- update to 3.5-20190518

- update to 3.5-20190517


20190516
  Initial search order support for check_ccert_access. The
  default behavior is backwards-compatible. This is work in
  progress; see the RELEASE_NOTES for examples.

20190517
  Bugfix: postconf mis-parsed text starting with "{" such as
  "check_ccert_access { inline:{a=b} { search_order=c,d } }".
  Fixed by adding another level of recursion.

- update to 3.5-20190427

Note:
----------------------------------------------------------------------
Incompatibility with snapshot 20190427
======================================
  Postfix now normalizes IP addresses received with XCLIENT, XFORWARD,
  or with the HaProxy protocol, for consistency with direct connections
  to Postfix. This may change the appearance of logging, and the way
  that check_client_access will match subnets of an IPv6 address.

Changelog:
----------------------------------------------------------------------
20190331
  Documentation: tlsext_padding is not a tls_ssl_options

- update to 3.5-20190330
- adopt libressl patches from OpenBSD

- update to 3.4-20190106

devel/icu: update to 64.1

Changes:	http://site.icu-project.org/download/64
ABI:		https://abi-laboratory.pro/tracker/timeline/icu4c/
PR:		236325
Exp-run by:	antoine
Differential Revision:	https://reviews.freebsd.org/D19479

- update to 3.4-20181202

 - update to 3.4-20181130

- add ability to overwrite OPTIONS_DEFAULT for slave ports
  (s/=/?=/)

PR:		233608
Submitted by:	HEO SeonMeyong

- fix build with libressl 2.8.2

PR:		233517
Submitted by:	Andrej Ebert

- update to 3.4-20181123

- update to 3.4-20181119

- update to 3.4-20181118

- update to 20181117

- update to 3.4-20181113

- update to 20181105

20181014
  Cleanup: figured out why vstring_get() did not return
  VSTREAM_EOF in APPEND mode.

20181104
  Multiple 'bit rot' fixes for OpenSSL API changes, including
  support to disable TLSv1.3, to avoid issuing multiple session
  tickets, and to allow OpenSSL >= 1.1.0 run-time micro version
  bumps without complaining about library version mismatches.

20181105
  Feature: "postmap -F" reads a source file with (key, filename)
  entries, and creates database records with (key, base64-encoded
  filecontent). This feature will be used for SNI lookup
  table support, where each key will be a domainname, and
  each value will contain a sequence of (private key, certificate
  hierarchy) for that domainname. The same 'value is filename'
  behavior is implemented in cidr:, inline:, pcre:, randmap:,
  regexp:, and static: maps if the application sets the flag
  DICT_FLAG_RHS_IS_FILE. In the forseeable future, this will

Remove compatibility code for FreeBSD < 11.2 from all ports.

Simplify some ports where DragonFlyBSD no longer needs to be special-cased.
Submitted by:	rene
Reviewed by:	bapt, jbeich
Differential Revision:	https://reviews.freebsd.org/D17724

devel/icu: update to 63.1

Changes:	http://site.icu-project.org/download/63
ABI:		https://abi-laboratory.pro/tracker/timeline/icu4c/
PR:		232300
Exp-run by:	antoine

- fix build on FreeBSD 13-CURRENT

PR:		232502
Submitted by:	Kai

- update to 3.4-20180904

 - update to 3.4-20180819.

- update to 3.4-20180708

- update to 3.4-20180707

- update to 20180701

devel/icu: update to 62.1

Changes:	http://site.icu-project.org/download/62
ABI:		https://abi-laboratory.pro/tracker/timeline/icu4c/
PR:		229359
Exp-run by:	antoine (only 10.4)

- update to 3.4-20180624

- update to 3.4-20180620

Drop always true (and tautologic) OSVERSION conditions

Approved by:	portmgr blanket

- update to 3.4-20180520

devel/icu: update to 61.1

Changes:	http://site.icu-project.org/download/61
ABI:		https://abi-laboratory.pro/tracker/timeline/icu4c/
PR:		227042
Exp-run by:	antoine
MFH:		2018Q2 (required by Firefox 61)

- update to 3.4-20180401

Changelog:
20180224
  Workaround: postconf build did not abort if the m4 command
  is not installed (on a system that does have the make command,
  the awk command, the perl command, and the C compiler?!).
  File: postconf/extract_cfg.sh.

