Diffing man 5 postconf changes between releases

2018-02-10 Thread J Doe
Hi,

I currently use Postfix version 3.1.0.  I know that there are announcements of 
feature changes between each release of Postfix via e-mail and I read these, 
but I was wondering if there was an easy way to see the changes to the main.cf 
configuration parameters between versions ?

For example, can I somehow diff the difference between man 5 postconf on 
version 3.1.0 and the current release of Postfix ?  When I say diff, I am 
hoping to be able to see just the new configuration parameters.

The only way I can think of doing this is to dump the default configuration 
from postconf from one version and then diff that against the default 
configuration from postconf from the current version.  That will tell me new 
parameters, but it won’t show me if the documentation for existing parameters 
has changed.

If there isn’t an easy way to do this, is this in fact documented somewhere 
(perhaps a list of configuration parameter changes on the website that I just 
haven’t found yet) ?

Thanks,

- J


IP ACL’s for smtpd port 25 and not submission

2018-02-10 Thread J Doe
Hi,

I currently use postscreen on my Postfix version 3.1.0 mail server.  I 
implement IP ACL’s via it to ban malicious connections (generally from xDSL IP 
blocks), against smtpd running on port 25.

I have recently configured and turned on submission with SASL.  With submission 
available, I don’t want to ban any particular xDSL IP blocks as clients that 
are travelling around the world may make use of Internet in cafes, hotels, etc. 
to connect to submission that themselves are xDSL connections.

With postscreen doing the IP ACL work, from what I understand this extends to 
*both* smtpd and submission smtpd.  Is there a way where I can have separate IP 
ACL lists for smtpd on port 25 and smtpd on submission ?  Is this possible via 
postscreen or is there another way of achieving this ?

Thanks,

- J


Re: IP ACL’s for smtpd port 25 and not submission

2018-02-10 Thread Viktor Dukhovni


> On Feb 10, 2018, at 11:17 AM, J Doe  wrote:
> 
> With postscreen doing the IP ACL work, from what I understand
> this extends to *both* smtpd and submission smtpd.

No, that's wrong.  It takes quite a bit of care of enable
"postscreen" on both port 25 and port 587, in the normal
deployment, "postscreen" only filters port 25 connections.

With the premise wrong, the follow-on question is moot.

-- 
Viktor.



Re: Diffing man 5 postconf changes between releases

2018-02-10 Thread Wietse Venema
J Doe:
> Hi,
>
> I currently use Postfix version 3.1.0.  I know that there are
> announcements of feature changes between each release of Postfix
> via e-mail and I read these, but I was wondering if there was an
> easy way to see the changes to the main.cf configuration parameters
> between versions ?
>
> For example, can I somehow diff the difference between man 5
> postconf on version 3.1.0 and the current release of Postfix ?
> When I say diff, I am hoping to be able to see just the new
> configuration parameters.
>
> The only way I can think of doing this is to dump the default
> configuration from postconf from one version and then diff that
> against the default configuration from postconf from the current
> version.  That will tell me new parameters, but it won?t show me
> if the documentation for existing parameters has changed.
>
> If there isn?t an easy way to do this, is this in fact documented
> somewhere (perhaps a list of configuration parameter changes on
> the website that I just haven?t found yet) ?
>

New features and feature changes are summarized in the RELEASE_NOTES file.

Wietse


Re: IP ACL’s for smtpd port 25 and not submission

2018-02-10 Thread Wietse Venema
I'm pretty sure that postscreen documentation says don't use
postscreen for mail user agents (i.e. submission or smtps).

Wietse


Re: Diffing man 5 postconf changes between releases

2018-02-10 Thread Viktor Dukhovni


> On Feb 10, 2018, at 10:26 AM, J Doe  wrote:
> 
> I currently use Postfix version 3.1.0.  I know that there are announcements 
> of feature changes between each release of Postfix via e-mail and I read 
> these, but I was wondering if there was an easy way to see the changes to the 
> main.cf configuration parameters between versions ?
> 
> For example, can I somehow diff the difference between man 5 postconf on 
> version 3.1.0 and the current release of Postfix ? When I say diff, I am 
> hoping to be able to see just the new configuration parameters.

As Wietse said, read the RELEASE_NOTES files.  However, if you realy
want the gory details (which will likely take more effort to digest):

$ git clone https://github.com/vdukhovni/postfix
$ cd postfix/postfix
$ git diff v3.1.0 v3.2.5 -- proto/postconf.proto

For more (say 20 lines of) context say:

   $ git diff -U20 v3.1.0 v3.2.5 -- proto/postconf.proto

-- 
Viktor.