* Try to autodetect clock skew.
* Include remote port number in IMAP and POP3 logs.
* Optimization: skip over folders not in the current scope, avoiding
unnecessary overhead of checking their ACLs.
a new TLS_PROTOCOL selection "SSL23" that allows for trying to negotiate
initially with SSLv3 but falling back to SSLv2:
courier/tcpd/libcouriertls.c:1.21
This allows Courier to interoperate with older mail servers and clients
that are still using SSLv2 when advertising or attempting to use
advertised STARTTLS capabilities.
This change modifies the following packages and bumps their PKGREVISIONs:
mail/courier-imap to 1.
mail/courier-mta to 6.
meta-pkgs/courier to 2.
net/couriertcpd to 1.
+ Remove BDB_LIB workaround which should already be handled by the wrapper
scripts and db1.builtin.mk.
* Plug some resource leaks in the maildir library code.
+ Install some more of the HTML documentation in the location expected
by courier-mta.
+ Moved the default locations for the imapd and pop3d SSL certificates
into ${PKG_SYSCONFDIR}. These paths may be changed directly in the
imapd-ssl and pop3d-ssl configuration files by modifying TLS_CERTFILE.
* New capability to control announcements of IMAP ACL support when
starting imapd.
* Optimization: Skip going through the motions of outputting the results
of a SORT if the number of sorted messages is 0.
* Have CREATE and RENAME also create courierimapuidlist.
* Log total bytes sent/received in IMAP and POP3 sessions.
* Use PCRE for pattern-matching.
* When autopurging messages from a folder based on their
timestamp, scan 'new' in addition to 'cur', otherwise mail
delivered to the folder directly never gets purged, unless
the folder is open.
* Fix handling of invalid sequence number of 0.
* NOT operator on content searches.
* imap: Implemented account groups, administrator group.
* imapd.c: New OUTBOX_MULTIPLE_SEND option.
* imap: add LOGGEROPTS and SSLLOGGEROPTS configuration settings
which are passed to courierlogger to set the application name for
syslog.
* tcpd/tcpd.c: Added --accesslocal option.
* smap: SMAP EXPUNGE >100 msg ranges was broken.
* PROXY_HOSTNAME: new setting in imap and pop3 config file overrides
gethostname() when checking if a proxy connection is required.
* msgbodystructure.c (msgbodystructure): Fix MSGBODYSTRUCTURE response
for a corrupted content-type of "text".
3.0.5 include:
* Implemented IMAP and POP3 proxy aggregator. With a proxy
aggregator, the mail accounts are split between multiple,
independent servers, with an IMAP/POP3 server running on each
individual server. A separate, proxy server sits in front and
accepts ordinary IMAP and POP3 connections. It reads the login
ID, determines which server the account is located on, connects
to the server, and logs in. Then, for the lifetime on the login
session the front-end server takes itself out of the loop, and
forwards all session traffic between the IMAP/POP3 client, and
the back-end server.
* Use courier-authlib for user authentication.
* IPv6 support.
* Minor bug fixes.
Please note when updating that the locations of the userdb files has
changed to be within the courier-authlib config directory, e.g.
/usr/pkg/etc/authlib/userdb*.
distribution). Changes from version 2.2.1 include:
* Honor ${VARBASE}.
* courierlogger(1) has been moved to mail/courier-auth.
* Use the sysconftool from courier-auth to merge config files.
* The courier* rc.d scripts now check that authdaemond is also set to
"YES" to ensure that authdaemond is running before the courier-imap
daemons are started.
* Support for the ACL IMAP extension (RFC 2086 as well as the 2nd draft
revision of the ACL specification) via shared maildirs.
* Bug fixes and improvements to MIME encoding.
* Fixes buffer overflow vulnerability (PR 25774):
http://www.securityfocus.com/bid/9845http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0224
addition of keywords on Maildir messages, use of FAM if it exists to
allow simultaneous access to the same Maildir from multiple clients,
and fixed handling of DELETEd messages and the Trash folder.
bug fixes, plus the major change of moving the authentication modules into
a separate package (courier-auth). The authentication modules are to be
shared with a forthcoming sqwebmail package.
Makefile into package and common parts to facilitate creating sub-packages
for the separate authentication modules, and using the general INSTALL
scripts. Changes from version 1.3.8.2 include:
* bug fixes
* move authentication modules into a separate daemon process
* partial support of the IMAP QUOTA extension.
* added experimental PostgreSQL authentication module.
* added experimental LDAP_TLS option to LDAP authentication.
* workarounds for Outlook
* Disable MSIE 6.0 smart tags in all html files
mail/courier-maildirmake.
* There was an inverted test in the rc.d scripts that was causing them to
fail on newer NetBSD systems.
* Install the rc.d scripts under ${PREFIX}/etc/rc.d, not in ${PREFIX}/etc.
in the package Makefile since we substitute for @SSLCERTS@ anyway.
* Add the *.rand files to the list of files to DEINSTALL.
* Explicitly disable the PAM, LDAP, and MySQL authentication modules so
that hidden dependencies aren't accidentally added to the build.
XXX - These should probably be added in via make variables (USE_PAM,
XXX - USE_LDAP, etc.) in the future, but aren't needed for now in the
XXX - base package.
Courier-IMAP is a server that provides IMAP access to Maildirs. This IMAP
server does NOT handle traditional mailbox files (/var/spool/mail, and
derivatives), it was written for the specific purpose of providing IMAP
access to Maildirs.
"Maildir" is a directory-based mail storage format originally introduced
in the Qmail mail server, and adopted as an alternative mail storage
format by both Exim and Postfix. Courier-IMAP is popular on
Qmail/Exim/Postfix sites that are configured to use maildirs. The primary
advantage of maildirs is that multiple applications can access the same
Maildir simultaneously without requiring any kind of locking whatsoever.
It is a faster and more efficient way to store mail. It works particularly
well over NFS, which has a long history of locking-related woes.
