tls/tls_fprint.c evaluated its argument unconditionally; it should
evaluate the argument only if there was no prior error. Found during
code review.

Bugfix (bug introduced in Postfix 2.8): postscreen died with a
segmentation violation when postscreen_dnsbl_threshold < 1. It
should reject such input with a fatal error instead. Discovered by
Benny Pedersen.

Bitrot: fixes for linker warnings from newer Darwin (MacOS) versions.
Viktor Dukhovni.

Portability: Linux 6 support.

Added missing documentation that cidr:, pcre: and regexp: tables
support inline specification only in Postfix 3.7 and later.
@
text
@d9 2
a10 73
	Scan Postfix code with github.com/googleprojectzero/weggli
	(depends on "rust").

	Investigate clang-format compatibility as a possible migration
	away from indent. This requires that the output is stable.

	Check out https://github.com/milter-manager/milter-manager/

	Check out https://cutter.osdn.jp/ (C/C++ unit tests).

	Follow https://github.com/vdukhovni/postfix/commits/rpk

	Multi-recipient support in sender/recipient_bcc_maps and
	always_bcc.

	Test for dns_rr_copy() + dns_rr_free().


	mail_conf_xxx supprt for non-negative numbers (i.e. 
	numbers with a lower bound of zero).

	Log anvil transgressions with their address range (in
	addition to the offending IP address. We should not disclose
	to random clients how we aggregate anvil event counters.

	Should "postconf -f" pretty-print text inside {}?

	Is there any code that calls attr_scan*() and that works
	when the number of attributes received < the expected number?
	If there is no such code, then we can simplify a few things.

	Update TLS_README diagram, tlsmgr no longer manages cert
	info.

	Consider renaming local_header_rewrite_clients to
	local_header_canonicalize_clients, as a more accurate name.
	Optionally support "local_header_canonicalize_classes =
	rewrite_addresses, add_missing_headers" (default setting).

	And ditto for remote_header_rewrite_domain, whether it
	should rewrite address, add missing headers, or both.

	Add weight factors to randmap, for example randmap:{{result1}*99,
	{result2}*1}. To parse out weights, see postscreen.

	randmap already allows randmap:{{result}, ...}, to support
	whitespace and comma in result values, but it should also
	extract the value from {}.

	Migrate masquerade_domains from ARGV to STRING_LIST, or
	deprecate this feature because it breaks table-driven address
	validation.

	Enforce var_line_limit in util/attr_scan*c. This is needed if
	we want to expose Postfix RPC protocols externally.

	Can tests use LD_PRELOAD to inject fake modules such as
	fake_dns(3), fake_msg(3), fake_myaddrinfo(3) and so on?
	One limitation is that functions etc. in a preloaded object
	always take precedence, even in code that is not being
	tested.

	'%l' support, similar to %D in the Dovecot LDAP driver.
	Subject: Feature request: '%l' expansion for ldap_table,
	Date: Tue, 5 Apr 2022.  Message-ID:
	<ef7c661c-d86a-2366-6a73-ec8d51d75012@@dev.snart.me>

	WARN_IF_REJECT like prefix that disables the error counter increment.

	Consider migrating Postfix server sockets from directory
	$queue_directory/public to $queue_directory/protected. The
	directory $queue_directory/public can then be used for
	non-Postfix listeners (one subdirectory per application).
d16 1
a16 4
	and sscanf("%ld or strtou?l()). This seems relevant for 32-bit
	systems. This would use a new REC_TYPE_OFFS with a corresponding
	data type of off_t, using off_cvt() for conversion from string,
	and new code to convert off_t to string.
a18 8
	If the idea is to introspect on a running Postfix system, this
	involves adding an RPC endpoint to specific Postfix services.
	That could work for single-instance services like qmgr, verify,
	postscreen.

	JSON logging?

	default_transport_maps? This would simplify configuration.
a20 5
	https://fabianlee.org/2019/10/23/docker-running-a-postfix-container-for-testing-mail-during-development/
	and https://github.com/docker-mailserver/docker-mailserver

	Add a pointer to
	https://github.com/tarickb/sasl-xoauth2 and/or
d24 2
a25 2
	Read the above links and see how we can improve usability on
	the Postfix side.
d267 4
d813 16
d841 9
@


1.1.1.2.4.1
log
@Sync with HEAD
@
text
@a4 3
	For the stable releases, make the spawn_command fix conditional
	on compatibility_level.

a8 150
	Add a mail_version chek to each pluggable database client.

	Unify conf/postfix-wrapper and proto/postfix-wrapper (make
	one a dependency of the other). They have diverged.

	Should the SMTP client log the queue ID with the TLS status?

	relay_recipient_maps empty should default to 'no valid
	recipients'. Subject to compatibility level.

	Replace static result buffers with per-instance buffers in
	dict_unix.c, dict_ni*c.

	The Milter 'quarantine' action should be reported with a
	call-back function, instead of setting the Milter default
	reply. However, we still need the existing 'reply' based
	channel to support "milter_default_action = quarantine".

	In pipe_command() and spawn_command(), the child process
	should call initgroups() to corrrectly the access rights
	of interactive shell users.

	relay_recipient_maps empty should default to 'no valid
	recipients'. Subject to compatibility level.

	In mantools/postlink, allow newline etc. in "<a href".

	Add an option for a TLSRPT built-in JSON generator. This
	would simplify TLSRPT adoption by eliminating a build-time
	and run-time dependency on the libtlsrpt client library.
	Prior art: this approach was previously used to implement
	Postfix Milter support.

	Make TLSRPT support pluggable (postfix-tlsrpt.so, like
	postfix-ldap.so, postfix-mysql.so and so on). This avods a
	hard install-time dependency on sys4 libtlsrpt. The sys4
	code would still be a required build-time dependency, but
	it would become an optional install-time dependency.

	Add smtp_tlsrpt_allow_list feature (default: static:all) to limit
	the domains for which Postfix generates TLSRPT daily summaries.

	Rename TLS_SESS_STATE.rpt_reported to skip_tlsrpt_report.

	Add unit tests for smtp_tlsrpt.c, tlstrpd_wrapper.c, ...

	Add sample master.cf entries for dovecot-lmtp and dovecot-pipe
	with flags=DORX as appropriate, and single-recipient hints.

	Add unit test for extpar.c

	Add tests for Message-ID extraction in the cleanup daemon.

	When debug logging is enabled, dict_db_open() logs a newline
	character after the version info.

	postsuper fails to write the maillog file while Postfix is
	down (the fallback to 'direct write' happens after an
	irreversible set_ugid() call). Possible solution: figure
	out if we can open the maillog file before dropping privileges.

	The postdrop code should be more explicit about what
	attrributes it will pass through. rec_attr_map() is not
	supposed to be an approver.

	Many master.cf services don't expect wakeup calls, resulting
	in weird warnings. Maybe the master daemon could signal the
	wakeup intent through a child process command-line option,
	so that the child can log "do not enable wakeups". Or the
	client could announce to the xxx_server-main() skeleton
	whether it wants wakeups. Or the child process could
	special-case messages that consist only of a "W". We're not
	using FIFOs anymore, and trigger servers could use a proper
	(attribute, value) protocol.

	The Sendmail feature _FFR_MDS_NEGOTIATE allows negotiating
	a larger milter command data size limit. To be investigated:
	what parts of the protocol are included in this limit when
	sending a message header (header name, protocol formatting,
	etc.) and how this will interact with the Postfix built-in
	header_size_limit (default: 102400).

	SEND_ATTR_FUNC should send the name of the object being sent,
	so that SCAN_ATTR_FUNC can check it.

	Send XFORWARD attributes in the SMTPD policy delegation
	protocol.

	With "smtpd_reject_unlisted_mumble = no" the Postfix SMTP
	server should still reject recipients that resolve to the
	error or retry transport.

	bounce/annotate.sh should include the 'QUICK INSTRUCTIONS'
	into the bounce.cf.default file.

	Should smtp_tls_wrappermode have an SMTP_TLS_POLICY override?

	The postsceen NON-SMTP test should log the command in
	the same format as the BARE NEWLINE and PREGREET tests.
	Consider logging the entire unadulterated command line.

	"postconf -d" should not complain about a missing master.cf
	file.

	qmgr_message.c should do the right thing when the
	double_bounce_sender value contains @@.

	migrate rbl -> dnsbl

	migrate smtpd_sasl_tls_security_options to "noanonymous"
	(drop the "noplaintext" part).

	Safety: restrict sender-dependent features to, for example,
	mail from an authorized client (SASL, TLS, or IP address).
	If this becomes the default then it needs to be subject to
	comptibility_level.

	Make some of the message editing features available for
	non-Milter configurations (for example, set envelope.from
	from primary header.from). 

	The postconf command needs more mongodb tests.

	The mongodb client needs tests.

	Change Postfix SMTP debug logging to display the entire
	input, instead of stopping at the first null byte.

	SRS-friendly envelope.from output rewrite in the SMTP client.
	TBD: before or after smtp_generic_maps. The two mechanisms
	are unlikely to be useful in combination.

	Cleanup: In documentation, replace DBM with LMDB (*.lmdb).

	Cleanup: Is it time to remove SDBM support? Its iterator
	was unusable, when the SDBM client was adopted in Postfix
	2.2.

	In documentation and configuration file examples, replace
	IPv4 address prefixes from Cloud9 with 192.168.* from RFC
	1918, and replace IPv6 address prefixes with unique local
	IPv6 address prefixes fd00:* from RFC 4193.

	Add a pre-release check for '.' instead of ','. Generalize
	from grep '[a-zA-Z0-9]\.  *[a-z]' proto/*|egrep -v
	'i\.e\.|etc\.|e\.g\.|\.  *[a-zA-Z0-9]*\('

	Update DKIM examples for signing with the benefits of forced
	MIME converison with "force_mime_input_conversion = yes"

d17 1
a17 2
	Check out https://github.com/clear-code/cutter
	(https://cutter.osdn.jp/) for C/C++ unit tests.
d19 1
a19 3
	postscreen hints to smtpd to suppress the server greeting
	after a remote SMTP client has pregreeted. This makes the
	PIPELINING detection more meaningful.
d24 3
@


1.1.1.3
log
@Import postfix-3.10.1 (previous was 3.8.4)

Summary:

Postfix 3.9 (July 2022): This release focused on enhancing the TLS
(Transport Layer Security) capabilities of Postfix. It introduced
support for TLSv1.3, allowing for more secure and efficient encrypted
communications. Additionally, improvements were made to the handling
of TLSA records, which are used in DNS-based Authentication of
Named Entities (DANE) to associate TLS certificates with domain
names.

Postfix 3.10 (July 2023): This version brought significant updates
to Postfix's SMTP (Simple Mail Transfer Protocol) functionalities.
It added support for the SMTPUTF8 extension, enabling the use of
UTF-8 encoding in email addresses and headers, which is essential
for internationalization. The release also included performance
optimizations, particularly in the handling of large mail queues,
and introduced new configuration parameters to provide administrators
with finer control over mail processing.

The changes are described more in detail in:
3.10 changes: RELEASE_NOTES
3.9  changes: RELEASE_NOTES_3.9
3.8  changes: RELEASE_NOTES_3.8
@
text
@a4 3
	For the stable releases, make the spawn_command fix conditional
	on compatibility_level.

a8 150
	Add a mail_version chek to each pluggable database client.

	Unify conf/postfix-wrapper and proto/postfix-wrapper (make
	one a dependency of the other). They have diverged.

	Should the SMTP client log the queue ID with the TLS status?

	relay_recipient_maps empty should default to 'no valid
	recipients'. Subject to compatibility level.

	Replace static result buffers with per-instance buffers in
	dict_unix.c, dict_ni*c.

	The Milter 'quarantine' action should be reported with a
	call-back function, instead of setting the Milter default
	reply. However, we still need the existing 'reply' based
	channel to support "milter_default_action = quarantine".

	In pipe_command() and spawn_command(), the child process
	should call initgroups() to corrrectly the access rights
	of interactive shell users.

	relay_recipient_maps empty should default to 'no valid
	recipients'. Subject to compatibility level.

	In mantools/postlink, allow newline etc. in "<a href".

	Add an option for a TLSRPT built-in JSON generator. This
	would simplify TLSRPT adoption by eliminating a build-time
	and run-time dependency on the libtlsrpt client library.
	Prior art: this approach was previously used to implement
	Postfix Milter support.

	Make TLSRPT support pluggable (postfix-tlsrpt.so, like
	postfix-ldap.so, postfix-mysql.so and so on). This avods a
	hard install-time dependency on sys4 libtlsrpt. The sys4
	code would still be a required build-time dependency, but
	it would become an optional install-time dependency.

	Add smtp_tlsrpt_allow_list feature (default: static:all) to limit
	the domains for which Postfix generates TLSRPT daily summaries.

	Rename TLS_SESS_STATE.rpt_reported to skip_tlsrpt_report.

	Add unit tests for smtp_tlsrpt.c, tlstrpd_wrapper.c, ...

	Add sample master.cf entries for dovecot-lmtp and dovecot-pipe
	with flags=DORX as appropriate, and single-recipient hints.

	Add unit test for extpar.c

	Add tests for Message-ID extraction in the cleanup daemon.

	When debug logging is enabled, dict_db_open() logs a newline
	character after the version info.

	postsuper fails to write the maillog file while Postfix is
	down (the fallback to 'direct write' happens after an
	irreversible set_ugid() call). Possible solution: figure
	out if we can open the maillog file before dropping privileges.

	The postdrop code should be more explicit about what
	attrributes it will pass through. rec_attr_map() is not
	supposed to be an approver.

	Many master.cf services don't expect wakeup calls, resulting
	in weird warnings. Maybe the master daemon could signal the
	wakeup intent through a child process command-line option,
	so that the child can log "do not enable wakeups". Or the
	client could announce to the xxx_server-main() skeleton
	whether it wants wakeups. Or the child process could
	special-case messages that consist only of a "W". We're not
	using FIFOs anymore, and trigger servers could use a proper
	(attribute, value) protocol.

	The Sendmail feature _FFR_MDS_NEGOTIATE allows negotiating
	a larger milter command data size limit. To be investigated:
	what parts of the protocol are included in this limit when
	sending a message header (header name, protocol formatting,
	etc.) and how this will interact with the Postfix built-in
	header_size_limit (default: 102400).

	SEND_ATTR_FUNC should send the name of the object being sent,
	so that SCAN_ATTR_FUNC can check it.

	Send XFORWARD attributes in the SMTPD policy delegation
	protocol.

	With "smtpd_reject_unlisted_mumble = no" the Postfix SMTP
	server should still reject recipients that resolve to the
	error or retry transport.

	bounce/annotate.sh should include the 'QUICK INSTRUCTIONS'
	into the bounce.cf.default file.

	Should smtp_tls_wrappermode have an SMTP_TLS_POLICY override?

	The postsceen NON-SMTP test should log the command in
	the same format as the BARE NEWLINE and PREGREET tests.
	Consider logging the entire unadulterated command line.

	"postconf -d" should not complain about a missing master.cf
	file.

	qmgr_message.c should do the right thing when the
	double_bounce_sender value contains @@.

	migrate rbl -> dnsbl

	migrate smtpd_sasl_tls_security_options to "noanonymous"
	(drop the "noplaintext" part).

	Safety: restrict sender-dependent features to, for example,
	mail from an authorized client (SASL, TLS, or IP address).
	If this becomes the default then it needs to be subject to
	comptibility_level.

	Make some of the message editing features available for
	non-Milter configurations (for example, set envelope.from
	from primary header.from). 

	The postconf command needs more mongodb tests.

	The mongodb client needs tests.

	Change Postfix SMTP debug logging to display the entire
	input, instead of stopping at the first null byte.

	SRS-friendly envelope.from output rewrite in the SMTP client.
	TBD: before or after smtp_generic_maps. The two mechanisms
	are unlikely to be useful in combination.

	Cleanup: In documentation, replace DBM with LMDB (*.lmdb).

	Cleanup: Is it time to remove SDBM support? Its iterator
	was unusable, when the SDBM client was adopted in Postfix
	2.2.

	In documentation and configuration file examples, replace
	IPv4 address prefixes from Cloud9 with 192.168.* from RFC
	1918, and replace IPv6 address prefixes with unique local
	IPv6 address prefixes fd00:* from RFC 4193.

	Add a pre-release check for '.' instead of ','. Generalize
	from grep '[a-zA-Z0-9]\.  *[a-z]' proto/*|egrep -v
	'i\.e\.|etc\.|e\.g\.|\.  *[a-zA-Z0-9]*\('

	Update DKIM examples for signing with the benefits of forced
	MIME converison with "force_mime_input_conversion = yes"

d17 1
a17 2
	Check out https://github.com/clear-code/cutter
	(https://cutter.osdn.jp/) for C/C++ unit tests.
d19 1
a19 3
	postscreen hints to smtpd to suppress the server greeting
	after a remote SMTP client has pregreeted. This makes the
	PIPELINING detection more meaningful.
d24 3
@


1.1.1.2.2.1
log
@file WISHLIST was added on branch netbsd-9 on 2023-12-25 12:54:30 +0000
@
text
@d1 1198
@


1.1.1.2.2.2
log
@Pull up the following, requeste by kim in ticket #1779:

