Mercurial > dnsbl
annotate ChangeLog @ 289:6497944a9bd9
update tld.conf, ignore domains with no ns records
author | Carl Byington <carl@five-ten-sg.com> |
---|---|
date | Fri, 21 Mar 2014 12:36:52 -0700 |
parents | 9bd5388bf469 |
children | 9f0d9fcb58dd |
rev | line source |
---|---|
286
9bd5388bf469
Fix possible segfault in mlfi_connect, hostaddr might be null
Carl Byington <carl@five-ten-sg.com>
parents:
284
diff
changeset
|
1 6.40 2014-02-05 |
9bd5388bf469
Fix possible segfault in mlfi_connect, hostaddr might be null
Carl Byington <carl@five-ten-sg.com>
parents:
284
diff
changeset
|
2 Fix possible segfault in mlfi_connect, hostaddr might be null. |
9bd5388bf469
Fix possible segfault in mlfi_connect, hostaddr might be null
Carl Byington <carl@five-ten-sg.com>
parents:
284
diff
changeset
|
3 |
284
896b9393d3f0
Fix segfault caused by freeing unallocated memory
Carl Byington <carl@five-ten-sg.com>
parents:
282
diff
changeset
|
4 6.39 2013-12-31 |
896b9393d3f0
Fix segfault caused by freeing unallocated memory
Carl Byington <carl@five-ten-sg.com>
parents:
282
diff
changeset
|
5 Fix segfault caused by freeing unallocated memory. |
896b9393d3f0
Fix segfault caused by freeing unallocated memory
Carl Byington <carl@five-ten-sg.com>
parents:
282
diff
changeset
|
6 |
282
e276180647ab
Activate check for unique ip connection limits
Carl Byington <carl@five-ten-sg.com>
parents:
279
diff
changeset
|
7 6.38 2013-12-24 |
e276180647ab
Activate check for unique ip connection limits
Carl Byington <carl@five-ten-sg.com>
parents:
279
diff
changeset
|
8 Activate check for unique ip connection limits. |
e276180647ab
Activate check for unique ip connection limits
Carl Byington <carl@five-ten-sg.com>
parents:
279
diff
changeset
|
9 |
279
3d894d09c198
add limits on unique ip addresses per hour per authenticated user
Carl Byington <carl@five-ten-sg.com>
parents:
278
diff
changeset
|
10 6.37 2013-12-17 |
278
368572c57013
add limits on unique ip addresses per hour per authenticated user
Carl Byington <carl@five-ten-sg.com>
parents:
272
diff
changeset
|
11 Add unique ip connection limits per authenticated id or email address. |
368572c57013
add limits on unique ip addresses per hour per authenticated user
Carl Byington <carl@five-ten-sg.com>
parents:
272
diff
changeset
|
12 |
272
a99b6c1f5f67
Code cleanup, increase minimum hostname length for uribl checking
Carl Byington <carl@five-ten-sg.com>
parents:
270
diff
changeset
|
13 6.36 2013-09-09 |
a99b6c1f5f67
Code cleanup, increase minimum hostname length for uribl checking
Carl Byington <carl@five-ten-sg.com>
parents:
270
diff
changeset
|
14 Code cleanup, increase minimum hostname length for uribl checking. |
a99b6c1f5f67
Code cleanup, increase minimum hostname length for uribl checking
Carl Byington <carl@five-ten-sg.com>
parents:
270
diff
changeset
|
15 |
270
f92f24950bd3
Use mozilla prefix list for tld checking, Enable surbl/uribl/dbl rhs lists
Carl Byington <carl@five-ten-sg.com>
parents:
268
diff
changeset
|
16 6.35 2013-09-09 |
f92f24950bd3
Use mozilla prefix list for tld checking, Enable surbl/uribl/dbl rhs lists
Carl Byington <carl@five-ten-sg.com>
parents:
268
diff
changeset
|
17 Use mozilla prefix list for tld checking. |
f92f24950bd3
Use mozilla prefix list for tld checking, Enable surbl/uribl/dbl rhs lists
Carl Byington <carl@five-ten-sg.com>
parents:
268
diff
changeset
|
18 Enable surbl/uribl/dbl rhs lists. |
f92f24950bd3
Use mozilla prefix list for tld checking, Enable surbl/uribl/dbl rhs lists
Carl Byington <carl@five-ten-sg.com>
parents:
268
diff
changeset
|
19 |
268
f941563c2a95
Add require_rdns checking
Carl Byington <carl@five-ten-sg.com>
parents:
264
diff
changeset
|
20 6.34 2013-05-22 |
f941563c2a95
Add require_rdns checking
Carl Byington <carl@five-ten-sg.com>
parents:
264
diff
changeset
|
21 Add require_rdns checking. |