20180303
  Portability: slight differences between MySQL and MariaDB.
  Olli Hauer. File: global/dict_mysql.c.

20180306
  Bugfix (introduced: 19990302): when luser_relay specifies
  a non-existent local address, the luser_relay feature becomes
  a black hole. Reported by Juergen Thomsen. File: local/unknown.c.

  Portability: FreeBSD 11 is supported. Files: makedefs,
  util/sys_defs.h.

- fix build agains maraidb100 [1]

Firt definition of MARIADB_VERSION_ID can be found in mariadb102
therefore we have to use MARIADB_BASE_VERSION which is defined in
mariadb55 and mariadb10x

PR:             226266 [1], 220224
Reported by:    Zilon [1]

- update to 3.4-20180222
- add patch for MySQL 8.x [1}
- add blacklistd support [2]

additional:
 regenerate patch for src/util/sys_defs.h

PR:           220224 [1], 225664 [2]
Submitted by: Klaus Mayr [1], Koichiro IWAO [2]

- update to 3.4-20180218

- update to 3.4.20180203
- license is now dual (see Changelog 20180203)
- make EAI optional but on by default [1]

20180128
  Documentation: the tcp_table(5) manpage now documents the
  absence of substring lookups. File: proto/tcp_table.

20180203
  Licence: in addition to the historical IBM Public License
  1.0, this software is now also distributed with the more
  recent Eclipse Public License 2.0. Recipients can choose
  to take the software under the license of their choice.
  Those who are more comfortable with the IPL can continue
  with that license. File: LICENSE.

PR:             ports/221619 [1]
Submitted by:   Kubilay Kocak (koobs@)

- update to 3.3-20180121

- update to 3.3-20180113

- update to 3.3-20180107

Incompatible changes with snapshot 201800107
--------------------------------------------
 This release changes the format of 'full name' information in
 Postfix-generated From: headers, when a local program such as
 /bin/mail submits a message without From: header.

 Postfix-generated From: headers with 'full name' information are
 now formatted as "From: name <address>" by default. Specify
 "header_from_format = obsolete" to get the earlier form "From:
 address (name)". See the postconf(5) manpage for more details.

- update to 3.3-20171229
- s/ECHO/ECHO_CMD  [1]

PR:		222988 [1]
Submitted by:	Franco Fichtner [1]

devel/icu: update to 60.1

Changes:	http://site.icu-project.org/download/60
ABI:		https://abi-laboratory.pro/tracker/timeline/icu4c/
PR:		223373
Exp-run by:	antoine

- update to 3.3-20170924

Changelog:
20170923
  Bugfix (introduced: Postfix 3.2): panic in the postqueue
  command after output write error while listing the queue.
  This change restores a write error check that was lost with
  the Postfix 3.2.2 rewrite of the vbuf_print formatter.
  Problem reported by Andreas Schulze. File: util/vbuf_print.c.

devel/icu: update to 59.1

- Temporarily keep C++98 working in consumers for Clang's default -std=

Changes:	http://site.icu-project.org/download/59
PR:		218788
Submitted by:	takefu@airport.fm, dcarmich@dcarmichael.net (early version)
Exp-run by:	antoine

- update to 3.3-20170910

20170827
  Safety: in vstream_buf_space(), add a sanity check to reject
  negative request sizes, instead of letting the program fail
  later. File: util/vstream.c

  Bugfix: in tests that enable the VSTRING_FLAG_EXACT flag,
  vstring_buf_put_ready() could fail to extend the buffer,
  causing infinite recursion in VBUF_PUT(). File: util/vstring.c.

20170830
  Bugfix: in vbuf_print(), save the parser-produced format
  string before calling msg_panic(), so that the panic message
  will not display its own format string. File: util/vbuf_print.c.