	external/ibm-public/postfix/dist/README_FILES/BDAT_README up to 1.1.1.2
	external/ibm-public/postfix/dist/README_FILES/MAILLOG_README up to 1.1.1.4
	external/ibm-public/postfix/dist/README_FILES/POSTSCREEN_3_5_README up to 1.1.1.1
	external/ibm-public/postfix/dist/html/BDAT_README.html up to 1.1.1.3
	external/ibm-public/postfix/dist/html/MAILLOG_README.html up to 1.1.1.4
	external/ibm-public/postfix/dist/html/makedefs.1.html up to 1.1.1.3
	external/ibm-public/postfix/dist/html/postlogd.8.html up to 1.1.1.3
	external/ibm-public/postfix/dist/html/POSTSCREEN_3_5_README.html up to 1.1.1.2
	external/ibm-public/postfix/dist/html/postfix-doc.css up to 1.1.1.1
	external/ibm-public/postfix/dist/man/man1/makedefs.1 up to 1.3
	external/ibm-public/postfix/dist/man/man8/postlogd.8 up to 1.3
	external/ibm-public/postfix/dist/mantools/missing-proxy-read-maps up to 1.1.1.3
	external/ibm-public/postfix/dist/mantools/spelldiff up to 1.1.1.1
	external/ibm-public/postfix/dist/mantools/check-double-cc up to 1.1.1.2
	external/ibm-public/postfix/dist/mantools/check-double-install-proto-text up to 1.1.1.2
	external/ibm-public/postfix/dist/mantools/check-double-proto-html up to 1.1.1.2
	external/ibm-public/postfix/dist/mantools/comment.c up to 1.2
	external/ibm-public/postfix/dist/mantools/check-postfix-files up to 1.1.1.2
	external/ibm-public/postfix/dist/mantools/check-spell-cc up to 1.1.1.2
	external/ibm-public/postfix/dist/mantools/check-spell-install-proto-text up to 1.1.1.2
	external/ibm-public/postfix/dist/mantools/check-spell-proto-html up to 1.1.1.2
	external/ibm-public/postfix/dist/mantools/deroff up to 1.1.1.1
	external/ibm-public/postfix/dist/mantools/find-double up to 1.1.1.1
	external/ibm-public/postfix/dist/mantools/check-double-history up to 1.1.1.1
	external/ibm-public/postfix/dist/mantools/check-spell-history up to 1.1.1.1
	external/ibm-public/postfix/dist/mantools/check-table-proto up to 1.1.1.1
	external/ibm-public/postfix/dist/proto/BDAT_README.html up to 1.1.1.3
	external/ibm-public/postfix/dist/proto/MAILLOG_README.html up to 1.1.1.4
	external/ibm-public/postfix/dist/proto/POSTSCREEN_3_5_README.html up to 1.1.1.2
	external/ibm-public/postfix/dist/proto/stop.double-cc up to 1.1.1.2
	external/ibm-public/postfix/dist/proto/stop.double-install-proto-text up to 1.1.1.1
	external/ibm-public/postfix/dist/proto/stop.double-proto-html up to 1.1.1.2
	external/ibm-public/postfix/dist/proto/stop.spell-cc up to 1.1.1.2
	external/ibm-public/postfix/dist/proto/stop.spell-proto-html up to 1.1.1.2
	external/ibm-public/postfix/dist/proto/stop.double-history up to 1.1.1.1
	external/ibm-public/postfix/dist/proto/stop.spell-history up to 1.1.1.1
	external/ibm-public/postfix/dist/src/bounce/bounce_notify_util_tester.c up to 1.2
	external/ibm-public/postfix/dist/src/bounce/logfile-no-msgid-no-eoh-event up to 1.1.1.1
	external/ibm-public/postfix/dist/src/bounce/logfile-no-msgid-with-eoh-event up to 1.1.1.1
	external/ibm-public/postfix/dist/src/bounce/logfile-with-msgid-no-eoh-event up to 1.1.1.1
	external/ibm-public/postfix/dist/src/bounce/logfile-with-msgid-with-eoh-event up to 1.1.1.1
	external/ibm-public/postfix/dist/src/bounce/logfile-with-msgid-with-filter up to 1.1.1.1
	external/ibm-public/postfix/dist/src/bounce/logfile-with-msgid-with-long-line up to 1.1.1.1
	external/ibm-public/postfix/dist/src/bounce/msgfile-no-msgid-no-eoh-event up to 1.1.1.1
	external/ibm-public/postfix/dist/src/bounce/msgfile-no-msgid-with-eoh-event up to 1.1.1.1
	external/ibm-public/postfix/dist/src/bounce/msgfile-with-msgid-no-eoh-event up to 1.1.1.1
	external/ibm-public/postfix/dist/src/bounce/msgfile-with-msgid-with-eoh-event up to 1.1.1.1
	external/ibm-public/postfix/dist/src/bounce/obs_template_test.ref up to 1.1.1.1
	external/ibm-public/postfix/dist/src/bounce/msgfile-with-msgid-with-filter up to 1.1.1.1
	external/ibm-public/postfix/dist/src/bounce/msgfile-with-msgid-with-long-line up to 1.1.1.1
	external/ibm-public/postfix/dist/src/bounce/no-msgid-no-eoh-event-no-thread.ref up to 1.1.1.1
	external/ibm-public/postfix/dist/src/bounce/no-msgid-no-eoh-event-with-thread.ref up to 1.1.1.1
	external/ibm-public/postfix/dist/src/bounce/no-msgid-with-eoh-event-no-thread.ref up to 1.1.1.1
	external/ibm-public/postfix/dist/src/bounce/no-msgid-with-eoh-event-with-thread.ref up to 1.1.1.1
	external/ibm-public/postfix/dist/src/bounce/with-msgid-no-eoh-event-no-thread.ref up to 1.1.1.1
	external/ibm-public/postfix/dist/src/bounce/with-msgid-no-eoh-event-with-thread.ref up to 1.1.1.1
	external/ibm-public/postfix/dist/src/bounce/with-msgid-with-eoh-event-no-thread.ref up to 1.1.1.1
	external/ibm-public/postfix/dist/src/bounce/with-msgid-with-eoh-event-with-thread.ref up to 1.1.1.1
	external/ibm-public/postfix/dist/src/bounce/with-msgid-with-filter-no-thread.ref up to 1.1.1.1
	external/ibm-public/postfix/dist/src/bounce/with-msgid-with-filter-with-thread.ref up to 1.1.1.1
	external/ibm-public/postfix/dist/src/bounce/with-msgid-with-long-line-no-thread.ref up to 1.1.1.1
	external/ibm-public/postfix/dist/src/bounce/with-msgid-with-long-line-with-thread.ref up to 1.1.1.1
	external/ibm-public/postfix/dist/src/cleanup/cleanup_milter.in13e up to 1.1.1.1
	external/ibm-public/postfix/dist/src/cleanup/cleanup_milter.in13f up to 1.1.1.1
	external/ibm-public/postfix/dist/src/cleanup/cleanup_milter.in13g up to 1.1.1.1
	external/ibm-public/postfix/dist/src/cleanup/cleanup_milter.in13h up to 1.1.1.1
	external/ibm-public/postfix/dist/src/cleanup/cleanup_milter.in13i up to 1.1.1.1
	external/ibm-public/postfix/dist/src/cleanup/cleanup_milter.ref13e up to 1.1.1.1
	external/ibm-public/postfix/dist/src/cleanup/cleanup_milter.ref13f up to 1.1.1.1
	external/ibm-public/postfix/dist/src/cleanup/cleanup_milter.ref13g up to 1.1.1.1
	external/ibm-public/postfix/dist/src/cleanup/cleanup_milter.ref13h up to 1.1.1.1
	external/ibm-public/postfix/dist/src/cleanup/cleanup_milter.ref13i up to 1.1.1.1
	external/ibm-public/postfix/dist/src/cleanup/test-queue-file13e up to 1.1.1.1
	external/ibm-public/postfix/dist/src/cleanup/test-queue-file13f up to 1.1.1.1
	external/ibm-public/postfix/dist/src/cleanup/test-queue-file13g up to 1.1.1.1
	external/ibm-public/postfix/dist/src/cleanup/test-queue-file13h up to 1.1.1.1
	external/ibm-public/postfix/dist/src/cleanup/test-queue-file13i up to 1.1.1.1
	external/ibm-public/postfix/dist/src/cleanup/cleanup_milter.in17a up to 1.1.1.1
	external/ibm-public/postfix/dist/src/cleanup/cleanup_milter.in17b up to 1.1.1.1
	external/ibm-public/postfix/dist/src/cleanup/cleanup_milter.in17c up to 1.1.1.1
	external/ibm-public/postfix/dist/src/cleanup/cleanup_milter.in17d up to 1.1.1.1
	external/ibm-public/postfix/dist/src/cleanup/cleanup_milter.in17e up to 1.1.1.1
	external/ibm-public/postfix/dist/src/cleanup/cleanup_milter.in17f up to 1.1.1.1
	external/ibm-public/postfix/dist/src/cleanup/cleanup_milter.in17g up to 1.1.1.1
	external/ibm-public/postfix/dist/src/cleanup/cleanup_milter.ref17a1 up to 1.1.1.1
	external/ibm-public/postfix/dist/src/cleanup/cleanup_milter.ref17a2 up to 1.1.1.1
	external/ibm-public/postfix/dist/src/cleanup/cleanup_milter.ref17b1 up to 1.1.1.1
	external/ibm-public/postfix/dist/src/cleanup/cleanup_milter.ref17b2 up to 1.1.1.1
	external/ibm-public/postfix/dist/src/cleanup/cleanup_milter.ref17c1 up to 1.1.1.1
	external/ibm-public/postfix/dist/src/cleanup/cleanup_milter.ref17c2 up to 1.1.1.1
	external/ibm-public/postfix/dist/src/cleanup/cleanup_milter.ref17d1 up to 1.1.1.1
	external/ibm-public/postfix/dist/src/cleanup/cleanup_milter.ref17d2 up to 1.1.1.1
	external/ibm-public/postfix/dist/src/cleanup/cleanup_milter.ref17e1 up to 1.1.1.1
	external/ibm-public/postfix/dist/src/cleanup/cleanup_milter.ref17e2 up to 1.1.1.1
	external/ibm-public/postfix/dist/src/cleanup/cleanup_milter.ref17f1 up to 1.1.1.1
	external/ibm-public/postfix/dist/src/cleanup/cleanup_milter.ref17f2 up to 1.1.1.1
	external/ibm-public/postfix/dist/src/cleanup/cleanup_milter.ref17g1 up to 1.1.1.1
	external/ibm-public/postfix/dist/src/cleanup/cleanup_milter.ref17g2 up to 1.1.1.1
	external/ibm-public/postfix/dist/src/cleanup/test-queue-file17 up to 1.1.1.1
	external/ibm-public/postfix/dist/src/dns/dns_str_resflags.c up to 1.3
	external/ibm-public/postfix/dist/src/dns/dns_sec.c up to 1.2
	external/ibm-public/postfix/dist/src/global/header_body_checks_strip.ref up to 1.1.1.1
	external/ibm-public/postfix/dist/src/global/info_log_addr_form.c up to 1.2
	external/ibm-public/postfix/dist/src/global/info_log_addr_form.h up to 1.2
	external/ibm-public/postfix/dist/src/global/mail_addr_crunch.in up to 1.1.1.1
	external/ibm-public/postfix/dist/src/global/mail_addr_crunch.ref up to 1.1.1.1
	external/ibm-public/postfix/dist/src/global/mail_addr_find.in up to 1.1.1.1
	external/ibm-public/postfix/dist/src/global/map_search.c up to 1.4
	external/ibm-public/postfix/dist/src/global/map_search.h up to 1.2
	external/ibm-public/postfix/dist/src/global/mail_addr_find.ref up to 1.1.1.1
	external/ibm-public/postfix/dist/src/global/mail_addr_form.c up to 1.2
	external/ibm-public/postfix/dist/src/global/mail_addr_form.h up to 1.2
	external/ibm-public/postfix/dist/src/global/mail_addr_map.ref up to 1.1.1.1
	external/ibm-public/postfix/dist/src/global/maillog_client.c up to 1.3
	external/ibm-public/postfix/dist/src/global/maillog_client.h up to 1.2
	external/ibm-public/postfix/dist/src/global/map_search.ref up to 1.1.1.2
	external/ibm-public/postfix/dist/src/global/normalize_mailhost_addr.c up to 1.3
	external/ibm-public/postfix/dist/src/global/normalize_mailhost_addr.h up to 1.2
	external/ibm-public/postfix/dist/src/global/off_cvt.in up to 1.1.1.1
	external/ibm-public/postfix/dist/src/global/off_cvt.ref up to 1.1.1.1
	external/ibm-public/postfix/dist/src/global/quote_822_local.in up to 1.1.1.2
	external/ibm-public/postfix/dist/src/global/quote_822_local.ref up to 1.1.1.2
	external/ibm-public/postfix/dist/src/global/quote_flags.c up to 1.2
	external/ibm-public/postfix/dist/src/global/reject_deliver_request.c up to 1.2
	external/ibm-public/postfix/dist/src/global/compat_level.c up to 1.3
	external/ibm-public/postfix/dist/src/global/compat_level.h up to 1.3
	external/ibm-public/postfix/dist/src/global/test_main.c up to 1.2
	external/ibm-public/postfix/dist/src/global/compat_level_convert.in up to 1.1.1.1
	external/ibm-public/postfix/dist/src/global/compat_level_convert.ref up to 1.1.1.1
	external/ibm-public/postfix/dist/src/global/compat_level_expand.in up to 1.1.1.1
	external/ibm-public/postfix/dist/src/global/compat_level_expand.ref up to 1.1.1.1
	external/ibm-public/postfix/dist/src/global/config_known_tcp_ports.c up to 1.2
	external/ibm-public/postfix/dist/src/global/config_known_tcp_ports.h up to 1.2
	external/ibm-public/postfix/dist/src/global/config_known_tcp_ports.ref up to 1.1.1.1
	external/ibm-public/postfix/dist/src/global/delivered_hdr.ref up to 1.1.1.1
	external/ibm-public/postfix/dist/src/global/hfrom_format.c up to 1.2
	external/ibm-public/postfix/dist/src/global/hfrom_format.h up to 1.2
	external/ibm-public/postfix/dist/src/global/hfrom_format.ref up to 1.1.1.1
	external/ibm-public/postfix/dist/src/global/login_sender_match.c up to 1.2
	external/ibm-public/postfix/dist/src/global/login_sender_match.h up to 1.2
	external/ibm-public/postfix/dist/src/global/login_sender_match.ref up to 1.1.1.1
	external/ibm-public/postfix/dist/src/global/sasl_mech_filter.c up to 1.2
	external/ibm-public/postfix/dist/src/global/sasl_mech_filter.h up to 1.2
	external/ibm-public/postfix/dist/src/global/test_main.h up to 1.2
	external/ibm-public/postfix/dist/src/master/dgram_server.c up to 1.3
	external/ibm-public/postfix/dist/src/postconf/extract_cfg.sh up to 1.1.1.1
	external/ibm-public/postfix/dist/src/postconf/test64.ref up to 1.1.1.1
	external/ibm-public/postfix/dist/src/postconf/test65.ref up to 1.1.1.1
	external/ibm-public/postfix/dist/src/postconf/test66.ref up to 1.1.1.1
	external/ibm-public/postfix/dist/src/postconf/test67.ref up to 1.1.1.2
	external/ibm-public/postfix/dist/src/postconf/test68.ref up to 1.1.1.1
	external/ibm-public/postfix/dist/src/postconf/test69.ref up to 1.1.1.1
	external/ibm-public/postfix/dist/src/postconf/test70.ref up to 1.1.1.1
	external/ibm-public/postfix/dist/src/postconf/test71.ref up to 1.1.1.1
	external/ibm-public/postfix/dist/src/postmap/file_test.in up to 1.1.1.1
	external/ibm-public/postfix/dist/src/postmap/file_test.ref up to 1.1.1.1
	external/ibm-public/postfix/dist/src/postmap/quote_test.in up to 1.1.1.1
	external/ibm-public/postfix/dist/src/postmap/quote_test.ref up to 1.1.1.1
	external/ibm-public/postfix/dist/src/postmap/lmdb_abb up to 1.1.1.1
	external/ibm-public/postfix/dist/src/postmap/lmdb_abb.ref up to 1.1.1.1
	external/ibm-public/postfix/dist/src/smtp/smtp_misc.c up to 1.2
	external/ibm-public/postfix/dist/src/smtp/smtp_map11.in up to 1.1.1.1
	external/ibm-public/postfix/dist/src/smtpd/smtpd_addr_valid.in up to 1.1.1.2
	external/ibm-public/postfix/dist/src/smtpd/smtpd_addr_valid.ref up to 1.1.1.2
	external/ibm-public/postfix/dist/src/tls/bad-back-to-back-keys.pem up to 1.1.1.1
	external/ibm-public/postfix/dist/src/tls/bad-back-to-back-keys.pem.ref up to 1.1.1.1
	external/ibm-public/postfix/dist/src/tls/bad-ec-cert-before-key.pem up to 1.1.1.1
	external/ibm-public/postfix/dist/src/tls/bad-ec-cert-before-key.pem.ref up to 1.1.1.1
	external/ibm-public/postfix/dist/src/tls/bad-key-cert-mismatch.pem up to 1.1.1.1
	external/ibm-public/postfix/dist/src/tls/bad-key-cert-mismatch.pem.ref up to 1.1.1.1
	external/ibm-public/postfix/dist/src/tls/bad-rsa-key-last.pem up to 1.1.1.1
	external/ibm-public/postfix/dist/src/tls/bad-rsa-key-last.pem.ref up to 1.1.1.1
	external/ibm-public/postfix/dist/src/tls/ecca-cert.pem up to 1.1.1.1
	external/ibm-public/postfix/dist/src/tls/ecca-pkey.pem up to 1.1.1.1
	external/ibm-public/postfix/dist/src/tls/ecee-cert.pem up to 1.1.1.1
	external/ibm-public/postfix/dist/src/tls/ecee-pkey.pem up to 1.1.1.1
	external/ibm-public/postfix/dist/src/tls/ecroot-cert.pem up to 1.1.1.1
	external/ibm-public/postfix/dist/src/tls/ecroot-pkey.pem up to 1.1.1.1
	external/ibm-public/postfix/dist/src/tls/good-mixed-keyfirst.pem up to 1.1.1.1
	external/ibm-public/postfix/dist/src/tls/good-mixed-keyfirst.pem.ref up to 1.1.1.1
	external/ibm-public/postfix/dist/src/tls/good-mixed-keylast.pem up to 1.1.1.1
	external/ibm-public/postfix/dist/src/tls/good-mixed-keylast.pem.ref up to 1.1.1.1
	external/ibm-public/postfix/dist/src/tls/good-mixed-keymiddle.pem up to 1.1.1.1
	external/ibm-public/postfix/dist/src/tls/good-mixed-keymiddle.pem.ref up to 1.1.1.1
	external/ibm-public/postfix/dist/src/tls/goodchains.pem up to 1.1.1.1
	external/ibm-public/postfix/dist/src/tls/goodchains.pem.ref up to 1.1.1.1
	external/ibm-public/postfix/dist/src/tls/mkcert.sh up to 1.1.1.1
	external/ibm-public/postfix/dist/src/tls/rsaca-cert.pem up to 1.1.1.1
	external/ibm-public/postfix/dist/src/tls/rsaca-pkey.pem up to 1.1.1.1
	external/ibm-public/postfix/dist/src/tls/rsaee-cert.pem up to 1.1.1.1
	external/ibm-public/postfix/dist/src/tls/rsaee-pkey.pem up to 1.1.1.1
	external/ibm-public/postfix/dist/src/tls/rsaroot-cert.pem up to 1.1.1.1
	external/ibm-public/postfix/dist/src/tls/rsaroot-pkey.pem up to 1.1.1.1
	external/ibm-public/postfix/dist/src/tls/tls_proxy_client_misc.c up to 1.4
	external/ibm-public/postfix/dist/src/tls/tls_proxy_client_print.c up to 1.4
	external/ibm-public/postfix/dist/src/tls/tls_proxy_client_scan.c up to 1.4
	external/ibm-public/postfix/dist/src/tls/tls_proxy_context_print.c up to 1.3
	external/ibm-public/postfix/dist/src/tls/tls_proxy_context_scan.c up to 1.3
	external/ibm-public/postfix/dist/src/tls/tls_proxy_server_print.c up to 1.3
	external/ibm-public/postfix/dist/src/tls/tls_proxy_server_scan.c up to 1.3
	external/ibm-public/postfix/dist/src/tls/warn-mixed-multi-key.pem up to 1.1.1.1
	external/ibm-public/postfix/dist/src/tls/warn-mixed-multi-key.pem.ref up to 1.1.1.1
	external/ibm-public/postfix/dist/src/trivial-rewrite/transport.in up to 1.1.1.1
	external/ibm-public/postfix/dist/src/trivial-rewrite/transport.ref up to 1.1.1.1
	external/ibm-public/postfix/dist/src/util/mkmap_db.c up to 1.2
	external/ibm-public/postfix/dist/src/util/mkmap.h up to 1.2
	external/ibm-public/postfix/dist/src/util/argv_attr.h up to 1.3
	external/ibm-public/postfix/dist/src/util/argv_attr_print.c up to 1.3
	external/ibm-public/postfix/dist/src/util/argv_attr_scan.c up to 1.3
	external/ibm-public/postfix/dist/src/util/byte_mask.c up to 1.2
	external/ibm-public/postfix/dist/src/util/byte_mask.h up to 1.2
	external/ibm-public/postfix/dist/src/util/byte_mask.in up to 1.1.1.1
	external/ibm-public/postfix/dist/src/util/byte_mask.ref0 up to 1.1.1.1
	external/ibm-public/postfix/dist/src/util/byte_mask.ref1 up to 1.1.1.1
	external/ibm-public/postfix/dist/src/util/byte_mask.ref2 up to 1.1.1.1
	external/ibm-public/postfix/dist/src/util/dict_file.c up to 1.3
	external/ibm-public/postfix/dist/src/util/dict_cidr_file.in up to 1.1.1.1
	external/ibm-public/postfix/dist/src/util/logwriter.c up to 1.2
	external/ibm-public/postfix/dist/src/util/dict_cidr_file.map up to 1.1.1.1
	external/ibm-public/postfix/dist/src/util/dict_cidr_file.ref up to 1.1.1.1
	external/ibm-public/postfix/dist/src/util/dict_inline_file.ref up to 1.1.1.1
	external/ibm-public/postfix/dist/src/util/dict_pcre_file.in up to 1.1.1.1
	external/ibm-public/postfix/dist/src/util/dict_pcre_file.map up to 1.1.1.1
	external/ibm-public/postfix/dist/src/util/dict_pcre_file.ref up to 1.1.1.1
	external/ibm-public/postfix/dist/src/util/dict_pipe_test.in up to 1.1.1.1
