Postfix 2.6.2 imported into NetBSD-current

Postfix 2.6.2, the latest stable version of the popular mail transport agent, was imported into NetBSD-current recently. The following features have been added since version 2.5.4:

• Multi-instance support introduces a new postmulti(1) command to create/add/remove/etc. additional Postfix instances. The familiar "postfix start" etc. commands now automatically start multiple Postfix instances. The good news: nothing changes when you use only one Postfix instance. See MULTI_INSTANCE_README for details.
• Multi-instance support required that some files be moved from the non-shared $config_directory to the shared $daemon_directory. The affected files are postfix-script, postfix-files and post-install.
• TLS (SSL) support was updated for elliptic curve encryption. This requires OpenSSL version 0.9.9 or later. The SMTP client no longer uses the SSLv2 protocol by default. See TLS_README for details.
• The Milter client now supports all Sendmail 8.14 Milter requests, including requests for rejected recipient addresses, and requests to replace the envelope sender address. See MILTER_README for details.
• Postfix no longer adds (Resent-) From:, Date:, Message-ID: or To: headers to email messages with "remote" origins (these are origins that don't match $local_header_rewrite_clients). Adding such headers breaks DKIM signatures that explicitly cover non-present headers. For compatibility with existing logfile processing software, Postfix will log ``message-id=<>'' for email messages that have no Message-Id header.
• Stress-adaptive behavior is now enabled by default. This allows the Postfix SMTP server to temporarily reduce time limits and error-count limits under conditions of overload, such as a malware attack or backscatter flood. See STRESS_README for details.

Enjoy!

[0 comments]

 

wake(8), a New Wake-on-LAN Command

wake is a new command to send Wake-on-LAN frames over an ethernet to Wake-on-LAN capable machines, remote powering them up. This functionality is generally enabled in a machine's BIOS and can be used to power on machines from a remote system without having physical access to them.

wake is available in NetBSD-current. See the wake(8) manual page for details.

[0 comments]

 

Interview with Soren Jacobsen

A couple of weeks ago, Guillaume Lasmayous and I threw the idea of interviewing NetBSD developers through our website, NetBSDfr, to promote the NetBSD Project, and to make their work known to the widest possible audience.

Today, we are discussing with Soren Jacobsen, snj@, NetBSD 5.0 release engineer.

[Read More] [0 comments]

 

Google Summer of Code: PXE Bulk Install Update

The PXE Bulk Install system is essentially an NFS mounted root directory that, when mounted at boot time, installs various configurations of NetBSD on client machines through its /etc/rc file. A "configuration" or "class" of machine can include essentially anything imaginable, from custom kernels to configuration files, SSH keys and packages installed. Once a class is created and a MAC address assigned to that class, a machine that NFS mounts the directory will have its chosen class applied to it.

[Read More] [0 comments]

 

New Security Advisories: NetBSD-SA2009-001 through NetBSD-2009-004

Four new security advisories were published, covering pf, tcpdump, proplib and PAM.

[Read More] [0 comments]

 

Google Summer of Code: Improving RAIDframe parity handling

A NetBSD system, in order to tolerate disk failures, can use the software RAID driver raid(4). Currently, if that system is shut down uncleanly (e.g., loses power or crashes), then when it comes back up it will have to check the entire RAID set's redundancy information. This process can take many hours, during which it imposes a substantial load on the system. It is also a distinct disadvantage to using NetBSD in server applications, and the inclusion of a journaling filesystem in NetBSD 5 makes it all the more prominent.

The goal of my Summer of Code project is to shorten that check from hours to minutes.

[Read More] [0 comments]

 

Google Summer of Code Generic file system mounting project

Progress report of the generic file system mounting GSoC project. This project aims to remove the struct <fs>_args opaque container (the data argument in the mount(2) system call) so as to get a generic way to mount a file system whatever its type is.

[Read More] [0 comments]

 

XML tools update

My Google Summer of Code student, Nhat Minh Le, is working on a suite of simple, efficient, stream-oriented tools for processing XML on UNIX systems. Nhat Minh is making good progress on xmlgrep, a grep-alike program that understands XML syntax.

Read about Nhat Minh's progress on his blog.

Keep reading for my explanation of the niche where Nhat Minh's tools fit.

[Read More] [1 comment]

 

The recent outage of this blog

As you may be aware, this blog has been unexpectedly down 27 hours of the past 32 hours. We suspect this outage was due to a soft failure of the power supply but analysis of this problem is difficult and still ongoing.

Currently the blog is hosted in a different location than usual and does not have the benefit of the usual remote management infrastructure (nor is it in the care of the usual admins team, so there is no timezone diversity for its system management either).

The service will be moved to a TNF system in the near future (not as a reaction to the outage; the current housing is a stopgap measure fixing performance problems the blog experienced in its earlier incarnation until the new TNF owned system is deployed).

In the meantime please be patient should you experience any further outages.

[0 comments]

 

pkg_install update

The current version of pkg_install has been included in the latest NetBSD release branch. This post highlights some of the many changes and improvements made to pkg_install.

[Read More] [0 comments]

 

Google Summer of Code zfs-port project

Progress report of zfs-port Google Summer of Code project. This project aims to continue effort to port zfs file system to NetBSD. ZFS is a well known filesystem developed by Sun Microsystems, inc. for their Solaris operating system.

[Read More] [0 comments]

 

End of life for 3.x

In keeping with NetBSD's policy of supporting only the current (5.x) and next most recent (4.x) release branches, the release of 5.0 marks the end of life for the 3.x branches. We have provided an extra month of support for 3.x in order to give people time to migrate their machines to a newer release, and this one month period will be part of our support policy in the future.

The following branches will no longer be maintained:

• netbsd-3-0
• netbsd-3-1
• netbsd-3

This means:

• There will be no more pullups to the branches (even for security issues)
• There will be no security advisories made for any of the 3.x releases
• The existing 3.x releases on ftp.NetBSD.org will be moved into /pub/NetBSD-archive/

Here's hoping 5.0 serves you all as well (but preferably much better) as 3.0 did!

[0 comments]