- update to 3.3-20170730

- update to 3.3-20170613

Changelog:
20170505
  Workaround for a current problem where some destination
  announces primarily IPv6 MX addresses, the smtp_address_limit
  eliminates most or all IPv4 addresses, and the destination
  is not reachable over IPv6. This workaround is enabled with
  "smtp_balance_mx_inet_protocols = yes", which is the default.
  Files: smtp/smtp.c, smtp/smtp_params.c, smtp/smtp_addr.c,
  global/mail_params.h, proto/postconf.proto.

20170506
  A last-minute cosmetic fix had introduced a bug in
  smtp/smtp_addr.c.

mail/postfix-current: Fix x25519 kex with LibreSSL

 - Add patches for LibreSSL

PR:		216790
Obtained from:	OpenBSD ports
Approved by:	ohauer (maintainer)

mail/postfix-current: update 3.2.0-RC1 -> 3.3-20170502

PR:		218696
Changes:	https://de.postfix.org/ftpmirror/experimental/postfix-3.3-20170502.HISTORY
Submitted by:	pi
Approved by:	ohauer (maintainer timeout)

Bump PORTEPOCH after last update (r434402)

pkg version -t 3.2.20170129,4 3.2.0.r1,4
>
pkg version -t 3.2.20170129,4 3.2.0.r1,5
<

Reported by:	Gerard Seibert <carmel_ny@outlook.com> (via freebsd-ports ml)
Approved by:	portmgr (just-fix-it blanket)

- update to 3.2.0-RC1

Release Notes:
 ftp://ftp.porcupine.org/mirrors/postfix-release/official/postfix-3.2.0-RC1.RELEASE_NOTES

- update to 20170129
- fix build with libressl < 2.5.x

Release Notes:
ftp://ftp.porcupine.org/mirrors/postfix-release/experimental/postfix-3.2-20170129.RELEASE_NOTES

PR:		216732
Submitted by:	Bernard Spil
Reported by:	Piotr Kubaj
Obtained from:	OpenBSD

- update to 3.2-20161224

20161205
   Cleanup: log the sender address when rejecting a too large
   message size in a "MAIL FROM:<sender> SIZE=nnn" command.
   File: smtpd/smtpd.c.

20161206
   Bugfix (introduced: Postfix 3.0): when receiving a MAIL
   FROM...SMTPUTF8 command while smtpd_delay_reject=no, enable
   SMTPUTF8 support before processing smtpd_sender_restrictions.
   Problem reported by Viktor Dukhovni. File: smtpd/smtpd.c.

   Bugfix (introduced: Postfix 3.0): when receiving a
   VRFY...SMTPUTF8 command, enable SMTPUTF8 support while

- update to 3.2-20161204

Incompatible changes with snapshot 20161204
===========================================

Postfix 3.2 removes tentative features that were implemented
before the DANE spec was finalized:

- Support for certificate usage PKIX-EE(1),

- The ability to disable digest agility. Postfix 3.2 always behaves
  as if "tls_dane_digest_agility = on.

- The ability to disable support for "TLSA 2 [01] [12]" records
  that specify the digest of a trust anchor. Postfix 3.2 always
  behaves as if "tls_dane_trust_anchor_digest_enable = yes".

Do not use post-stage.  Use post-install instead.

The only reason to use post-stage is because the port needs to do
"things" at a later time, like some plist manipulation.
While there, fold post-install in do-install targets when they are
defined.

PR:		214780
Submitted by:	mat
Exp-run by:	antoine
Sponsored by:	Absolight

devel/icu: update to 58.1

Changes:	http://site.icu-project.org/download/58
PR:		214384
Exp-run by:	antoine
Approved by:	office (bapt)

- update to 3.2-20161106

20161105
 Bugfix (introduced: Postfix 1.1): the postsuper command did
 not count a successful rename operation after error recovery.
 Problem reported by Markus Sch_nhaber. File: postsuper/postsuper.c.

 Cleanup: error reporting for IDNA (non-ASCII domain name)
 conversion errors, and enable_idna2003_compatibility
 configuration. File: util/midna_domain.c.

