Mercurial > dnsbl

annotate ChangeLog @ 473:5209e92b4885

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
opendkim headers changed, pass smtp verify 4xy codes back to sender
author Carl Byington <carl@five-ten-sg.com>
date Sat, 20 Feb 2021 09:46:29 -0800
parents f5b394bec28c
children
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
rev   line source
473
5209e92b4885 opendkim headers changed, pass smtp verify 4xy codes back to sender
Carl Byington <carl@five-ten-sg.com>
parents: 467
diff changeset
1 6.78 2021-02-20
5209e92b4885 opendkim headers changed, pass smtp verify 4xy codes back to sender
Carl Byington <carl@five-ten-sg.com>
parents: 467
diff changeset
2 Opendkim headers have changed on centos 8. Pass smtp
5209e92b4885 opendkim headers changed, pass smtp verify 4xy codes back to sender
Carl Byington <carl@five-ten-sg.com>
parents: 467
diff changeset
3 verify temp fail 4xy codes back to the sending system.
5209e92b4885 opendkim headers changed, pass smtp verify 4xy codes back to sender
Carl Byington <carl@five-ten-sg.com>
parents: 467
diff changeset
4
467
f5b394bec28c allow checking names without A records on uribl lists; improve extraction of fake TLDs from our RPZ zone
Carl Byington <carl@five-ten-sg.com>
parents: 465
diff changeset
5 6.77 2020-12-16
f5b394bec28c allow checking names without A records on uribl lists; improve extraction of fake TLDs from our RPZ zone
Carl Byington <carl@five-ten-sg.com>
parents: 465
diff changeset
6 allow checking names without A records on uribl lists.
f5b394bec28c allow checking names without A records on uribl lists; improve extraction of fake TLDs from our RPZ zone
Carl Byington <carl@five-ten-sg.com>
parents: 465
diff changeset
7 improve extraction of fake TLDs from our RPZ zone so
f5b394bec28c allow checking names without A records on uribl lists; improve extraction of fake TLDs from our RPZ zone
Carl Byington <carl@five-ten-sg.com>
parents: 465
diff changeset
8 that names under those TLDs may be added to uribl lists
f5b394bec28c allow checking names without A records on uribl lists; improve extraction of fake TLDs from our RPZ zone
Carl Byington <carl@five-ten-sg.com>
parents: 465
diff changeset
9 via RPZ.
f5b394bec28c allow checking names without A records on uribl lists; improve extraction of fake TLDs from our RPZ zone
Carl Byington <carl@five-ten-sg.com>
parents: 465
diff changeset
10
465
79e944269c0b SA needs original rfc5321 envelope from to do proper spf checking. Remove some debug code.
Carl Byington <carl@five-ten-sg.com>
parents: 464
diff changeset
11 6.76 2019-04-25
79e944269c0b SA needs original rfc5321 envelope from to do proper spf checking. Remove some debug code.
Carl Byington <carl@five-ten-sg.com>
parents: 464
diff changeset
12 SA needs original rfc5321 envelope from to do proper spf
79e944269c0b SA needs original rfc5321 envelope from to do proper spf checking. Remove some debug code.
Carl Byington <carl@five-ten-sg.com>
parents: 464
diff changeset
13 checking. Remove some debug code.
79e944269c0b SA needs original rfc5321 envelope from to do proper spf checking. Remove some debug code.
Carl Byington <carl@five-ten-sg.com>
parents: 464
diff changeset
14
464
428de28b34b7 cleanup code for adding extra spf data in dkim_from
Carl Byington <carl@five-ten-sg.com>
parents: 462
diff changeset
15 6.75 2019-03-10
462
f3f1ece619ba change dkim_from syntax to allow "signer1,signer2;spf data"
Carl Byington <carl@five-ten-sg.com>
parents: 460
diff changeset
16 change dkim_from syntax to allow "signer1,signer2;spf data"
f3f1ece619ba change dkim_from syntax to allow "signer1,signer2;spf data"
Carl Byington <carl@five-ten-sg.com>
parents: 460
diff changeset
17
460
ad05c61d6372 add debug code for spf check with microsoft /14
Carl Byington <carl@five-ten-sg.com>
parents: 458
diff changeset
18 6.74 2018-12-24
ad05c61d6372 add debug code for spf check with microsoft /14
Carl Byington <carl@five-ten-sg.com>
parents: 458
diff changeset
19 add debug code for spf check with microsoft /14
ad05c61d6372 add debug code for spf check with microsoft /14
Carl Byington <carl@five-ten-sg.com>
parents: 458
diff changeset
20
458
6c1c2bd9fb54 ignore dnswl entries if the sender is <>
Carl Byington <carl@five-ten-sg.com>
parents: 456
diff changeset
21 6.73 2018-09-18
6c1c2bd9fb54 ignore dnswl entries if the sender is <>
Carl Byington <carl@five-ten-sg.com>
parents: 456
diff changeset
22 ignore dnswl entries if the sender is <>
6c1c2bd9fb54 ignore dnswl entries if the sender is <>
Carl Byington <carl@five-ten-sg.com>
parents: 456
diff changeset
23 allow autowhite of recipients with local parts up to 35 characters.
6c1c2bd9fb54 ignore dnswl entries if the sender is <>
Carl Byington <carl@five-ten-sg.com>
parents: 456
diff changeset
24
456
2cf7183a911c add unsigned_black for enforcement of dmarc policy
Carl Byington <carl@five-ten-sg.com>
parents: 453
diff changeset
25 6.72 2018-06-06
451
f2bc221240e8 add unsigned_black for enforcement of dmarc policy
Carl Byington <carl@five-ten-sg.com>
parents: 449
diff changeset
26 add unsigned_black for enforcement of dmarc policy.
f2bc221240e8 add unsigned_black for enforcement of dmarc policy
Carl Byington <carl@five-ten-sg.com>
parents: 449
diff changeset
27
449
d4275f26241c fix spf mx:domain.tld token parsing
Carl Byington <carl@five-ten-sg.com>
parents: 446
diff changeset
28 6.69 2018-04-10
d4275f26241c fix spf mx:domain.tld token parsing
Carl Byington <carl@five-ten-sg.com>
parents: 446
diff changeset
29 fix spf mx:domain.tld token parsing.
d4275f26241c fix spf mx:domain.tld token parsing
Carl Byington <carl@five-ten-sg.com>
parents: 446
diff changeset
30
446
71019a7d2b59 bump version number
Carl Byington <carl@five-ten-sg.com>
parents: 443
diff changeset
31 6.68 2018-02-19
71019a7d2b59 bump version number
Carl Byington <carl@five-ten-sg.com>
parents: 443
diff changeset
32 round rather than truncate spam assassin scores.
71019a7d2b59 bump version number
Carl Byington <carl@five-ten-sg.com>
parents: 443
diff changeset
33 check >= rather than > for spam assassin scores to match
71019a7d2b59 bump version number
Carl Byington <carl@five-ten-sg.com>
parents: 443
diff changeset
34 behavior of dcc bulk scores.
71019a7d2b59 bump version number
Carl Byington <carl@five-ten-sg.com>
parents: 443
diff changeset
35
443
0df77bbb7fc2 always call dcc code so we get log entries
Carl Byington <carl@five-ten-sg.com>
parents: 440
diff changeset
36 6.67 2018-01-05
0df77bbb7fc2 always call dcc code so we get log entries
Carl Byington <carl@five-ten-sg.com>
parents: 440
diff changeset
37 always call dcc code so we get log entries
0df77bbb7fc2 always call dcc code so we get log entries
Carl Byington <carl@five-ten-sg.com>
parents: 440
diff changeset
38
440
f9165d9aa689 more changes for long syslog messages
Carl Byington <carl@five-ten-sg.com>
parents: 438
diff changeset
39 6.66 2017-12-07
f9165d9aa689 more changes for long syslog messages
Carl Byington <carl@five-ten-sg.com>
parents: 438
diff changeset
40 more changes for long syslog messages
f9165d9aa689 more changes for long syslog messages
Carl Byington <carl@five-ten-sg.com>
parents: 438
diff changeset
41
438
1686cb639269 code cleanup
Carl Byington <carl@five-ten-sg.com>
parents: 436
diff changeset
42 6.65 2017-11-03
1686cb639269 code cleanup
Carl Byington <carl@five-ten-sg.com>
parents: 436
diff changeset
43 code cleanup
1686cb639269 code cleanup
Carl Byington <carl@five-ten-sg.com>
parents: 436
diff changeset
44
436
7b072e16bd69 fix syslog for long messages, supress dkim checks for mail from localhost
Carl Byington <carl@five-ten-sg.com>
parents: 432
diff changeset
45 6.64 2017-11-03
7b072e16bd69 fix syslog for long messages, supress dkim checks for mail from localhost
Carl Byington <carl@five-ten-sg.com>
parents: 432
diff changeset
46 fix syslog for long messages
7b072e16bd69 fix syslog for long messages, supress dkim checks for mail from localhost
Carl Byington <carl@five-ten-sg.com>
parents: 432
diff changeset
47 supress dkim checks for mail from localhost
7b072e16bd69 fix syslog for long messages, supress dkim checks for mail from localhost
Carl Byington <carl@five-ten-sg.com>
parents: 432
diff changeset
48
432
4ffa356316d5 allow syslogging of long txt records
Carl Byington <carl@five-ten-sg.com>
parents: 430
diff changeset
49 6.63 2017-10-24
4ffa356316d5 allow syslogging of long txt records
Carl Byington <carl@five-ten-sg.com>
parents: 430
diff changeset
50 allow syslogging of long txt records
4ffa356316d5 allow syslogging of long txt records
Carl Byington <carl@five-ten-sg.com>
parents: 430
diff changeset
51
430
69d33c034a8e include arpa/nameser.h earlier
Carl Byington <carl@five-ten-sg.com>
parents: 428
diff changeset
52 6.62 2017-10-03
69d33c034a8e include arpa/nameser.h earlier
Carl Byington <carl@five-ten-sg.com>
parents: 428
diff changeset
53 include arpa/nameser.h earlier.