	external/ibm-public/postfix/dist/src/util/dict_pipe_test.ref up to 1.1.1.1
	external/ibm-public/postfix/dist/src/util/dict_random.ref up to 1.1.1.1
	external/ibm-public/postfix/dist/src/util/dict_random_file.ref up to 1.1.1.1
	external/ibm-public/postfix/dist/src/util/dict_regexp_file.in up to 1.1.1.1
	external/ibm-public/postfix/dist/src/util/dict_regexp_file.map up to 1.1.1.1
	external/ibm-public/postfix/dist/src/util/dict_regexp_file.ref up to 1.1.1.1
	external/ibm-public/postfix/dist/src/util/dict_static_file.ref up to 1.1.1.1
	external/ibm-public/postfix/dist/src/util/dict_thash.in up to 1.1.1.1
	external/ibm-public/postfix/dist/src/util/dict_thash.ref up to 1.1.1.1
	external/ibm-public/postfix/dist/src/util/dict_union_test.in up to 1.1.1.1
	external/ibm-public/postfix/dist/src/util/dict_union_test.ref up to 1.1.1.1
	external/ibm-public/postfix/dist/src/util/logwriter.h up to 1.2
	external/ibm-public/postfix/dist/src/util/miss_endif_cidr.map up to 1.1.1.1
	external/ibm-public/postfix/dist/src/util/miss_endif_cidr.ref up to 1.1.1.1
	external/ibm-public/postfix/dist/src/util/miss_endif_pcre.ref up to 1.1.1.1
	external/ibm-public/postfix/dist/src/util/miss_endif_re.map up to 1.1.1.1
	external/ibm-public/postfix/dist/src/util/miss_endif_regexp.ref up to 1.1.1.1
	external/ibm-public/postfix/dist/src/util/msg_logger.c up to 1.3
	external/ibm-public/postfix/dist/src/util/msg_logger.h up to 1.2
	external/ibm-public/postfix/dist/src/util/split_qnameval.c up to 1.2
	external/ibm-public/postfix/dist/src/util/unix_dgram_connect.c up to 1.3
	external/ibm-public/postfix/dist/src/util/unix_dgram_listen.c up to 1.3
	external/ibm-public/postfix/dist/src/util/vbuf_print_test.in up to 1.1.1.1
	external/ibm-public/postfix/dist/src/util/vbuf_print_test.ref up to 1.1.1.1
	external/ibm-public/postfix/dist/src/util/vstream_test.in up to 1.1.1.1
	external/ibm-public/postfix/dist/src/util/vstream_test.ref up to 1.1.1.2
	external/ibm-public/postfix/dist/src/util/vstring_test.ref up to 1.1.1.1
	external/ibm-public/postfix/dist/src/util/sane_strtol.c up to 1.2
	external/ibm-public/postfix/dist/src/util/argv_split_at.c up to 1.2
	external/ibm-public/postfix/dist/src/util/dict_stream.c up to 1.2
	external/ibm-public/postfix/dist/src/util/dict_inline_cidr.ref up to 1.1.1.1
	external/ibm-public/postfix/dist/src/util/dict_inline_pcre.ref up to 1.1.1.1
	external/ibm-public/postfix/dist/src/util/dict_inline_regexp.ref up to 1.1.1.1
	external/ibm-public/postfix/dist/src/util/dict_stream.ref up to 1.1.1.1
	external/ibm-public/postfix/dist/src/util/find_inet.ref up to 1.1.1.1
	external/ibm-public/postfix/dist/src/util/hash_fnv.c up to 1.3
	external/ibm-public/postfix/dist/src/util/hash_fnv.h up to 1.3
	external/ibm-public/postfix/dist/src/util/known_tcp_ports.c up to 1.2
	external/ibm-public/postfix/dist/src/util/known_tcp_ports.h up to 1.2
	external/ibm-public/postfix/dist/src/util/known_tcp_ports.ref up to 1.1.1.1
	external/ibm-public/postfix/dist/src/util/ldseed.c up to 1.2
	external/ibm-public/postfix/dist/src/util/ldseed.h up to 1.2
	external/ibm-public/postfix/dist/src/util/mystrtok.ref up to 1.1.1.2
	external/ibm-public/postfix/dist/src/util/sane_strtol.h up to 1.2
	external/ibm-public/postfix/dist/src/util/inet_addr_sizes.c up to 1.2
	external/ibm-public/postfix/dist/src/util/inet_addr_sizes.h up to 1.2
	external/ibm-public/postfix/dist/src/util/inet_prefix_top.c up to 1.2
	external/ibm-public/postfix/dist/src/util/inet_prefix_top.h up to 1.2
	external/ibm-public/postfix/dist/src/util/mkmap_cdb.c up to 1.2
	external/ibm-public/postfix/dist/src/util/mkmap_dbm.c up to 1.2
	external/ibm-public/postfix/dist/src/util/mkmap_fail.c up to 1.2
	external/ibm-public/postfix/dist/src/util/mkmap_lmdb.c up to 1.2
	external/ibm-public/postfix/dist/src/util/mkmap_open.c up to 1.2
	external/ibm-public/postfix/dist/src/util/mkmap_sdbm.c up to 1.2
	external/ibm-public/postfix/dist/src/postlogd/Makefile.in up to 1.1.1.3
	external/ibm-public/postfix/dist/src/postlogd/postlogd.c up to 1.3
	external/ibm-public/postfix/dist/RELEASE_NOTES-3.1 up to 1.1.1.1
	external/ibm-public/postfix/dist/RELEASE_NOTES-3.2 up to 1.1.1.1
	external/ibm-public/postfix/dist/RELEASE_NOTES-3.3 up to 1.1.1.1
	external/ibm-public/postfix/dist/RELEASE_NOTES-3.4 up to 1.1.1.1
	external/ibm-public/postfix/dist/RELEASE_NOTES-3.5 up to 1.1.1.1
	external/ibm-public/postfix/dist/RELEASE_NOTES-3.6 up to 1.1.1.1
	external/ibm-public/postfix/dist/WISHLIST       up to 1.1.1.2
	external/ibm-public/postfix/dist/RELEASE_NOTES-3.7 up to 1.1.1.1
	external/ibm-public/postfix/dist/README_FILES/CYRUS_README delete
	external/ibm-public/postfix/dist/src/global/mkmap.h delete
	external/ibm-public/postfix/dist/src/global/mkmap_cdb.c delete
	external/ibm-public/postfix/dist/src/global/mkmap_db.c delete
	external/ibm-public/postfix/dist/src/global/mkmap_dbm.c delete
	external/ibm-public/postfix/dist/src/global/mkmap_fail.c delete
	external/ibm-public/postfix/dist/src/global/mkmap_lmdb.c delete
	external/ibm-public/postfix/dist/src/global/mkmap_open.c delete
	external/ibm-public/postfix/dist/src/global/mkmap_sdbm.c delete
	external/ibm-public/postfix/dist/src/smtp/map11_map delete
	external/ibm-public/postfix/dist/src/tls/tls_proxy_print.c delete
	external/ibm-public/postfix/dist/src/tls/tls_proxy_scan.c delete
	external/ibm-public/postfix/dist/src/util/percentm.c delete
	external/ibm-public/postfix/dist/src/util/percentm.h delete
	external/ibm-public/postfix/Makefile.inc        up to 1.31 (+patch)
	external/ibm-public/postfix/dist/AAAREADME      up to 1.1.1.4
	external/ibm-public/postfix/dist/HISTORY        up to 1.1.1.29
	external/ibm-public/postfix/dist/INSTALL        up to 1.1.1.9
	external/ibm-public/postfix/dist/LICENSE        up to 1.1.1.2
	external/ibm-public/postfix/dist/Makefile       up to 1.1.1.3
	external/ibm-public/postfix/dist/Makefile.in    up to 1.1.1.10
	external/ibm-public/postfix/dist/Makefile.init  up to 1.1.1.3
	external/ibm-public/postfix/dist/RELEASE_NOTES  up to 1.1.1.17
	external/ibm-public/postfix/dist/TLS_ACKNOWLEDGEMENTS up to 1.1.1.2
	external/ibm-public/postfix/dist/TLS_CHANGES    up to 1.1.1.2
	external/ibm-public/postfix/dist/TLS_LICENSE    up to 1.1.1.2
	external/ibm-public/postfix/dist/US_PATENT_6321267 up to 1.1.1.2
	external/ibm-public/postfix/dist/makedefs       up to 1.16
	external/ibm-public/postfix/dist/postfix-env.sh up to 1.1.1.2
	external/ibm-public/postfix/dist/postfix-install up to 1.8
	external/ibm-public/postfix/dist/README_FILES/AAAREADME up to 1.1.1.6
	external/ibm-public/postfix/dist/README_FILES/ADDRESS_CLASS_README up to 1.1.1.2
	external/ibm-public/postfix/dist/README_FILES/ADDRESS_REWRITING_README up to 1.1.1.5
	external/ibm-public/postfix/dist/README_FILES/ADDRESS_VERIFICATION_README up to 1.10
	external/ibm-public/postfix/dist/README_FILES/BACKSCATTER_README up to 1.1.1.5
	external/ibm-public/postfix/dist/README_FILES/BASIC_CONFIGURATION_README up to 1.1.1.6
	external/ibm-public/postfix/dist/README_FILES/BUILTIN_FILTER_README up to 1.1.1.3
	external/ibm-public/postfix/dist/README_FILES/COMPATIBILITY_README up to 1.1.1.3
	external/ibm-public/postfix/dist/README_FILES/CONNECTION_CACHE_README up to 1.1.1.5
	external/ibm-public/postfix/dist/README_FILES/DATABASE_README up to 1.1.1.9
	external/ibm-public/postfix/dist/README_FILES/DB_README up to 1.1.1.3
	external/ibm-public/postfix/dist/README_FILES/DEBUG_README up to 1.1.1.5
	external/ibm-public/postfix/dist/README_FILES/FILTER_README up to 1.1.1.4
	external/ibm-public/postfix/dist/README_FILES/FORWARD_SECRECY_README up to 1.1.1.5
	external/ibm-public/postfix/dist/README_FILES/INSTALL up to 1.10
	external/ibm-public/postfix/dist/README_FILES/IPV6_README up to 1.1.1.4
	external/ibm-public/postfix/dist/README_FILES/LDAP_README up to 1.1.1.4
	external/ibm-public/postfix/dist/README_FILES/LINUX_README up to 1.1.1.3
	external/ibm-public/postfix/dist/README_FILES/LMDB_README up to 1.1.1.3
	external/ibm-public/postfix/dist/README_FILES/MILTER_README up to 1.1.1.9
	external/ibm-public/postfix/dist/README_FILES/MULTI_INSTANCE_README up to 1.1.1.7
	external/ibm-public/postfix/dist/README_FILES/MYSQL_README up to 1.1.1.5
	external/ibm-public/postfix/dist/README_FILES/OVERVIEW up to 1.1.1.5
	external/ibm-public/postfix/dist/README_FILES/PCRE_README up to 1.1.1.3
	external/ibm-public/postfix/dist/README_FILES/PGSQL_README up to 1.1.1.4
	external/ibm-public/postfix/dist/README_FILES/POSTSCREEN_README up to 1.1.1.7
	external/ibm-public/postfix/dist/README_FILES/QSHAPE_README up to 1.1.1.4
	external/ibm-public/postfix/dist/README_FILES/RELEASE_NOTES up to 1.1.1.17
	external/ibm-public/postfix/dist/README_FILES/SASL_README up to 1.1.1.11
	external/ibm-public/postfix/dist/README_FILES/SCHEDULER_README up to 1.1.1.4
	external/ibm-public/postfix/dist/README_FILES/SMTPD_ACCESS_README up to 1.1.1.6
	external/ibm-public/postfix/dist/README_FILES/SMTPD_POLICY_README up to 1.1.1.7
	external/ibm-public/postfix/dist/README_FILES/SMTPD_PROXY_README up to 1.1.1.6
	external/ibm-public/postfix/dist/README_FILES/SMTPUTF8_README up to 1.1.1.3
	external/ibm-public/postfix/dist/README_FILES/SOHO_README up to 1.1.1.4
	external/ibm-public/postfix/dist/README_FILES/SQLITE_README up to 1.1.1.4
	external/ibm-public/postfix/dist/README_FILES/STANDARD_CONFIGURATION_README up to 1.1.1.6
	external/ibm-public/postfix/dist/README_FILES/STRESS_README up to 1.1.1.6
	external/ibm-public/postfix/dist/README_FILES/TLS_LEGACY_README up to 1.1.1.3
	external/ibm-public/postfix/dist/README_FILES/TLS_README up to 1.14
	external/ibm-public/postfix/dist/README_FILES/TUNING_README up to 1.1.1.5
	external/ibm-public/postfix/dist/README_FILES/VIRTUAL_README up to 1.1.1.3
	external/ibm-public/postfix/dist/README_FILES/XCLIENT_README up to 1.1.1.4
	external/ibm-public/postfix/dist/conf/LICENSE   up to 1.1.1.2
	external/ibm-public/postfix/dist/conf/TLS_LICENSE up to 1.1.1.2
	external/ibm-public/postfix/dist/conf/access    up to 1.1.1.8
	external/ibm-public/postfix/dist/conf/aliases   up to 1.1.1.5
	external/ibm-public/postfix/dist/conf/canonical up to 1.1.1.5
	external/ibm-public/postfix/dist/conf/generic   up to 1.1.1.4
	external/ibm-public/postfix/dist/conf/header_checks up to 1.1.1.6
	external/ibm-public/postfix/dist/conf/main.cf   up to 1.10
	external/ibm-public/postfix/dist/conf/master.cf up to 1.11
	external/ibm-public/postfix/dist/conf/post-install up to 1.4
	external/ibm-public/postfix/dist/conf/postfix-files up to 1.9
	external/ibm-public/postfix/dist/conf/postfix-script up to 1.4
	external/ibm-public/postfix/dist/conf/postfix-tls-script up to 1.5
	external/ibm-public/postfix/dist/conf/postmulti-script up to 1.3
	external/ibm-public/postfix/dist/conf/relocated up to 1.1.1.3
	external/ibm-public/postfix/dist/conf/transport up to 1.1.1.5
	external/ibm-public/postfix/dist/conf/virtual   up to 1.1.1.6
	external/ibm-public/postfix/dist/html/ADDRESS_CLASS_README.html up to 1.1.1.3
	external/ibm-public/postfix/dist/html/ADDRESS_REWRITING_README.html up to 1.1.1.6
	external/ibm-public/postfix/dist/html/ADDRESS_VERIFICATION_README.html up to 1.11
	external/ibm-public/postfix/dist/html/BACKSCATTER_README.html up to 1.1.1.6
	external/ibm-public/postfix/dist/html/BASIC_CONFIGURATION_README.html up to 1.1.1.7
	external/ibm-public/postfix/dist/html/BUILTIN_FILTER_README.html up to 1.1.1.5
	external/ibm-public/postfix/dist/html/CDB_README.html up to 1.1.1.4
	external/ibm-public/postfix/dist/html/COMPATIBILITY_README.html up to 1.1.1.4
	external/ibm-public/postfix/dist/html/CONNECTION_CACHE_README.html up to 1.1.1.6
	external/ibm-public/postfix/dist/html/CONTENT_INSPECTION_README.html up to 1.1.1.3
	external/ibm-public/postfix/dist/html/DATABASE_README.html up to 1.1.1.10
	external/ibm-public/postfix/dist/html/DB_README.html up to 1.1.1.4
	external/ibm-public/postfix/dist/html/DEBUG_README.html up to 1.1.1.6
	external/ibm-public/postfix/dist/html/DSN_README.html up to 1.1.1.3
	external/ibm-public/postfix/dist/html/ETRN_README.html up to 1.1.1.4
	external/ibm-public/postfix/dist/html/FILTER_README.html up to 1.1.1.5
	external/ibm-public/postfix/dist/html/FORWARD_SECRECY_README.html up to 1.1.1.5
	external/ibm-public/postfix/dist/html/INSTALL.html up to 1.10
	external/ibm-public/postfix/dist/html/IPV6_README.html up to 1.1.1.4
	external/ibm-public/postfix/dist/html/LDAP_README.html up to 1.1.1.6
	external/ibm-public/postfix/dist/html/LINUX_README.html up to 1.1.1.4
	external/ibm-public/postfix/dist/html/LMDB_README.html up to 1.1.1.4
	external/ibm-public/postfix/dist/html/LOCAL_RECIPIENT_README.html up to 1.1.1.3
	external/ibm-public/postfix/dist/html/MAILDROP_README.html up to 1.1.1.5
	external/ibm-public/postfix/dist/html/MEMCACHE_README.html up to 1.1.1.3
	external/ibm-public/postfix/dist/html/MILTER_README.html up to 1.1.1.9
	external/ibm-public/postfix/dist/html/MULTI_INSTANCE_README.html up to 1.1.1.9
	external/ibm-public/postfix/dist/html/MYSQL_README.html up to 1.1.1.5
	external/ibm-public/postfix/dist/html/Makefile.in up to 1.1.1.7
	external/ibm-public/postfix/dist/html/NFS_README.html up to 1.1.1.3
	external/ibm-public/postfix/dist/html/OVERVIEW.html up to 1.1.1.6
	external/ibm-public/postfix/dist/html/PACKAGE_README.html up to 1.1.1.5
	external/ibm-public/postfix/dist/html/PCRE_README.html up to 1.1.1.4
	external/ibm-public/postfix/dist/html/PGSQL_README.html up to 1.1.1.4
	external/ibm-public/postfix/dist/html/POSTSCREEN_README.html up to 1.1.1.8
	external/ibm-public/postfix/dist/html/QSHAPE_README.html up to 1.1.1.5
	external/ibm-public/postfix/dist/html/RESTRICTION_CLASS_README.html up to 1.1.1.5
	external/ibm-public/postfix/dist/html/SASL_README.html up to 1.1.1.11
	external/ibm-public/postfix/dist/html/SCHEDULER_README.html up to 1.1.1.5
	external/ibm-public/postfix/dist/html/SMTPD_ACCESS_README.html up to 1.1.1.7
	external/ibm-public/postfix/dist/html/SMTPD_POLICY_README.html up to 1.1.1.8
	external/ibm-public/postfix/dist/html/SMTPD_PROXY_README.html up to 1.1.1.6
	external/ibm-public/postfix/dist/html/SMTPUTF8_README.html up to 1.1.1.4
	external/ibm-public/postfix/dist/html/SOHO_README.html up to 1.1.1.6
	external/ibm-public/postfix/dist/html/SQLITE_README.html up to 1.1.1.4
	external/ibm-public/postfix/dist/html/STANDARD_CONFIGURATION_README.html up to 1.1.1.7
	external/ibm-public/postfix/dist/html/STRESS_README.html up to 1.1.1.7
	external/ibm-public/postfix/dist/html/TLS_LEGACY_README.html up to 1.1.1.5
	external/ibm-public/postfix/dist/html/TLS_README.html up to 1.15
	external/ibm-public/postfix/dist/html/TUNING_README.html up to 1.1.1.6
	external/ibm-public/postfix/dist/html/UUCP_README.html up to 1.1.1.4
	external/ibm-public/postfix/dist/html/VERP_README.html up to 1.1.1.5
	external/ibm-public/postfix/dist/html/VIRTUAL_README.html up to 1.1.1.6
	external/ibm-public/postfix/dist/html/XCLIENT_README.html up to 1.1.1.6
	external/ibm-public/postfix/dist/html/XFORWARD_README.html up to 1.1.1.4
	external/ibm-public/postfix/dist/html/access.5.html up to 1.1.1.9
	external/ibm-public/postfix/dist/html/aliases.5.html up to 1.1.1.7
	external/ibm-public/postfix/dist/html/anvil.8.html up to 1.1.1.6
	external/ibm-public/postfix/dist/html/bounce.5.html up to 1.1.1.5
	external/ibm-public/postfix/dist/html/bounce.8.html up to 1.1.1.7
	external/ibm-public/postfix/dist/html/canonical.5.html up to 1.1.1.6
	external/ibm-public/postfix/dist/html/cidr_table.5.html up to 1.1.1.6
	external/ibm-public/postfix/dist/html/cleanup.8.html up to 1.1.1.9
	external/ibm-public/postfix/dist/html/defer.8.html up to 1.1.1.7
	external/ibm-public/postfix/dist/html/discard.8.html up to 1.1.1.6
	external/ibm-public/postfix/dist/html/dnsblog.8.html up to 1.1.1.7
	external/ibm-public/postfix/dist/html/error.8.html up to 1.1.1.6
	external/ibm-public/postfix/dist/html/flush.8.html up to 1.1.1.6
	external/ibm-public/postfix/dist/html/generic.5.html up to 1.1.1.6
	external/ibm-public/postfix/dist/html/header_checks.5.html up to 1.1.1.9
	external/ibm-public/postfix/dist/html/index.html up to 1.1.1.8
	external/ibm-public/postfix/dist/html/ldap_table.5.html up to 1.1.1.7
	external/ibm-public/postfix/dist/html/lmdb_table.5.html up to 1.1.1.4
	external/ibm-public/postfix/dist/html/lmtp.8.html up to 1.1.1.12
	external/ibm-public/postfix/dist/html/local.8.html up to 1.1.1.7
	external/ibm-public/postfix/dist/html/mailq.1.html up to 1.1.1.8
	external/ibm-public/postfix/dist/html/master.5.html up to 1.1.1.9
	external/ibm-public/postfix/dist/html/master.8.html up to 1.1.1.8
	external/ibm-public/postfix/dist/html/memcache_table.5.html up to 1.1.1.6
	external/ibm-public/postfix/dist/html/mysql_table.5.html up to 1.1.1.8
	external/ibm-public/postfix/dist/html/newaliases.1.html up to 1.1.1.8
	external/ibm-public/postfix/dist/html/nisplus_table.5.html up to 1.1.1.5
	external/ibm-public/postfix/dist/html/oqmgr.8.html up to 1.1.1.9
	external/ibm-public/postfix/dist/html/pcre_table.5.html up to 1.1.1.6
	external/ibm-public/postfix/dist/html/pgsql_table.5.html up to 1.1.1.8
	external/ibm-public/postfix/dist/html/pickup.8.html up to 1.1.1.7
	external/ibm-public/postfix/dist/html/pipe.8.html up to 1.1.1.7
	external/ibm-public/postfix/dist/html/postalias.1.html up to 1.1.1.7
	external/ibm-public/postfix/dist/html/postcat.1.html up to 1.1.1.7
	external/ibm-public/postfix/dist/html/postconf.1.html up to 1.1.1.11
	external/ibm-public/postfix/dist/html/postconf.5.html up to 1.19
	external/ibm-public/postfix/dist/html/postdrop.1.html up to 1.1.1.7
