DANE: do not check dns_again_means_nonexist for TLSA results of TRY_AGAIN

[exim.git] / doc / doc-txt / NewStuff

diff --git a/doc/doc-txt/NewStuff b/doc/doc-txt/NewStuff
index 50f7b435777e1f0c0d01df8fe4188eecb336a09f..b00399511557da1a415a13d3175762032c82b39f 100644 (file)
--- a/doc/doc-txt/NewStuff
+++ b/doc/doc-txt/NewStuff
@@ -6,6 +6,43 @@ Before a formal release, there may be quite a lot of detail so that people can
 test from the snapshots or the Git before the documentation is updated. Once
 the documentation is updated, this file is reduced to a short list.
 
 test from the snapshots or the Git before the documentation is updated. Once
 the documentation is updated, this file is reduced to a short list.
 

+Version 4.97
+------------
+
+ 1. The expansion-test faciility (exim -be) can set variables.
+
+ 2. An event on a failing SMTP AUTH, for both client and server operations.
+
+ 3. Variable $sender_helo_verified with the result of an ACL "verify = helo".
+
+ 4. Predefined macros for expansion items, operators, conditions and variables.
+
+ 5. The smtp transport option "max_rcpt" is now expanded before use.
+
+Version 4.96
+------------
+
+ 1. A new ACL condition: seen. Records/tests a timestamp against a key.
+
+ 2. A variant of the "mask" expansion operator to give normalised IPv6.
+
+ 3. UTC output option for exim_dumpdb, exim_fixdb.
+
+ 4. An event for failing TLS connects to the daemon.
+
+ 5. The ACL "debug" control gains options "stop", "pretrigger" and "trigger".
+
+ 6. Query-style lookups are now checked for quoting, if the query string is
+    built using untrusted data ("tainted").  For now lack of quoting is merely
+    logged; a future release will upgrade this to an error.
+
+ 7. The expansion conditions match_<list-type> and inlist now set $value for
+    the expansion of the "true" result of the ${if}.  With a static list, this
+    can be used for de-tainting.
+
+ 8. Recipient verify callouts now set $domain_data & $local_part_data, with
+    de-tainted values.
+

 Version 4.95
 ------------
 
 Version 4.95
 ------------
 


@@ -40,13 +77,29 @@ Version 4.95
 
 11. Faster TLS startup.  When various configuration options contain no
     expandable elements, the information can be preloaded and cached rather
 
 11. Faster TLS startup.  When various configuration options contain no
     expandable elements, the information can be preloaded and cached rather

-    than the provious behaviour of always loading at startup time for every
+    than the previous behaviour of always loading at startup time for every

     connection.  This helps particularly for the CA bundle.
 
 12. Proxy Protocol Timeout is configurable via "proxy_protocol_timeout"
     main config option.
 
     connection.  This helps particularly for the CA bundle.
 
 12. Proxy Protocol Timeout is configurable via "proxy_protocol_timeout"
     main config option.
 

-13. Option "smtp_accept_msx_per_connection" is now expanded.
+13. Option "smtp_accept_max_per_connection" is now expanded.
+
+14. Log selector "queue_time_exclusive", enabled by default, to exclude the
+    time taken for reception from QT log elements.
+
+15. Main option "smtp_backlog_monitor", to set a level above which listen
+    socket backlogs are logged.
+
+16. Main option "hosts_require_helo", requiring HELO or EHLO before MAIL.
+
+17. A main config option "allow_insecure_tainted_data" allows to turn
+
+18. TLS ALPN handling.  By default, refuse TLS connections that try to specify
+    a non-smtp (eg. http) use.  Options for customising.
+
+19. Support for MacOS (darwin) has been dropped.
+

 
 Version 4.94
 ------------
 
 Version 4.94
 ------------