Incompatible changes with snapshot 20161103
===========================================

Postfix 3.2 by default disables the 'transitional' compatibility
between IDNA2003 and IDNA2008, when converting UTF-8 domain names
to/from the ASCII form that is used in DNS lookups.  This makes
Postfix behavior consistent with current versions of the Firefox
and Chrome web browsers. Specify "enable_idna2003_compatibility =
yes" for historical behavior.

This affects the conversion of, for example, the German sz and the
Greek zeta. See http://unicode.org/cldr/utility/idna.jsp for more
examples.

- update to 3.2-20161101

Major changes with snapshot 20161031
====================================
The smtpd_milter_maps feature supports per-client Milter configuration.
This overrides the global smtpd_milters setting and has the same syntax.
A lookup result of "DISABLE" turns off Milter support.

- update to 3.2-20161008

Changelog:

20161007
  Bitrot: API for the ersatz inet_ntop() function, when
  compiling with -DNO_IPV6 (which exists only for debugging).
  Files: util/sys_defs.h, util/sys_compat.c.

20161008
  Feature: smtp_tcp_port, similar to the existing lmtp_tcp_port.
  Files: mantools/postlink, proto/postconf.proto,
  global/mail_params.h, smtp/smtp.c, smtp/smtp_connect.c,
  smtp/smtp_params.c.

  Feature: "PASS" and "STRIP" actions in header/body_checks.
  "STRIP" is similar to "IGNORE" but also logs the action,
  and "PASS" disables header, body, and Milter inspection for
  the remainder of the message content.  Contributed by Hobbit.
  Files: cleanup/cleanup_message.c, global/header_body_checks.c.

- update to 3.2-20160925

Changelog:
==========
20160925
  Bugfix (introduced: Postfix 2.11): changed the default MySQL
  option_group value to "client" to enable the reading of
  "client" option group settings in the MySQL option file.
  Specify an empty option_group value to get backwards-compatible
  behavior.  This fixes a "not found" problem with Postfix
  queries that contain UTF8-encoded non-ASCII text.  Based
  on a fix by John Fawcett.  Files: global/dict_mysql.c,
  proto/mysql_table.

Incompatible changes with snapshot 20160925
===========================================
In the Postfix MySQL database client, the default option_group value
has changed to "client", to enable reading of "client" option group
settings in the MySQL options file. This fixes a "not found" problem
with Postfix queries that contain UTF8-encoded non-ASCII text.
Specify an empty option_group value (option_group =) to get
backwards-compatible behavior.

- update to 3.2-20160924

Changelog:
20160918
 after rejected SMTP commands.  As before, the SMTP server
 does not forward SASL login information to other Postfix
 subsystems, and it does not receive SASL login information
 in XFORWARD commands. File/smtpd/smtpd.c.

- Update devel/icu to 57.1.
- Clean up the Makefile.
- Follow some upstream recommendations (--with-data-packaging=archive,
  --disable-renaming, -DICU_NO_USER_DATA_OVERRIDE).
- Patch makefiles to install static libraries with INSTALL_DATA so they
  aren't stripped.
- Patch config/mh-bsd-gcc to sync with config/mh-linux-gcc.
- Fix endianness detection in ICU.  The code wanted to use BYTE_ORDER
  defined in machine/endian.h, but this isn't visible because ICU is
  compiled with _XOPEN_SOURCE.  Patch the code to use _BYTE_ORDER instead.
- Compile ICU with C++11 compiler to enable move constructors.
- Patch ICU to fix a problem with atomics in the case of a C++11 compiler
  without C++11 header <atomic> (like Clang on FreeBSD 9).
- Bump all ports that depend on it due to library version change.
- Add USES=compiler:c++0x to some ports that pick up -std=c++0x from ICU
  pkgconfig files.
- Add USES=compiler:c++11-lib to graphics/libcdr01 because it also needs
  a C++11 runtime library now.  Add this to all ports that depend on it
  so their executables load the right libstdc++.so on FreeBSD 9.