	external/ibm-public/postfix/dist/html/postfix-manuals.html up to 1.1.1.8
	external/ibm-public/postfix/dist/html/postfix-tls.1.html up to 1.1.1.3
	external/ibm-public/postfix/dist/html/postfix-wrapper.5.html up to 1.1.1.6
	external/ibm-public/postfix/dist/html/postfix.1.html up to 1.1.1.9
	external/ibm-public/postfix/dist/html/postkick.1.html up to 1.1.1.7
	external/ibm-public/postfix/dist/html/postlock.1.html up to 1.1.1.6
	external/ibm-public/postfix/dist/html/postlog.1.html up to 1.1.1.6
	external/ibm-public/postfix/dist/html/postmap.1.html up to 1.1.1.7
	external/ibm-public/postfix/dist/html/postmulti.1.html up to 1.1.1.7
	external/ibm-public/postfix/dist/html/postqueue.1.html up to 1.1.1.9
	external/ibm-public/postfix/dist/html/postscreen.8.html up to 1.1.1.8
	external/ibm-public/postfix/dist/html/postsuper.1.html up to 1.1.1.7
	external/ibm-public/postfix/dist/html/posttls-finger.1.html up to 1.1.1.5
	external/ibm-public/postfix/dist/html/proxymap.8.html up to 1.1.1.8
	external/ibm-public/postfix/dist/html/qmgr.8.html up to 1.1.1.9
	external/ibm-public/postfix/dist/html/qmqp-sink.1.html up to 1.1.1.5
	external/ibm-public/postfix/dist/html/qmqp-source.1.html up to 1.1.1.5
	external/ibm-public/postfix/dist/html/qmqpd.8.html up to 1.1.1.8
	external/ibm-public/postfix/dist/html/qshape.1.html up to 1.1.1.4
	external/ibm-public/postfix/dist/html/regexp_table.5.html up to 1.1.1.6
	external/ibm-public/postfix/dist/html/relocated.5.html up to 1.1.1.5
	external/ibm-public/postfix/dist/html/scache.8.html up to 1.1.1.6
	external/ibm-public/postfix/dist/html/sendmail.1.html up to 1.1.1.8
	external/ibm-public/postfix/dist/html/showq.8.html up to 1.1.1.7
	external/ibm-public/postfix/dist/html/smtp-sink.1.html up to 1.1.1.6
	external/ibm-public/postfix/dist/html/smtp-source.1.html up to 1.1.1.5
	external/ibm-public/postfix/dist/html/smtp.8.html up to 1.1.1.12
	external/ibm-public/postfix/dist/html/smtpd.8.html up to 1.1.1.13
	external/ibm-public/postfix/dist/html/socketmap_table.5.html up to 1.1.1.5
	external/ibm-public/postfix/dist/html/spawn.8.html up to 1.1.1.6
	external/ibm-public/postfix/dist/html/sqlite_table.5.html up to 1.1.1.6
	external/ibm-public/postfix/dist/html/tcp_table.5.html up to 1.1.1.6
	external/ibm-public/postfix/dist/html/tlsmgr.8.html up to 1.1.1.6
	external/ibm-public/postfix/dist/html/tlsproxy.8.html up to 1.1.1.8
	external/ibm-public/postfix/dist/html/trace.8.html up to 1.1.1.7
	external/ibm-public/postfix/dist/html/transport.5.html up to 1.1.1.7
	external/ibm-public/postfix/dist/html/trivial-rewrite.8.html up to 1.1.1.7
	external/ibm-public/postfix/dist/html/verify.8.html up to 1.1.1.8
	external/ibm-public/postfix/dist/html/virtual.5.html up to 1.1.1.7
	external/ibm-public/postfix/dist/html/virtual.8.html up to 1.1.1.7
	external/ibm-public/postfix/dist/man/Makefile.in up to 1.1.1.7
	external/ibm-public/postfix/dist/man/man1/postalias.1 up to 1.4
	external/ibm-public/postfix/dist/man/man1/postcat.1 up to 1.4
	external/ibm-public/postfix/dist/man/man1/postconf.1 up to 1.4
	external/ibm-public/postfix/dist/man/man1/postdrop.1 up to 1.4
	external/ibm-public/postfix/dist/man/man1/postfix-tls.1 up to 1.3
	external/ibm-public/postfix/dist/man/man1/postfix.1 up to 1.6
	external/ibm-public/postfix/dist/man/man1/postkick.1 up to 1.3
	external/ibm-public/postfix/dist/man/man1/postlock.1 up to 1.3
	external/ibm-public/postfix/dist/man/man1/postlog.1 up to 1.5
	external/ibm-public/postfix/dist/man/man1/postmap.1 up to 1.4
	external/ibm-public/postfix/dist/man/man1/postmulti.1 up to 1.4
	external/ibm-public/postfix/dist/man/man1/postqueue.1 up to 1.5
	external/ibm-public/postfix/dist/man/man1/postsuper.1 up to 1.4
	external/ibm-public/postfix/dist/man/man1/posttls-finger.1 up to 1.5
	external/ibm-public/postfix/dist/man/man1/sendmail.1 up to 1.4
	external/ibm-public/postfix/dist/man/man1/smtp-sink.1 up to 1.3
	external/ibm-public/postfix/dist/man/man5/access.5 up to 1.4
	external/ibm-public/postfix/dist/man/man5/aliases.5 up to 1.5
	external/ibm-public/postfix/dist/man/man5/canonical.5 up to 1.4
	external/ibm-public/postfix/dist/man/man5/cidr_table.5 up to 1.5
	external/ibm-public/postfix/dist/man/man5/generic.5 up to 1.4
	external/ibm-public/postfix/dist/man/man5/header_checks.5 up to 1.3
	external/ibm-public/postfix/dist/man/man5/ldap_table.5 up to 1.5
	external/ibm-public/postfix/dist/man/man5/lmdb_table.5 up to 1.3
	external/ibm-public/postfix/dist/man/man5/master.5 up to 1.4
	external/ibm-public/postfix/dist/man/man5/mysql_table.5 up to 1.5
	external/ibm-public/postfix/dist/man/man5/pcre_table.5 up to 1.4
	external/ibm-public/postfix/dist/man/man5/pgsql_table.5 up to 1.5
	external/ibm-public/postfix/dist/man/man5/postconf.5 up to 1.19
	external/ibm-public/postfix/dist/man/man5/regexp_table.5 up to 1.4
	external/ibm-public/postfix/dist/man/man5/relocated.5 up to 1.3
	external/ibm-public/postfix/dist/man/man5/socketmap_table.5 up to 1.3
	external/ibm-public/postfix/dist/man/man5/sqlite_table.5 up to 1.4
	external/ibm-public/postfix/dist/man/man5/tcp_table.5 up to 1.3
	external/ibm-public/postfix/dist/man/man5/transport.5 up to 1.4
	external/ibm-public/postfix/dist/man/man5/virtual.5 up to 1.5
	external/ibm-public/postfix/dist/man/man8/anvil.8 up to 1.3
	external/ibm-public/postfix/dist/man/man8/bounce.8 up to 1.4
	external/ibm-public/postfix/dist/man/man8/cleanup.8 up to 1.4
	external/ibm-public/postfix/dist/man/man8/discard.8 up to 1.3
	external/ibm-public/postfix/dist/man/man8/dnsblog.8 up to 1.4
	external/ibm-public/postfix/dist/man/man8/error.8 up to 1.3
	external/ibm-public/postfix/dist/man/man8/flush.8 up to 1.3
	external/ibm-public/postfix/dist/man/man8/local.8 up to 1.4
	external/ibm-public/postfix/dist/man/man8/master.8 up to 1.4
	external/ibm-public/postfix/dist/man/man8/oqmgr.8 up to 1.3
	external/ibm-public/postfix/dist/man/man8/pickup.8 up to 1.3
	external/ibm-public/postfix/dist/man/man8/pipe.8 up to 1.4
	external/ibm-public/postfix/dist/man/man8/postscreen.8 up to 1.5
	external/ibm-public/postfix/dist/man/man8/proxymap.8 up to 1.3
	external/ibm-public/postfix/dist/man/man8/qmgr.8 up to 1.3
	external/ibm-public/postfix/dist/man/man8/qmqpd.8 up to 1.4
	external/ibm-public/postfix/dist/man/man8/scache.8 up to 1.3
	external/ibm-public/postfix/dist/man/man8/showq.8 up to 1.3
	external/ibm-public/postfix/dist/man/man8/smtp.8 up to 1.5
	external/ibm-public/postfix/dist/man/man8/smtpd.8 up to 1.5
	external/ibm-public/postfix/dist/man/man8/spawn.8 up to 1.4
	external/ibm-public/postfix/dist/man/man8/tlsmgr.8 up to 1.3
	external/ibm-public/postfix/dist/man/man8/tlsproxy.8 up to 1.5
	external/ibm-public/postfix/dist/man/man8/trivial-rewrite.8 up to 1.4
	external/ibm-public/postfix/dist/man/man8/verify.8 up to 1.4
	external/ibm-public/postfix/dist/man/man8/virtual.8 up to 1.4
	external/ibm-public/postfix/dist/mantools/ccformat up to 1.1.1.3
	external/ibm-public/postfix/dist/mantools/check-postlink up to 1.1.1.3
	external/ibm-public/postfix/dist/mantools/fixman up to 1.1.1.3
	external/ibm-public/postfix/dist/mantools/make-relnotes up to 1.1.1.3
	external/ibm-public/postfix/dist/mantools/make_soho_readme up to 1.1.1.4
	external/ibm-public/postfix/dist/mantools/makemanidx up to 1.1.1.4
	external/ibm-public/postfix/dist/mantools/man2html up to 1.1.1.5
	external/ibm-public/postfix/dist/mantools/manlint up to 1.1.1.2
	external/ibm-public/postfix/dist/mantools/manspell up to 1.1.1.2
	external/ibm-public/postfix/dist/mantools/postconf2man up to 1.1.1.5
	external/ibm-public/postfix/dist/mantools/postlink up to 1.1.1.13
	external/ibm-public/postfix/dist/mantools/readme2html up to 1.1.1.2
	external/ibm-public/postfix/dist/mantools/spell up to 1.1.1.3
	external/ibm-public/postfix/dist/mantools/srctoman up to 1.1.1.3
	external/ibm-public/postfix/dist/proto/ADDRESS_CLASS_README.html up to 1.1.1.3
	external/ibm-public/postfix/dist/proto/ADDRESS_REWRITING_README.html up to 1.1.1.5
	external/ibm-public/postfix/dist/proto/ADDRESS_VERIFICATION_README.html up to 1.11
	external/ibm-public/postfix/dist/proto/BACKSCATTER_README.html up to 1.1.1.5
	external/ibm-public/postfix/dist/proto/BASIC_CONFIGURATION_README.html up to 1.1.1.6
	external/ibm-public/postfix/dist/proto/BUILTIN_FILTER_README.html up to 1.1.1.4
	external/ibm-public/postfix/dist/proto/CDB_README.html up to 1.1.1.4
	external/ibm-public/postfix/dist/proto/COMPATIBILITY_README.html up to 1.1.1.4
	external/ibm-public/postfix/dist/proto/CONNECTION_CACHE_README.html up to 1.1.1.6
	external/ibm-public/postfix/dist/proto/CONTENT_INSPECTION_README.html up to 1.1.1.3
	external/ibm-public/postfix/dist/proto/DATABASE_README.html up to 1.1.1.10
	external/ibm-public/postfix/dist/proto/DB_README.html up to 1.1.1.4
	external/ibm-public/postfix/dist/proto/DEBUG_README.html up to 1.1.1.6
	external/ibm-public/postfix/dist/proto/DSN_README.html up to 1.1.1.3
	external/ibm-public/postfix/dist/proto/ETRN_README.html up to 1.1.1.3
	external/ibm-public/postfix/dist/proto/FILTER_README.html up to 1.1.1.5
	external/ibm-public/postfix/dist/proto/FORWARD_SECRECY_README.html up to 1.1.1.5
	external/ibm-public/postfix/dist/proto/INSTALL.html up to 1.10
	external/ibm-public/postfix/dist/proto/IPV6_README.html up to 1.1.1.4
	external/ibm-public/postfix/dist/proto/LDAP_README.html up to 1.1.1.5
	external/ibm-public/postfix/dist/proto/LINUX_README.html up to 1.1.1.4
	external/ibm-public/postfix/dist/proto/LMDB_README.html up to 1.1.1.4
	external/ibm-public/postfix/dist/proto/LOCAL_RECIPIENT_README.html up to 1.1.1.3
	external/ibm-public/postfix/dist/proto/MAILDROP_README.html up to 1.1.1.4
	external/ibm-public/postfix/dist/proto/MEMCACHE_README.html up to 1.1.1.3
	external/ibm-public/postfix/dist/proto/MILTER_README.html up to 1.1.1.9
	external/ibm-public/postfix/dist/proto/MULTI_INSTANCE_README.html up to 1.1.1.8
	external/ibm-public/postfix/dist/proto/MYSQL_README.html up to 1.1.1.5
	external/ibm-public/postfix/dist/proto/Makefile.in up to 1.1.1.7
	external/ibm-public/postfix/dist/proto/NFS_README.html up to 1.1.1.3
	external/ibm-public/postfix/dist/proto/OVERVIEW.html up to 1.1.1.6
	external/ibm-public/postfix/dist/proto/PACKAGE_README.html up to 1.1.1.5
	external/ibm-public/postfix/dist/proto/PCRE_README.html up to 1.1.1.4
	external/ibm-public/postfix/dist/proto/PGSQL_README.html up to 1.1.1.4
	external/ibm-public/postfix/dist/proto/POSTSCREEN_README.html up to 1.1.1.8
	external/ibm-public/postfix/dist/proto/QSHAPE_README.html up to 1.1.1.4
	external/ibm-public/postfix/dist/proto/RESTRICTION_CLASS_README.html up to 1.1.1.4
	external/ibm-public/postfix/dist/proto/SASL_README.html up to 1.1.1.11
	external/ibm-public/postfix/dist/proto/SCHEDULER_README.html up to 1.1.1.5
	external/ibm-public/postfix/dist/proto/SMTPD_ACCESS_README.html up to 1.1.1.6
	external/ibm-public/postfix/dist/proto/SMTPD_POLICY_README.html up to 1.1.1.7
	external/ibm-public/postfix/dist/proto/SMTPD_PROXY_README.html up to 1.1.1.6
	external/ibm-public/postfix/dist/proto/SMTPUTF8_README.html up to 1.1.1.4
	external/ibm-public/postfix/dist/proto/SQLITE_README.html up to 1.1.1.4
	external/ibm-public/postfix/dist/proto/STANDARD_CONFIGURATION_README.html up to 1.1.1.6
	external/ibm-public/postfix/dist/proto/STRESS_README.html up to 1.1.1.7
	external/ibm-public/postfix/dist/proto/TLS_LEGACY_README.html up to 1.1.1.4
	external/ibm-public/postfix/dist/proto/TLS_README.html up to 1.14
	external/ibm-public/postfix/dist/proto/TUNING_README.html up to 1.1.1.6
	external/ibm-public/postfix/dist/proto/UUCP_README.html up to 1.1.1.3
	external/ibm-public/postfix/dist/proto/VERP_README.html up to 1.1.1.5
	external/ibm-public/postfix/dist/proto/VIRTUAL_README.html up to 1.1.1.4
	external/ibm-public/postfix/dist/proto/XCLIENT_README.html up to 1.1.1.6
	external/ibm-public/postfix/dist/proto/XFORWARD_README.html up to 1.1.1.4
	external/ibm-public/postfix/dist/proto/access   up to 1.1.1.8
	external/ibm-public/postfix/dist/proto/aliases  up to 1.1.1.6
	external/ibm-public/postfix/dist/proto/canonical up to 1.1.1.5
	external/ibm-public/postfix/dist/proto/cidr_table up to 1.1.1.6
	external/ibm-public/postfix/dist/proto/generic  up to 1.1.1.4
	external/ibm-public/postfix/dist/proto/header_checks up to 1.1.1.7
	external/ibm-public/postfix/dist/proto/ldap_table up to 1.1.1.7
	external/ibm-public/postfix/dist/proto/lmdb_table up to 1.1.1.3
	external/ibm-public/postfix/dist/proto/master   up to 1.1.1.8
	external/ibm-public/postfix/dist/proto/mysql_table up to 1.1.1.8
	external/ibm-public/postfix/dist/proto/pcre_table up to 1.1.1.6
	external/ibm-public/postfix/dist/proto/pgsql_table up to 1.1.1.8
	external/ibm-public/postfix/dist/proto/postconf.html.prolog up to 1.1.1.5
	external/ibm-public/postfix/dist/proto/postconf.man.prolog up to 1.1.1.4
	external/ibm-public/postfix/dist/proto/postconf.proto up to 1.19
	external/ibm-public/postfix/dist/proto/regexp_table up to 1.1.1.6
	external/ibm-public/postfix/dist/proto/relocated up to 1.1.1.3
	external/ibm-public/postfix/dist/proto/socketmap_table up to 1.1.1.3
	external/ibm-public/postfix/dist/proto/sqlite_table up to 1.1.1.5
	external/ibm-public/postfix/dist/proto/stop     up to 1.1.1.7
	external/ibm-public/postfix/dist/proto/tcp_table up to 1.1.1.4
	external/ibm-public/postfix/dist/proto/transport up to 1.1.1.5
	external/ibm-public/postfix/dist/proto/virtual  up to 1.1.1.6
	external/ibm-public/postfix/dist/src/anvil/Makefile.in up to 1.1.1.3
	external/ibm-public/postfix/dist/src/anvil/anvil.c up to 1.4
	external/ibm-public/postfix/dist/src/bounce/2template_test.in up to 1.1.1.2
	external/ibm-public/postfix/dist/src/bounce/Makefile.in up to 1.1.1.5
	external/ibm-public/postfix/dist/src/bounce/bounce.c up to 1.4
	external/ibm-public/postfix/dist/src/bounce/bounce_notify_util.c up to 1.4
	external/ibm-public/postfix/dist/src/bounce/bounce_service.h up to 1.3
	external/ibm-public/postfix/dist/src/bounce/bounce_template.c up to 1.4
	external/ibm-public/postfix/dist/src/bounce/bounce_template.h up to 1.3
	external/ibm-public/postfix/dist/src/bounce/bounce_templates.c up to 1.3
	external/ibm-public/postfix/dist/src/bounce/template_test.ref up to 1.1.1.2
	external/ibm-public/postfix/dist/src/cleanup/Makefile.in up to 1.1.1.9
	external/ibm-public/postfix/dist/src/cleanup/cleanup.c up to 1.8
	external/ibm-public/postfix/dist/src/cleanup/cleanup.h up to 1.10
	external/ibm-public/postfix/dist/src/cleanup/cleanup_addr.c up to 1.3
	external/ibm-public/postfix/dist/src/cleanup/cleanup_api.c up to 1.4
	external/ibm-public/postfix/dist/src/cleanup/cleanup_body_edit.c up to 1.3
	external/ibm-public/postfix/dist/src/cleanup/cleanup_envelope.c up to 1.5
	external/ibm-public/postfix/dist/src/cleanup/cleanup_init.c up to 1.7
	external/ibm-public/postfix/dist/src/cleanup/cleanup_map11.c up to 1.3
	external/ibm-public/postfix/dist/src/cleanup/cleanup_map1n.c up to 1.4
	external/ibm-public/postfix/dist/src/cleanup/cleanup_message.c up to 1.4
	external/ibm-public/postfix/dist/src/cleanup/cleanup_milter.c up to 1.5
	external/ibm-public/postfix/dist/src/cleanup/cleanup_milter.ref13c up to 1.1.1.2
	external/ibm-public/postfix/dist/src/cleanup/cleanup_milter.ref13d up to 1.1.1.2
	external/ibm-public/postfix/dist/src/cleanup/cleanup_out.c up to 1.3
	external/ibm-public/postfix/dist/src/cleanup/cleanup_out_recipient.c up to 1.4
	external/ibm-public/postfix/dist/src/cleanup/cleanup_region.c up to 1.3
	external/ibm-public/postfix/dist/src/cleanup/cleanup_state.c up to 1.4
	external/ibm-public/postfix/dist/src/discard/Makefile.in up to 1.1.1.3
	external/ibm-public/postfix/dist/src/discard/discard.c up to 1.3
	external/ibm-public/postfix/dist/src/dns/Makefile.in up to 1.1.1.5
	external/ibm-public/postfix/dist/src/dns/dns.h  up to 1.6
	external/ibm-public/postfix/dist/src/dns/dns_lookup.c up to 1.8
	external/ibm-public/postfix/dist/src/dns/dns_rr.c up to 1.3
	external/ibm-public/postfix/dist/src/dns/dns_rr_eq_sa.c up to 1.3
	external/ibm-public/postfix/dist/src/dns/dns_rr_eq_sa.in up to 1.1.1.3
	external/ibm-public/postfix/dist/src/dns/dns_rr_eq_sa.ref up to 1.1.1.5
	external/ibm-public/postfix/dist/src/dns/dns_rr_to_pa.ref up to 1.1.1.3
	external/ibm-public/postfix/dist/src/dns/dns_rr_to_sa.ref up to 1.1.1.3
	external/ibm-public/postfix/dist/src/dns/dns_sa_to_rr.c up to 1.3
	external/ibm-public/postfix/dist/src/dns/dns_sa_to_rr.ref up to 1.1.1.5
	external/ibm-public/postfix/dist/src/dns/dns_strrecord.c up to 1.3
	external/ibm-public/postfix/dist/src/dns/dns_strtype.c up to 1.2
	external/ibm-public/postfix/dist/src/dns/dnsbl_ttl_127.0.0.1_bind_ncache.ref up to 1.1.1.2
	external/ibm-public/postfix/dist/src/dns/dnsbl_ttl_127.0.0.1_bind_plain.ref up to 1.1.1.2
	external/ibm-public/postfix/dist/src/dns/dnsbl_ttl_127.0.0.2_bind_plain.ref up to 1.1.1.2
	external/ibm-public/postfix/dist/src/dns/error.ref up to 1.1.1.3
	external/ibm-public/postfix/dist/src/dns/mxonly_test.ref up to 1.1.1.2
	external/ibm-public/postfix/dist/src/dns/no-a.ref up to 1.1.1.3
	external/ibm-public/postfix/dist/src/dns/no-aaaa.ref up to 1.1.1.3
	external/ibm-public/postfix/dist/src/dns/no-mx.ref up to 1.1.1.2
	external/ibm-public/postfix/dist/src/dns/nullmx_test.ref up to 1.1.1.3
	external/ibm-public/postfix/dist/src/dns/nxdomain_test.ref up to 1.1.1.2
	external/ibm-public/postfix/dist/src/dns/test_dns_lookup.c up to 1.3
	external/ibm-public/postfix/dist/src/dnsblog/Makefile.in up to 1.1.1.3
	external/ibm-public/postfix/dist/src/dnsblog/dnsblog.c up to 1.4
	external/ibm-public/postfix/dist/src/error/Makefile.in up to 1.1.1.3