f941563c2a95
Add require_rdns checking
Carl Byington <carl@five-ten-sg.com>
parents:
264
diff
changeset
|
22 |
264
56f55547b120
fix unauthenticated rate limit bug for empty mail from; move unauthenticated rate limit checks after spam filtering
Carl Byington <carl@five-ten-sg.com>
parents:
260
diff
changeset
|
23 6.33 2012-07-21 |
56f55547b120
fix unauthenticated rate limit bug for empty mail from; move unauthenticated rate limit checks after spam filtering
Carl Byington <carl@five-ten-sg.com>
parents:
260
diff
changeset
|
24 Fix unauthenticated rate limit bug for empty mail from. |
56f55547b120
fix unauthenticated rate limit bug for empty mail from; move unauthenticated rate limit checks after spam filtering
Carl Byington <carl@five-ten-sg.com>
parents:
260
diff
changeset
|
25 Move unauthenticated rate limit checks after spam filtering. |
56f55547b120
fix unauthenticated rate limit bug for empty mail from; move unauthenticated rate limit checks after spam filtering
Carl Byington <carl@five-ten-sg.com>
parents:
260
diff
changeset
|
26 |
260
7c05043a220e
add recipient rate limits by email from address or domain
Carl Byington <carl@five-ten-sg.com>
parents:
257
diff
changeset
|
27 6.32 2012-07-21 |
7c05043a220e
add recipient rate limits by email from address or domain
Carl Byington <carl@five-ten-sg.com>
parents:
257
diff
changeset
|
28 Allow rate limiting for unauthentication connections by mail |
7c05043a220e
add recipient rate limits by email from address or domain
Carl Byington <carl@five-ten-sg.com>
parents:
257
diff
changeset
|
29 from address or domain. |
7c05043a220e
add recipient rate limits by email from address or domain
Carl Byington <carl@five-ten-sg.com>
parents:
257
diff
changeset
|
30 |
257
d11b529ce9c5
Fix uribl lookups on client dns name, need to strip the ip address in brackets
Carl Byington <carl@five-ten-sg.com>
parents:
255
diff
changeset
|
31 6.31 2012-07-01 |
d11b529ce9c5
Fix uribl lookups on client dns name, need to strip the ip address in brackets
Carl Byington <carl@five-ten-sg.com>
parents:
255
diff
changeset
|
32 Fix uribl lookups on client dns name, need to strip the ip |
d11b529ce9c5
Fix uribl lookups on client dns name, need to strip the ip address in brackets
Carl Byington <carl@five-ten-sg.com>
parents:
255
diff
changeset
|
33 address in brackets. |
d11b529ce9c5
Fix uribl lookups on client dns name, need to strip the ip address in brackets
Carl Byington <carl@five-ten-sg.com>
parents:
255
diff
changeset
|
34 |
255
d6d5c50b9278
Allow dnswl_list and dnsbl_list to be empty, to override lists specified in the ancestor contexts. Add daily recipient limits as a multiple of the hourly limits.
Carl Byington <carl@five-ten-sg.com>
parents:
249
diff
changeset
|
35 6.30 2012-04-09 |
d6d5c50b9278
Allow dnswl_list and dnsbl_list to be empty, to override lists specified in the ancestor contexts. Add daily recipient limits as a multiple of the hourly limits.
Carl Byington <carl@five-ten-sg.com>
parents:
249
diff
changeset
|
36 Allow dnswl_list and dnsbl_list to be empty, to override lists |
d6d5c50b9278
Allow dnswl_list and dnsbl_list to be empty, to override lists specified in the ancestor contexts. Add daily recipient limits as a multiple of the hourly limits.
Carl Byington <carl@five-ten-sg.com>
parents:
249
diff
changeset
|
37 specified in the ancestor contexts. |
d6d5c50b9278
Allow dnswl_list and dnsbl_list to be empty, to override lists specified in the ancestor contexts. Add daily recipient limits as a multiple of the hourly limits.
Carl Byington <carl@five-ten-sg.com>
parents:
249
diff
changeset
|
38 Add daily recipient limits as a multiple of the hourly limits. |
d6d5c50b9278
Allow dnswl_list and dnsbl_list to be empty, to override lists specified in the ancestor contexts. Add daily recipient limits as a multiple of the hourly limits.