69d33c034a8e include arpa/nameser.h earlier
Carl Byington <carl@five-ten-sg.com>
parents: 428
diff changeset
54
428
6f2db3d19a34 allow 4000 byte spf txt records
Carl Byington <carl@five-ten-sg.com>
parents: 425
diff changeset
55 6.61 2017-10-02
6f2db3d19a34 allow 4000 byte spf txt records
Carl Byington <carl@five-ten-sg.com>
parents: 425
diff changeset
56 allow 4000 byte spf txt records.
6f2db3d19a34 allow 4000 byte spf txt records
Carl Byington <carl@five-ten-sg.com>
parents: 425
diff changeset
57
425
1b7a785610f5 hosts-ignore.conf can be used to ignore nameserver names
Carl Byington <carl@five-ten-sg.com>
parents: 423
diff changeset
58 6.60 2017-08-18
1b7a785610f5 hosts-ignore.conf can be used to ignore nameserver names
Carl Byington <carl@five-ten-sg.com>
parents: 423
diff changeset
59 hosts-ignore.conf can be used to ignore nameserver names
1b7a785610f5 hosts-ignore.conf can be used to ignore nameserver names
Carl Byington <carl@five-ten-sg.com>
parents: 423
diff changeset
60
423
c9b7b6dd1206 use both envelope from and header from for spf checks when envelope from is a subdomain of the header from domain
Carl Byington <carl@five-ten-sg.com>
parents: 421
diff changeset
61 6.59 2017-07-26
c9b7b6dd1206 use both envelope from and header from for spf checks when envelope from is a subdomain of the header from domain
Carl Byington <carl@five-ten-sg.com>
parents: 421
diff changeset
62 use both envelope from and header from for spf checks when envelope from
c9b7b6dd1206 use both envelope from and header from for spf checks when envelope from is a subdomain of the header from domain
Carl Byington <carl@five-ten-sg.com>
parents: 421
diff changeset
63 is a subdomain of the header from domain.
c9b7b6dd1206 use both envelope from and header from for spf checks when envelope from is a subdomain of the header from domain
Carl Byington <carl@five-ten-sg.com>
parents: 421
diff changeset
64
421
22027ad2a28f spf code now handles %{d} and %{h} macros; use envelope from value for spf if it is a subdomain of the header from domain
Carl Byington <carl@five-ten-sg.com>
parents: 414
diff changeset
65 6.58 2017-05-19
22027ad2a28f spf code now handles %{d} and %{h} macros; use envelope from value for spf if it is a subdomain of the header from domain
Carl Byington <carl@five-ten-sg.com>
parents: 414
diff changeset
66 spf code now handles %{d} and %{h} macros.
22027ad2a28f spf code now handles %{d} and %{h} macros; use envelope from value for spf if it is a subdomain of the header from domain
Carl Byington <carl@five-ten-sg.com>
parents: 414
diff changeset
67 use envelope from value for spf if it is a subdomain of the header from domain.
22027ad2a28f spf code now handles %{d} and %{h} macros; use envelope from value for spf if it is a subdomain of the header from domain
Carl Byington <carl@five-ten-sg.com>
parents: 414
diff changeset
68
414
d5a1ed33d3ae spf code now handles mx,exists,ptr tags, multiple A records, %{i} macro
Carl Byington <carl@five-ten-sg.com>
parents: 412
diff changeset
69 6.57 2017-04-25
d5a1ed33d3ae spf code now handles mx,exists,ptr tags, multiple A records, %{i} macro
Carl Byington <carl@five-ten-sg.com>
parents: 412
diff changeset
70 spf code now handles mx,exists,ptr tags, multiple A records,
d5a1ed33d3ae spf code now handles mx,exists,ptr tags, multiple A records, %{i} macro
Carl Byington <carl@five-ten-sg.com>
parents: 412
diff changeset
71 %{i} macro
d5a1ed33d3ae spf code now handles mx,exists,ptr tags, multiple A records, %{i} macro
Carl Byington <carl@five-ten-sg.com>
parents: 412
diff changeset
72
412
e63c6b4835ef refactor spf code; allow wildcard *.example.com in dkim signing restrictions
Carl Byington <carl@five-ten-sg.com>
parents: 409
diff changeset
73 6.56 2017-04-19
e63c6b4835ef refactor spf code; allow wildcard *.example.com in dkim signing restrictions
Carl Byington <carl@five-ten-sg.com>
parents: 409
diff changeset
74 refactor spf code; allow wildcard *.example.com in dkim
e63c6b4835ef refactor spf code; allow wildcard *.example.com in dkim signing restrictions
Carl Byington <carl@five-ten-sg.com>
parents: 409
diff changeset
75 signing restrictions
e63c6b4835ef refactor spf code; allow wildcard *.example.com in dkim signing restrictions
Carl Byington <carl@five-ten-sg.com>
parents: 409
diff changeset
76
409
e018ed19a1cc require 3 dots in bare ip addresses
Carl Byington <carl@five-ten-sg.com>
parents: 407
diff changeset
77 6.55 2017-04-16
e018ed19a1cc require 3 dots in bare ip addresses
Carl Byington <carl@five-ten-sg.com>
parents: 407
diff changeset
78 require 3 dots in bare ip addresses.
e018ed19a1cc require 3 dots in bare ip addresses
Carl Byington <carl@five-ten-sg.com>
parents: 407
diff changeset
79
407
29d54e7028f6 document dmarc vs dnsbl dkim/spf; switch to . rather than " " for dkim impossible signer
Carl Byington <carl@five-ten-sg.com>
parents: 405
diff changeset
80 6.54 2017-03-30
29d54e7028f6 document dmarc vs dnsbl dkim/spf; switch to . rather than " " for dkim impossible signer
Carl Byington <carl@five-ten-sg.com>
parents: 405
diff changeset
81 document dmarc vs dnsbl dkim/spf. switch to . rather than
29d54e7028f6 document dmarc vs dnsbl dkim/spf; switch to . rather than " " for dkim impossible signer
Carl Byington <carl@five-ten-sg.com>
parents: 405
diff changeset
82 " " for dkim impossible signer.
29d54e7028f6 document dmarc vs dnsbl dkim/spf; switch to . rather than " " for dkim impossible signer
Carl Byington <carl@five-ten-sg.com>
parents: 405
diff changeset
83
405
8f3a84de3739 handle redirect= elements in spf txt records
Carl Byington <carl@five-ten-sg.com>
parents: 403
diff changeset
84 6.53 2017-03-17
403
e70d9110d9f5 suppress duplicate calls to acceptable_content for messages with multiple recipients using the same filtering context
Carl Byington <carl@five-ten-sg.com>
parents: 400
diff changeset
85 suppress duplicate calls to acceptable_content for
e70d9110d9f5 suppress duplicate calls to acceptable_content for messages with multiple recipients using the same filtering context
Carl Byington <carl@five-ten-sg.com>
parents: 400
diff changeset
86 messages with multiple recipients using the same filtering
405
8f3a84de3739 handle redirect= elements in spf txt records
Carl Byington <carl@five-ten-sg.com>
parents: 403
diff changeset
87 context. handle redirect= elements in spf txt records
403
e70d9110d9f5 suppress duplicate calls to acceptable_content for messages with multiple recipients using the same filtering context