	external/ibm-public/postfix/dist/src/error/error.c up to 1.3
	external/ibm-public/postfix/dist/src/flush/Makefile.in up to 1.1.1.4
	external/ibm-public/postfix/dist/src/flush/flush.c up to 1.4
	external/ibm-public/postfix/dist/src/fsstone/Makefile.in up to 1.1.1.3
	external/ibm-public/postfix/dist/src/global/Makefile.in up to 1.1.1.10
	external/ibm-public/postfix/dist/src/global/abounce.c up to 1.3
	external/ibm-public/postfix/dist/src/global/anvil_clnt.c up to 1.4
	external/ibm-public/postfix/dist/src/global/anvil_clnt.h up to 1.3
	external/ibm-public/postfix/dist/src/global/been_here.c up to 1.4
	external/ibm-public/postfix/dist/src/global/been_here.h up to 1.3
	external/ibm-public/postfix/dist/src/global/bounce.c up to 1.3
	external/ibm-public/postfix/dist/src/global/bounce_log.c up to 1.3
	external/ibm-public/postfix/dist/src/global/cleanup_strerror.c up to 1.2
	external/ibm-public/postfix/dist/src/global/cleanup_user.h up to 1.3
	external/ibm-public/postfix/dist/src/global/clnt_stream.c up to 1.4
	external/ibm-public/postfix/dist/src/global/clnt_stream.h up to 1.2
	external/ibm-public/postfix/dist/src/global/db_common.c up to 1.3
	external/ibm-public/postfix/dist/src/global/debug_peer.c up to 1.3
	external/ibm-public/postfix/dist/src/global/defer.c up to 1.3
	external/ibm-public/postfix/dist/src/global/deliver_pass.c up to 1.3
	external/ibm-public/postfix/dist/src/global/deliver_request.c up to 1.3
	external/ibm-public/postfix/dist/src/global/deliver_request.h up to 1.3
	external/ibm-public/postfix/dist/src/global/delivered_hdr.c up to 1.3
	external/ibm-public/postfix/dist/src/global/dict_ldap.c up to 1.5
	external/ibm-public/postfix/dist/src/global/dict_memcache.c up to 1.3
	external/ibm-public/postfix/dist/src/global/dict_mysql.c up to 1.4
	external/ibm-public/postfix/dist/src/global/dict_pgsql.c up to 1.4
	external/ibm-public/postfix/dist/src/global/dict_proxy.c up to 1.3
	external/ibm-public/postfix/dist/src/global/dict_proxy.h up to 1.3
	external/ibm-public/postfix/dist/src/global/dict_sqlite.c up to 1.4
	external/ibm-public/postfix/dist/src/global/dsb_scan.c up to 1.3
	external/ibm-public/postfix/dist/src/global/dsb_scan.h up to 1.2
	external/ibm-public/postfix/dist/src/global/dsn_print.c up to 1.3
	external/ibm-public/postfix/dist/src/global/dsn_print.h up to 1.2
	external/ibm-public/postfix/dist/src/global/dynamicmaps.c up to 1.4
	external/ibm-public/postfix/dist/src/global/ehlo_mask.c up to 1.3
	external/ibm-public/postfix/dist/src/global/ehlo_mask.h up to 1.3
	external/ibm-public/postfix/dist/src/global/flush_clnt.c up to 1.3
	external/ibm-public/postfix/dist/src/global/haproxy_srvr.c up to 1.3
	external/ibm-public/postfix/dist/src/global/haproxy_srvr.h up to 1.2
	external/ibm-public/postfix/dist/src/global/header_body_checks.c up to 1.3
	external/ibm-public/postfix/dist/src/global/header_body_checks.h up to 1.3
	external/ibm-public/postfix/dist/src/global/log_adhoc.c up to 1.3
	external/ibm-public/postfix/dist/src/global/mail_addr_crunch.c up to 1.3
	external/ibm-public/postfix/dist/src/global/mail_addr_crunch.h up to 1.2
	external/ibm-public/postfix/dist/src/global/mail_addr_find.c up to 1.4
	external/ibm-public/postfix/dist/src/global/mail_addr_find.h up to 1.2
	external/ibm-public/postfix/dist/src/global/mail_addr_map.c up to 1.3
	external/ibm-public/postfix/dist/src/global/mail_addr_map.h up to 1.2
	external/ibm-public/postfix/dist/src/global/mail_command_client.c up to 1.4
	external/ibm-public/postfix/dist/src/global/mail_conf.c up to 1.3
	external/ibm-public/postfix/dist/src/global/mail_conf.h up to 1.3
	external/ibm-public/postfix/dist/src/global/mail_conf_int.c up to 1.3
	external/ibm-public/postfix/dist/src/global/mail_conf_long.c up to 1.2
	external/ibm-public/postfix/dist/src/global/mail_conf_nint.c up to 1.2
	external/ibm-public/postfix/dist/src/global/mail_conf_time.c up to 1.4
	external/ibm-public/postfix/dist/src/global/mail_copy.c up to 1.3
	external/ibm-public/postfix/dist/src/global/mail_dict.c up to 1.3
	external/ibm-public/postfix/dist/src/global/mail_error.c up to 1.2
	external/ibm-public/postfix/dist/src/global/mail_params.c up to 1.5
	external/ibm-public/postfix/dist/src/global/mail_params.h up to 1.19
	external/ibm-public/postfix/dist/src/global/mail_parm_split.c up to 1.3
	external/ibm-public/postfix/dist/src/global/mail_proto.h up to 1.5
	external/ibm-public/postfix/dist/src/global/mail_queue.h up to 1.3
	external/ibm-public/postfix/dist/src/global/mail_stream.c up to 1.3
	external/ibm-public/postfix/dist/src/global/mail_task.c up to 1.3
	external/ibm-public/postfix/dist/src/global/mail_version.h up to 1.6
	external/ibm-public/postfix/dist/src/global/maps.c up to 1.4
	external/ibm-public/postfix/dist/src/global/maps.h up to 1.2
	external/ibm-public/postfix/dist/src/global/maps.ref up to 1.1.1.2
	external/ibm-public/postfix/dist/src/global/memcache_proto.c up to 1.3
	external/ibm-public/postfix/dist/src/global/mime_state.c up to 1.3
	external/ibm-public/postfix/dist/src/global/mkmap_proxy.c up to 1.2
	external/ibm-public/postfix/dist/src/global/msg_stats.h up to 1.2
	external/ibm-public/postfix/dist/src/global/msg_stats_print.c up to 1.3
	external/ibm-public/postfix/dist/src/global/msg_stats_scan.c up to 1.3
	external/ibm-public/postfix/dist/src/global/namadr_list.in up to 1.1.1.4
	external/ibm-public/postfix/dist/src/global/namadr_list.ref up to 1.1.1.5
	external/ibm-public/postfix/dist/src/global/off_cvt.c up to 1.2
	external/ibm-public/postfix/dist/src/global/opened.c up to 1.2
	external/ibm-public/postfix/dist/src/global/post_mail.c up to 1.4
	external/ibm-public/postfix/dist/src/global/post_mail.h up to 1.3
	external/ibm-public/postfix/dist/src/global/quote_822_local.c up to 1.3
	external/ibm-public/postfix/dist/src/global/quote_822_local.h up to 1.2
	external/ibm-public/postfix/dist/src/global/quote_flags.h up to 1.2
	external/ibm-public/postfix/dist/src/global/rcpt_buf.c up to 1.4
	external/ibm-public/postfix/dist/src/global/rcpt_buf.h up to 1.2
	external/ibm-public/postfix/dist/src/global/rcpt_print.c up to 1.3
	external/ibm-public/postfix/dist/src/global/rcpt_print.h up to 1.2
	external/ibm-public/postfix/dist/src/global/rec_type.h up to 1.3
	external/ibm-public/postfix/dist/src/global/record.c up to 1.4
	external/ibm-public/postfix/dist/src/global/resolve_clnt.c up to 1.4
	external/ibm-public/postfix/dist/src/global/resolve_clnt.h up to 1.2
	external/ibm-public/postfix/dist/src/global/rewrite_clnt.c up to 1.3
	external/ibm-public/postfix/dist/src/global/scache.h up to 1.3
	external/ibm-public/postfix/dist/src/global/scache_clnt.c up to 1.3
	external/ibm-public/postfix/dist/src/global/sent.c up to 1.3
	external/ibm-public/postfix/dist/src/global/server_acl.c up to 1.3
	external/ibm-public/postfix/dist/src/global/server_acl.in up to 1.1.1.2
	external/ibm-public/postfix/dist/src/global/server_acl.ref up to 1.1.1.3
	external/ibm-public/postfix/dist/src/global/smtp_reply_footer.c up to 1.3
	external/ibm-public/postfix/dist/src/global/smtp_stream.c up to 1.5
	external/ibm-public/postfix/dist/src/global/smtp_stream.h up to 1.4
	external/ibm-public/postfix/dist/src/global/smtputf8.h up to 1.3
	external/ibm-public/postfix/dist/src/global/split_addr.c up to 1.3
	external/ibm-public/postfix/dist/src/global/split_addr.h up to 1.2
	external/ibm-public/postfix/dist/src/global/strip_addr.c up to 1.4
	external/ibm-public/postfix/dist/src/global/strip_addr.h up to 1.2
	external/ibm-public/postfix/dist/src/global/strip_addr.ref up to 1.1.1.3
	external/ibm-public/postfix/dist/src/global/trace.c up to 1.3
	external/ibm-public/postfix/dist/src/global/uxtext.c up to 1.3
	external/ibm-public/postfix/dist/src/global/verify.c up to 1.4
	external/ibm-public/postfix/dist/src/global/verify_clnt.c up to 1.3
	external/ibm-public/postfix/dist/src/global/verify_sender_addr.c up to 1.4
	external/ibm-public/postfix/dist/src/global/xtext.c up to 1.3
	external/ibm-public/postfix/dist/src/local/Makefile.in up to 1.1.1.8
	external/ibm-public/postfix/dist/src/local/alias.c up to 1.3
	external/ibm-public/postfix/dist/src/local/forward.c up to 1.4
	external/ibm-public/postfix/dist/src/local/local.c up to 1.4
	external/ibm-public/postfix/dist/src/local/local_expand.c up to 1.3
	external/ibm-public/postfix/dist/src/local/mailbox.c up to 1.4
	external/ibm-public/postfix/dist/src/local/unknown.c up to 1.8
	external/ibm-public/postfix/dist/src/master/Makefile.in up to 1.1.1.7
	external/ibm-public/postfix/dist/src/master/event_server.c up to 1.4
	external/ibm-public/postfix/dist/src/master/mail_server.h up to 1.4
	external/ibm-public/postfix/dist/src/master/master.c up to 1.4
	external/ibm-public/postfix/dist/src/master/master.h up to 1.2
	external/ibm-public/postfix/dist/src/master/master_conf.c up to 1.2
	external/ibm-public/postfix/dist/src/master/master_ent.c up to 1.4
	external/ibm-public/postfix/dist/src/master/master_listen.c up to 1.2
	external/ibm-public/postfix/dist/src/master/master_monitor.c up to 1.3
	external/ibm-public/postfix/dist/src/master/master_proto.h up to 1.2
	external/ibm-public/postfix/dist/src/master/master_sig.c up to 1.3
	external/ibm-public/postfix/dist/src/master/master_spawn.c up to 1.3
	external/ibm-public/postfix/dist/src/master/master_vars.c up to 1.3
	external/ibm-public/postfix/dist/src/master/master_wakeup.c up to 1.3
	external/ibm-public/postfix/dist/src/master/multi_server.c up to 1.4
	external/ibm-public/postfix/dist/src/master/single_server.c up to 1.4
	external/ibm-public/postfix/dist/src/master/trigger_server.c up to 1.4
	external/ibm-public/postfix/dist/src/milter/Makefile.in up to 1.1.1.4
	external/ibm-public/postfix/dist/src/milter/milter.c up to 1.5
	external/ibm-public/postfix/dist/src/milter/milter.h up to 1.4
	external/ibm-public/postfix/dist/src/milter/milter8.c up to 1.5
	external/ibm-public/postfix/dist/src/milter/milter_macros.c up to 1.3
	external/ibm-public/postfix/dist/src/milter/test-milter.c up to 1.3
	external/ibm-public/postfix/dist/src/oqmgr/Makefile.in up to 1.1.1.5
	external/ibm-public/postfix/dist/src/oqmgr/qmgr.c up to 1.3
	external/ibm-public/postfix/dist/src/oqmgr/qmgr.h up to 1.3
	external/ibm-public/postfix/dist/src/oqmgr/qmgr_active.c up to 1.3
	external/ibm-public/postfix/dist/src/oqmgr/qmgr_deliver.c up to 1.3
	external/ibm-public/postfix/dist/src/oqmgr/qmgr_entry.c up to 1.3
	external/ibm-public/postfix/dist/src/oqmgr/qmgr_error.c up to 1.2
	external/ibm-public/postfix/dist/src/oqmgr/qmgr_feedback.c up to 1.2
	external/ibm-public/postfix/dist/src/oqmgr/qmgr_message.c up to 1.4
	external/ibm-public/postfix/dist/src/pickup/Makefile.in up to 1.1.1.3
	external/ibm-public/postfix/dist/src/pickup/pickup.c up to 1.4
	external/ibm-public/postfix/dist/src/pipe/Makefile.in up to 1.1.1.4
	external/ibm-public/postfix/dist/src/pipe/pipe.c up to 1.4
	external/ibm-public/postfix/dist/src/postalias/Makefile.in up to 1.1.1.6
	external/ibm-public/postfix/dist/src/postalias/fail_test.in up to 1.1.1.2
	external/ibm-public/postfix/dist/src/postalias/fail_test.ref up to 1.1.1.2
	external/ibm-public/postfix/dist/src/postalias/postalias.c up to 1.5
	external/ibm-public/postfix/dist/src/postcat/Makefile.in up to 1.1.1.5
	external/ibm-public/postfix/dist/src/postcat/postcat.c up to 1.4
	external/ibm-public/postfix/dist/src/postconf/Makefile.in up to 1.1.1.11
	external/ibm-public/postfix/dist/src/postconf/extract.awk up to 1.1.1.6
	external/ibm-public/postfix/dist/src/postconf/install_vars.h up to 1.2
	external/ibm-public/postfix/dist/src/postconf/postconf.c up to 1.4
	external/ibm-public/postfix/dist/src/postconf/postconf.h up to 1.4
	external/ibm-public/postfix/dist/src/postconf/postconf_builtin.c up to 1.4
	external/ibm-public/postfix/dist/src/postconf/postconf_dbms.c up to 1.5
	external/ibm-public/postfix/dist/src/postconf/postconf_edit.c up to 1.3
	external/ibm-public/postfix/dist/src/postconf/postconf_lookup.c up to 1.4
	external/ibm-public/postfix/dist/src/postconf/postconf_main.c up to 1.4
	external/ibm-public/postfix/dist/src/postconf/postconf_master.c up to 1.8
	external/ibm-public/postfix/dist/src/postconf/postconf_misc.c up to 1.3
	external/ibm-public/postfix/dist/src/postconf/postconf_user.c up to 1.4
	external/ibm-public/postfix/dist/src/postconf/test28.ref up to 1.1.1.3
	external/ibm-public/postfix/dist/src/postconf/test29.ref up to 1.1.1.3
	external/ibm-public/postfix/dist/src/postconf/test34.ref up to 1.1.1.2
	external/ibm-public/postfix/dist/src/postconf/test35.ref up to 1.1.1.2
	external/ibm-public/postfix/dist/src/postconf/test40.ref up to 1.1.1.4
	external/ibm-public/postfix/dist/src/postconf/test41.ref up to 1.1.1.2
	external/ibm-public/postfix/dist/src/postconf/test42.ref up to 1.1.1.2
	external/ibm-public/postfix/dist/src/postconf/test43.ref up to 1.1.1.2
	external/ibm-public/postfix/dist/src/postconf/test44.ref up to 1.1.1.2
	external/ibm-public/postfix/dist/src/postconf/test58.ref up to 1.1.1.3
	external/ibm-public/postfix/dist/src/postconf/test59.ref up to 1.1.1.3
	external/ibm-public/postfix/dist/src/postdrop/Makefile.in up to 1.1.1.5
	external/ibm-public/postfix/dist/src/postdrop/postdrop.c up to 1.4
	external/ibm-public/postfix/dist/src/postfix/Makefile.in up to 1.1.1.5
	external/ibm-public/postfix/dist/src/postfix/postfix.c up to 1.6
	external/ibm-public/postfix/dist/src/postkick/Makefile.in up to 1.1.1.4
	external/ibm-public/postfix/dist/src/postkick/postkick.c up to 1.4
	external/ibm-public/postfix/dist/src/postlock/Makefile.in up to 1.1.1.4
	external/ibm-public/postfix/dist/src/postlock/postlock.c up to 1.4
	external/ibm-public/postfix/dist/src/postlog/Makefile.in up to 1.1.1.5
	external/ibm-public/postfix/dist/src/postlog/postlog.c up to 1.5
	external/ibm-public/postfix/dist/src/postmap/Makefile.in up to 1.1.1.7
	external/ibm-public/postfix/dist/src/postmap/fail_test.in up to 1.1.1.2
	external/ibm-public/postfix/dist/src/postmap/fail_test.ref up to 1.1.1.2
	external/ibm-public/postfix/dist/src/postmap/postmap.c up to 1.5
	external/ibm-public/postfix/dist/src/postmulti/Makefile.in up to 1.1.1.4
	external/ibm-public/postfix/dist/src/postmulti/postmulti.c up to 1.4
	external/ibm-public/postfix/dist/src/postqueue/Makefile.in up to 1.1.1.5
	external/ibm-public/postfix/dist/src/postqueue/postqueue.c up to 1.5
	external/ibm-public/postfix/dist/src/postqueue/showq_compat.c up to 1.4
	external/ibm-public/postfix/dist/src/postqueue/showq_json.c up to 1.4
	external/ibm-public/postfix/dist/src/postscreen/Makefile.in up to 1.1.1.7
	external/ibm-public/postfix/dist/src/postscreen/postscreen.c up to 1.5
	external/ibm-public/postfix/dist/src/postscreen/postscreen.h up to 1.4
	external/ibm-public/postfix/dist/src/postscreen/postscreen_dnsbl.c up to 1.4
	external/ibm-public/postfix/dist/src/postscreen/postscreen_early.c up to 1.4
	external/ibm-public/postfix/dist/src/postscreen/postscreen_endpt.c up to 1.4
	external/ibm-public/postfix/dist/src/postscreen/postscreen_haproxy.c up to 1.3
	external/ibm-public/postfix/dist/src/postscreen/postscreen_haproxy.h up to 1.2
	external/ibm-public/postfix/dist/src/postscreen/postscreen_misc.c up to 1.4
	external/ibm-public/postfix/dist/src/postscreen/postscreen_send.c up to 1.3
	external/ibm-public/postfix/dist/src/postscreen/postscreen_smtpd.c up to 1.5
	external/ibm-public/postfix/dist/src/postscreen/postscreen_starttls.c up to 1.4
	external/ibm-public/postfix/dist/src/postscreen/postscreen_state.c up to 1.4
	external/ibm-public/postfix/dist/src/postscreen/postscreen_tests.c up to 1.4
	external/ibm-public/postfix/dist/src/postsuper/Makefile.in up to 1.1.1.4
	external/ibm-public/postfix/dist/src/postsuper/postsuper.c up to 1.4
	external/ibm-public/postfix/dist/src/posttls-finger/Makefile.in up to 1.1.1.4
	external/ibm-public/postfix/dist/src/posttls-finger/posttls-finger.c up to 1.5
	external/ibm-public/postfix/dist/src/proxymap/Makefile.in up to 1.1.1.6
	external/ibm-public/postfix/dist/src/proxymap/proxymap.c up to 1.4
	external/ibm-public/postfix/dist/src/qmgr/Makefile.in up to 1.1.1.5
	external/ibm-public/postfix/dist/src/qmgr/qmgr.c up to 1.3
	external/ibm-public/postfix/dist/src/qmgr/qmgr.h up to 1.3
	external/ibm-public/postfix/dist/src/qmgr/qmgr_active.c up to 1.3
	external/ibm-public/postfix/dist/src/qmgr/qmgr_deliver.c up to 1.3
	external/ibm-public/postfix/dist/src/qmgr/qmgr_entry.c up to 1.3
	external/ibm-public/postfix/dist/src/qmgr/qmgr_error.c up to 1.2
	external/ibm-public/postfix/dist/src/qmgr/qmgr_feedback.c up to 1.2
	external/ibm-public/postfix/dist/src/qmgr/qmgr_message.c up to 1.4
	external/ibm-public/postfix/dist/src/qmqpd/Makefile.in up to 1.1.1.6
	external/ibm-public/postfix/dist/src/qmqpd/qmqpd.c up to 1.4
	external/ibm-public/postfix/dist/src/qmqpd/qmqpd_peer.c up to 1.3
	external/ibm-public/postfix/dist/src/scache/Makefile.in up to 1.1.1.3
	external/ibm-public/postfix/dist/src/scache/scache.c up to 1.4
	external/ibm-public/postfix/dist/src/sendmail/Makefile.in up to 1.1.1.4
	external/ibm-public/postfix/dist/src/sendmail/sendmail.c up to 1.4
	external/ibm-public/postfix/dist/src/showq/Makefile.in up to 1.1.1.3
	external/ibm-public/postfix/dist/src/showq/showq.c up to 1.5
	external/ibm-public/postfix/dist/src/smtp/Makefile.in up to 1.1.1.10
	external/ibm-public/postfix/dist/src/smtp/lmtp_params.c up to 1.5
	external/ibm-public/postfix/dist/src/smtp/smtp.c up to 1.13
	external/ibm-public/postfix/dist/src/smtp/smtp.h up to 1.5
	external/ibm-public/postfix/dist/src/smtp/smtp_addr.c up to 1.5
	external/ibm-public/postfix/dist/src/smtp/smtp_addr.h up to 1.3