Carl Byington <carl@five-ten-sg.com>
parents:
249
diff
changeset
|
39 |
249 | 40 6.29 2012-04-08 |
41 Add dnswl support. | |
42 | |
246
8b0f16abee53
Add prvs decoding to envelope addresses
Carl Byington <carl@five-ten-sg.com>
parents:
244
diff
changeset
|
43 6.28 2011-09-30 |
8b0f16abee53
Add prvs decoding to envelope addresses
Carl Byington <carl@five-ten-sg.com>
parents:
244
diff
changeset
|
44 Add prvs decoding to envelope addresses. |
8b0f16abee53
Add prvs decoding to envelope addresses
Carl Byington <carl@five-ten-sg.com>
parents:
244
diff
changeset
|
45 |
244
ef97c7cd4a6e
const correctness fixes from new gcc, libresolv.a moved to glibc-static on newer distributions
Carl Byington <carl@five-ten-sg.com>
parents:
242
diff
changeset
|
46 6.27 2011-08-15 |
ef97c7cd4a6e
const correctness fixes from new gcc, libresolv.a moved to glibc-static on newer distributions
Carl Byington <carl@five-ten-sg.com>
parents:
242
diff
changeset
|
47 const correctness fixes from new gcc |
ef97c7cd4a6e
const correctness fixes from new gcc, libresolv.a moved to glibc-static on newer distributions
Carl Byington <carl@five-ten-sg.com>
parents:
242
diff
changeset
|
48 |
ef97c7cd4a6e
const correctness fixes from new gcc, libresolv.a moved to glibc-static on newer distributions
Carl Byington <carl@five-ten-sg.com>
parents:
242
diff
changeset
|
49 6.26 2010-11-19 |
242
d8ee4c97b9ab
64 bit fixes for libresolv.a
Carl Byington <carl@five-ten-sg.com>
parents:
236
diff
changeset
|
50 64 bit fixes for libresolv.a |
d8ee4c97b9ab
64 bit fixes for libresolv.a
Carl Byington <carl@five-ten-sg.com>
parents:
236
diff
changeset
|
51 |
236
c0d2e99c0a1d
Add surbl checks on the smtp helo value, client reverse dns name, and mail from domain name
Carl Byington <carl@five-ten-sg.com>
parents:
235
diff
changeset
|
52 6.25 2009-09-29 |
c0d2e99c0a1d
Add surbl checks on the smtp helo value, client reverse dns name, and mail from domain name
Carl Byington <carl@five-ten-sg.com>
parents:
235
diff
changeset
|
53 Add surbl checks on the smtp helo value, client reverse dns name, |
c0d2e99c0a1d
Add surbl checks on the smtp helo value, client reverse dns name, and mail from domain name
Carl Byington <carl@five-ten-sg.com>
parents:
235
diff
changeset
|
54 and mail from domain name. |
c0d2e99c0a1d
Add surbl checks on the smtp helo value, client reverse dns name, and mail from domain name
Carl Byington <carl@five-ten-sg.com>
parents:
235
diff
changeset
|
55 |
235
e6c66640f6f9
Add SRS decoding to envelope addresses
Carl Byington <carl@five-ten-sg.com>
parents:
233
diff
changeset
|
56 6.24 2009-06-09 |
e6c66640f6f9
Add SRS decoding to envelope addresses
Carl Byington <carl@five-ten-sg.com>
parents:
233
diff
changeset
|
57 Add SRS decoding to envelope addresses. |
e6c66640f6f9
Add SRS decoding to envelope addresses
Carl Byington <carl@five-ten-sg.com>
parents:
233
diff
changeset
|
58 |
233
5c3e9bf45bb5
Add whitelisting by regex expression filtering.
Carl Byington <carl@five-ten-sg.com>
parents:
231
diff
changeset
|
59 6.23 2009-05-25 |
5c3e9bf45bb5
Add whitelisting by regex expression filtering.
Carl Byington <carl@five-ten-sg.com>
parents:
231
diff
changeset
|
60 Add whitelisting by regex expression filtering. |
5c3e9bf45bb5
Add whitelisting by regex expression filtering.
Carl Byington <carl@five-ten-sg.com>
parents:
231
diff
changeset
|
61 Add queueid to whitelist extension log message. |
5c3e9bf45bb5
Add whitelisting by regex expression filtering.
Carl Byington <carl@five-ten-sg.com>
parents:
231
diff
changeset
|
62 |
230
ad38575e98ca
Prevent auto whitelisting due to outgoing multipart/report delivery notifications.
Carl Byington <carl@five-ten-sg.com>
parents:
227
diff
changeset
|
63 6.22 2009-05-08 |
ad38575e98ca
Prevent auto whitelisting due to outgoing multipart/report delivery notifications.
Carl Byington <carl@five-ten-sg.com>
parents:
227
diff
changeset
|
64 Prevent auto whitelisting due to outgoing multipart/report |
ad38575e98ca
Prevent auto whitelisting due to outgoing multipart/report delivery notifications.
Carl Byington <carl@five-ten-sg.com>
parents:
227
diff
changeset
|
65 delivery notifications. |
231
4d6bd04d93fa
Fix memory leak in suppressed auto whitelisting.
Carl Byington <carl@five-ten-sg.com>
parents:
230
diff
changeset
|
66 Fix memory leak in suppressed auto whitelisting. |
230
ad38575e98ca
Prevent auto whitelisting due to outgoing multipart/report delivery notifications.
Carl Byington <carl@five-ten-sg.com>
parents:
227
diff
changeset
|
67 |
227
3fee608becbc
Fixes to compile on old systems without memrchr or string::clear().