Carl Byington <carl@five-ten-sg.com>
parents: 400
diff changeset
88
400
b48ee4bc431b handle a and a: elements in spf txt records
Carl Byington <carl@five-ten-sg.com>
parents: 395
diff changeset
89 6.52 2017-03-09
b48ee4bc431b handle a and a: elements in spf txt records
Carl Byington <carl@five-ten-sg.com>
parents: 395
diff changeset
90 document dkim/spf processing, handle a and a: elements
395
a8cf6a3da907 document dkim/spf processing
Carl Byington <carl@five-ten-sg.com>
parents: 382
diff changeset
91
382
c378e9d03f37 start parsing spf txt records
Carl Byington <carl@five-ten-sg.com>
parents: 381
diff changeset
92 6.51 2017-03-06
c378e9d03f37 start parsing spf txt records
Carl Byington <carl@five-ten-sg.com>
parents: 381
diff changeset
93 parse spf txt records for required dkim signers
381
879a470c6ac3 fetch spf txt records for required dkim signers
Carl Byington <carl@five-ten-sg.com>
parents: 377
diff changeset
94
879a470c6ac3 fetch spf txt records for required dkim signers
Carl Byington <carl@five-ten-sg.com>
parents: 377
diff changeset
95 6.50 2017-02-22
377
7fd39f029936 reject if dkim signer is listed on surbl
Carl Byington <carl@five-ten-sg.com>
parents: 370
diff changeset
96 reject if dkim signer is listed on surbl
7fd39f029936 reject if dkim signer is listed on surbl
Carl Byington <carl@five-ten-sg.com>
parents: 370
diff changeset
97
381
879a470c6ac3 fetch spf txt records for required dkim signers
Carl Byington <carl@five-ten-sg.com>
parents: 377
diff changeset
98 6.49 2017-02-08
370
5380552644e2 RHEL7 systemd and /var/run on tmpfs
Carl Byington <carl@five-ten-sg.com>
parents: 321
diff changeset
99 RHEL7 systemd and /var/run on tmpfs.
5380552644e2 RHEL7 systemd and /var/run on tmpfs
Carl Byington <carl@five-ten-sg.com>
parents: 321
diff changeset
100
321
e172dc10fe24 add dkim white/black listing
Carl Byington <carl@five-ten-sg.com>
parents: 316
diff changeset
101 6.48 2016-12-17
e172dc10fe24 add dkim white/black listing
Carl Byington <carl@five-ten-sg.com>
parents: 316
diff changeset
102 Add dkim white/black listing
e172dc10fe24 add dkim white/black listing
Carl Byington <carl@five-ten-sg.com>
parents: 316
diff changeset
103
316
f7c5cfb76e86 better smtp verify logging
Carl Byington <carl@five-ten-sg.com>
parents: 312
diff changeset
104 6.47 2016-09-21
f7c5cfb76e86 better smtp verify logging
Carl Byington <carl@five-ten-sg.com>
parents: 312
diff changeset
105 Better smtp verify logging
f7c5cfb76e86 better smtp verify logging
Carl Byington <carl@five-ten-sg.com>
parents: 312
diff changeset
106
312
9c71faaae576 enable smtp verify logging
Carl Byington <carl@five-ten-sg.com>
parents: 311
diff changeset
107 6.46 2016-09-19
311
f5547e7b3a09 enable smtp verify logging
Carl Byington <carl@five-ten-sg.com>
parents: 305
diff changeset
108 Enable smtp verify logging
f5547e7b3a09 enable smtp verify logging
Carl Byington <carl@five-ten-sg.com>
parents: 305
diff changeset
109
305
1f40b1b0ad31 add bitcoin donation address
Carl Byington <carl@five-ten-sg.com>
parents: 301
diff changeset
110 6.45 2015-04-09
1f40b1b0ad31 add bitcoin donation address
Carl Byington <carl@five-ten-sg.com>
parents: 301
diff changeset
111 Add bitcoin donation address
1f40b1b0ad31 add bitcoin donation address
Carl Byington <carl@five-ten-sg.com>
parents: 301
diff changeset
112
301
13905d36ca82 Generic regex now matches against the reverse dns PTR value
Carl Byington <carl@five-ten-sg.com>
parents: 294
diff changeset
113 6.44 2014-10-13
13905d36ca82 Generic regex now matches against the reverse dns PTR value
Carl Byington <carl@five-ten-sg.com>
parents: 294
diff changeset
114 Generic regex now matches against the reverse dns PTR value
13905d36ca82 Generic regex now matches against the reverse dns PTR value
Carl Byington <carl@five-ten-sg.com>
parents: 294
diff changeset
115
294
7fb5911fe3a4 allow broken SRS0+ rather than the correct SRS0= tag
Carl Byington <carl@five-ten-sg.com>
parents: 291
diff changeset
116 6.43 2014-07-18
7fb5911fe3a4 allow broken SRS0+ rather than the correct SRS0= tag
Carl Byington <carl@five-ten-sg.com>
parents: 291
diff changeset
117 Allow broken SRS0+ rather than the correct SRS0= tag.
7fb5911fe3a4 allow broken SRS0+ rather than the correct SRS0= tag
Carl Byington <carl@five-ten-sg.com>
parents: 291
diff changeset
118
291
9f0d9fcb58dd Never add auto-whitelist entries for outgoing mail from localhost
Carl Byington <carl@five-ten-sg.com>
parents: 286
diff changeset
119 6.42 2014-06-28
9f0d9fcb58dd Never add auto-whitelist entries for outgoing mail from localhost
Carl Byington <carl@five-ten-sg.com>
parents: 286
diff changeset
120 Never add auto-whitelist entries for outgoing mail from localhost.
9f0d9fcb58dd Never add auto-whitelist entries for outgoing mail from localhost
Carl Byington <carl@five-ten-sg.com>
parents: 286
diff changeset
121
9f0d9fcb58dd Never add auto-whitelist entries for outgoing mail from localhost
Carl Byington <carl@five-ten-sg.com>
parents: 286
diff changeset
122 6.41 2014-03-21
9f0d9fcb58dd Never add auto-whitelist entries for outgoing mail from localhost
Carl Byington <carl@five-ten-sg.com>
parents: 286
diff changeset
123 Unique ip connection limits only apply to authenticated connections.
9f0d9fcb58dd Never add auto-whitelist entries for outgoing mail from localhost
Carl Byington <carl@five-ten-sg.com>
parents: 286
diff changeset
124
286
9bd5388bf469 Fix possible segfault in mlfi_connect, hostaddr might be null
Carl Byington <carl@five-ten-sg.com>
parents: 284
diff changeset
125 6.40 2014-02-05
9bd5388bf469 Fix possible segfault in mlfi_connect, hostaddr might be null
Carl Byington <carl@five-ten-sg.com>
parents: 284
diff changeset
126 Fix possible segfault in mlfi_connect, hostaddr might be null.
9bd5388bf469 Fix possible segfault in mlfi_connect, hostaddr might be null
Carl Byington <carl@five-ten-sg.com>
parents: 284
diff changeset
127
284
896b9393d3f0 Fix segfault caused by freeing unallocated memory
Carl Byington <carl@five-ten-sg.com>
parents: 282
diff changeset
128 6.39 2013-12-31
896b9393d3f0 Fix segfault caused by freeing unallocated memory
Carl Byington <carl@five-ten-sg.com>
parents: 282
diff changeset
129 Fix segfault caused by freeing unallocated memory.
896b9393d3f0 Fix segfault caused by freeing unallocated memory
Carl Byington <carl@five-ten-sg.com>
parents: 282
diff changeset
130
282
e276180647ab Activate check for unique ip connection limits
Carl Byington <carl@five-ten-sg.com>
parents: 279
diff changeset
131 6.38 2013-12-24
e276180647ab Activate check for unique ip connection limits
Carl Byington <carl@five-ten-sg.com>
parents: 279
diff changeset
132 Activate check for unique ip connection limits.
e276180647ab Activate check for unique ip connection limits
Carl Byington <carl@five-ten-sg.com>
parents: 279
diff changeset
133
279
3d894d09c198 add limits on unique ip addresses per hour per authenticated user
Carl Byington <carl@five-ten-sg.com>
parents: 278
diff changeset
134 6.37 2013-12-17
278
368572c57013 add limits on unique ip addresses per hour per authenticated user
Carl Byington <carl@five-ten-sg.com>
parents: 272
diff changeset
135 Add unique ip connection limits per authenticated id or email address.
368572c57013 add limits on unique ip addresses per hour per authenticated user
Carl Byington <carl@five-ten-sg.com>
parents: 272
diff changeset
136
272
a99b6c1f5f67 Code cleanup, increase minimum hostname length for uribl checking
Carl Byington <carl@five-ten-sg.com>
parents: 270
diff changeset
137 6.36 2013-09-09
a99b6c1f5f67 Code cleanup, increase minimum hostname length for uribl checking
Carl Byington <carl@five-ten-sg.com>
parents: 270
diff changeset
138 Code cleanup, increase minimum hostname length for uribl checking.
a99b6c1f5f67 Code cleanup, increase minimum hostname length for uribl checking
Carl Byington <carl@five-ten-sg.com>
parents: 270
diff changeset
139
270