PR:		205120
Exp-run by:	antoine
Approved by:	portmgr (antoine)

- update to 3.2-20160917

Changelog:
20160908
        Documentation: add a pointer to hosts(5) and services(5)
        for symbolic host and port syntax. File: proto/master.

20160911
        Bugfix (introduced: Postfix 3.0): the SMTP daemon did not
        reset a previous session's command counts before rejecting
        a client that exceeds request or concurrency rates. File:
        smtpd/smtpd.c.

20160912
        Feature: preserve the new file mtimes when installing

mail/postfix-current: Fix runtime TLS failure with LibreSSL

   - Add LibreSSL checks to <> 1.1.0 OpenSSL checks
   - Bump portrevision

PR:		212223
Submitted by:	Markus Kohlmeier <rootservice@gmail.com>
Reported by:	Markus Kohlmeier <rootservice@gmail.com>
Approved by:	ohauer (via mail)
MFH:		2016Q3

- update to 3.2.20160828

20160808
       Cleanup: preserve the new file mtimes when installing Postfix.
       Ond[m~Yej Lyson[m~[k. File: postfix-install.                             
                                                                                
                       REVERTED 20160828.

20160819
       Bugfix (introduced: Postfix 3.0): the makedefs script ignored
       readme_directory=pathname overrides. Fix by Todd C. Olson.
       File: makedefs.

20160821
       Bugfix (introduced: Postfix 3.0): the tls_session_ticket_cipher
       documentation says aes-256-cbc, but the implementation was
       using aes-128-cbc (note that Postfix SMTP server and client

USE_BDB cleanup.

- USE_BDB=4x+ -> USES=bdb.
- USE_BDB=yes -> USES=bdb.
- USE_BDB=xx  -> USES=bdb:xx.

Other modernisations when I see them.

PR:		209183
Sponsored by:	Absolight

- update to 20160730


20160728
  Bugfix (introduced: 20090614): with concurrent connections
  from the same client IP address, and after-220 tests enabled,
  postscreen could overwrite the cached "all tests completed"
  result of one connection that completed the after-220 tests,
  with the "some tests not completed" result of a concurrent
  connection where the client hung up before completing the
  after-220 tests.  Files: postscreen_misc.c, postscreen_state.c,
  postscreen.h, postscreen_tests.c, postscreen.c, postscreen_smtpd.c,
  postscreen_early.c.

20160730
  Cleanup: don't try to optimize away postscreen cache updates.
  File: postscreen_misc.c.

  Cleanup: removed compatibility crutches that emulated a
  historical data organization from four years ago. Files:
  postscreen/postscreen.[hc], postscreen/postscreen_early.c,
  postscreen/postscreen_smtpd.c, postscreen/postscreen_tests.c.

- fix build on FreeBSD 12
- s/USE_OPENSSL=yes/USES=ssl/

Bump PORTREVISION for the icu revert.

This time not bumping lang/php70, but devel/php70-intl which is the one
really depending on icu.

PR:		205120
With hat:	portmgr
Sponsored by:	Absolight

devel/icu: bump PORTREVISION on dependent ports

- update to 2.3.20160625

20160618
       Bugfix(introduced: 20091121): with the introduction of
       sender_dependent_default_transport_maps, the SMTP daemon
       was not updated. This resulted in false rejects with
       sender-dependent "error" transports. Based on a fix by
       Russell Yanofsky.  Files: global/resolve_clnt.c,
       global/resolve_clnt.h, smtpd/smtpd_check.c, smtpd/smtpd_check.h,
       smtpd/smtpd_milter.c, smtpd/smtpd_resolve.c, smtpd/smtpd_resolve.h.

20160619
       Refinements to the 20160618 fix. For more consistent results
       with sender address validation, use the recipient address
       (if available) as the sender-dependent address resolver

- update to 3.2-20160612
- fix build with LibreSSL [1]

20160601
        Cleanup: moved parsing of '!' operators from cidr_match.c
        to dict_cidr.c. Files: util/cidr_match.[hc], util/dict_cidr.c,
        util/match_ops.c.