	external/ibm-public/postfix/dist/src/smtp/smtp_chat.c up to 1.4
	external/ibm-public/postfix/dist/src/smtp/smtp_connect.c up to 1.5
	external/ibm-public/postfix/dist/src/smtp/smtp_key.c up to 1.3
	external/ibm-public/postfix/dist/src/smtp/smtp_map11.c up to 1.3
	external/ibm-public/postfix/dist/src/smtp/smtp_map11.ref up to 1.1.1.2
	external/ibm-public/postfix/dist/src/smtp/smtp_params.c up to 1.5
	external/ibm-public/postfix/dist/src/smtp/smtp_proto.c up to 1.5
	external/ibm-public/postfix/dist/src/smtp/smtp_rcpt.c up to 1.3
	external/ibm-public/postfix/dist/src/smtp/smtp_reuse.c up to 1.4
	external/ibm-public/postfix/dist/src/smtp/smtp_sasl_auth_cache.c up to 1.3
	external/ibm-public/postfix/dist/src/smtp/smtp_sasl_glue.c up to 1.3
	external/ibm-public/postfix/dist/src/smtp/smtp_sasl_proto.c up to 1.3
	external/ibm-public/postfix/dist/src/smtp/smtp_session.c up to 1.5
	external/ibm-public/postfix/dist/src/smtp/smtp_state.c up to 1.3
	external/ibm-public/postfix/dist/src/smtp/smtp_tls_policy.c up to 1.4
	external/ibm-public/postfix/dist/src/smtp/smtp_trouble.c up to 1.3
	external/ibm-public/postfix/dist/src/smtpd/Makefile.in up to 1.1.1.11
	external/ibm-public/postfix/dist/src/smtpd/pfilter.c up to 1.2 (+patch)
	external/ibm-public/postfix/dist/src/smtpd/smtpd.c up to 1.20
	external/ibm-public/postfix/dist/src/smtpd/smtpd.h up to 1.5
	external/ibm-public/postfix/dist/src/smtpd/smtpd_acl.in up to 1.1.1.2
	external/ibm-public/postfix/dist/src/smtpd/smtpd_acl.ref up to 1.1.1.2
	external/ibm-public/postfix/dist/src/smtpd/smtpd_chat.c up to 1.4
	external/ibm-public/postfix/dist/src/smtpd/smtpd_chat.h up to 1.3
	external/ibm-public/postfix/dist/src/smtpd/smtpd_check.c up to 1.6
	external/ibm-public/postfix/dist/src/smtpd/smtpd_check.h up to 1.3
	external/ibm-public/postfix/dist/src/smtpd/smtpd_check.in up to 1.1.1.3
	external/ibm-public/postfix/dist/src/smtpd/smtpd_check.in2 up to 1.1.1.3
	external/ibm-public/postfix/dist/src/smtpd/smtpd_check.in3 up to 1.1.1.2
	external/ibm-public/postfix/dist/src/smtpd/smtpd_check.ref up to 1.1.1.5
	external/ibm-public/postfix/dist/src/smtpd/smtpd_check.ref2 up to 1.1.1.3
	external/ibm-public/postfix/dist/src/smtpd/smtpd_check_backup.in up to 1.1.1.3
	external/ibm-public/postfix/dist/src/smtpd/smtpd_check_backup.ref up to 1.1.1.3
	external/ibm-public/postfix/dist/src/smtpd/smtpd_check_dsn.in up to 1.1.1.2
	external/ibm-public/postfix/dist/src/smtpd/smtpd_check_dsn.ref up to 1.1.1.2
	external/ibm-public/postfix/dist/src/smtpd/smtpd_dns_filter.ref up to 1.1.1.2
	external/ibm-public/postfix/dist/src/smtpd/smtpd_dnswl.in up to 1.1.1.4
	external/ibm-public/postfix/dist/src/smtpd/smtpd_dnswl.ref up to 1.1.1.4
	external/ibm-public/postfix/dist/src/smtpd/smtpd_error.in up to 1.1.1.2
	external/ibm-public/postfix/dist/src/smtpd/smtpd_error.ref up to 1.1.1.4
	external/ibm-public/postfix/dist/src/smtpd/smtpd_exp.in up to 1.1.1.3
	external/ibm-public/postfix/dist/src/smtpd/smtpd_exp.ref up to 1.1.1.5
	external/ibm-public/postfix/dist/src/smtpd/smtpd_expand.h up to 1.3
	external/ibm-public/postfix/dist/src/smtpd/smtpd_haproxy.c up to 1.3
	external/ibm-public/postfix/dist/src/smtpd/smtpd_milter.c up to 1.3
	external/ibm-public/postfix/dist/src/smtpd/smtpd_nullmx.in up to 1.1.1.2
	external/ibm-public/postfix/dist/src/smtpd/smtpd_nullmx.ref up to 1.1.1.2
	external/ibm-public/postfix/dist/src/smtpd/smtpd_peer.c up to 1.5
	external/ibm-public/postfix/dist/src/smtpd/smtpd_proxy.c up to 1.3
	external/ibm-public/postfix/dist/src/smtpd/smtpd_resolve.c up to 1.3
	external/ibm-public/postfix/dist/src/smtpd/smtpd_resolve.h up to 1.3
	external/ibm-public/postfix/dist/src/smtpd/smtpd_sasl_glue.c up to 1.5
	external/ibm-public/postfix/dist/src/smtpd/smtpd_sasl_proto.c up to 1.3
	external/ibm-public/postfix/dist/src/smtpd/smtpd_server.in up to 1.1.1.4
	external/ibm-public/postfix/dist/src/smtpd/smtpd_server.ref up to 1.1.1.4
	external/ibm-public/postfix/dist/src/smtpd/smtpd_state.c up to 1.2
	external/ibm-public/postfix/dist/src/smtpstone/Makefile.in up to 1.1.1.5
	external/ibm-public/postfix/dist/src/smtpstone/smtp-sink.c up to 1.3
	external/ibm-public/postfix/dist/src/smtpstone/smtp-source.c up to 1.3
	external/ibm-public/postfix/dist/src/spawn/Makefile.in up to 1.1.1.5
	external/ibm-public/postfix/dist/src/spawn/spawn.c up to 1.4
	external/ibm-public/postfix/dist/src/tls/Makefile.in up to 1.1.1.10
	external/ibm-public/postfix/dist/src/tls/tls.h  up to 1.5
	external/ibm-public/postfix/dist/src/tls/tls_bio_ops.c up to 1.1.1.6
	external/ibm-public/postfix/dist/src/tls/tls_certkey.c up to 1.4
	external/ibm-public/postfix/dist/src/tls/tls_client.c up to 1.13
	external/ibm-public/postfix/dist/src/tls/tls_dane.c up to 1.5
	external/ibm-public/postfix/dist/src/tls/tls_dh.c up to 1.5
	external/ibm-public/postfix/dist/src/tls/tls_fprint.c up to 1.4
	external/ibm-public/postfix/dist/src/tls/tls_mgr.c up to 1.4
	external/ibm-public/postfix/dist/src/tls/tls_misc.c up to 1.5
	external/ibm-public/postfix/dist/src/tls/tls_proxy.h up to 1.4
	external/ibm-public/postfix/dist/src/tls/tls_proxy_clnt.c up to 1.4
	external/ibm-public/postfix/dist/src/tls/tls_rsa.c up to 1.4
	external/ibm-public/postfix/dist/src/tls/tls_scache.c up to 1.4
	external/ibm-public/postfix/dist/src/tls/tls_server.c up to 1.12
	external/ibm-public/postfix/dist/src/tls/tls_session.c up to 1.3
	external/ibm-public/postfix/dist/src/tls/tls_verify.c up to 1.4
	external/ibm-public/postfix/dist/src/tlsmgr/Makefile.in up to 1.1.1.6
	external/ibm-public/postfix/dist/src/tlsmgr/tlsmgr.c up to 1.4
	external/ibm-public/postfix/dist/src/tlsproxy/Makefile.in up to 1.1.1.4
	external/ibm-public/postfix/dist/src/tlsproxy/tlsproxy.c up to 1.6
	external/ibm-public/postfix/dist/src/tlsproxy/tlsproxy.h up to 1.2
	external/ibm-public/postfix/dist/src/tlsproxy/tlsproxy_state.c up to 1.3
	external/ibm-public/postfix/dist/src/trivial-rewrite/Makefile.in up to 1.1.1.5
	external/ibm-public/postfix/dist/src/trivial-rewrite/resolve.c up to 1.4
	external/ibm-public/postfix/dist/src/trivial-rewrite/rewrite.c up to 1.3
	external/ibm-public/postfix/dist/src/trivial-rewrite/transport.c up to 1.4
	external/ibm-public/postfix/dist/src/trivial-rewrite/trivial-rewrite.c up to 1.4
	external/ibm-public/postfix/dist/src/trivial-rewrite/trivial-rewrite.h up to 1.3
	external/ibm-public/postfix/dist/src/util/Makefile.in up to 1.1.1.11
	external/ibm-public/postfix/dist/src/util/allascii.c up to 1.3
	external/ibm-public/postfix/dist/src/util/alldig.c up to 1.2
	external/ibm-public/postfix/dist/src/util/argv.c up to 1.4
	external/ibm-public/postfix/dist/src/util/argv.h up to 1.4
	external/ibm-public/postfix/dist/src/util/attr.h up to 1.5
	external/ibm-public/postfix/dist/src/util/attr_clnt.c up to 1.3
	external/ibm-public/postfix/dist/src/util/attr_clnt.h up to 1.3
	external/ibm-public/postfix/dist/src/util/attr_print0.c up to 1.3
	external/ibm-public/postfix/dist/src/util/attr_print64.c up to 1.3
	external/ibm-public/postfix/dist/src/util/attr_print_plain.c up to 1.3
	external/ibm-public/postfix/dist/src/util/attr_scan0.c up to 1.3
	external/ibm-public/postfix/dist/src/util/attr_scan0.ref up to 1.1.1.3
	external/ibm-public/postfix/dist/src/util/attr_scan64.c up to 1.3
	external/ibm-public/postfix/dist/src/util/attr_scan64.ref up to 1.1.1.3
	external/ibm-public/postfix/dist/src/util/attr_scan_plain.c up to 1.3
	external/ibm-public/postfix/dist/src/util/attr_scan_plain.ref up to 1.1.1.3
	external/ibm-public/postfix/dist/src/util/auto_clnt.c up to 1.4
	external/ibm-public/postfix/dist/src/util/auto_clnt.h up to 1.2
	external/ibm-public/postfix/dist/src/util/base32_code.h up to 1.3
	external/ibm-public/postfix/dist/src/util/base64_code.h up to 1.3
	external/ibm-public/postfix/dist/src/util/binhash.c up to 1.3
	external/ibm-public/postfix/dist/src/util/binhash.h up to 1.3
	external/ibm-public/postfix/dist/src/util/casefold.c up to 1.3
	external/ibm-public/postfix/dist/src/util/check_arg.h up to 1.3
	external/ibm-public/postfix/dist/src/util/cidr_match.c up to 1.4
	external/ibm-public/postfix/dist/src/util/cidr_match.h up to 1.2
	external/ibm-public/postfix/dist/src/util/clean_env.c up to 1.3
	external/ibm-public/postfix/dist/src/util/clean_env.h up to 1.2
	external/ibm-public/postfix/dist/src/util/connect.h up to 1.2
	external/ibm-public/postfix/dist/src/util/dict.c up to 1.4
	external/ibm-public/postfix/dist/src/util/dict.h up to 1.5
	external/ibm-public/postfix/dist/src/util/dict_alloc.c up to 1.3
	external/ibm-public/postfix/dist/src/util/dict_cache.c up to 1.4
	external/ibm-public/postfix/dist/src/util/dict_cdb.c up to 1.3
	external/ibm-public/postfix/dist/src/util/dict_cdb.h up to 1.2
	external/ibm-public/postfix/dist/src/util/dict_cidr.c up to 1.5
	external/ibm-public/postfix/dist/src/util/dict_cidr.in up to 1.1.1.2
	external/ibm-public/postfix/dist/src/util/dict_cidr.map up to 1.1.1.2
	external/ibm-public/postfix/dist/src/util/dict_cidr.ref up to 1.1.1.4
	external/ibm-public/postfix/dist/src/util/dict_db.c up to 1.4
	external/ibm-public/postfix/dist/src/util/dict_db.h up to 1.4
	external/ibm-public/postfix/dist/src/util/dict_dbm.h up to 1.2
	external/ibm-public/postfix/dist/src/util/dict_fail.c up to 1.2
	external/ibm-public/postfix/dist/src/util/dict_fail.h up to 1.2
	external/ibm-public/postfix/dist/src/util/dict_inline.c up to 1.4
	external/ibm-public/postfix/dist/src/util/dict_lmdb.c up to 1.4
	external/ibm-public/postfix/dist/src/util/dict_lmdb.h up to 1.3
	external/ibm-public/postfix/dist/src/util/dict_open.c up to 1.4
	external/ibm-public/postfix/dist/src/util/dict_pcre.c up to 1.5
	external/ibm-public/postfix/dist/src/util/dict_pcre.in up to 1.1.1.2
	external/ibm-public/postfix/dist/src/util/dict_pcre.map up to 1.1.1.3
	external/ibm-public/postfix/dist/src/util/dict_pcre.ref up to 1.1.1.4
	external/ibm-public/postfix/dist/src/util/dict_random.c up to 1.4
	external/ibm-public/postfix/dist/src/util/dict_random.h up to 1.3
	external/ibm-public/postfix/dist/src/util/dict_regexp.c up to 1.5
	external/ibm-public/postfix/dist/src/util/dict_regexp.map up to 1.1.1.2
	external/ibm-public/postfix/dist/src/util/dict_regexp.ref up to 1.1.1.3
	external/ibm-public/postfix/dist/src/util/dict_sdbm.h up to 1.2
	external/ibm-public/postfix/dist/src/util/dict_static.c up to 1.4
	external/ibm-public/postfix/dist/src/util/dict_thash.c up to 1.4
	external/ibm-public/postfix/dist/src/util/dict_thash.map up to 1.1.1.3
	external/ibm-public/postfix/dist/src/util/dict_union.c up to 1.3
	external/ibm-public/postfix/dist/src/util/dict_utf8.c up to 1.3
	external/ibm-public/postfix/dist/src/util/dict_utf8_test.in up to 1.1.1.2
	external/ibm-public/postfix/dist/src/util/dup2_pass_on_exec.c up to 1.2
	external/ibm-public/postfix/dist/src/util/edit_file.c up to 1.4
	external/ibm-public/postfix/dist/src/util/edit_file.h up to 1.3
	external/ibm-public/postfix/dist/src/util/extpar.c up to 1.4
	external/ibm-public/postfix/dist/src/util/find_inet.c up to 1.3
	external/ibm-public/postfix/dist/src/util/gccw.c up to 1.2
	external/ibm-public/postfix/dist/src/util/hex_code.c up to 1.3
	external/ibm-public/postfix/dist/src/util/hex_code.h up to 1.4
	external/ibm-public/postfix/dist/src/util/hex_quote.c up to 1.2
	external/ibm-public/postfix/dist/src/util/host_port.h up to 1.3
	external/ibm-public/postfix/dist/src/util/htable.c up to 1.4
	external/ibm-public/postfix/dist/src/util/inet_addr_host.c up to 1.3
	external/ibm-public/postfix/dist/src/util/inet_addr_list.in up to 1.1.1.2
	external/ibm-public/postfix/dist/src/util/inet_addr_list.ref up to 1.1.1.2
	external/ibm-public/postfix/dist/src/util/inet_connect.c up to 1.3
	external/ibm-public/postfix/dist/src/util/inet_listen.c up to 1.3
	external/ibm-public/postfix/dist/src/util/inet_proto.c up to 1.4
	external/ibm-public/postfix/dist/src/util/inet_proto.h up to 1.2
	external/ibm-public/postfix/dist/src/util/killme_after.c up to 1.2
	external/ibm-public/postfix/dist/src/util/listen.h up to 1.3
	external/ibm-public/postfix/dist/src/util/load_lib.c up to 1.3
	external/ibm-public/postfix/dist/src/util/lstat_as.h up to 1.3
	external/ibm-public/postfix/dist/src/util/mac_expand.c up to 1.4
	external/ibm-public/postfix/dist/src/util/mac_expand.h up to 1.4
	external/ibm-public/postfix/dist/src/util/mac_expand.in up to 1.1.1.4
	external/ibm-public/postfix/dist/src/util/mac_expand.ref up to 1.1.1.4
	external/ibm-public/postfix/dist/src/util/mac_parse.h up to 1.3
	external/ibm-public/postfix/dist/src/util/make_dirs.c up to 1.2
	external/ibm-public/postfix/dist/src/util/match_list.c up to 1.3
	external/ibm-public/postfix/dist/src/util/match_ops.c up to 1.3
	external/ibm-public/postfix/dist/src/util/midna_domain.c up to 1.4
	external/ibm-public/postfix/dist/src/util/midna_domain.h up to 1.4
	external/ibm-public/postfix/dist/src/util/midna_domain_test.ref up to 1.1.1.2
	external/ibm-public/postfix/dist/src/util/msg_output.c up to 1.4
	external/ibm-public/postfix/dist/src/util/msg_output.h up to 1.3
	external/ibm-public/postfix/dist/src/util/msg_syslog.c up to 1.2
	external/ibm-public/postfix/dist/src/util/msg_syslog.h up to 1.3
	external/ibm-public/postfix/dist/src/util/mvect.c up to 1.3
	external/ibm-public/postfix/dist/src/util/myaddrinfo.c up to 1.3
	external/ibm-public/postfix/dist/src/util/myaddrinfo.h up to 1.3
	external/ibm-public/postfix/dist/src/util/myaddrinfo.ref up to 1.1.1.5
	external/ibm-public/postfix/dist/src/util/myaddrinfo4.ref up to 1.1.1.2
	external/ibm-public/postfix/dist/src/util/myflock.c up to 1.3
	external/ibm-public/postfix/dist/src/util/myflock.h up to 1.3
	external/ibm-public/postfix/dist/src/util/mymalloc.c up to 1.4
	external/ibm-public/postfix/dist/src/util/mymalloc.h up to 1.4
	external/ibm-public/postfix/dist/src/util/mystrtok.c up to 1.4
	external/ibm-public/postfix/dist/src/util/name_mask.c up to 1.3
	external/ibm-public/postfix/dist/src/util/nbbio.c up to 1.3
	external/ibm-public/postfix/dist/src/util/netstring.c up to 1.3
	external/ibm-public/postfix/dist/src/util/peekfd.c up to 1.3
	external/ibm-public/postfix/dist/src/util/printable.c up to 1.3
	external/ibm-public/postfix/dist/src/util/recv_pass_attr.c up to 1.3
	external/ibm-public/postfix/dist/src/util/sane_fsops.h up to 1.3
	external/ibm-public/postfix/dist/src/util/sane_link.c up to 1.2
	external/ibm-public/postfix/dist/src/util/sane_rename.c up to 1.2
	external/ibm-public/postfix/dist/src/util/sane_socketpair.h up to 1.3
	external/ibm-public/postfix/dist/src/util/slmdb.c up to 1.4
	external/ibm-public/postfix/dist/src/util/sock_addr.c up to 1.3
	external/ibm-public/postfix/dist/src/util/sock_addr.h up to 1.2
	external/ibm-public/postfix/dist/src/util/split_nameval.c up to 1.2
	external/ibm-public/postfix/dist/src/util/stat_as.h up to 1.3
	external/ibm-public/postfix/dist/src/util/stringops.h up to 1.5
	external/ibm-public/postfix/dist/src/util/sys_compat.c up to 1.3
	external/ibm-public/postfix/dist/src/util/sys_defs.h up to 1.14
	external/ibm-public/postfix/dist/src/util/timed_wait.h up to 1.3
	external/ibm-public/postfix/dist/src/util/unix_pass_fd_fix.c up to 1.2
	external/ibm-public/postfix/dist/src/util/unix_send_fd.c up to 1.8
	external/ibm-public/postfix/dist/src/util/unsafe.c up to 1.2
	external/ibm-public/postfix/dist/src/util/valid_hostname.c up to 1.3
	external/ibm-public/postfix/dist/src/util/valid_hostname.h up to 1.2
	external/ibm-public/postfix/dist/src/util/vbuf.c up to 1.3
	external/ibm-public/postfix/dist/src/util/vbuf_print.c up to 1.4
	external/ibm-public/postfix/dist/src/util/vstream.c up to 1.4
	external/ibm-public/postfix/dist/src/util/vstream.h up to 1.4
	external/ibm-public/postfix/dist/src/util/vstream_tweak.c up to 1.3
	external/ibm-public/postfix/dist/src/util/vstring.c up to 1.4
	external/ibm-public/postfix/dist/src/util/vstring.h up to 1.4
	external/ibm-public/postfix/dist/src/util/vstring_vstream.c up to 1.2
	external/ibm-public/postfix/dist/src/util/vstring_vstream.h up to 1.3
	external/ibm-public/postfix/dist/src/util/watchdog.c up to 1.3
	external/ibm-public/postfix/dist/src/verify/Makefile.in up to 1.1.1.6
	external/ibm-public/postfix/dist/src/verify/verify.c up to 1.4
	external/ibm-public/postfix/dist/src/virtual/Makefile.in up to 1.1.1.5
	external/ibm-public/postfix/dist/src/virtual/mailbox.c up to 1.3
	external/ibm-public/postfix/dist/src/virtual/virtual.c up to 1.4
	external/ibm-public/postfix/dist/src/xsasl/Makefile.in up to 1.1.1.4
	external/ibm-public/postfix/dist/src/xsasl/xsasl.h up to 1.3
	external/ibm-public/postfix/dist/src/xsasl/xsasl_cyrus_client.c up to 1.3
	external/ibm-public/postfix/dist/src/xsasl/xsasl_cyrus_server.c up to 1.4
	external/ibm-public/postfix/dist/src/xsasl/xsasl_dovecot_server.c up to 1.4
	external/ibm-public/postfix/dist/src/xsasl/xsasl_saslc_client.c up to 1.2
	external/ibm-public/postfix/dist/src/xsasl/xsasl_server.c up to 1.2
	external/ibm-public/postfix/lib/dns/Makefile    up to 1.4
	external/ibm-public/postfix/lib/global/Makefile up to 1.10
	external/ibm-public/postfix/lib/masterlib/Makefile up to 1.3
	external/ibm-public/postfix/lib/milter/Makefile up to 1.2
	external/ibm-public/postfix/lib/tls/Makefile    up to 1.4
	external/ibm-public/postfix/lib/util/Makefile   up to 1.11
	external/ibm-public/postfix/lib/xsasl/Makefile  up to 1.3
	external/ibm-public/postfix/libexec/smtp/Makefile up to 1.4
	external/ibm-public/postfix/libexec/smtpd/Makefile up to 1.9 (+patch)
	external/ibm-public/postfix/libexec/tlsproxy/Makefile up to 1.2
	external/ibm-public/postfix/sbin/postconf/Makefile up to 1.9
	doc/3RDPARTY					(apply patch)