Carl Byington <carl@five-ten-sg.com>
parents:
216
diff
changeset
|
68 6.21 2009-01-03 |
3fee608becbc
Fixes to compile on old systems without memrchr or string::clear().
Carl Byington <carl@five-ten-sg.com>
parents:
216
diff
changeset
|
69 Fixes to compile on old systems without memrchr or string::clear(). |
3fee608becbc
Fixes to compile on old systems without memrchr or string::clear().
Carl Byington <carl@five-ten-sg.com>
parents:
216
diff
changeset
|
70 Fix bug in spamassassin interface trying to clear a string with |
3fee608becbc
Fixes to compile on old systems without memrchr or string::clear().
Carl Byington <carl@five-ten-sg.com>
parents:
216
diff
changeset
|
71 string::empty(). |
3fee608becbc
Fixes to compile on old systems without memrchr or string::clear().
Carl Byington <carl@five-ten-sg.com>
parents:
216
diff
changeset
|
72 |
216
784030ac71f1
Never whitelist self addressed mail. Changes for Fedora 10 and const correctness.
Carl Byington <carl@five-ten-sg.com>
parents:
214
diff
changeset
|
73 6.20 2008-12-27 |
784030ac71f1
Never whitelist self addressed mail. Changes for Fedora 10 and const correctness.
Carl Byington <carl@five-ten-sg.com>
parents:
214
diff
changeset
|
74 Never whitelist self addressed mail. Spammers are once again |
784030ac71f1
Never whitelist self addressed mail. Changes for Fedora 10 and const correctness.
Carl Byington <carl@five-ten-sg.com>
parents:
214
diff
changeset
|
75 sending mail from A to A trying to get around filters. Changes |
784030ac71f1
Never whitelist self addressed mail. Changes for Fedora 10 and const correctness.
Carl Byington <carl@five-ten-sg.com>
parents:
214
diff
changeset
|
76 for Fedora 10 and const correctness. |
784030ac71f1
Never whitelist self addressed mail. Changes for Fedora 10 and const correctness.
Carl Byington <carl@five-ten-sg.com>
parents:
214
diff
changeset
|
77 |
214
82886d4dd71f
Fixes to compile on Fedora 9 and for const correctness.
Carl Byington <carl@five-ten-sg.com>
parents:
211
diff
changeset
|
78 6.19 2008-06-10 |
82886d4dd71f
Fixes to compile on Fedora 9 and for const correctness.
Carl Byington <carl@five-ten-sg.com>
parents:
211
diff
changeset
|
79 Fixes to compile on Fedora 9 and for const correctness. |
82886d4dd71f
Fixes to compile on Fedora 9 and for const correctness.
Carl Byington <carl@five-ten-sg.com>
parents:
211
diff
changeset
|
80 |
211
4db1457cd11a
Extend auto-whitelisting when receiving mail even if the auto whitelist is specified in a parent context.
Carl Byington <carl@five-ten-sg.com>
parents:
203
diff
changeset
|
81 6.18 2008-03-22 |
4db1457cd11a
Extend auto-whitelisting when receiving mail even if the auto whitelist is specified in a parent context.
Carl Byington <carl@five-ten-sg.com>
parents:
203
diff
changeset
|
82 Extend auto-whitelisting when receiving mail even if the auto |
4db1457cd11a
Extend auto-whitelisting when receiving mail even if the auto whitelist is specified in a parent context.
Carl Byington <carl@five-ten-sg.com>
parents:
203
diff
changeset
|
83 whitelist is specified in a parent context. Fixes for Solaris from sm-archive. |
4db1457cd11a
Extend auto-whitelisting when receiving mail even if the auto whitelist is specified in a parent context.
Carl Byington <carl@five-ten-sg.com>
parents:
203
diff
changeset
|
84 |
203
92a5c866bdfa
Verify from/to pairs even if they might be explicitly whitelisted.
Carl Byington <carl@five-ten-sg.com>
parents:
201
diff
changeset
|
85 6.17 2008-03-04 |
92a5c866bdfa
Verify from/to pairs even if they might be explicitly whitelisted.
Carl Byington <carl@five-ten-sg.com>
parents:
201
diff
changeset
|
86 Verify from/to pairs even if they might be explicitly whitelisted. |
92a5c866bdfa
Verify from/to pairs even if they might be explicitly whitelisted.
Carl Byington <carl@five-ten-sg.com>
parents:
201
diff
changeset
|
87 Document DCC greylisting and bulk detection usage. Fix DCC bulk |
92a5c866bdfa
Verify from/to pairs even if they might be explicitly whitelisted.
Carl Byington <carl@five-ten-sg.com>
parents:
201
diff
changeset
|
88 thresholds of many. Update spec file for fedora packaging. |
92a5c866bdfa
Verify from/to pairs even if they might be explicitly whitelisted.