20160604
        Cleanup: made parsing of '!' operators in regexp and pcre
        tables consistent with cidr tables. Files: util/dict_regexp.c,
        util/dict_pcre.c.

20160605
        Cleanup: integer wrap-around detection in the MySQL and

- update to 3.2-20160527

20160526
       Feature: cidr tables now support if/endif and negation (by
       prepending "!" to a pattern), just like regexp and pcre
       tables. The primarily purpose is to improve readability of
       complex tables. Files: util/cidr_match.[hc], util/dict_cidr.c,
       proto/cidr_table.

       Cleanup: make regexp: and pcre: parser warning messages more
       similar.  Files: dict_regexp.c, dict_pcre.c.

- update to 3.2-20160522

20160521
 Bugfix (introduced: Postfix beta): the never-used function
 mvect_free() attempted to free memory that it has not
 allocated.  File: util/mvect.c.

 Cleanup: existing if/endif support for pcre and regexp
 tables, in preparation for new if/endif support for cidr
 tables. Files: util/dict_regexp.c, util/dict_pcre.c.

- update to 3.2-20160515

Changelog:

20160330
        The collate.pl script by Viktor Dukhovni for grouping Postfix
        logfile records into "sessions" based on queue ID and process
        ID information. Files: auxiliary/collate/*.

20160407
        Treat SASL_FAIL and SASL_NOMEM as temporary errors.
        Markus Benning. File: xsasl/xsasl_cyrus_server.c.

20160410
        Bugfix (introduced: Postfix 2.6): the "bad filetype"

- update to 3.2-20160327
- remove ${PORTSDIR} from dependency

- update to 3.2-20160314
- change comment to reflect this is a  Experimental version
- fix CONFLICTS

Changes:
20160227
	Cleanup: remember multiple BCC actions in access maps.
	Files: smtpd/smtpd.h, smtpd/smtpd.c, smtpd/smtpd_check.c,
	smtpd/smtpd_state.c, proto/access.

20160228
	Documentation: STRESS_README. File: proto/STRESS_README.html.

20160229
	Documentation: postmulti manpage. File: postmulti/postmulti.c.

- update to postfix 3.2 Snapshot 20160224

- s/always build in/always built in/

- update to 3.0.4
- rework SASL OPTIONS
  Dovecot SASL does not need any dependency, from now it will be always build
into postfix

- EAI is now mandantory, else mails can be lost
- add support for FreeBSD 10.3 mailwrapper (install mailer.conf into
LOCALBASE/mail instead /etc/mail)
- add better reload support to rc script
- display correct path in pkg-message
- add support for postfix-sasl slave port
- remove nativ SPF support, patch is no longer maintained and there are
alternatives in the ports tree
- remove VDA support (seems VDA project is dead and unmaintaned)

Many Thanks to all testers!

PR:	195662
PR: 	205162

- s/SQLITE_USE/SQLITE_USES/

- rework pkg-install and pkg-message [1]

- install postfix specific mailer.conf.postfix into DATADIR [2]

- make EAI the default, postfix will reject messages if build
  w.o. EAI and compatibility_level is set to a value >=1 [3]

- use new notation instead PATCH_DIST_STRIP

- bump PORTREVISION

1) detect if the port is installed without TERM, in this case
   do not ask the to make postfix the default mailer and respect
   the env POSTFIX_DEFAULT_MTA. This helps tools like salt,
   ansible, cfengine and puppet during the first package installation.

Improve shebangfix framework

- Support multiple values in *_OLD_CMD, i.e. we can now fix both
"/usr/bin/python" and "/usr/bin/env python" at the same time
- Default *_OLD_CMD values are now always appended, so you don't need to specify
them in individual ports
- Add lua support (depends on USES=lua)
- Add more default values, such as "/usr/bin/env foo" for python, perl, bash,
ruby and lua
- Shebangfix now matches whole words, e.g. we will no longer (erroneously)
replace "/usr/bin/perl5.005" with "${perl_CMD}5.005" (but "/usr/bin/perl -tt" is
still (correctly) replaced with "${perl_CMD} -tt")