Update Postfix to 3.8.4.
@
text
@a0 1198
Wish list:

	Things to do before the stable release:

	make pre-release-check, HTML validator check.

	Disable -DSNAPSHOT and -DNONPROD in makedefs.

	Scan Postfix code with github.com/googleprojectzero/weggli
	(depends on "rust").

	Investigate clang-format compatibility as a possible migration
	away from indent. This requires that the output is stable.

	Check out https://github.com/milter-manager/milter-manager/

	Check out https://cutter.osdn.jp/ (C/C++ unit tests).

	Follow https://github.com/vdukhovni/postfix/commits/rpk

	Multi-recipient support in sender/recipient_bcc_maps and
	always_bcc.

	Test for dns_rr_copy() + dns_rr_free().


	mail_conf_xxx supprt for non-negative numbers (i.e. 
	numbers with a lower bound of zero).

	Log anvil transgressions with their address range (in
	addition to the offending IP address. We should not disclose
	to random clients how we aggregate anvil event counters.

	Should "postconf -f" pretty-print text inside {}?

	Is there any code that calls attr_scan*() and that works
	when the number of attributes received < the expected number?
	If there is no such code, then we can simplify a few things.

	Update TLS_README diagram, tlsmgr no longer manages cert
	info.

	Consider renaming local_header_rewrite_clients to
	local_header_canonicalize_clients, as a more accurate name.
	Optionally support "local_header_canonicalize_classes =
	rewrite_addresses, add_missing_headers" (default setting).

	And ditto for remote_header_rewrite_domain, whether it
	should rewrite address, add missing headers, or both.

	Add weight factors to randmap, for example randmap:{{result1}*99,
	{result2}*1}. To parse out weights, see postscreen.

	randmap already allows randmap:{{result}, ...}, to support
	whitespace and comma in result values, but it should also
	extract the value from {}.

	Migrate masquerade_domains from ARGV to STRING_LIST, or
	deprecate this feature because it breaks table-driven address
	validation.

	Enforce var_line_limit in util/attr_scan*c. This is needed if
	we want to expose Postfix RPC protocols externally.

	Can tests use LD_PRELOAD to inject fake modules such as
	fake_dns(3), fake_msg(3), fake_myaddrinfo(3) and so on?
	One limitation is that functions etc. in a preloaded object
	always take precedence, even in code that is not being
	tested.

	'%l' support, similar to %D in the Dovecot LDAP driver.
	Subject: Feature request: '%l' expansion for ldap_table,
	Date: Tue, 5 Apr 2022.  Message-ID:
	<ef7c661c-d86a-2366-6a73-ec8d51d75012@@dev.snart.me>

	WARN_IF_REJECT like prefix that disables the error counter increment.

	Consider migrating Postfix server sockets from directory
	$queue_directory/public to $queue_directory/protected. The
	directory $queue_directory/public can then be used for
	non-Postfix listeners (one subdirectory per application).

	FILTER_README needs some text on multi-instance implementations,
	and existing multi-instance references need to be updated.

	Fix code that still uses "long" for data_size and data_offset,
	and sscanf("%ld or strtou?l()). This seems relevant for 32-bit
	systems. This would use a new REC_TYPE_OFFS with a corresponding
	data type of off_t, using off_cvt() for conversion from string,
	and new code to convert off_t to string.

	A smart query service for live Postfix tables that outputs JSON?
	If the idea is to introspect on a running Postfix system, this
	involves adding an RPC endpoint to specific Postfix services.
	That could work for single-instance services like qmgr, verify,
	postscreen.

	JSON logging?

	default_transport_maps? This would simplify configuration.

	Add a pointer to
	https://fabianlee.org/2019/10/23/docker-running-a-postfix-container-for-testing-mail-during-development/
	and https://github.com/docker-mailserver/docker-mailserver

	Add a pointer to
	https://github.com/tarickb/sasl-xoauth2 and/or
	http://mmogilvi.users.sourceforge.net/software/oauthbearer.html
	in documentation or on-line howtos.

	Read the above links and see how we can improve usability on
	the Postfix side.

	Add verp=+= to the qmgr "from=" logging. This is already
	implemented but not yet integrated.

	Need canonical Dovecot example that has virtual_mailbox_domains,
	(virtual_mailbox_maps or reject unverified_recipient), and
	virtual_transport.

	Make smtpd_relay_before_recipient_restrictions settable
	in smtpd_checks tests.

	Make the DNS resolver library pluggable, so that we can a)
	plug in a fake resolver library for DNS-related regression
	tests and make DNS tests hermetic (no external dependency;
	b) add support for non-libbind resolvers. Gracefully handle
	requests for unsupported functionality; return an error status,
	instead of terminating.

	Add a robust dnssec_probe regression test (success and fail)
	that does not break existing regression tests.

	smtp_sasl_tls_security_options = noanonymous, and make
	smtp_sasl_security_options the default dependent on the
	smtp_sasl_tls_security_options default (i.e. reverse the
	dependency). Or make them independent.

	Try to make the master throttle more distrusting. Currently,
	the master throttles a service after a child process cannot be
	created (fork() fails), or if a child process fails upon its
	first use. The master always unthrottles the service if a process
	handles a client successfully. This is sufficient to mitigate
	local errors that break all attempts to use a service. It also
	slows down stupid remote attacks as long as malicious traffic
	dominates benign traffic. Perhaps monitor a crashing percentage?
	If 50% of all connections to a service result in abnormal
	termination, that would be bad even under a non-attack scenario.

	More accurate address verification: do a quota check before
	reporting that a local(8) or virtual(8) recipient is deliverable.

	Eliminate duplicate mail submission permission checks from
	sendmail, so that they happen in postdrop only. Then, pass the
	result through the postdrop-to-sendmail protocol. This requires
	that postdrop reads all inputs before responding (the
	local_login_sender_maps check depends on the envelope
	sender). Then sendmail can save input to dead.letter (no setgid
	privilege, but it would still have to use safe_open() to avoid
	clobbering files).

	Consider removing compat_level_from_numbers() and aliases,
	because they are no longer used anywhere.

	Allow '}' at the beginning of a line. This would make multi-line
	configuration settings easier to enter. This may be true
	for main.cf, master.cf and similar files (such as database
	configuration files, but not necessarily elsewhere). So it
	may have to be a readlline flag.

	Understand what happens with DNSSEC related status fields 
	in posttls-finger when resolv.conf points to a host that
	runs no DNS server.

	Hardening the half-dane behavior: some sites may rely on
	current behavior which allows original MX domain name for
	certificate matches. Requires a new (compatibility) parameter
	setting?

	Code deduplication: migrate multi_server applications to
	event_server, because the multi_server and event_server
	skeletons are much more similar than other skeletons. In
	addition to the default event_server accept() handler, also
	register a read event callback for handling post_accept
	events. But the currrent multi_server API fits typical usage
	better.

	When a secondary instance has no multi_instance_name set,
	postmulti -i won't be able to find it.

	nbbio: exercise the sanity checks with fake msg(3) functions.

	optreset (bsd-ism) how badly do we need it?

	transport policy protocol (clone of check_policy).

	See also postscreen event-driven client for policy delegation
	below.

	smtp_line_length_limit can insert a line break in the middle
	of a multi-byte character (which is not necessarily UTF-8,
	so we can't simply look at the 8th bit). Also, note that a
	multi-byte character may span queue file record boundaries,
	for example if line_length_limit == smtp_line_length_limit.
	The only way to fix this is to make the smtp_text_out()
	routine aware of every possible multi-byte encoding.

	Replace ad-hoc code for pipe(8) flags handling, with
	infrastructure that was built for smtp(8).

	Move map descriptions from postconf(1) to DATABASE_README
	and point there. The text in DATABASE_README is less complete
	than that in postconf(1).

	make tls_pre_jail_init() safe by design for use in programs
	that implement both clients and servers.

	In smtpd(8) and postscreen(8), set the ehlo_discard_mask
	to ~0 so that STARTTLS, BDAT, DSN, etc. work only for clients
	that send EHLO.

	Wordsmithing: "replace by X" -> "replace with X" unless X
	is "responsible" for making the substitution.

	In postscreen, don't fork after 'postfix reload' when
	psc_check_queue_length (and psc_post_queue_length?) is zero.

	After I/O error, store errno in VSTREAM object before errno
	may be overwritten.

	Add some tips for logging from container:
	https://www.projectatomic.io/blog/2016/10/playing-with-docker-logging/;
	syslog_name = $myhostname/postfix; mkdir queue and data
	dir; postfix check to create queue subdirectories.

	Add postwhite as a postscreen-related project.
	https://github.com/stevejenkins/postwhite/blob/master/README.md

	XFORWARD attributes in policy protocol?

	Document postsrsd and postforward for srs-ifying. Would
	more fine-grained smtp_generic_maps support help?

	Decide whether to deprecate database configuration pathnames
	that start with ".", for example, ldap:./file/name. These forms
	are documented for ldap:, memcache:, mysql:, pgsql:, and sqlite:
	maps. Postfix daemon processes will look up files relative to the
	queue directory, but with postmap command-line processes it would
	be more natural to interpret relative pathnames relative to the
	current directory of the calling process (it would be a surprise
	if "postmap hash:./foo" would access "/var/spool/postfix/foo",
	or if "postmap hash:foo" and or "postmap hash:./foo" would access
	different files).

	Convert postalias(1) to store external-form keys, and convert
	aliases(5) to perform external-first lookup with fallback to
	internal form, to make it consistent with the rest of Postfix.
	In several years we may remove the internal-form fallbacks
	with a compatibility_level safety net.

	In the bounce daemon, set util_utf8_enable if returning an
	SMTPUTF8 message. This is wrong; if SMTPUTF8 is disabled,
	then Postfix must not turn it on.

	Add a header_body_checks extension callback in smtp_proto.c
	that implements the PASS action.

	Propagate SMTPD_PEER_CODE_XXX from smtpd(8) to cleanup(8),
	so that {client_resolve} and {_} produce consistent results.

	NO_IP_CYRUS_SASL_AUTH should be a main.cf parameter.

	Modeline support in config files to enable/disable trailing
	#comment, and to give hints about how to handle an LHS or
	RHS. This will not preserve trailing comments in lines that
	are modified with "postconf -e" and the like.

	Maintainability: replace lengthy libmilter-API argument lists
	with named parameters, as with the libtls API.
	
	Fix buflen integer overflow detection in dict*sql.c.

	Fix "make test" bitrot.

	Move DNS-based tests from porcupine.org to postfix.org, or use
	a mock DNS library (a library that presents the same API as the
	real library, but that produces canned responses).

	Document dns_ncache_ttl_fix_enable use case in POSTSCREEN_README
	and RELEASE_NOTES.

	Remove this file from the stable release.

	Things to do after the stable release:

	Specify WARN_UNUSED_RESULT for all library functions that
	pass, deliver, bounce or defer a delivery request.

	Invent some kind of type-checking wrappers for htable(3),
	ctable(3) and other modules that take and return a void*
	pointer. We already did that for variadic functions.

	TLS certificate provenance: indicate whether a subject
	name/issuer are verified or not (for example, change the
	attribute name to unverified_ccert_subject etc.).  This is
	relevant only for fingerprint-based authentication including
	DANE, and affects logging, SMTPD policy, and Milters.

	Generalize the daemon '-S' stand-alone mode, so that it can
	be used with custom configuration settings for request/reply
	regression testing. This would use the existing "-o name=value"
	support to override parameters. For example, queue_directory
	would point to a directory with sockets for fake versions of
	Postfix-internal services.

	Update the list of Sendmail macros that Postfix can send
	to Milters (auth_ssf and TLS-related).

	Update smtpd command count when rejecting or skipping input
	before command-table lookup. But then we need to count
	commands that are rejected (malformed UTF-8, tokenizer
	error, forbidden command), or skipped (noop).

	What is the best place to detect spaces in pathnames during
	installation/upgrade/packaging? postfix-install for early
	warning, and post-install as a safety net?

	When the service basename differs from the program file
	basename, either prepend the service name to the syslogname (as
	if syslog_name=postfix/service/program), or prepend the service
	name to the process name (perhaps too confusing).  The service
	indication is desirable for mail delivery transports (smtp
	versus relay) as it identifies what scheduler parameters are
	in effect, but it is also desirable for mail receiving services
	(smtp versus submission verus smtps as configured in the stock
	master.cf file). This requires exceptions for some program names
	(exclude smtpd to avoid logging postfix/smtp/smtpd which could
	result in more confusion, and maybe other program names).

	UTF8 DNS[BW]L domain name.

	Consolidate maps flags in mail_params.h instead of having
	multiple copies scattered across programs.

	Try to allow UTF-8 myhostname/mydomain, at least in bounce
	template expansion.

	In the SMTP server, do not issue an enhanced status code when
	rejecting a connection before the HELO handshake is completed.

	Maybe don't whitelist a client that has maxed out its
	per-MTA connection count limit.

	Log command=good/bad statistics in postscreen?

	smtpd_checks tests either must use a DNS dummy resolver
	(override the res_search API) or all names must be under
	test.postfix.org (but that does not work for address->name
	lookups, and cannot simulate some errors).

	Reporting the original Message-ID in a bounce message
	In-Reply-To: or References: header.  In the cleanup daemon,
	grab a copy of the Message-ID and export it along with other
	header-extracted information at the top of the "extracted"
	queue file segment.  In the queue manager, extract this
	along with other header-extracted information, and forward
	the Message-ID in the bounce server notification request.

	Clobber ORCPT when sender is owner-mumble?

	Add milter_mumble_macros to the list of per-macro features.

	The pickup daemon logs warnings only when the cleanup daemon
	dit not provide a "reason" attribute. Is this logic right?

	up-convert myhostname to UTF-8 in MIME boundary strings?

	Eliminate code duplication between pcf_print_master_field()
	and pcf_print_master_entry().

	Error reporting: see if pcf_check_master_entry() and children
	can return error descriptions instead of terminating with
	a fatal error.

	Add a switch to consider postscreen deep protocol tests as
	"completed" when receiving "RSET" after "RCPT TO" and the
	session has passed all tests up to that point. RSET becomes
	like QUIT except perhaps that it does not hang up.

	apipe: map, splits results into address lists and performs
	lookups for the invidual addresses, converting back and
	forth between external and internal forms.

	Clarify that receive_override_options have no effect with
	smtpd_proxy_filter.

	Document the relative order of header_checks, address
	rewriting, milters.

	NOT: Table-driven case folding and case-insensitive string
	comparison specifically for UTF-8. Use libicu functions
	instead.

	When downgrading message/global to 7bit, is quoted-printable
	the appropriate encoding? Should it be base64?

	Should we encode headers with RFC 2047, when that is the
	only reason that Postfix cannot deliver to a non-UTF8SMTP
	server? Probably not in the general case. What about 
	Postfix as a gateway server that converts UTF8SMTP
	for delivery to non-UTF8SMTP environments?

	Document and test restriction_classes example for 
	smtpd_policy_service_default_action.

	Don't accept AUTH or other features that are not announced
	in the EHLO response.

	Suggested at Mailserver conference: Postscreen RDNS-based
	reputation (but this makes postscreen performance highly
	unpredicable because it introduces a dependency on random
	DNS servers).

	Suggested at Mailserver conference: a way to select a
	specific field in a table, presumably as the result value.
	This may be done with a filtermap{i,j,...}: table that propagates
	only the specified field(s).

	Discourage the use of "after 220" tests in POSTSCREEN_README
	and the documentation of individual parameter settings.

	To un-break "make tests" under src/smtpd, make tests
	independent from the DNS and native routines for host
	name/address lookup.

	Make been_here flag BH_FLAG_FOLD configurable for masochists.

	Replace some redundant TLS_README sections with pointers
	to FORWARD_SECRECY_README.

	Move html/index.html source to proto/.

	How hard is it to follow canonical or virtual mapping
	for the purpose of address validation? We must never
	reject a valid address.

	Preserve case in smtpd_resolve_addr() and add a structure
	member for the case-folded address. IIRC some Milter macro
	needs to show the unfolded address.

	Per SASL account rate limits. This requires new infrastructure
	that maintains stats by SASL account instead of client IP
	address.

	Watchdog timer in postmap/postalias.

	Begin code revision, after DANE support stabilizes.  This
	should be one pass that changes only names and no code.

	recipient_delimiters = $recipient_delimiter for BC

	All source code must specify its original author and
	license statement. Some code modules specify Lutz Jaenicke
	as the original author and fall under his liberal license.
	Code that is added to such a module has the same license
	(or at least something that is not more restrictive). Code
	modules without input from Lutz Jaenicke must state its
	original author and license (preferably no more restrictive
	than Postfix's own license). Currently, too many files list
	Wietse as the original author, and Lutz Jaenicke's license,
	which is wrong.

	We have smtp_host_lookup, smtp_dns_resolver_options, and
	now smtp_dns_support_level.  Of these, smtp_dns_resolver_options
	is orthogonal but the rest has overlap.

	There needs to be support for automatic migration from the
	deprecated disable_dns_lookups feature to the preferred
	smtp_dns_support_level feature. This support needs to exist
	for several releases before the deprecated feature can be
	removed.

	End code revision, after DANE support stabilizes.

	It would be nice if "bare username" lookup is not hard-coded
	for domains in the local address class.

	Don't forget Apple's code donation for fetching mail from
	IMAP server.

	Should postconf -o refuse to work without the -x option?

	Make 30s caching (feature 20070414) configurable, such that
	0 means no caching.

	Make errno white/blacklist for getpwnam_r etc. and mailbox
	write errors.

	smtpd_muble_restrictions rule names are case-insensitive.
	restriction_classes values are case-sensitive but should
	be case-insensitive for consistency with smtpd_muble_restrictions.

	Make "rename" the default when postmapping a DB file
	(later: use copy+rename for postmap -i, postmap -d).

	Service-name parameters aren't documented in daemon manpages.

	When faking up the DSN ORCPT, don't send bare usernames
	from local command-line submission.

	lmtp_assume_final is broken. A 2XX response does not imply
	final delivery. The Sieve language implements accept-then-bounce.

	postscreen event-driven plug-in interface to send out a
	query in parallel with the Pregreet and DNSBL tests, using
	a simplified version of the policy delegation protocol.

	Parallelized queue preprocessing: rip out the queue manager
	code to read queue files and resolve recipients, and run
	it in parallel processes. The queue manager then processes
	their results as they become available.  This would eliminate
	the qmgr<->trivial-rewrite bottleneck. This can also eliminate
	much of the scheduling disadvantage of a single queue manager
	compared to hundreds of mail receiving or sending processes
	(especially if there is a way to scan the queue in parallel).

	Memory pools for same-type memory objects.  This can be
	used to either increase memory locality for frequently-allocated
	objects (MRU allocation) or to make use-after-free bugs
	more detectable (use LRU allocation and wipe the object
	immediately after free().  Finally, same-type memory pools
	prevent object type errors with use-after-free bugs.

	"no-cache" option for selected postscreen tests?

	Need a new DICT flag to indicate that a map handle supports
	locking.  If it doesn't (as with memcache or proxymap
	handles), then postscreen etc. don't need to close a cache
	file after "postfix reload".  After a fork() it is OK to
	keep using a memcache or proxymap handle, because the parent
	exits immediately.  For this to work, the memcache client
	needs to propagate the flag from a persistent backup map,
	but the proxymap protocol should not propagate this to the
	client.

	Different TTL values for different DNSBL sources?

	Replace master(8) SIGHUP by very simple socket protocol to
	allow reload of a specific service.

	postscreen: in the dummy SMTP engine, log the protocol state
	at time of violation (like smtpd, set state->where initially
	to CONNECT, then update it with the name of the last "known"
	command, or set it to "unimplemented").

	The discussion of postscreen cache configuration is in the
	wrong place (how whitelisting works). Move it to the section
	about configuring postscreen.

	Before proxymap can be exposed to the network (primarily
	to share postscreen or verify caches), need to enforce
	limits on attribute string name and value length in IPC
	protocols.  10-20KB seems OK. We need to enforce content
	sanity checks (for example, no control characters; Postfix
	does not pass around multi-line data in table lookups). The
	VSTREAM library already supports read/write deadlines.  We
	need to use attack-resistant code for numeric conversion.

	move flush_init() etc. from defer service clients to the
	bounce daemon? Postfix works best when work can be spread
	out over many clients, instead of over a few servers.

	multi_connect() function that takes a list of inet:host:port
	and/or unix:pathname specs, with an explicit "inet" prefix
	argument to handle applications that use host:port only.
	This will simplify multi-host implementation for memcache
	client, dovecot client, and other.

	dict_memcache: treat "bad" key as cache miss, i.e.  read/write
	the backup database as if the cache did not exist. This
	does not help because most Postfix maps (virtual, canonical,
	access, transport, ...) also don't support spaces in keys.

	postscreen: keep the cache open after "postfix reload" when
	it is remote (type memcache: or proxy:). This does not work
	because memcache can use a non-proxied file as backup).

	What is the feasibility of adding an mta_name (personality)
	attribute that is propagated via queue files and delivery
	agent requests? It would default to myhostname.

	Major performance improvement opportunity (that is until
	everyone runs Postfix queues on SSDs).  Investigate the
	viability of a daemon that produces incoming and postdrop
	queue files on request (in reality it would maintain a
	limited queue of "spare" files). Central queue file allocation
	reduces the I/O performance disadvantage that qmgr has when
	100 smtpd processes are receiving mail, or when lots of
	mail is submitted with the sendmail command line.  When an
	smtpd process accepts MAIL FROM, a cleanup daemon requests
	a queue file and receives a queue ID + file handle from the
	queue file daemon.  If the queue file daemon is down, the
	cleanup daemon creates the file itself like it does now;
	this can be hidden in the mail_stream library module.  If
	the mail transaction is aborted, then the cleanup daemon
	gives the queue file back to the queue file daemon's "spare"
	file pool, saving most of the overhead of creating and
	deleting a queue file (the file would still need to be
	renamed at the start of the next mail transaction).  If the
	cleanup daemon is unable to give a file back, then it can
	delete the file like it does now; this can be hidden in the
	mail_stream library module.  The whole thing can be
	transparently added to Postfix by adding calls to a
	queue-file-service client to the mail_queue_enter() and
	mail_queue_remove() library routines.  Other advantages:
	1) negligible performance hit when queue file allocation
	happens earlier, so that logging and milters have a queue
	ID for the whole transaction not just the first valid
	recipient; 2) by not removing every queue files we get most
	of the performance gain of a queue based on append/truncate
	instead of the much more expensive create/delete.