Carl Byington <carl@five-ten-sg.com>
parents:
201
diff
changeset
|
89 |
201
752d4315675c
add reference to mercurial repository in the documentation
Carl Byington <carl@five-ten-sg.com>
parents:
195
diff
changeset
|
90 6.16 2008-02-02 |
752d4315675c
add reference to mercurial repository in the documentation
Carl Byington <carl@five-ten-sg.com>
parents:
195
diff
changeset
|
91 Switch to Mercurial source control. |
98
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
92 |
195 | 93 6.15 2007-12-07 |
94 Fix null pointer dereference if macro _ not passed to this milter. | |
95 Default sendmail config passes that in the connect call. | |
96 | |
192
8f4a9a37d4d9
delay autowhitelisting to avoid out of office reply bots
carl
parents:
190
diff
changeset
|
97 6.14 2007-11-11 |
8f4a9a37d4d9
delay autowhitelisting to avoid out of office reply bots
carl
parents:
190
diff
changeset
|
98 Delay auto whitelisting until we see the headers, to prevent |
8f4a9a37d4d9
delay autowhitelisting to avoid out of office reply bots
carl
parents:
190
diff
changeset
|
99 auto whitelisting due to bulk out of office reply bots. |
8f4a9a37d4d9
delay autowhitelisting to avoid out of office reply bots
carl
parents:
190
diff
changeset
|
100 |
187
f0eda59e8afd
fix null pointer dereference from missing HELO command
carl
parents:
185
diff
changeset
|
101 6.13 2007-11-10 |
f0eda59e8afd
fix null pointer dereference from missing HELO command
carl
parents:
185
diff
changeset
|
102 HELO command is optional, and if missing caused a null pointer |
190
004b855c6c1f
fix null pointer dereference from missing HELO command
carl
parents:
189
diff
changeset
|
103 dereference. Use smfi_progress in libmilter if it is available. |
187
f0eda59e8afd
fix null pointer dereference from missing HELO command
carl
parents:
185
diff
changeset
|
104 |
185 | 105 6.12 2007-10-13 |
106 SMTP rejections take precedence over greylisting. | |
107 | |
184 | 108 6.11 2007-10-07 |
178 | 109 Add DCC filtering via dccifd. Drop to 60 seconds the time we will |
110 keep idle smtp verify sockets around. This needs to be about half | |
111 the value of confTO_COMMAND configured on the verify targets. | |
112 Fix potential race condition or buffer overflow caused by static | |
113 buffer referenced by multiple threads. | |
177 | 114 |
174 | 115 6.10 2007-09-23 |
116 Don't whitelist addresses with embedded blanks, or the empty | |
176
4ec928b24bab
allow manual whitelisting with stamp 1 to remove a whitelist entry
carl
parents:
174
diff
changeset
|
117 path. Allow manual removal of auto whitelist entries. |
174 | 118 |
173
83fe0be032c1
fix leak, update timestamps when receiving auto-whitelisted sender
carl
parents:
172
diff
changeset
|
119 6.09 2007-09-06 |
83fe0be032c1
fix leak, update timestamps when receiving auto-whitelisted sender
carl
parents:
172
diff
changeset
|
120 Fix memory leak in auto-whitelisting code. Update auto-whitelist |
83fe0be032c1
fix leak, update timestamps when receiving auto-whitelisted sender
carl
parents:
172
diff
changeset
|
121 timestamps when receiving mail from auto-whitelisted senders. |
83fe0be032c1
fix leak, update timestamps when receiving auto-whitelisted sender
carl
parents:
172
diff
changeset
|
122 |
172
d3189495ec68
don't do generic rdns filtering on whitelisted recipients
carl
parents:
169
diff
changeset
|
123 6.08 2007-08-30 |
d3189495ec68
don't do generic rdns filtering on whitelisted recipients
carl
parents:
169
diff
changeset
|
124 Don't do generic reverse dns filtering on authenticated connections. |
d3189495ec68
don't do generic rdns filtering on whitelisted recipients
carl
parents:
169
diff
changeset
|
125 |
168 | 126 6.07 2007-08-30 |
127 Add generic reverse dns filtering with regular expression. | |
169 | 128 Fix pre/post scripts in the rpm spec file. |
168 | 129 |
130 6.06 2007-08-27 | |
167
9b129ed78d7d
actually use spamassassin result, allow build without spam assassin, only call it if some recipient needs it.
carl
parents:
165
diff
changeset
|
131 Fix bug that effectively disabled spamassassin filtering. Improve |
9b129ed78d7d
actually use spamassassin result, allow build without spam assassin, only call it if some recipient needs it.
carl
parents:
165
diff
changeset
|
132 spamassassin filtering documentation. Generate warning if the |
9b129ed78d7d
actually use spamassassin result, allow build without spam assassin, only call it if some recipient needs it.