f92f24950bd3 Use mozilla prefix list for tld checking, Enable surbl/uribl/dbl rhs lists
Carl Byington <carl@five-ten-sg.com>
parents: 268
diff changeset
140 6.35 2013-09-09
f92f24950bd3 Use mozilla prefix list for tld checking, Enable surbl/uribl/dbl rhs lists
Carl Byington <carl@five-ten-sg.com>
parents: 268
diff changeset
141 Use mozilla prefix list for tld checking.
f92f24950bd3 Use mozilla prefix list for tld checking, Enable surbl/uribl/dbl rhs lists
Carl Byington <carl@five-ten-sg.com>
parents: 268
diff changeset
142 Enable surbl/uribl/dbl rhs lists.
f92f24950bd3 Use mozilla prefix list for tld checking, Enable surbl/uribl/dbl rhs lists
Carl Byington <carl@five-ten-sg.com>
parents: 268
diff changeset
143
268
f941563c2a95 Add require_rdns checking
Carl Byington <carl@five-ten-sg.com>
parents: 264
diff changeset
144 6.34 2013-05-22
f941563c2a95 Add require_rdns checking
Carl Byington <carl@five-ten-sg.com>
parents: 264
diff changeset
145 Add require_rdns checking.
f941563c2a95 Add require_rdns checking
Carl Byington <carl@five-ten-sg.com>
parents: 264
diff changeset
146
264
56f55547b120 fix unauthenticated rate limit bug for empty mail from; move unauthenticated rate limit checks after spam filtering
Carl Byington <carl@five-ten-sg.com>
parents: 260
diff changeset
147 6.33 2012-07-21
56f55547b120 fix unauthenticated rate limit bug for empty mail from; move unauthenticated rate limit checks after spam filtering
Carl Byington <carl@five-ten-sg.com>
parents: 260
diff changeset
148 Fix unauthenticated rate limit bug for empty mail from.
56f55547b120 fix unauthenticated rate limit bug for empty mail from; move unauthenticated rate limit checks after spam filtering
Carl Byington <carl@five-ten-sg.com>
parents: 260
diff changeset
149 Move unauthenticated rate limit checks after spam filtering.
56f55547b120 fix unauthenticated rate limit bug for empty mail from; move unauthenticated rate limit checks after spam filtering
Carl Byington <carl@five-ten-sg.com>
parents: 260
diff changeset
150
260
7c05043a220e add recipient rate limits by email from address or domain
Carl Byington <carl@five-ten-sg.com>
parents: 257
diff changeset
151 6.32 2012-07-21
7c05043a220e add recipient rate limits by email from address or domain
Carl Byington <carl@five-ten-sg.com>
parents: 257
diff changeset
152 Allow rate limiting for unauthentication connections by mail
7c05043a220e add recipient rate limits by email from address or domain
Carl Byington <carl@five-ten-sg.com>
parents: 257
diff changeset
153 from address or domain.
7c05043a220e add recipient rate limits by email from address or domain
Carl Byington <carl@five-ten-sg.com>
parents: 257
diff changeset
154
257
d11b529ce9c5 Fix uribl lookups on client dns name, need to strip the ip address in brackets
Carl Byington <carl@five-ten-sg.com>
parents: 255
diff changeset
155 6.31 2012-07-01
d11b529ce9c5 Fix uribl lookups on client dns name, need to strip the ip address in brackets
Carl Byington <carl@five-ten-sg.com>
parents: 255
diff changeset
156 Fix uribl lookups on client dns name, need to strip the ip
d11b529ce9c5 Fix uribl lookups on client dns name, need to strip the ip address in brackets
Carl Byington <carl@five-ten-sg.com>
parents: 255
diff changeset
157 address in brackets.
d11b529ce9c5 Fix uribl lookups on client dns name, need to strip the ip address in brackets
Carl Byington <carl@five-ten-sg.com>
parents: 255
diff changeset
158
255
d6d5c50b9278 Allow dnswl_list and dnsbl_list to be empty, to override lists specified in the ancestor contexts. Add daily recipient limits as a multiple of the hourly limits.
Carl Byington <carl@five-ten-sg.com>
parents: 249
diff changeset
159 6.30 2012-04-09
d6d5c50b9278 Allow dnswl_list and dnsbl_list to be empty, to override lists specified in the ancestor contexts. Add daily recipient limits as a multiple of the hourly limits.
Carl Byington <carl@five-ten-sg.com>
parents: 249
diff changeset
160 Allow dnswl_list and dnsbl_list to be empty, to override lists
d6d5c50b9278 Allow dnswl_list and dnsbl_list to be empty, to override lists specified in the ancestor contexts. Add daily recipient limits as a multiple of the hourly limits.
Carl Byington <carl@five-ten-sg.com>
parents: 249
diff changeset
161 specified in the ancestor contexts.
d6d5c50b9278 Allow dnswl_list and dnsbl_list to be empty, to override lists specified in the ancestor contexts. Add daily recipient limits as a multiple of the hourly limits.
Carl Byington <carl@five-ten-sg.com>
parents: 249
diff changeset
162 Add daily recipient limits as a multiple of the hourly limits.
d6d5c50b9278 Allow dnswl_list and dnsbl_list to be empty, to override lists specified in the ancestor contexts. Add daily recipient limits as a multiple of the hourly limits.
Carl Byington <carl@five-ten-sg.com>
parents: 249
diff changeset
163
249
15bf4f68a0b2 Add dnswl support
Carl Byington <carl@five-ten-sg.com>
parents: 246
diff changeset
164 6.29 2012-04-08
15bf4f68a0b2 Add dnswl support
Carl Byington <carl@five-ten-sg.com>
parents: 246
diff changeset
165 Add dnswl support.
15bf4f68a0b2 Add dnswl support
Carl Byington <carl@five-ten-sg.com>
parents: 246
diff changeset
166
246
8b0f16abee53 Add prvs decoding to envelope addresses
Carl Byington <carl@five-ten-sg.com>
parents: 244
diff changeset
167 6.28 2011-09-30
8b0f16abee53 Add prvs decoding to envelope addresses
Carl Byington <carl@five-ten-sg.com>
parents: 244
diff changeset
168 Add prvs decoding to envelope addresses.
8b0f16abee53 Add prvs decoding to envelope addresses
Carl Byington <carl@five-ten-sg.com>
parents: 244
diff changeset
169
244
ef97c7cd4a6e const correctness fixes from new gcc, libresolv.a moved to glibc-static on newer distributions
Carl Byington <carl@five-ten-sg.com>
parents: 242
diff changeset
170 6.27 2011-08-15
ef97c7cd4a6e const correctness fixes from new gcc, libresolv.a moved to glibc-static on newer distributions
Carl Byington <carl@five-ten-sg.com>
parents: 242
diff changeset
171 const correctness fixes from new gcc
ef97c7cd4a6e const correctness fixes from new gcc, libresolv.a moved to glibc-static on newer distributions
Carl Byington <carl@five-ten-sg.com>
parents: 242
diff changeset
172
ef97c7cd4a6e const correctness fixes from new gcc, libresolv.a moved to glibc-static on newer distributions
Carl Byington <carl@five-ten-sg.com>
parents: 242
diff changeset
173 6.26 2010-11-19
242
d8ee4c97b9ab 64 bit fixes for libresolv.a
Carl Byington <carl@five-ten-sg.com>
parents: 236
diff changeset
174 64 bit fixes for libresolv.a
d8ee4c97b9ab 64 bit fixes for libresolv.a
Carl Byington <carl@five-ten-sg.com>
parents: 236
diff changeset
175
236
c0d2e99c0a1d Add surbl checks on the smtp helo value, client reverse dns name, and mail from domain name
Carl Byington <carl@five-ten-sg.com>
parents: 235
diff changeset
176 6.25 2009-09-29
c0d2e99c0a1d Add surbl checks on the smtp helo value, client reverse dns name, and mail from domain name
Carl Byington <carl@five-ten-sg.com>
parents: 235
diff changeset
177 Add surbl checks on the smtp helo value, client reverse dns name,
c0d2e99c0a1d Add surbl checks on the smtp helo value, client reverse dns name, and mail from domain name
Carl Byington <carl@five-ten-sg.com>
parents: 235
diff changeset
178 and mail from domain name.
c0d2e99c0a1d Add surbl checks on the smtp helo value, client reverse dns name, and mail from domain name
Carl Byington <carl@five-ten-sg.com>
parents: 235
diff changeset
179
235
e6c66640f6f9 Add SRS decoding to envelope addresses
Carl Byington <carl@five-ten-sg.com>
parents: 233
diff changeset
180 6.24 2009-06-09
e6c66640f6f9 Add SRS decoding to envelope addresses
Carl Byington <carl@five-ten-sg.com>
parents: 233
diff changeset
181 Add SRS decoding to envelope addresses.
e6c66640f6f9 Add SRS decoding to envelope addresses
Carl Byington <carl@five-ten-sg.com>
parents: 233
diff changeset
182
233
5c3e9bf45bb5 Add whitelisting by regex expression filtering.