Note that *_OLD_CMD items containing spaces must now be quoted (e.g.
perl_OLD_CMD=/bin/perl /usr/bin/perl "/usr/bin/env perl")

Update shebangfix usage according to new rules in many ports:

- Remove *_OLD_CMD for patterns now replaced by default
- Quote custom *_OLD_CMD which contain spaces

Fix shebangfix usage in many ports (irrelevant to infrastructure change):

- Remove redundant SHEBANG_LANG (no need to duplicate default langs)
- Remove redundant *_CMD (such as
python_CMD=${LOCALBASE}/bin/python${PYTHON_VER} when USES=python is present)
- Never use *_OLD_CMD in REINPLACE_CMD matchers, these should always look for
exact string

Approved by:	portmgr (bapt)
Differential Revision:	D3756

- update to 3.0.3
- use target helpers

ChangeLog:
20150722
	The COMPATIBILITY_README text and HTML files were not
	installed.  File: conf/postfix-files.

20150903
	Workaround: disable DNSSEC support for AIX 7x and earlier.
	The AIX 6/7 resolver(5) API defines RES_USE_DNSSEC without
	defining the "ad" bit.  Viktor Dukhovni.  Files: makedefs,
	proto/INSTALL.html, dns/dns.h.

20150923

Remove trailing whitespace from Makefiles, M-X.

- update to 3.0-20150719 (3.0.2)

20150501
       Support for Linux 4.*, and some simplification for future
       makedefs files. Files: makedefs, util/sys_defs.h.

20150718
       Security: opportunistic TLS by default uses "medium" or
       stronger ciphers instead of "export" or stronger. See the
       RELEASE_NOTES file for how to get the old settings back.
       Files: global/mail_params.h, proto/TLS_README.html,
       proto/postconf.proto, and files derived from those.

20150719
       Security: Postfix TLS support by default no longer uses

- Always use USE_RC_SUBR now that it handles properly PREFIX=/usr

VDA: Remove misleading '32bit' in description.

This stemmed from older VDA patches which provided a default patch which only
used 'long' for its data types and a '64bit' patch which used 'long long'.
On 32bit systems 'long' is limited to a 2GB quota while on 64bit systems it will
not be. They later renamed the '64bit' patch to be 'bigquota'. They no longer
provide a 'bigquota' patch due to less demand as most systems are 64bit
today and do not have the small 2GB quota limitation with the 'long' type.
The description of '32bit' was not accurate or useful anymore.

Upstream discussion: http://sourceforge.net/p/vda/mailman/message/24713171/

MASTER_SITES cleanup.

- Replace ${MASTER_SITE_FOO} with FOO.
- Merge MASTER_SITE_SUBDIR into MASTER_SITES when possible. (This means 99.9%
  of the time.)
- Remove occurrences of MASTER_SITE_LOCAL when no subdirectory was present and
  no hint of what it should be was present.
- Fix some logic.
- And generally, make things more simple and easy to understand.

While there, add magic values to the FESTIVAL, GENTOO, GIMP, GNUPG, QT and
SAMBA macros.

Also, replace some EXTRACT_SUFX occurences with USES=tar:*.

Checked by:	make fetch-urlall-list
With hat:	portmgr
Sponsored by:	Absolight

- update to version 3.0.1
- rename OPTIONS to match default name of most ports
  - SASL2 -> SASL
  - OPENLDAP -> LDAP
- install main.cf and master.cf with the @sample macro
- rework pkg-install
- fix wrong permission for /var/db/postfix [1]
- sets WANT_OPENLDAP_SASL option for openldap port when
  postfix LDAP_SASL option is set [2]
- make usage of new ${opt}_DEPENDS notation

Release 3.0.1 or 3.0.2 is now a strong candidate to become the new
default mail/postfix port (missing components are VDA and SPF).

Changelog:

- grap mail/postfix ports
  (I have some rewrites for them)

- Reassign to the heap after sahil@'s bit was taken in for safekeeping

- update to postfix 3.0.0 release [1]
- cleanup MASTER_SITES
- enable new pie parameter (build with -fPIC)

[1] keep the port as postfix-current until we are sure
    the new distributed layout will not change
    (location of libs, dynamicmaps.cf.d, postfix-files.d ...)

