Wietse Venema:
> I have uploaded a patch that makes postscreen share test results
> between concurrent connections from the same IP address. This patch
> requires Postfix 3.1 or later.
>
> ftp://ftp.porcupine.org/mirrors/postfix-release/experimental/feature-patches/
> -r--r--r-- 1 wietse wietse 14473 Jul 28 18:48
> 20160728-postscreen-3.1-3.2.patch
> -r--r--r-- 1 wietse wietse 480 Jul 28 19:06
> 20160728-postscreen-3.1-3.2.patch.gpg1
> -r--r--r-- 1 wietse wietse 220 Jul 28 19:06
> 20160728-postscreen-3.1-3.2.patch.gpg2
> -r--r--r-- 1 wietse wietse 280 Jul 28 19:06
> 20160728-postscreen-3.1-3.2.patch.sig
Usage:
$ cd $POSTFIX-SOURCE
$ patch -p1 <20160728-postscreen-3.1-3.2.patch
Wietse
> 20160728
>
> Bugfix (introduced: 20090614): with concurrent connections
> from the same client IP address, and after-220 tests enabled,
> postscreen could overwrite the cached "all tests completed"
> result for one connection that completed the after-220 tests,
> with the "some tests not completed" result for a concurrent
> connection where the client hung up before completing the
> after-220 tests. Files: postscreen_misc.c, postscreen_state.c,
> postscreen.h, postscreen_tests.c, postscreen.c, postscreen_smtpd.c,
> postscreen_early.c.
>
>