Carl Byington <carl@five-ten-sg.com>
parents: 231
diff changeset
183 6.23 2009-05-25
5c3e9bf45bb5 Add whitelisting by regex expression filtering.
Carl Byington <carl@five-ten-sg.com>
parents: 231
diff changeset
184 Add whitelisting by regex expression filtering.
5c3e9bf45bb5 Add whitelisting by regex expression filtering.
Carl Byington <carl@five-ten-sg.com>
parents: 231
diff changeset
185 Add queueid to whitelist extension log message.
5c3e9bf45bb5 Add whitelisting by regex expression filtering.
Carl Byington <carl@five-ten-sg.com>
parents: 231
diff changeset
186
230
ad38575e98ca Prevent auto whitelisting due to outgoing multipart/report delivery notifications.
Carl Byington <carl@five-ten-sg.com>
parents: 227
diff changeset
187 6.22 2009-05-08
ad38575e98ca Prevent auto whitelisting due to outgoing multipart/report delivery notifications.
Carl Byington <carl@five-ten-sg.com>
parents: 227
diff changeset
188 Prevent auto whitelisting due to outgoing multipart/report
ad38575e98ca Prevent auto whitelisting due to outgoing multipart/report delivery notifications.
Carl Byington <carl@five-ten-sg.com>
parents: 227
diff changeset
189 delivery notifications.
231
4d6bd04d93fa Fix memory leak in suppressed auto whitelisting.
Carl Byington <carl@five-ten-sg.com>
parents: 230
diff changeset
190 Fix memory leak in suppressed auto whitelisting.
230
ad38575e98ca Prevent auto whitelisting due to outgoing multipart/report delivery notifications.
Carl Byington <carl@five-ten-sg.com>
parents: 227
diff changeset
191
227
3fee608becbc Fixes to compile on old systems without memrchr or string::clear().
Carl Byington <carl@five-ten-sg.com>
parents: 216
diff changeset
192 6.21 2009-01-03
3fee608becbc Fixes to compile on old systems without memrchr or string::clear().
Carl Byington <carl@five-ten-sg.com>
parents: 216
diff changeset
193 Fixes to compile on old systems without memrchr or string::clear().
3fee608becbc Fixes to compile on old systems without memrchr or string::clear().
Carl Byington <carl@five-ten-sg.com>
parents: 216
diff changeset
194 Fix bug in spamassassin interface trying to clear a string with
3fee608becbc Fixes to compile on old systems without memrchr or string::clear().
Carl Byington <carl@five-ten-sg.com>
parents: 216
diff changeset
195 string::empty().
3fee608becbc Fixes to compile on old systems without memrchr or string::clear().
Carl Byington <carl@five-ten-sg.com>
parents: 216
diff changeset
196
216
784030ac71f1 Never whitelist self addressed mail. Changes for Fedora 10 and const correctness.
Carl Byington <carl@five-ten-sg.com>
parents: 214
diff changeset
197 6.20 2008-12-27
784030ac71f1 Never whitelist self addressed mail. Changes for Fedora 10 and const correctness.
Carl Byington <carl@five-ten-sg.com>
parents: 214
diff changeset
198 Never whitelist self addressed mail. Spammers are once again
784030ac71f1 Never whitelist self addressed mail. Changes for Fedora 10 and const correctness.
Carl Byington <carl@five-ten-sg.com>
parents: 214
diff changeset
199 sending mail from A to A trying to get around filters. Changes
784030ac71f1 Never whitelist self addressed mail. Changes for Fedora 10 and const correctness.
Carl Byington <carl@five-ten-sg.com>
parents: 214
diff changeset
200 for Fedora 10 and const correctness.
784030ac71f1 Never whitelist self addressed mail. Changes for Fedora 10 and const correctness.
Carl Byington <carl@five-ten-sg.com>
parents: 214
diff changeset
201
214
82886d4dd71f Fixes to compile on Fedora 9 and for const correctness.
Carl Byington <carl@five-ten-sg.com>
parents: 211
diff changeset
202 6.19 2008-06-10
82886d4dd71f Fixes to compile on Fedora 9 and for const correctness.
Carl Byington <carl@five-ten-sg.com>
parents: 211
diff changeset
203 Fixes to compile on Fedora 9 and for const correctness.
82886d4dd71f Fixes to compile on Fedora 9 and for const correctness.
Carl Byington <carl@five-ten-sg.com>
parents: 211
diff changeset
204
211
4db1457cd11a Extend auto-whitelisting when receiving mail even if the auto whitelist is specified in a parent context.
Carl Byington <carl@five-ten-sg.com>
parents: 203
diff changeset
205 6.18 2008-03-22
4db1457cd11a Extend auto-whitelisting when receiving mail even if the auto whitelist is specified in a parent context.
Carl Byington <carl@five-ten-sg.com>
parents: 203
diff changeset
206 Extend auto-whitelisting when receiving mail even if the auto
4db1457cd11a Extend auto-whitelisting when receiving mail even if the auto whitelist is specified in a parent context.
Carl Byington <carl@five-ten-sg.com>
parents: 203
diff changeset
207 whitelist is specified in a parent context. Fixes for Solaris from sm-archive.
4db1457cd11a Extend auto-whitelisting when receiving mail even if the auto whitelist is specified in a parent context.
Carl Byington <carl@five-ten-sg.com>
parents: 203
diff changeset
208
203
92a5c866bdfa Verify from/to pairs even if they might be explicitly whitelisted.
Carl Byington <carl@five-ten-sg.com>
parents: 201
diff changeset
209 6.17 2008-03-04
92a5c866bdfa Verify from/to pairs even if they might be explicitly whitelisted.
Carl Byington <carl@five-ten-sg.com>
parents: 201
diff changeset
210 Verify from/to pairs even if they might be explicitly whitelisted.
92a5c866bdfa Verify from/to pairs even if they might be explicitly whitelisted.
Carl Byington <carl@five-ten-sg.com>
parents: 201
diff changeset
211 Document DCC greylisting and bulk detection usage. Fix DCC bulk
92a5c866bdfa Verify from/to pairs even if they might be explicitly whitelisted.
Carl Byington <carl@five-ten-sg.com>
parents: 201
diff changeset
212 thresholds of many. Update spec file for fedora packaging.
92a5c866bdfa Verify from/to pairs even if they might be explicitly whitelisted.
Carl Byington <carl@five-ten-sg.com>
parents: 201
diff changeset
213
201
752d4315675c add reference to mercurial repository in the documentation
Carl Byington <carl@five-ten-sg.com>
parents: 195
diff changeset
214 6.16 2008-02-02
752d4315675c add reference to mercurial repository in the documentation
Carl Byington <carl@five-ten-sg.com>
parents: 195
diff changeset
215 Switch to Mercurial source control.
98
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
216
195
797299e9fffc fix null dereference if missing _ macro
carl
parents: 192
diff changeset
217 6.15 2007-12-07
797299e9fffc fix null dereference if missing _ macro
carl
parents: 192
diff changeset
218 Fix null pointer dereference if macro _ not passed to this milter.
797299e9fffc fix null dereference if missing _ macro
carl
parents: 192
diff changeset
219 Default sendmail config passes that in the connect call.
797299e9fffc fix null dereference if missing _ macro
carl
parents: 192
diff changeset
220
192
8f4a9a37d4d9 delay autowhitelisting to avoid out of office reply bots
carl
parents: 190
diff changeset
221 6.14 2007-11-11
8f4a9a37d4d9 delay autowhitelisting to avoid out of office reply bots
carl
parents: 190
diff changeset
222 Delay auto whitelisting until we see the headers, to prevent
8f4a9a37d4d9 delay autowhitelisting to avoid out of office reply bots
carl
parents: 190
diff changeset
223 auto whitelisting due to bulk out of office reply bots.
8f4a9a37d4d9 delay autowhitelisting to avoid out of office reply bots
carl
parents: 190
diff changeset
224
187
f0eda59e8afd fix null pointer dereference from missing HELO command
carl
parents: 185
diff changeset
225 6.13 2007-11-10
f0eda59e8afd fix null pointer dereference from missing HELO command
carl
parents: 185
diff changeset
226 HELO command is optional, and if missing caused a null pointer
190
004b855c6c1f fix null pointer dereference from missing HELO command
carl
parents: 189
diff changeset
227 dereference. Use smfi_progress in libmilter if it is available.
