diff --git a/postfix.spec b/postfix.spec
index 8a03015..e83add9 100644
--- a/postfix.spec
+++ b/postfix.spec
@@ -1,3 +1,6 @@
+# plugins have unresolvable symbols in compile time
+%undefine _strict_symbol_defs_build
+
 %bcond_without mysql
 %bcond_without pgsql
 %bcond_without sqlite
@@ -41,8 +44,8 @@
 
 Name: postfix
 Summary: Postfix Mail Transport Agent
-Version: 3.2.4
-Release: 3%{?dist}
+Version: 3.2.5
+Release: 1%{?dist}
 Epoch: 2
 Group: System Environment/Daemons
 URL: http://www.postfix.org
@@ -94,7 +97,7 @@ BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
 
 # Determine the different packages required for building postfix
 BuildRequires: libdb-devel, perl-generators, pkgconfig, zlib-devel
-BuildRequires: systemd-units, libicu-devel
+BuildRequires: systemd-units, libicu-devel, libnsl2-devel
 
 %{?with_ldap:BuildRequires: openldap-devel}
 %{?with_sasl:BuildRequires: cyrus-sasl-devel}
@@ -229,8 +232,9 @@ for f in README_FILES/TLS_{LEGACY_,}README TLS_ACKNOWLEDGEMENTS; do
 done
 
 %build
-CCARGS=-fPIC
 unset AUXLIBS AUXLIBS_LDAP AUXLIBS_PCRE AUXLIBS_MYSQL AUXLIBS_PGSQL AUXLIBS_SQLITE AUXLIBS_CDB
+CCARGS="-fPIC -I%{_includedir}/nsl"
+AUXLIBS="-L%{_libdir}/nsl -lnsl"
 
 %ifarch s390 s390x ppc
 CCARGS="${CCARGS} -fsigned-char"
@@ -297,7 +301,7 @@ make -f Makefile.init makefiles shared=yes dynamicmaps=yes \
   OPT="$RPM_OPT_FLAGS -fno-strict-aliasing -Wno-comment" \
   POSTFIX_INSTALL_OPTS=-keep-build-mtime
 
-make %{?_smp_mflags} 
+make %{?_smp_mflags}
 
 %install
 rm -rf $RPM_BUILD_ROOT
@@ -734,6 +738,12 @@ rm -rf $RPM_BUILD_ROOT
 %endif
 
 %changelog
+* Mon Jan 29 2018 Jaroslav Škarvada <jskarvad@redhat.com> - 2:3.2.5-1
+- New version
+- Switched to libnsl2, because nsl is no longer provided by glibc
+- Macro workaround not to check symbols during compilation, because
+  plugins have symbols which are unresolvable during compile time
+
 * Thu Nov 30 2017 Pete Walter <pwalter@fedoraproject.org> - 2:3.2.4-3
 - Rebuild for ICU 60.1
 
diff --git a/sources b/sources
index e11d43c..9c62927 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
 SHA512 (pflogsumm-1.1.5.tar.gz) = 994d660692dfea38a1dd9866d15f15035657e85131c1f5a2cd82baa5bd4ad987a00939cb5233f316d2090014c52ae68ef20db0c893f8634969484e0e74678f4d
-SHA512 (postfix-3.2.4.tar.gz) = 6dc583d3b1c98f5c8d6486351bee9f92a98b5379cd0d76d26a382379c112317e7a2a58c3a200477a6d0f831c73395257d1a63170df17ea8a65a4048a7df391f8
+SHA512 (postfix-3.2.5.tar.gz) = ffd07e8664d41a5c40b7f3f7511a4c4cc57310d103395b12f2f7e9499d1f901768d6ebb1d5d1588d6fdb834ad2548a9df6d925ff3d7f74d74764a6f6f550ecb6