Subject: Announce: OpenSMTPD 5.4.1 released

OpenSMTPD 5.4.1 has just been released.

OpenSMTPD is a FREE implementation of the SMTP protocol with some common
extensions. It allows ordinary machines to exchange e-mails with systems
speaking the SMTP protocol. It implements a fairly large part of RFC5321
and can already cover a large range of use-cases.

It runs on OpenBSD, NetBSD, FreeBSD, DragonFlyBSD, OSX and Linux.

The archives are now available from the main site at www.OpenSMTPD.org

We would like to thank the OpenSMTPD community for their help in testing
the snapshots, reporting bugs, contributing code and packaging for other
systems.

This is a major release with many new features, many minor bugfixes, and
a lot of internal changes.

New features since last stable release (5.3.3):
===============================================

  * Improved configuration file:
    - removed last known ambiguity in grammar
    - much simpler configuration for TLS-enabled hosts
    - most parameters are now swappable in listen and accept rules
    - conditions may be negated (ie: accept from ! <trusted> ...)
    - forward-only rules can be declared to impose ~/.forward files
    - new "recipient" keyword allows accept rule to provide a whitelist
    - sender and recipient tables accept wildcard in their domains

  /!\ configuration file must be edited with this new release !  /!\
  /!\ please refer to smtpd.conf(5) and use smtpd -nf smtpd.conf /!\
  /!\ to validate.                                               /!\


  * TLS generic improvements:
    - support for TLS Perfect Forward Secrecy
    - support for providing custom CA certificate


  * MTA improvements:
    - mta may now require remote hosts to present valid certificates
    - always attempt TLS before falling back to plaintext
    - always present certificate if one is available
    - AUTH LOGIN now supported
    - mta can now specify a EHLO-hostname when relaying


  * SMTP server improvements:
    - inet4-only and inet6-only listeners are now possible
    - listeners may now hide the From part in a Received-line
    - listeners may require clients to provide a valid certificate
    - banner hostname can now be dynamically fetched from a table


  * Queue improvements:
    - Introduce an envelope cache in the queue to improve disk-IO pattern


  * smtpctl(8) improvements:
    - show relays: displays list of currently active relays
    - show routes: displays status of routes currently known by smtpd
    - show hosts: displays list of known remote MX
    - show hoststats: display status of last delivery for active domains
    - resume route: resumes route temporarily disable by the MTA
    - pause/resume envelope: allows pausing individual envelopes
    - pause/resume message: allows pausing individual messages
    - encrypt: allows generating credentials suitable for authentication
    - show message/envelope is now compression/encryption aware


  * documentation:
    - table(5) describes format for static, file and db backends
    - sendmail(8) describes our "sendmail" interface

  * Reduced memory-usage in both general and stressed cases
  * OpenSMTPD now automagically upgrades queue if format changes !
  * Support Qmail-like "sticky home"
  * Support for authenticating users from a credentials table
  * Introduce passwd(5) table backend for user and credentials lookup
  * Expansion variables in ~/.forward now supports modifiers
  * much more efficient scheduler !
  * And a lot of minor bug-fixes and internal cleanup !


  Experimental:

  * SQLite table backend
  * LDAP table backend
  * MySQL table backend
  * Postgres table backend


  Portable:

  * Completely reworked autotools layout


  Limitations:

  * No filters support yet (we're almost there)
  * No masquerading or address rewrite yet (we're almost there)


Contributors:
=============

The following people have contributed features to this release:

Colin Didier, Ryan Kavanagh, Sunil Nimmagadda


Checksums:
==========

  SHA256 (opensmtpd-5.4.1.tar.gz) =
  e70816ebc3b4aa9200d46cd0ced0f16c6ce6591fdcd91a2283183e22da2fb0ad

  SHA256 (opensmtpd-5.4.1p1.tar.gz) =
  7debbf7e55ff3687617ae2c3b38e1cf30574b96f56b869e597c0e98478e5b5d9


Support:
========

You are encouraged to register to our general purpose mailing-list:
    http://www.opensmtpd.org/list.html

The "Official" IRC channel for the project is at:
    #OpenSMTPD @ irc.freenode.net


Reporting Bugs:
===============

Please read http://www.opensmtpd.org/report.html
Security bugs should be reported directly to security@opensmtpd.org
Other bugs may be reported to bugs@opensmtpd.org

OpenSMTPD is brought to you by Gilles Chehade, Eric Faurot and Charles Longeau.