187
f0eda59e8afd fix null pointer dereference from missing HELO command
carl
parents: 185
diff changeset
228
185
505283ab296c smtp rejections take precendence over greylisting
carl
parents: 184
diff changeset
229 6.12 2007-10-13
505283ab296c smtp rejections take precendence over greylisting
carl
parents: 184
diff changeset
230 SMTP rejections take precedence over greylisting.
505283ab296c smtp rejections take precendence over greylisting
carl
parents: 184
diff changeset
231
184
0e15a805d295 embedded dcc filtering
carl
parents: 179
diff changeset
232 6.11 2007-10-07
178
d6531c702be3 embedded dcc filtering
carl
parents: 177
diff changeset
233 Add DCC filtering via dccifd. Drop to 60 seconds the time we will
d6531c702be3 embedded dcc filtering
carl
parents: 177
diff changeset
234 keep idle smtp verify sockets around. This needs to be about half
d6531c702be3 embedded dcc filtering
carl
parents: 177
diff changeset
235 the value of confTO_COMMAND configured on the verify targets.
d6531c702be3 embedded dcc filtering
carl
parents: 177
diff changeset
236 Fix potential race condition or buffer overflow caused by static
d6531c702be3 embedded dcc filtering
carl
parents: 177
diff changeset
237 buffer referenced by multiple threads.
177
a4d313c2460b start embedded dcc filtering
carl
parents: 176
diff changeset
238
174
da0c41b9f672 don't whitelist addresses with embedded spaces
carl
parents: 173
diff changeset
239 6.10 2007-09-23
da0c41b9f672 don't whitelist addresses with embedded spaces
carl
parents: 173
diff changeset
240 Don't whitelist addresses with embedded blanks, or the empty
176
4ec928b24bab allow manual whitelisting with stamp 1 to remove a whitelist entry
carl
parents: 174
diff changeset
241 path. Allow manual removal of auto whitelist entries.
174
da0c41b9f672 don't whitelist addresses with embedded spaces
carl
parents: 173
diff changeset
242
173
83fe0be032c1 fix leak, update timestamps when receiving auto-whitelisted sender
carl
parents: 172
diff changeset
243 6.09 2007-09-06
83fe0be032c1 fix leak, update timestamps when receiving auto-whitelisted sender
carl
parents: 172
diff changeset
244 Fix memory leak in auto-whitelisting code. Update auto-whitelist
83fe0be032c1 fix leak, update timestamps when receiving auto-whitelisted sender
carl
parents: 172
diff changeset
245 timestamps when receiving mail from auto-whitelisted senders.
83fe0be032c1 fix leak, update timestamps when receiving auto-whitelisted sender
carl
parents: 172
diff changeset
246
172
d3189495ec68 don't do generic rdns filtering on whitelisted recipients
carl
parents: 169
diff changeset
247 6.08 2007-08-30
d3189495ec68 don't do generic rdns filtering on whitelisted recipients
carl
parents: 169
diff changeset
248 Don't do generic reverse dns filtering on authenticated connections.
d3189495ec68 don't do generic rdns filtering on whitelisted recipients
carl
parents: 169
diff changeset
249
168
6bac960af6b4 add generic reverse dns filtering regex
carl
parents: 167
diff changeset
250 6.07 2007-08-30
6bac960af6b4 add generic reverse dns filtering regex
carl
parents: 167
diff changeset
251 Add generic reverse dns filtering with regular expression.
169
44021d570958 fix pre/post scripts in rpm spec file
carl
parents: 168
diff changeset
252 Fix pre/post scripts in the rpm spec file.
168
6bac960af6b4 add generic reverse dns filtering regex
carl
parents: 167
diff changeset
253
6bac960af6b4 add generic reverse dns filtering regex
carl
parents: 167
diff changeset
254 6.06 2007-08-27
167
9b129ed78d7d actually use spamassassin result, allow build without spam assassin, only call it if some recipient needs it.
carl
parents: 165
diff changeset
255 Fix bug that effectively disabled spamassassin filtering. Improve
9b129ed78d7d actually use spamassassin result, allow build without spam assassin, only call it if some recipient needs it.
carl
parents: 165
diff changeset
256 spamassassin filtering documentation. Generate warning if the
9b129ed78d7d actually use spamassassin result, allow build without spam assassin, only call it if some recipient needs it.
carl
parents: 165
diff changeset
257 config file specifies spam assassin filtering, but spamc is not
9b129ed78d7d actually use spamassassin result, allow build without spam assassin, only call it if some recipient needs it.
carl
parents: 165
diff changeset
258 found by autoconf.
9b129ed78d7d actually use spamassassin result, allow build without spam assassin, only call it if some recipient needs it.
carl
parents: 165
diff changeset
259
168
6bac960af6b4 add generic reverse dns filtering regex
carl
parents: 167
diff changeset
260 6.05 2007-08-26
165
bf828f785407 fix unitialized variable
carl
parents: 162
diff changeset
261 Fix unitialized variable in my spamassassin code.
bf828f785407 fix unitialized variable
carl
parents: 162
diff changeset
262
168
6bac960af6b4 add generic reverse dns filtering regex
carl
parents: 167
diff changeset
263 6.04 2007-08-26
165
bf828f785407 fix unitialized variable
carl
parents: 162
diff changeset
264 Add spamassassin integration via spamc, code from spamass-milter.
bf828f785407 fix unitialized variable
carl
parents: 162
diff changeset
265
162
c4bce911c276 don't add auto whitelist for A to A
carl
parents: 160
diff changeset
266 6.03 2007-07-14
c4bce911c276 don't add auto whitelist for A to A
carl
parents: 160
diff changeset
267 Don't add auto whitelist entries for our own domains.
c4bce911c276 don't add auto whitelist for A to A
carl
parents: 160
diff changeset
268
160
b3ed72ee6564 allow manual updates to auto whitelist files
carl
parents: 152
diff changeset
269 6.02 2007-07-10
b3ed72ee6564 allow manual updates to auto whitelist files
carl
parents: 152
diff changeset
270 Allow manual updates to the auto whitelisting files, mainly for
b3ed72ee6564 allow manual updates to auto whitelist files
carl
parents: 152
diff changeset
271 scp or rsync synchronization between primary and backup mx
b3ed72ee6564 allow manual updates to auto whitelist files
carl
parents: 152
diff changeset
272 systems.
b3ed72ee6564 allow manual updates to auto whitelist files
carl
parents: 152
diff changeset
273
152
c7fc218686f5 gpl3, block mail to recipients that cannot reply
carl
parents: 151
diff changeset
274 6.01 2007-07-07
c7fc218686f5 gpl3, block mail to recipients that cannot reply
carl
parents: 151
diff changeset
275 GPL3. Block mail to recipients that cannot reply. Start auto
c7fc218686f5 gpl3, block mail to recipients that cannot reply
carl
parents: 151
diff changeset
276 whitelisting.
c7fc218686f5 gpl3, block mail to recipients that cannot reply
carl
parents: 151
diff changeset
277
c7fc218686f5 gpl3, block mail to recipients that cannot reply
carl
parents: 151
diff changeset
278 5.30 2007-06-09
c7fc218686f5 gpl3, block mail to recipients that cannot reply
carl
parents: 151
diff changeset
279 Selinux fix - redirect stdout for useradd to make selinux happy.
c7fc218686f5 gpl3, block mail to recipients that cannot reply
carl
parents: 151
diff changeset
280
151
0e8ec3c483ce limit dns resolver timeouts and retry interval
carl
parents: 150
diff changeset
281 5.29 2007-03-27
150
a23ef169d322 limit dns resolver timeouts and retry interval
carl
parents: 149
diff changeset
282 Limit dns resolver to two retries five seconds apart.
a23ef169d322 limit dns resolver timeouts and retry interval
carl
parents: 149
diff changeset
283
149
9581f6e62574 switch to second context wins in all cases
carl
parents: 148
diff changeset
284 5.28 2007-02-19
9581f6e62574 switch to second context wins in all cases
carl
parents: 148
diff changeset
285 Change the conflict resolution algorithm to "second one wins" if we
9581f6e62574 switch to second context wins in all cases
carl
parents: 148
diff changeset
286 have two contexts that both define env_to user@. Update ICANN tld
9581f6e62574 switch to second context wins in all cases
carl
parents: 148
diff changeset
287 list.
9581f6e62574 switch to second context wins in all cases
carl
parents: 148
diff changeset
288
148
9330b8d6a56b add documentation fixes, allow env_from target of inherit
carl
parents: 147
diff changeset
289 5.27 2007-01-30
9330b8d6a56b add documentation fixes, allow env_from target of inherit
carl
parents: 147
diff changeset
290 Allow 'inherit' as an env_from target. Documentation cleanup
9330b8d6a56b add documentation fixes, allow env_from target of inherit
carl
parents: 147
diff changeset
291 from G.W. Haywood.
9330b8d6a56b add documentation fixes, allow env_from target of inherit
carl
parents: 147
diff changeset
292
147
812c80305f26 fix 5.23 bug and add fsa debug logging
carl
parents: 145
diff changeset
293 5.26 2006-12-04
812c80305f26 fix 5.23 bug and add fsa debug logging
carl
parents: 145
diff changeset
294 Fix bug in content filtering introduced in 5.23 that prevented
812c80305f26 fix 5.23 bug and add fsa debug logging
carl
parents: 145
diff changeset
295 seeing any host names in the body.