carl
parents:
165
diff
changeset
|
133 config file specifies spam assassin filtering, but spamc is not |
9b129ed78d7d
actually use spamassassin result, allow build without spam assassin, only call it if some recipient needs it.
carl
parents:
165
diff
changeset
|
134 found by autoconf. |
9b129ed78d7d
actually use spamassassin result, allow build without spam assassin, only call it if some recipient needs it.
carl
parents:
165
diff
changeset
|
135 |
168 | 136 6.05 2007-08-26 |
165 | 137 Fix unitialized variable in my spamassassin code. |
138 | |
168 | 139 6.04 2007-08-26 |
165 | 140 Add spamassassin integration via spamc, code from spamass-milter. |
141 | |
162 | 142 6.03 2007-07-14 |
143 Don't add auto whitelist entries for our own domains. | |
144 | |
160 | 145 6.02 2007-07-10 |
146 Allow manual updates to the auto whitelisting files, mainly for | |
147 scp or rsync synchronization between primary and backup mx | |
148 systems. | |
149 | |
152 | 150 6.01 2007-07-07 |
151 GPL3. Block mail to recipients that cannot reply. Start auto | |
152 whitelisting. | |
153 | |
154 5.30 2007-06-09 | |
155 Selinux fix - redirect stdout for useradd to make selinux happy. | |
156 | |
151 | 157 5.29 2007-03-27 |
150 | 158 Limit dns resolver to two retries five seconds apart. |
159 | |
149 | 160 5.28 2007-02-19 |
161 Change the conflict resolution algorithm to "second one wins" if we | |
162 have two contexts that both define env_to user@. Update ICANN tld | |
163 list. | |
164 | |
148
9330b8d6a56b
add documentation fixes, allow env_from target of inherit
carl
parents:
147
diff
changeset
|
165 5.27 2007-01-30 |
9330b8d6a56b
add documentation fixes, allow env_from target of inherit
carl
parents:
147
diff
changeset
|
166 Allow 'inherit' as an env_from target. Documentation cleanup |
9330b8d6a56b
add documentation fixes, allow env_from target of inherit
carl
parents:
147
diff
changeset
|
167 from G.W. Haywood. |
9330b8d6a56b
add documentation fixes, allow env_from target of inherit
carl
parents:
147
diff
changeset
|
168 |
147 | 169 5.26 2006-12-04 |
170 Fix bug in content filtering introduced in 5.23 that prevented | |
171 seeing any host names in the body. | |
172 | |
145 | 173 5.25 2006-10-15 |
174 DNSBL lists are inherited, so dump the effective list with the | |
175 -c switch. | |
176 | |
144
31ff00ea6bfb
allow parent/child to share a fully qualified env_to address
carl
parents:
143
diff
changeset
|
177 5.24 2006-10-15 |
31ff00ea6bfb
allow parent/child to share a fully qualified env_to address
carl
parents:
143
diff
changeset
|
178 Allow child and parent context to specify the same fully qualified |
31ff00ea6bfb
allow parent/child to share a fully qualified env_to address
carl
parents:
143
diff
changeset
|
179 env_to address. Only dump the rate limit for the default context |
31ff00ea6bfb
allow parent/child to share a fully qualified env_to address
carl
parents:
143
diff
changeset
|
180 with -c switch. |
31ff00ea6bfb
allow parent/child to share a fully qualified env_to address
carl
parents:
143
diff
changeset
|
181 |
143 | 182 5.23 2006-10-10 |
183 Require two periods in ip addresses. | |
184 | |
140 | 185 5.22 2006-09-27 |
186 Change syntax for default rate limit. Improve hourly reset of | |
187 limits. Warning for rate limits in non default contexts to allow | |
188 nesting of client configurations. | |
189 | |
136 | 190 5.21 2006-09-26 |
191 Add SMTP AUTH recipient rate limits, to help throttle infected | |
192 client machines and accounts with weak cracked passwords. | |
193 | |
134 | 194 5.20 2006-08-02 |
195 Fully qualify all dns lookups. Fix my_read() bug. Try to convert | |
196 names that might be ip addresses via inet_aton before doing dns | |
197 lookups. | |
198 | |
131
df355d117199
uribl lookups fully qualified; allow two component host names
carl
parents:
128
diff
changeset
|
199 5.19 2006-08-01 |
df355d117199
uribl lookups fully qualified; allow two component host names
carl
parents:
128
diff
changeset
|
200 Bug fix - add trailing dot to uribl dns lookups to make them fully |
df355d117199
uribl lookups fully qualified; allow two component host names
carl
parents:
128
diff
changeset
|
201 qualified. Check host names with only two components, since |
df355d117199
uribl lookups fully qualified; allow two component host names
carl
parents:
128
diff
changeset
|
202 spammers are now using bare http://domain.tld references. |
133
b8ce1b31237d
uribl lookups fully qualified; allow two component host names
carl
parents:
131
diff
changeset
|
203 Spec file now creates an rpm that properly creates the dnsbl user. |
131
df355d117199
uribl lookups fully qualified; allow two component host names
carl
parents:
128
diff
changeset
|
204 |
128 | 205 5.18 2006-04-27 |
127 | 206 Bug fix - newer sendmail versions don't guarantee envelope addresses |
207 enclosed in <> wrapper. | |
208 | |
209 Document backscatter prevention configuration for systems that are | |
210 used to mainly spam filter and then forward to mail to the internal | |
211 server. | |
212 | |
128 | 213 Never ask uribl blacklists about rfc1918 address space. |
214 | |
126 | 215 5.17 2006-03-25 |
127 | 216 Never ask dns blacklists about rfc1918 address space. |
126 | 217 |
125 | 218 5.16 2006-03-16 |
127 | 219 Bug fix - the smtp error message for uribl filtering needs to |
125 | 220 reference the host name, not the ip address. |
221 | |
123 | 222 5.15 2006-03-15 |
127 | 223 Bug fix - we failed to properly set the return code to indicate the |
123 | 224 reason when rejecting mail for content filtering. |
225 | |
122 | 226 5.14 2006-03-13 |
127 | 227 Fix a typo in the default config file and documentation for using |
122 | 228 multi.surbl.org |
229 | |
117 | 230 5.13 2006-03-12 |
231 patch from Jeff Evans <jeffe@tricab.com> | |
121 | 232 add SURBL/URIBL lookups, remove trailing dots from hostnames, |
233 allow ip address literals as hostnames. | |
234 add configuration for surbl/uribl list and reject message | |
235 | |
115 | 236 5.12 2006-01-08 |
237 Use larger resolver buffer to accomodate spammers with many name | |
238 servers. A current example is life-all.com which needs to retry in | |
239 tcp mode to fetch the 1444 byte response. | |
240 | |
116
0094678a16d0
update all systems from tarball, make chkconfig creates dnsbl user if needed
carl
parents:
115
diff
changeset
|
241 'make chkconfig' now creates the dnsbl user if it does not exist. |
0094678a16d0
update all systems from tarball, make chkconfig creates dnsbl user if needed
carl
parents:
115
diff
changeset
|
242 |
113 | 243 5.11 2005-12-20 |
244 switch to autoconf/automake/docbook | |
245 | |
102 | 246 5.10 2005-10-16 |
247 Fix a compile error on Fedora Core 3. | |
248 Discovered by Nigel Horne <njh@bandsman.co.uk> | |
249 | |
101 | 250 5.9 2005-09-26 |
251 Fix a bug with empty return paths passed to the verification code. | |
252 That resulted in 'MAIL FROM:<<>>' being sent to the verification | |
253 mail server. | |
254 | |
100
63e8633abc34
allow empty env_to at global context to remove all restrictions on child contexts
carl
parents:
99
diff
changeset
|