Release announcement:
 http://www.postfix.org/announcements/postfix-3.0.0.html

Release Notes:
 ftp://ftp.porcupine.org/mirrors/postfix-release/official/postfix-3.0.0.RELEASE_NOTES

Approved by:	sahil (implicit)

- update to postfix-3.0-20150129
- fix build on FreeBSD 11 [1]
- use OPENSSL=yes instead including Mk/bsd.openssl.mk

- enable TLS as default option.
  Postfix uses a secure default configuration if TLS is not configured.

	$ postconf -d | grep use_tls
	lmtp_use_tls = no
	postscreen_use_tls = $smtpd_use_tls
	smtp_use_tls = no
	smtpd_use_tls = no
	tlsproxy_use_tls = $smtpd_use_tls

Changes:
Many fixes, improvements and cleanups. The list is really to long,
please read the original Changelog on your favor postfix mirror.

[1] Noted by sbruno@

- update to 2.12-20141228
- use new AUXLIBS_(CDB|LDAP|LMDB|MYSQL|PCRE|PGSQL) build instructions
- use OPTIONS_SUB
- install posttls-finger
- build dynamic AUXLIBS (shared=yes and dynamicmaps=yes)
- set META_DIRECTORY to DAEMONDIR (this may change in future to ETCDIR)

Parts from HISTORY (heavily shortened)

20141126
	Cleanup: report nullmx DNS records as "domain does not
	accept mail", instead of "invalid DNS response".  The Postfix
	SMTP client already bounced mail for such domains, and the
	Postfix SMTP server already rejected such domains with
	reject_unknown_sender/recipient_domain. This introduces a

Finally retire USE_PGSQL

- fix wrong /var/spool/postfix permissions
  (broken by commit 372368 ,372370)

- bump PORTREVISION

- fix OPTIONS_DEFINE lost in previous commit

- update to 2.12-20141106
- add OPTION for Email Address Internationalization
  (EAI, RFC 6531..6533) [1]
- sort OPTIONS_DEFINE
- fix build and install for non root users,
  (sgid and group for sbin/postdrop and sbin/postqueue was lost if build
   as non root and installed with sudo)
- install /var/spool/postfix directories with correct owner/mode
- use $WRKDIR instead of /tmp

Changes:
20141021
       Per IETF TLS WG consensus, the tls_session_ticket_cipher
       default setting was changed from aes-128-cbc to aes-256-cbc.
       Take that, you quantum computer attackers! Viktor Dukhovni.

- update to 2.12-20141020
- use PORTDOCS macro
- remove check for OSVERSION >= 800037
- fix OPENLDAP_VER usage
- always call set-permissions in post-install to set correct spool/postfix/*
permissions
  this is required with pkg to support non interrupted upgrade

Approved by:	sahil (explicit)

Berkeley DB cleanup, remove versions 4.0 ... 4.7.
- Mk/bsd.database.mk rewrite, new default to db5.
- db6 is eligible by default only if installed on the system.
- Bump PORTREVISION of all ports that directly depend on BerkeleyDB or
  where USE_BDB is found in the port's directory
- Patch a few ports such that they will pick up or work with newer
  versions.
- Add UPDATING entry
- Drive-by format fix for pks
- Drop BerkeleyDB option from mail/popular for now, requires more work.
- Exp-run logs linked from the PR below.
- Ports that do not build (IGNORE, BROKEN, etc.) have pro-forma changes
  for new Berkeley DB, but are untested.

NOTE: please read UPDATING and the Wiki page before proceeding!

Announcement:	http://lists.freebsd.org/pipermail/freebsd-ports-announce/2014-August/000090.html
Wiki reference:	https://wiki.freebsd.org/Ports/BerkeleyDBCleanup
PR:		192690
Approved by:	portmgr (implicit, PORTREVISION bump on unstaged ports)

- Move RESETPREFIX to default PLIST_SUB

With hat:	portmgr