812c80305f26 fix 5.23 bug and add fsa debug logging
carl
parents: 145
diff changeset
296
145
9b9bab1d3c21 dump effective dnsbl_list with -c switch
carl
parents: 144
diff changeset
297 5.25 2006-10-15
9b9bab1d3c21 dump effective dnsbl_list with -c switch
carl
parents: 144
diff changeset
298 DNSBL lists are inherited, so dump the effective list with the
9b9bab1d3c21 dump effective dnsbl_list with -c switch
carl
parents: 144
diff changeset
299 -c switch.
9b9bab1d3c21 dump effective dnsbl_list with -c switch
carl
parents: 144
diff changeset
300
144
31ff00ea6bfb allow parent/child to share a fully qualified env_to address
carl
parents: 143
diff changeset
301 5.24 2006-10-15
31ff00ea6bfb allow parent/child to share a fully qualified env_to address
carl
parents: 143
diff changeset
302 Allow child and parent context to specify the same fully qualified
31ff00ea6bfb allow parent/child to share a fully qualified env_to address
carl
parents: 143
diff changeset
303 env_to address. Only dump the rate limit for the default context
31ff00ea6bfb allow parent/child to share a fully qualified env_to address
carl
parents: 143
diff changeset
304 with -c switch.
31ff00ea6bfb allow parent/child to share a fully qualified env_to address
carl
parents: 143
diff changeset
305
143
ecb40aa3eaa5 require two periods for ip addresses
carl
parents: 140
diff changeset
306 5.23 2006-10-10
ecb40aa3eaa5 require two periods for ip addresses
carl
parents: 140
diff changeset
307 Require two periods in ip addresses.
ecb40aa3eaa5 require two periods for ip addresses
carl
parents: 140
diff changeset
308
140
4028de9b46dd cleanup smtp rate limit code
carl
parents: 136
diff changeset
309 5.22 2006-09-27
4028de9b46dd cleanup smtp rate limit code
carl
parents: 136
diff changeset
310 Change syntax for default rate limit. Improve hourly reset of
4028de9b46dd cleanup smtp rate limit code
carl
parents: 136
diff changeset
311 limits. Warning for rate limits in non default contexts to allow
4028de9b46dd cleanup smtp rate limit code
carl
parents: 136
diff changeset
312 nesting of client configurations.
4028de9b46dd cleanup smtp rate limit code
carl
parents: 136
diff changeset
313
136
f4746d8a12a3 add smtp auth rate limits
carl
parents: 134
diff changeset
314 5.21 2006-09-26
f4746d8a12a3 add smtp auth rate limits
carl
parents: 134
diff changeset
315 Add SMTP AUTH recipient rate limits, to help throttle infected
f4746d8a12a3 add smtp auth rate limits
carl
parents: 134
diff changeset
316 client machines and accounts with weak cracked passwords.
f4746d8a12a3 add smtp auth rate limits
carl
parents: 134
diff changeset
317
134
f9917ce924a3 all dns lookups fully qualified, my_read() bug fix
carl
parents: 133
diff changeset
318 5.20 2006-08-02
f9917ce924a3 all dns lookups fully qualified, my_read() bug fix
carl
parents: 133
diff changeset
319 Fully qualify all dns lookups. Fix my_read() bug. Try to convert
f9917ce924a3 all dns lookups fully qualified, my_read() bug fix
carl
parents: 133
diff changeset
320 names that might be ip addresses via inet_aton before doing dns
f9917ce924a3 all dns lookups fully qualified, my_read() bug fix
carl
parents: 133
diff changeset
321 lookups.
f9917ce924a3 all dns lookups fully qualified, my_read() bug fix
carl
parents: 133
diff changeset
322
131
df355d117199 uribl lookups fully qualified; allow two component host names
carl
parents: 128
diff changeset
323 5.19 2006-08-01
df355d117199 uribl lookups fully qualified; allow two component host names
carl
parents: 128
diff changeset
324 Bug fix - add trailing dot to uribl dns lookups to make them fully
df355d117199 uribl lookups fully qualified; allow two component host names
carl
parents: 128
diff changeset
325 qualified. Check host names with only two components, since
df355d117199 uribl lookups fully qualified; allow two component host names
carl
parents: 128
diff changeset
326 spammers are now using bare http://domain.tld references.
133
b8ce1b31237d uribl lookups fully qualified; allow two component host names
carl
parents: 131
diff changeset
327 Spec file now creates an rpm that properly creates the dnsbl user.
131
df355d117199 uribl lookups fully qualified; allow two component host names
carl
parents: 128
diff changeset
328
128
9ab51896447f don't do uribl lookups on rfc1918 address space
carl
parents: 127
diff changeset
329 5.18 2006-04-27
127
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 126
diff changeset
330 Bug fix - newer sendmail versions don't guarantee envelope addresses
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 126
diff changeset
331 enclosed in <> wrapper.
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 126
diff changeset
332
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 126
diff changeset
333 Document backscatter prevention configuration for systems that are
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 126
diff changeset
334 used to mainly spam filter and then forward to mail to the internal
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 126
diff changeset
335 server.
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 126
diff changeset
336
128
9ab51896447f don't do uribl lookups on rfc1918 address space
carl
parents: 127
diff changeset
337 Never ask uribl blacklists about rfc1918 address space.
9ab51896447f don't do uribl lookups on rfc1918 address space
carl
parents: 127
diff changeset
338
126
05ae49d37896 don't do dnsbl lookups on rfc1918 address space
carl
parents: 125
diff changeset
339 5.17 2006-03-25
127
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 126
diff changeset
340 Never ask dns blacklists about rfc1918 address space.
126
05ae49d37896 don't do dnsbl lookups on rfc1918 address space
carl
parents: 125
diff changeset
341
125
8b1562482b29 put hostname in smtp message for uribl style lookups
carl
parents: 123
diff changeset
342 5.16 2006-03-16
127
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 126
diff changeset
343 Bug fix - the smtp error message for uribl filtering needs to
125
8b1562482b29 put hostname in smtp message for uribl style lookups
carl
parents: 123
diff changeset
344 reference the host name, not the ip address.
8b1562482b29 put hostname in smtp message for uribl style lookups
carl
parents: 123
diff changeset
345
123
ecd97e7eb1f0 properly return error code with reject reason
carl
parents: 122
diff changeset
346 5.15 2006-03-15
127
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 126
diff changeset
347 Bug fix - we failed to properly set the return code to indicate the
123
ecd97e7eb1f0 properly return error code with reject reason
carl
parents: 122
diff changeset
348 reason when rejecting mail for content filtering.
ecd97e7eb1f0 properly return error code with reject reason
carl
parents: 122
diff changeset
349
122
e8971c595845 fix typo in multi.surbl.org name
carl
parents: 121
diff changeset
350 5.14 2006-03-13
127
2b1a4701e856 sendmail no longer guarantees <> wrapper on envelopes
carl
parents: 126
diff changeset
351 Fix a typo in the default config file and documentation for using
122
e8971c595845 fix typo in multi.surbl.org name
carl
parents: 121
diff changeset
352 multi.surbl.org
e8971c595845 fix typo in multi.surbl.org name
carl
parents: 121
diff changeset
353
117
aa07452e641b uribl patch from Jeff Evans <jeffe@tricab.com>
carl
parents: 116
diff changeset
354 5.13 2006-03-12
aa07452e641b uribl patch from Jeff Evans <jeffe@tricab.com>
carl
parents: 116
diff changeset
355 patch from Jeff Evans <jeffe@tricab.com>
121
e2506138561b uribl patch from Jeff Evans <jeffe@tricab.com>
carl
parents: 117
diff changeset
356 add SURBL/URIBL lookups, remove trailing dots from hostnames,
e2506138561b uribl patch from Jeff Evans <jeffe@tricab.com>
carl
parents: 117
diff changeset
357 allow ip address literals as hostnames.
e2506138561b uribl patch from Jeff Evans <jeffe@tricab.com>
carl
parents: 117
diff changeset
358 add configuration for surbl/uribl list and reject message
e2506138561b uribl patch from Jeff Evans <jeffe@tricab.com>
carl
parents: 117
diff changeset
359
115
07e5d4721213 use larger resolver buffer
carl
parents: 113
diff changeset
360 5.12 2006-01-08
07e5d4721213 use larger resolver buffer
carl
parents: 113
diff changeset
361 Use larger resolver buffer to accomodate spammers with many name
07e5d4721213 use larger resolver buffer
carl
parents: 113
diff changeset
362 servers. A current example is life-all.com which needs to retry in
07e5d4721213 use larger resolver buffer
carl
parents: 113
diff changeset
363 tcp mode to fetch the 1444 byte response.
07e5d4721213 use larger resolver buffer
carl
parents: 113
diff changeset
364
116
0094678a16d0 update all systems from tarball, make chkconfig creates dnsbl user if needed
carl
parents: 115
diff changeset
365 'make chkconfig' now creates the dnsbl user if it does not exist.