255 5.8 2005-09-25 |
63e8633abc34
allow empty env_to at global context to remove all restrictions on child contexts
carl
parents:
99
diff
changeset
|
256 Allow empty env_to at global context level to remove restrictions |
63e8633abc34
allow empty env_to at global context to remove all restrictions on child contexts
carl
parents:
99
diff
changeset
|
257 on env_to values in child contexts. |
63e8633abc34
allow empty env_to at global context to remove all restrictions on child contexts
carl
parents:
99
diff
changeset
|
258 |
99 | 259 5.7 2005-09-23 |
260 Failed to return a value from parse_verify() which caused failures | |
261 to load the configuration. | |
262 | |
98
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
263 5.6 2005-09-22 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
264 Tokenizer errors now go thru the syslog code, so they are visible |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
265 when generated during config file reloads during normal operation. |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
266 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
267 5.5 2005-09-21 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
268 Cleanup debug logging. Verify from/to pairs now remembers the last |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
269 from value sent to the remote server to prevent unnecessary rset |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
270 commands. |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
271 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
272 5.4 2005-09-18 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
273 Add verify statement to specify the smtp host to be used to verify |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
274 envelope from / recipient pairs. |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
275 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
276 Authenticated clients are now exempt from all white/black listing |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
277 in addition to the dnsbl lookups. |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
278 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
279 dcc_to should not look at substitute mail_host. That is only used |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
280 by dcc_from. |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
281 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
282 5.3 2005-08-07 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
283 Properly quit if the config file has syntax errors on startup. Send |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
284 mail to root if the config file needs to be reloaded since it was |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
285 modified, but contains syntax errors. In this case, we continue to |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
286 use the old configuration. |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
287 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
288 5.2 2005-08-02 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
289 Patch from Stephen Johnson <stephen.johnson@arkansas.gov> fixing the |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
290 lack of a default return value in CONTEXT::acceptable_content(). |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
291 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
292 5.1 2005-07-20 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
293 Add multiple syslog debug levels. Detect and silently remove |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
294 duplicate DNSBL definitions. That allows us to accept mail to |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
295 recipients in multiple domains that use the same blacklist and yet |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
296 only check that blacklist once. This may happen when your config |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
297 file directly includes as child contexts the config files used on |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
298 your clients mail servers. |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
299 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
300 5.0 2005-07-16 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
301 Major changes to the syntax of the config file. Content filtering |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
302 is no longer a global mail server setting. |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
303 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
304 4.6 2005-04-02 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
305 Fix enum compilation error on Fedora Core 3. |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
306 Discovered by Nigel Horne <njh@bandsman.co.uk> |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
307 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
308 Remove bad html tag command from the default conf file. Spammers |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
309 seem to have abandoned this. |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
310 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
311 Add toolbar.msn.click-url.com in hosts-ignore.conf. These are all |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
312 commented, but you might want to uncomment them. |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
313 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
314 4.5 2005-01-22 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
315 Add uuencode decoding for old style attachments. |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
316 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
317 4.4 2005-01-18 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
318 Bug fix in forked process termination that left zombies. |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
319 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
320 4.3 2005-01-16 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
321 Only keep 20% of the resolver sockets in the ready pool. |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
322 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
323 4.2 2005-01-08 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
324 Use the separate resolver processes even if we don't have the |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
325 resolver interfaces and need gethostbyname. |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
326 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
327 4.1 2005-01-06 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
328 Use a local unix domain socket for the resolver process |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
329 communication, rather than a tcp/ip socket. |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
330 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
331 4.0 2005-01-03 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
332 Initialize the thread mutex objects early, before they are needed |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