	Investigate viability of Sendmail dns maps.

	Make the rules for how to use close-on-exec more explicit.

	Provide separate timeout control for dict_proxy client,
	rewrite client, resolve client, cleanup client, and so on.
	Perhaps a timeout argument to the mail_connect() routines.

	Trick from amavisd: save listen socket/fifo/etc state, clear
	their close-on-exec flags, exec the same program file to
	re-initialize (with saved socket state on command line or
	in environment), then restore the listen socket/fifo/etc
	close-on-exec flags.  This could be a way to mitigate the
	impact of memory/file leaks, and to implement "postfix
	reload" support for master(8) features that currently don't
	support this. 

	Sub-second time resolution. The first benefit is to make
	per-destination rate delays more usable. Other applications
	will come up once the support exists. The straightforward
	approach is to represent all time intervals in milliseconds,
	and to update all code that makes system calls with a time
	argument (as well as the compiled-in upper and lower time
	parameter bounds, which are currently in seconds).
	Unfortunately, that limits he maximum time interval to less
	than 25 days on 32-bit systems, and is likely to break
	compatibility (for starters, it cannot even deal with the
	compiled-in 100d upper bound on the queue file lifetime).
	A second option is to have a "compatibility" time base
	switch between milliseconds and seconds; this means extra
	changes to all code that makes system calls with a time
	argument, and the way that the compiled-in upper and lower
	bounds are specified.  Some of this can be encapsulated in
	macros like time_to_sec(t), time_to_msec(t) and sec_to_time(t).
	Finally, it is relatively easy to replace the events(3)
	interface to use "double" for the time delay arguments, but
	it is a major pain to convert all main.cf time parameters
	into doubles (converting only some leads to a documentation
	nightmare).

	Address verify cache: allow a negative cache "refresh"
	result to purge a "positive" cache entry in some safe manner.
	Currently, the negative cache "refresh" result is discarded,
	address verify cache lookup returns OK, and each lookup
	forces a "refresh" probe until the entry expires.

	Some Sendmail configurations trigger sub-optimal behavior
	when the postscreen_whitelist_interfaces parameter lists
	primary MX addresses only.  When postscreen's "deep protocol
	tests" are successful on the primary MX address (i.e. they
	result in 4XX responses to RCPT TO), some Sendmail
	configurations keep the primary MX connection open until
	AFTER they finish talking to the backup MX address.  The
	problem is that the backup connection runs into a WHITELIST
	VETO condition because the whitelisting database has not
	yet been updated with the PASS NEW result for the primary
	MX connection.  Unfortunately postscreen can't update the
	whitelisting database before the primary MX connection is
	closed, because a client may still make a mistake.

	In the SMTP server, check if the connection is closed before
	replying to ".", and discard the message if the reply can't
	be sent. This reduces the time window for RFC 1047 message
	duplication, and may even prevent the delivery of some spam.
	http://www.exim.org/lurker/message/20070416.103159.9d5ff0ce.en.html
	This requires splitting the SMTP server's commit operation
	into two operations: first, a tentative commit operation
	that performs most of the I/O and processing in milters and
	in the cleanup server; second, a final commit operation
	that is executed only if the remote SMTP client hasn't hung
	up in the mean time. Unfortunately, SMTP-based before-queue
	content filters don't support a tentative commit operation.

	Find out how to reproduce Berkeley DB bogus ENOENT errors.
	postscreen does not log this with Berkeley DB 1 (FreeBSD
	4..8), 4.7.25 (Ubuntu 9.04) and 4.8.24 (Ubuntu 10.04).

	postconf command-line option to show the compile-time
	settings (CCARGS, AUXLIBS) in case binary packages
	don't install the makedefs.out file.

	events.c: cache the side effects of file descriptor event
	enable/disable operations in user space, and do bulk kernel
	updates at event_loop() time.  This can eliminate costly
	system calls with successive event disable/enable operations
	on the same file descriptor. This can also eliminate the
	need for tricky code that tries to avoid the expense of
	successive disable/enable operations. Such code is likely
	to introduce bugs.

	When does it pay off to send domains in the active queue
	to a DNS prefetch daemon? Could this generalize to a dynamic
	transport map that piggy-backs domains with the same MX
	host into the same mail delivery transaction?

	tlsproxy(8) should receive TLS preferences from postscreen(8)
	and smtpd(8), instead of reading them from main.cf. This
	means that many tlsproxy_ parameters become postscreen_
	parameters, and that tls_server_init() parameters move to
	to tls_server_start(). That is a significant API change.
	It also means tlsproxy can't open all files before chroot().

	anvil rate limit for sasl_username.

	Encapsulate nbbio buffer access and update by tlsproxy.

	Full-duplex support for tlsproxy(8). This requires updating
	events(3) and nbbio(3).

	Register automagic destructor for object attached to VSTREAM.

	Use different ipc time limits for email message transactions
	(smtpd, pickup)->cleanup and for quick query/reply transactions
	such as address rewriting/resolution. Beware of large time
	limits for local or virtual alias expansion.

	permit_tempfail_action (default: defer_if_reject) to be
	used as the default value for dnswl_tempfail_action and
	rhswl_tempfail_action. Steal liberally from the code that
	implements unverified_recipient_tempfail_action etc.

	Support filtering of messages that are generated by Postfix:
	This would apply to postmaster notices and bounce messages
	(DKIM), and address verification (BATV).

	Consistency: in postconf.proto make <dt>..</dt> tags bold.

	Would it help if there were different cleanup_service
	parameter names for different message paths? smtpd(8) uses
	the same cleanup_service value for receiving remote mail
	and for submitting postmaster problem reports. Do we need
	separate mumble_cleanup_service_name parameters for "inject",
	"notify" and "forward" (with backwards compatible defaults)?

	IF/ENDIF support for CIDR tables.

	Need a regular expression table to translate address
	verification responses into hard/soft/accept reply codes.

	Is there a way to make sendmail -V work after local alias
	expansion? Majordomo-like mailing lists would benefit from
	this; the example in VERP_README does not work in the general
	case.

	When an alias is a member of an :include: list with owner-
	alias, local(8) needs an option to deliver alias or alias->user
	indirectly. What happens when an :include: list with owner-
	alias includes another list?

	Don't allow empty result values in pcre and regexp maps.
	Postfix doesn't allow them anywhere else (check this).

	Make PCRE_MAX_CAPTURE configurable.

	Add some checks for tokens starting with #. A challenge
	is to report sensible context from the guts of some low-level
	parser, without introducing a great deal of clumsiness.

	Add sendmail macros for {verify} and maybe other TLS info.

	Find out if we are doing the correct thing by looking at
	state->milter_reject_text when expanding {rcpt_addr} or
	{rcpt_host}.

	Find out why post_mail() etc. block when the qmgr fifo is
	full (answer: trigger_timeout). How can this cause delays
	in the queue manager?  When a recipient bounces during
	(transport, nexthop, address) resolution, it is redirected
	to the error or retry mailer; and bounce-after-delivery is
	asynchrounous so it can't block the queue manager, either.

	How to ensure that proxy_read_maps is processed after all
	its dependencies are initialized, or just bite the bullet
	and rewrite the parameter initialization code.

	The cleanup virtual alias expansion limit does not really
	deliver on its promises. 1) It promises to truncate the
	result without aborting delivery, which would be undesirable
	anyway, but that is not what it does, so that is good.  2)
	It keeps all the recipients from multi-recipient database
	lookup, then terminates further recursion when the result
	exceeds the expansion limit. This behavior achieves the
	original goal that all things shall have a finite size (even
	though but we don'really care how large they are) but may
	result in surprises when recipients are listed in virtual
	alias domains or need expansion for other reasons.  In a
	phone call with Victor, a reasonable way out is to set the
	limit to some large number (100000) and abort delivery when
	the result exceeds the limit.

	Should the postscreen save permanent white/black list lookup
	results to the temporary cache, and query the temporary
	cache first? Skipping white/black list lookups will speed
	up the handling of "good" clients without a permanent
	whitelist entry.  Of course, this means that updates to the
	white/black lists do not immediately take effect. Workarounds:
	1) use a shorter temporary cache TTL for clients on the
	permanent black/white lists; 2) ignore cached white/black
	list lookup results after "postfix reload"; 2) adjust the
	logging, for example "WHITELISTED address (cached)" and
	"BLACKLISTED address (cached)" to eliminate surprises.
	Comparing the cache entry time with the white/blacklist
	file modification time is not foolproof: for example, pcre
	or CIDR tables are read only once.

	It would be nice if the generic dict_cache(3) cache manager
	could postpone process suicide until cache cleanup is
	completed (but that is not possible when postscreen forks
	into the background to finish already-accepted connections,
	and it is not desirable when a host is being shut down).

	When postscreen drops a connection, a 521 "greeting" should
	be of the form "521 servername..." and not have an enhanced
	status code. The "521 5.7.1" form can be used after EHLO.
	Of course no spammer is going to complain about Postfix
	SMTP compliance.

	Find a place to document all the mail routing mechanisms
	in one place so people can figure out how Postfix works.

	The access map BCC action is marked "not stable", perhaps
	because people would also expect BCC actions in header/body_checks.
	How much would it take to make the queue file editing code
	generally usable?

	Move smtpd_command_filter into smtpd_chat_query() and update
	the session transcript (see smtp_chat_reply() for an example).

	SMTP connection caching without storing connections, to
	improve TLS mail delivery performance.

	Should not milter8_mail_event() unset the "hold" default
	reply? Better, the default reply should not be used for
	this purpose.

	Don't send MASTER_STAT_TAKEN/MASTER_STAT_AVAIL when a server
	runs with process limit of 1. But this means the master
	never learns that the process is successful and will always
	pause $service_throttle_time before restarting a failed service.

	Don't bother maintaining a per-service lockfile when a
	server runs with process limit of 1. The purpose of the
	lockfile is to avoid thundering herd problems when the kernel
	wakes up multiple processes for each new client connection.

	Implement PREPEND action for milter_header_checks. Save the
	to-be-prepended text to buffer, then emit it along with the
	new header.

	Fix the header_body_checks API, so that the name of the map
	class (e.g. milter_header_checks) is available for logging.

	Fix the mime_state and header_body_checks APIs, so that
	they use VSTRINGs. This simplifies REPLACE actions.

	Update FILTER_README for multi-instance support, and rename
	the old document to FILTER_LEGACY_README.

	Need to sign delivery status notifications, to avoid surprises
	when eventually people start enforcing DKIM etc. signatures.

	Either document or remove the internal_mail_filter_classes
	feature (it's disabled by default).

	Make the "unknown recipient" test configurable as
	first|last|never, with "yes"=="last" for backwards
	compatibility. The "first" setting is good for performance
	(stress=yes) when all users are defined in local files; but
	it may perform worse when users are in networked tables.

	Cleanup: make DNSBL query format configurable beyond the
	client's reversed IP address.

	Maybe change maps_rbl_reject_code default to 521, and
	update wording in STRESS_README.

	Encapsulate time_t comparisons so that they can be made
	system dependent (use difftime() where available).

	Encapsulate time_t conversions (e.g. REC_TYPE_TIME) so that
	they can be made system dependent.

	Plan for time_t larger than long, or wait for LP64 to
	dominate the world?

	Write delivery rate delay example (which _README?) and auth
	failure cache example (SASL_README). Then include them in
	SOHO_README.

	Look for alternatives for the use of non_smtpd_milters.
	This involves some way to force local submissions to go
	through a local SMTP client and server, without triggering
	"mail loops back to myself" false alarms. The advantage is
	that it makes smtpd_mumble_restrictions available for local
	and remote mail; the disadvantage is that it makes local
	submissions more dependent on networking.  One possibility
	is to use "pickup -o content_filter=smtp:127.0.0.1:10025",
	or a dedicated SMTP client/server on UNIX-domain sockets;
	we could also decide to always suppress "mail loop" detection
	for loopback connections.  Another option is to have the
	pickup or cleanup server drive an SMTP client directly;
	this would require extension of the mail_stream() interface,
	plus a way to handle bounced/deferred recipients intelligently,
	but it would be at odds with Postfix design where delivery
	agents access queue files directly; exposing delivery agents
	to raw queue files violates another Postfix design principle.

	Consolidate duplicated code in *_server_accept_{pass,inet}().

	Consolidate duplicated code in {inet,unix,upass}_trigger.c.

	In the SMTP client, handle 421 replies in smtp_loop() by
	having the input function raise a flag after detecting 421
	(kill connection caching and be sure to do the right thing
	with RSET probes), leave the smtp_loop() per-command reply
	handlers unchanged, and have the smtp_loop() reader loop
	bail out with smtp_site_fail("server disconnected after
	%s", where), but only in the case that it isn't already in
	the final state. But first we need to clean up the handling
	of do/don't cache, expired, bad and dead sessions.

	Combine smtpd_peer.c and qmqpd_peer.c into a single function
	that produces a client context object, and provide attribute
	print/scan routines that pass these client context objects
	around. With this, we no longer have to update multiple
	pieces of code when a client attribute is added. Ditto for
	SASL and TLS context.

	Don't log "warning: XXXXX: undeliverable postmaster
	notification discarded" for spam from outside.

	Really need a cleanup driver that allows testing against
	Milter applications instead of synthetic events. This would
	have to provide stubs for clients that talk to Postfix
	daemon processes. See if this approach can also be used for
	other daemons.

	smtpd(8) exempts $address_verify_sender from access controls,
	but it doesn't know whether cleanup(8) or delivery agents
	modify the sender. Would it be possible to "calibrate" this
	exemption, perhaps by having delivery agents pass the probe
	sender to the verify server, keeping in mind that the probe
	sender may differ per delivery agent due to output rewriting.

	Update attr_print/scan() so they can send/receive file
	descriptors. This simplifies kludgy code in many daemons.

	Would there be a problem adding $smtpd_mumble_restrictions
	and $smtpd_sender_login_maps to the default proxy_read_maps
	settings?

	Remove defer(8) and trace(8) references and man pages. These
	are services not program names. On the other hand we have
	man pages for lmtp(8) and smtp(8), but not for relay(8).
	Likewise, retry(8) does not have a man page.

	Bind all deliveries to the same local delivery process,
	making Postfix perform as poorly as monolithic mailers, but
	giving a possibility to eliminate duplicate deliveries.

	Maybe declare loop when resolve_local(mxhost) is true?

	Update message content length when adding/removing headers.

	Need scache size limit.

	REDIRECT should override original recipient info, and
	probably override DSN as well.

	Update FILTER_README with mailing list suggestions to tag
	with a badness indicator and then filter down-stream.

	Make null local-part handling configurable: either expand
	into mailer-daemon (current behavior) or disallow (strict
	behavior, currently implemented only in the SMTP server).

	Add M flag (enable multi-recipient delivery) to pipe daemon.

	The usage of TLScontext->cache_type is unclear. It specifies
	a TLS session cache type (smtpd, smtp, or lmtp), but it is
	sometimes used as an indicator that TLS session caching is
	unavailable.  In reality, that decision is made by not
	registering call-back functions for cache maintenance.

	Postfix TLS library code should copy any strings that it
	receives from the application, instead of passing them
	around as pointers. TLScontext->cache_type is a case in
	point.

	Are transport:nexthop null fields the same as in the case
	of default_transport etc. parameters?

	Don't lose bits when converting st_dev into maildir file
	name. It's 64 bits on Linux. Found with the BEAM source
	code analyzer. Is this really a problem, or are they just
	using 64 bits for upwards compatibility with LP64 systems?

	Do or don't introduce unknown_reverse_client_reject_code.

	Check that "UINT32 == unsigned int" choice is ok (i.e. LP64
	UNIX).

	Tempfail when a Milter application tries to negotiate content
	access, while it is configured in an SMTP server that runs
	before the smtpd_proxy filter.

	Log DSN original recipient when rejecting mail.

	Keep whitespace between label and ":"?

	Make the map case folding/locking options configurable, if
	not at run-time then at least at compile time so we get
	consistent behavior across applications.

	Investigate what it would take to eliminate oqmgr, and to
	make the old behavior configurable in a unified queue
	manager.  This would shave another 2.7 KLOC from the source
	footprint.

	Document the case folding strategy for match_list like
	features.

	Eliminate the (incoming,deferred)->active rename operation.
	This requires an in-memory hash of queue file names to avoid 
	duplicate open() operations.

	Softbounce fallback-to-ISP for SOHO users. This heuristic
	assumes that when direct-to-MX delivery fails with 5XX,
	delivery via the ISP may still succeed.  This could be
	implemented by enabling soft bounces for destinations other
	than the smtp_fallback_relay. So the only benefit of this
	over the existing soft_bounce feature is that it has no
	effect on smtp_fallback_relay deliveries.

	Centralize main.cf parameter input so that defaults work
	consistently. What about parameter names that are prefixed
	with mail delivery transport names?

	Fix default time unit handling so that we can have a default
	bounce lifetime of $maximal_queue_lifetime, without causing
	panics when a non-default maximal_queue_lifetime setting
	includes no time unit.

	After the 20051222 ISASCII paranoia, lowercase() lowercases
	ASCII text only.

	Privacy: remove local command/pathname details from remote
	delivery status reports, and log them via local msg_warn().

	Is it safe to cache a connection after it has been used for
	more than some number of address verification probes?

	Try to recognize that Resent- headers appear in blocks,
	newest block first. But don't break on incorrect header
	block organization.

	Hard limits on cache sizes (anvil, specifically).

	Laptop friendliness: make the qmgr remember when the next
	deferred queue scan needs to be done, and have the pickup
	server stat() the maildrop directory before searching it.

	Low: replace_sender/replace_recipient actions in access
	maps, so they can be used in policy servers?

	Low: configurable order of local(8) delivery methods.

	Med: smtp_connect_timeout_budget (default: 3x smtp_connect_timeout)
	to limit the total time spent trying to connect.

	Med: transform IPv4-in-IPv6 address literals to IPv4 form
	when comparing against local IP addresses?

	Med: transform IPv4-in-IPv6 address literals to IPv4 form
	when eliminating MX mailer loops?

	Med: Postfix requires [] around IPv6 address information
	in match lists such as mynetworks, debug_peer_list etc.,
	but the [] must not be specified in access(5) maps. Other
	places don't care.  For now, this gotcha is documented in
	IPV6_README and in postconf(5) with each feature that may
	use IPv6 address information. The general recommendation
	is not to use [] unless absolutely necessary.

	Med: the partial address matching of IPv6 addresses in
	access(5) maps is a bit lame: it repeatedly truncates the
	last ":octetpair" from the printable address representation
	until a match is found or until truncation is no longer
	possible.  Since one or more ":" are usually omitted from
	the printable IPv6 address representation, this does not
	really try all the possibilities that one might expect to
	be tried. For now, this gotcha is documented in access(5).

	Low: reject HELO with any domain name or IP address that
	this MTA is the final destination for.

	Low: should the Delivered-To: test in local(8) be configurable?

	Low: make mail_addr_find() lookup configurable.

	Low: update events.c so that 1-second timer requests do not
	suffer from rounding errors. This is needed for 1-second
	SMTP session caching time limits. A 1-second interval would
	become arbitrarily short when an event is scheduled just
	before the current second rolls over.

	Low: configurable internal/system locking method.

	Low: add INSTALL section for pre-existing Postfix systems.

	Low: add INSTALL section for pre-existing RPM Postfixes.

	Low: disallow smtpd_recipient_limit < 100 (the RFC minimum).

	Low: noise filter: allow smtp(8) to retry immediately if
	all MXes return a quick ECONNRESET or 4xx reply during the
	initial handshake. Retry once? How many times?

	Low: make post-install a "postfix-only script" so it can
	take data from the environment instead of main.cf.

	Low: randomize deferred mail backoff.

	Med: separate ulimit for delivery to command?

	Med: postsuper -r should do something with recipients in
	bounce logfiles, to make sure the sender will be notified.
	To be perfectly safe, no process other than the queue manager
	should move a queue file away from the active queue.

	This could involve tagging a queue file, and use up another
	permission bit (postsuper tags a "hot" file, qmgr requeues it).

	Low: postsuper re-run after renaming files, but only a
	limited number of times.

	Low: smtp-source may block when sending large test messages.

	Med: find a way to log the sender address when MAIL FROM
	is rejected due to lack of disk space.

	Low: revise other local delivery agent duplicate filters.

	Low: all table lookups should consistently use internalized
	(unquoted) or externalized (quoted) forms as lookup keys.
	smtpd, qmgr, local, etc. use unquoted address forms as keys.
	cleanup uses quoted forms.

	Low: have a configurable list of errno values for mailbox
	or maildir delivery that result in deferral rather than
	bouncing mail. What about "killed by signal" exits?

	Low: after reorganizing configuration parameters, add flags
	to all parameters whose value can be read from file.

	Medium: need in-process caching for map lookups. LDAP servers
	seem to need this in particular. Need a way to expire cached
	results that are too old.

	Low: generic showq protocol, to allow for more intelligent
	processing than just mailq. Maybe marry this with postsuper.

	Low: default domain for appending to unqualified recipients,
	so that unqualified names can be delivered locally.

	Low: The $process_id_directory setting is not used anywhere
	in Postfix. Problem reported by Michael Smith, texas.net.
	This should be documented, or better, the code should warn
	about attempts to set read-only parameters.

	Low: while converting 8bit text to quoted-printable, perhaps
	use =46rom to avoid having to produce >From when delivering
	to mailbox.

	virtual_mailbox_path expression like forward_path, so that
	people can specify prefix and suffix.
@