0094678a16d0 update all systems from tarball, make chkconfig creates dnsbl user if needed
carl
parents: 115
diff changeset
366
113
a893afee4b80 move to autoconf/automake/docbook
carl
parents: 102
diff changeset
367 5.11 2005-12-20
a893afee4b80 move to autoconf/automake/docbook
carl
parents: 102
diff changeset
368 switch to autoconf/automake/docbook
a893afee4b80 move to autoconf/automake/docbook
carl
parents: 102
diff changeset
369
102
d9c64bafbf60 fix compile error on fc3
carl
parents: 101
diff changeset
370 5.10 2005-10-16
d9c64bafbf60 fix compile error on fc3
carl
parents: 101
diff changeset
371 Fix a compile error on Fedora Core 3.
d9c64bafbf60 fix compile error on fc3
carl
parents: 101
diff changeset
372 Discovered by Nigel Horne <njh@bandsman.co.uk>
d9c64bafbf60 fix compile error on fc3
carl
parents: 101
diff changeset
373
101
6ac7ba4a8312 fix <> passed as <<>> to verification hosts
carl
parents: 100
diff changeset
374 5.9 2005-09-26
6ac7ba4a8312 fix <> passed as <<>> to verification hosts
carl
parents: 100
diff changeset
375 Fix a bug with empty return paths passed to the verification code.
6ac7ba4a8312 fix <> passed as <<>> to verification hosts
carl
parents: 100
diff changeset
376 That resulted in 'MAIL FROM:<<>>' being sent to the verification
6ac7ba4a8312 fix <> passed as <<>> to verification hosts
carl
parents: 100
diff changeset
377 mail server.
6ac7ba4a8312 fix <> passed as <<>> to verification hosts
carl
parents: 100
diff changeset
378
100
63e8633abc34 allow empty env_to at global context to remove all restrictions on child contexts
carl
parents: 99
diff changeset
379 5.8 2005-09-25
63e8633abc34 allow empty env_to at global context to remove all restrictions on child contexts
carl
parents: 99
diff changeset
380 Allow empty env_to at global context level to remove restrictions
63e8633abc34 allow empty env_to at global context to remove all restrictions on child contexts
carl
parents: 99
diff changeset
381 on env_to values in child contexts.
63e8633abc34 allow empty env_to at global context to remove all restrictions on child contexts
carl
parents: 99
diff changeset
382
99
f8963ddf7143 failed to return a value from parse_verify()
carl
parents: 98
diff changeset
383 5.7 2005-09-23
f8963ddf7143 failed to return a value from parse_verify()
carl
parents: 98
diff changeset
384 Failed to return a value from parse_verify() which caused failures
f8963ddf7143 failed to return a value from parse_verify()
carl
parents: 98
diff changeset
385 to load the configuration.
f8963ddf7143 failed to return a value from parse_verify()
carl
parents: 98
diff changeset
386
98
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
387 5.6 2005-09-22
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
388 Tokenizer errors now go thru the syslog code, so they are visible
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
389 when generated during config file reloads during normal operation.
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
390
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
391 5.5 2005-09-21
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
392 Cleanup debug logging. Verify from/to pairs now remembers the last
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
393 from value sent to the remote server to prevent unnecessary rset
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
394 commands.
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
395
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
396 5.4 2005-09-18
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
397 Add verify statement to specify the smtp host to be used to verify
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
398 envelope from / recipient pairs.
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
399
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
400 Authenticated clients are now exempt from all white/black listing
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
401 in addition to the dnsbl lookups.
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
402
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
403 dcc_to should not look at substitute mail_host. That is only used
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
404 by dcc_from.
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
405
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
406 5.3 2005-08-07
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
407 Properly quit if the config file has syntax errors on startup. Send
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
408 mail to root if the config file needs to be reloaded since it was
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
409 modified, but contains syntax errors. In this case, we continue to
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
410 use the old configuration.
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
411
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
412 5.2 2005-08-02
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
413 Patch from Stephen Johnson <stephen.johnson@arkansas.gov> fixing the
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
414 lack of a default return value in CONTEXT::acceptable_content().
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
415
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
416 5.1 2005-07-20
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
417 Add multiple syslog debug levels. Detect and silently remove
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
418 duplicate DNSBL definitions. That allows us to accept mail to
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
419 recipients in multiple domains that use the same blacklist and yet
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
420 only check that blacklist once. This may happen when your config
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
421 file directly includes as child contexts the config files used on
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
422 your clients mail servers.
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
423
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
424 5.0 2005-07-16
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
425 Major changes to the syntax of the config file. Content filtering
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
426 is no longer a global mail server setting.
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
427
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
428 4.6 2005-04-02
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
429 Fix enum compilation error on Fedora Core 3.
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
430 Discovered by Nigel Horne <njh@bandsman.co.uk>
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
431
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
432 Remove bad html tag command from the default conf file. Spammers
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
433 seem to have abandoned this.
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
434
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
435 Add toolbar.msn.click-url.com in hosts-ignore.conf. These are all
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
436 commented, but you might want to uncomment them.
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
437
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
438 4.5 2005-01-22
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
439 Add uuencode decoding for old style attachments.
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
440
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
441 4.4 2005-01-18
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
442 Bug fix in forked process termination that left zombies.
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
443
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
444 4.3 2005-01-16
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
445 Only keep 20% of the resolver sockets in the ready pool.
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
446
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
447 4.2 2005-01-08
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
448 Use the separate resolver processes even if we don't have the
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
449 resolver interfaces and need gethostbyname.
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
450
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
451 4.1 2005-01-06
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
452 Use a local unix domain socket for the resolver process
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
453 communication, rather than a tcp/ip socket.
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
454
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
455 4.0 2005-01-03
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
456 Initialize the thread mutex objects early, before they are needed
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
457 by possible calls to my_syslog.
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
458
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
459 Fork off a separate resolver listener process, so we can do multiple
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
460 dns operations in parallel. For each simultaneous inbound email,
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
461 we have a separate sendmail process, a milter thread, and a dns
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
462 resolver process.
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
463
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
464 3.7 2004-10-28
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
465 Added an 'ignore' command to the conf file, used to ignore some
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
466 hosts that might end up on the SBL and otherwise trip the content
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
467 scanning filter. In particular, many recent Microsoft Word
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
468 documents contain the string www.5iantlavalamp.com which is
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
469 associated with their smart tags stuff. That is currently hosted at
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
470 216.168.224.70, which is shared with a site that ended up on the
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
471 SBL.
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
472
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
473 3.6 2004-09-08
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
474 Contributions from Dan Harkless <software@harkless.org>
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
475 Better documentation for disabling the content filtering.
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
476 Don't bother looking at the body text if we are not doing
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
477 content filtering.
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
478
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
479 3.5 2004-07-17
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
480 Extend the error message for content filtering when the NS record
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
481 points to an ip address on the SBL. Include the original host name
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
482 that referenced that NS name.
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
483
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
484
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
485 3.4 2004-07-15
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
486 Tokens with two consecutive periods cannot be ip addresses or host
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
487 names.
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
488
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
489 Updated dnsbl.spec file for building rpms from John Gunkel.
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
490
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
491
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
492 3.3 2004-07-09
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
493 Drop root priviledges properly, including the group id.
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
494
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
495
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
496 3.2 2004-07-09
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
497
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
498 Contributions from John Gunkel <jgunkel@palliser.ca>:
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
499 Add .spec file for building rpms, contributed by John Gunkel
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
500
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
501 Changes to file layout to conform to RedHat/LSB standards.
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
502
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
503 Add some html (actually xml) tags used by Apple mac print
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
504 subsystem that were tripping the html tag detector.
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
505
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
506 Help with changes required to allow dnsbl to drop root
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
507 priviledges. Move the socket to /var/run/dnsbl/dnsbl.sock
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
508
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
509 Change parser to handle &#xnnn; obfuscated urls with charaters
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
510 specified in hex.
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
511
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
512 Make bad_html tags more sensitive to binary tags, to reduce false
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
513 positives in .zip or .tar.gz file attachments.
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
514
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
515 Add sendmail queueid to the dnsbl syslog messages.
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
516
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
517 Fix one place where host names were not forced to lower case.
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
518 Discovered by Nigel Horne <njh@bandsman.co.uk>
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
519
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
520 Remove duplicate dns queries within the same smtp transaction from
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
521 the body content filtering. This helps if the mail server does not
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
522 have a nearby caching dns server.
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
523
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
524 Add host_soft_limit config keyword. Use only one of host_limit or
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
525 host_soft_limit, since the last one wins. The host_limit is a hard
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
526 upper limit on the number of host names in a message. The
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
527 host_soft_limit allows unlimited host names, but only checks a
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
528 random sample of them against the dnsbl.
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
529
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
530 The main thread has dropped root priviledges, but other threads
91c27c00048f tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents: 92
diff changeset
531 are still running as root. This needs to be fixed.