333 by possible calls to my_syslog. |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
334 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
335 Fork off a separate resolver listener process, so we can do multiple |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
336 dns operations in parallel. For each simultaneous inbound email, |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
337 we have a separate sendmail process, a milter thread, and a dns |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
338 resolver process. |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
339 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
340 3.7 2004-10-28 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
341 Added an 'ignore' command to the conf file, used to ignore some |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
342 hosts that might end up on the SBL and otherwise trip the content |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
343 scanning filter. In particular, many recent Microsoft Word |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
344 documents contain the string www.5iantlavalamp.com which is |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
345 associated with their smart tags stuff. That is currently hosted at |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
346 216.168.224.70, which is shared with a site that ended up on the |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
347 SBL. |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
348 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
349 3.6 2004-09-08 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
350 Contributions from Dan Harkless <software@harkless.org> |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
351 Better documentation for disabling the content filtering. |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
352 Don't bother looking at the body text if we are not doing |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
353 content filtering. |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
354 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
355 3.5 2004-07-17 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
356 Extend the error message for content filtering when the NS record |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
357 points to an ip address on the SBL. Include the original host name |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
358 that referenced that NS name. |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
359 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
360 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
361 3.4 2004-07-15 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
362 Tokens with two consecutive periods cannot be ip addresses or host |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
363 names. |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
364 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
365 Updated dnsbl.spec file for building rpms from John Gunkel. |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
366 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
367 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
368 3.3 2004-07-09 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
369 Drop root priviledges properly, including the group id. |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
370 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
371 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
372 3.2 2004-07-09 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
373 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
374 Contributions from John Gunkel <jgunkel@palliser.ca>: |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
375 Add .spec file for building rpms, contributed by John Gunkel |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
376 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
377 Changes to file layout to conform to RedHat/LSB standards. |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
378 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
379 Add some html (actually xml) tags used by Apple mac print |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
380 subsystem that were tripping the html tag detector. |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
381 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
382 Help with changes required to allow dnsbl to drop root |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
383 priviledges. Move the socket to /var/run/dnsbl/dnsbl.sock |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
384 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
385 Change parser to handle &#xnnn; obfuscated urls with charaters |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
386 specified in hex. |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
387 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
388 Make bad_html tags more sensitive to binary tags, to reduce false |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
389 positives in .zip or .tar.gz file attachments. |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
390 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
391 Add sendmail queueid to the dnsbl syslog messages. |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
392 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
393 Fix one place where host names were not forced to lower case. |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
394 Discovered by Nigel Horne <njh@bandsman.co.uk> |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
395 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
396 Remove duplicate dns queries within the same smtp transaction from |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
397 the body content filtering. This helps if the mail server does not |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
398 have a nearby caching dns server. |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
399 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
400 Add host_soft_limit config keyword. Use only one of host_limit or |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
401 host_soft_limit, since the last one wins. The host_limit is a hard |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
402 upper limit on the number of host names in a message. The |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
403 host_soft_limit allows unlimited host names, but only checks a |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
404 random sample of them against the dnsbl. |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
405 |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
406 The main thread has dropped root priviledges, but other threads |
91c27c00048f
tokenizer errors now go thru syslog to be visible during config file reloads in normal operation
carl
parents:
92
diff
changeset
|
407 are still running as root. This needs to be fixed. |